@eduzz/miau-client 0.0.15 → 0.0.17

package/.turbo/turbo-build$colon$types.log

@@ -1,4 +1,4 @@
 
-> @eduzz/miau-client@0.0.15 build:types /home/runner/work/eduzz-miau/eduzz-miau/packages/client
+> @eduzz/miau-client@0.0.17 build:types /home/runner/work/eduzz-miau/eduzz-miau/packages/client
 > tsc --emitDeclarationOnly --outDir dist
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @eduzz/miau-client@0.0.15 build /home/runner/work/eduzz-miau/eduzz-miau/packages/client
+> @eduzz/miau-client@0.0.17 build /home/runner/work/eduzz-miau/eduzz-miau/packages/client
 > esbuild src/index.ts --bundle --sourcemap --platform=node --target=es2020 --outfile=dist/index.js
 
 
-  dist/index.js      438.5kb
-  dist/index.js.map  735.4kb
+  dist/index.js      438.7kb
+  dist/index.js.map  735.8kb
 
-⚡ Done in 462ms
+⚡ Done in 473ms

package/.turbo/turbo-prepublish.log

@@ -1,4 +1,4 @@
 
-> @eduzz/miau-client@0.0.15 prepublish /home/runner/work/eduzz-miau/eduzz-miau/packages/client
+> @eduzz/miau-client@0.0.17 prepublish /home/runner/work/eduzz-miau/eduzz-miau/packages/client
 > sh ./scripts/prepare-publish.sh
 

