@youngshand/payload-auth-plugin
Version:
A temporary fork for testing of Authentication plugin for Payload CMS, use @payload-auth-plugin
39 lines (38 loc) • 1.69 kB
JavaScript
// src/core/utils/cookies.ts
import * as jwt from "jose";
import { getCookieExpiration } from "payload";
async function createSessionCookies(name, secret, fieldsToSign) {
const tokenExpiration = getCookieExpiration({
seconds: 7200
});
const secretKey = new TextEncoder().encode(secret);
const issuedAt = Math.floor(Date.now() / 1000);
const exp = issuedAt + tokenExpiration.getTime();
const token = await new jwt.SignJWT(fieldsToSign).setProtectedHeader({ alg: "HS256", typ: "JWT" }).setIssuedAt(issuedAt).setExpirationTime(exp).sign(secretKey);
const cookies = [];
cookies.push(`${name}=${token};Path=/;HttpOnly;Secure=true;SameSite=lax;Expires=${tokenExpiration.toUTCString()}`);
return cookies;
}
async function verifySessionCookie(token, secret) {
const secretKey = new TextEncoder().encode(secret);
return await jwt.jwtVerify(token, secretKey);
}
function invalidateOAuthCookies(cookies) {
const expired = "Thu, 01 Jan 1970 00:00:00 GMT";
cookies.push(`__session-oauth-state=; Path=/; HttpOnly; SameSite=Lax; Expires=${expired}`);
cookies.push(`__session-oauth-nonce=; Path=/; HttpOnly; SameSite=Lax; Expires=${expired}`);
cookies.push(`__session-code-verifier=; Path=/; HttpOnly; SameSite=Lax; Expires=${expired}`);
cookies.push(`__session-webpk-challenge=; Path=/; HttpOnly; SameSite=Lax; Expires=${expired}`);
return cookies;
}
var invalidateSessionCookies = (name, cookies) => {
const expired = "Thu, 01 Jan 1970 00:00:00 GMT";
cookies.push(`${name}=; Path=/; HttpOnly; SameSite=Lax; Expires=${expired}`);
return cookies;
};
export {
verifySessionCookie,
invalidateSessionCookies,
invalidateOAuthCookies,
createSessionCookies
};