@tpzdsp/next-toolkit 1.9.1 → 1.9.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tpzdsp/next-toolkit",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "A reusable React component library for Next.js applications",
   "type": "module",
   "private": false,
@@ -170,6 +170,7 @@
     "globals": "^16.3.0",
     "husky": "^9.1.7",
     "jsdom": "^26.1.0",
+    "jose": "^6.1.1",
     "jsonwebtoken": "^9.0.2",
     "next": "^15.4.2",
     "ol": "^10.6.1",
@@ -253,6 +254,9 @@
     "geojson": {
       "optional": true
     },
+    "jose": {
+      "optional": true
+    },
     "jsonwebtoken": {
       "optional": true
     },

package/src/http/constants.ts

@@ -100,6 +100,7 @@ export const Header = {
   CsvHeader: 'CSV-Header',
   XTotalItems: 'X-Total-Items',
   XRequestId: 'X-Request-ID',
+  XApiToken: 'X-API-Token',
   ApiVersion: 'API-Version',
   CacheControl: 'Cache-Control',
 } as const;

package/src/utils/auth.ts

@@ -15,5 +15,5 @@ export const getCredentials = async (source?: NextRequest | null): Promise<Crede
     return null;
   }
 
-  return decodeAuthToken(token);
+  return await decodeAuthToken(token);
 };

package/src/utils/utils.ts

@@ -1,9 +1,9 @@
-import { verify } from 'jsonwebtoken';
+import { jwtVerify } from 'jose';
 import { twMerge } from 'tailwind-merge';
 
 import type { Credentials, DecodedJWT } from '../types/auth';
 
-export const decodeAuthToken = (token: string): Credentials | null => {
+export const decodeAuthToken = async (token: string): Promise<Credentials | null> => {
   if (!token) {
     return null;
   }
@@ -16,9 +16,10 @@ export const decodeAuthToken = (token: string): Credentials | null => {
       throw new Error('JWT secret not set');
     }
 
-    const user = verify(token, secret) as DecodedJWT;
+    const secretKey = new TextEncoder().encode(secret);
+    const { payload } = await jwtVerify(token, secretKey);
 
-    return { token, user };
+    return { token, user: payload as DecodedJWT };
   } catch (error) {
     console.error('Error decoding auth token:', error);