@yimingliao/cms 0.0.27 → 0.0.28

package/dist/server/index.d.ts

@@ -682,6 +682,45 @@ declare function createAuthUseCases({ prisma, adminQueryRepository, adminRefresh
     }) => Promise<AdminSafe>;
 };
 
+interface CreateVerifyAccessTokenOptions {
+    adminQueryRepository: ReturnType<typeof createAdminQueryRepository>;
+    jwtService: ReturnType<typeof createJwtService>;
+    cryptoService: ReturnType<typeof createCryptoService>;
+    cookieService: ReturnType<typeof createCookieService>;
+    config: {
+        accessTokenName: string;
+        accessTokenSecret: string;
+    };
+}
+declare function createVerifyAccessToken({ adminQueryRepository, jwtService, cryptoService, cookieService, config, }: CreateVerifyAccessTokenOptions): () => Promise<{
+    admin: AdminFull;
+} | null>;
+
+interface CreateVerifyRefreshTokenOptions {
+    adminQueryRepository: ReturnType<typeof createAdminQueryRepository>;
+    adminRefreshTokenQueryRepository: ReturnType<typeof createAdminRefreshTokenQueryRepository>;
+    cryptoService: ReturnType<typeof createCryptoService>;
+    cookieService: ReturnType<typeof createCookieService>;
+    config: {
+        refreshTokenName: string;
+    };
+}
+declare function createVerifyRefreshToken({ adminQueryRepository, adminRefreshTokenQueryRepository, cryptoService, cookieService, config, }: CreateVerifyRefreshTokenOptions): () => Promise<{
+    adminRefreshToken: AdminRefreshToken;
+    admin: AdminFull;
+} | null>;
+
+interface CreateAuthMiddlewareOptions {
+    adminRefreshTokenCommandRepository: ReturnType<typeof createAdminRefreshTokenCommandRepository>;
+    authUseCases: ReturnType<typeof createAuthUseCases>;
+    verifyAccessToken: ReturnType<typeof createVerifyAccessToken>;
+    verifyRefreshToken: ReturnType<typeof createVerifyRefreshToken>;
+    headers: () => Promise<Headers>;
+}
+declare function createAuthMiddleware({ adminRefreshTokenCommandRepository, authUseCases, verifyAccessToken, verifyRefreshToken, headers, }: CreateAuthMiddlewareOptions): Promise<{
+    authenticate(): Promise<AdminFull>;
+}>;
+
 declare class ServerError extends Error {
     readonly i18nKey?: string;
     readonly statusCode?: number;
@@ -700,4 +739,4 @@ declare class ServerError extends Error {
     static internalServerError(): ServerError;
 }
 
-export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, type RawCacheKey, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthUseCases, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, normalizeCacheKey };
+export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, type RawCacheKey, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthMiddleware, createAuthUseCases, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, createVerifyAccessToken, createVerifyRefreshToken, normalizeCacheKey };

package/dist/server/index.js

@@ -1458,7 +1458,7 @@ var ServerError = class _ServerError extends Error {
   }
 };
 
-// src/server/interfaces/normalize-error.ts
+// src/server/interfaces/execution/normalize-error.ts
 var normalizeError = (error, translator) => {
   if (error instanceof ZodError) {
     const errors = error.issues.map((issue) => {
@@ -1488,7 +1488,7 @@ var normalizeError = (error, translator) => {
   };
 };
 
-// src/server/interfaces/execute-action/create-execute-action.ts
+// src/server/interfaces/execution/execute-action/create-execute-action.ts
 function createExecuteAction({
   initI18n,
   cacheResult,
@@ -1546,6 +1546,89 @@ function createExecuteApi({
   };
 }
 
+// src/server/interfaces/middlewares/auth/create-auth-middleware.ts
+async function createAuthMiddleware({
+  adminRefreshTokenCommandRepository,
+  authUseCases,
+  verifyAccessToken,
+  verifyRefreshToken,
+  headers: headers2
+}) {
+  const authMiddleware = {
+    async authenticate() {
+      const verifiedAccessToken = await verifyAccessToken();
+      if (verifiedAccessToken) return verifiedAccessToken.admin;
+      const verifiedRefreshToken = await verifyRefreshToken();
+      if (!verifiedRefreshToken) throw ServerError.unauthorized();
+      const { adminRefreshToken, admin } = verifiedRefreshToken;
+      await adminRefreshTokenCommandRepository.delete({
+        id: adminRefreshToken.id
+      });
+      await authUseCases.refreshTokens({
+        admin,
+        deviceInfo: adminRefreshToken.deviceInfo,
+        ip: (await headers2()).get("x-forwarded-for") || "unknown"
+      });
+      return admin;
+    }
+  };
+  return authMiddleware;
+}
+
+// src/server/interfaces/middlewares/auth/create-verify-access-token.ts
+function createVerifyAccessToken({
+  adminQueryRepository,
+  jwtService,
+  cryptoService,
+  cookieService,
+  config
+}) {
+  return async function verifyAccessToken() {
+    try {
+      const token = await cookieService.getSignedCookie({
+        name: config.accessTokenName
+      });
+      const payload = jwtService.verify({
+        token,
+        secret: cryptoService.hash(config.accessTokenSecret)
+      });
+      const admin = await adminQueryRepository.findFull({
+        id: payload["id"]
+      });
+      return admin ? { admin } : null;
+    } catch {
+      return null;
+    }
+  };
+}
+
+// src/server/interfaces/middlewares/auth/create-verify-refresh-token.ts
+function createVerifyRefreshToken({
+  adminQueryRepository,
+  adminRefreshTokenQueryRepository,
+  cryptoService,
+  cookieService,
+  config
+}) {
+  return async function verifyRefreshToken() {
+    try {
+      const token = await cookieService.getSignedCookie({
+        name: config.refreshTokenName
+      });
+      const adminRefreshToken = await adminRefreshTokenQueryRepository.findByToken({
+        tokenHash: cryptoService.hash(token)
+      });
+      if (!adminRefreshToken) return null;
+      const admin = await adminQueryRepository.findFull({
+        id: adminRefreshToken.adminId
+      });
+      return admin ? { adminRefreshToken, admin } : null;
+    } catch {
+      return null;
+    }
+  };
+}
+
 // src/server/applications/auth/create-auth-use-cases.ts
 function createAuthUseCases({
   prisma,
@@ -1670,4 +1753,4 @@ function createAuthUseCases({
   };
 }
 
-export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthUseCases, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, normalizeCacheKey };
+export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthMiddleware, createAuthUseCases, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, createVerifyAccessToken, createVerifyRefreshToken, normalizeCacheKey };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yimingliao/cms",
-  "version": "0.0.27",
+  "version": "0.0.28",
   "author": "Yiming Liao",
   "license": "MIT",
   "type": "module",