@seamless-auth/express 0.0.2-beta.13 → 0.0.2-beta.15

package/dist/index.d.ts

@@ -4,6 +4,8 @@ type SeamlessAuthServerOptions = {
     authServerUrl: string;
     cookieSecret: string;
     serviceSecret: string;
+    issuer: string;
+    audience: string;
     jwksKid?: string;
     cookieDomain?: string;
     accessCookieName?: string;
@@ -181,10 +183,6 @@ interface EnsureCookiesMiddlewareOptions {
 }
 declare function createEnsureCookiesMiddleware(opts: EnsureCookiesMiddlewareOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
 
-declare function getSeamlessUser(req: Request, opts: {
-    authServerUrl: string;
-    cookieSecret: string;
-    cookieName?: string;
-}): Promise<any>;
+declare function getSeamlessUser(req: Request, opts: SeamlessAuthServerOptions): Promise<any>;
 
 export { type SeamlessAuthServerOptions, createEnsureCookiesMiddleware, createSeamlessAuthServer as default, getSeamlessUser, requireAuth, requireRole };

package/dist/index.js

@@ -138,16 +138,16 @@ import { finishLoginHandler } from "@seamless-auth/core/handlers/finishLogin";
 
 // src/internal/buildAuthorization.ts
 import { createServiceToken } from "@seamless-auth/core";
-function buildServiceAuthorization(req) {
+function buildServiceAuthorization(req, opts) {
   if (!req.cookiePayload?.sub && !req.user.sub) {
     return void 0;
   }
   const token = createServiceToken({
     subject: req.cookiePayload?.sub || req.user.sub,
-    issuer: process.env.APP_ORIGIN,
-    audience: process.env.AUTH_SERVER_URL,
-    serviceSecret: process.env.API_SERVICE_TOKEN,
-    keyId: "dev-main"
+    issuer: opts.issuer,
+    audience: opts.audience,
+    serviceSecret: opts.serviceSecret,
+    keyId: opts.jwksKid
   });
   return `Bearer ${token}`;
 }
@@ -159,7 +159,7 @@ async function finishLogin(req, res, opts) {
     secure: process.env.NODE_ENV === "production",
     sameSite: process.env.NODE_ENV === "production" ? "none" : "lax"
   };
-  const authorization = buildServiceAuthorization(req);
+  const authorization = buildServiceAuthorization(req, opts);
   const result = await finishLoginHandler(
     { body: req.body, authorization },
     {
@@ -239,7 +239,7 @@ async function finishRegister(req, res, opts) {
     secure: process.env.NODE_ENV === "production",
     sameSite: process.env.NODE_ENV === "production" ? "none" : "lax"
   };
-  const authorization = buildServiceAuthorization(req);
+  const authorization = buildServiceAuthorization(req, opts);
   const result = await finishRegisterHandler(
     { body: req.body, authorization },
     {
@@ -275,7 +275,7 @@ async function finishRegister(req, res, opts) {
 // src/handlers/me.ts
 import { meHandler } from "@seamless-auth/core/handlers/me";
 async function me(req, res, opts) {
-  const authorization = buildServiceAuthorization(req);
+  const authorization = buildServiceAuthorization(req, opts);
   const result = await meHandler({
     authServerUrl: opts.authServerUrl,
     preAuthCookieName: opts.preAuthCookieName,
@@ -315,6 +315,8 @@ function createSeamlessAuthServer(opts) {
   r.use(cookieParser());
   const resolvedOpts = {
     authServerUrl: opts.authServerUrl,
+    issuer: opts.issuer,
+    audience: opts.audience,
     cookieSecret: opts.cookieSecret,
     serviceSecret: opts.serviceSecret,
     jwksKid: opts.jwksKid ?? "dev-main",
@@ -341,7 +343,7 @@ function createSeamlessAuthServer(opts) {
       res.status(401).json({ error: "registeration session required" });
       return;
     }
-    const authorization = buildServiceAuthorization(req);
+    const authorization = buildServiceAuthorization(req, resolvedOpts);
     const options = method == "GET" ? { method, authorization } : { method, authorization, body: req.body };
     const upstream = await authFetch(
       `${resolvedOpts.authServerUrl}/${path}`,
@@ -360,7 +362,7 @@ function createSeamlessAuthServer(opts) {
       preAuthCookieName: resolvedOpts.preAuthCookieName,
       cookieSecret: resolvedOpts.cookieSecret,
       serviceSecret: resolvedOpts.serviceSecret,
-      issuer: process.env.APP_ORIGIN,
+      issuer: resolvedOpts.issuer,
       audience: resolvedOpts.authServerUrl,
       keyId: resolvedOpts.jwksKid
     })
@@ -478,11 +480,11 @@ import {
   getSeamlessUser as getSeamlessUserCore
 } from "@seamless-auth/core";
 async function getSeamlessUser(req, opts) {
-  const authorization = buildServiceAuthorization(req);
+  const authorization = buildServiceAuthorization(req, opts);
   return getSeamlessUserCore(req.cookies ?? {}, {
     authServerUrl: opts.authServerUrl,
     cookieSecret: opts.cookieSecret,
-    cookieName: opts.cookieName ?? "seamless-access",
+    cookieName: opts.accessCookieName ?? "seamless-access",
     authorization
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/express",
-  "version": "0.0.2-beta.13",
+  "version": "0.0.2-beta.15",
   "description": "Express adapter for Seamless Auth passwordless authentication",
   "license": "AGPL-3.0-only",
   "type": "module",