dn-react-router-toolkit 0.1.1 → 0.1.2

package/dist/auth-kit/apple_auth.d.mts

@@ -0,0 +1,24 @@
+import { AuthService } from './auth_service.mjs';
+import 'jose';
+import 'react-router';
+import './jwt.mjs';
+import '../file-kit/object_storage.mjs';
+import '@aws-sdk/client-s3';
+import './repository.mjs';
+
+declare class AppleAuth {
+    AUTH: AuthService;
+    constructor(AUTH: AuthService);
+    signIn(code: string, type?: "web" | "app"): Promise<{
+        user: {
+            id: string;
+            role: string;
+            name: string;
+        };
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    private generateAppleClientSecret;
+}
+
+export { AppleAuth };

package/dist/{esm/auth-kit → auth-kit}/apple_auth.d.ts

@@ -1,5 +1,12 @@
-import { AuthService } from "./auth_service";
-export declare class AppleAuth {
+import { AuthService } from './auth_service.js';
+import 'jose';
+import 'react-router';
+import './jwt.js';
+import '../file-kit/object_storage.js';
+import '@aws-sdk/client-s3';
+import './repository.js';
+
+declare class AppleAuth {
     AUTH: AuthService;
     constructor(AUTH: AuthService);
     signIn(code: string, type?: "web" | "app"): Promise<{
@@ -13,3 +20,5 @@ export declare class AppleAuth {
     }>;
     private generateAppleClientSecret;
 }
+
+export { AppleAuth };

package/dist/auth-kit/apple_auth.js

@@ -0,0 +1,75 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth-kit/apple_auth.ts
+var apple_auth_exports = {};
+__export(apple_auth_exports, {
+  AppleAuth: () => AppleAuth
+});
+module.exports = __toCommonJS(apple_auth_exports);
+var import_jose = require("jose");
+var AppleAuth = class {
+  AUTH;
+  constructor(AUTH) {
+    this.AUTH = AUTH;
+  }
+  async signIn(code, type = "web") {
+    const url = "https://appleid.apple.com/auth/token";
+    const client_secret = await this.generateAppleClientSecret(type);
+    const res = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({
+        client_id: type === "web" ? process.env.APPLE_SERVICE_ID : process.env.APPLE_CLIENT_ID,
+        client_secret,
+        code,
+        grant_type: "authorization_code"
+      })
+    });
+    if (!res.ok) {
+      console.error(await res.text());
+      throw new Error("Apple \uC778\uC99D\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4.");
+    }
+    const data = await res.json();
+    const { id_token } = data;
+    const payload = (0, import_jose.decodeJwt)(id_token);
+    const { sub, email, name } = payload;
+    const user = await this.AUTH.getOrCreateUser("apple", {
+      id: sub,
+      email,
+      name
+    });
+    const { accessToken, refreshToken } = await this.AUTH.issueTokenPair(user);
+    return { user, accessToken, refreshToken };
+  }
+  async generateAppleClientSecret(type = "web") {
+    const authKey = process.env.APPLE_AUTH_KEY;
+    const teamId = process.env.APPLE_TEAM_ID;
+    const keyId = process.env.APPLE_KEY_ID;
+    const clientId = type === "web" ? process.env.APPLE_SERVICE_ID : process.env.APPLE_CLIENT_ID;
+    const keyObject = await (0, import_jose.importPKCS8)(authKey, "ES256");
+    return new import_jose.SignJWT().setProtectedHeader({ alg: "ES256", kid: keyId }).setIssuedAt().setIssuer(teamId).setExpirationTime("1h").setAudience("https://appleid.apple.com").setSubject(clientId).sign(keyObject);
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AppleAuth
+});

