@nitrotool/jwt 0.0.4

package/dist/h3.mjs

@@ -0,0 +1,15 @@
+import { getRequestHeader, getQuery } from 'h3';
+import { UnauthenticatedError } from '@nitrotool/errors';
+
+const extractBearerToken = (event) => getRequestHeader(event, "Authorization")?.replace("Bearer ", "") || void 0;
+const extractQueryToken = (event) => getQuery(event)?.token || void 0;
+const extractApiToken = (event) => extractBearerToken(event) || extractQueryToken(event);
+const requireApiToken = (event) => {
+  const token = extractApiToken(event);
+  if (!token) {
+    throw UnauthenticatedError();
+  }
+  return token;
+};
+
+export { extractApiToken, extractBearerToken, extractQueryToken, requireApiToken };

package/dist/index.mjs

@@ -0,0 +1,5 @@
+export { extractApiToken, extractBearerToken, extractQueryToken, requireApiToken } from './h3.mjs';
+export { decodeJwt, decodeJwtRaw, encodeJwt, encodeJwtRaw, verifyJwt, verifyJwtRaw } from './jwt.mjs';
+import 'h3';
+import '@nitrotool/errors';
+import '@tsndr/cloudflare-worker-jwt';

package/dist/jwt.mjs

@@ -0,0 +1,53 @@
+import jwt from '@tsndr/cloudflare-worker-jwt';
+import { createError } from 'h3';
+
+const encodeJwtRaw = async (payload = {}, secret, ttl = 60) => {
+  return await jwt.sign(
+    {
+      exp: Date.now() / 1e3 + ttl,
+      ...payload
+    },
+    secret
+  );
+};
+const encodeJwt = async (payload = {}) => {
+  const secret = (
+    //@ts-expect-error Expected.
+    typeof useRuntimeConfig === "function" ? useRuntimeConfig()?.jwtSecret : ""
+  );
+  return encodeJwtRaw(payload, secret);
+};
+const verifyJwtRaw = async (token, secret) => {
+  return new Promise(async (resolve) => {
+    if (await jwt.verify(token, secret, { throwError: false })) {
+      return resolve(true);
+    }
+    return resolve(false);
+  });
+};
+const verifyJwt = async (token) => {
+  const secret = (
+    //@ts-expect-error Expected.
+    typeof useRuntimeConfig === "function" ? useRuntimeConfig()?.jwtSecret : ""
+  );
+  return verifyJwtRaw(token, secret);
+};
+const decodeJwtRaw = async (token, secret, { verify } = { verify: true }) => {
+  if (!secret && verify) {
+    throw new Error("Cannot check signature without secret.");
+  }
+  if (secret && verify && !await verifyJwtRaw(token, secret)) {
+    throw createError(`Invalid JWT token.`);
+  }
+  const { payload } = jwt.decode(token);
+  return payload;
+};
+const decodeJwt = async (token, { verify } = { verify: true }) => {
+  if (verify && !await verifyJwt(token)) {
+    throw createError(`Invalid JWT token.`);
+  }
+  const { payload } = jwt.decode(token);
+  return payload;
+};
+
+export { decodeJwt, decodeJwtRaw, encodeJwt, encodeJwtRaw, verifyJwt, verifyJwtRaw };

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@nitrotool/jwt",
+  "version": "0.0.4",
+  "main": "dist/index.mjs",
+  "type": "module",
+  "exports": {
+    ".": "./dist/index.mjs",
+    "./jwt": "./dist/jwt.mjs",
+    "./h3": "./dist/h3.mjs"
+  },
+  "dependencies": {
+    "@tsndr/cloudflare-worker-jwt": "^3.2.0",
+    "@nitrotool/errors": "0.0.4"
+  },
+  "peerDependencies": {
+    "h3": "^1.15.3"
+  },
+  "devDependencies": {
+    "unbuild": "^3.5.0"
+  },
+  "scripts": {
+    "build": "unbuild ."
+  }
+}

package/src/h3.ts

@@ -0,0 +1,24 @@
+import {
+    type H3Event,
+    getRequestHeader,
+    getQuery,
+} from 'h3';
+import {UnauthenticatedError} from "@nitrotool/errors";
+
+export const extractBearerToken = (event: H3Event) =>
+    getRequestHeader(event, 'Authorization')?.replace('Bearer ', '') || undefined;
+
+export const extractQueryToken = (event: H3Event): string | undefined =>
+    getQuery<{ token: string }>(event)?.token || undefined;
+
+export const extractApiToken = (event: H3Event): string | undefined =>
+    extractBearerToken(event) || extractQueryToken(event);
+
+export const requireApiToken = (event: H3Event) => {
+    const token = extractApiToken(event);
+    if (!token) {
+        throw UnauthenticatedError();
+    }
+
+    return token;
+}

package/src/index.ts

@@ -0,0 +1,4 @@
+// @ts-ignore
+export * from './h3';
+// @ts-ignore
+export * from './jwt';

package/src/jwt.ts

@@ -0,0 +1,79 @@
+import jwt from '@tsndr/cloudflare-worker-jwt';
+import { createError } from 'h3';
+
+export const encodeJwtRaw = async <
+  T extends Record<string, any> = Record<string, any>,
+>(
+  payload: T = {} as T,
+  secret: string,
+  ttl = 60,
+): Promise<string> => {
+  return await jwt.sign(
+    {
+      exp: Date.now() / 1000 + ttl,
+      ...payload,
+    },
+    secret,
+  );
+};
+
+export const encodeJwt = async <
+  T extends Record<string, any> = Record<string, any>,
+>(
+  payload: T = {} as T,
+): Promise<string> => {
+  const secret =
+    //@ts-expect-error Expected.
+    typeof useRuntimeConfig === 'function' ? useRuntimeConfig()?.jwtSecret : '';
+  return encodeJwtRaw(payload, secret);
+};
+
+export const verifyJwtRaw = async (
+  token: string,
+  secret: string,
+): Promise<boolean> => {
+  return new Promise(async (resolve) => {
+    if (await jwt.verify(token, secret, { throwError: false })) {
+      return resolve(true);
+    }
+
+    return resolve(false);
+  });
+};
+
+export const verifyJwt = async (token: string): Promise<boolean> => {
+  const secret =
+    //@ts-expect-error Expected.
+    typeof useRuntimeConfig === 'function' ? useRuntimeConfig()?.jwtSecret : '';
+  return verifyJwtRaw(token, secret);
+};
+
+export const decodeJwtRaw = async <
+  T extends Record<string, any> = Record<string, any>,
+>(
+  token: string,
+  secret: string,
+  { verify }: { verify?: boolean } = { verify: true },
+) => {
+  if (!secret && verify) {
+    throw new Error('Cannot check signature without secret.');
+  }
+  if (secret && verify && !(await verifyJwtRaw(token, secret))) {
+    throw createError(`Invalid JWT token.`);
+  }
+  const { payload } = jwt.decode<T>(token);
+  return payload;
+};
+
+export const decodeJwt = async <
+  T extends Record<string, any> = Record<string, any>,
+>(
+  token: string,
+  { verify }: { verify?: boolean } = { verify: true },
+) => {
+  if (verify && !(await verifyJwt(token))) {
+    throw createError(`Invalid JWT token.`);
+  }
+  const { payload } = jwt.decode<T>(token);
+  return payload;
+};

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "compilerOptions": {
+    "target": "ES2017",
+    "module": "NodeNext",
+    "lib": ["ESNext", "dom"],
+    "resolveJsonModule": true
+  }
+}