@agentuity/auth 0.0.109 → 0.0.111

package/src/clerk/server.ts

@@ -1,168 +0,0 @@
-/**
- * Clerk server-side authentication middleware for Hono.
- *
- * @module clerk/server
- */
-
-import { createMiddleware as createHonoMiddleware } from 'hono/factory';
-import { createClerkClient, verifyToken } from '@clerk/backend';
-import type { User } from '@clerk/backend';
-import type { AgentuityAuth, AgentuityAuthUser } from '../types';
-
-/**
- * Clerk JWT payload structure.
- */
-export interface ClerkJWTPayload {
-	/** Subject (user ID) */
-	sub: string;
-	/** Additional claims */
-	[key: string]: unknown;
-}
-
-/**
- * Environment type for Clerk middleware - provides typed context variables.
- */
-export type ClerkEnv = {
-	Variables: {
-		auth: AgentuityAuth<User, ClerkJWTPayload>;
-	};
-};
-
-/**
- * Options for Clerk middleware.
- */
-export interface ClerkMiddlewareOptions {
-	/** Clerk secret key (defaults to process.env.CLERK_SECRET_KEY) */
-	secretKey?: string;
-
-	/** Custom token extractor function */
-	getToken?: (authHeader: string) => string;
-
-	/** Clerk publishable key for token verification */
-	publishableKey?: string;
-}
-
-/**
- * Create Hono middleware for Clerk authentication.
- *
- * This middleware:
- * - Extracts and validates JWT tokens from Authorization header
- * - Returns 401 if token is missing or invalid
- * - Exposes authenticated user via c.var.auth
- *
- * @example
- * ```typescript
- * import { createMiddleware } from '@agentuity/auth/clerk';
- *
- * router.get('/api/profile', createMiddleware(), async (c) => {
- *   const user = await c.var.auth.getUser();
- *   return c.json({ email: user.email });
- * });
- * ```
- */
-export function createMiddleware(options: ClerkMiddlewareOptions = {}) {
-	const secretKey = options.secretKey || process.env.CLERK_SECRET_KEY;
-	const publishableKey =
-		options.publishableKey ||
-		process.env.AGENTUITY_PUBLIC_CLERK_PUBLISHABLE_KEY ||
-		process.env.CLERK_PUBLISHABLE_KEY;
-
-	if (!secretKey) {
-		console.error(
-			'[Clerk Auth] CLERK_SECRET_KEY is not set. Add it to your .env file or pass secretKey option to createMiddleware()'
-		);
-		throw new Error(
-			'Clerk secret key is required (set CLERK_SECRET_KEY or pass secretKey option)'
-		);
-	}
-
-	if (!publishableKey) {
-		console.warn(
-			'[Clerk Auth] AGENTUITY_PUBLIC_CLERK_PUBLISHABLE_KEY is not set. Token validation may fail. Add it to your .env file.'
-		);
-	}
-
-	// Create Clerk client instance
-	const clerkClient = createClerkClient({ secretKey });
-
-	return createHonoMiddleware<ClerkEnv>(async (c, next) => {
-		const authHeader = c.req.header('Authorization');
-
-		if (!authHeader) {
-			return c.json({ error: 'Unauthorized' }, 401);
-		}
-
-		try {
-			// Extract token from Bearer header
-			let token: string;
-			if (options.getToken) {
-				token = options.getToken(authHeader);
-			} else {
-				// Validate Authorization scheme is Bearer
-				if (!authHeader.match(/^Bearer\s+/i)) {
-					return c.json({ error: 'Unauthorized' }, 401);
-				}
-				token = authHeader.replace(/^Bearer\s+/i, '');
-			}
-
-			// Ensure token is not empty
-			if (!token || token.trim().length === 0) {
-				return c.json({ error: 'Unauthorized' }, 401);
-			}
-
-			// Verify token with Clerk (delegates validation to provider)
-			const payload = (await verifyToken(token, {
-				secretKey,
-			})) as ClerkJWTPayload;
-
-			// Validate payload has required subject claim
-			if (!payload.sub || typeof payload.sub !== 'string') {
-				throw new Error('Invalid token: missing or invalid subject claim');
-			}
-
-			// Memoize user fetch to avoid multiple API calls
-			let cachedUser: AgentuityAuthUser<User> | null = null;
-
-			// Create auth object with Clerk user and payload types
-			const auth: AgentuityAuth<User, ClerkJWTPayload> = {
-				async getUser() {
-					if (cachedUser) {
-						return cachedUser;
-					}
-					const user = await clerkClient.users.getUser(payload.sub);
-					cachedUser = mapClerkUserToAgentuityUser(user);
-					return cachedUser;
-				},
-
-				async getToken() {
-					return token;
-				},
-
-				raw: payload,
-			};
-
-			c.set('auth', auth);
-			await next();
-		} catch (error) {
-			const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-			const errorCode =
-				error && typeof error === 'object' && 'code' in error && typeof error.code === 'string'
-					? error.code
-					: 'CLERK_AUTH_ERROR';
-			console.error(`[Clerk Auth] Authentication failed: ${errorCode} - ${errorMessage}`);
-			return c.json({ error: 'Unauthorized' }, 401);
-		}
-	});
-}
-
-/**
- * Map Clerk User to AgentuityAuthUser.
- */
-function mapClerkUserToAgentuityUser(clerkUser: User): AgentuityAuthUser<User> {
-	return {
-		id: clerkUser.id,
-		name: `${clerkUser.firstName || ''} ${clerkUser.lastName || ''}`.trim() || undefined,
-		email: clerkUser.emailAddresses[0]?.emailAddress,
-		raw: clerkUser,
-	};
-}

