@dwtechs/toker-express 0.7.2 → 0.7.3

package/README.md

@@ -2,16 +2,16 @@
 [![License: MIT](https://img.shields.io/npm/l/@dwtechs/toker-express.svg?color=brightgreen)](https://opensource.org/licenses/MIT)
 [![npm version](https://badge.fury.io/js/%40dwtechs%2Ftoker-express.svg)](https://www.npmjs.com/package/@dwtechs/toker-express)
 [![last version release date](https://img.shields.io/github/release-date/DWTechs/Toker-express.js)](https://www.npmjs.com/package/@dwtechs/toker-express)
-![Jest:coverage](https://img.shields.io/badge/Jest:coverage-94%25-brightgreen.svg)
+![Jest:coverage](https://img.shields.io/badge/Jest:coverage-92%25-brightgreen.svg)
 
 
 - [Synopsis](#synopsis)
-- [Support](#support)
 - [Installation](#installation)
 - [Usage](#usage)
 - [Environment variables](#environment-variables)
 - [API Reference](#api-reference)
 - [Logs](#logs)
+- [Support](#support)
 - [Contributors](#contributors)
 - [Stack](#stack)
 
@@ -23,17 +23,10 @@ It includes @dwtechs/toker library and adds Express middlewares to be used in a
 
 - 🪶 Very lightweight
 - 🧪 Thoroughly tested
-- 🚚 Shipped as EcmaScrypt Express module
+- 🚚 Shipped as ES2022 ECMAScript module
 - 📝 Written in Typescript
 
 
-## Support
-
-- node: 18
-
-This is the oldest targeted versions.  
-
-
 ## Installation
 
 ```bash
@@ -110,7 +103,7 @@ You can intialise the library using the following environment variables:
 These environment variables will update the default values of the lib at start up.
 So you do not need to init the library in the code.
 
-Note that **TOKEN_SECRET** is mandatory.
+Note that **TOKEN_SECRET** is mandatory and must be at least 32 characters long.
 
 Default values : 
 
@@ -410,12 +403,17 @@ res.locals.tokens.decodedRefresh = decodedToken;
 All logs are in debug mode. Meaning they should not appear in production mode.
 Log messages are passed as lazy functions (`() => string`) so string interpolation and serialization are skipped entirely when debug logging is disabled.
 
+## Support
+
+| Environment | Version |
+| :---------- | :-----: |
+| Node.js     |  >= 22  |
+
 ## Contributors
 
 **Token-express.js** is still in development and we would be glad to get all the help you can provide.
 To contribute please read **[contributor.md](https://github.com/DWTechs/Token-express.js/blob/main/contributor.md)** for detailed installation guide.
 
-
 ## Stack
 
 | Purpose         |                    Choice                    |                                                     Motivation |

package/dist/toker-express.js

@@ -34,6 +34,8 @@ if (!TOKEN_SECRET)
     throw new Error(`${LOGS_PREFIX}Missing TOKEN_SECRET environment variable`);
 if (!isString(TOKEN_SECRET, "!0"))
     throw new Error(`${LOGS_PREFIX}Invalid TOKEN_SECRET environment variable`);
+if (TOKEN_SECRET.length < 32)
+    throw new Error(`${LOGS_PREFIX}TOKEN_SECRET must be at least 32 characters`);
 const secrets = [TOKEN_SECRET];
 const accessDuration = isNumber(ACCESS_TOKEN_DURATION, false) ? Number(ACCESS_TOKEN_DURATION) : 600;
 const refreshDuration = isNumber(REFRESH_TOKEN_DURATION, false) ? Number(REFRESH_TOKEN_DURATION) : 86400;
@@ -54,7 +56,7 @@ function createTokens(req, res, next) {
         next(err);
         return;
     }
-    log.debug(() => `refreshToken='${rt}', accessToken='${at}'`);
+    log.debug(() => `${LOGS_PREFIX}Tokens created for user ${iss}`);
     req.body.rows[0].accessToken = at;
     req.body.rows[0].refreshToken = rt;
     next();
@@ -76,20 +78,19 @@ function refreshTokens(req, res, next) {
         next(err);
         return;
     }
-    log.debug(() => `refreshToken='${rt}', accessToken='${at}'`);
+    log.debug(() => `${LOGS_PREFIX}Tokens refreshed for user ${iss}`);
     req.body.rows[0].accessToken = at;
     req.body.rows[0].refreshToken = rt;
     next();
 }
 function parseBearer(req, res, next) {
-    var _a;
     if (!res.locals?.route?.isProtected && !res.locals?.route?.protected) {
         next();
         return;
     }
     log.debug(() => `${LOGS_PREFIX}parse bearer to get access token`);
     try {
-        (_a = res.locals).tokens ?? (_a.tokens = {});
+        res.locals.tokens ??= {};
         res.locals.tokens.access = parseBearer$1(req.headers.authorization);
     }
     catch (e) {
@@ -99,7 +100,6 @@ function parseBearer(req, res, next) {
     next();
 }
 function decodeAccess(_req, res, next) {
-    var _a;
     log.debug(() => `${LOGS_PREFIX}decode access token`);
     if (!res.locals?.route?.isProtected && !res.locals?.route?.protected) {
         next();
@@ -123,15 +123,14 @@ function decodeAccess(_req, res, next) {
         next({ statusCode: 400, message: `${LOGS_PREFIX}Missing iss` });
         return;
     }
-    log.debug(() => `${LOGS_PREFIX}Decoded access token : ${JSON.stringify(dt)}`);
-    (_a = res.locals).tokens ?? (_a.tokens = {});
+    log.debug(() => `${LOGS_PREFIX}Access token decoded for user ${dt.iss}`);
+    res.locals.tokens ??= {};
     res.locals.tokens.decodedAccess = dt;
     next();
 }
 function decodeRefresh(req, res, next) {
-    var _a;
     const t = req.body?.refreshToken;
-    log.debug(() => `${LOGS_PREFIX}decodeRefresh(token=${t})`);
+    log.debug(() => `${LOGS_PREFIX}Decoding refresh token`);
     if (!isJWT(t)) {
         next({ statusCode: 401, message: `${LOGS_PREFIX}Invalid refresh token` });
         return;
@@ -148,8 +147,8 @@ function decodeRefresh(req, res, next) {
         next({ statusCode: 400, message: `${LOGS_PREFIX}Missing iss` });
         return;
     }
-    log.debug(() => `${LOGS_PREFIX}Decoded refresh token : ${JSON.stringify(dt)}`);
-    (_a = res.locals).tokens ?? (_a.tokens = {});
+    log.debug(() => `${LOGS_PREFIX}Refresh token decoded for user ${dt.iss}`);
+    res.locals.tokens ??= {};
     res.locals.tokens.decodedRefresh = dt;
     next();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dwtechs/toker-express",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "type": "module",
   "description": "Open source JWT management library for Express.js to refresh and decode tokens safely.",
   "keywords": [
@@ -25,7 +25,7 @@
   },
   "license": "MIT",
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "author": {
     "name": "Ludovic Cluber",
@@ -44,12 +44,11 @@
   ],
   "dependencies": {
     "@dwtechs/checkard": "3.6.0",
-    "@dwtechs/toker": "0.1.2",
+    "@dwtechs/toker": "0.2.1",
     "@dwtechs/winstan": "0.7.0"
   },
   "devDependencies": {
     "@babel/preset-env": "7.26.0",
-    "@rollup/plugin-node-resolve": "15.3.0",
     "@types/express": "5.0.6",
     "babel-jest": "29.7.0",
     "jest": "29.7.0",