@sanvika/auth 2.5.7 → 2.5.9

package/dist/server.js

@@ -270,7 +270,78 @@ async function deleteAdminFromAuth(uid, authToken = "") {
     return false;
   }
 }
+const _adminCache = /* @__PURE__ */ new Map();
+const _ADMIN_CACHE_TTL = 5 * 60 * 1e3;
+const _buildUnauthorized = (message, code = "ADMIN_AUTH_REQUIRED") => ({
+  success: false,
+  status: 401,
+  body: { success: false, message, code }
+});
+const _buildForbidden = (message, code = "ADMIN_ROLE_UNAUTHORIZED") => ({
+  success: false,
+  status: 403,
+  body: { success: false, message, code }
+});
+async function authenticateAdmin(request) {
+  try {
+    const authorization = _resolveAuthHeader(request);
+    if (!authorization) {
+      return _buildUnauthorized("Authorization required for admin access.", "NO_AUTH_HEADER");
+    }
+    const [scheme, token] = authorization.split(" ");
+    if (scheme !== "Bearer" || !token) {
+      return _buildUnauthorized("Invalid token format.", "INVALID_TOKEN_FORMAT");
+    }
+    const cacheKey = `admin_${token.substring(0, 20)}`;
+    const cached = _adminCache.get(cacheKey);
+    if (cached && cached.expires > Date.now()) {
+      return { success: true, admin: cached.adminData };
+    }
+    const saPayload = await verifyAuthToken({ headers: { authorization } });
+    if (!saPayload) {
+      return _buildUnauthorized("Invalid or expired token.", "INVALID_TOKEN");
+    }
+    const uid = saPayload.sub;
+    const jwtRole = saPayload.role;
+    if (jwtRole === "superadmin" && uid) {
+      const adminData2 = {
+        uid,
+        adminId: null,
+        role: "superadmin",
+        mobile: saPayload.mobile || null
+      };
+      _adminCache.set(cacheKey, { adminData: adminData2, expires: Date.now() + _ADMIN_CACHE_TTL });
+      return { success: true, admin: adminData2 };
+    }
+    const admin = await verifyAdminFromAuth(uid);
+    if (!admin) {
+      return _buildUnauthorized("Unauthorized or admin account not found.", "ADMIN_NOT_FOUND");
+    }
+    if (admin.isBlocked) {
+      return _buildForbidden("Admin account is blocked.", "ADMIN_BLOCKED");
+    }
+    const effectiveRole = admin.role || (jwtRole && ["admin", "superadmin", "moderator"].includes(jwtRole) ? jwtRole : null);
+    if (!effectiveRole || !["admin", "superadmin", "moderator"].includes(effectiveRole)) {
+      return _buildForbidden("Invalid admin role.", "INVALID_ADMIN_ROLE");
+    }
+    const adminData = {
+      uid: admin.uid,
+      adminId: admin.adminId,
+      role: effectiveRole,
+      mobile: admin.mobile
+    };
+    _adminCache.set(cacheKey, { adminData, expires: Date.now() + _ADMIN_CACHE_TTL });
+    return { success: true, admin: adminData };
+  } catch {
+    return {
+      success: false,
+      status: 500,
+      body: { success: false, message: "Internal server error during admin verification." }
+    };
+  }
+}
 export {
+  authenticateAdmin,
   batchGetUsersFromAuth,
   createAdminInAuth,
   deleteAdminFromAuth,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanvika/auth",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "Sanvika Auth SDK — React components/hooks + server-side token verification and user proxy",
   "type": "module",
   "main": "dist/index.js",