@pristine-ts/jwt 4.0.3 → 4.0.5

package/dist/types/errors/invalid-jwt.error.d.ts

@@ -1,6 +1,11 @@
 import { PristineError, Request } from "@pristine-ts/common";
 /**
  * This Error is thrown when you try to decode a JWT but the token is invalid.
+ *
+ * An invalid (missing signature, malformed, wrong issuer, …) token means the caller is
+ * not authenticated, so this surfaces as a `401 UNAUTHORIZED` — a client should send the
+ * user to login. An *expired* token is handled separately as a `TokenExpiredError`
+ * (`401 TOKEN_EXPIRED`) so the client can attempt a refresh instead.
  */
 export declare class InvalidJwtError extends PristineError {
     /**

package/dist/types/errors/jwt-authorization-header.error.d.ts

@@ -1,6 +1,10 @@
 import { PristineError, Request } from "@pristine-ts/common";
 /**
  * This Error is thrown when there's you try to decode a JWT in a request but the AuthorizationHeader is missing.
+ *
+ * A missing (or malformed) Authorization header means the caller never presented a
+ * token, so this surfaces as a `401 UNAUTHORIZED` — the client should send the user to
+ * login rather than attempt a token refresh.
  */
 export declare class JwtAuthorizationHeaderError extends PristineError {
     /**

package/dist/types/guards/jwt-protected.guard.d.ts

@@ -11,6 +11,13 @@ export declare class JwtProtectedGuard implements GuardInterface {
     constructor(jwtManager: JwtManagerInterface);
     /**
      * Verifies if the JWT is valid and authorizes access if it is.
+     *
+     * On failure it does NOT swallow the error into a `false`: it propagates the typed error
+     * raised by the `JwtManager` (a `TokenExpiredError` → 401 TOKEN_EXPIRED, an
+     * `InvalidJwtError`/`JwtAuthorizationHeaderError` → 401 UNAUTHORIZED). The
+     * `AuthorizerManager` re-throws those typed auth errors so the client receives the
+     * precise code and can tell "refresh the token" from "log in" — a bare `false` would
+     * collapse every case into an indistinguishable 403.
      * @param request
      * @param identity
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pristine-ts/jwt",
-  "version": "4.0.3",
+  "version": "4.0.5",
   "description": "",
   "module": "dist/lib/esm/jwt.module.js",
   "main": "dist/lib/cjs/jwt.module.js",
@@ -20,9 +20,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@pristine-ts/common": "^4.0.3",
-    "@pristine-ts/networking": "^4.0.3",
-    "@pristine-ts/security": "^4.0.3",
+    "@pristine-ts/common": "^4.0.5",
+    "@pristine-ts/networking": "^4.0.5",
+    "@pristine-ts/security": "^4.0.5",
     "jsonwebtoken": "^9.0.2"
   },
   "devDependencies": {
@@ -62,7 +62,7 @@
       "src/*.{js,ts}"
     ]
   },
-  "gitHead": "c301b556f877d7d16e6e5e8faf049c9e3b99e15a",
+  "gitHead": "b22ccadf6f8fae474d1fe8da4f9a35faddb15c3e",
   "repository": {
     "type": "git",
     "url": "https://github.com/magieno/pristine-ts.git",