@kurdel/auth 0.1.0-beta.4 → 0.1.0-beta.6

package/lib/strategies/jwt/jwt-service.js

@@ -2,15 +2,33 @@ import crypto from 'node:crypto';
 /**
  * ## JwtService
  *
- * Lightweight JWT (HS256) implementation with zero dependencies.
- * Provides signing, decoding and verification.
+ * Signs and verifies JSON Web Tokens using the HS256 algorithm.
+ *
+ * Responsibilities:
+ * - create signed JWT tokens
+ * - verify token integrity and registered claims
+ * - decode JWT payloads without verification when explicitly requested
+ *
+ * Guarantees:
+ * - every generated token is signed with the configured secret
+ * - verification validates the signature before returning claims
+ * - configured issuer, audience, and lifetime constraints are enforced
+ *
+ * Non-responsibilities:
+ * - user authentication
+ * - authorization
+ * - session persistence
+ * - key rotation
  */
 export class JwtService {
     constructor(opts) {
         this.opts = opts;
     }
     /**
-     * Signs a new JWT token with the configured HS256 secret.
+     * Creates and signs a JWT.
+     *
+     * Standard claims (`iat`, `exp`, `iss`, `aud`) are populated
+     * automatically from the configured options.
      */
     sign(payload) {
         const header = { alg: 'HS256', typ: 'JWT' };
@@ -29,9 +47,11 @@ export class JwtService {
         return `${encodedHeader}.${encodedPayload}.${signature}`;
     }
     /**
-     * Decodes the payload **without validating the signature**.
-     * Useful for debugging or optional preview.
-     */
+    * Decodes a JWT payload without verifying its signature.
+    *
+    * The returned payload must be treated as untrusted until
+    * {@link verify} succeeds.
+    */
     decode(token) {
         const parts = token.split('.');
         if (parts.length !== 3)
@@ -44,8 +64,18 @@ export class JwtService {
         }
     }
     /**
-     * Verifies signature + exp/nbf/iss/aud constraints.
-     * Returns the decoded payload or throws an Error.
+     * Verifies a JWT and returns its decoded payload.
+     *
+     * Validation includes:
+     * - signature
+     * - expiration (`exp`)
+     * - not-before (`nbf`)
+     * - issuer (`iss`) when configured
+     * - audience (`aud`) when configured
+     *
+     * @throws Error
+     * If the token is malformed, has an invalid signature,
+     * or violates any configured validation constraint.
      */
     verify(token) {
         const parts = token.split('.');
@@ -73,7 +103,6 @@ export class JwtService {
         }
         return payload;
     }
-    // ─────────────────────────────────────────────
     b64(str) {
         return Buffer.from(str).toString('base64url');
     }

package/lib/strategies/jwt/jwt-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-service.js","sourceRoot":"","sources":["../../../src/strategies/jwt/jwt-service.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAqCjC;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACrB,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAExD;;OAEG;IACH,IAAI,CAAC,OAAwC;QAC3C,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,MAAM,WAAW,GAAG;YAClB,GAAG,OAAO;YACV,GAAG;YACH,GAAG;YACH,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;SACV,CAAC;QAEhB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC,CAAC;QAEzE,OAAO,GAAG,aAAa,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;IAC3D,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAe,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,gDAAgD;IAExC,GAAG,CAAC,GAAW;QACrB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,OAAO,MAAM;aACV,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACtC,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"jwt-service.js","sourceRoot":"","sources":["../../../src/strategies/jwt/jwt-service.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAqEjC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,UAAU;IACrB,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAExD;;;;;OAKG;IACH,IAAI,CAAC,OAAwC;QAC3C,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,MAAM,WAAW,GAAG;YAClB,GAAG,OAAO;YACV,GAAG;YACH,GAAG;YACH,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;SACV,CAAC;QAEhB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC,CAAC;QAEzE,OAAO,GAAG,aAAa,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;IAC3D,CAAC;IAEA;;;;;MAKE;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAe,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,GAAG,CAAC,GAAW;QACrB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,OAAO,MAAM;aACV,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACtC,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF"}

