@yimingliao/cms 0.0.26 → 0.0.27

package/dist/server/index.d.ts

@@ -629,15 +629,20 @@ interface CreateAuthUseCases {
     jwtService: ReturnType<typeof createJwtService>;
     argon2Service: ReturnType<typeof createArgon2Service>;
     cryptoService: ReturnType<typeof createCryptoService>;
+    cookieService: ReturnType<typeof createCookieService>;
     config: {
+        refreshTokenName: string;
+        refreshTokenTtl: number;
+        accessTokenName: string;
+        accessTokenSecret: string;
+        accessTokenTtl: number;
         resetPasswordSecret: string;
         resetPasswordTtl: number;
         verifyEmailSecret: string;
         verifyEmailTtl: number;
-        refreshTokenTtl: number;
     };
 }
-declare function createAuthUseCases({ prisma, adminQueryRepository, adminRefreshTokenCommandRepository, jwtService, argon2Service, cryptoService, config, }: CreateAuthUseCases): {
+declare function createAuthUseCases({ prisma, adminQueryRepository, adminRefreshTokenCommandRepository, jwtService, argon2Service, cryptoService, cookieService, config, }: CreateAuthUseCases): {
     verifyCredentials: ({ email, password, }: {
         email: string;
         password: string;
@@ -646,6 +651,22 @@ declare function createAuthUseCases({ prisma, adminQueryRepository, adminRefresh
         email: string;
         password: string;
     }) => Promise<Admin>;
+    createRefreshToken: ({ admin, deviceInfo, ip, }: {
+        admin: {
+            id: string;
+            email: string;
+        };
+        deviceInfo: DeviceInfo;
+        ip: string;
+    }) => Promise<string>;
+    refreshTokens: ({ admin, deviceInfo, ip, }: {
+        admin: {
+            id: string;
+            email: string;
+        };
+        deviceInfo: DeviceInfo;
+        ip: string;
+    }) => Promise<void>;
     signPasswordResetToken: ({ admin }: {
         admin: AdminSafe;
     }) => string;
@@ -659,11 +680,6 @@ declare function createAuthUseCases({ prisma, adminQueryRepository, adminRefresh
         token: string;
         admin: AdminSafe;
     }) => Promise<AdminSafe>;
-    createRefreshToken: ({ admin, deviceInfo, ip, }: {
-        admin: AdminSafe;
-        deviceInfo: DeviceInfo;
-        ip: string;
-    }) => Promise<string>;
 };
 
 declare class ServerError extends Error {

package/dist/server/index.js

@@ -1554,6 +1554,7 @@ function createAuthUseCases({
   jwtService,
   argon2Service,
   cryptoService,
+  cookieService,
   config
 }) {
   async function verifyCredentials({
@@ -1577,6 +1578,45 @@ function createAuthUseCases({
     });
     return updatedAdmin;
   }
+  async function createRefreshToken({
+    admin,
+    deviceInfo,
+    ip
+  }) {
+    const token = cryptoService.generateToken();
+    const tokenHash = cryptoService.hash(token);
+    await adminRefreshTokenCommandRepository.create({
+      tokenHash,
+      ip,
+      deviceInfo,
+      expiresAt: new Date(Date.now() + config.refreshTokenTtl * 1e3),
+      adminId: admin.id,
+      email: admin.email
+    });
+    return token;
+  }
+  async function refreshTokens({
+    admin,
+    deviceInfo,
+    ip
+  }) {
+    const token = await createRefreshToken({ admin, deviceInfo, ip });
+    await cookieService.setSignedCookie({
+      name: config.refreshTokenName,
+      value: token,
+      expireSeconds: config.refreshTokenTtl
+    });
+    const accessToken = jwtService.sign({
+      payload: { id: admin.id },
+      secret: cryptoService.hash(config.accessTokenSecret),
+      expiresIn: config.accessTokenTtl
+    });
+    await cookieService.setSignedCookie({
+      name: config.accessTokenName,
+      value: accessToken,
+      expireSeconds: config.accessTokenTtl
+    });
+  }
   function signPasswordResetToken({ admin }) {
     const payload = { email: admin.email };
     const passwordResetToken = jwtService.sign({
@@ -1616,33 +1656,17 @@ function createAuthUseCases({
     });
     return updatedAdmin;
   }
-  async function createRefreshToken({
-    admin,
-    deviceInfo,
-    ip
-  }) {
-    const token = cryptoService.generateToken();
-    const tokenHash = cryptoService.hash(token);
-    await adminRefreshTokenCommandRepository.create({
-      tokenHash,
-      ip,
-      deviceInfo,
-      expiresAt: new Date(Date.now() + config.refreshTokenTtl * 1e3),
-      adminId: admin.id,
-      email: admin.email
-    });
-    return token;
-  }
   return {
     verifyCredentials,
     updatePassword,
+    createRefreshToken,
+    refreshTokens,
     // reset password
     signPasswordResetToken,
     verifyPasswordResetToken,
     // verify email
     signEmailVerificationToken,
-    verifyEmailAndUpdate,
-    createRefreshToken
+    verifyEmailAndUpdate
   };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yimingliao/cms",
-  "version": "0.0.26",
+  "version": "0.0.27",
   "author": "Yiming Liao",
   "license": "MIT",
   "type": "module",