@villedemontreal/jwt-validator 5.7.12 → 5.8.1

package/README.md

@@ -155,6 +155,30 @@ let jwt: string = '...';
 let jwtPayload: IJWTPayload = await jwtValidator.verifyToken(jwt);
 ```
 
+### Token transformation middleware
+
+When working locally, you do not have all the infrastructure required to simulate the translation between an access token and a JWT (ex: Kong).
+
+Prior to usage of the `jwtValidationMiddleware`, you can use the `token transformation middleware` which do an API call to exchange your access token for an extended jwt and update the authorization header.
+
+```typescript
+export async function createApp(apiRoutes: IHandlerRoute[]): Promise<express.Express> {
+  // ...
+
+  if (configs.security.jwt.enable) {
+    if (configs.environment.isLocal) {
+      // Required prior to the jwtValidationMiddleware
+      app.use(tokenTransformationMiddleware(config));
+    }
+
+    // ...
+    app.use(jwtValidationMiddleware())
+  }
+
+  // ...
+}
+```
+
 ## Usage For Tests
 
 This library provides a mock tool to generate your own JWT with a signature which it will be correcly validated.

package/dist/src/config/tokenTransformationMiddlewareConfig.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Configuration for the token transformation
+ * middleware (UTTM).
+ */
+export interface ITokenTtransformationMiddlewareConfig {
+    service: ITokenTtransformationMiddlewareServiceConfig;
+    extensions: {
+        jwt: {
+            customDataProvider: ITokenTtransformationMiddlewareCustomDataProviderConfig;
+        };
+    };
+}
+/**
+ * Configuration specific for the token transformation service.
+ */
+export interface ITokenTtransformationMiddlewareServiceConfig {
+    uri: string;
+}
+/**
+ * Configuration specific for the custom data provider.
+ */
+export interface ITokenTtransformationMiddlewareCustomDataProviderConfig {
+    uri: string;
+    method: string;
+    options: any;
+}

package/dist/src/config/tokenTransformationMiddlewareConfig.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=tokenTransformationMiddlewareConfig.js.map

package/dist/src/config/tokenTransformationMiddlewareConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenTransformationMiddlewareConfig.js","sourceRoot":"","sources":["../../../src/config/tokenTransformationMiddlewareConfig.ts"],"names":[],"mappings":""}

package/dist/src/index.d.ts

@@ -2,6 +2,7 @@ export * from './config/constants';
 export * from './config/init';
 export * from './jwtValidator';
 export * from './middleware/jwtMiddleware';
+export * from './middleware/tokenTransformationMiddleware';
 export * from './models/expressRequest';
 export * from './models/gluuUserType';
 export * from './models/jwtPayload';

package/dist/src/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./config/constants"), exports);
 __exportStar(require("./config/init"), exports);
 __exportStar(require("./jwtValidator"), exports);
 __exportStar(require("./middleware/jwtMiddleware"), exports);
+__exportStar(require("./middleware/tokenTransformationMiddleware"), exports);
 __exportStar(require("./models/expressRequest"), exports);
 __exportStar(require("./models/gluuUserType"), exports);
 __exportStar(require("./models/jwtPayload"), exports);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,6CAA6C;AAC7C,gDAAgD;AAChD,6CAA6C;AAC7C,qCAAqC;AACrC,6CAA6C;AAC7C,gDAA8B;AAC9B,iDAA+B;AAC/B,6DAA2C;AAC3C,0DAAwC;AACxC,wDAAsC;AACtC,sDAAoC;AACpC,qDAAmC;AACnC,kDAAgC;AAChC,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,6CAA6C;AAC7C,gDAAgD;AAChD,6CAA6C;AAC7C,qCAAqC;AACrC,6CAA6C;AAC7C,gDAA8B;AAC9B,iDAA+B;AAC/B,6DAA2C;AAC3C,6EAA2D;AAC3D,0DAAwC;AACxC,wDAAsC;AACtC,sDAAoC;AACpC,qDAAmC;AACnC,kDAAgC;AAChC,kDAAgC"}

package/dist/src/jwtValidator.js

@@ -36,7 +36,7 @@ class JwtValidator {
         const key = await this.getJwtPublicKey(payload);
         this.validateJwtCreationTimestamp(payload, key);
         this.validateJwtExpirationTimestamp(payload, key);
-        return this.verifyJwt(token, key.publicKey);
+        return this.verifyJwt(token, key);
     }
     parseJwt(token) {
         const payload = jwt.decode(token);
@@ -52,7 +52,7 @@ class JwtValidator {
     verifyJwt(token, publicKey) {
         let payload;
         try {
-            payload = jwt.verify(token, publicKey);
+            payload = jwt.verify(token, publicKey.parsedPublicKey ?? publicKey.publicKey);
         }
         catch (err) {
             throw (0, customError_1.createInvalidJwtError)({

