@ahhaohho/auth-middleware 2.3.3 → 2.3.5

package/.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish to npm
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Publish
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ahhaohho/auth-middleware",
-  "version": "2.3.3",
+  "version": "2.3.5",
   "description": "Shared authentication and authorization middleware for ahhaohho microservices",
   "main": "src/index.js",
   "scripts": {

package/src/utils/secretManager.js

@@ -1,6 +1,15 @@
 const { SecretsManagerClient, GetSecretValueCommand } = require('@aws-sdk/client-secrets-manager');
 const redisManager = require('../config/redis');
 
+// NODE_ENV 검증 (모듈 로드 시 1회)
+const JWT_KEY_ENV = process.env.NODE_ENV;
+if (!JWT_KEY_ENV || !['development', 'staging', 'production'].includes(JWT_KEY_ENV)) {
+  console.warn(
+    `[@ahhaohho/auth-middleware] NODE_ENV="${JWT_KEY_ENV || ''}" is not explicitly set. JWT keys will default to "dev".`
+  );
+}
+console.log(`[@ahhaohho/auth-middleware] JWT key environment: ${JWT_KEY_ENV || 'dev (default)'}`);
+
 /**
  * NODE_ENV에 따라 시크릿에서 올바른 키를 선택
  * Secret 구조: { dev: "...", staging: "...", prod: "..." }
@@ -8,9 +17,8 @@ const redisManager = require('../config/redis');
  * @returns {string|undefined}
  */
 function resolveKeyByEnv(secret) {
-  const env = process.env.NODE_ENV;
-  if (env === 'production') return secret.prod;
-  if (env === 'staging') return secret.staging;
+  if (JWT_KEY_ENV === 'production') return secret.prod;
+  if (JWT_KEY_ENV === 'staging') return secret.staging;
   return secret.dev;
 }
 
@@ -69,31 +77,28 @@ class SecretManager {
       }
 
       const secret = JSON.parse(response.SecretString);
-      const currentKey = secret.current || secret.jwt_secret_key || resolveKeyByEnv(secret);
-
-      // previous 키 결정: secret 내 previous 필드 → AWSPREVIOUS 버전 순서
-      let previousKey = secret.previous || null;
-
-      if (!previousKey) {
-        try {
-          const prevCommand = new GetSecretValueCommand({
-            SecretId: this.secretName,
-            VersionStage: 'AWSPREVIOUS'
-          });
-          const prevResponse = await this.client.send(prevCommand);
-          if (prevResponse.SecretString) {
-            const prevSecret = JSON.parse(prevResponse.SecretString);
-            const prevCandidate = prevSecret.current || prevSecret.jwt_secret_key || resolveKeyByEnv(prevSecret);
-            // 이전 키가 현재 키와 다를 때만 사용
-            if (prevCandidate && prevCandidate !== currentKey) {
-              previousKey = prevCandidate;
-              console.log('[@ahhaohho/auth-middleware] Using AWSPREVIOUS version as fallback key');
-            }
+      const currentKey = resolveKeyByEnv(secret);
+
+      // 이전 키: AWSPREVIOUS에서 환경별 키 가져오기
+      let previousKey = null;
+      try {
+        const prevCommand = new GetSecretValueCommand({
+          SecretId: this.secretName,
+          VersionStage: 'AWSPREVIOUS'
+        });
+        const prevResponse = await this.client.send(prevCommand);
+        if (prevResponse.SecretString) {
+          const prevSecret = JSON.parse(prevResponse.SecretString);
+          const prevCandidate = resolveKeyByEnv(prevSecret);
+          // 이전 키가 현재 키와 다를 때만 사용
+          if (prevCandidate && prevCandidate !== currentKey) {
+            previousKey = prevCandidate;
+            console.log('[@ahhaohho/auth-middleware] Using AWSPREVIOUS version as fallback key');
           }
-        } catch (prevError) {
-          // AWSPREVIOUS가 없을 수 있음 (첫 시크릿이거나 로테이션 미사용)
-          console.log('[@ahhaohho/auth-middleware] No AWSPREVIOUS version available');
         }
+      } catch (prevError) {
+        // AWSPREVIOUS가 없을 수 있음 (첫 시크릿이거나 로테이션 미사용)
+        console.log('[@ahhaohho/auth-middleware] No AWSPREVIOUS version available');
       }
 
       const keys = {