@hemia/auth-sdk 0.0.11 → 0.0.13

package/dist/hemia-auth-sdk.esm.js

@@ -143,7 +143,8 @@ let AuthService = class AuthService {
             state: state,
             code_challenge: codeChallenge,
             code_challenge_method: 'S256',
-            auto: auto
+            auto: auto,
+            aud: this.config.aud || ''
         });
         const loginUrl = `${this.config.ssoBaseUrl}${this.config.ssoAuthUrl}?${params.toString()}`;
         const tempState = {
@@ -185,11 +186,11 @@ let AuthService = class AuthService {
             const sessionId = randomBytes(16).toString('hex');
             const sessionData = {
                 accessToken: access_token,
-                refreshToken: refresh_token,
-                idToken: id_token,
+                refreshToken: refresh_token || '',
+                idToken: id_token || '',
                 expiresAt: Date.now() + (expires_in * 1000),
                 createdAt: new Date().toISOString(),
-                ssoSessionId: session_id
+                sessionId: session_id
             };
             await this.storage.set(`x-session:${sessionId}`, sessionData, expires_in);
             return {
@@ -262,7 +263,10 @@ let AuthService = class AuthService {
             }
         }
         try {
-            const verify = this.jwtManager.verify(session.accessToken);
+            const verify = this.jwtManager.verify(session.accessToken, this.config.clientSecret, {
+                issuer: this.config.iss,
+                audience: this.config.aud
+            });
             if (!verify) {
                 throw new SessionInvalidError();
             }
@@ -306,7 +310,7 @@ let AuthService = class AuthService {
         if (session) {
             try {
                 await this.networkServices.post(this.config.ssoLogoutEndpoint, {
-                    ssoSessionId: session.sessionId
+                    sessionId: session.sessionId
                 });
             }
             catch (e) { /* Silent error */ }
@@ -350,7 +354,8 @@ let AuthService = class AuthService {
             clientId: this.config.clientId,
             clientSecret: this.config.clientSecret,
             refreshToken: session.refreshToken,
-            sessionId: session.ssoSessionId
+            sessionId: session.sessionId,
+            aud: this.config.aud || ''
         });
         if (response.status !== 200) {
             throw new CustomHttpError('Token refresh failed', response.status, 'token_refresh_failed');
@@ -386,6 +391,7 @@ const AUTH_SERVICE_ID = Symbol.for('HemiaAuthService');
 let AuthSDKController = class AuthSDKController {
     constructor(authService) {
         this.authService = authService;
+        this.COOKIE_NAME = process.env.AUTH_COOKIE_NAME || 'x-session';
     }
     async login(req, res) {
         try {
@@ -413,12 +419,12 @@ let AuthSDKController = class AuthSDKController {
             }
             const storedState = JSON.parse(authFlowCookie);
             const result = await this.authService.handleCallback(code, state, storedState);
-            res.cookie('x-session', result.sessionId, {
+            res.cookie(this.COOKIE_NAME, result.sessionId, {
                 httpOnly: true,
                 secure: process.env.NODE_ENV === 'production',
                 sameSite: 'lax',
                 maxAge: result.expiresIn * 1000,
-                path: '/'
+                path: '/',
             });
             res.clearCookie('auth_flow');
             res.redirect(result.redirectUrl);
@@ -441,7 +447,11 @@ let AuthSDKController = class AuthSDKController {
         }
     }
     async me(req, res) {
-        const sessionId = req.cookies['x-session'];
+        const sessionId = req.cookies[this.COOKIE_NAME];
+        console.log(`🔍 [App Cookie Name]: ${this.COOKIE_NAME}`);
+        console.log('🔍 [App Port]:', req.headers.origin || 'unknown');
+        console.log('🔍 [SessionId]:', sessionId);
+        console.log('🔍 [All Cookies]:', req.cookies);
         if (!sessionId) {
             return res.status(401).json({
                 success: false,
@@ -463,7 +473,7 @@ let AuthSDKController = class AuthSDKController {
             });
         }
         catch (error) {
-            res.clearCookie('x-session', {
+            res.clearCookie(this.COOKIE_NAME, {
                 httpOnly: true,
                 secure: process.env.NODE_ENV === 'production',
                 sameSite: 'lax',
@@ -491,11 +501,11 @@ let AuthSDKController = class AuthSDKController {
         }
     }
     async logout(req, res) {
-        const sessionId = req.cookies['x-session'];
+        const sessionId = req.cookies[this.COOKIE_NAME];
         if (sessionId) {
             await this.authService.logout(sessionId);
         }
-        res.clearCookie('x-session', {
+        res.clearCookie(this.COOKIE_NAME, {
             httpOnly: true,
             secure: process.env.NODE_ENV === 'production',
             sameSite: 'lax',