package/dist/src/jwtValidator.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwtValidator.js","sourceRoot":"","sources":["../../src/jwtValidator.ts"],"names":[],"mappings":";;;AAAA,kEAAuD;AACvD,oCAAoC;AACpC,iCAAiC;AACjC,kDAA+C;AAC/C,sDAA2F;AAC3F,oDAAgE;AAChE,kDAAgE;AAChE,wFAAqF;AAuBrF;;GAEG;AACH,MAAM,YAAY;IACT,KAAK,CAAC,yBAAyB,CAAC,MAAc;QACnD,IAAI,qBAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzB,MAAM,IAAA,0CAA4B,EAAC;gBACjC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;gBACvC,MAAM,EAAE,sBAAsB;gBAC9B,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;SACJ;QAED,MAAM,KAAK,GAAa,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE;YACzB,MAAM,IAAA,0CAA4B,EAAC;gBACjC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,sBAAsB;gBAC9B,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;SACJ;QAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,KAAa;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAEhD,IAAI,CAAC,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,MAAM,OAAO,GAAgB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAgB,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,eAAe;aACzB,CAAC,CAAC;SACJ;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,SAAiB;QAChD,IAAI,OAAY,CAAC;QACjB,IAAI;YACF,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;SACxC;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;SACJ;QAED,IAAI,IAAA,yBAAY,EAAC,OAAO,CAAC,EAAE;YACzB,OAAO,OAAO,CAAC;SAChB;QACD,MAAM,IAAA,mCAAqB,EAAC;YAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAoB;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,EAAE;YACxB,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;SACJ;QAED,MAAM,GAAG,GAAe,MAAM,qDAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEtE,kBAAkB;QAClB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,0BAAc,CAAC,MAAM,EAAE;YAC/C,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;SACJ;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,4BAA4B,CAAC,OAAoB,EAAE,GAAe;QACxE,oEAAoE;QACpE,MAAM,UAAU,GAAkB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,YAAY,GAAkB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YACrC,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;SACJ;IACH,CAAC;IAEO,8BAA8B,CAAC,OAAoB,EAAE,GAAe;QAC1E,wBAAwB;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE;YACjB,MAAM,YAAY,GAAkB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;gBACvC,MAAM,IAAA,mCAAqB,EAAC;oBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;oBAC1C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;aACJ;YAED,qEAAqE;YACrE,MAAM,UAAU,GAAkB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;YACjE,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;gBACrC,MAAM,IAAA,mCAAqB,EAAC;oBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;oBAC1C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,kEAAkE;iBAC5E,CAAC,CAAC;aACJ;SACF;IACH,CAAC;CACF;AAEY,QAAA,YAAY,GAAkB,IAAI,YAAY,EAAE,CAAC"}
+{"version":3,"file":"jwtValidator.js","sourceRoot":"","sources":["../../src/jwtValidator.ts"],"names":[],"mappings":";;;AAAA,kEAAuD;AACvD,oCAAoC;AACpC,iCAAiC;AACjC,kDAA+C;AAC/C,sDAA2F;AAC3F,oDAAgE;AAChE,kDAAgE;AAChE,wFAAqF;AAuBrF;;GAEG;AACH,MAAM,YAAY;IACT,KAAK,CAAC,yBAAyB,CAAC,MAAc;QACnD,IAAI,qBAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzB,MAAM,IAAA,0CAA4B,EAAC;gBACjC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;gBACvC,MAAM,EAAE,sBAAsB;gBAC9B,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;SACJ;QAED,MAAM,KAAK,GAAa,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE;YACzB,MAAM,IAAA,0CAA4B,EAAC;gBACjC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,sBAAsB;gBAC9B,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;SACJ;QAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,KAAa;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAEhD,IAAI,CAAC,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,MAAM,OAAO,GAAgB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAgB,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,eAAe;aACzB,CAAC,CAAC;SACJ;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,SAAqB;QACpD,IAAI,OAAY,CAAC;QACjB,IAAI;YACF,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC;SAC/E;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;SACJ;QAED,IAAI,IAAA,yBAAY,EAAC,OAAO,CAAC,EAAE;YACzB,OAAO,OAAO,CAAC;SAChB;QACD,MAAM,IAAA,mCAAqB,EAAC;YAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAoB;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,EAAE;YACxB,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;SACJ;QAED,MAAM,GAAG,GAAe,MAAM,qDAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEtE,kBAAkB;QAClB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,0BAAc,CAAC,MAAM,EAAE;YAC/C,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;SACJ;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,4BAA4B,CAAC,OAAoB,EAAE,GAAe;QACxE,oEAAoE;QACpE,MAAM,UAAU,GAAkB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,YAAY,GAAkB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YACrC,MAAM,IAAA,mCAAqB,EAAC;gBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;SACJ;IACH,CAAC;IAEO,8BAA8B,CAAC,OAAoB,EAAE,GAAe;QAC1E,wBAAwB;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE;YACjB,MAAM,YAAY,GAAkB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;gBACvC,MAAM,IAAA,mCAAqB,EAAC;oBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;oBAC1C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;aACJ;YAED,qEAAqE;YACrE,MAAM,UAAU,GAAkB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;YACjE,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;gBACrC,MAAM,IAAA,mCAAqB,EAAC;oBAC1B,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;oBAC1C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,kEAAkE;iBAC5E,CAAC,CAAC;aACJ;SACF;IACH,CAAC;CACF;AAEY,QAAA,YAAY,GAAkB,IAAI,YAAY,EAAE,CAAC"}

package/dist/src/middleware/tokenTransformationMiddleware.d.ts

@@ -0,0 +1,9 @@
+import * as express from 'express';
+import { ITokenTtransformationMiddlewareConfig } from '../config/tokenTransformationMiddlewareConfig';
+/**
+ * Token transformation Middleware. It will generate extended jwt
+ * in exchange for an access token.
+ *
+ * @param {boolean} config Configuration of the middleware.
+ */
+export declare const tokenTransformationMiddleware: (config?: ITokenTtransformationMiddlewareConfig) => (req: express.Request, res: express.Response, next: express.NextFunction) => void;

package/dist/src/middleware/tokenTransformationMiddleware.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenTransformationMiddleware = void 0;
+const general_utils_1 = require("@villedemontreal/general-utils");
+const http_header_fields_typed_1 = require("http-header-fields-typed");
+const constants_1 = require("../config/constants");
+const customError_1 = require("../models/customError");
+const logger_1 = require("../utils/logger");
+const superagent = require("superagent");
+const _regexAccessToken = /([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})/;
+const logger = (0, logger_1.createLogger)('Token transformation middleware');
+/**
+ * Token transformation Middleware. It will generate extended jwt
+ * in exchange for an access token.
+ *
+ * @param {boolean} config Configuration of the middleware.
+ */
+const tokenTransformationMiddleware = (config) => {
+    return (req, res, next) => {
+        try {
+            // Validate the authorization header
+            const authHeader = req.get(http_header_fields_typed_1.default.AUTHORIZATION);
+            if (general_utils_1.utils.isBlank(authHeader)) {
+                throw (0, customError_1.createInvalidAuthHeaderError)({
+                    code: constants_1.constants.errors.codes.INVALID_VALUE,
+                    target: 'authorization_header',
+                    message: 'authorization header is empty',
+                });
+            }
+            // Extract the access token value from the authorization header
+            const accessTokenRegExpArray = _regexAccessToken.exec(authHeader);
+            if (accessTokenRegExpArray.length <= 1) {
+                throw (0, customError_1.createInvalidAuthHeaderError)({
+                    code: constants_1.constants.errors.codes.INVALID_VALUE,
+                    target: 'access_token',
+                    message: 'could not find a valid access token from the authorization header',
+                });
+            }
+            const accessToken = accessTokenRegExpArray[1];
+            // Call the service endpoint to exchange the access token for a extended jwt
+            superagent
+                .post(config.service.uri)
+                .send({ accessToken, extensions: config.extensions })
+                .then((response) => {
+                const extendedJwt = response.body.jwts?.extended;
+                logger.debug(extendedJwt, 'Extended jwt content.');
+                const basicJwt = response.body.jwts?.basic;
+                logger.debug(basicJwt, 'Basic jwt content.');
+                // Get the extended jwt. If not available, fallback to basic jwt.
