soulprint-express 0.1.3 → 0.1.4

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-import { SoulprintToken } from "soulprint-core";
 import { verifySPT, SoulprintOptions } from "./verify.js";
 export { verifySPT, SoulprintOptions };
 /**
@@ -12,49 +11,35 @@ export { verifySPT, SoulprintOptions };
  *
  * const app = express();
  *
- * // Protect entire API — require KYC verified humans
- * app.use(soulprint({ minScore: 60 }));
+ * // Basic — require verified bots
+ * app.use(soulprint({ minScore: 40 }));
  *
- * // Protect specific route — require full biometric KYC
- * app.post("/sensitive", soulprint({ require: ["DocumentVerified", "FaceMatch"] }), handler);
+ * // Con auto-renew: el middleware renueva el SPT automáticamente
+ * // cuando queda < 1h o expiró hace < 7 días.
+ * // El nuevo token llega en el header X-Soulprint-Token-Renewed.
+ * app.use(soulprint({ minScore: 40, nodeUrl: "https://my-validator.example.com" }));
  *
- * // Inside a handler — get the verified identity
- * app.get("/me", soulprint({ minScore: 20 }), (req, res) => {
- *   const identity = req.soulprint;  // SoulprintToken
- *   res.json({ nullifier: identity.nullifier, score: identity.score });
- * });
+ * // El cliente debe leer el header y guardar el nuevo token:
+ * // X-Soulprint-Token-Renewed: <nuevo_spt>
  * ```
  *
  * Token is read from:
  *   - HTTP header:   X-Soulprint: <SPT>
  *   - Query param:   ?spt=<SPT>
  *   - Bearer token:  Authorization: Bearer <SPT>
- */
-export declare function soulprint(opts?: SoulprintOptions): (req: any, res: any, next: Function) => void;
-/**
- * soulprintFastify() — Fastify plugin for Soulprint verification.
- *
- * USAGE:
  *
- * ```typescript
- * import Fastify from "fastify";
- * import { soulprintFastify } from "soulprint-express";
- *
- * const fastify = Fastify();
- * await fastify.register(soulprintFastify, { minScore: 60 });
- *
- * fastify.get("/me", async (request) => {
- *   const identity = request.soulprint;
- *   return { nullifier: identity?.nullifier };
- * });
- * ```
+ * Auto-renew header response:
+ *   - X-Soulprint-Token-Renewed: <nuevo_spt>     (solo cuando se renovó)
+ *   - X-Soulprint-Expires-In: <segundos>         (tiempo restante del nuevo token)
  */
-export declare function soulprintFastify(fastify: any, opts?: SoulprintOptions): Promise<void>;
-declare global {
-    namespace Express {
-        interface Request {
-            soulprint?: SoulprintToken;
-        }
-    }
+export interface SoulprintMiddlewareOptions extends SoulprintOptions {
+    /**
+     * URL del nodo validador para auto-renew.
+     * Si no se provee, el auto-renew está desactivado.
+     * Ejemplo: "https://validator.soulprint.digital"
+     */
+    nodeUrl?: string;
+    /** Timeout para la petición de renew. Default: 5000ms */
+    renewTimeoutMs?: number;
 }
-export { decodeToken, SoulprintToken, TrustLevel, CredentialType } from "soulprint-core";
+export declare function soulprint(opts?: SoulprintMiddlewareOptions): (req: any, res: any, next: Function) => Promise<void>;

package/dist/index.js

@@ -1,116 +1,62 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.decodeToken = exports.verifySPT = void 0;
+exports.verifySPT = void 0;
 exports.soulprint = soulprint;
-exports.soulprintFastify = soulprintFastify;
+const soulprint_core_1 = require("soulprint-core");
 const verify_js_1 = require("./verify.js");
 Object.defineProperty(exports, "verifySPT", { enumerable: true, get: function () { return verify_js_1.verifySPT; } });
-// ── Express Middleware ────────────────────────────────────────────────────────
-/**
- * soulprint() — Express/Connect middleware for Soulprint identity verification.
