@graphql-mesh/plugin-jwt-auth 0.0.2-alpha-20240717092838-06347d9cc3b6c01e65cedffa4f27922bda71cf0f

package/cjs/index.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useForwardedJWTClaims = void 0;
+exports.default = useJWTAuth;
+const plugin_jwt_1 = require("@graphql-yoga/plugin-jwt");
+function useJWTAuth(options) {
+    const shouldPassthroughIndicators = new WeakSet();
+    return {
+        onPluginInit({ addPlugin }) {
+            // TODO: fix useYogaJWT typings to inherit the context
+            addPlugin((0, plugin_jwt_1.useJWT)(options));
+        },
+        // When a subgraph is about to be executed, we check if the request has a JWT token
+        // that needs to be passed. At the moment, only subgraphs will have the option to forward tokens/claims.
+        onSubgraphExecute({ executionRequest, setExecutionRequest }) {
+            if (executionRequest.context.jwt) {
+                console.log('got jwt', executionRequest.context.jwt);
+                console.log('current extensions', executionRequest.extensions);
+                setExecutionRequest({
+                    ...executionRequest,
+                    extensions: {
+                        ...executionRequest.extensions,
+                        jwt: executionRequest.context.jwt,
+                    },
+                });
+                shouldPassthroughIndicators.add(executionRequest.context.request);
+            }
+        },
+        // When an upstream HTTP call is made, we check if the incoming request has a JWT token from previous stages,
+        // and if the concerete upstream HTTP request should have the token passed.
+        onFetch({ context, setOptions, options: fetchOptions }) {
+            const shouldForward = options.forward.claims || options.forward.token;
+            if (shouldForward && context.jwt && shouldPassthroughIndicators.has(context.request)) {
+                const headers = {};
+                if (options.forward.token && context.jwt.token) {
+                    const headerName = typeof options.forward.token === 'string' ? options.forward.token : 'Authorization';
+                    const headerValue = [context.jwt.token.prefix, context.jwt.token.value]
+                        .filter(r => !!r)
+                        .join(' ');
+                    headers[headerName] = headerValue;
+                }
+                if (options.forward.claims && context.jwt.payload) {
+                    const headerName = typeof options.forward.claims === 'string'
+                        ? options.forward.claims
+                        : 'X-JWT-Auth-Claims';
+                    const headerValue = JSON.stringify(context.jwt.payload);
+                    headers[headerName] = headerValue;
+                }
+                if (Object.keys(headers).length > 0) {
+                    setOptions({
+                        ...fetchOptions,
+                        headers: {
+                            ...fetchOptions.headers,
+                            ...headers,
+                        },
+                    });
+                }
+            }
+        },
+    };
+}
+const useForwardedJWTClaims = () => {
+    return {};
+};
+exports.useForwardedJWTClaims = useForwardedJWTClaims;

