@bigso/auth-sdk 0.5.6 → 0.5.7

package/dist/browser/index.js

@@ -1,6 +1,6 @@
 import {
   verifySignedPayload
-} from "../chunk-PB3GVAEJ.js";
+} from "../chunk-BXRGCGYR.js";
 
 // src/utils/crypto.ts
 async function sha256Base64Url(input) {

package/dist/chunk-BXRGCGYR.js

@@ -0,0 +1,34 @@
+// src/utils/jws.ts
+import { createRemoteJWKSet, jwtVerify } from "jose";
+async function verifySignedPayload(token, jwksUrl, expectedAudience) {
+  const JWKS = createRemoteJWKSet(new URL(jwksUrl));
+  const { payload } = await jwtVerify(token, JWKS, {
+    audience: expectedAudience
+  });
+  return payload;
+}
+async function verifyAccessToken(accessToken, jwksUrl) {
+  const JWKS = createRemoteJWKSet(new URL(jwksUrl));
+  const { payload } = await jwtVerify(accessToken, JWKS);
+  if (!payload.sub || !payload.jti) {
+    throw new Error("Invalid token structure: missing sub or jti");
+  }
+  return {
+    sub: payload.sub,
+    jti: payload.jti,
+    iss: payload.iss,
+    aud: payload.aud || "",
+    exp: payload.exp,
+    iat: payload.iat,
+    tenants: payload.tenants || [],
+    tenantId: payload.tenantId || "",
+    systemRole: payload.systemRole || "user",
+    scope: payload.scope,
+    deviceFingerprint: payload.deviceFingerprint
+  };
+}
+
+export {
+  verifySignedPayload,
+  verifyAccessToken
+};

package/dist/node/index.cjs

@@ -47,6 +47,7 @@ async function verifyAccessToken(accessToken, jwksUrl) {
     exp: payload.exp,
     iat: payload.iat,
     tenants: payload.tenants || [],
+    tenantId: payload.tenantId || "",
     systemRole: payload.systemRole || "user",
     scope: payload.scope,
     deviceFingerprint: payload.deviceFingerprint

package/dist/node/index.js

@@ -1,7 +1,7 @@
 import {
   verifyAccessToken,
   verifySignedPayload
-} from "../chunk-PB3GVAEJ.js";
+} from "../chunk-BXRGCGYR.js";
 
 // src/node/SsoClient.ts
 var BigsoSsoClient = class {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bigso/auth-sdk",
-    "version": "0.5.6",
+    "version": "0.5.7",
     "description": "SDK de autenticación para SSO v2 - JWT Bearer + PKCE",
     "publishConfig": {
         "registry": "https://registry.npmjs.org/",