@oneaccount/express 0.1.0 → 0.1.1

package/dist/middleware/auth.js

@@ -69,16 +69,35 @@ function rsaPublicKeyFromJWK(jwk) {
     const pem = `-----BEGIN PUBLIC KEY-----\n${der.toString("base64").match(/.{1,64}/g)?.join("\n")}\n-----END PUBLIC KEY-----`;
     return pem;
 }
+function extractTokenFromCookies(cookieHeader, cookieName) {
+    if (!cookieHeader)
+        return null;
+    const cookies = cookieHeader.split(';').map(c => c.trim());
+    for (const cookie of cookies) {
+        const [name, ...valueParts] = cookie.split('=');
+        if (name === cookieName) {
+            return valueParts.join('=');
+        }
+    }
+    return null;
+}
 function createAuthMiddleware(config) {
     const jwksUrl = config.jwksUrl ||
         `${config.accountProUrl || "https://myaccount.one"}/.well-known/jwks.json`;
+    const cookieName = config.cookieName || "auth_token";
     return async function authMiddleware(req, res, next) {
         req.oneAccount = { user: null };
+        let token = null;
         const authHeader = req.headers.authorization;
-        if (!authHeader?.startsWith("Bearer ")) {
+        if (authHeader?.startsWith("Bearer ")) {
+            token = authHeader.substring(7);
+        }
+        else {
+            token = extractTokenFromCookies(req.headers.cookie, cookieName);
+        }
+        if (!token) {
             return next();
         }
-        const token = authHeader.substring(7);
         try {
             const decoded = jsonwebtoken_1.default.decode(token, { complete: true });
             if (!decoded) {

package/dist/types/index.d.ts

@@ -24,6 +24,7 @@ export interface OneAccountConfig {
     jwksUrl?: string;
     cacheMaxAge?: number;
     debug?: boolean;
+    cookieName?: string;
 }
 export interface StripeConnectStatus {
     hasAccount: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneaccount/express",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "OneAccount SDK for Express.js - Authentication, entitlements, and Stripe Connect",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",