package/dist/auth-kit/apple_auth.mjs

@@ -0,0 +1,50 @@
+// src/auth-kit/apple_auth.ts
+import { decodeJwt, importPKCS8, SignJWT } from "jose";
+var AppleAuth = class {
+  AUTH;
+  constructor(AUTH) {
+    this.AUTH = AUTH;
+  }
+  async signIn(code, type = "web") {
+    const url = "https://appleid.apple.com/auth/token";
+    const client_secret = await this.generateAppleClientSecret(type);
+    const res = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({
+        client_id: type === "web" ? process.env.APPLE_SERVICE_ID : process.env.APPLE_CLIENT_ID,
+        client_secret,
+        code,
+        grant_type: "authorization_code"
+      })
+    });
+    if (!res.ok) {
+      console.error(await res.text());
+      throw new Error("Apple \uC778\uC99D\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4.");
+    }
+    const data = await res.json();
+    const { id_token } = data;
+    const payload = decodeJwt(id_token);
+    const { sub, email, name } = payload;
+    const user = await this.AUTH.getOrCreateUser("apple", {
+      id: sub,
+      email,
+      name
+    });
+    const { accessToken, refreshToken } = await this.AUTH.issueTokenPair(user);
+    return { user, accessToken, refreshToken };
+  }
+  async generateAppleClientSecret(type = "web") {
+    const authKey = process.env.APPLE_AUTH_KEY;
+    const teamId = process.env.APPLE_TEAM_ID;
+    const keyId = process.env.APPLE_KEY_ID;
+    const clientId = type === "web" ? process.env.APPLE_SERVICE_ID : process.env.APPLE_CLIENT_ID;
+    const keyObject = await importPKCS8(authKey, "ES256");
+    return new SignJWT().setProtectedHeader({ alg: "ES256", kid: keyId }).setIssuedAt().setIssuer(teamId).setExpirationTime("1h").setAudience("https://appleid.apple.com").setSubject(clientId).sign(keyObject);
+  }
+};
+export {
+  AppleAuth
+};

package/dist/auth-kit/auth_service.d.mts

@@ -0,0 +1,73 @@
+import * as jose from 'jose';
+import * as react_router from 'react-router';
+import { JWTManager } from './jwt.mjs';
+import { ObjectStorage } from '../file-kit/object_storage.mjs';
+import { AuthRepository } from './repository.mjs';
+import '@aws-sdk/client-s3';
+
+declare const ACCESS_TOKEN_KEY = "access_token";
+declare const REFRESH_TOKEN_KEY = "refresh_token";
+declare const ACCESS_TOKEN_COOKIE: react_router.Cookie;
+declare const REFRESH_TOKEN_COOKIE: react_router.Cookie;
+declare class AuthService {
+    repository: AuthRepository;
+    JWT_MANAGER: JWTManager;
+    OBJECT_STORAGE: ObjectStorage;
+    constructor({ repository, JWT_MANAGER, OBJECT_STORAGE, }: {
+        repository: AuthRepository;
+        JWT_MANAGER: JWTManager;
+        OBJECT_STORAGE: ObjectStorage;
+    });
+    verify(request: Request): Promise<jose.JWTPayload | undefined>;
+    verifyOrRefresh(request: Request): Promise<jose.JWTPayload | undefined>;
+    getAccessTokenFromCookies(request: Request): Promise<any>;
+    getRefreshTokenFromCookies(request: Request): Promise<any>;
+    refresh(request: Request): Promise<jose.JWTPayload | undefined>;
+    signIn({ id, password }: {
+        id: string;
+        password: string;
+    }): Promise<{
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    issueAccessToken(user: {
+        id: string;
+        role: string;
+        name: string;
+    }): Promise<string>;
+    issueTokenPair(user: {
+        id: string;
+        role: string;
+        name: string;
+    }): Promise<{
+        refreshToken: string;
+        accessToken: string;
+    }>;
+    refreshAccessToken(refreshToken: string): Promise<string>;
+    getAccessTokenSetCookie(accessToken: string | null): Promise<string>;
+    getRefreshTokenSetCookie(refreshToken: string | null): Promise<string>;
+    findUser(provider: string, info: {
+        id: string;
+        email: string;
+        name?: string;
+        picture?: string;
+    }): Promise<{
+        id: string;
+        role: string;
+        name: string;
+        refreshToken: string | null;
+    } | undefined>;
+    getOrCreateUser(provider: string, info: {
+        id: string;
+        email: string;
+        name?: string;
+        picture?: string;
+    }): Promise<{
+        id: string;
+        role: string;
+        name: string;
+    }>;
+    protected savePicture(picture?: string): Promise<string | undefined>;
+}
+
+export { ACCESS_TOKEN_COOKIE, ACCESS_TOKEN_KEY, AuthService, REFRESH_TOKEN_COOKIE, REFRESH_TOKEN_KEY };

