Michael Freno
71972436b6
- Install jose (JWT) and bcryptjs (password hashing) dependencies - Create auth utilities: JWT sign/verify, password hash/verify, session management - Create createTRPCContext that extracts auth from session cookie, Bearer JWT, or x-api-key - Add publicProcedure, protectedProcedure, adminProcedure, rateLimitedProcedure with middleware - Wire context builder into SolidStart tRPC API handler - Update tRPC client to inject auth tokens and handle 401 redirects - Add unit tests for JWT, password, context builder, and middleware
25 lines
675 B
TypeScript
25 lines
675 B
TypeScript
import { SignJWT, jwtVerify } from "jose";
|
|
|
|
function getSecret(): Uint8Array {
|
|
const secret = process.env.JWT_SECRET ?? "dev-jwt-secret-change-in-production";
|
|
return Buffer.from(secret, "utf-8");
|
|
}
|
|
|
|
export async function signJWT(
|
|
payload: Record<string, unknown>,
|
|
options?: { expiresIn?: string },
|
|
): Promise<string> {
|
|
return new SignJWT(payload)
|
|
.setProtectedHeader({ alg: "HS256" })
|
|
.setIssuedAt()
|
|
.setExpirationTime(options?.expiresIn ?? "7d")
|
|
.sign(getSecret());
|
|
}
|
|
|
|
export async function verifyJWT<T = Record<string, unknown>>(
|
|
token: string,
|
|
): Promise<T> {
|
|
const { payload } = await jwtVerify(token, getSecret());
|
|
return payload as T;
|
|
}
|