📦 EqualifyEverything / equalify

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47import jwt from 'jsonwebtoken';
import jwksClient from 'jwks-rsa';

if (!process.env.SSO_JWKS) {
    throw new Error('SSO_JWKS environment variable is required for SSO authentication');
}

const client = jwksClient({
    jwksUri: process.env.SSO_JWKS,
    cache: true,
    cacheMaxAge: 86400000, // 24 hours
});

// Get signing key
const getKey = (header: any, callback: any) => {
    client.getSigningKey(header.kid, (err, key) => {
        if (err) {
            callback(err);
            return;
        }
        const signingKey = key?.getPublicKey();
        callback(null, signingKey);
    });
}

// Verify token
export const verifySsoToken = (token: string) => {
    return new Promise((resolve, reject) => {
        jwt.verify(
            token,
            getKey,
            {
                audience: process.env.SSO_CLIENT_ID,
                issuer: process.env.SSO_TENANT,
                algorithms: ['RS256'],
            },
            (err, decoded) => {
                if (err) {
                    reject(err);
                } else {
                    resolve(decoded);
                }
            }
        );
    });
}