@practica/jwt-token-verifier/.dist/package/lib/jwt-verifier-middleware.js

JWT for Practica

"use strict";
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.jwtVerifierMiddleware = void 0;
/* eslint-disable consistent-return */
const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
const jwtVerifierMiddleware = (options) => {
    // 🔒 TODO - Once your project is off a POC stage, change your JWT flow to async using JWKS
    // Read more here: https://www.npmjs.com/package/jwks-rsa
    const middleware = (req, res, next) => {
        const authenticationHeader = req.headers.authorization || req.headers.Authorization;
        if (!authenticationHeader) {
            return res.sendStatus(401);
        }
        let token;
        // A token comes in one of two forms: 'token' or 'Bearer token'
        const authHeaderParts = authenticationHeader.split(' ');
        if (authHeaderParts.length > 2) {
            // It should have 1 or 2 parts (separated by space), the incoming string is not supported
            return res.sendStatus(401);
        }
        if (authHeaderParts.length === 2) {
            [, token] = authHeaderParts;
        }
        else {
            token = authenticationHeader;
        }
        jsonwebtoken_1.default.verify(token, options.secret, 
        // TODO: we should remove this any according to the library, jwtContent can not contain data property
        // eslint-disable-next-line @typescript-eslint/no-explicit-any
        (err, jwtContent) => {
            // @todo: use logger and error handler here
            // eslint-disable-next-line no-console
            console.log(err);
            if (err) {
                return res.sendStatus(401);
            }
            req.user = jwtContent.data;
            next();
        });
    };
    return middleware;
};
exports.jwtVerifierMiddleware = jwtVerifierMiddleware;