package/dist/{esm/auth-kit → auth-kit}/auth_service.d.ts

@@ -1,11 +1,15 @@
-import { JWTManager } from "./jwt";
-import { ObjectStorage } from "../file-kit/object_storage";
-import { type AuthRepository } from "./repository";
-export declare const ACCESS_TOKEN_KEY = "access_token";
-export declare const REFRESH_TOKEN_KEY = "refresh_token";
-export declare const ACCESS_TOKEN_COOKIE: import("react-router").Cookie;
-export declare const REFRESH_TOKEN_COOKIE: import("react-router").Cookie;
-export declare class AuthService {
+import * as jose from 'jose';
+import * as react_router from 'react-router';
+import { JWTManager } from './jwt.js';
+import { ObjectStorage } from '../file-kit/object_storage.js';
+import { AuthRepository } from './repository.js';
+import '@aws-sdk/client-s3';
+
+declare const ACCESS_TOKEN_KEY = "access_token";
+declare const REFRESH_TOKEN_KEY = "refresh_token";
+declare const ACCESS_TOKEN_COOKIE: react_router.Cookie;
+declare const REFRESH_TOKEN_COOKIE: react_router.Cookie;
+declare class AuthService {
     repository: AuthRepository;
     JWT_MANAGER: JWTManager;
     OBJECT_STORAGE: ObjectStorage;
@@ -14,11 +18,11 @@ export declare class AuthService {
         JWT_MANAGER: JWTManager;
         OBJECT_STORAGE: ObjectStorage;
     });
-    verify(request: Request): Promise<import("jose").JWTPayload | undefined>;
-    verifyOrRefresh(request: Request): Promise<import("jose").JWTPayload | undefined>;
+    verify(request: Request): Promise<jose.JWTPayload | undefined>;
+    verifyOrRefresh(request: Request): Promise<jose.JWTPayload | undefined>;
     getAccessTokenFromCookies(request: Request): Promise<any>;
     getRefreshTokenFromCookies(request: Request): Promise<any>;
-    refresh(request: Request): Promise<import("jose").JWTPayload | undefined>;
+    refresh(request: Request): Promise<jose.JWTPayload | undefined>;
     signIn({ id, password }: {
         id: string;
         password: string;
@@ -65,3 +69,5 @@ export declare class AuthService {
     }>;
     protected savePicture(picture?: string): Promise<string | undefined>;
 }
+
+export { ACCESS_TOKEN_COOKIE, ACCESS_TOKEN_KEY, AuthService, REFRESH_TOKEN_COOKIE, REFRESH_TOKEN_KEY };

