@seamless-auth/express 0.0.1-beta.3 → 0.0.1

package/README.md

@@ -217,7 +217,7 @@ SEAMLESS_COOKIE_SIGNING_KEY=local-secret-key # Found in the portal
 
 ```ts
 const AUTH_SERVER_URL = process.env.AUTH_SERVER_URL!;
-app.use(cors({ origin: "https://localhost:5001", credentials: true }));
+app.use(cors({ origin: "http://localhost:5001", credentials: true }));
 app.use(express.json());
 app.use(cookieParser());
 app.use("/auth", createSeamlessAuthServer({ authServerUrl: AUTH_SERVER_URL }));

package/dist/createServer.d.ts

@@ -1,3 +1,4 @@
 import { Router } from "express";
 import type { SeamlessAuthServerOptions } from "./types";
 export declare function createSeamlessAuthServer(opts: SeamlessAuthServerOptions): Router;
+//# sourceMappingURL=createServer.d.ts.map

package/dist/createServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createServer.d.ts","sourceRoot":"","sources":["../src/createServer.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AAQ7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAIzD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,MAAM,CA6LR"}

package/dist/createServer.js

@@ -1,9 +1,9 @@
 import express from "express";
 import cookieParser from "cookie-parser";
-import { setSessionCookie, clearAllCookies, clearSessionCookie, } from './internal/cookie.js';
-import { authFetch } from './internal/authFetch.js';
-import { createEnsureCookiesMiddleware } from './middleware/ensureCookies.js';
-import { verifySignedAuthResponse } from './internal/verifySignedAuthResponse.js';
+import { setSessionCookie, clearAllCookies, clearSessionCookie, } from "./internal/cookie";
+import { authFetch } from "./internal/authFetch";
+import { createEnsureCookiesMiddleware } from "./middleware/ensureCookies";
+import { verifySignedAuthResponse } from "./internal/verifySignedAuthResponse";
 export function createSeamlessAuthServer(opts) {
     const r = express.Router();
     r.use(express.json());

package/dist/index.d.ts

@@ -4,3 +4,4 @@ export { requireRole } from "./middleware/requireRole";
 export { getSeamlessUser } from "./internal/getSeamlessUser";
 export type { SeamlessAuthServerOptions } from "./types";
 export default createSeamlessAuthServer;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC5D,YAAY,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEzD,eAAe,wBAAwB,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
-import { createSeamlessAuthServer } from './createServer.js';
-export { requireAuth } from './middleware/requireAuth.js';
-export { requireRole } from './middleware/requireRole.js';
-export { getSeamlessUser } from './internal/getSeamlessUser.js';
+import { createSeamlessAuthServer } from "./createServer";
+export { requireAuth } from "./middleware/requireAuth";
+export { requireRole } from "./middleware/requireRole";
+export { getSeamlessUser } from "./internal/getSeamlessUser";
 export default createSeamlessAuthServer;

package/dist/internal/authFetch.d.ts

@@ -6,3 +6,4 @@ export interface AuthFetchOptions {
     headers?: Record<string, string>;
 }
 export declare function authFetch(req: CookieRequest, url: string, { method, body, cookies, headers }?: AuthFetchOptions): Promise<Response>;
+//# sourceMappingURL=authFetch.d.ts.map

package/dist/internal/authFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authFetch.d.ts","sourceRoot":"","sources":["../../src/internal/authFetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,wBAAsB,SAAS,CAC7B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,OAAY,EAAE,GAAE,gBAAqB,qBAuDxE"}

package/dist/internal/authFetch.js

@@ -1,16 +1,17 @@
 import jwt from "jsonwebtoken";
-const serviceKey = process.env.SEAMLESS_SERVICE_TOKEN;
 export async function authFetch(req, url, { method = "POST", body, cookies, headers = {} } = {}) {
+    const serviceKey = process.env.SEAMLESS_SERVICE_TOKEN;
     if (!serviceKey) {
         throw new Error("Cannot sign service token. Missing SEAMLESS_SERVICE_TOKEN");
     }
+    console.debug("[SeamlessAuth] Performing authentication fetch to Auth server");
     // -------------------------------
     // Issue short-lived machine token
     // -------------------------------
     const token = jwt.sign({
         // Minimal, safe fields
         iss: process.env.FRONTEND_URL,
-        aud: process.env.AUTH_SERVER,
+        aud: process.env.AUTH_SERVER_URL,
         sub: req.cookiePayload?.sub,
         roles: req.cookiePayload?.roles ?? [],
         iat: Math.floor(Date.now() / 1000),
@@ -22,10 +23,11 @@ export async function authFetch(req, url, { method = "POST", body, cookies, head
     const finalHeaders = {
         ...(method !== "GET" && { "Content-Type": "application/json" }),
         ...(cookies ? { Cookie: cookies.join("; ") } : {}),
-        Authorization: `Bearer ${token}`,
+        Authorization: `Bearer ${serviceKey}`,
         ...headers,
     };
