@loomcore/api 0.2.45 → 0.2.46

package/dist/__tests__/common-test.utils.d.ts

@@ -24,6 +24,7 @@ declare function setupTestUsers(): Promise<{
 declare function deleteTestUser(): Promise<void>;
 declare function simulateloginWithTestUser(): Promise<string>;
 declare function getAuthToken(): string;
+declare function getExpiredAuthToken(): string;
 declare function verifyToken(token: string): any;
 export declare class CategoryService extends GenericApiService<ICategory> {
     constructor(database: IDatabase);
@@ -65,6 +66,7 @@ declare const testUtils: {
     deleteMetaOrg: typeof deleteMetaOrg;
     deleteTestUser: typeof deleteTestUser;
     getAuthToken: typeof getAuthToken;
+    getExpiredAuthToken: typeof getExpiredAuthToken;
     getTestMetaOrgRefererUrl: typeof testObjectsModule.getTestMetaOrgRefererUrl;
     initialize: typeof initialize;
     setupTestConfig: typeof setupTestConfig;

package/dist/__tests__/common-test.utils.js

@@ -208,6 +208,11 @@ function getAuthToken() {
     const token = jwt.sign(userContext, JWT_SECRET, { expiresIn: 3600 });
     return `Bearer ${token}`;
 }
+function getExpiredAuthToken() {
+    const userContext = getTestMetaOrgUserContext();
+    const token = jwt.sign(userContext, JWT_SECRET, { expiresIn: -1 });
+    return `Bearer ${token}`;
+}
 function verifyToken(token) {
     return jwt.verify(token, JWT_SECRET);
 }
@@ -402,6 +407,7 @@ const testUtils = {
     deleteMetaOrg,
     deleteTestUser,
     getAuthToken,
+    getExpiredAuthToken,
     getTestMetaOrgRefererUrl,
     initialize,
     setupTestConfig,

package/dist/middleware/authorize/authenticate-request.js

@@ -16,6 +16,12 @@ export function authenticateRequest(req) {
         throw new UnauthenticatedError();
     }
     const authConfig = getAuthConfig();
-    const rawPayload = jwt.verify(token, authConfig.clientSecret);
+    let rawPayload;
+    try {
+        rawPayload = jwt.verify(token, authConfig.clientSecret);
+    }
+    catch {
+        throw new UnauthenticatedError();
+    }
     return getAuthUserContextSpec().decode(rawPayload);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loomcore/api",
-  "version": "0.2.45",
+  "version": "0.2.46",
   "private": false,
   "description": "Loom Core Api - An opinionated Node.js api using Typescript, Express, and MongoDb or PostgreSQL",
   "scripts": {