@quatrain/auth-supabase 1.2.10-pr25.6987 → 1.2.11

package/dist/SupabaseAuthAdapter.d.ts

@@ -25,7 +25,7 @@ export declare class SupabaseAuthAdapter extends AbstractAuthAdapter {
      *
      * @param bearer - Raw JWT string.
      * @returns The decoded user object.
-     * @throws {Error} If verification fails.
+     * @throws {AuthenticationError} If verification fails.
      */
     getAuthToken(bearer: string): Promise<any>;
     /**

package/dist/SupabaseAuthAdapter.js

@@ -74,15 +74,17 @@ class SupabaseAuthAdapter extends auth_1.AbstractAuthAdapter {
      *
      * @param bearer - Raw JWT string.
      * @returns The decoded user object.
-     * @throws {Error} If verification fails.
+     * @throws {AuthenticationError} If verification fails.
      */
     getAuthToken(bearer) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             const token = yield this._client.auth.getUser(bearer);
             if (token.data && token.data.user) {
                 return token.data.user;
             }
-            throw new Error('Unable to retrieve auth token from Supabase');
+            const reason = ((_a = token.error) === null || _a === void 0 ? void 0 : _a.message) ? `: ${token.error.message}` : '';
+            throw new auth_1.AuthenticationError(`Unable to retrieve auth token from Supabase${reason}`);
         });
     }
     /**

package/dist/SupabaseAuthAdapter.test.js

@@ -164,6 +164,14 @@ describe('SupabaseAuthAdapter', () => {
             });
             yield expect(adapter.getAuthToken('invalid-token')).rejects.toThrow('Unable to retrieve auth token from Supabase');
         }));
+        it('should include error message from supabase and throw AuthenticationError when token is invalid or expired', () => __awaiter(void 0, void 0, void 0, function* () {
+            mockAuth.getUser.mockResolvedValue({
+                data: null,
+                error: { message: 'Invalid JWT: token is expired' },
+            });
+            yield expect(adapter.getAuthToken('expired-token')).rejects.toThrow('Unable to retrieve auth token from Supabase: Invalid JWT: token is expired');
+            yield expect(adapter.getAuthToken('expired-token')).rejects.toBeInstanceOf(auth_1.AuthenticationError);
+        }));
     });
     describe('refreshToken()', () => {
         it('should successfully refresh token', () => __awaiter(void 0, void 0, void 0, function* () {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth-supabase",
-  "version": "1.2.10-pr25.6987",
+  "version": "1.2.11",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,9 +19,9 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "dependencies": {
-    "@quatrain/api": "^1.1.7",
-    "@quatrain/auth": "^1.2.11",
-    "@quatrain/backend": "^1.2.17",
+    "@quatrain/api": "^1.1.8",
+    "@quatrain/auth": "^1.2.12",
+    "@quatrain/backend": "^1.2.20",
     "@supabase/supabase-js": "^2.108.2"
   },
   "devDependencies": {

package/src/SupabaseAuthAdapter.test.ts

@@ -211,6 +211,20 @@ describe('SupabaseAuthAdapter', () => {
             'Unable to retrieve auth token from Supabase'
          )
       })
+
+      it('should include error message from supabase and throw AuthenticationError when token is invalid or expired', async () => {
+         mockAuth.getUser.mockResolvedValue({
+            data: null,
+            error: { message: 'Invalid JWT: token is expired' },
+         })
+
+         await expect(adapter.getAuthToken('expired-token')).rejects.toThrow(
+            'Unable to retrieve auth token from Supabase: Invalid JWT: token is expired'
+         )
+         await expect(adapter.getAuthToken('expired-token')).rejects.toBeInstanceOf(
+            AuthenticationError
+         )
+      })
    })
 
    describe('refreshToken()', () => {

package/src/SupabaseAuthAdapter.ts

@@ -85,14 +85,15 @@ export class SupabaseAuthAdapter extends AbstractAuthAdapter {
     * 
     * @param bearer - Raw JWT string.
     * @returns The decoded user object.
-    * @throws {Error} If verification fails.
+    * @throws {AuthenticationError} If verification fails.
     */
    async getAuthToken(bearer: string) {
       const token = await this._client.auth.getUser(bearer)
       if (token.data && token.data.user) {
          return token.data.user
       }
-      throw new Error('Unable to retrieve auth token from Supabase')
+      const reason = token.error?.message ? `: ${token.error.message}` : ''
+      throw new AuthenticationError(`Unable to retrieve auth token from Supabase${reason}`)
    }
 
    /**