@sanvika/auth 2.5.6 → 2.5.8

package/dist/server.js

@@ -255,9 +255,84 @@ async function createAdminInAuth(payload, authToken = "") {
     return null;
   }
 }
+async function deleteAdminFromAuth(uid, authToken = "") {
+  try {
+    const res = await fetch(`${_authUrl()}/api/admin/admin-users/${encodeURIComponent(uid)}`, {
+      method: "DELETE",
+      headers: {
+        ..._s2sHeaders(),
+        ...authToken ? { Authorization: `Bearer ${authToken}` } : {}
+      },
+      signal: AbortSignal.timeout(5e3)
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+const _adminCache = /* @__PURE__ */ new Map();
+const _ADMIN_CACHE_TTL = 5 * 60 * 1e3;
+const _buildUnauthorized = (message, code = "ADMIN_AUTH_REQUIRED") => ({
+  success: false,
+  status: 401,
+  body: { success: false, message, code }
+});
+const _buildForbidden = (message, code = "ADMIN_ROLE_UNAUTHORIZED") => ({
+  success: false,
+  status: 403,
+  body: { success: false, message, code }
+});
+async function authenticateAdmin(request) {
+  try {
+    const authorization = _resolveAuthHeader(request);
+    if (!authorization) {
+      return _buildUnauthorized("Authorization required for admin access.", "NO_AUTH_HEADER");
+    }
+    const [scheme, token] = authorization.split(" ");
+    if (scheme !== "Bearer" || !token) {
+      return _buildUnauthorized("Invalid token format.", "INVALID_TOKEN_FORMAT");
+    }
+    const cacheKey = `admin_${token.substring(0, 20)}`;
+    const cached = _adminCache.get(cacheKey);
+    if (cached && cached.expires > Date.now()) {
+      return { success: true, admin: cached.adminData };
+    }
+    const saPayload = await verifyAuthToken({ headers: { authorization } });
+    if (!saPayload) {
+      return _buildUnauthorized("Invalid or expired token.", "INVALID_TOKEN");
+    }
+    const uid = saPayload.sub;
+    const admin = await verifyAdminFromAuth(uid);
+    if (!admin) {
+      return _buildUnauthorized("Unauthorized or admin account not found.", "ADMIN_NOT_FOUND");
+    }
+    if (admin.isBlocked) {
+      return _buildForbidden("Admin account is blocked.", "ADMIN_BLOCKED");
+    }
+    if (!["admin", "superadmin", "moderator"].includes(admin.role)) {
+      return _buildForbidden("Invalid admin role.", "INVALID_ADMIN_ROLE");
+    }
+    const adminData = {
+      uid: admin.uid,
+      adminId: admin.adminId,
+      role: admin.role,
+      mobile: admin.mobile
+    };
+    _adminCache.set(cacheKey, { adminData, expires: Date.now() + _ADMIN_CACHE_TTL });
+    return { success: true, admin: adminData };
+  } catch {
+    return {
+      success: false,
+      status: 500,
+      body: { success: false, message: "Internal server error during admin verification." }
+    };
+  }
+}
 export {
+  authenticateAdmin,
   batchGetUsersFromAuth,
   createAdminInAuth,
+  deleteAdminFromAuth,
   deleteUserFromAuth,
   ensureSuperAdminInAuth,
   extractAuthUid,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanvika/auth",
-  "version": "2.5.6",
+  "version": "2.5.8",
   "description": "Sanvika Auth SDK — React components/hooks + server-side token verification and user proxy",
   "type": "module",
   "main": "dist/index.js",