package/dist/hemia-auth-sdk.js

@@ -145,7 +145,8 @@ exports.AuthService = class AuthService {
             state: state,
             code_challenge: codeChallenge,
             code_challenge_method: 'S256',
-            auto: auto
+            auto: auto,
+            aud: this.config.aud || ''
         });
         const loginUrl = `${this.config.ssoBaseUrl}${this.config.ssoAuthUrl}?${params.toString()}`;
         const tempState = {
@@ -187,11 +188,11 @@ exports.AuthService = class AuthService {
             const sessionId = crypto.randomBytes(16).toString('hex');
             const sessionData = {
                 accessToken: access_token,
-                refreshToken: refresh_token,
-                idToken: id_token,
+                refreshToken: refresh_token || '',
+                idToken: id_token || '',
                 expiresAt: Date.now() + (expires_in * 1000),
                 createdAt: new Date().toISOString(),
-                ssoSessionId: session_id
+                sessionId: session_id
             };
             await this.storage.set(`x-session:${sessionId}`, sessionData, expires_in);
             return {
@@ -264,7 +265,10 @@ exports.AuthService = class AuthService {
             }
         }
         try {
-            const verify = this.jwtManager.verify(session.accessToken);
+            const verify = this.jwtManager.verify(session.accessToken, this.config.clientSecret, {
+                issuer: this.config.iss,
+                audience: this.config.aud
+            });
             if (!verify) {
                 throw new SessionInvalidError();
             }
@@ -308,7 +312,7 @@ exports.AuthService = class AuthService {
         if (session) {
             try {
                 await this.networkServices.post(this.config.ssoLogoutEndpoint, {
-                    ssoSessionId: session.sessionId
+                    sessionId: session.sessionId
                 });
             }
             catch (e) { /* Silent error */ }
@@ -352,7 +356,8 @@ exports.AuthService = class AuthService {
             clientId: this.config.clientId,
             clientSecret: this.config.clientSecret,
             refreshToken: session.refreshToken,
-            sessionId: session.ssoSessionId
+            sessionId: session.sessionId,
+            aud: this.config.aud || ''
         });
         if (response.status !== 200) {
             throw new common.CustomHttpError('Token refresh failed', response.status, 'token_refresh_failed');
@@ -388,6 +393,7 @@ const AUTH_SERVICE_ID = Symbol.for('HemiaAuthService');
 exports.AuthSDKController = class AuthSDKController {
     constructor(authService) {
         this.authService = authService;
+        this.COOKIE_NAME = process.env.AUTH_COOKIE_NAME || 'x-session';
     }
     async login(req, res) {
         try {
@@ -415,12 +421,12 @@ exports.AuthSDKController = class AuthSDKController {
             }
             const storedState = JSON.parse(authFlowCookie);
             const result = await this.authService.handleCallback(code, state, storedState);
-            res.cookie('x-session', result.sessionId, {
+            res.cookie(this.COOKIE_NAME, result.sessionId, {
                 httpOnly: true,
                 secure: process.env.NODE_ENV === 'production',
                 sameSite: 'lax',
                 maxAge: result.expiresIn * 1000,
-                path: '/'
+                path: '/',
             });
             res.clearCookie('auth_flow');
             res.redirect(result.redirectUrl);
@@ -443,7 +449,11 @@ exports.AuthSDKController = class AuthSDKController {
         }
     }
     async me(req, res) {
-        const sessionId = req.cookies['x-session'];
+        const sessionId = req.cookies[this.COOKIE_NAME];
+        console.log(`🔍 [App Cookie Name]: ${this.COOKIE_NAME}`);
+        console.log('🔍 [App Port]:', req.headers.origin || 'unknown');
+        console.log('🔍 [SessionId]:', sessionId);
+        console.log('🔍 [All Cookies]:', req.cookies);
         if (!sessionId) {
             return res.status(401).json({
                 success: false,
@@ -465,7 +475,7 @@ exports.AuthSDKController = class AuthSDKController {
             });
         }
         catch (error) {
-            res.clearCookie('x-session', {
+            res.clearCookie(this.COOKIE_NAME, {
                 httpOnly: true,
                 secure: process.env.NODE_ENV === 'production',
                 sameSite: 'lax',
@@ -493,11 +503,11 @@ exports.AuthSDKController = class AuthSDKController {
         }
     }
     async logout(req, res) {
-        const sessionId = req.cookies['x-session'];
+        const sessionId = req.cookies[this.COOKIE_NAME];
         if (sessionId) {
             await this.authService.logout(sessionId);
         }
-        res.clearCookie('x-session', {
+        res.clearCookie(this.COOKIE_NAME, {
             httpOnly: true,
             secure: process.env.NODE_ENV === 'production',
             sameSite: 'lax',

package/dist/types/controllers/auth.controller.d.ts

@@ -6,6 +6,7 @@ import { AuthService } from "../services/auth.service";
  */
 export declare class AuthSDKController {
     private readonly authService;
+    private readonly COOKIE_NAME;
     constructor(authService: AuthService);
     login(req: Request, res: Response): Promise<void>;
     callback(req: Request, res: Response): Promise<void>;

package/dist/types/types/auth-config.interface.d.ts

@@ -9,4 +9,6 @@ export interface IAuthConfig {
     uiBaseUrl?: string;
     cookieDomain?: string;
     isProduction: boolean;
+    iss?: string;
+    aud?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hemia/auth-sdk",
-  "version": "0.0.11",
+  "version": "0.0.13",
   "description": "Hemia SDK for authentication",
   "main": "dist/hemia-auth-sdk.js",
   "module": "dist/hemia-auth-sdk.esm.js",
@@ -16,8 +16,8 @@
   },
   "devDependencies": {
     "@hemia/cache-manager": "^0.0.5",
-    "@hemia/common": "^0.0.12",
-    "@hemia/jwt-manager": "^0.0.4",
+    "@hemia/common": "^0.0.14",
+    "@hemia/jwt-manager": "^0.0.6",
     "@hemia/network-services": "^0.0.3",
     "@rollup/plugin-commonjs": "^26.0.1",
     "@rollup/plugin-json": "^6.1.0",
@@ -44,8 +44,8 @@
   ],
   "peerDependencies": {
     "@hemia/cache-manager": "^0.0.5",
-    "@hemia/common": "^0.0.10",
-    "@hemia/jwt-manager": "^0.0.4",
+    "@hemia/common": "^0.0.14",
+    "@hemia/jwt-manager": "^0.0.6",
     "@hemia/network-services": "^0.0.3",
     "inversify": "^7.11.0",
     "reflect-metadata": "^0.2.2"