@the-node-forge/jwt-utils/dist/cjs/middleware/next.js

A flexible, lightweight Node.js JWT library for generating, verifying, and managing JSON Web Tokens (JWTs). Supports access and refresh tokens with customizable secrets for authentication and role-based access control. Includes middleware for Express, Fas

"use strict";
/* eslint-disable @typescript-eslint/no-require-imports, @typescript-eslint/no-unused-vars */
Object.defineProperty(exports, "__esModule", { value: true });
exports.authenticateToken = authenticateToken;
let next;
let verifyToken;
let verifyRefreshToken;
function authenticateToken(handler, accessSecret, refreshSecret, allowRefreshToken = false) {
    if (!next) {
        try {
            next = require('next');
        }
        catch (error) {
            throw new Error("Next.js middleware is being used, but 'next' is not installed. Please install it as a peer dependency.");
        }
    }
    if (!verifyToken) {
        ({ verifyToken } = require('../jwt'));
    }
    if (!verifyRefreshToken) {
        ({ verifyRefreshToken } = require('../jwt'));
    }
    return (req, res) => {
        const authHeader = req.headers.authorization;
        if (!authHeader?.startsWith('Bearer ')) {
            return res.status(401).json({ message: 'Unauthorized: No token provided' });
        }
        const [, token] = authHeader.split(' ');
        let decoded;
        if (allowRefreshToken) {
            decoded = verifyRefreshToken(token, refreshSecret);
        }
        else {
            decoded = verifyToken(token, accessSecret);
        }
        if (!decoded) {
            return res
                .status(401)
                .json({ message: 'Unauthorized: Invalid or expired token' });
        }
        req.user = decoded;
        return handler(req, res);
    };
}