@dax-crafta/auth 2.1.4 → 2.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dax-crafta/auth",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "A powerful, flexible, and secure authentication plugin for the Crafta framework. Supports JWT, social login, 2FA, RBAC, audit logging, and enterprise-grade security features.",
   "main": "src/index.js",
   "types": "src/index.d.ts",

package/src/index.js

@@ -264,7 +264,7 @@ function auth(config = {}) {
       validators.handleValidation,
       async (req, res, next) => {
         try {
-          const deviceInfo = { browser: req.headers['user-agent'], ip: req.ip };
+          const deviceInfo = { userAgent: req.headers['user-agent'], ip: req.ip };
           const result = await authService.login(req.body.email, req.body.password, deviceInfo);
 
           await safeAudit({

package/src/middlewares/auth.middleware.js

@@ -59,12 +59,25 @@ const createAuthMiddleware = (config) => {
   };
 
 
+  const extractToken = (req) => {
+    const authHeader = req.headers.authorization;
+    if (authHeader && authHeader.startsWith('Bearer ')) {
+      return authHeader.split(' ')[1];
+    }
+
+    if (req.headers['x-access-token']) {
+      return req.headers['x-access-token'];
+    }
+
+    return null;
+  };
+
   const verifyToken = (req, res, next) => {
-    const header = req.headers.authorization;
-    if (!header || !header.startsWith('Bearer ')) {
+    const token = extractToken(req);
+    if (!token) {
       return res.status(401).json({ success: false, error: 'No token provided' });
     }
-    const token = header.split(' ')[1];
+
     try {
       const decoded = jwt.verify(token, config.env.JWT_SECRET);
       // keep minimal user data on req.user