package/dist/auth-kit/auth_service.js

@@ -0,0 +1,257 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth-kit/auth_service.ts
+var auth_service_exports = {};
+__export(auth_service_exports, {
+  ACCESS_TOKEN_COOKIE: () => ACCESS_TOKEN_COOKIE,
+  ACCESS_TOKEN_KEY: () => ACCESS_TOKEN_KEY,
+  AuthService: () => AuthService,
+  REFRESH_TOKEN_COOKIE: () => REFRESH_TOKEN_COOKIE,
+  REFRESH_TOKEN_KEY: () => REFRESH_TOKEN_KEY
+});
+module.exports = __toCommonJS(auth_service_exports);
+var import_bcryptjs = __toESM(require("bcryptjs"));
+var import_uuid = require("uuid");
+var import_react_router = require("react-router");
+var ACCESS_TOKEN_KEY = "access_token";
+var REFRESH_TOKEN_KEY = "refresh_token";
+var ACCESS_TOKEN_COOKIE = (0, import_react_router.createCookie)(ACCESS_TOKEN_KEY, {
+  path: "/",
+  httpOnly: process.env.NODE_ENV === "production",
+  secure: process.env.NODE_ENV === "production",
+  sameSite: "strict"
+});
+var REFRESH_TOKEN_COOKIE = (0, import_react_router.createCookie)(REFRESH_TOKEN_KEY, {
+  path: "/",
+  httpOnly: process.env.NODE_ENV === "production",
+  secure: process.env.NODE_ENV === "production",
+  sameSite: "strict"
+});
+var AuthService = class {
+  repository;
+  JWT_MANAGER;
+  OBJECT_STORAGE;
+  constructor({
+    repository,
+    JWT_MANAGER,
+    OBJECT_STORAGE
+  }) {
+    this.repository = repository;
+    this.JWT_MANAGER = JWT_MANAGER;
+    this.OBJECT_STORAGE = OBJECT_STORAGE;
+  }
+  async verify(request) {
+    const accessToken = request?.headers.get("Authorization")?.replace("Bearer ", "") || await this.getAccessTokenFromCookies(request);
+    if (accessToken) {
+      return this.JWT_MANAGER.verifyAccessToken(accessToken);
+    }
+  }
+  async verifyOrRefresh(request) {
+    const payload = await this.verify(request);
+    if (payload) {
+      return payload;
+    }
+    return this.refresh(request);
+  }
+  async getAccessTokenFromCookies(request) {
+    const cookieStore = await ACCESS_TOKEN_COOKIE.parse(
+      request.headers.get("cookie")
+    );
+    return cookieStore.get(ACCESS_TOKEN_KEY)?.value;
+  }
+  async getRefreshTokenFromCookies(request) {
+    const cookieStore = await REFRESH_TOKEN_COOKIE.parse(
+      request.headers.get("cookie")
+    );
+    return cookieStore.get(REFRESH_TOKEN_KEY)?.value;
+  }
+  async refresh(request) {
+    const refreshToken = await this.getRefreshTokenFromCookies(request);
+    if (refreshToken) {
+      try {
+        const refreshedAccessToken = await this.refreshAccessToken(
+          refreshToken
+        );
+        await this.getAccessTokenSetCookie(refreshedAccessToken);
+        const payload = this.JWT_MANAGER.decode(refreshedAccessToken);
+        if (payload) {
+          return payload;
+        }
+      } catch (e) {
+        if (e instanceof Error) {
+          console.log(e.message);
+        }
+        return;
+      }
+    }
+  }
+  async signIn({ id, password }) {
+    const credential = await this.repository.findCredentialById(id);
+    if (!credential) {
+      throw Error("\uC544\uC774\uB514 \uB610\uB294 \uBE44\uBC00\uBC88\uD638\uAC00 \uD2C0\uB838\uC2B5\uB2C8\uB2E4.");
+    }
+    if (!await import_bcryptjs.default.compare(password, credential.password)) {
+      throw Error("\uC544\uC774\uB514 \uB610\uB294 \uBE44\uBC00\uBC88\uD638\uAC00 \uD2C0\uB838\uC2B5\uB2C8\uB2E4.");
+    }
+    const user = await this.repository.findUserById(credential.userId);
+    if (!user) {
+      throw Error("\uD68C\uC6D0 \uC815\uBCF4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+    }
+    const { accessToken, refreshToken } = await this.issueTokenPair(user);
+    return {
+      accessToken,
+      refreshToken
+    };
+  }
+  async issueAccessToken(user) {
+    return this.JWT_MANAGER.signAccessToken({
+      userId: user.id,