     let finalUrl = url;
+    console.debug("[SeamlessAuth] URL ...", finalUrl);
     if (method === "GET" && body && typeof body === "object") {
         const qs = new URLSearchParams(body).toString();
         finalUrl += url.includes("?") ? `&${qs}` : `?${qs}`;

package/dist/internal/cookie.d.ts

@@ -8,3 +8,4 @@ export interface CookiePayload {
 export declare function setSessionCookie(res: Response, payload: CookiePayload, domain?: string, ttlSeconds?: number, name?: string): void;
 export declare function clearSessionCookie(res: Response, domain: string, name?: string): void;
 export declare function clearAllCookies(res: Response, domain: string, accesscookieName: string, registrationCookieName: string, refreshCookieName: string): void;
+//# sourceMappingURL=cookie.d.ts.map

package/dist/internal/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/internal/cookie.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,QAAQ,EACb,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,SAAM,EAChB,IAAI,SAAe,QAqBpB;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,MAAM,EACd,IAAI,SAAe,QAGpB;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,EACxB,sBAAsB,EAAE,MAAM,EAC9B,iBAAiB,EAAE,MAAM,QAK1B"}

package/dist/internal/cookie.js

@@ -1,9 +1,10 @@
 import jwt from "jsonwebtoken";
-const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
-if (!COOKIE_SECRET) {
-    console.warn("[SeamlessAuth] Missing SEAMLESS_COOKIE_SIGNING_KEY env var!");
-}
 export function setSessionCookie(res, payload, domain, ttlSeconds = 300, name = "sa_session") {
+    const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
+    if (!COOKIE_SECRET) {
+        console.warn("[SeamlessAuth] Missing SEAMLESS_COOKIE_SIGNING_KEY env var!");
+        throw new Error("Missing required env SEAMLESS_COOKIE_SIGNING_KEY");
+    }
     const token = jwt.sign(payload, COOKIE_SECRET, {
         algorithm: "HS256",
         expiresIn: `${ttlSeconds}s`,

package/dist/internal/getSeamlessUser.d.ts

@@ -8,3 +8,4 @@ import { CookieRequest } from "../middleware/ensureCookies.js";
  * @returns The user data object if valid, or null if invalid/unauthenticated
  */
 export declare function getSeamlessUser<T = any>(req: CookieRequest, authServerUrl: string, cookieName?: string): Promise<T | null>;
+//# sourceMappingURL=getSeamlessUser.d.ts.map

package/dist/internal/getSeamlessUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSeamlessUser.d.ts","sourceRoot":"","sources":["../../src/internal/getSeamlessUser.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAG/D;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,CAAC,GAAG,GAAG,EAC3C,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,MAAM,EACrB,UAAU,GAAE,MAA+B,GAC1C,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAwBnB"}

package/dist/internal/refreshAccessToken.d.ts

@@ -7,3 +7,4 @@ export declare function refreshAccessToken(req: CookieRequest, authServerUrl: st
     ttl: number;
     refreshTtl: number;
 } | null>;
+//# sourceMappingURL=refreshAccessToken.d.ts.map

package/dist/internal/refreshAccessToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshAccessToken.d.ts","sourceRoot":"","sources":["../../src/internal/refreshAccessToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAG/D,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAAC,CAwDR"}

package/dist/internal/refreshAccessToken.js

@@ -1,11 +1,12 @@
 import jwt from "jsonwebtoken";
-const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
-if (!COOKIE_SECRET) {
-    console.warn("[SeamlessAuth] SEAMLESS_COOKIE_SIGNING_KEY missing — requireAuth will always fail.");
-}
-const serviceKey = process.env.SEAMLESS_SERVICE_TOKEN;
 export async function refreshAccessToken(req, authServerUrl, refreshToken) {
     try {
+        const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
+        if (!COOKIE_SECRET) {
+            console.warn("[SeamlessAuth] SEAMLESS_COOKIE_SIGNING_KEY missing — requireAuth will always fail.");
+            throw new Error("Missing required env SEAMLESS_COOKIE_SIGNING_KEY");
+        }
+        const serviceKey = process.env.SEAMLESS_SERVICE_TOKEN;
         if (!serviceKey) {
             throw new Error("Cannot sign service token. Missing SEAMLESS_SERVICE_TOKEN");
         }

package/dist/internal/verifyCookieJwt.d.ts

@@ -1 +1,2 @@
 export declare function verifyCookieJwt<T = any>(token: string): T | null;
+//# sourceMappingURL=verifyCookieJwt.d.ts.map

package/dist/internal/verifyCookieJwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyCookieJwt.d.ts","sourceRoot":"","sources":["../../src/internal/verifyCookieJwt.ts"],"names":[],"mappings":"AAIA,wBAAgB,eAAe,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAShE"}

package/dist/internal/verifySignedAuthResponse.d.ts

@@ -3,3 +3,4 @@
  * Uses the Auth Server's JWKS endpoint to dynamically fetch public keys.
