@sigiljs-community/auth-plugin/dist/auth-plugin2.mjs

Plugin for SigilJS framework that provides authentication with JWT-like tokens

import { SigilPlugin as o } from "@sigiljs/sigil";
import * as s from "crypto";
import r from "./web-tokens-controller.mjs";
class a extends o {
  static name = "AuthPlugin";
  #e;
  constructor() {
    super(), this.$pluginConfig.secretKey ? this.logger({
      level: "info",
      message: "Successfully configured authentication plugin",
      json: { milestone: "secret", ok: !0 }
    }) : (this.logger({
      level: "warning",
      message: "No secret key found for web tokens generation, temporary key will be generated",
      json: { milestone: "secret", ok: !1 }
    }), this.logger({
      level: "warning",
      message: "It is strongly recommended to avoid starting application without secret key in production environments"
    }));
    const e = this.$pluginConfig.secretKey || s.randomBytes(32);
    this.#e = new r(e), this.$pluginConfig.secretKey = Buffer.from("");
  }
  onInitialize() {
    if (!this.$pluginConfig.protectedRoutes || this.$pluginConfig.protectedRoutes.length === 0) {
      this.logger({
        level: "warning",
        message: "Authentication middleware not configured, you'll need to manually set up modifiers for each protected route",
        condition: !this.$pluginConfig.secretKey,
        json: { milestone: "middleware", ok: !1 }
      });
      return;
    } else this.logger({
      level: "info",
      message: `Successfully configured authentication middleware for ${this.$pluginConfig.protectedRoutes.length} protected route(s)`,
      condition: !this.$pluginConfig.secretKey,
      json: { milestone: "middleware", ok: !0 }
    });
    this.sigil.addMiddleware(async (e, t) => {
      if (!this.$pluginConfig.protectedRoutes?.some((n) => e.path.startsWith(n))) return;
      const i = e.headers.get("authorization");
      if (!i || !this.verifyAccessToken(i)) return t.forbidden();
    });
  }
  /**
   * Issue new access token with specified payload
   *
   * @param payload access token payload
   * @param expiresIn
   * @returns {string} generated access token
   */
  issueAccessToken(e, t) {
    return this.#e.issueWebToken(e, t);
  }
  /**
   * Issue new refresh token
   *
   * @returns {{refreshToken: string, refreshTokenHash: string}} generated refresh token
   */
  issueRefreshToken() {
    return this.#e.issueRefreshToken();
  }
  /**
   * Check if specified access token is valid
   *
   * @param {string} token access token
   * @param allowExpired if true, valid tokens will still valid even if expired
   * @returns {boolean} is valid
   */
  verifyAccessToken(e, t) {
    return this.#e.verifyWebToken(e, t);
  }
  /**
   * Check refresh token integrity with stored hash
   *
   * @param {string} hash stored hash
   * @param {string} token refresh token
   * @returns {boolean} is valid
   */
  verifyRefreshToken(e, t) {
    return this.#e.verifyRefreshToken(e, t);
  }
  /**
   * Decode specified access token
   *
   * @param {string} token access token to decode
   * @returns {TokenPayload | null} decode access token payload or null if in invalid format
   */
  decodeWebToken(e) {
    return this.#e.decodeWebToken(e);
  }
  /**
   * @internal
   */
  __$getAuthHeaders() {
    return {
      refreshTokenHeader: this.$pluginConfig.authHeaders?.refreshToken || "X-Sigil-Refresh-Token",
      accessTokenHeader: this.$pluginConfig.authHeaders?.accessToken || "Authorization"
    };
  }
}
export {
  a as default
};