canopycms-auth-dev 0.0.0

package/src/index.ts

@@ -0,0 +1,11 @@
+export {
+  createDevAuthPlugin,
+  DevAuthPlugin,
+  DEFAULT_USERS,
+  DEFAULT_GROUPS,
+  DEV_ADMIN_USER_ID,
+} from './dev-plugin'
+export type { DevAuthConfig, DevUser, DevGroup } from './dev-plugin'
+export { createDevTokenVerifier } from './jwt-verifier'
+export { refreshDevCache } from './cache-writer'
+export type { RefreshDevCacheOptions } from './cache-writer'

package/src/jwt-verifier.ts

@@ -0,0 +1,46 @@
+import { extractHeaders } from 'canopycms/auth'
+import type { TokenVerifier } from 'canopycms/auth'
+import { getDevUserCookieFromHeaders, DEFAULT_USER_ID } from './cookie-utils'
+import { DEV_ADMIN_USER_ID } from './dev-plugin'
+
+/**
+ * Test user key → dev user ID mapping.
+ * Matches the mapping in DevAuthPlugin.mapTestUserKey().
+ */
+const TEST_USER_MAP: Record<string, string> = {
+  admin: DEV_ADMIN_USER_ID,
+  editor: 'dev_user1_2nK8mP4xL9',
+  viewer: 'dev_user2_7qR3tY6wN2',
+  reviewer: 'dev_reviewer_9aB4cD2eF7',
+}
+
+/**
+ * Creates a token verifier for dev auth.
+ * Extracts userId from X-Test-User header, x-dev-user-id header,
+ * or canopy-dev-user cookie — same logic as DevAuthPlugin.authenticate().
+ *
+ * Used with CachingAuthPlugin in prod-sim mode to simulate the prod
+ * code path (token verification + cached metadata lookup) using dev users.
+ */
+export function createDevTokenVerifier(options?: { defaultUserId?: string }): TokenVerifier {
+  const defaultUserId = options?.defaultUserId ?? DEFAULT_USER_ID
+
+  return async (context: unknown) => {
+    const headers = extractHeaders(context)
+    if (!headers) return null
+
+    // Same extraction logic as DevAuthPlugin.authenticate()
+    let userId = headers.get('X-Test-User')
+    if (!userId) {
+      userId = headers.get('x-dev-user-id') ?? getDevUserCookieFromHeaders(headers)
+    }
+    if (!userId) {
+      userId = defaultUserId
+    }
+
+    // Map test user keys to dev user IDs
+    const mapped = TEST_USER_MAP[userId] ?? userId
+
+    return { userId: mapped }
+  }
+}