+      role: user.role,
+      name: user.name
+    });
+  }
+  async issueTokenPair(user) {
+    const refreshToken = await this.JWT_MANAGER.signRefreshToken({
+      userId: user.id,
+      role: user.role,
+      name: user.name
+    });
+    await this.repository.updateUserRefreshToken(
+      user.id,
+      await import_bcryptjs.default.hash(refreshToken, 10)
+    );
+    const accessToken = await this.issueAccessToken(user);
+    return { refreshToken, accessToken };
+  }
+  async refreshAccessToken(refreshToken) {
+    const payload = await this.JWT_MANAGER.verifyRefreshToken(refreshToken);
+    if (!payload) {
+      throw new Error("\uD1A0\uD070\uC774 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+    }
+    const { userId } = payload;
+    if (typeof userId !== "string") {
+      throw new Error("\uD1A0\uD070\uC774 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+    }
+    const user = await this.repository.findUserById(userId);
+    if (!user) {
+      throw Error("\uC774\uC6A9\uC790\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4.");
+    }
+    if (!user.refreshToken) {
+      throw Error("\uC778\uC99D \uC815\uBCF4\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4.");
+    }
+    if (await import_bcryptjs.default.compare(user.refreshToken, refreshToken)) {
+      throw Error("\uD1A0\uD070\uC774 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
+    }
+    const accessToken = await this.issueAccessToken(user);
+    return accessToken;
+  }
+  async getAccessTokenSetCookie(accessToken) {
+    return ACCESS_TOKEN_COOKIE.serialize(accessToken, {
+      expires: accessToken ? this.JWT_MANAGER.getExpirationTime(accessToken) : /* @__PURE__ */ new Date(0)
+    });
+  }
+  async getRefreshTokenSetCookie(refreshToken) {
+    return REFRESH_TOKEN_COOKIE.serialize(refreshToken, {
+      expires: refreshToken ? this.JWT_MANAGER.getExpirationTime(refreshToken) : /* @__PURE__ */ new Date(0)
+    });
+  }
+  async findUser(provider, info) {
+    const thirdPartyAuth = await this.repository.findThirdPartyAuth(
+      provider,
+      info.id
+    );
+    if (thirdPartyAuth) {
+      const user = await this.repository.findUserById(thirdPartyAuth.userId);
+      if (user) {
+        return user;
+      }
+    }
+  }
+  async getOrCreateUser(provider, info) {
+    const thirdPartyAuth = await this.repository.findThirdPartyAuth(
+      provider,
+      info.id
+    );
+    if (thirdPartyAuth) {
+      const user = await this.repository.findUserById(thirdPartyAuth.userId);
+      if (user) {
+        return user;
+      }
+    }
+    const userId = (0, import_uuid.v4)();
+    const email = info.email;
+    const name = info.name || "\uC775\uBA85";
+    const picture = info.picture;
+    const profileImageId = await this.savePicture(picture) || null;
+    const result = await this.repository.createUser({
+      id: userId,
+      role: "user",
+      profileImageId,
+      name,
+      email
+    });
+    await this.repository.createThirdPartyAuth({
+      id: info.id,
+      provider,
+      userId
+    });
+    return result;
+  }
+  async savePicture(picture) {
+    if (!picture) {
+      return;
+    }
+    const res = await fetch(picture);
+    if (!res.ok) {
+      return;
+    }
+    const buffer = await res.arrayBuffer();
+    const id = (0, import_uuid.v4)();
+    const key = `/users/${id}/picture`;
+    await this.OBJECT_STORAGE.put(key, Buffer.from(buffer));
+    await this.repository.createFile({
+      id,
+      name: "picture",
+      type: "image/*",
+      key,
+      size: buffer.byteLength,
+      metadata: {}
+    });
+    return id;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ACCESS_TOKEN_COOKIE,
+  ACCESS_TOKEN_KEY,
+  AuthService,
+  REFRESH_TOKEN_COOKIE,
+  REFRESH_TOKEN_KEY
+});