@buntal/http 0.0.6 → 0.0.8

package/app/cookie.ts

@@ -28,10 +28,13 @@ export const Cookie = {
     const cookies = req.headers.get('cookie')
     if (!cookies) return {}
     const cookieArray = cookies.split('; ')
-    return cookieArray.reduce((acc, cookie) => {
-      const [key, value] = cookie.split('=') as [string, string?]
-      return { ...acc, [key]: decodeURIComponent(value || '') }
-    }, {})
+    return cookieArray.reduce(
+      (acc, cookie) => {
+        const [key, value] = cookie.split('=') as [string, string?]
+        return { ...acc, [key]: decodeURIComponent(value || '') }
+      },
+      {} as Record<string, string>
+    )
   },
   set: (
     res: Res,

package/index.ts

@@ -184,3 +184,4 @@ export class Http {
 export * from './app'
 export * from './router'
 export * from './handler'
+export * from './middlewares'

package/middlewares/auth/index.ts

@@ -0,0 +1,95 @@
+import { Cookie, Req, Res } from '../../app'
+import type { AtomicHandler } from '../../handler'
+import { jwt } from './jwt'
+
+type Strategy = 'cookie' | 'header' | 'both'
+
+type Options<T = unknown> = {
+  secret: string
+  strategy?: Strategy
+  cookie?: {
+    key: string
+  }
+  header?: {
+    key: string
+  }
+  onVerified?: (
+    req: Req<Record<string, string>, T>,
+    res: Res,
+    decoded: T
+  ) => void | Response | Promise<void | Response>
+}
+
+const getToken = (req: Req, strategy: Strategy, opts: Partial<Options>) => {
+  const cookieValue = Cookie.get(req, opts?.cookie?.key || 'access_token')
+  const headerValue = req.headers
+    .get(opts?.header?.key || 'Authorization')
+    ?.replace(/^Bearer\ /, '')
+  switch (strategy) {
+    case 'cookie':
+      return cookieValue
+    case 'header':
+      return headerValue
+    case 'both':
+      return cookieValue || headerValue
+    default:
+      return null
+  }
+}
+
+export const auth = <T = unknown>(
+  {
+    secret,
+    strategy = 'header',
+    cookie = {
+      key: 'access_token'
+    },
+    header = {
+      key: 'Authorization'
+    },
+    onVerified
+  }: Options<T> = {
+    secret: process.env.JWT_SECRET || process.env.SECRET || ''
+  }
+): AtomicHandler<Record<string, string>, T> => {
+  return async (req, res) => {
+    let token: string | null | undefined
+
+    if (Array.isArray(strategy)) {
+      for (const strat of strategy) {
+        token = getToken(req, strat, {
+          cookie,
+          header
+        })
+        if (token) break
+      }
+    } else {
+      token = getToken(req, strategy, {
+        cookie,
+        header
+      })
+    }
+
+    if (!token) {
+      return res.status(401).json({
+        error: 'Unauthorized'
+      })
+    }
+
+    let decoded: T | null = null
+    try {
+      decoded = await jwt(secret).verify<T>(token)
+    } catch (error) {
+      return res.status(401).json({
+        error: 'Unauthorized'
+      })
+    }
+
+    const resp = await onVerified?.(req, res, decoded)
+    if (resp instanceof Response) {
+      return resp
+    }
+  }
+}
+
+export * from './jwt'

package/middlewares/auth/jwt.ts

@@ -0,0 +1,21 @@
+import { jwtVerify, SignJWT } from 'jose'
+
+export const jwt = (secret: string) => ({
+  sign: async (
+    payload: Record<string, unknown>,
+    options: { expiresIn?: string | number | Date } = {}
+  ) => {
+    return await new SignJWT(payload)
+      .setExpirationTime(options.expiresIn || '2h')
+      .setIssuedAt()
+      .setProtectedHeader({ alg: 'HS256' })
+      .sign(new TextEncoder().encode(secret))
+  },
+  verify: async <T = unknown>(token: string) => {
+    const { payload } = await jwtVerify<T>(
+      token,
+      new TextEncoder().encode(secret)
+    )
+    return payload
+  }
+})

package/middlewares/cors.ts

@@ -0,0 +1,39 @@
+import type { Req, Res } from '../app'
+import type { AtomicHandler } from '../handler'
+
+type Options = {
+  origin?: string | string[]
+  methods?: string | string[]
+  allowedHeaders?: string | string[]
+  exposedHeaders?: string | string[]
+  maxAge?: number
+  credentials?: boolean
+}
+
+export const cors = ({
+  origin = '*',
+  methods = 'GET, HEAD, PUT, PATCH, POST, DELETE',
+  allowedHeaders = 'Content-Type, Authorization, X-Requested-With',
+  exposedHeaders = '',
+  maxAge = 600,
+  credentials = true
+}: Options = {}): AtomicHandler => {
+  return async (_: Req, res: Res) => {
+    res.headers({
+      'Access-Control-Allow-Origin': Array.isArray(origin)
+        ? origin.join(', ')
+        : origin,
+      'Access-Control-Allow-Methods': Array.isArray(methods)
+        ? methods.join(', ')
+        : methods,
+      'Access-Control-Allow-Headers': Array.isArray(allowedHeaders)
+        ? allowedHeaders.join(', ')
+        : allowedHeaders,
+      'Access-Control-Expose-Headers': Array.isArray(exposedHeaders)
+        ? exposedHeaders.join(', ')
+        : exposedHeaders,
+      'Access-Control-Max-Age': String(maxAge),
+      'Access-Control-Allow-Credentials': String(credentials)
+    })
+  }
+}

package/middlewares/index.ts

@@ -0,0 +1,3 @@
+export * from './auth'
+export * from './cors'
+export * from './logger'

package/middlewares/logger.ts

@@ -0,0 +1,12 @@
+import type { Req } from '../app'
+import type { AtomicHandler } from '../handler'
+
+export const logger = (): AtomicHandler => {
+  return async (req: Req) => {
+    const now = new Date()
+    const print = (num: number) => num.toString().padStart(2, '0')
+    console.log(
+      `[${print(now.getHours())}:${print(now.getMinutes())}:${print(now.getSeconds())}] > ${req.method} ${new URL(req.url).pathname}`
+    )
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@buntal/http",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "module": "index.ts",
   "type": "module",
   "devDependencies": {
@@ -15,5 +15,8 @@
   },
   "description": "HTTP client framework for Bun",
   "homepage": "https://buntaljs.org",
-  "license": "MIT"
+  "license": "MIT",
+  "dependencies": {
+    "jose": "^6.0.11"
+  }
 }

package/router/index.ts

@@ -1,5 +1,5 @@
 export const buildRouter = (dir: string) =>
   new Bun.FileSystemRouter({
     style: 'nextjs',
-    dir: dir
+    dir,
   })