naystack/dist/auth/email/token.esm.js

A stack built with tight Next + Drizzle + GraphQL

// src/auth/email/token.ts
import { compare } from "bcryptjs";
import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
import { NextResponse } from "next/server";
function generateAccessToken(id, signingKey) {
  return sign({ id }, signingKey, {
    expiresIn: "2h"
  });
}
function generateRefreshToken(id, refreshKey) {
  return sign({ id }, refreshKey);
}
function getTokenizedResponse(accessToken, refreshToken) {
  const body = { accessToken, refreshToken };
  const response = NextResponse.json(body, {
    status: 200
  });
  if (!accessToken) {
    response.cookies.set("refresh", "", {
      secure: false,
      httpOnly: true,
      expires: 0
    });
  }
  if (refreshToken !== void 0) {
    response.cookies.set("refresh", refreshToken, {
      secure: false,
      httpOnly: true,
      expires: refreshToken === "" ? 0 : new Date(Date.now() + 60 * 60 * 24 * 365 * 1e3)
    });
  }
  return response;
}
function getUserIdFromRefreshToken(refreshKey, refreshToken) {
  if (refreshToken)
    try {
      const decoded = verify(refreshToken, refreshKey);
      if (typeof decoded !== "string" && typeof decoded.id === "number")
        return decoded.id;
    } catch (e) {
      if (!(e instanceof JsonWebTokenError)) console.error(e, "errors");
      return null;
    }
  return null;
}
function verifyUser(user, password) {
  if (!user.password) return false;
  return compare(password, user.password);
}
export {
  generateAccessToken,
  generateRefreshToken,
  getTokenizedResponse,
  getUserIdFromRefreshToken,
  verifyUser
};