package/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/esm/index.js

@@ -0,0 +1,60 @@
+import { useJWT as useYogaJWT, } from '@graphql-yoga/plugin-jwt';
+export default function useJWTAuth(options) {
+    const shouldPassthroughIndicators = new WeakSet();
+    return {
+        onPluginInit({ addPlugin }) {
+            // TODO: fix useYogaJWT typings to inherit the context
+            addPlugin(useYogaJWT(options));
+        },
+        // When a subgraph is about to be executed, we check if the request has a JWT token
+        // that needs to be passed. At the moment, only subgraphs will have the option to forward tokens/claims.
+        onSubgraphExecute({ executionRequest, setExecutionRequest }) {
+            if (executionRequest.context.jwt) {
+                console.log('got jwt', executionRequest.context.jwt);
+                console.log('current extensions', executionRequest.extensions);
+                setExecutionRequest({
+                    ...executionRequest,
+                    extensions: {
+                        ...executionRequest.extensions,
+                        jwt: executionRequest.context.jwt,
+                    },
+                });
+                shouldPassthroughIndicators.add(executionRequest.context.request);
+            }
+        },
+        // When an upstream HTTP call is made, we check if the incoming request has a JWT token from previous stages,
+        // and if the concerete upstream HTTP request should have the token passed.
+        onFetch({ context, setOptions, options: fetchOptions }) {
+            const shouldForward = options.forward.claims || options.forward.token;
+            if (shouldForward && context.jwt && shouldPassthroughIndicators.has(context.request)) {
+                const headers = {};
+                if (options.forward.token && context.jwt.token) {
+                    const headerName = typeof options.forward.token === 'string' ? options.forward.token : 'Authorization';
+                    const headerValue = [context.jwt.token.prefix, context.jwt.token.value]
+                        .filter(r => !!r)
+                        .join(' ');
+                    headers[headerName] = headerValue;
+                }
+                if (options.forward.claims && context.jwt.payload) {
+                    const headerName = typeof options.forward.claims === 'string'
+                        ? options.forward.claims
+                        : 'X-JWT-Auth-Claims';
+                    const headerValue = JSON.stringify(context.jwt.payload);
+                    headers[headerName] = headerValue;
+                }
+                if (Object.keys(headers).length > 0) {
+                    setOptions({
+                        ...fetchOptions,
+                        headers: {
+                            ...fetchOptions.headers,
+                            ...headers,
+                        },
+                    });
+                }
+            }
+        },
+    };
+}
+export const useForwardedJWTClaims = () => {
+    return {};
+};

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@graphql-mesh/plugin-jwt-auth",
+  "version": "0.0.2-alpha-20240717092838-06347d9cc3b6c01e65cedffa4f27922bda71cf0f",
+  "sideEffects": false,
+  "peerDependencies": {
+    "@graphql-mesh/types": "^0.99.0",
+    "@graphql-mesh/utils": "^0.99.0",
+    "graphql": "*",
+    "tslib": "^2.4.0"
+  },
+  "dependencies": {
+    "@graphql-yoga/plugin-jwt": "3.0.0-alpha-20240716130747-2f341065"
+  },
+  "repository": {
+    "type": "git",
+    "url": "ardatan/graphql-mesh",
+    "directory": "packages/plugins/jwt-auth"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "main": "cjs/index.js",
+  "module": "esm/index.js",
+  "typings": "typings/index.d.ts",
+  "typescript": {
+    "definition": "typings/index.d.ts"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "require": {
+        "types": "./typings/index.d.cts",
+        "default": "./cjs/index.js"
+      },
+      "import": {
+        "types": "./typings/index.d.ts",
+        "default": "./esm/index.js"
+      },
+      "default": {
+        "types": "./typings/index.d.ts",
+        "default": "./esm/index.js"
+      }
+    },
+    "./package.json": "./package.json"
+  }
+}

package/typings/index.d.cts

@@ -0,0 +1,13 @@
+import type { Plugin as YogaPlugin } from 'graphql-yoga';
+import type { MeshServePlugin } from '@graphql-mesh/serve-runtime';
+import { type JWTExtendContextFields, type JwtPluginOptions } from '@graphql-yoga/plugin-jwt';
+export type JWTAuthPluginOptions = JwtPluginOptions & {
+    forward: {
+        claims: boolean | string;
+        token: boolean | string;
+    };
+};
+export default function useJWTAuth(options: JWTAuthPluginOptions): MeshServePlugin<{
+    jwt?: JWTExtendContextFields;
+}>;
+export declare const useForwardedJWTClaims: () => YogaPlugin;

package/typings/index.d.ts

@@ -0,0 +1,13 @@
+import type { Plugin as YogaPlugin } from 'graphql-yoga';
+import type { MeshServePlugin } from '@graphql-mesh/serve-runtime';
+import { type JWTExtendContextFields, type JwtPluginOptions } from '@graphql-yoga/plugin-jwt';
+export type JWTAuthPluginOptions = JwtPluginOptions & {
+    forward: {
+        claims: boolean | string;
+        token: boolean | string;
+    };
+};
+export default function useJWTAuth(options: JWTAuthPluginOptions): MeshServePlugin<{
+    jwt?: JWTExtendContextFields;
+}>;
+export declare const useForwardedJWTClaims: () => YogaPlugin;