@cedarjs/auth-clerk-api 1.1.1-next.18 → 1.1.1-rc.3

package/dist/decoder.d.ts

@@ -1,3 +1,7 @@
 import type { Decoder } from '@cedarjs/api';
+/**
+ * @deprecated This function will be removed; it uses a rate-limited API. Use `clerkAuthDecoder` instead.
+ */
+export declare const authDecoder: Decoder;
 export declare const clerkAuthDecoder: Decoder;
 //# sourceMappingURL=decoder.d.ts.map

package/dist/decoder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decoder.d.ts","sourceRoot":"","sources":["../src/decoder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C,eAAO,MAAM,gBAAgB,EAAE,OA6B9B,CAAA"}
+{"version":3,"file":"decoder.d.ts","sourceRoot":"","sources":["../src/decoder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,OAiCzB,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAkC9B,CAAA"}

package/dist/decoder.js

@@ -28,18 +28,49 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var decoder_exports = {};
 __export(decoder_exports, {
+  authDecoder: () => authDecoder,
   clerkAuthDecoder: () => clerkAuthDecoder
 });
 module.exports = __toCommonJS(decoder_exports);
+const authDecoder = async (token, type) => {
+  if (type !== "clerk") {
+    return null;
+  }
+  const { users, verifyToken } = await import("@clerk/clerk-sdk-node");
+  try {
+    const issuer = (iss) => iss.startsWith("https://clerk.") || iss.includes(".clerk.accounts");
+    const jwtPayload = await verifyToken(token, {
+      issuer,
+      apiUrl: process.env.CLERK_API_URL || "https://api.clerk.dev",
+      jwtKey: process.env.CLERK_JWT_KEY,
+      apiKey: process.env.CLERK_API_KEY,
+      secretKey: process.env.CLERK_SECRET_KEY
+    });
+    if (!jwtPayload.sub) {
+      return Promise.reject(new Error("Session invalid"));
+    }
+    const user = await users.getUser(jwtPayload.sub);
+    return {
+      ...user,
+      roles: user.publicMetadata["roles"] ?? []
+    };
+  } catch (error) {
+    console.error(error);
+    return Promise.reject(error);
+  }
+};
 const clerkAuthDecoder = async (token, type) => {
   if (type !== "clerk") {
     return null;
   }
-  const { verifyToken } = await import("@clerk/backend");
+  const { verifyToken } = await import("@clerk/clerk-sdk-node");
   try {
+    const issuer = (iss) => iss.startsWith("https://clerk.") || iss.includes(".clerk.accounts");
     const jwtPayload = await verifyToken(token, {
-      apiUrl: process.env.CLERK_API_URL,
+      issuer,
+      apiUrl: process.env.CLERK_API_URL || "https://api.clerk.dev",
       jwtKey: process.env.CLERK_JWT_KEY,
+      apiKey: process.env.CLERK_API_KEY,
       secretKey: process.env.CLERK_SECRET_KEY
     });
     if (!jwtPayload.sub) {
@@ -56,5 +87,6 @@ const clerkAuthDecoder = async (token, type) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  authDecoder,
   clerkAuthDecoder
 });

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export { clerkAuthDecoder } from './decoder';
+export { authDecoder, clerkAuthDecoder } from './decoder';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA"}

package/dist/index.js

@@ -18,11 +18,13 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var index_exports = {};
 __export(index_exports, {
+  authDecoder: () => import_decoder.authDecoder,
   clerkAuthDecoder: () => import_decoder.clerkAuthDecoder
 });
 module.exports = __toCommonJS(index_exports);
 var import_decoder = require("./decoder");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  authDecoder,
   clerkAuthDecoder
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cedarjs/auth-clerk-api",
-  "version": "1.1.1-next.18+5ffd3124d",
+  "version": "1.1.1-rc.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
@@ -39,12 +39,12 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@clerk/backend": "1.34.0"
+    "@clerk/clerk-sdk-node": "4.13.21"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.2",
-    "@cedarjs/api": "1.1.1-next.18+5ffd3124d",
-    "@cedarjs/framework-tools": "1.1.1-next.18",
+    "@cedarjs/api": "1.1.1-rc.3",
+    "@cedarjs/framework-tools": "1.1.1-rc.3",
     "@types/aws-lambda": "8.10.152",
     "concurrently": "8.2.2",
     "publint": "0.3.12",
@@ -55,5 +55,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "5ffd3124d3d4ceb7843408264c96ecceff8542f5"
+  "gitHead": "1332c50070b0ab7f2cfc0d7bc802c60cd8a664a9"
 }