@dotpress/auth 1.3.1 → 2.0.0-alpha.0

package/dist/lib/tokens.js

@@ -1,112 +0,0 @@
-import jwt from 'jsonwebtoken';
-import { randomBytes, createHash } from 'crypto';
-import { getSettings } from './settings.js';
-import { generateUUID } from './generators.js';
-export const createAccessTokenFromPayload = (payload) => {
-    const jwtId = generateUUID();
-    const settings = getSettings();
-    const accessToken = jwt.sign(payload, settings.keys.secretKey, {
-        algorithm: 'RS256',
-        issuer: settings.issuer,
-        expiresIn: settings.accessTokenTTL,
-        jwtid: jwtId,
-    });
-    return {
-        jwtId,
-        accessToken,
-    };
-};
-export const generateRefreshToken = () => {
-    const token = randomBytes(128).toString('hex');
-    const tokenHash = createHash('sha256').update(token).digest('hex');
-    return {
-        token,
-        tokenHash,
-    };
-};
-/**
- * Generate a pair of access and refresh tokens for a given user
- */
-export const generateTokensForUser = async ({ userId, username, aud, }) => {
-    const settings = getSettings();
-    const { jwtId, accessToken } = generateAccessToken({ userId, username, aud });
-    const { token: refreshToken, tokenHash: refreshTokenHash } = generateRefreshToken();
-    await settings.dataProvider.storeRefreshToken({
-        token: refreshToken,
-        tokenHash: refreshTokenHash,
-        userId,
-        jwtId,
-        expiresAt: addDaysFromNow(settings.refreshTokenTTLInDays),
-    });
-    return {
-        accessToken,
-        refreshToken,
-    };
-};
-export const generateAccessToken = ({ userId, username, aud, }) => {
-    return createAccessTokenFromPayload({
-        sub: userId,
-        username,
-        auth_time: Math.floor(Date.now() / 1000),
-        aud,
-    });
-};
-const addDaysFromNow = (days) => {
-    const now = new Date();
-    now.setDate(now.getDate() + days);
-    return now;
-};
-/**
- * Regenerate a pair of token using a refresh token
- * Expired access token must be provided in order to validate userId and jwtId
- */
-export const generateTokensFromRefreshToken = async ({ accessToken, refreshToken, }) => {
-    const settings = getSettings();
-    const decodedToken = jwt.verify(accessToken, settings.keys.publicKey, {
-        ignoreExpiration: true,
-    });
-    const userId = String(decodedToken.sub);
-    const refreshTokenHash = createHash('sha256')
-        .update(refreshToken)
-        .digest('hex');
-    const refreshTokenData = await settings.dataProvider.findRefreshToken(refreshTokenHash);
-    if (!refreshTokenData ||
-        refreshTokenData.revokedAt ||
-        refreshTokenData.isUsed ||
-        refreshTokenData.userId !== userId ||
-        refreshTokenData.jwtId !== decodedToken.jti) {
-        throw new Error('Invalid_Refresh_Token');
-    }
-    if (refreshTokenData.expiresAt.getTime() <= Date.now()) {
-        throw new Error('Expired_Refresh_Token');
-    }
-    const { jwtId, accessToken: newAccessToken } = createAccessTokenFromPayload({
-        sub: userId,
-        username: decodedToken.username,
-        auth_time: decodedToken.auth_time,
-        aud: decodedToken.aud || undefined,
-    });
-    const newRefreshToken = generateRefreshToken();
-    await settings.dataProvider.storeRefreshToken({
-        ...newRefreshToken,
-        userId,
-        jwtId,
-        expiresAt: addDaysFromNow(settings.refreshTokenTTLInDays),
-    });
-    await settings.dataProvider.markRefreshTokenAsUsed(refreshTokenHash);
-    return {
-        userId,
-        accessToken: newAccessToken,
-        refreshToken: newRefreshToken.token,
-    };
-};
-export const validateAndDecodeAccessToken = (accessToken) => {
-    const settings = getSettings();
-    const { sub: userId } = jwt.verify(accessToken, settings.keys.publicKey);
-    if (!userId) {
-        throw new Error('Invalid_Access_Token');
-    }
-    return {
-        userId: String(userId),
-    };
-};

package/dist/types/types.d.ts

@@ -1,107 +0,0 @@
-import type { JwtPayload } from 'jsonwebtoken';
-declare global {
-    namespace Express {
-        interface Request {
-            user?: unknown;
-        }
-    }
-}
-export type KeyPairSettings = {
-    secretKey: string;
-    publicKey: string;
-};
-export type CookieSettings = {
-    enabled?: boolean;
-    httpOnly?: boolean;
-    secure?: boolean;
-    sameSite?: 'strict' | 'lax' | 'none';
-    domain?: string;
-    path?: string;
-    accessTokenName?: string;
-    refreshTokenName?: string;
-    accessTokenInCookie?: boolean;
-};
-export type AuthMode = 'body' | 'cookie';
-export type AuthSettings = {
-    accessTokenTTL: number;
-    refreshTokenTTLInDays: number;
-    issuer: string;
-    cookies?: CookieSettings;
-    onLoginFailed?: (e: LoginFailedEvent) => Promise<void>;
-    onLoginSuccess?: (e: LoginSuccessEvent) => Promise<void>;
-    aud?: {
-        required?: boolean;
-        isUserRoleAllowed: (role: string, aud: string) => boolean;
-    };
-};
-type LoginFailedEvent = {
-    username: string;
-    errorType: 'invalid_username' | 'invalid_password' | string;
-    client: string;
-    ipAddress: string;
-};
-type LoginSuccessEvent = {
-    userId: string;
-    username: string;
-    client: string;
-    ipAddress: string;
-};
-export type PluginSettings = AuthSettings & {
-    keys: KeyPairSettings;
-    dataProvider: DataProvider;
-};
-export interface AppJwtPayload extends JwtPayload {
-    username: string;
-    auth_time: number;
-}
-export type TokenPair = {
-    accessToken: string;
-    refreshToken: string;
-};
-export type TokenResponse = {
-    userId: string;
-    accessToken: string;
-    refreshToken: string;
-    expiresIn: number;
-    expiresAt: string;
-};
-export type RestoreResponse = {
-    userId: string;
-    accessToken: string;
-    refreshToken: string;
-    expiresIn: number;
-    expiresAt: string;
-    user: unknown;
-};
-export type CreateTokenPayload = {
-    sub: string;
-    username: string;
-    auth_time: number;
-};
-export type StoreRefreshTokenDto = {
-    token: string;
-    tokenHash: string;
-    userId: string;
-    jwtId: string;
-    expiresAt: Date;
-};
-export type RefreshTokenData = {
-    userId: string;
-    jwtId: string;
-    expiresAt: Date;
-    isUsed: boolean;
-    revokedAt?: Date | null;
-};
-export type DataProvider = {
-    storeRefreshToken: (payload: StoreRefreshTokenDto) => Promise<void>;
-    findRefreshToken: (tokenHash: string) => Promise<RefreshTokenData | undefined>;
-    markRefreshTokenAsUsed: (tokenHash: string) => Promise<void>;
-    revokeTokens: (userId: string) => Promise<void>;
-    findUserById: <TUser = Record<string, unknown>>(userId: string) => Promise<TUser | undefined>;
-    findUserIdentifiers: (username: string) => Promise<{
-        userId: string;
-        passwordHash: string;
-        role?: string;
-    } | undefined>;
-};
-export {};

package/dist/types/types.js

@@ -1 +0,0 @@
-export {};