@orsetra/shared-auth 1.1.4 → 1.1.6

package/ZitadelProvider.tsx

@@ -44,8 +44,9 @@ export function ZitadelProvider({ children, config, renderSessionExpiredAction }
         ZitadelAuthService.onSessionExpired = () => setSessionExpired(true)
         setIsConfigured(true)
 
-        const currentUser = await ZitadelAuthService.getUser()
-        setUser(currentUser?.expired ? null : currentUser)
+        const isAuthenticated = await ZitadelAuthService.isAuthenticated()
+        const currentUser = isAuthenticated ? await ZitadelAuthService.getUser() : null
+        setUser(currentUser)
       } catch (error) {
         console.error("Failed to configure Zitadel auth:", error)
       } finally {

package/index.ts

@@ -2,7 +2,8 @@
 export { ZitadelProvider, useZitadel } from './ZitadelProvider'
 export type { ZitadelProviderProps } from './ZitadelProvider'
 export { ProtectedRoute } from './ProtectedRoute'
-export { ZitadelAuthService } from './services/zitadel.auth.service'
+export { ZitadelAuthService, decodeJwt, isJwtExpired } from './services/zitadel.auth.service'
+export type { JwtPayload } from './services/zitadel.auth.service'
 export { createAuthConfig } from './config/zitadel.config'
 export type { ZitadelConfig } from './config/zitadel.config'
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orsetra/shared-auth",
-  "version": "1.1.4",
+  "version": "1.1.6",
   "description": "Shared authentication utilities for Orsetra platform using Zitadel",
   "main": "./index.ts",
   "types": "./index.ts",

package/services/zitadel.auth.service.ts

@@ -5,6 +5,28 @@ import { ZitadelConfig, createAuthConfig } from '../config/zitadel.config';
 
 export type { ZitadelConfig };
 
+export interface JwtPayload {
+  exp?: number
+  iat?: number
+  sub?: string
+  [key: string]: unknown
+}
+
+export function decodeJwt(token: string): JwtPayload {
+  const payload = token.split('.')[1]
+  if (!payload) throw new Error('Invalid JWT: missing payload segment')
+  return JSON.parse(atob(payload)) as JwtPayload
+}
+
+export function isJwtExpired(token: string): boolean {
+  try {
+    const { exp } = decodeJwt(token)
+    return typeof exp !== 'number' || exp <= Math.floor(Date.now() / 1000)
+  } catch {
+    return true
+  }
+}
+
 export interface ZitadelAuth {
   authorize(): Promise<void>;
   signout(): Promise<void>;
@@ -148,7 +170,8 @@ export class ZitadelAuthService {
 
   static async isAuthenticated(): Promise<boolean> {
     const user = await this.getUser();
-    return user !== null && !user.expired;
+    if (!user?.access_token) return false;
+    return !isJwtExpired(user.access_token);
   }
 
   static async getTokenRemainingTime(): Promise<number> {