@canmingir/link-express 1.7.10 → 1.7.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canmingir/link-express",
-  "version": "1.7.10",
+  "version": "1.7.12",
   "description": "",
   "main": "index.ts",
   "types": "index.ts",

package/src/lib/cognitoVerifier.ts

@@ -1,11 +1,29 @@
 import { CognitoJwtVerifier } from "aws-jwt-verify";
 
-export const cognitoAccessTokenVerifier = CognitoJwtVerifier.create({
-  userPoolId: process.env.COGNITO_USER_POOL_ID!,
-  tokenUse: "access",
-  clientId: process.env.COGNITO_CLIENT_ID!,
-});
+const userPoolId = process.env.COGNITO_USER_POOL_ID;
+const clientId = process.env.COGNITO_CLIENT_ID;
+
+if (!userPoolId || !clientId) {
+  console.warn(
+    "Cognito is not fully configured. Missing COGNITO_USER_POOL_ID or COGNITO_CLIENT_ID.",
+  );
+}
+
+const cognitoAccessTokenVerifier =
+  userPoolId && clientId
+    ? CognitoJwtVerifier.create({
+        userPoolId,
+        tokenUse: "access",
+        clientId,
+      })
+    : null;
 
 export async function verifyCognitoAccessToken(token: string) {
+  if (!cognitoAccessTokenVerifier) {
+    throw new Error(
+      "Cognito is not configured. Set COGNITO_USER_POOL_ID and COGNITO_CLIENT_ID.",
+    );
+  }
+
   return cognitoAccessTokenVerifier.verify(token);
 }

package/src/routes/oauth.ts

@@ -16,6 +16,26 @@ if (!project) {
   throw new Error("Project configuration is required");
 }
 
+const providers = project?.oauth?.providers || {};
+
+const identityProviders: Record<string, typeof providers[string]> = {};
+
+for (const [key, value] of Object.entries(providers)) {
+  const identityProviderKey = key.toLowerCase();
+
+  if (identityProviders[identityProviderKey]) {
+    throw new Error(
+      `Duplicate OAuth provider configuration detected for key "${key}". Provider keys must be unique in a case-insensitive manner.`,
+    );
+  }
+
+  identityProviders[identityProviderKey] = value;
+}
+
+function getProviderConfig(identityProvider: string) {
+  return identityProviders[identityProvider.toLowerCase()];
+}
+
 router.post(
   "/",
   async (req: Request, res: Response): Promise<Response | void> => {
@@ -288,7 +308,7 @@ router.post(
       return res.status(400).send("Missing OAuth Code and Refresh Token");
     }
 
-    const providerConfig = project.oauth?.providers[identityProvider] as {
+    const providerConfig = getProviderConfig(identityProvider) as {
       clientId: string;
       tokenUrl: string;
       userUrl: string;
@@ -501,7 +521,7 @@ router.get("/user", async (req: Request, res: Response): Promise<Response> => {
     });
   }
 
-  const providerConfig = project.oauth?.providers[identityProvider] as {
+  const providerConfig = getProviderConfig(identityProvider) as {
     userUrl: string;
     userFields: {
       name: string;