+                const jwt = extendedJwt ?? basicJwt;
+                if (jwt) {
+                    // Warning: Headers are all in lowercase. To be sure to replace
+                    // the authorization header instead of duplicate it, must use lower case property name.
+                    req.headers[http_header_fields_typed_1.default.AUTHORIZATION.toLowerCase()] = `Bearer ${jwt}`;
+                    logger.debug(req.headers, 'Request headers');
+                    next();
+                }
+                else {
+                    const err = (0, customError_1.createInvalidJwtError)({
+                        code: constants_1.constants.errors.codes.NULL_VALUE,
+                        target: 'jwt',
+                        message: 'could not get a valid jwt from token translation service',
+                    });
+                    next(err);
+                }
+            })
+                .catch((err) => next(err));
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+};
+exports.tokenTransformationMiddleware = tokenTransformationMiddleware;
+//# sourceMappingURL=tokenTransformationMiddleware.js.map

package/dist/src/middleware/tokenTransformationMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenTransformationMiddleware.js","sourceRoot":"","sources":["../../../src/middleware/tokenTransformationMiddleware.ts"],"names":[],"mappings":";;;AAAA,kEAAuD;AAEvD,uEAA6D;AAC7D,mDAAgD;AAEhD,uDAA4F;AAC5F,4CAA+C;AAC/C,yCAA0C;AAE1C,MAAM,iBAAiB,GAAG,gEAAgE,CAAC;AAE3F,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,iCAAiC,CAAC,CAAC;AAE/D;;;;;GAKG;AACI,MAAM,6BAA6B,GAE+C,CACvF,MAAM,EACN,EAAE;IACF,OAAO,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAQ,EAAE;QACvF,IAAI;YACF,oCAAoC;YACpC,MAAM,UAAU,GAAW,GAAG,CAAC,GAAG,CAAC,kCAAqB,CAAC,aAAa,CAAC,CAAC;YACxE,IAAI,qBAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;gBAC7B,MAAM,IAAA,0CAA4B,EAAC;oBACjC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;oBAC1C,MAAM,EAAE,sBAAsB;oBAC9B,OAAO,EAAE,+BAA+B;iBACzC,CAAC,CAAC;aACJ;YAED,+DAA+D;YAC/D,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClE,IAAI,sBAAsB,CAAC,MAAM,IAAI,CAAC,EAAE;gBACtC,MAAM,IAAA,0CAA4B,EAAC;oBACjC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;oBAC1C,MAAM,EAAE,cAAc;oBACtB,OAAO,EAAE,mEAAmE;iBAC7E,CAAC,CAAC;aACJ;YACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAE9C,4EAA4E;YAC5E,UAAU;iBACP,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBACxB,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;iBACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACjD,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;gBAEnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;gBAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;gBAE7C,iEAAiE;gBACjE,MAAM,GAAG,GAAG,WAAW,IAAI,QAAQ,CAAC;gBAEpC,IAAI,GAAG,EAAE;oBACP,+DAA+D;oBAC/D,uFAAuF;oBACvF,GAAG,CAAC,OAAO,CAAC,kCAAqB,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,GAAG,UAAU,GAAG,EAAE,CAAC;oBACjF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;oBAC7C,IAAI,EAAE,CAAC;iBACR;qBAAM;oBACL,MAAM,GAAG,GAAG,IAAA,mCAAqB,EAAC;wBAChC,IAAI,EAAE,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;wBACvC,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,0DAA0D;qBACpE,CAAC,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC,CAAC;iBACX;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9B;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,CAAC,GAAG,CAAC,CAAC;SACX;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AA9DW,QAAA,6BAA6B,iCA8DxC"}

package/dist/src/models/publicKey.d.ts

@@ -1,3 +1,5 @@
+/// <reference types="node" />
+import * as crypto from 'crypto';
 /**
  * The content of public key
  */
@@ -5,6 +7,7 @@ export interface IPublicKey {
     id: number;
     algorithm: string;
     publicKey: string;
+    parsedPublicKey?: crypto.KeyObject;