package/test/clerk-client.test.tsx

@@ -1,21 +0,0 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
-import { describe, test, expect } from 'bun:test';
-import { AgentuityClerk } from '../src/clerk/client';
-
-describe('AgentuityClerk', () => {
-	test('exports AgentuityClerk component', () => {
-		expect(AgentuityClerk).toBeDefined();
-		expect(typeof AgentuityClerk).toBe('function');
-	});
-
-	test('component props interface is correct', () => {
-		// Type test - will fail at compile time if interface changes
-		const validProps = {
-			children: null,
-			useAuth: (() => ({ getToken: async () => null, isLoaded: true })) as any,
-			refreshInterval: 60000,
-		};
-
-		expect(validProps).toBeDefined();
-	});
-});

package/test/clerk-server.test.ts

@@ -1,51 +0,0 @@
-import { describe, test, expect, beforeEach } from 'bun:test';
-import { Hono } from 'hono';
-import { createMiddleware } from '../src/clerk/server';
-
-describe('Clerk server middleware', () => {
-	beforeEach(() => {
-		process.env.CLERK_SECRET_KEY = 'sk_test_secret';
-	});
-
-	test('returns 401 when Authorization header is missing', async () => {
-		const app = new Hono();
-		app.use('/protected', createMiddleware());
-		app.get('/protected', (c) => c.json({ success: true }));
-
-		const res = await app.request('/protected', {
-			method: 'GET',
-		});
-
-		expect(res.status).toBe(401);
-		const body = await res.json();
-		expect(body).toEqual({ error: 'Unauthorized' });
-	});
-
-	test('throws error when CLERK_SECRET_KEY is missing', () => {
-		delete process.env.CLERK_SECRET_KEY;
-
-		expect(() => createMiddleware()).toThrow('Clerk secret key is required');
-	});
-
-	test('creates middleware function', () => {
-		const middleware = createMiddleware();
-		expect(typeof middleware).toBe('function');
-	});
-
-	test('middleware rejects requests with invalid tokens', async () => {
-		const app = new Hono();
-		app.use('/protected', createMiddleware());
-		app.get('/protected', (c) => c.json({ success: true }));
-
-		const res = await app.request('/protected', {
-			method: 'GET',
-			headers: {
-				Authorization: 'Bearer invalid_token',
-			},
-		});
-
-		expect(res.status).toBe(401);
-		const body = await res.json();
-		expect(body).toEqual({ error: 'Unauthorized' });
-	});
-});