package/dist/index.js

@@ -338,14 +338,14 @@ var require_buffer_equal_constant_time = __commonJS({
 var require_jwa = __commonJS({
   "../../node_modules/.pnpm/jwa@1.4.2/node_modules/jwa/index.js"(exports2, module2) {
     var Buffer2 = require_safe_buffer().Buffer;
-    var crypto = require("crypto");
+    var crypto2 = require("crypto");
     var formatEcdsa = require_ecdsa_sig_formatter();
     var util = require("util");
     var MSG_INVALID_ALGORITHM = '"%s" is not a valid algorithm.\n  Supported algorithms are:\n  "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".';
     var MSG_INVALID_SECRET = "secret must be a string or buffer";
     var MSG_INVALID_VERIFIER_KEY = "key must be a string or a buffer";
     var MSG_INVALID_SIGNER_KEY = "key must be a string, a buffer or an object";
-    var supportsKeyObjects = typeof crypto.createPublicKey === "function";
+    var supportsKeyObjects = typeof crypto2.createPublicKey === "function";
     if (supportsKeyObjects) {
       MSG_INVALID_VERIFIER_KEY += " or a KeyObject";
       MSG_INVALID_SECRET += "or a KeyObject";
@@ -435,17 +435,17 @@ var require_jwa = __commonJS({
       return function sign(thing, secret) {
         checkIsSecretKey(secret);
         thing = normalizeInput(thing);
-        var hmac = crypto.createHmac("sha" + bits, secret);
+        var hmac = crypto2.createHmac("sha" + bits, secret);
         var sig = (hmac.update(thing), hmac.digest("base64"));
         return fromBase64(sig);
       };
     }
     var bufferEqual;
-    var timingSafeEqual = "timingSafeEqual" in crypto ? function timingSafeEqual2(a, b) {
+    var timingSafeEqual = "timingSafeEqual" in crypto2 ? function timingSafeEqual2(a, b) {
       if (a.byteLength !== b.byteLength) {
         return false;
       }
-      return crypto.timingSafeEqual(a, b);
+      return crypto2.timingSafeEqual(a, b);
     } : function timingSafeEqual2(a, b) {
       if (!bufferEqual) {
         bufferEqual = require_buffer_equal_constant_time();
@@ -462,7 +462,7 @@ var require_jwa = __commonJS({
       return function sign(thing, privateKey) {
         checkIsPrivateKey(privateKey);
         thing = normalizeInput(thing);
-        var signer = crypto.createSign("RSA-SHA" + bits);
+        var signer = crypto2.createSign("RSA-SHA" + bits);
         var sig = (signer.update(thing), signer.sign(privateKey, "base64"));
         return fromBase64(sig);
       };
@@ -472,7 +472,7 @@ var require_jwa = __commonJS({
         checkIsPublicKey(publicKey);
         thing = normalizeInput(thing);
         signature = toBase64(signature);
-        var verifier = crypto.createVerify("RSA-SHA" + bits);
+        var verifier = crypto2.createVerify("RSA-SHA" + bits);
         verifier.update(thing);
         return verifier.verify(publicKey, signature, "base64");
       };
@@ -481,11 +481,11 @@ var require_jwa = __commonJS({
       return function sign(thing, privateKey) {
         checkIsPrivateKey(privateKey);
         thing = normalizeInput(thing);
-        var signer = crypto.createSign("RSA-SHA" + bits);
+        var signer = crypto2.createSign("RSA-SHA" + bits);
         var sig = (signer.update(thing), signer.sign({
           key: privateKey,
-          padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
-          saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST
+          padding: crypto2.constants.RSA_PKCS1_PSS_PADDING,
+          saltLength: crypto2.constants.RSA_PSS_SALTLEN_DIGEST
         }, "base64"));
         return fromBase64(sig);
       };
@@ -495,12 +495,12 @@ var require_jwa = __commonJS({
         checkIsPublicKey(publicKey);
         thing = normalizeInput(thing);
         signature = toBase64(signature);
-        var verifier = crypto.createVerify("RSA-SHA" + bits);
+        var verifier = crypto2.createVerify("RSA-SHA" + bits);
         verifier.update(thing);
         return verifier.verify({
           key: publicKey,
-          padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
-          saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST
+          padding: crypto2.constants.RSA_PKCS1_PSS_PADDING,
+          saltLength: crypto2.constants.RSA_PSS_SALTLEN_DIGEST
         }, signature, "base64");
       };
     }
@@ -4946,9 +4946,9 @@ var require_webcrypto = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.isCryptoKey = void 0;
-    var crypto = require("crypto");
+    var crypto2 = require("crypto");
     var util = require("util");
-    var webcrypto = crypto.webcrypto;
+    var webcrypto = crypto2.webcrypto;
     exports2.default = webcrypto;
     exports2.isCryptoKey = util.types.isCryptoKey ? (key) => util.types.isCryptoKey(key) : (key) => false;
   }
@@ -7599,22 +7599,22 @@ var require_sign2 = __commonJS({
   "../../node_modules/.pnpm/jose@4.15.9/node_modules/jose/dist/node/cjs/runtime/sign.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var crypto = require("crypto");
+    var crypto2 = require("crypto");
     var util_1 = require("util");
     var dsa_digest_js_1 = require_dsa_digest();
     var hmac_digest_js_1 = require_hmac_digest();
     var node_key_js_1 = require_node_key();
     var get_sign_verify_key_js_1 = require_get_sign_verify_key();
     var oneShotSign;
-    if (crypto.sign.length > 3) {
-      oneShotSign = (0, util_1.promisify)(crypto.sign);
+    if (crypto2.sign.length > 3) {
+      oneShotSign = (0, util_1.promisify)(crypto2.sign);
     } else {
-      oneShotSign = crypto.sign;
+      oneShotSign = crypto2.sign;
     }
     var sign = async (alg, key, data) => {
       const keyObject = (0, get_sign_verify_key_js_1.default)(alg, key, "sign");
       if (alg.startsWith("HS")) {
-        const hmac = crypto.createHmac((0, hmac_digest_js_1.default)(alg), keyObject);
+        const hmac = crypto2.createHmac((0, hmac_digest_js_1.default)(alg), keyObject);
         hmac.update(data);
         return hmac.digest();
       }
@@ -7629,7 +7629,7 @@ var require_verify2 = __commonJS({
   "../../node_modules/.pnpm/jose@4.15.9/node_modules/jose/dist/node/cjs/runtime/verify.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var crypto = require("crypto");
+    var crypto2 = require("crypto");
     var util_1 = require("util");
     var dsa_digest_js_1 = require_dsa_digest();
     var node_key_js_1 = require_node_key();
@@ -7637,10 +7637,10 @@ var require_verify2 = __commonJS({
     var get_sign_verify_key_js_1 = require_get_sign_verify_key();
     var flags_js_1 = require_flags();
     var oneShotVerify;
-    if (crypto.verify.length > 4 && flags_js_1.oneShotCallback) {
-      oneShotVerify = (0, util_1.promisify)(crypto.verify);
+    if (crypto2.verify.length > 4 && flags_js_1.oneShotCallback) {
+      oneShotVerify = (0, util_1.promisify)(crypto2.verify);
     } else {
-      oneShotVerify = crypto.verify;
+      oneShotVerify = crypto2.verify;
     }
     var verify = async (alg, key, signature, data) => {
       const keyObject = (0, get_sign_verify_key_js_1.default)(alg, key, "verify");
@@ -7648,7 +7648,7 @@ var require_verify2 = __commonJS({
         const expected = await (0, sign_js_1.default)(alg, keyObject, data);
         const actual = signature;
         try {
-          return crypto.timingSafeEqual(actual, expected);
+          return crypto2.timingSafeEqual(actual, expected);
         } catch {
           return false;
         }
@@ -11715,15 +11715,16 @@ var index_exports = {};
 __export(index_exports, {
   HttpMethods: () => HttpMethods,
   MiauClient: () => MiauClient,
-  ResourceTypes: () => ResourceTypes
+  ResourceProtocols: () => ResourceProtocols
 });
 module.exports = __toCommonJS(index_exports);
 