package/lib/strategies/jwt/jwt-strategy-provider.d.ts

@@ -0,0 +1,18 @@
+import type { AuthStrategyProvider } from '../../domain/auth-strategy-provider.js';
+import type { JwtSessionRepository } from '../../repositories/jwt/jwt-session-repository.js';
+import { type JwtStrategyOptions } from './jwt-strategy.js';
+/** Declarative options for the built-in JWT strategy provider. */
+export type JwtStrategyProviderOptions = Omit<JwtStrategyOptions, 'sessions'> & {
+    /**
+     * Enables server-side session validation or supplies a custom repository.
+     * Set to `true` to resolve the registered repository from the container.
+     */
+    sessions?: boolean | JwtSessionRepository;
+};
+/**
+ * Creates a DI-backed JWT authentication strategy provider.
+ *
+ * The application only declares transport and session behavior. Framework
+ * services and the current-user repository are resolved from the container.
+ */
+export declare function jwtStrategy(options?: JwtStrategyProviderOptions): AuthStrategyProvider;

package/lib/strategies/jwt/jwt-strategy-provider.js

@@ -0,0 +1,27 @@
+import { AUTH_TOKENS } from '../../tokens.js';
+import { JwtStrategy } from './jwt-strategy.js';
+/**
+ * Creates a DI-backed JWT authentication strategy provider.
+ *
+ * The application only declares transport and session behavior. Framework
+ * services and the current-user repository are resolved from the container.
+ */
+export function jwtStrategy(options = {}) {
+    return {
+        name: 'jwt',
+        useFactory(container) {
+            const { sessions, ...strategyOptions } = options;
+            return new JwtStrategy(container.get(AUTH_TOKENS.JwtService), container.get(AUTH_TOKENS.UserRepository), {
+                ...strategyOptions,
+                ...(sessions
+                    ? {
+                        sessions: sessions === true
+                            ? container.get(AUTH_TOKENS.JwtSessionRepository)
+                            : sessions,
+                    }
+                    : {}),
+            });
+        },
+    };
+}
+//# sourceMappingURL=jwt-strategy-provider.js.map

package/lib/strategies/jwt/jwt-strategy-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-strategy-provider.js","sourceRoot":"","sources":["../../../src/strategies/jwt/jwt-strategy-provider.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA2B,MAAM,mBAAmB,CAAC;AAWzE;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,UAAsC,EAAE;IAExC,OAAO;QACL,IAAI,EAAE,KAAK;QACX,UAAU,CAAC,SAAoB;YAC7B,MAAM,EAAE,QAAQ,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC;YACjD,OAAO,IAAI,WAAW,CACpB,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,EACrC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,EACzC;gBACE,GAAG,eAAe;gBAClB,GAAG,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE,QAAQ,EAAE,QAAQ,KAAK,IAAI;4BACzB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,oBAAoB,CAAC;4BACjD,CAAC,CAAC,QAAQ;qBACb;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/strategies/jwt/jwt-strategy.d.ts

@@ -5,19 +5,51 @@ import type { JwtService } from '../../strategies/index.js';
 /**
  * ## JwtStrategyOptions
  *
- * Configures how the strategy extracts and validates JWT tokens.
+ * Configures JWT authentication.
  */
 export interface JwtStrategyOptions {
+    /**
+     * Request header containing the JWT.
+     *
+     * @default "authorization"
+     */
     header?: string;
+    /**
+     * Authentication scheme expected in the header.
+     *
+     * @default "Bearer"
+     */
     prefix?: string;
-    /** When configured, every token must reference an active session through `jti`. */
+    /**
+     * Optional repository for server-side session validation.
+     *
+     * When configured, every JWT must reference an active session
+     * through its `jti` claim.
+     */
     sessions?: JwtSessionRepository;
 }
 /**
  * ## JwtStrategy
  *
- * Authentication strategy that validates a JWT token from
- * the HttpRequest and returns an AuthUser.
+ * Authenticates requests using JSON Web Tokens.
+ *
+ * Responsibilities:
+ * - extract a JWT from the configured request header
+ * - verify the token signature and claims
+ * - optionally validate the referenced server-side session
+ * - resolve the current authenticated user
+ *
+ * Guarantees:
+ * - invalid tokens never authenticate
+ * - revoked or expired sessions never authenticate
+ * - inactive or missing users never authenticate
+ * - verified JWT claims are exposed through the authentication result
+ *
+ * Non-responsibilities:
+ * - JWT creation
+ * - session persistence
+ * - authorization policy evaluation
+ * - user management
  */
 export declare class JwtStrategy implements AuthStrategy {
     private readonly service;
@@ -26,5 +58,12 @@ export declare class JwtStrategy implements AuthStrategy {
     private readonly prefix;
     private readonly sessions?;
     constructor(service: JwtService, users: AuthUserRepository, opts?: JwtStrategyOptions);
+    /**
+     * Authenticates a request using the configured JWT header.
+     *
+     * Returns `null` when the token is missing, malformed, invalid,
+     * references a revoked or expired session, or its associated
+     * user cannot be authenticated.
+     */
     authenticate(req: HttpRequest): Promise<AuthenticationResult | null>;
 }