  */
 export declare function verifySignedAuthResponse<T = any>(token: string, authServerUrl: string): Promise<T | null>;
+//# sourceMappingURL=verifySignedAuthResponse.d.ts.map

package/dist/internal/verifySignedAuthResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifySignedAuthResponse.d.ts","sourceRoot":"","sources":["../../src/internal/verifySignedAuthResponse.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,GAAG,GAAG,EACpD,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAmBnB"}

package/dist/middleware/ensureCookies.d.ts

@@ -5,3 +5,4 @@ export interface CookieRequest extends Request {
     cookiePayload?: JwtPayload;
 }
 export declare function createEnsureCookiesMiddleware(opts: SeamlessAuthServerOptions): (req: CookieRequest, res: Response, next: NextFunction, cookieDomain?: string) => Promise<void | Response<any, Record<string, any>>>;
+//# sourceMappingURL=ensureCookies.d.ts.map

package/dist/middleware/ensureCookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureCookies.d.ts","sourceRoot":"","sources":["../../src/middleware/ensureCookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI1C,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,aAAa,CAAC,EAAE,UAAU,CAAC;CAC5B;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,yBAAyB,IA4BzE,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,MAAM,YAAY,EAClB,qBAAiB,wDA2FpB"}

package/dist/middleware/ensureCookies.js

@@ -1,11 +1,6 @@
 import { verifyCookieJwt } from "../internal/verifyCookieJwt.js";
 import { refreshAccessToken } from "../internal/refreshAccessToken";
 import { clearAllCookies, setSessionCookie } from "../internal/cookie";
-const AUTH_SERVER_URL = process.env.AUTH_SERVER;
-const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
-if (!COOKIE_SECRET) {
-    console.warn("[SeamlessAuth] SEAMLESS_COOKIE_SIGNING_KEY missing — requireAuth will always fail.");
-}
 export function createEnsureCookiesMiddleware(opts) {
     const COOKIE_REQUIREMENTS = {
         "/webAuthn/login/finish": { name: opts.preAuthCookieName, required: true },
@@ -34,6 +29,7 @@ export function createEnsureCookiesMiddleware(opts) {
         if (!match)
             return next();
         const [, { name, required }] = match;
+        const AUTH_SERVER_URL = process.env.AUTH_SERVER;
         const cookieValue = req.cookies?.[name];
         const refreshCookieValue = req.cookies?.[opts.refreshCookieName];
         //

package/dist/middleware/requireAuth.d.ts

@@ -6,3 +6,4 @@ import { Request, Response, NextFunction } from "express";
  * - Returns 401 if missing/invalid/expired
  */
 export declare function requireAuth(cookieName?: string, refreshCookieName?: string, cookieDomain?: string): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=requireAuth.d.ts.map

package/dist/middleware/requireAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireAuth.d.ts","sourceRoot":"","sources":["../../src/middleware/requireAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM1D;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,UAAU,SAAyB,EACnC,iBAAiB,SAA0B,EAC3C,YAAY,SAAM,IAahB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CA+EjB"}

package/dist/middleware/requireAuth.js

@@ -1,11 +1,6 @@
 import jwt from "jsonwebtoken";
 import { refreshAccessToken } from "../internal/refreshAccessToken.js";
 import { setSessionCookie } from "../internal/cookie.js";
-const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
-if (!COOKIE_SECRET) {
-    console.warn("[SeamlessAuth] SEAMLESS_COOKIE_SIGNING_KEY missing — requireAuth will always fail.");
-}
-const AUTH_SERVER_URL = process.env.AUTH_SERVER;
 /**
  * Express middleware that verifies a Seamless Auth access cookie.
