hapta 1.0.1 → 1.0.2

package/helpers/HTTP/Request/Context.ts

@@ -80,7 +80,7 @@ type TokenOptions = {
   iat: number
 } 
 type VerifyFn = (token: string) => Promise<Principal>;
- 
+type TempTokenFn = (amount_of_uses: number, expiresAt: '1h' | '1d' | '1y'|'') => Promise<string | null>
 export type ServiceConfigs = {
   Clover: {
     Tenant_ID: string;
@@ -88,7 +88,8 @@ export type ServiceConfigs = {
     Authorized_Users: string[];
     Authenticate: AuthenticateFn; 
     Register: RegisterFn;
-    Verify?: VerifyFn;            // just verify token
+    Verify?: VerifyFn; 
+    createTemporaryToken: TempTokenFn           // just verify token
   };
 };
 

package/index.ts

@@ -13,7 +13,7 @@ import * as z from "zod";
 import { watch } from "fs";
 import fs from "fs"
 import { pathToFileURL } from "url";
-
+const token_uses = new Map<string, number>()
 // --- Global server and router instances ---
 let server: Server;
 // MODIFIED: Make the router a single, persistent instance
@@ -103,7 +103,8 @@ async function createServeConfig(): Promise<Serve> {
 
     return {
         port: config.port,
-        async fetch(req: Request) { 
+        async fetch(req: Request) {
+            console.log(req.method)
             if (req.method === "OPTIONS") { 
                 console.log("ran")
                 return new Response(null, {
@@ -115,7 +116,8 @@ async function createServeConfig(): Promise<Serve> {
                         "Access-Control-Max-Age": "86400",
                     },
                 });
-            } 
+            }
+            console.log("ran")
             const url = new URL(req.url);
             const routeMatch = router.match(url.href);
 
@@ -218,17 +220,18 @@ async function buildRequestContext(req: Request, headers: Headers) {
     const reqJSON = await req.json().catch(() => ({}));
 
     const hasToken = headers.has("Authorization")
-    var isAuthenticated = false;
+    var isAuthenticated = false; 
     if (hasToken) {
+         
         try {
-            jwt.verify(token as string, config.JWT_SECRET)
+            
             isAuthenticated = true
         } catch (error) {
             isAuthenticated = false
         }
     }
-    const context = {
-        principal: { isAuthenticated },
+    const context  = {
+        principal: { isAuthenticated: isAuthenticated as boolean },
         services: {
             Clover: {
                 Tenant_ID: primaryTenantData.id,
@@ -274,7 +277,7 @@ async function buildRequestContext(req: Request, headers: Headers) {
                     }
 
 
-                    const authRes = await fetch(`${config.Clover_Server_Url}/oauth/token`, {
+                    const authRes = await fetch(`${config.Clover_Server_Url}/${options.type === "oauth" ? 'oauth/token' :'auth'}`, {
                         method: "POST",
                         headers: {
                             "Content-Type": "application/json",
@@ -285,7 +288,7 @@ async function buildRequestContext(req: Request, headers: Headers) {
                         body: JSON.stringify(fetchBody),
                     });
 
-                    if (!authRes.ok) { 
+                    if (!authRes.ok) {  
                         return {
                             isAuthenticated: false,
                             error: true,
@@ -314,18 +317,29 @@ async function buildRequestContext(req: Request, headers: Headers) {
                 Verify: async (token) => {
                     try {
                         const payload = jwt.verify(token, config.JWT_SECRET);
+                        if(token_uses.has(token) && token_uses.get(token) >= payload.amount_of_uses){
+                            // this is basic auth token
+                            throw new Error("token has been used wayy to many times, it is expired")
+                        }else{
+                            token_uses.set(token, Number(token_uses.get(token)) + 1)
+                        }
                         return {
-                            isAuthenticated: true,
-                            id: payload.id,
-                            clover_group_assigned_To: payload.Group,
-                            clover_assigned_id: payload.clover_assigned_id,
-                            Roles: payload.Roles,
+                            isAuthenticated: true, 
+                            id: payload.id || crypto.randomUUID(),
+                            clover_group_assigned_To: payload.Group || [],
+                            clover_assigned_id: payload.clover_assigned_id || primaryTenantData.id,
+                            Roles: payload.Roles || [],
                             token,
                         };
                     } catch {
                         return { isAuthenticated: false };
                     }
                 },
+                createTemporaryToken(amount_of_uses: number, expiresAt: string) {
+                    const token = jwt.sign({amount_of_uses, isBasicAuth: true, security_level: 0}, config.JWT_SECRET,  { expiresIn: expiresAt })
+                    token_uses.set(token, 0)
+                    return token
+                },
                 Roles: Array.isArray(primaryTenantData.Tenant_Roles)
                     ? primaryTenantData.Tenant_Roles
                     : [primaryTenantData.Tenant_Roles],
@@ -362,13 +376,26 @@ async function buildRequestContext(req: Request, headers: Headers) {
                     "Access-Control-Allow-Headers": "Content-Type, Authorization"
                 }
             })
+        },
+        text: (value: string, status?:number, statusText?: string) => {
+            return new Response(value, {
+                 ...(status && {status}),
+                ...(statusText && {statusText}),
+                headers:{
+                    "Content-Type": "text/html",
+                    "Access-Control-Allow-Origin": config.origin,
+                    "Access-Control-Allow-Methods": "GET,PATCH,PUT,DELETE",
+                    "Access-Control-Allow-Headers": "Content-Type, Authorization"
+                }
+            })
         }
     };
 
     const authHeader = headers.get("authorization");
     const token = authHeader?.startsWith("Bearer ") ? authHeader.split(" ")[1] : authHeader;
+  
 
-    if (token) {
+    if (token) {  
         context.principal = await context.services.Clover.Verify(token);
     }
 

package/package.json

@@ -3,7 +3,7 @@
   "bin": {
     "hapta":"./index.ts"
   },
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "modular, scalable, and feature-rich backend framework designed to extend Pocketbase with authentication, schema validation, caching, and tenant-based service orchestration.",
   "dependencies": {
     "jsonwebtoken": "^9.0.2",