authorized-rules - npm Package Compare versions

Comparing version 0.3.0 to 0.4.0

dist/index.js

@@ -50,5 +50,10 @@ "use strict";
             case 0:
-                token = parseToken(jwtToken);
+                try {
+                    token = parseToken(jwtToken);
+                }
+                catch (e) {
+                    throw http_errors_1.default(403, 'invalid token: parse failed');
+                }
                 if (!token.iss) {
-                    throw http_errors_1.default(403, 'invalid token (missing issuer)');
+                    throw http_errors_1.default(403, 'invalid token: missing issuer');
                 }
@@ -59,3 +64,3 @@ return [4 /*yield*/, executionRule(token)];
                 if (!ruleResult.passed) {
-                    throw http_errors_1.default(403, 'Operation not authorized');
+                    throw http_errors_1.default(403, 'operation not authorized');
                 }
@@ -62,0 +67,0 @@ return [2 /*return*/];

package.json

 {
   "name": "authorized-rules",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

src/index.ts

@@ -26,6 +26,12 @@ import jwtDecoder from 'jwt-decode';
 ): Promise<void> => {
-    const token = parseToken(jwtToken);
+    let token: JwtToken;
+    try {
+        token = parseToken(jwtToken);
+    }
+    catch (e) {
+        throw createError(403, 'invalid token: parse failed');
+    }
 
     if (!token.iss) {
-        throw createError(403, 'invalid token (missing issuer)');
+        throw createError(403, 'invalid token: missing issuer');
     }
@@ -35,3 +41,3 @@
     if (!ruleResult.passed) {
-        throw createError(403, 'Operation not authorized');
+        throw createError(403, 'operation not authorized');
     }
@@ -38,0 +44,0 @@ };

tests/specs/tests.spec.ts

@@ -50,3 +50,14 @@ import * as jwt from 'jsonwebtoken';
         });
+
+        it('should throw 403 when token in invalid ', async () => {
+            const rule1 = createRule('rule1', false);
+
+            try {
+                await authorize('stam', and([rule1()]));
+                fail();
+            } catch (e) {
+                expect(e.status).toBe(403);
+            }
+        });        
     });    
 });

No alert changes

Improved metrics

Total package byte prevSize

15239

increased by4.97%

Lines of code

293

increased by7.33%

No dependency changes