  * - Reads and verifies signed cookie JWT
@@ -13,8 +8,17 @@ const AUTH_SERVER_URL = process.env.AUTH_SERVER;
  * - Returns 401 if missing/invalid/expired
  */
 export function requireAuth(cookieName = "seamless-auth-access", refreshCookieName = "seamless-auth-refresh", cookieDomain = "/") {
+    const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
+    if (!COOKIE_SECRET) {
+        console.warn("[SeamlessAuth] SEAMLESS_COOKIE_SIGNING_KEY missing — requireAuth will always fail.");
+        throw new Error("Missing required env SEAMLESS_COOKIE_SIGNING_KEY");
+    }
+    const AUTH_SERVER_URL = process.env.AUTH_SERVER;
     return async (req, res, next) => {
         try {
+            if (!COOKIE_SECRET) {
+                throw new Error("Missing required SEAMLESS_COOKIE_SIGNING_KEY env");
+            }
             const token = req.cookies?.[cookieName];
             if (!token) {
                 res.status(401).json({ error: "Missing access cookie" });

package/dist/middleware/requireRole.d.ts

@@ -6,3 +6,4 @@ import { RequestHandler } from "express";
  * @param cookieName  Cookie name containing JWT (default: 'sa_session')
  */
 export declare function requireRole(role: string, cookieName?: string): RequestHandler;
+//# sourceMappingURL=requireRole.d.ts.map

package/dist/middleware/requireRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireRole.d.ts","sourceRoot":"","sources":["../../src/middleware/requireRole.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAG1E;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,UAAU,SAAoB,GAC7B,cAAc,CAiChB"}

package/dist/middleware/requireRole.js

@@ -1,8 +1,4 @@
 import jwt from "jsonwebtoken";
-const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
-if (!COOKIE_SECRET) {
-    console.warn("[PortalAPI] Missing SEAMLESS_COOKIE_SIGNING_KEY — role checks will fail.");
-}
 /**
  * Express middleware to enforce a required role from Seamless Auth cookie JWT.
  *
@@ -12,6 +8,11 @@ if (!COOKIE_SECRET) {
 export function requireRole(role, cookieName = "seamless-access") {
     return (req, res, next) => {
         try {
+            const COOKIE_SECRET = process.env.SEAMLESS_COOKIE_SIGNING_KEY;
+            if (!COOKIE_SECRET) {
+                console.warn("[SeamlessAuth] SEAMLESS_COOKIE_SIGNING_KEY missing — requireRole will always fail.");
+                throw new Error("Missing required env SEAMLESS_COOKIE_SIGNING_KEY");
+            }
             const token = req.cookies?.[cookieName];
             if (!token) {
                 res.status(401).json({ error: "Missing access cookie" });
@@ -29,7 +30,7 @@ export function requireRole(role, cookieName = "seamless-access") {
             next();
         }
         catch (err) {
-            console.error(`[PortalAPI] requireRole(${role}) failed:`, err.message);
+            console.error(`[RequireRole] requireRole(${role}) failed:`, err.message);
             res.status(401).json({ error: "Invalid or expired access cookie" });
         }
     };

package/dist/types.d.ts

@@ -6,3 +6,4 @@ export interface SeamlessAuthServerOptions {
     refreshCookieName?: string;
     preAuthCookieName?: string;
 }
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/express",
-  "version": "0.0.1-beta.3",
+  "version": "0.0.1",
   "description": "Express adapter for Seamless Auth passwordless authentication",
   "license": "MIT",
   "type": "module",
@@ -24,6 +24,7 @@
   },
   "dependencies": {
     "cookie-parser": "^1.4.6",
+    "dotenv": "^17.2.3",
     "jose": "^6.1.1",
     "jsonwebtoken": "^9.0.2",
     "node-fetch": "^3.3.2"