@oneaccount/express 0.2.0 → 0.2.4

package/README.md

@@ -20,7 +20,7 @@ app.use(express.json());
 // Initialize SDK
 const oa = oneAccount({
   apiKey: process.env.ONEACCOUNT_API_KEY,
-  accountProUrl: 'https://myaccount.one', // optional
+  accountProUrl: 'https://accountpro.replit.app', // optional
   debug: true, // optional - logs auth errors
 });
 
@@ -53,7 +53,7 @@ app.listen(3000);
 | Option | Type | Default | Description |
 |--------|------|---------|-------------|
 | `apiKey` | string | required | Your OneAccount API key |
-| `accountProUrl` | string | `https://myaccount.one` | OneAccount server URL |
+| `accountProUrl` | string | `https://accountpro.replit.app` | OneAccount server URL |
 | `jwksUrl` | string | auto | JWKS endpoint URL (auto-derived from accountProUrl) |
 | `debug` | boolean | `false` | Log authentication errors |
 

package/dist/client/accountPro.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AccountProClient = void 0;
 class AccountProClient {
     constructor(config) {
-        this.baseUrl = config.accountProUrl || "https://myaccount.one";
+        this.baseUrl = config.accountProUrl || "https://accountpro.replit.app";
         this.apiKey = config.apiKey;
         this.debug = config.debug || false;
     }

package/dist/index.js

@@ -12,7 +12,7 @@ function oneAccount(config) {
         throw new Error("OneAccount SDK requires an API key");
     }
     const resolvedConfig = {
-        accountProUrl: config.accountProUrl || "https://myaccount.one",
+        accountProUrl: config.accountProUrl || "https://accountpro.replit.app",
         ...config,
     };
     const authMiddleware = (0, auth_1.createAuthMiddleware)(resolvedConfig);

package/dist/middleware/auth.js

@@ -24,8 +24,12 @@ async function fetchJWKS(jwksUrl) {
     return cachedJWKS;
 }
 function rsaPublicKeyFromJWK(jwk) {
-    const n = Buffer.from(jwk.n, "base64url");
-    const e = Buffer.from(jwk.e, "base64url");
+    // Convert base64url to base64 (some Node versions don't support base64url directly)
+    const base64urlToBase64 = (str) => {
+        return str.replace(/-/g, '+').replace(/_/g, '/');
+    };
+    const n = Buffer.from(base64urlToBase64(jwk.n), "base64");
+    const e = Buffer.from(base64urlToBase64(jwk.e), "base64");
     const nLen = n.length;
     const eLen = e.length;
     const nLenBytes = nLen < 128
@@ -83,7 +87,7 @@ function extractTokenFromCookies(cookieHeader, cookieName) {
 }
 function createAuthMiddleware(config) {
     const jwksUrl = config.jwksUrl ||
-        `${config.accountProUrl || "https://myaccount.one"}/.well-known/jwks.json`;
+        `${config.accountProUrl || "https://accountpro.replit.app"}/.well-known/jwks.json`;
     const cookieName = config.cookieName || "auth_token";
     const autoSetCookie = config.autoSetCookie !== false; // Default to true
     return async function authMiddleware(req, res, next) {
@@ -135,6 +139,14 @@ function createAuthMiddleware(config) {
                 return next();
             }
             const publicKey = rsaPublicKeyFromJWK(key);
+            if (config.debug) {
+                console.log("[OneAccount] Public key generated:", {
+                    keyType: typeof publicKey,
+                    keyLength: publicKey?.length,
+                    startsWithPem: publicKey?.startsWith('-----BEGIN'),
+                    kid: key.kid
+                });
+            }
             const payload = jsonwebtoken_1.default.verify(token, publicKey, {
                 algorithms: ["RS256"],
             });

package/dist/middleware/buyerAuth.js

@@ -23,8 +23,12 @@ async function fetchJWKS(jwksUrl) {
     return cachedJWKS;
 }
 function rsaPublicKeyFromJWK(jwk) {
-    const n = Buffer.from(jwk.n, "base64url");
-    const e = Buffer.from(jwk.e, "base64url");
+    // Convert base64url to base64 (some Node versions don't support base64url directly)
+    const base64urlToBase64 = (str) => {
+        return str.replace(/-/g, '+').replace(/_/g, '/');
+    };
+    const n = Buffer.from(base64urlToBase64(jwk.n), "base64");
+    const e = Buffer.from(base64urlToBase64(jwk.e), "base64");
     const nLen = n.length;
     const eLen = e.length;
     const nLenBytes = nLen < 128
@@ -70,7 +74,7 @@ function rsaPublicKeyFromJWK(jwk) {
 }
 function createBuyerAuthMiddleware(config) {
     const jwksUrl = config.jwksUrl ||
-        `${config.accountProUrl || "https://myaccount.one"}/.well-known/jwks.json`;
+        `${config.accountProUrl || "https://accountpro.replit.app"}/.well-known/jwks.json`;
     return async function buyerAuthMiddleware(req, _res, next) {
         req.buyer = null;
         const authHeader = req.headers.authorization;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneaccount/express",
-  "version": "0.2.0",
+  "version": "0.2.4",
   "description": "OneAccount SDK for Express.js - Authentication, entitlements, and Stripe Connect",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",