@tekcify/auth-backend 1.0.0 → 1.0.1

package/src/nestjs/guard.ts

@@ -1,57 +0,0 @@
-import {
-  Injectable,
-  CanActivate,
-  ExecutionContext,
-  UnauthorizedException,
-} from '@nestjs/common';
-import type { Request } from 'express';
-import { verifyAccessToken } from '../verify';
-import type { VerifyTokenOptions, UserPayload } from '../types';
-
-export interface JwtAuthGuardOptions extends VerifyTokenOptions {
-  getUserInfo?: (userId: string) => Promise<{ email: string } | null>;
-}
-
-@Injectable()
-export class JwtAuthGuard implements CanActivate {
-  constructor(private readonly options: JwtAuthGuardOptions) {}
-
-  async canActivate(context: ExecutionContext): Promise<boolean> {
-    const request = context
-      .switchToHttp()
-      .getRequest<Request & { user?: UserPayload }>();
-    const authHeader = request.headers.authorization as string | undefined;
-
-    if (!authHeader?.startsWith('Bearer ')) {
-      throw new UnauthorizedException(
-        'Missing or invalid authorization header',
-      );
-    }
-
-    const token = authHeader.substring(7);
-    const verified = verifyAccessToken(token, this.options);
-
-    if (!verified.valid) {
-      throw new UnauthorizedException('Invalid or expired token');
-    }
-
-    let email = '';
-    if (this.options.getUserInfo) {
-      const userInfo = await this.options.getUserInfo(verified.payload.sub);
-      if (!userInfo) {
-        throw new UnauthorizedException('User not found');
-      }
-      email = userInfo.email;
-    }
-
-    request.user = {
-      userId: verified.payload.sub,
-      email,
-      scopes: Array.isArray(verified.payload.scopes)
-        ? verified.payload.scopes
-        : [],
-    };
-
-    return true;
-  }
-}

package/src/types.ts

@@ -1,24 +0,0 @@
-export interface TokenPayload {
-  sub: string;
-  type: 'access' | 'refresh' | 'temp';
-  scopes?: string[];
-  clientId?: string;
-  [key: string]: unknown;
-}
-
-export interface VerifyTokenOptions {
-  secret: string;
-  issuer?: string;
-  audience?: string;
-}
-
-export interface VerifiedToken {
-  payload: TokenPayload;
-  valid: boolean;
-}
-
-export interface UserPayload {
-  userId: string;
-  email: string;
-  scopes?: string[];
-}

package/src/userinfo.ts

@@ -1,26 +0,0 @@
-import type { UserInfo, IntrospectResult } from '@tekcify/auth-core-client';
-import { getUserInfo, introspectToken } from '@tekcify/auth-core-client';
-
-export async function fetchUserInfo(
-  authServerUrl: string,
-  accessToken: string,
-): Promise<UserInfo> {
-  return getUserInfo(authServerUrl, accessToken);
-}
-
-export interface IntrospectTokenOptions {
-  authServerUrl: string;
-  token: string;
-  clientId?: string;
-  clientSecret?: string;
-}
-
-export async function introspectAccessToken(
-  options: IntrospectTokenOptions,
-): Promise<IntrospectResult> {
-  return introspectToken(options.authServerUrl, {
-    token: options.token,
-    clientId: options.clientId,
-    clientSecret: options.clientSecret,
-  });
-}

package/src/verify.ts

@@ -1,36 +0,0 @@
-import jwt from 'jsonwebtoken';
-import type { TokenPayload, VerifyTokenOptions, VerifiedToken } from './types';
-
-export function verifyAccessToken(
-  token: string,
-  options: VerifyTokenOptions,
-): VerifiedToken {
-  try {
-    const decoded = jwt.verify(token, options.secret, {
-      issuer: options.issuer ?? 'tekcify-auth',
-      audience: options.audience ?? 'tekcify-api',
-    }) as TokenPayload;
-
-    if (decoded.type !== 'access') {
-      return { payload: decoded, valid: false };
-    }
-
-    return { payload: decoded, valid: true };
-  } catch (error) {
-    if (error instanceof jwt.JsonWebTokenError) {
-      return { payload: {} as TokenPayload, valid: false };
-    }
-    if (error instanceof jwt.TokenExpiredError) {
-      return { payload: {} as TokenPayload, valid: false };
-    }
-    throw error;
-  }
-}
-
-export function decodeToken(token: string): TokenPayload | null {
-  try {
-    return jwt.decode(token) as TokenPayload | null;
-  } catch {
-    return null;
-  }
-}

package/tsconfig.json

@@ -1,11 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "declaration": true,
-    "declarationMap": true
-  },
-  "include": ["src/**/*"]
-}
-