cortex-auth 1.0.1 → 1.1.0

package/dist/payload-jwt/authenticateRequest.d.ts

@@ -0,0 +1,13 @@
+import { type Payload } from 'payload';
+import { NextAuthRequest } from "next-auth";
+export declare function authenticateRequest({ req, payload }: {
+    req: NextAuthRequest;
+    payload?: Payload;
+}): Promise<{
+    id: string | number;
+    email: any;
+    name: any;
+    role: any;
+    method: string;
+}>;
+//# sourceMappingURL=authenticateRequest.d.ts.map

package/dist/payload-jwt/authenticateRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticateRequest.d.ts","sourceRoot":"","sources":["../../src/payload-jwt/authenticateRequest.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAqC5C,wBAAsB,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;;;;;;GAwDtG"}

package/dist/payload-jwt/authenticateRequest.js

@@ -0,0 +1,63 @@
+import { verifySession } from "./user";
+export async function authenticateRequest({ req, payload }) {
+    let type = 'cookie';
+    if (req.auth) {
+        const user = req.auth.user;
+        return {
+            id: user.id,
+            email: user.email,
+            name: user.name,
+            role: user.role,
+            method: 'cookie',
+        };
+    }
+    else {
+        type = 'bearer';
+        const session = await verifySession(req);
+        if (!session || !session.sub || !session.extra)
+            throw new Error("No valid session found");
+        if (!payload)
+            throw new Error("Payload instance is required for Keycloak user normalisation");
+        const payloadUser = (await payload.find({ collection: 'users', depth: 1, limit: 1, draft: false, overrideAccess: true, where: { email: { equals: session.extra.email } } })).docs[0];
+        if (!payloadUser && session.extra) {
+            // create the user in Payload
+            const newUser = await payload.create({
+                collection: 'users',
+                data: {
+                    email: session.extra.email,
+                    name: session.extra.name,
+                    role: 'user',
+                    enabled: true,
+                    accounts: [
+                        {
+                            provider: 'keycloak', providerAccountId: session.sub, type: 'oidc',
+                        }
+                    ],
+                },
+                draft: false,
+                overrideAccess: true,
+            });
+            console.log("Created new Payload user for Keycloak user:", newUser.id, newUser.email);
+            return {
+                id: newUser.id,
+                email: newUser.email,
+                name: newUser.name,
+                role: newUser.role,
+                method: 'bearer',
+            };
+        }
+        else if (payloadUser) {
+            return {
+                id: payloadUser.id,
+                email: payloadUser.email,
+                name: payloadUser.name,
+                role: payloadUser.role,
+                method: 'bearer',
+            };
+        }
+        else {
+            throw new Error("No user found for the given session");
+        }
+    }
+}
+//# sourceMappingURL=authenticateRequest.js.map

package/dist/payload-jwt/authenticateRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticateRequest.js","sourceRoot":"","sources":["../../src/payload-jwt/authenticateRequest.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAyCvC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,EAA+C;IACnG,IAAI,IAAI,GAAG,QAAQ,CAAA;IACnB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAY,CAAA;QAClC,OAAO;YACH,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,QAAQ;SACnB,CAAA;IACL,CAAC;SAAM,CAAC;QACJ,IAAI,GAAG,QAAQ,CAAA;QACf,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QACzF,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QAC7F,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEpL,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;gBACjC,UAAU,EAAE,OAAO;gBACnB,IAAI,EAAE;oBACF,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;oBAC1B,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;oBACxB,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE;wBACN;4BACI,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM;yBACrE;qBACJ;iBACJ;gBACD,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,IAAI;aACvB,CAAC,CAAA;YACF,OAAO,CAAC,GAAG,CAAC,6CAA6C,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;YACrF,OAAO;gBACH,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,QAAQ;aACnB,CAAA;QACL,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACrB,OAAO;gBACH,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,MAAM,EAAE,QAAQ;aACnB,CAAA;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QAC1D,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/payload-jwt/index.d.ts

@@ -1,2 +1,3 @@
 export * from './user';
+export * from './authenticateRequest';
 //# sourceMappingURL=index.d.ts.map

package/dist/payload-jwt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/payload-jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/payload-jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAA;AACtB,cAAc,uBAAuB,CAAA"}

package/dist/payload-jwt/index.js

@@ -1,2 +1,3 @@
 export * from './user';
+export * from './authenticateRequest';
 //# sourceMappingURL=index.js.map

package/dist/payload-jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/payload-jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/payload-jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAA;AACtB,cAAc,uBAAuB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cortex-auth",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Shared authentication utilities for Node.js and Next.js applications",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",
@@ -37,7 +37,9 @@
     "jsonwebtoken": "^9.0.3"
   },
   "peerDependencies": {
-    "next": ">=15.0.0"
+    "next": ">=15.0.0",
+    "next-auth": "5.0.0-beta.30",
+    "payload": "^3.70.0"
   },
   "peerDependenciesMeta": {
     "next": {
@@ -52,6 +54,8 @@
     "@typescript-eslint/parser": "^6.15.0",
     "eslint": "^8.56.0",
     "next": "^15.0.0",
+    "next-auth": "5.0.0-beta.30",
+    "payload": "^3.70.0",
     "typescript": "^5.3.3"
   }
 }