     state: PublicKeyState;
     createdAt?: string;
     expiresAt?: string;

package/dist/src/models/publicKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicKey.js","sourceRoot":"","sources":["../../../src/models/publicKey.ts"],"names":[],"mappings":";;;AAyBA;;GAEG;AACH,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,qCAAmB,CAAA;IACnB,qCAAmB,CAAA;AACrB,CAAC,EAJW,cAAc,GAAd,sBAAc,KAAd,sBAAc,QAIzB"}
+{"version":3,"file":"publicKey.js","sourceRoot":"","sources":["../../../src/models/publicKey.ts"],"names":[],"mappings":";;;AA4BA;;GAEG;AACH,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,qCAAmB,CAAA;IACnB,qCAAmB,CAAA;AACrB,CAAC,EAJW,cAAc,GAAd,sBAAc,KAAd,sBAAc,QAIzB"}

package/dist/src/repositories/publicKeyRepository.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.publicKeyRepository = void 0;
 const http_request_1 = require("@villedemontreal/http-request");
+const crypto = require("crypto");
 const lodash_1 = require("lodash");
 const superagent = require("superagent");
 const general_utils_1 = require("@villedemontreal/general-utils");
@@ -13,11 +14,15 @@ class PublicKeyRepository {
         const request = superagent.get(url);
         const response = await http_request_1.httpUtils.send(request);
         if (!response.ok) {
-            throw new Error(`An error occured calling ${url} : ${response.error}`);
+            throw new Error(`An error occurred calling ${url} : ${response.error}`);
         }
         const data = response.body;
         if (data && data.items && (0, lodash_1.isArray)(data.items)) {
-            const newKeys = (0, lodash_1.keyBy)(data.items, (item) => item.id);
+            const items = data.items.map((key) => ({
+                ...key,
+                parsedPublicKey: crypto.createPublicKey(key.publicKey),
+            }));
+            const newKeys = (0, lodash_1.keyBy)(items, (item) => item.id);
             return newKeys;
         }
         return null;
@@ -33,11 +38,14 @@ class PublicKeyRepository {
             if (response.status === 404) {
                 return null;
             }
-            throw (0, general_utils_1.createError)(constants_1.constants.errors.codes.UNABLE_TO_GET_PUBLIC_KEY, `An error occured calling ${url} : ${response.error}`)
+            throw (0, general_utils_1.createError)(constants_1.constants.errors.codes.UNABLE_TO_GET_PUBLIC_KEY, `An error occurred calling ${url} : ${response.error}`)
                 .httpStatus(response.status)
                 .build();
         }
-        return response.body;
+        return {
+            ...response.body,
+            parsedPublicKey: crypto.createPublicKey(response.body.publicKey),
+        };
     }
 }
 exports.publicKeyRepository = new PublicKeyRepository();

package/dist/src/repositories/publicKeyRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicKeyRepository.js","sourceRoot":"","sources":["../../../src/repositories/publicKeyRepository.ts"],"names":[],"mappings":";;;AAAA,gEAA0D;AAC1D,mCAAwC;AACxC,yCAAyC;AAEzC,kEAA6D;AAC7D,+CAA4C;AAC5C,mDAAgD;AAuBhD,MAAM,mBAAmB;IAChB,KAAK,CAAC,MAAM;QACjB,MAAM,GAAG,GAAG,GAAG,wBAAS,CAAC,OAAO,CAC9B,iBAAO,CAAC,OAAO,EAAE,EACjB,iBAAO,CAAC,WAAW,EAAE,CACtB,IAAI,iBAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,wBAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;SACxE;QAED,MAAM,IAAI,GAAiC,QAAQ,CAAC,IAAI,CAAC;QACzD,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAA,gBAAO,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC7C,MAAM,OAAO,GAAgB,IAAA,cAAK,EAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClE,OAAO,OAAO,CAAC;SAChB;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa;QAC/B,MAAM,GAAG,GAAG,wBAAS,CAAC,OAAO,CAAC,iBAAO,CAAC,OAAO,EAAE,EAAE,iBAAO,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,wBAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,6CAA6C;YAC7C,4BAA4B;YAC5B,6CAA6