@fphgov/authentication-sdk 1.0.0

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@fphgov/authentication-sdk",
+  "version": "1.0.0",
+  "description": "Authentication gRPC service SDK only for FPH",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/",
+    "protos/",
+    "src/"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "build:watch": "tsc -p tsconfig.build.json --watch"
+  },
+  "dependencies": {
+    "@grpc/grpc-js": "^1.14.4",
+    "@grpc/proto-loader": "^0.8.0"
+  },
+  "peerDependencies": {
+    "@nestjs/common": ">=11.0.0",
+    "@nestjs/microservices": ">=11.0.0",
+    "rxjs": ">=7.0.0"
+  },
+  "devDependencies": {
+    "@nestjs/common": "^11.0.0",
+    "@nestjs/microservices": "^11.0.0",
+    "@types/node": "^24.0.0",
+    "rxjs": "^7.8.0",
+    "typescript": "^5.9.0"
+  }
+}

package/protos/authentication.proto

@@ -0,0 +1,15 @@
+syntax = "proto3";
+
+package authentication;
+
+service AuthService {
+  rpc Authenticate (AuthRequest) returns (AuthResponse) {}
+}
+
+message AuthRequest {
+  string token = 1;
+}
+
+message AuthResponse {
+  bool success = 1;
+}

package/src/client.ts

@@ -0,0 +1,47 @@
+import * as grpc from '@grpc/grpc-js'
+import * as protoLoader from '@grpc/proto-loader'
+import * as path from 'path'
+import { type AuthServiceClient, type AuthServiceConstructor } from './types'
+
+const { status } = grpc
+
+const PROTO_PATH = path.join(__dirname, '../protos/authentication.proto')
+
+const packageDefinition = protoLoader.loadSync(PROTO_PATH, {
+  keepCase: true,
+  defaults: true,
+  enums: String,
+  oneofs: true,
+})
+
+const proto = grpc.loadPackageDefinition(packageDefinition) as unknown as {
+  authentication: { AuthService: AuthServiceConstructor }
+}
+
+export class AuthenticationClient {
+  private readonly grpcClient: AuthServiceClient
+
+  constructor(url: string) {
+    this.grpcClient = new proto.authentication.AuthService(url, grpc.credentials.createInsecure())
+  }
+
+  authenticate(token: string): Promise<boolean> {
+    return new Promise((resolve, reject) => {
+      this.grpcClient.authenticate({ token }, (err, response) => {
+        if (err) {
+          if (err.code === status.UNAUTHENTICATED) {
+            resolve(false)
+          } else {
+            reject(err)
+          }
+        } else {
+          resolve(response.success)
+        }
+      })
+    })
+  }
+
+  close(): void {
+    this.grpcClient.close()
+  }
+}

package/src/index.ts

@@ -0,0 +1,3 @@
+export { AuthenticationClient } from './client'
+export { AuthenticationInterceptor } from './interceptor'
+export type { AuthRequest, AuthResponse, AuthServiceClient, AuthServiceConstructor } from './types'

package/src/interceptor.ts

@@ -0,0 +1,27 @@
+import { type ExecutionContext, type CallHandler } from '@nestjs/common'
+import { RpcException } from '@nestjs/microservices'
+import { type Observable } from 'rxjs'
+import { Metadata, status } from '@grpc/grpc-js'
+import { AuthenticationClient } from './client'
+
+export class AuthenticationInterceptor {
+  constructor(private readonly client: AuthenticationClient) {}
+
+  async intercept(context: ExecutionContext, next: CallHandler): Promise<Observable<unknown>> {
+    const metadata = context.getArgByIndex<Metadata>(1)
+    const authValues = metadata?.get('authorization')
+    const token = authValues?.[0] as string | undefined
+
+    if (!token) {
+      throw new RpcException({ code: status.UNAUTHENTICATED, message: 'Missing authentication token' })
+    }
+
+    const success = await this.client.authenticate(token)
+
+    if (!success) {
+      throw new RpcException({ code: status.UNAUTHENTICATED, message: 'Invalid authentication token' })
+    }
+
+    return next.handle()
+  }
+}

package/src/types.ts

@@ -0,0 +1,17 @@
+import * as grpc from '@grpc/grpc-js'
+
+export interface AuthRequest {
+  token: string
+}
+
+export interface AuthResponse {
+  success: boolean
+}
+
+export interface AuthServiceClient extends grpc.Client {
+  authenticate(req: AuthRequest, cb: (err: grpc.ServiceError | null, res: AuthResponse) => void): void
+}
+
+export interface AuthServiceConstructor {
+  new (url: string, credentials: grpc.ChannelCredentials): AuthServiceClient
+}