package/lib/strategies/jwt/jwt-strategy.js

@@ -1,8 +1,25 @@
 /**
  * ## JwtStrategy
  *
- * Authentication strategy that validates a JWT token from
- * the HttpRequest and returns an AuthUser.
+ * Authenticates requests using JSON Web Tokens.
+ *
+ * Responsibilities:
+ * - extract a JWT from the configured request header
+ * - verify the token signature and claims
+ * - optionally validate the referenced server-side session
+ * - resolve the current authenticated user
+ *
+ * Guarantees:
+ * - invalid tokens never authenticate
+ * - revoked or expired sessions never authenticate
+ * - inactive or missing users never authenticate
+ * - verified JWT claims are exposed through the authentication result
+ *
+ * Non-responsibilities:
+ * - JWT creation
+ * - session persistence
+ * - authorization policy evaluation
+ * - user management
  */
 export class JwtStrategy {
     constructor(service, users, opts = {}) {
@@ -12,6 +29,13 @@ export class JwtStrategy {
         this.prefix = (opts.prefix ?? 'Bearer').toLowerCase();
         this.sessions = opts.sessions;
     }
+    /**
+     * Authenticates a request using the configured JWT header.
+     *
+     * Returns `null` when the token is missing, malformed, invalid,
+     * references a revoked or expired session, or its associated
+     * user cannot be authenticated.
+     */
     async authenticate(req) {
         const raw = req.headers?.[this.header];
         if (!raw)

package/lib/strategies/jwt/jwt-strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-strategy.js","sourceRoot":"","sources":["../../../src/strategies/jwt/jwt-strategy.ts"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IAKtB,YACmB,OAAmB,EACnB,KAAyB,EAC1C,OAA2B,EAAE;QAFZ,YAAO,GAAP,OAAO,CAAY;QACnB,UAAK,GAAL,KAAK,CAAoB;QAG1C,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAgB;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAExD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAE9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;wBAAE,OAAO,IAAI,CAAC;gBAC1E,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,OAAO;gBACL,IAAI;gBACJ,UAAU,EAAE;oBACV,IAAI,EAAE,KAAK;oBACX,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE;gBACD,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"jwt-strategy.js","sourceRoot":"","sources":["../../../src/strategies/jwt/jwt-strategy.ts"],"names":[],"mappings":"AAmCA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,WAAW;IAKtB,YACmB,OAAmB,EACnB,KAAyB,EAC1C,OAA2B,EAAE;QAFZ,YAAO,GAAP,OAAO,CAAY;QACnB,UAAK,GAAL,KAAK,CAAoB;QAG1C,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,GAAgB;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAExD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAE9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;wBAAE,OAAO,IAAI,CAAC;gBAC1E,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,OAAO;gBACL,IAAI;gBACJ,UAAU,EAAE;oBACV,IAAI,EAAE,KAAK;oBACX,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE;gBACD,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kurdel/auth",
-  "version": "0.1.0-beta.4",
+  "version": "0.1.0-beta.6",
   "description": "Authentication and authorization primitives for Kurdel applications",
   "type": "module",
   "exports": {
@@ -49,8 +49,8 @@
     "tsc-alias": "^1.8.16"
   },
   "dependencies": {
-    "@kurdel/common": "0.1.0-beta.4",
-    "@kurdel/core": "0.1.0-beta.4",
-    "@kurdel/ioc": "0.1.0-beta.4"
+    "@kurdel/common": "0.1.0-beta.6",
+    "@kurdel/core": "0.1.0-beta.6",
+    "@kurdel/ioc": "0.1.0-beta.6"
   }
 }