@forklaunch/core 0.14.14 → 0.14.16

package/lib/http/index.mjs

@@ -127,12 +127,26 @@ function isJwtAuthMethod(maybeJwtAuthMethod) {
 }
 
 // src/http/discriminateAuthMethod.ts
-var DEFAULT_TTL = 60 * 1e3 * 5;
-var memoizedJwks = {
+var DEFAULT_TTL = process.env.JWKS_TTL ? parseInt(process.env.JWKS_TTL) : 60 * 1e3 * 5;
+var cachedJwks = {
   value: null,
   lastUpdated: null,
   ttl: DEFAULT_TTL
 };
+async function getCachedJwks(jwksPublicKeyUrl) {
+  if (cachedJwks.value && cachedJwks.lastUpdated && Date.now() - cachedJwks.lastUpdated.getTime() < cachedJwks.ttl) {
+    return cachedJwks.value;
+  } else {
+    const jwksResponse = await fetch(jwksPublicKeyUrl);
+    const jwks = (await jwksResponse.json()).keys;
+    cachedJwks.value = jwks;
+    cachedJwks.lastUpdated = /* @__PURE__ */ new Date();
+    cachedJwks.ttl = parseInt(
+      jwksResponse.headers.get("cache-control")?.split("=")[1] ?? `${DEFAULT_TTL / 1e3}`
+    ) * 1e3;
+    return jwks;
+  }
+}
 async function discriminateAuthMethod(auth) {
   let authMethod;
   if (isBasicAuthMethod(auth)) {
@@ -157,17 +171,7 @@ async function discriminateAuthMethod(auth) {
     } else {
       let jwks;
       if ("jwksPublicKeyUrl" in jwt) {
-        if (memoizedJwks.value && memoizedJwks.lastUpdated && Date.now() - memoizedJwks.lastUpdated.getTime() < memoizedJwks.ttl) {
-          jwks = memoizedJwks.value;
-        } else {
-          const jwksResponse = await fetch(jwt.jwksPublicKeyUrl);
-          jwks = (await jwksResponse.json()).keys;
-          memoizedJwks.value = jwks;
-          memoizedJwks.lastUpdated = /* @__PURE__ */ new Date();
-          memoizedJwks.ttl = parseInt(
-            jwksResponse.headers.get("cache-control")?.split("=")[1] ?? `${DEFAULT_TTL / 1e3}`
-          ) * 1e3;
-        }
+        jwks = await getCachedJwks(jwt.jwksPublicKeyUrl);
       } else if ("jwksPublicKey" in jwt) {
         jwks = [jwt.jwksPublicKey];
       }
@@ -177,9 +181,9 @@ async function discriminateAuthMethod(auth) {
             const { payload } = await jwtVerify(token, key);
             return payload;
           } catch {
-            memoizedJwks.value = null;
-            memoizedJwks.lastUpdated = null;
-            memoizedJwks.ttl = DEFAULT_TTL;
+            cachedJwks.value = null;
+            cachedJwks.lastUpdated = null;
+            cachedJwks.ttl = DEFAULT_TTL;
             continue;
           }
         }
@@ -3993,6 +3997,7 @@ export {
   OpenTelemetryCollector,
   createHmacToken,
   delete_,
+  discriminateAuthMethod,
   discriminateBody,
   discriminateResponseBodies,
   enrichExpressLikeSend,
@@ -4000,6 +4005,7 @@ export {
   generateMcpServer,
   generateOpenApiSpecs,
   get,
+  getCachedJwks,
   getCodeForStatus,
   head,
   httpRequestsTotalCounter,