C;YAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC3B,OAAO,IAAI,CAAC;aACb;YAED,MAAM,IAAA,2BAAW,EACf,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAC/C,4BAA4B,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CACtD;iBACE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC3B,KAAK,EAAE,CAAC;SACZ;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF;AAEY,QAAA,mBAAmB,GAAyB,IAAI,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"publicKeyRepository.js","sourceRoot":"","sources":["../../../src/repositories/publicKeyRepository.ts"],"names":[],"mappings":";;;AAAA,gEAA0D;AAC1D,iCAAiC;AACjC,mCAAwC;AACxC,yCAAyC;AAEzC,kEAA6D;AAC7D,+CAA4C;AAC5C,mDAAgD;AAuBhD,MAAM,mBAAmB;IAChB,KAAK,CAAC,MAAM;QACjB,MAAM,GAAG,GAAG,GAAG,wBAAS,CAAC,OAAO,CAC9B,iBAAO,CAAC,OAAO,EAAE,EACjB,iBAAO,CAAC,WAAW,EAAE,CACtB,IAAI,iBAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,wBAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;SACzE;QAED,MAAM,IAAI,GAAiC,QAAQ,CAAC,IAAI,CAAC;QACzD,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAA,gBAAO,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC7C,MAAM,KAAK,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnD,GAAG,GAAG;gBACN,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC,CAAC;YACJ,MAAM,OAAO,GAAgB,IAAA,cAAK,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,OAAO,OAAO,CAAC;SAChB;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa;QAC/B,MAAM,GAAG,GAAG,wBAAS,CAAC,OAAO,CAAC,iBAAO,CAAC,OAAO,EAAE,EAAE,iBAAO,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,wBAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,6CAA6C;YAC7C,4BAA4B;YAC5B,6CAA6C;YAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC3B,OAAO,IAAI,CAAC;aACb;YAED,MAAM,IAAA,2BAAW,EACf,qBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAC/C,6BAA6B,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CACvD;iBACE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC3B,KAAK,EAAE,CAAC;SACZ;QACD,OAAO;YACL,GAAG,QAAQ,CAAC,IAAI;YAChB,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;SACjE,CAAC;IACJ,CAAC;CACF;AAEY,QAAA,mBAAmB,GAAyB,IAAI,mBAAmB,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@villedemontreal/jwt-validator",
-  "version": "5.7.12",
+  "version": "5.8.1",
   "description": "Module to validate JWT (JSON Web Tokens)",
   "main": "dist/src/index.js",
   "typings": "dist/src",
@@ -50,8 +50,8 @@
     "@types/express": "4.17.17",
     "@types/http-status-codes": "1.2.0",
     "@types/jsonwebtoken": "9.0.1",
-    "@types/lodash": "4.14.191",
-    "@types/node": "18.15.3",
+    "@types/lodash": "4.14.192",
+    "@types/node": "18.15.11",
     "@types/request": "2.48.8",
     "@types/request-promise-native": "1.0.18",
     "@types/superagent": "4.1.16",
@@ -60,23 +60,23 @@
     "@types/mocha": "10.0.1",
     "@types/sinon": "10.0.13",
     "@types/validator": "13.7.14",
-    "@typescript-eslint/eslint-plugin": "5.55.0",
-    "@typescript-eslint/parser": "5.55.0",
+    "@typescript-eslint/eslint-plugin": "5.57.1",
+    "@typescript-eslint/parser": "5.57.1",
     "@villedemontreal/scripting": "2.1.6",
     "chai": "4.3.7",
-    "eslint": "8.36.0",
-    "eslint-config-prettier": "8.7.0",
+    "eslint": "8.38.0",
+    "eslint-config-prettier": "8.8.0",
     "eslint-plugin-prettier": "4.2.1",
-    "fs-extra": "11.1.0",
+    "fs-extra": "11.1.1",
     "mocha": "10.2.0",
     "mocha-jenkins-reporter": "0.4.8",
     "mock-express-request": "0.2.2",
     "node-mocks-http": "1.12.2",
     "node-notifier": "10.0.1",
     "nyc": "15.1.0",
-    "sinon": "15.0.2",
+    "sinon": "15.0.3",
     "superagent-mocker": "0.5.2",
-    "typescript": "5.0.2",
+    "typescript": "5.0.4",
     "validator": "13.9.0"
   }
 }

package/src/config/tokenTransformationMiddlewareConfig.ts

@@ -0,0 +1,28 @@
+/**
+ * Configuration for the token transformation
+ * middleware (UTTM).
