@ahhaohho/auth-middleware 2.3.2 → 2.3.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ahhaohho/auth-middleware",
-  "version": "2.3.2",
+  "version": "2.3.4",
   "description": "Shared authentication and authorization middleware for ahhaohho microservices",
   "main": "src/index.js",
   "scripts": {

package/src/utils/secretManager.js

@@ -1,6 +1,27 @@
 const { SecretsManagerClient, GetSecretValueCommand } = require('@aws-sdk/client-secrets-manager');
 const redisManager = require('../config/redis');
 
+// NODE_ENV 검증 (모듈 로드 시 1회)
+const JWT_KEY_ENV = process.env.NODE_ENV;
+if (!JWT_KEY_ENV || !['development', 'staging', 'production'].includes(JWT_KEY_ENV)) {
+  console.warn(
+    `[@ahhaohho/auth-middleware] NODE_ENV="${JWT_KEY_ENV || ''}" is not explicitly set. JWT keys will default to "dev".`
+  );
+}
+console.log(`[@ahhaohho/auth-middleware] JWT key environment: ${JWT_KEY_ENV || 'dev (default)'}`);
+
+/**
+ * NODE_ENV에 따라 시크릿에서 올바른 키를 선택
+ * Secret 구조: { dev: "...", staging: "...", prod: "..." }
+ * @param {object} secret - AWS Secrets Manager에서 가져온 시크릿 객체
+ * @returns {string|undefined}
+ */
+function resolveKeyByEnv(secret) {
+  if (JWT_KEY_ENV === 'production') return secret.prod;
+  if (JWT_KEY_ENV === 'staging') return secret.staging;
+  return secret.dev;
+}
+
 /**
  * AWS Secrets Manager에서 JWT 키 가져오기
  *
@@ -56,7 +77,7 @@ class SecretManager {
       }
 
       const secret = JSON.parse(response.SecretString);
-      const currentKey = secret.current || secret.jwt_secret_key || secret.dev;
+      const currentKey = secret.current || secret.jwt_secret_key || resolveKeyByEnv(secret);
 
       // previous 키 결정: secret 내 previous 필드 → AWSPREVIOUS 버전 순서
       let previousKey = secret.previous || null;
@@ -70,7 +91,7 @@ class SecretManager {
           const prevResponse = await this.client.send(prevCommand);
           if (prevResponse.SecretString) {
             const prevSecret = JSON.parse(prevResponse.SecretString);
-            const prevCandidate = prevSecret.current || prevSecret.jwt_secret_key || prevSecret.dev;
+            const prevCandidate = prevSecret.current || prevSecret.jwt_secret_key || resolveKeyByEnv(prevSecret);
             // 이전 키가 현재 키와 다를 때만 사용
             if (prevCandidate && prevCandidate !== currentKey) {
               previousKey = prevCandidate;