@quatrain/auth 1.2.2 → 1.2.4

package/dist/AbstractAuthAdapter.d.ts

@@ -1,6 +1,7 @@
 import { AuthParameters, AuthParametersKeys } from './Auth';
 import { User } from '@quatrain/backend';
 import { AuthInterface } from './types/AuthInterface';
+import { ApiMiddleware } from '@quatrain/api';
 /**
  * Abstract base class that defines the contract for all authentication adapters.
  * Implementations should adapt standard authentication methods to specific providers
@@ -12,6 +13,12 @@ export declare abstract class AbstractAuthAdapter implements AuthInterface {
     protected _alias: string;
     protected _params: AuthParameters;
     constructor(params?: AuthParameters);
+    /**
+     * Express middleware capturing Bearer JWT tokens to execute auth verification.
+     *
+     * @returns The middleware function.
+     */
+    middleware(): ApiMiddleware;
     /**
      * Assigns a configuration parameter for the adapter.
      *
@@ -95,4 +102,11 @@ export declare abstract class AbstractAuthAdapter implements AuthInterface {
      * @returns Action response from the provider.
      */
     abstract setCustomUserClaims(id: string, claims: any): any;
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email: string, redirectTo?: string): Promise<any>;
 }

package/dist/AbstractAuthAdapter.js

@@ -1,7 +1,18 @@
 "use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AbstractAuthAdapter = void 0;
+const Auth_1 = require("./Auth");
 const backend_1 = require("@quatrain/backend");
+const http_1 = require("@quatrain/http");
 /**
  * Abstract base class that defines the contract for all authentication adapters.
  * Implementations should adapt standard authentication methods to specific providers
@@ -13,6 +24,31 @@ class AbstractAuthAdapter {
         this._params = {};
         this._params = params;
     }
+    /**
+     * Express middleware capturing Bearer JWT tokens to execute auth verification.
+     *
+     * @returns The middleware function.
+     */
+    middleware() {
+        return (req, res) => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const bearer = http_1.HttpHelper.parseBearerToken((_a = req.headers) === null || _a === void 0 ? void 0 : _a.authorization);
+            if (bearer) {
+                try {
+                    const user = yield this.getAuthToken(bearer);
+                    if (user) {
+                        return true; // Authorized
+                    }
+                }
+                catch (e) {
+                    Auth_1.Auth.error(`[${this.constructor.name}] Middleware token verification failed: ${e.message}`);
+                }
+            }
+            res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"');
+            res.status(http_1.HttpStatus.UNAUTHORIZED).send('Authentication required.');
+            return false;
+        });
+    }
     /**
      * Assigns a configuration parameter for the adapter.
      *
@@ -37,6 +73,15 @@ class AbstractAuthAdapter {
     get alias() {
         return this._alias;
     }
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email, redirectTo) {
+        throw new Error('Password recovery not implemented for this adapter');
+    }
 }
 exports.AbstractAuthAdapter = AbstractAuthAdapter;
 /** The `User` class reference to be used by the adapter. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "license": "AGPL-3.0-only",
   "description": "Auth adapters commons",
   "main": "dist/index.js",
@@ -20,8 +20,10 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "dependencies": {
-    "@quatrain/backend": "^1.2.6",
-    "@quatrain/core": "^1.2.5"
+    "@quatrain/api": "^1.1.6",
+    "@quatrain/backend": "^1.2.13",
+    "@quatrain/core": "^1.2.16",
+    "@quatrain/http": "^1.0.0"
   },
   "devDependencies": {
     "@tsconfig/recommended": "^1.0.1",

package/src/AbstractAuthAdapter.ts

@@ -1,6 +1,8 @@
-import { AuthParameters, AuthParametersKeys } from './Auth'
+import { Auth, AuthParameters, AuthParametersKeys } from './Auth'
 import { User } from '@quatrain/backend'
 import { AuthInterface } from './types/AuthInterface'
+import { ApiMiddleware, ApiRequest, ApiResponse } from '@quatrain/api'
+import { HttpStatus, HttpHelper } from '@quatrain/http'
 
 /**
  * Abstract base class that defines the contract for all authentication adapters.
@@ -17,6 +19,32 @@ export abstract class AbstractAuthAdapter implements AuthInterface {
       this._params = params
    }
 
+   /**
+    * Express middleware capturing Bearer JWT tokens to execute auth verification.
+    * 
+    * @returns The middleware function.
+    */
+   public middleware(): ApiMiddleware {
+      return async (req: ApiRequest, res: ApiResponse): Promise<boolean> => {
+         const bearer = HttpHelper.parseBearerToken(req.headers?.authorization as string)
+         
+         if (bearer) {
+            try {
+               const user = await this.getAuthToken(bearer)
+               if (user) {
+                  return true // Authorized
+               }
+            } catch(e) {
+               Auth.error(`[${this.constructor.name}] Middleware token verification failed: ${(e as Error).message}`)
+            }
+         }
+
+         res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"')
+         res.status(HttpStatus.UNAUTHORIZED).send('Authentication required.')
+         return false
+      }
+   }
+
    /**
     * Assigns a configuration parameter for the adapter.
     * 
@@ -120,4 +148,14 @@ export abstract class AbstractAuthAdapter implements AuthInterface {
     * @returns Action response from the provider.
     */
    abstract setCustomUserClaims(id: string, claims: any): any
+
+   /**
+    * Initiates password recovery/reset process for a user.
+    * 
+    * @param email - The user email.
+    * @param redirectTo - Optional redirect destination.
+    */
+   recoverPassword(email: string, redirectTo?: string): Promise<any> {
+      throw new Error('Password recovery not implemented for this adapter')
+   }
 }