@ahhaohho/auth-middleware 1.0.6 → 1.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +1 -1
- package/src/strategies/jwt.strategy.js +20 -1
package/README.md
CHANGED
package/package.json
CHANGED
|
@@ -65,9 +65,23 @@ function createJwtStrategy() {
|
|
|
65
65
|
'[@ahhaohho/auth-middleware] ⚠️ Token verified with previous key (fallback)'
|
|
66
66
|
);
|
|
67
67
|
} catch (previousKeyError) {
|
|
68
|
+
// 🚨 임시: invalid signature도 허용 (다음 앱 배포 전까지)
|
|
69
|
+
if (currentKeyError.message.includes('invalid signature') || currentKeyError.message.includes('jwt malformed')) {
|
|
70
|
+
console.warn('[@ahhaohho/auth-middleware] ⚠️ [TEMPORARY] Allowing invalid signature');
|
|
71
|
+
request._jwtDecoded = { userId: 'unknown', userRole: 'guest' };
|
|
72
|
+
request._jwtKeyUsed = 'bypassed';
|
|
73
|
+
return done(null, keys.current);
|
|
74
|
+
}
|
|
68
75
|
return done(currentKeyError, false);
|
|
69
76
|
}
|
|
70
77
|
} else {
|
|
78
|
+
// 🚨 임시: invalid signature도 허용 (다음 앱 배포 전까지)
|
|
79
|
+
if (currentKeyError.message.includes('invalid signature') || currentKeyError.message.includes('jwt malformed')) {
|
|
80
|
+
console.warn('[@ahhaohho/auth-middleware] ⚠️ [TEMPORARY] Allowing invalid signature');
|
|
81
|
+
request._jwtDecoded = { userId: 'unknown', userRole: 'guest' };
|
|
82
|
+
request._jwtKeyUsed = 'bypassed';
|
|
83
|
+
return done(null, keys.current);
|
|
84
|
+
}
|
|
71
85
|
return done(currentKeyError, false);
|
|
72
86
|
}
|
|
73
87
|
}
|
|
@@ -108,10 +122,15 @@ function createJwtStrategy() {
|
|
|
108
122
|
);
|
|
109
123
|
|
|
110
124
|
// req.user에 주입할 사용자 정보 반환
|
|
125
|
+
// FLC 토큰 지원: email, name, loginMethod 추가
|
|
111
126
|
const user = {
|
|
112
127
|
userId: decoded.userId,
|
|
113
128
|
userRole: decoded.userRole,
|
|
114
|
-
phoneNumber: decoded.phoneNumber
|
|
129
|
+
phoneNumber: decoded.phoneNumber,
|
|
130
|
+
email: decoded.email,
|
|
131
|
+
name: decoded.name,
|
|
132
|
+
loginMethod: decoded.loginMethod,
|
|
133
|
+
imwebId: decoded.imwebId
|
|
115
134
|
};
|
|
116
135
|
|
|
117
136
|
return done(null, user);
|