@naturalcycles/nodejs-lib/dist/jwt/jwt.service.js

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.JWTService = exports.jsonwebtoken = void 0;
const js_lib_1 = require("@naturalcycles/js-lib");
const jsonwebtoken = require("jsonwebtoken");
exports.jsonwebtoken = jsonwebtoken;
const joi_shared_schemas_1 = require("../validation/joi/joi.shared.schemas");
const joi_validation_util_1 = require("../validation/joi/joi.validation.util");
// todo: define JWTError and list possible options
/**
 * Wraps popular `jsonwebtoken` library.
 * You should create one instance of JWTService for each pair of private/public key.
 *
 * Generate key pair like this:
 * openssl ecparam -name secp256k1 -genkey -noout -out key.pem
 * openssl ec -in key.pem -pubout > key.pub.pem
 */
class JWTService {
    constructor(cfg) {
        this.cfg = cfg;
    }
    sign(payload, schema, opt = {}) {
        (0, js_lib_1._assert)(this.cfg.privateKey, 'JWTService: privateKey is required to be able to verify, but not provided');
        if (schema) {
            (0, joi_validation_util_1.validate)(payload, schema);
        }
        return jsonwebtoken.sign(payload, this.cfg.privateKey, {
            algorithm: this.cfg.algorithm,
            noTimestamp: true,
            ...this.cfg.signOptions,
            ...opt,
        });
    }
    verify(token, schema, opt = {}) {
        (0, js_lib_1._assert)(this.cfg.publicKey, 'JWTService: publicKey is required to be able to verify, but not provided');
        try {
            const data = jsonwebtoken.verify(token, this.cfg.publicKey, {
                algorithms: [this.cfg.algorithm],
                ...this.cfg.verifyOptions,
                ...opt,
            });
            if (schema) {
                (0, joi_validation_util_1.validate)(data, schema);
            }
            return data;
        }
        catch (err) {
            if (this.cfg.errorData) {
                (0, js_lib_1._typeCast)(err);
                (0, js_lib_1._errorDataAppend)(err, {
                    ...this.cfg.errorData,
                });
            }
            throw err;
        }
    }
    decode(token, schema) {
        const data = jsonwebtoken.decode(token, {
            complete: true,
        });
        (0, js_lib_1._assert)(data, 'invalid token, decoded value is null', {
            ...this.cfg.errorData,
        });
        (0, joi_validation_util_1.validate)(data.payload, schema || joi_shared_schemas_1.anyObjectSchema);
        return data;
    }
}
exports.JWTService = JWTService;