+ */
+export interface ITokenTtransformationMiddlewareConfig {
+  service: ITokenTtransformationMiddlewareServiceConfig;
+  extensions: {
+    jwt: {
+      customDataProvider: ITokenTtransformationMiddlewareCustomDataProviderConfig;
+    };
+  };
+}
+
+/**
+ * Configuration specific for the token transformation service.
+ */
+export interface ITokenTtransformationMiddlewareServiceConfig {
+  uri: string;
+}
+
+/**
+ * Configuration specific for the custom data provider.
+ */
+export interface ITokenTtransformationMiddlewareCustomDataProviderConfig {
+  uri: string;
+  method: string;
+  options: any;
+}

package/src/index.ts

@@ -7,6 +7,7 @@ export * from './config/constants';
 export * from './config/init';
 export * from './jwtValidator';
 export * from './middleware/jwtMiddleware';
+export * from './middleware/tokenTransformationMiddleware';
 export * from './models/expressRequest';
 export * from './models/gluuUserType';
 export * from './models/jwtPayload';

package/src/jwtValidator.ts

@@ -61,7 +61,7 @@ class JwtValidator implements IJwtValidator {
     this.validateJwtCreationTimestamp(payload, key);
     this.validateJwtExpirationTimestamp(payload, key);
 
-    return this.verifyJwt(token, key.publicKey);
+    return this.verifyJwt(token, key);
   }
 
   private parseJwt(token: string): IJWTPayload {
@@ -76,10 +76,10 @@ class JwtValidator implements IJwtValidator {
     return payload;
   }
 
-  private verifyJwt(token: string, publicKey: string): IJWTPayload {
+  private verifyJwt(token: string, publicKey: IPublicKey): IJWTPayload {
     let payload: any;
     try {
-      payload = jwt.verify(token, publicKey);
+      payload = jwt.verify(token, publicKey.parsedPublicKey ?? publicKey.publicKey);
     } catch (err) {
       throw createInvalidJwtError({
         code: constants.errors.codes.INVALID_VALUE,

package/src/middleware/tokenTransformationMiddleware.ts

@@ -0,0 +1,82 @@
+import { utils } from '@villedemontreal/general-utils';
+import * as express from 'express';
+import httpHeaderFieldsTyped from 'http-header-fields-typed';
+import { constants } from '../config/constants';
+import { ITokenTtransformationMiddlewareConfig } from '../config/tokenTransformationMiddlewareConfig';
+import { createInvalidAuthHeaderError, createInvalidJwtError } from '../models/customError';
+import { createLogger } from '../utils/logger';
+import superagent = require('superagent');
+
+const _regexAccessToken = /([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})/;
+
+const logger = createLogger('Token transformation middleware');
+
+/**
+ * Token transformation Middleware. It will generate extended jwt
+ * in exchange for an access token.
+ *
+ * @param {boolean} config Configuration of the middleware.
