@hybrd/xmtp 1.3.0 → 1.3.2

package/dist/index.js

@@ -3271,23 +3271,23 @@ function getValidatedPayload(c) {
   }
   return validateXMTPToolsToken(token);
 }
-var JWT_SECRET = (() => {
-  const secret = process.env.XMTP_JWT_SECRET;
+function getJwtSecret() {
+  const secret = process.env.XMTP_ENCRYPTION_KEY;
   const nodeEnv = process.env.NODE_ENV || "development";
   if (nodeEnv === "production" && !secret) {
     throw new Error(
-      "XMTP_JWT_SECRET environment variable is required in production. Generate a secure random secret for JWT token signing."
+      "XMTP_ENCRYPTION_KEY environment variable is required in production. Generate a secure random secret for JWT token signing."
     );
   }
   if (!secret) {
     console.warn(
-      "\u26A0\uFE0F  [SECURITY] Using fallback JWT secret for development. Set XMTP_JWT_SECRET environment variable for production."
+      "\u26A0\uFE0F  [SECURITY] Using fallback JWT secret for development. Set XMTP_ENCRYPTION_KEY environment variable for production."
     );
     return "fallback-secret-for-dev-only";
   }
   return secret;
-})();
-var API_KEY = (() => {
+}
+function getApiKey() {
   const apiKey = process.env.XMTP_API_KEY;
   const nodeEnv = process.env.NODE_ENV || "development";
   if (nodeEnv === "production" && !apiKey) {
@@ -3302,7 +3302,7 @@ var API_KEY = (() => {
     return "fallback-api-key-for-dev-only";
   }
   return apiKey;
-})();
+}
 var JWT_EXPIRY = 5 * 60;
 function generateXMTPToolsToken(payload) {
   const now = Math.floor(Date.now() / 1e3);
@@ -3311,12 +3311,12 @@ function generateXMTPToolsToken(payload) {
     issued: now,
     expires: now + JWT_EXPIRY
   };
-  return jwt.sign(fullPayload, JWT_SECRET, {
+  return jwt.sign(fullPayload, getJwtSecret(), {
     expiresIn: JWT_EXPIRY
   });
 }
 function validateXMTPToolsToken(token) {
-  if (token === API_KEY) {
+  if (token === getApiKey()) {
     console.log("\u{1F511} [Auth] Using API key authentication");
     const now = Math.floor(Date.now() / 1e3);
     return {
@@ -3330,7 +3330,7 @@ function validateXMTPToolsToken(token) {
     };
   }
   try {
-    const decoded = jwt.verify(token, JWT_SECRET);
+    const decoded = jwt.verify(token, getJwtSecret());
     console.log("\u{1F511} [Auth] Using JWT token authentication");
     const now = Math.floor(Date.now() / 1e3);
     if (decoded.expires < now) {