@powersync/service-core 0.0.0-dev-20240620165206

package/dist/routes/auth.js

@@ -0,0 +1,182 @@
+import * as jose from 'jose';
+export function endpoint(req) {
+    const protocol = req.headers['x-forwarded-proto'] ?? req.protocol;
+    const host = req.hostname;
+    return `${protocol}://${host}`;
+}
+function devAudience(req) {
+    return `${endpoint(req)}/dev`;
+}
+/**
+ * @deprecated
+ *
+ * Will be replaced by temporary tokens issued by PowerSync Management service.
+ */
+export async function issueDevToken(req, user_id, config) {
+    const iss = devAudience(req);
+    const aud = devAudience(req);
+    const key = config.dev.dev_key;
+    if (key == null) {
+        throw new Error('Auth disabled');
+    }
+    return await new jose.SignJWT({})
+        .setProtectedHeader({ alg: key.source.alg, kid: key.kid })
+        .setSubject(user_id)
+        .setIssuedAt()
+        .setIssuer(iss)
+        .setAudience(aud)
+        .setExpirationTime('30d')
+        .sign(key.key);
+}
+/** @deprecated */
+export async function issueLegacyDevToken(req, user_id, config) {
+    const iss = devAudience(req);
+    const aud = config.jwt_audiences[0];
+    const key = config.dev.dev_key;
+    if (key == null || aud == null) {
+        throw new Error('Auth disabled');
+    }
+    return await new jose.SignJWT({})
+        .setProtectedHeader({ alg: key.source.alg, kid: key.kid })
+        .setSubject(user_id)
+        .setIssuedAt()
+        .setIssuer(iss)
+        .setAudience(aud)
+        .setExpirationTime('60m')
+        .sign(key.key);
+}
+export async function issuePowerSyncToken(req, user_id, config) {
+    const iss = devAudience(req);
+    const aud = config.jwt_audiences[0];
+    const key = config.dev.dev_key;
+    if (key == null || aud == null) {
+        throw new Error('Auth disabled');
+    }
+    const jwt = await new jose.SignJWT({})
+        .setProtectedHeader({ alg: key.source.alg, kid: key.kid })
+        .setSubject(user_id)
+        .setIssuedAt()
+        .setIssuer(iss)
+        .setAudience(aud)
+        .setExpirationTime('5m')
+        .sign(key.key);
+    return jwt;
+}
+export function getTokenFromHeader(authHeader = '') {
+    const tokenMatch = /^(Token|Bearer) (\S+)$/.exec(authHeader);
+    if (!tokenMatch) {
+        return null;
+    }
+    const token = tokenMatch[2];
+    return token ?? null;
+}
+export const authUser = async (payload) => {
+    return authorizeUser(payload.context, payload.request.headers.authorization);
+};
+export async function authorizeUser(context, authHeader = '') {
+    const token = getTokenFromHeader(authHeader);
+    if (token == null) {
+        return {
+            authorized: false,
+            errors: ['Authentication required']
+        };
+    }
+    const { context: tokenContext, errors } = await generateContext(context.system, token);
+    if (!tokenContext) {
+        return {
+            authorized: false,
+            errors
+        };
+    }
+    Object.assign(context, tokenContext);
+    return { authorized: true };
+}
+export async function generateContext(system, token) {
+    const config = system.config;
+    let tokenPayload;
+    try {
+        const maxAge = config.token_max_expiration;
+        tokenPayload = await system.client_keystore.verifyJwt(token, {
+            defaultAudiences: config.jwt_audiences,
+            maxAge: maxAge
+        });
+        return {
+            context: {
+                user_id: tokenPayload.sub,
+                token_payload: tokenPayload
+            }
+        };
+    }
+    catch (err) {
+        return {
+            context: null,
+            errors: [err.message]
+        };
+    }
+}
+/**
+ * @deprecated
+ */
+export const authDevUser = async (payload) => {
+    const context = payload.context;
+    const token = getTokenFromHeader(payload.request.headers.authorization);
+    if (!context.system.config.dev.demo_auth) {
+        return {
+            authorized: false,
+            errors: ['Authentication disabled']
+        };
+    }
+    if (token == null) {
+        return {
+            authorized: false,
+            errors: ['Authentication required']
+        };
+    }
+    // Different from the configured audience.
+    // Should also not be changed by keys
+    const audience = [devAudience(payload.request)];
+    let tokenPayload;
+    try {
+        tokenPayload = await context.system.dev_client_keystore.verifyJwt(token, {
+            defaultAudiences: audience,
+            maxAge: '31d'
+        });
+    }
+    catch (err) {
+        return {
+            authorized: false,
+            errors: [err.message]
+        };
+    }
+    payload.context.user_id = tokenPayload.sub;
+    return { authorized: true };
+};
+export const authApi = (payload) => {
+    const context = payload.context;
+    const api_keys = context.system.config.api_tokens;
+    if (api_keys.length == 0) {
+        return {
+            authorized: false,
+            errors: ['Authentication disabled']
+        };
+    }
+    const auth = payload.request.headers.authorization ?? '';
+    const tokenMatch = /^(Token|Bearer) (\S+)$/.exec(auth);
+    if (!tokenMatch) {
+        return {
+            authorized: false,
+            errors: ['Authentication required']
+        };
+    }
+    const token = tokenMatch[2];
+    if (api_keys.includes(token)) {
+        return { authorized: true };
+    }
+    else {
+        return {
+            authorized: false,
+            errors: ['Authentication failed']
+        };
+    }
+};
+//# sourceMappingURL=auth.js.map

