supaapps-auth 2.0.0-rc.5 → 2.0.0-rc.6

package/dist/AuthManager.d.ts

@@ -1,4 +1,4 @@
-import { AuthManagerEvent } from './types';
+import { AuthManagerEvent, UserTokenPayload } from './types';
 export declare class AuthManager {
     private static instance;
     private authServer;
@@ -21,6 +21,6 @@ export declare class AuthManager {
     private saveTokens;
     loginUsingPkce(code: string): Promise<void>;
     logout(): Promise<void>;
-    static validateToken(authServer: string, bearerToken: string): Promise<boolean>;
+    static validateToken(authServer: string, bearerToken: string): Promise<UserTokenPayload>;
     static resetInstance(): void;
 }

package/dist/AuthManager.js

@@ -192,23 +192,34 @@ class AuthManager {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
             // @todo tests missing for this static validation
-            try {
-                const decodedToken = (_a = (0, jsonwebtoken_1.decode)(bearerToken, {
-                    complete: true,
-                })) === null || _a === void 0 ? void 0 : _a.payload;
-                if (!decodedToken) {
-                    return false;
-                }
-                const { data: publicKey } = yield axios_1.default.get(`${authServer}public/public_key`);
-                const { data: algo } = yield axios_1.default.get(`${authServer}public/algo`);
-                (0, jsonwebtoken_1.verify)(bearerToken, publicKey, { algorithms: [algo] });
-                const { data: revokedIds } = yield axios_1.default.get(`${authServer}public/revoked_ids`);
-                // eslint-disable-next-line @typescript-eslint/dot-notation
-                return !revokedIds.includes(decodedToken['id']);
+            // @todo add caching for public key and algo
+            const decodedToken = (_a = (0, jsonwebtoken_1.decode)(bearerToken, {
+                complete: true,
+            })) === null || _a === void 0 ? void 0 : _a.payload;
+            if (!decodedToken) {
+                throw new Error('Not a valid jwt token');
             }
-            catch (error) {
-                return false;
+            const userToken = {
+                id: decodedToken['id'],
+                iss: decodedToken['iss'],
+                sub: parseInt(decodedToken['sub']),
+                first_name: decodedToken['first_name'],
+                last_name: decodedToken['last_name'],
+                email: decodedToken['email'],
+                aud: decodedToken['aud'],
+                iat: decodedToken['iat'],
+                exp: decodedToken['exp'],
+                scopes: decodedToken['scopes'],
+                realm: decodedToken['realm'],
+            };
+            const { data: publicKey } = yield axios_1.default.get(`${authServer}public/public_key`);
+            const { data: algo } = yield axios_1.default.get(`${authServer}public/algo`);
+            (0, jsonwebtoken_1.verify)(bearerToken, publicKey, { algorithms: [algo] });
+            const { data: revokedIds } = yield axios_1.default.get(`${authServer}public/revoked_ids`);
+            if (revokedIds.includes(decodedToken['id'])) {
+                throw new Error('Token is revoked');
             }
+            return userToken;
         });
     }
     static resetInstance() {

package/dist/types.d.ts

@@ -18,6 +18,7 @@ export interface UserTokenPayload {
     iat: number;
     exp: number;
     scopes: string;
+    realm: string;
 }
 export interface AuthManagerEvent {
     type: AuthEventType;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supaapps-auth",
-  "version": "2.0.0-rc.5",
+  "version": "2.0.0-rc.6",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/AuthManager.ts

@@ -230,34 +230,47 @@ export class AuthManager {
   public static async validateToken(
     authServer: string,
     bearerToken: string,
-  ): Promise<boolean> {
+  ): Promise<UserTokenPayload> {
     // @todo tests missing for this static validation
-    try {
-      const decodedToken = jwtDecode(bearerToken, {
-        complete: true,
-      })?.payload;
+    // @todo add caching for public key and algo
+    const decodedToken = jwtDecode(bearerToken, {
+      complete: true,
+    })?.payload;
 
-      if (!decodedToken) {
-        return false;
-      }
+    if (!decodedToken) {
+      throw new Error('Not a valid jwt token');
+    }
 
-      const { data: publicKey } = await axios.get(
-        `${authServer}public/public_key`,
-      );
-      const { data: algo } = await axios.get(
-        `${authServer}public/algo`,
-      );
+    const userToken: UserTokenPayload = {
+        id: decodedToken['id'],
+        iss: decodedToken['iss'],
+        sub: parseInt(decodedToken['sub'] as string),
+        first_name: decodedToken['first_name'],
+        last_name: decodedToken['last_name'],
+        email: decodedToken['email'],
+        aud: decodedToken['aud'],
+        iat: decodedToken['iat'],
+        exp: decodedToken['exp'],
+        scopes: decodedToken['scopes'],
+        realm: decodedToken['realm'],
+    }
 
-      jwtVerify(bearerToken, publicKey, { algorithms: [algo] });
+    const { data: publicKey } = await axios.get(
+      `${authServer}public/public_key`,
+    );
+    const { data: algo } = await axios.get(
+      `${authServer}public/algo`,
+    );
 
-      const { data: revokedIds } = await axios.get(
-        `${authServer}public/revoked_ids`,
-      );
-      // eslint-disable-next-line @typescript-eslint/dot-notation
-      return !revokedIds.includes(decodedToken['id']);
-    } catch (error) {
-      return false;
+    jwtVerify(bearerToken, publicKey, { algorithms: [algo] });
+
+    const { data: revokedIds } = await axios.get(
+      `${authServer}public/revoked_ids`,
+    );
+    if(revokedIds.includes(decodedToken['id'])){
+      throw new Error('Token is revoked');
     }
+    return userToken;
   }
 
   public static resetInstance(): void {

package/src/types.ts

@@ -20,6 +20,7 @@ export interface UserTokenPayload {
     iat: number;
     exp: number;
     scopes: string;
+    realm: string;
 }
 
 export interface AuthManagerEvent {