@quatrain/auth-supabase 1.2.1 → 1.2.3

package/dist/SupabaseAuthAdapter.d.ts

@@ -1,7 +1,10 @@
 import { User } from '@quatrain/backend';
 import { AbstractAuthAdapter, AuthParameters } from '@quatrain/auth';
+import { ApiMiddleware } from '@quatrain/api';
 export declare class SupabaseAuthAdapter extends AbstractAuthAdapter {
     protected _client: any;
+    static factory(config: any): SupabaseAuthAdapter | null;
+    middleware(): ApiMiddleware;
     constructor(params?: AuthParameters);
     /**
      * Register new user in authentication

package/dist/SupabaseAuthAdapter.js

@@ -48,6 +48,31 @@ const supabase_js_1 = require("@supabase/supabase-js");
 const nativeFetch = __importStar(require("node-fetch-native"));
 // Create a single supabase client for interacting with your database
 class SupabaseAuthAdapter extends auth_1.AbstractAuthAdapter {
+    static factory(config) {
+        if (!config.supabaseUrl || !config.supabaseKey)
+            return null;
+        return new SupabaseAuthAdapter({ config });
+    }
+    middleware() {
+        return (req, res) => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const bearer = (((_a = req.headers) === null || _a === void 0 ? void 0 : _a.authorization) || '').split(' ')[1] || '';
+            if (bearer) {
+                try {
+                    const user = yield this.getAuthToken(bearer);
+                    if (user) {
+                        return true; // Authorized
+                    }
+                }
+                catch (e) {
+                    auth_1.Auth.error(`[SupabaseAuthAdapter] Middleware token verification failed: ${e.message}`);
+                }
+            }
+            res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"');
+            res.status(401).send('Authentication required.');
+            return false;
+        });
+    }
     constructor(params = {}) {
         super(params);
         this._client = (0, supabase_js_1.createClient)(params.config.supabaseUrl, params.config.supabaseKey, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth-supabase",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,8 +19,9 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "dependencies": {
+    "@quatrain/api": "^1.1.4",
     "@quatrain/auth": "^1.2.1",
-    "@quatrain/backend": "^1.2.4",
+    "@quatrain/backend": "^1.2.6",
     "@supabase/supabase-js": "^2.87.3",
     "node-fetch-native": "^1.6.4"
   },

package/src/SupabaseAuthAdapter.test.ts

@@ -225,7 +225,7 @@ describe('SupabaseAuthAdapter', () => {
             json: jest.fn().mockResolvedValue(mockResponse),
          }
 
-         ;(nativeFetch.fetch as jest.Mock).mockResolvedValue(mockFetchResponse)
+         ;(nativeFetch.fetch as unknown as jest.Mock).mockResolvedValue(mockFetchResponse)
 
          const result = await adapter.refreshToken('old-refresh-token')
 
@@ -253,11 +253,11 @@ describe('SupabaseAuthAdapter', () => {
             json: jest.fn().mockResolvedValue({}),
          }
 
-         ;(nativeFetch.fetch as jest.Mock).mockResolvedValue(mockFetchResponse)
+         ;(nativeFetch.fetch as unknown as jest.Mock).mockResolvedValue(mockFetchResponse)
 
          await adapter.refreshToken('refresh-token')
 
-         const callArgs = (nativeFetch.fetch as jest.Mock).mock.calls[0]
+         const callArgs = (nativeFetch.fetch as unknown as jest.Mock).mock.calls[0]
          expect(callArgs[0]).toBe(
             'https://test.supabase.co/auth/v1/token?grant_type=refresh_token'
          )

package/src/SupabaseAuthAdapter.ts

@@ -5,6 +5,7 @@ import {
    AuthenticationError,
    AuthParameters,
 } from '@quatrain/auth'
+import { ApiMiddleware, ApiRequest, ApiResponse } from '@quatrain/api'
 import { createClient } from '@supabase/supabase-js'
 import * as nativeFetch from 'node-fetch-native'
 
@@ -12,6 +13,32 @@ import * as nativeFetch from 'node-fetch-native'
 export class SupabaseAuthAdapter extends AbstractAuthAdapter {
    protected _client: any
 
+   static factory(config: any): SupabaseAuthAdapter | null {
+      if (!config.supabaseUrl || !config.supabaseKey) return null
+      return new SupabaseAuthAdapter({ config })
+   }
+
+   public middleware(): ApiMiddleware {
+      return async (req: ApiRequest, res: ApiResponse): Promise<boolean> => {
+         const bearer = ((req.headers?.authorization as string) || '').split(' ')[1] || ''
+         
+         if (bearer) {
+            try {
+               const user = await this.getAuthToken(bearer)
+               if (user) {
+                  return true // Authorized
+               }
+            } catch(e) {
+               Auth.error(`[SupabaseAuthAdapter] Middleware token verification failed: ${(e as Error).message}`)
+            }
+         }
+
+         res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"')
+         res.status(401).send('Authentication required.')
+         return false
+      }
+   }
+
    constructor(params: AuthParameters = {}) {
       super(params)
       this._client = createClient(