package/dist/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAO7B,MAAM,UAAU,QAAQ,CAAC,GAAuB;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,OAAO,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAuB,EAAE,OAAe,EAAE,MAAoC;IAChH,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,EAAE;QACf,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;KAClC;IAED,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;SAC1D,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,EAAE;SACb,SAAS,CAAC,GAAG,CAAC;SACd,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,KAAK,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,kBAAkB;AAClB,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAuB,EACvB,OAAe,EACf,MAAoC;IAEpC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE;QAC9B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;KAClC;IAED,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;SAC1D,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,EAAE;SACb,SAAS,CAAC,GAAG,CAAC;SACd,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,KAAK,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAuB,EACvB,OAAe,EACf,MAAoC;IAEpC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE;QAC9B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;KAClC;IAED,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SACnC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;SAC1D,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,EAAE;SACb,SAAS,CAAC,GAAG,CAAC;SACd,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,IAAI,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,aAAqB,EAAE;IACxD,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,EAAE;QACf,OAAO,IAAI,CAAC;KACb;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAsC,EAAE,EAAE;IACvE,OAAO,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAuB,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,aAAqB,EAAE;IAC3E,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,KAAK,IAAI,IAAI,EAAE;QACjB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;KACH;IAED,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEvF,IAAI,CAAC,YAAY,EAAE;QACjB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM;SACP,CAAC;KACH;IAED,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAA2B,EAAE,KAAa;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,IAAI,YAA6B,CAAC;IAClC,IAAI;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC;QAC3C,YAAY,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE;YAC3D,gBAAgB,EAAE,MAAM,CAAC,aAAa;YACtC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,YAAY,CAAC,GAAG;gBACzB,aAAa,EAAE,YAAY;aAC5B;SACF,CAAC;KACH;IAAC,OAAO,GAAG,EAAE;QACZ,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;SACtB,CAAC;KACH;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAsC,EAAE,EAAE;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAuB,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;QACxC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;KACH;IACD,IAAI,KAAK,IAAI,IAAI,EAAE;QACjB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;KACH;IAED,0CAA0C;IAC1C,qCAAqC;IACrC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD,IAAI,YAA6B,CAAC;IAClC,IAAI;QACF,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,EAAE;YACvE,gBAAgB,EAAE,QAAQ;YAC1B,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;KACJ;IAAC,OAAO,GAAG,EAAE;QACZ,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;SACtB,CAAC;KACH;IAED,OAAO,CAAC,OAAO,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAsC,EAAE,EAAE;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE;QACxB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;KACH;IACD,MAAM,IAAI,GAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAwB,IAAI,EAAE,CAAC;IAErE,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE;QACf,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;KACH;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC5B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;KAC7B;SAAM;QACL,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,uBAAuB,CAAC;SAClC,CAAC;KACH;AACH,CAAC,CAAC"}