UNPKG

libmodulor

Version:

A TypeScript library to create platform-agnostic applications

60 lines (59 loc) 2.7 kB
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) { var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d; if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc); else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r; return c > 3 && r && Object.defineProperty(target, key, r), r; }; var __metadata = (this && this.__metadata) || function (k, v) { if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v); }; var __param = (this && this.__param) || function (paramIndex, decorator) { return function (target, key) { decorator(target, key, paramIndex); } }; import { inject, injectable } from 'inversify'; let AuthCookieCreator = class AuthCookieCreator { jwtManager; settingsManager; constructor(jwtManager, settingsManager) { this.jwtManager = jwtManager; this.settingsManager = settingsManager; } s() { return { server_cookies_http_only: this.settingsManager.get()('server_cookies_http_only'), server_cookies_name_auth: this.settingsManager.get()('server_cookies_name_auth'), server_cookies_same_site: this.settingsManager.get()('server_cookies_same_site'), server_cookies_secure: this.settingsManager.get()('server_cookies_secure'), }; } async exec({ jwt }) { // For any reason, the JWT can already be expired. // This shouldn't prevent the cookie creation. // Hence the usage of decodeUnsafe instead of decode. const { exp } = await this.jwtManager.decodeUnsafe(jwt); return { name: this.s().server_cookies_name_auth, opts: this.opts(exp), val: jwt, }; } opts(exp) { if (!exp) { throw new Error('You need to define an exp for the cookie'); } return { expires: new Date(exp * 1000), httpOnly: this.s().server_cookies_http_only, sameSite: this.s().server_cookies_same_site, secure: this.s().server_cookies_secure, signed: false, // Not signing to keep it simple and btw, the JWT is already signed }; } }; AuthCookieCreator = __decorate([ injectable(), __param(0, inject('JWTManager')), __param(1, inject('SettingsManager')), __metadata("design:paramtypes", [Object, Object]) ], AuthCookieCreator); export { AuthCookieCreator };