 // ../types/src/types/Resource.ts
-var ResourceTypes = ["http", "websocket", "grpc"];
+var ResourceProtocols = ["http", "websocket", "grpc"];
 var HttpMethods = ["GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS"];
 
 // src/MiauClient.ts
+var import_node_crypto = __toESM(require("node:crypto"));
 var import_jsonwebtoken2 = __toESM(require_jsonwebtoken());
 var import_jwks_rsa = __toESM(require_src2());
 
@@ -11748,20 +11749,20 @@ var miauMiddleware = (miauClient, requestAugmentation, fallbackMidlleware) => {
     try {
       const token = req.headers.authorization?.split(" ").pop();
       if (!token) {
-        throw new HttpError(401, "Invalid Token", "Token not provided");
+        throw new HttpError(400, "Invalid Token", "Token not provided");
       }
       const decodedToken = import_jsonwebtoken.default.decode(token, { complete: true });
       if (!decodedToken?.header?.kid) {
-        throw new HttpError(401, "Invalid Token", "Missing kid in token header");
+        throw new HttpError(400, "Invalid Token", "Missing kid in token header");
       }
       const publicKey = await miauClient.getPublicKey(decodedToken.header.kid);
       const appToken = import_jsonwebtoken.default.verify(token, publicKey, { algorithms: ["RS256"] });
       if (!appToken || !appToken.id || !appToken.name) {
-        throw new HttpError(401, "Invalid Token", "Token verification failed");
+        throw new HttpError(400, "Invalid Token", "Token verification failed");
       }
       const permission = await miauClient.getPermissions(appToken.id);
       if (!permission) {
-        res.status(401).json({ error: "Unauthorized", message: "No permissions found for this application" });
+        throw new HttpError(401, "Unauthorized", "No permissions found for this application");
       }
       const resources = permission?.resources || [];
       const isAllowed = resources.some((resource) => {
@@ -11778,7 +11779,8 @@ var miauMiddleware = (miauClient, requestAugmentation, fallbackMidlleware) => {
       }
       next();
     } catch (err) {
-      if (err instanceof HttpError && err.status == 401 && fallbackMidlleware) {
+      if (err instanceof HttpError && err.status == 400 && fallbackMidlleware) {
+        console.log("Using fallback middleware for 400 error");
         return fallbackMidlleware(req, res, next);
       }
       const errorStatus = err.status || 403;
@@ -11816,7 +11818,8 @@ var MiauClient = class {
     };
     this.apiUrl = props.apiUrl;
     const apiKey = props.appSecret.substring(7, 32);
-    this.basicAuthToken = Buffer.from(`${apiKey}:${props.appSecret}`).toString("base64");
+    const hashedSecret = import_node_crypto.default.createHash("sha256").update(props.appSecret).digest("hex");
+    this.basicAuthToken = Buffer.from(`${apiKey}:${hashedSecret}`).toString("base64");
   }
   async getPublicKey(kid) {
     if (!this.jwksClient) {
@@ -11883,7 +11886,7 @@ var MiauClient = class {
 0 && (module.exports = {
   HttpMethods,
   MiauClient,
-  ResourceTypes
+  ResourceProtocols
 });
 /*! Bundled license information: