@nitra/cf-security 4.4.0 → 4.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nitra/cf-security",
-  "version": "4.4.0",
+  "version": "4.5.1",
   "description": "check header in serverless",
   "type": "module",
   "types": "./types/index.d.ts",

package/src/jwt-c.js

@@ -34,9 +34,12 @@ export const runSecurityCookie = async (req, allowedRoles) => {
     if (c.__session) {
       // ігноруючи expired
       const token = await verify(c.__session, { ignoreExpiration: true })
-      return token.body
+      return { raw: c.__session, parsed: token.body }
     } else {
-      return { name: 'dev', 'https://hasura.io/jwt/claims': { 'x-hasura-allowed-roles': allowedRoles } }
+      return {
+        raw: 0,
+        parsed: { name: 'dev', 'https://hasura.io/jwt/claims': { 'x-hasura-allowed-roles': allowedRoles } }
+      }
     }
   }
 

package/src/jwt.js

@@ -11,7 +11,7 @@ import { intersection } from './utils/intersection.js'
  */
 export default async (req, allowedRoles) => {
   const { parsed } = await runSecurityHeader(req, allowedRoles)
-  return parsed.body
+  return parsed
 }
 
 /**
@@ -38,9 +38,13 @@ export const runSecurityHeader = async (req, allowedRoles) => {
         throw new Error(`[verification] unallowed roles ${allowedRoles}`)
       }
 
-      return token.body
+      const authHeaders = req.headers.authorization.split(' ')
+      return { raw: authHeaders[1], parsed: token.body }
     } else {
-      return JSON.stringify({ name: 'dev', 'https://hasura.io/jwt/claims': { 'x-hasura-allowed-roles': allowedRoles } })
+      return {
+        raw: 0,
+        parsed: { name: 'dev', 'https://hasura.io/jwt/claims': { 'x-hasura-allowed-roles': allowedRoles } }
+      }
     }
   }