@maximemrf/adonisjs-jwt 0.0.14 → 0.0.15

package/build/src/define_config.d.ts

@@ -4,4 +4,5 @@ import { JwtGuard, JwtUserProviderContract } from './jwt.js';
 export declare function jwtGuard<UserProvider extends JwtUserProviderContract<unknown>>(config: {
     provider: UserProvider;
     tokenExpiresIn: number | string;
+    useCookies?: boolean;
 }): GuardConfigProvider<(ctx: HttpContext) => JwtGuard<UserProvider>>;

package/build/src/define_config.js

@@ -3,7 +3,11 @@ export function jwtGuard(config) {
     return {
         async resolver(_, app) {
             const appKey = app.config.get('app.appKey').release();
-            const options = { secret: appKey, expiresIn: config.tokenExpiresIn };
+            const options = {
+                secret: appKey,
+                expiresIn: config.tokenExpiresIn,
+                useCookies: config.useCookies,
+            };
             return (ctx) => new JwtGuard(ctx, config.provider, options);
         },
     };

package/build/src/jwt.d.ts

@@ -38,6 +38,7 @@ export interface JwtUserProviderContract<RealUser> {
 export type JwtGuardOptions = {
     secret: string;
     expiresIn?: number | string;
+    useCookies?: boolean;
 };
 export declare class JwtGuard<UserProvider extends JwtUserProviderContract<unknown>> implements GuardContract<UserProvider[typeof symbols.PROVIDER_REAL_USER]> {
     #private;
@@ -68,7 +69,7 @@ export declare class JwtGuard<UserProvider extends JwtUserProviderContract<unkno
     /**
      * Generate a JWT token for a given user.
      */
-    generate(user: UserProvider[typeof symbols.PROVIDER_REAL_USER]): Promise<{
+    generate(user: UserProvider[typeof symbols.PROVIDER_REAL_USER]): Promise<import("@adonisjs/core/http").Response | {
         type: string;
         token: string;
         expiresIn: string | number | undefined;

package/build/src/jwt.js

@@ -37,6 +37,11 @@ export class JwtGuard {
                 expiresIn: this.#options.expiresIn,
             }
             : {});
+        if (this.#options.useCookies) {
+            return this.#ctx.response.cookie('token', token, {
+                httpOnly: true,
+            });
+        }
         return {
             type: 'bearer',
             token: token,
@@ -57,23 +62,38 @@ export class JwtGuard {
             return this.getUserOrFail();
         }
         this.authenticationAttempted = true;
+        const cookieHeader = this.#ctx.request.request.headers.cookie;
+        let token;
         /**
-         * Ensure the auth header exists
+         * If cookies are enabled, then read the token from the cookies
          */
-        const authHeader = this.#ctx.request.header('authorization');
-        if (!authHeader) {
-            throw new errors.E_UNAUTHORIZED_ACCESS('Unauthorized access', {
-                guardDriverName: this.driverName,
-            });
+        if (cookieHeader) {
+            ;
+            [, token] = cookieHeader.split('=');
         }
         /**
-         * Split the header value and read the token from it
+         * If token is missing on cookies, then try to read it from the header authorization
          */
-        const [, token] = authHeader.split('Bearer ');
         if (!token) {
-            throw new errors.E_UNAUTHORIZED_ACCESS('Unauthorized access', {
-                guardDriverName: this.driverName,
-            });
+            /**
+             * Ensure the auth header exists
+             */
+            const authHeader = this.#ctx.request.header('authorization');
+            if (!authHeader) {
+                throw new errors.E_UNAUTHORIZED_ACCESS('Unauthorized access', {
+                    guardDriverName: this.driverName,
+                });
+            }
+            /**
+             * Split the header value and read the token from it
+             */
+            ;
+            [, token] = authHeader.split('Bearer ');
+            if (!token) {
+                throw new errors.E_UNAUTHORIZED_ACCESS('Unauthorized access', {
+                    guardDriverName: this.driverName,
+                });
+            }
         }
         /**
          * Verify token
@@ -136,7 +156,7 @@ export class JwtGuard {
         const token = await this.generate(user);
         return {
             headers: {
-                authorization: `Bearer ${token.token}`,
+                authorization: `Bearer ${this.#options.useCookies ? token : token.token}`,
             },
         };
     }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@maximemrf/adonisjs-jwt",
   "description": "",
-  "version": "0.0.14",
+  "version": "0.0.15",
   "engines": {
     "node": ">=20.6.0"
   },