@eduzz/miau-client 1.0.5 → 1.1.0

package/.turbo/turbo-build$colon$types.log

@@ -1,4 +1,4 @@
 
-> @eduzz/miau-client@1.0.5 build:types /home/runner/work/eduzz-miau/eduzz-miau/packages/client
+> @eduzz/miau-client@1.1.0 build:types /home/runner/work/eduzz-miau/eduzz-miau/packages/client
 > tsc --emitDeclarationOnly --outDir dist
 

package/dist/index.js

@@ -11723,6 +11723,7 @@ __export(index_exports, {
   expirationOptions: () => expirationOptions,
   expirationOptionsValues: () => expirationOptionsValues,
   expirationTimeToDate: () => expirationTimeToDate,
+  issuers: () => issuers,
   networks: () => networks
 });
 module.exports = __toCommonJS(index_exports);
@@ -11834,6 +11835,7 @@ var expirationTimeToDate = (option) => {
 };
 
 // ../types/src/types/Environments.ts
+var SecretEnvValues = ["development", "test", "production"];
 var envs = {
   development: "Development",
   test: "Testing",
@@ -11844,7 +11846,11 @@ var networks = {
   test: "127.0.0.0/8",
   production: "127.0.0.0/8"
 };
-var SecretEnvValues = ["development", "test", "production"];
+var issuers = {
+  development: "https://miau.devopzz.ninja",
+  test: "https://miau.testzz.ninja",
+  production: "https://miau.eduzz.com"
+};
 var envMap = {
   development: "d",
   test: "q",
@@ -11910,9 +11916,15 @@ var miauMiddleware = (miauClient, requestAugmentation, fallbackMiddleware) => {
         throw new HttpError(400, "Invalid Token", "Token not provided");
       }
       const decodedToken = import_jsonwebtoken.default.decode(token, { complete: true });
-      if (!decodedToken?.header?.kid) {
+      if (!decodedToken) {
+        throw new HttpError(400, "Invalid Token", "Token could not be decoded");
+      }
+      if (!decodedToken.header?.kid) {
         throw new HttpError(400, "Invalid Token", "Missing kid in token header");
       }
+      if (decodedToken.payload.iss !== issuers["production"]) {
+        throw new HttpError(400, "Invalid Token", "Token issuer is invalid");
+      }
       const publicKey = await miauClient.getPublicKey(decodedToken.header.kid);
       const clientToken = import_jsonwebtoken.default.verify(token, publicKey, { algorithms: ["RS256"] });
       if (!clientToken || !clientToken.application || !clientToken.secret || !clientToken.application.id || !clientToken.secret.id || !clientToken.secret.environment) {
@@ -12082,6 +12094,7 @@ var MiauClient = class {
   expirationOptions,
   expirationOptionsValues,
   expirationTimeToDate,
+  issuers,
   networks
 });
 /*! Bundled license information: