@ahhaohho/auth-middleware 2.3.7 → 2.3.10

package/.github/workflows/publish.yml

@@ -21,7 +21,7 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
-        run: npm ci
+        run: npm install
 
       - name: Build
         run: npm run build

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@ahhaohho/auth-middleware",
-  "version": "2.3.7",
+  "version": "2.3.10",
   "description": "Shared authentication and authorization middleware for ahhaohho microservices",
   "main": "src/index.js",
   "scripts": {
     "test": "echo \"Warning: no test specified\" && exit 0",
+    "build": "echo \"No build step required\"",
     "prepublishOnly": "echo \"Publishing package...\""
   },
   "repository": {

package/src/middleware/auth.js

@@ -177,7 +177,7 @@ async function authenticateHybrid(req, res, next) {
           phoneNumber: refreshUser.phoneNumber
         };
 
-        const accessExpiration = process.env.JWT_ACCESS_EXPIRATION || '24h';
+        const accessExpiration = process.env.JWT_ACCESS_EXPIRATION || '1h';
         const newAccessToken = await signToken(tokenData, { expiresIn: accessExpiration });
 
         console.log('[@ahhaohho/auth-middleware] ✅ New access token generated for userId:', refreshUser.userId);

package/src/utils/secretManager.js

@@ -60,7 +60,7 @@ class SecretManager {
     try {
       // 1. Redis 캐시 확인
       const redisClient = redisManager.getClient('keys');
-      const cachedKeys = await redisClient.get(`jwt-keys:${this.secretName}`);
+      const cachedKeys = await redisClient.get(`jwt-keys:${this.secretName}:${JWT_KEY_ENV || 'dev'}`);
 
       if (cachedKeys) {
         console.log('[@ahhaohho/auth-middleware] Using cached JWT keys from Redis');
@@ -108,7 +108,7 @@ class SecretManager {
 
       // 3. Redis에 캐싱 (5분 TTL)
       await redisClient.set(
-        `jwt-keys:${this.secretName}`,
+        `jwt-keys:${this.secretName}:${JWT_KEY_ENV || 'dev'}`,
         JSON.stringify(keys),
         'EX',
         300 // 5분
@@ -126,7 +126,7 @@ class SecretManager {
    */
   async invalidateCache() {
     const redisClient = redisManager.getClient('keys');
-    await redisClient.del(`jwt-keys:${this.secretName}`);
+    await redisClient.del(`jwt-keys:${this.secretName}:${JWT_KEY_ENV || 'dev'}`);
     console.log('[@ahhaohho/auth-middleware] JWT keys cache invalidated');
   }
 }