@autofleet/zehut 1.5.11 → 1.5.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/lib/secret-getter.js
CHANGED
|
@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
6
6
|
exports.getTokenSecret = exports.getRefreshTokenSecret = void 0;
|
|
7
7
|
const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
|
|
8
8
|
const moment_1 = __importDefault(require("moment"));
|
|
9
|
-
const { DEPRECATED_JWT_SECRET,
|
|
9
|
+
const { DEPRECATED_JWT_SECRET, JWT_NEW_SECRET, DEPRECATED_REFRESH_JWT_SECRET, REFRESH_JWT_SECRET, DEPRECATION_UNIX_TIMESTAMP, } = process.env;
|
|
10
10
|
const getRelevantSecret = (token, deprecatedSecret, newSecret) => {
|
|
11
11
|
const deprecationTime = moment_1.default(parseInt(DEPRECATION_UNIX_TIMESTAMP, 10) * 1000);
|
|
12
12
|
try {
|
|
@@ -25,4 +25,4 @@ const getRelevantSecret = (token, deprecatedSecret, newSecret) => {
|
|
|
25
25
|
}
|
|
26
26
|
};
|
|
27
27
|
exports.getRefreshTokenSecret = (token) => getRelevantSecret(token, DEPRECATED_REFRESH_JWT_SECRET, REFRESH_JWT_SECRET);
|
|
28
|
-
exports.getTokenSecret = (token) => getRelevantSecret(token, DEPRECATED_JWT_SECRET,
|
|
28
|
+
exports.getTokenSecret = (token) => getRelevantSecret(token, DEPRECATED_JWT_SECRET, JWT_NEW_SECRET);
|
|
@@ -38,7 +38,7 @@ process.env.NODE_ENV = 'node-common-test';
|
|
|
38
38
|
describe('secret getter tests', () => {
|
|
39
39
|
const testSecrets = {
|
|
40
40
|
DEPRECATED_JWT_SECRET: 'test_deprecated_secret',
|
|
41
|
-
|
|
41
|
+
JWT_NEW_SECRET: 'test_secret',
|
|
42
42
|
DEPRECATED_REFRESH_JWT_SECRET: 'test_deprecated_refresh_secret',
|
|
43
43
|
REFRESH_JWT_SECRET: 'test_refresh_secret',
|
|
44
44
|
};
|
|
@@ -51,9 +51,9 @@ describe('secret getter tests', () => {
|
|
|
51
51
|
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
52
52
|
const token = jsonwebtoken_1.default.sign({
|
|
53
53
|
exp: moment_1.default().unix() + (60 * 60 * 24 * 365),
|
|
54
|
-
}, testSecrets.
|
|
54
|
+
}, testSecrets.JWT_NEW_SECRET);
|
|
55
55
|
const result = getTokenSecret(token);
|
|
56
|
-
expect(result).toBe(testSecrets.
|
|
56
|
+
expect(result).toBe(testSecrets.JWT_NEW_SECRET);
|
|
57
57
|
}));
|
|
58
58
|
it('test get old refresh token secret when before deprecation timestamp', () => __awaiter(void 0, void 0, void 0, function* () {
|
|
59
59
|
process.env.DEPRECATION_UNIX_TIMESTAMP = moment_1.default().add(1, 'days').unix().toString();
|
|
@@ -78,13 +78,13 @@ describe('secret getter tests', () => {
|
|
|
78
78
|
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
79
79
|
const token = 'shit';
|
|
80
80
|
const result = getTokenSecret(token);
|
|
81
|
-
expect(result).toBe(testSecrets.
|
|
81
|
+
expect(result).toBe(testSecrets.JWT_NEW_SECRET);
|
|
82
82
|
}));
|
|
83
83
|
it('test malformed token returns new secret even before deprecation time', () => __awaiter(void 0, void 0, void 0, function* () {
|
|
84
84
|
process.env.DEPRECATION_UNIX_TIMESTAMP = moment_1.default().add(10, 'day').unix().toString();
|
|
85
85
|
const { getTokenSecret } = yield Promise.resolve().then(() => __importStar(require('./secret-getter')));
|
|
86
86
|
const token = 'shit';
|
|
87
87
|
const result = getTokenSecret(token);
|
|
88
|
-
expect(result).toBe(testSecrets.
|
|
88
|
+
expect(result).toBe(testSecrets.JWT_NEW_SECRET);
|
|
89
89
|
}));
|
|
90
90
|
});
|