@kravc/dos 1.10.0 → 1.10.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kravc/dos",
-  "version": "1.10.0",
+  "version": "1.10.2",
   "description": "Convention-based, easy-to-use library for building API-driven serverless services.",
   "keywords": [
     "Service",

package/src/index.d.ts

@@ -1,6 +1,4 @@
 
-export declare function getOrFail(object: Record<string, any>, path: string): any;
-
 export declare type SortOrder = 'asc' | 'desc';
 export declare type Context = Record<string, any>;
 export declare type QueryMap = Record<string, any>;
@@ -124,3 +122,15 @@ export declare class Document<T> {
   hasAttributeChanged(attributePath: string): boolean;
   toJSON(): Record<string, any>;
 }
+
+export declare function getOrFail(
+  object: Record<string, any>,
+  path: string
+): any;
+
+export declare function verifyToken(
+  context: Context,
+  token: string,
+  publicKey: string,
+  algorithm: string,
+): Promise<[ boolean, string | undefined ]>;

package/src/index.js

@@ -15,6 +15,7 @@ module.exports = {
   handler:             require('./helpers/handler'),
   security:            require('./security'),
   getOrFail:           require('./helpers/getOrFail'),
+  verifyToken:         require('./security/verifyToken'),
   JwtAuthorization:    require('./security/JwtAuthorization'),
   SystemAuthorization: require('./security/SystemAuthorization')
 }

package/src/security/JwtAuthorization.js

@@ -53,8 +53,9 @@ class JwtAuthorization {
     publicKey,
     cookieName,
     algorithm = 'RS256',
-    tokenVerificationMethod  = verifyToken,
-    accessVerificationMethod = () => [ true ]
+    normalizePayload = payload => payload,
+    tokenVerificationMethod = verifyToken,
+    accessVerificationMethod = () => [ true ],
   }) {
     this._name       = name
     this._publicKey  = publicKey
@@ -63,6 +64,7 @@ class JwtAuthorization {
 
     this._verifyToken  = tokenVerificationMethod
     this._verifyAccess = accessVerificationMethod
+    this._normalizePayload = normalizePayload
   }
 
   async verify(context) {
@@ -111,7 +113,9 @@ class JwtAuthorization {
       return { isAuthorized: false, error }
     }
 
-    return { isAuthorized: true, ...payload }
+    const normalizedPayload = this._normalizePayload(payload)
+
+    return { isAuthorized: true, ...normalizedPayload }
   }
 }