+ */
+export const tokenTransformationMiddleware: (
+  config?: ITokenTtransformationMiddlewareConfig
+) => (req: express.Request, res: express.Response, next: express.NextFunction) => void = (
+  config
+) => {
+  return (req: express.Request, res: express.Response, next: express.NextFunction): void => {
+    try {
+      // Validate the authorization header
+      const authHeader: string = req.get(httpHeaderFieldsTyped.AUTHORIZATION);
+      if (utils.isBlank(authHeader)) {
+        throw createInvalidAuthHeaderError({
+          code: constants.errors.codes.INVALID_VALUE,
+          target: 'authorization_header',
+          message: 'authorization header is empty',
+        });
+      }
+
+      // Extract the access token value from the authorization header
+      const accessTokenRegExpArray = _regexAccessToken.exec(authHeader);
+      if (accessTokenRegExpArray.length <= 1) {
+        throw createInvalidAuthHeaderError({
+          code: constants.errors.codes.INVALID_VALUE,
+          target: 'access_token',
+          message: 'could not find a valid access token from the authorization header',
+        });
+      }
+      const accessToken = accessTokenRegExpArray[1];
+
+      // Call the service endpoint to exchange the access token for a extended jwt
+      superagent
+        .post(config.service.uri)
+        .send({ accessToken, extensions: config.extensions })
+        .then((response) => {
+          const extendedJwt = response.body.jwts?.extended;
+          logger.debug(extendedJwt, 'Extended jwt content.');
+
+          const basicJwt = response.body.jwts?.basic;
+          logger.debug(basicJwt, 'Basic jwt content.');
+
+          // Get the extended jwt. If not available, fallback to basic jwt.
+          const jwt = extendedJwt ?? basicJwt;
+
+          if (jwt) {
+            // Warning: Headers are all in lowercase. To be sure to replace
+            // the authorization header instead of duplicate it, must use lower case property name.
+            req.headers[httpHeaderFieldsTyped.AUTHORIZATION.toLowerCase()] = `Bearer ${jwt}`;
+            logger.debug(req.headers, 'Request headers');
+            next();
+          } else {
+            const err = createInvalidJwtError({
+              code: constants.errors.codes.NULL_VALUE,
+              target: 'jwt',
+              message: 'could not get a valid jwt from token translation service',
+            });
+            next(err);
+          }
+        })
+        .catch((err) => next(err));
+    } catch (err) {
+      next(err);
+    }
+  };
+};

package/src/models/publicKey.ts

@@ -1,3 +1,5 @@
+import * as crypto from 'crypto';
+
 /**
  * The content of public key
  */
@@ -5,6 +7,7 @@ export interface IPublicKey {
   id: number;
   algorithm: string;
   publicKey: string;
+  parsedPublicKey?: crypto.KeyObject;
   state: PublicKeyState;
   createdAt?: string;
   expiresAt?: string;

package/src/repositories/publicKeyRepository.ts

@@ -1,4 +1,5 @@
 import { httpUtils } from '@villedemontreal/http-request';
+import * as crypto from 'crypto';
 import { isArray, keyBy } from 'lodash';
 import * as superagent from 'superagent';
 
@@ -37,12 +38,16 @@ class PublicKeyRepository implements IPublicKeyRepository {
 
     const response = await httpUtils.send(request);
     if (!response.ok) {
-      throw new Error(`An error occured calling ${url} : ${response.error}`);
+      throw new Error(`An error occurred calling ${url} : ${response.error}`);
     }
 
     const data: IPaginatedResult<IPublicKey> = response.body;
     if (data && data.items && isArray(data.items)) {
-      const newKeys: IPublicKeys = keyBy(data.items, (item) => item.id);
+      const items: IPublicKey[] = data.items.map((key) => ({
+        ...key,
+        parsedPublicKey: crypto.createPublicKey(key.publicKey),
+      }));
+      const newKeys: IPublicKeys = keyBy(items, (item) => item.id);
       return newKeys;
     }
     return null;
@@ -63,12 +68,15 @@ class PublicKeyRepository implements IPublicKeyRepository {
 
       throw createError(
         constants.errors.codes.UNABLE_TO_GET_PUBLIC_KEY,
-        `An error occured calling ${url} : ${response.error}`
+        `An error occurred calling ${url} : ${response.error}`
       )
         .httpStatus(response.status)
         .build();
     }
-    return response.body;
+    return {
+      ...response.body,
+      parsedPublicKey: crypto.createPublicKey(response.body.publicKey),
+    };
   }
 }