@meistrari/data-token 0.0.9 → 0.0.11

package/dist/adapters/hono.d.ts

@@ -23,4 +23,4 @@ export type DataTokenContext = {
  * app.get('/', c => c.json({ data: c.get('authData') }))
  * ```
  */
-export declare function createDataTokenMiddleware<Env extends DataTokenContext>(url: string, skipOnError?: boolean, getToken?: (c: Context<Env>) => string): import("hono").MiddlewareHandler<Env, string, {}>;
+export declare function createDataTokenMiddleware<Env extends DataTokenContext>(url: string | ((c: Context<Env>) => string), skipOnError?: boolean, getToken?: (c: Context<Env>) => string): import("hono").MiddlewareHandler<Env, string, {}>;

package/dist/adapters/hono.js

@@ -20,7 +20,8 @@ import { getValidator } from '..';
  */
 export function createDataTokenMiddleware(url, skipOnError = false, getToken = c => c.req.header('x-data-token') ?? '') {
     return createMiddleware(async (c, next) => {
-        const validator = getValidator(url);
+        const jwksUrl = typeof url === 'function' ? url(c) : url;
+        const validator = getValidator(jwksUrl);
         const token = getToken(c);
         const data = await validator(token).catch(() => {
             if (skipOnError) {

package/dist/index.js

@@ -1,9 +1,12 @@
-import { createRemoteJWKSet, jwtVerify } from 'jose';
+import { ExponentialBackoff, handleType, retry } from 'cockatiel';
+import { createRemoteJWKSet, errors, jwtVerify } from 'jose';
 import { DataToken } from './types';
+const retryJWKS = retry(handleType(errors.JWKSTimeout)
+    .orWhen(err => err.message.includes('ECONNRESET')), { maxAttempts: 3, backoff: new ExponentialBackoff() });
 export function getValidator(jwksUrl, { algorithms } = { algorithms: ['RS256'] }) {
-    const JWKS = createRemoteJWKSet(new URL(jwksUrl));
+    const JWKS = createRemoteJWKSet(new URL(jwksUrl), { cacheMaxAge: 0, headers: { 'cache-control': 'no-cache', 'pragma': 'no-cache' } });
     return async (token) => {
-        const { payload } = await jwtVerify(token, JWKS, { algorithms });
+        const { payload } = await retryJWKS.execute(async () => jwtVerify(token, JWKS, { algorithms }));
         return DataToken.parse(payload);
     };
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/data-token",
   "type": "module",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "description": "Internal library to verify and decode the API Gateway data token",
   "author": "Roz <roz@meistrari.com>",
   "license": "UNLICENSED",
@@ -28,6 +28,7 @@
     "prepack": "bun run build"
   },
   "dependencies": {
+    "cockatiel": "^3.2.1",
     "jose": "^5.8.0",
     "zod": "^3.23.8"
   },