auth-verify 1.2.5 → 1.2.6

package/index.js

@@ -1,51 +1,43 @@
 const JWTManager = require("./src/jwt");
 const OTPManager = require("./src/otp");
 const SessionManager = require("./src/session");
-const OAuthManager = require("./src/oauth")
+const OAuthManager = require("./src/oauth");
 
 class AuthVerify {
   constructor(options = {}) {
     let {
-      jwtSecret,
+      jwtSecret = "jwt_secret",
+      cookieName = "jwt_token",
       otpExpiry = 300,
       storeTokens = "none",
       otpHash = "sha256",
       redisUrl,
     } = options;
 
-    // if (!jwtSecret) throw new Error("jwtSecret is required in AuthVerify options");
-    if (!jwtSecret) jwtSecret = 'JWT_AUTH_VERIFY_SECRET'
+    // ✅ Ensure cookieName and secret always exist
+    this.cookieName = cookieName;
+    this.jwtSecret = jwtSecret;
+
+    // ✅ Pass both into JWTManager
+    this.jwt = new JWTManager(jwtSecret, {
+      storeTokens,
+      cookieName,
+    });
 
-    this.senderName;
-    this.jwt = new JWTManager(jwtSecret, { storeTokens });
     this.otp = new OTPManager({
       storeTokens,
       otpExpiry,
       otpHash,
       redisUrl,
     });
+
     this.session = new SessionManager({ storeTokens, redisUrl });
+    this.oauth = new OAuthManager();
 
     this.senders = new Map();
-    // this.register = {
-    //   sender: (name, fn)=>{
-    //     if (!name || typeof fn !== "function") {
-    //       throw new Error("Sender registration requires a name and a function");
-    //     }else{
-    //       try{
-    //         this.senders.set(name, fn);
-    //       }catch(err){
-    //         throw new Error(err);
-    //       }
-    //     }
-    //   }
-    // }
-    // ✅ No getters — directly reference otp.dev (it's a plain object)
-
-    this.oauth = new OAuthManager();
   }
-  
-  // Session helpers
+
+  // --- Session helpers ---
   async createSession(userId, options = {}) {
     return this.session.create(userId, options);
   }
@@ -58,33 +50,23 @@ class AuthVerify {
     return this.session.destroy(sessionId);
   }
 
-  async use(name){
-    const senderFn = this.senders.get(name);
-    if(!senderFn) throw new Error(`Sender "${name}" not found`);
-    this.senderName = senderFn;
-  }
+  // --- Sender registration ---
+  register = {
+    sender: (name, fn) => {
+      if (!name || typeof fn !== "function") {
+        throw new Error("Sender registration requires a name and a function");
+      }
+      this.senders.set(name, fn);
+    },
+  };
 
-    register = {
-        sender: (name, fn) => {
-            if (!name || typeof fn !== "function") {
-                throw new Error("Sender registration requires a name and a function");
-            }
-            this.senders.set(name, fn);
-            // console.log(`✅ Sender registered: ${name}`);
-        }
+  use(name) {
+    const senderFn = this.senders.get(name);
+    if (!senderFn) throw new Error(`Sender "${name}" not found`);
+    return {
+      send: async (options) => await senderFn(options),
     };
-
-    // use a sender by name
-    use(name) {
-        const senderFn = this.senders.get(name);
-        if (!senderFn) throw new Error(`Sender "${name}" not found`);
-
-        return {
-            send: async (options) => {
-                return await senderFn(options); // call user function
-            }
-        };
-    }
+  }
 }
 
-module.exports = AuthVerify;
+module.exports = AuthVerify;

package/package.json

@@ -3,6 +3,7 @@
     "auth-verify": "^1.2.4",
     "axios": "^1.12.2",
     "crypto": "^1.0.1",
+    "express": "^5.1.0",
     "ioredis": "^5.8.1",
     "jsonwebtoken": "^9.0.2",
     "node-telegram-bot-api": "^0.66.0",
@@ -12,7 +13,7 @@
     "uuid": "^9.0.1"
   },
   "name": "auth-verify",
-  "version": "1.2.5",
+  "version": "1.2.6",
   "description": "A simple Node.js library for sending and verifying OTP via email, SMS and Telegram bot",
   "main": "index.js",
   "scripts": {

package/src/jwt/index.js

@@ -249,7 +249,8 @@ const CookieManager = require("./cookie");
 class JWTManager {
     constructor(secret, options = {}) {
         // if (!secret) throw new Error("JWT secret is required");
-        this.secret = secret || "jwt_token";
+        this.secret = secret || "jwt_secret";
+        this.cookieName = options.cookieName || "jwt_token";
         this.storeType = options.storeTokens || "none";
 
         if (this.storeType === "memory") {
@@ -307,7 +308,7 @@ class JWTManager {
 
         // Auto cookie support
         if (options.res) {
-            CookieManager.setCookie(options.res, this.secret, token, {
+            CookieManager.setCookie(options.res, this.cookieName, token, {
                 httpOnly: true,
                 secure: options.secure ?? true,
                 sameSite: "Strict",
@@ -325,7 +326,7 @@ class JWTManager {
         // If request object provided
         if (typeof input === "object" && input.headers) {
             token =
-                CookieManager.getCookie(input, this.secret) ||
+                CookieManager.getCookie(input, this.cookieName) ||
                 (input.headers.authorization
                     ? input.headers.authorization.replace("Bearer ", "")
                     : null);

package/tests/jwtmanager.multitab.test.js

@@ -0,0 +1,34 @@
+const express = require("express");
+const request = require("supertest");
+const AuthVerify = require("../index");
+
+describe("JWT multi-tab verification", () => {
+  const auth = new AuthVerify({ jwtSecret: "test_secret", storeTokens: "memory" });
+  const app = express();
+
+  app.get("/login", async (req, res) => {
+    const token = await auth.jwt.sign({ userId: 1 }, "5s", { res });
+    res.json({ token });
+  });
+
+  app.get("/protected", async (req, res) => {
+    try {
+      const data = await auth.jwt.verify(req);
+      res.json({ valid: true, data });
+    } catch (err) {
+      res.status(401).json({ valid: false, error: err.message });
+    }
+  });
+
+  test("should work in second tab (same cookie)", async () => {
+    const loginRes = await request(app).get("/login");
+    const cookie = loginRes.headers["set-cookie"][0];
+
+    const protectedRes = await request(app)
+      .get("/protected")
+      .set("Cookie", cookie);
+
+    expect(protectedRes.body.valid).toBe(true);
+    expect(protectedRes.body.data.userId).toBe(1);
+  });
+});