naystack/dist/auth/email/token.cjs.js

A stack built with tight Next + Drizzle + GraphQL

"use strict";
var __defProp = Object.defineProperty;
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
var __getOwnPropNames = Object.getOwnPropertyNames;
var __hasOwnProp = Object.prototype.hasOwnProperty;
var __export = (target, all) => {
  for (var name in all)
    __defProp(target, name, { get: all[name], enumerable: true });
};
var __copyProps = (to, from, except, desc) => {
  if (from && typeof from === "object" || typeof from === "function") {
    for (let key of __getOwnPropNames(from))
      if (!__hasOwnProp.call(to, key) && key !== except)
        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
  }
  return to;
};
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

// src/auth/email/token.ts
var token_exports = {};
__export(token_exports, {
  generateAccessToken: () => generateAccessToken,
  generateRefreshToken: () => generateRefreshToken,
  getTokenizedResponse: () => getTokenizedResponse,
  getUserIdFromRefreshToken: () => getUserIdFromRefreshToken,
  verifyUser: () => verifyUser
});
module.exports = __toCommonJS(token_exports);
var import_bcryptjs = require("bcryptjs");
var import_jsonwebtoken = require("jsonwebtoken");
var import_server = require("next/server");
function generateAccessToken(id, signingKey) {
  return (0, import_jsonwebtoken.sign)({ id }, signingKey, {
    expiresIn: "2h"
  });
}
function generateRefreshToken(id, refreshKey) {
  return (0, import_jsonwebtoken.sign)({ id }, refreshKey);
}
function getTokenizedResponse(accessToken, refreshToken) {
  const body = { accessToken, refreshToken };
  const response = import_server.NextResponse.json(body, {
    status: 200
  });
  if (!accessToken) {
    response.cookies.set("refresh", "", {
      secure: false,
      httpOnly: true,
      expires: 0
    });
  }
  if (refreshToken !== void 0) {
    response.cookies.set("refresh", refreshToken, {
      secure: false,
      httpOnly: true,
      expires: refreshToken === "" ? 0 : new Date(Date.now() + 60 * 60 * 24 * 365 * 1e3)
    });
  }
  return response;
}
function getUserIdFromRefreshToken(refreshKey, refreshToken) {
  if (refreshToken)
    try {
      const decoded = (0, import_jsonwebtoken.verify)(refreshToken, refreshKey);
      if (typeof decoded !== "string" && typeof decoded.id === "number")
        return decoded.id;
    } catch (e) {
      if (!(e instanceof import_jsonwebtoken.JsonWebTokenError)) console.error(e, "errors");
      return null;
    }
  return null;
}
function verifyUser(user, password) {
  if (!user.password) return false;
  return (0, import_bcryptjs.compare)(password, user.password);
}
// Annotate the CommonJS export names for ESM import in node:
0 && (module.exports = {
  generateAccessToken,
  generateRefreshToken,
  getTokenizedResponse,
  getUserIdFromRefreshToken,
  verifyUser
});