- *
- * USAGE:
- *
- * ```typescript
- * import express from "express";
- * import { soulprint } from "soulprint-express";
- *
- * const app = express();
- *
- * // Protect entire API — require KYC verified humans
- * app.use(soulprint({ minScore: 60 }));
- *
- * // Protect specific route — require full biometric KYC
- * app.post("/sensitive", soulprint({ require: ["DocumentVerified", "FaceMatch"] }), handler);
- *
- * // Inside a handler — get the verified identity
- * app.get("/me", soulprint({ minScore: 20 }), (req, res) => {
- *   const identity = req.soulprint;  // SoulprintToken
- *   res.json({ nullifier: identity.nullifier, score: identity.score });
- * });
- * ```
- *
- * Token is read from:
- *   - HTTP header:   X-Soulprint: <SPT>
- *   - Query param:   ?spt=<SPT>
- *   - Bearer token:  Authorization: Bearer <SPT>
- */
 function soulprint(opts = {}) {
-    return function soulprintMiddleware(req, res, next) {
+    return async function soulprintMiddleware(req, res, next) {
         const spt = extractSPT(req);
-        const result = (0, verify_js_1.verifySPT)(spt, opts);
+        // ── Auto-renew preemptivo ────────────────────────────────────────────
+        // Si el token está próximo a expirar y hay nodeUrl → intentar renovar
+        let activeSpt = spt;
+        if (spt && opts.nodeUrl) {
+            const check = (0, soulprint_core_1.needsRenewal)(spt);
+            if (check.needsRenew) {
+                const renewal = await (0, soulprint_core_1.autoRenew)(spt, {
+                    nodeUrl: opts.nodeUrl,
+                    timeoutMs: opts.renewTimeoutMs ?? 5_000,
+                });
+                if (renewal.renewed && renewal.spt !== activeSpt) {
+                    activeSpt = renewal.spt;
+                    // Entregar nuevo token al cliente via header
+                    res.setHeader("X-Soulprint-Token-Renewed", renewal.spt);
+                    res.setHeader("X-Soulprint-Expires-In", String(renewal.expiresIn ?? 86400));
+                    res.setHeader("X-Soulprint-Renew-Method", "auto");
+                }
+            }
+        }
+        const result = (0, verify_js_1.verifySPT)(activeSpt, opts);
         if (!result.allowed) {
             opts.onRejected?.(result.reason);
             res.status(403).json({
                 error: "soulprint_required",
                 message: opts.rejectMessage ?? result.reason,
                 docs: "https://github.com/manuelariasfz/soulprint",
-                required: {
-                    minScore: opts.minScore ?? 40,
-                    require: opts.require,
-                },
+                hint: opts.nodeUrl
+                    ? "Auto-renew activado — verifica que el token no tenga más de 7 días de expirado"
+                    : "Configura nodeUrl en el middleware para habilitar auto-renew",
+                required: { minScore: opts.minScore ?? 40, require: opts.require },
             });
             return;
         }
         opts.onVerified?.(result.token);
-        // Attach to req for downstream handlers
         req.soulprint = result.token;
         next();
     };
 }
 function extractSPT(req) {
-    // 1. Header dedicado
     const header = req.headers?.["x-soulprint"] ?? req.headers?.["X-Soulprint"];
     if (header)
         return header;
-    // 2. Authorization: Bearer <SPT>
     const auth = req.headers?.authorization ?? "";
     if (auth.startsWith("Bearer ")) {
         const token = auth.slice(7);
-        // Solo si parece un SPT (base64url largo) — no interferir con JWTs normales
         if (token.length > 200)
             return token;
     }
-    // 3. Query param: ?spt=...
     if (req.query?.spt)
         return req.query.spt;
     return undefined;
 }
-// ── Fastify Plugin ────────────────────────────────────────────────────────────
-/**
- * soulprintFastify() — Fastify plugin for Soulprint verification.
- *
- * USAGE:
- *
- * ```typescript
- * import Fastify from "fastify";
- * import { soulprintFastify } from "soulprint-express";
- *
- * const fastify = Fastify();
- * await fastify.register(soulprintFastify, { minScore: 60 });
- *
- * fastify.get("/me", async (request) => {
- *   const identity = request.soulprint;
- *   return { nullifier: identity?.nullifier };
- * });
- * ```
- */
-async function soulprintFastify(fastify, opts = {}) {
-    fastify.addHook("preHandler", async (request, reply) => {
-        const spt = extractSPT(request);
-        const result = (0, verify_js_1.verifySPT)(spt, opts);
-        if (!result.allowed) {
-            opts.onRejected?.(result.reason);
-            reply.status(403).send({
-                error: "soulprint_required",
-                message: opts.rejectMessage ?? result.reason,
-                docs: "https://github.com/manuelariasfz/soulprint",
-            });
-            return;
-        }
-        opts.onVerified?.(result.token);
-        request.soulprint = result.token;
-    });
-}
-var soulprint_core_1 = require("soulprint-core");
-Object.defineProperty(exports, "decodeToken", { enumerable: true, get: function () { return soulprint_core_1.decodeToken; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "soulprint-express",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Soulprint Express/Fastify middleware — app.use(soulprint({ minScore: 40 }))",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,6 +8,9 @@
     "dist",
     "README.md"
   ],
+  "scripts": {
+    "build": "tsc"
+  },
   "publishConfig": {
     "access": "public"
   },
@@ -28,7 +31,7 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "soulprint-core": "0.1.3"
+    "soulprint-core": "workspace:*"
   },
   "peerDependencies": {
     "express": ">=4.0.0"
@@ -45,8 +48,5 @@
   },
   "engines": {
     "node": ">=18.0.0"
-  },
-  "scripts": {
-    "build": "tsc"
   }
-}
+}