Update tap

.github/workflows/ci.yml

@@ -14,11 +14,13 @@ on:
 jobs:
   tests:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [20.x, 22.x]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 18
-      - run: npm ci
-      - run: npm run lint
+          node-version: ${{ matrix.node-version }}
+      - run: npm install
       - run: npm test

.gitignore

@@ -102,3 +102,6 @@ dist
 
 # TernJS port file
 .tern-port
+
+# tap
+.tap

eslint.config.js

@@ -0,0 +1,3 @@
+'use strict'
+
+module.exports = require('neostandard')({})

index.js

@@ -12,7 +12,7 @@ async function fastifyUser (app, options) {
   const {
     webhook,
     jwt,
-    authStrategies
+    authStrategies,
   } = options
 
   const strategies = []
@@ -21,15 +21,15 @@ async function fastifyUser (app, options) {
     await app.register(require('./lib/jwt'), { jwt })
     strategies.push({
       name: 'jwt',
-      createSession: (req) => req.createJWTSession()
+      createSession: (req) => req.createJWTSession(),
     })
   }
 
   if (webhook) {
     await app.register(require('./lib/webhook'), { webhook })
     strategies.push({
       name: 'webhook',
-      createSession: (req) => req.createWebhookSession()
+      createSession: (req) => req.createWebhookSession(),
     })
   }
 
@@ -80,7 +80,7 @@ async function fastifyUser (app, options) {
 
 module.exports = fp(fastifyUser, {
   fastify: '4.x',
-  name: 'fastify-user'
+  name: 'fastify-user',
 })
 
 module.exports.default = fastifyUser

lib/jwt.js

@@ -6,7 +6,7 @@ const buildGetJwks = require('get-jwks')
 
 module.exports = fp(async function (app, pluginOpts) {
   const {
-    jwt: opts
+    jwt: opts,
   } = pluginOpts
 
   const namespace = opts?.namespace
@@ -29,18 +29,25 @@ module.exports = fp(async function (app, pluginOpts) {
     : user => user
 
   if (opts.jwks) {
-    const getJwks = buildGetJwks(typeof opts.jwks === 'object' ? opts.jwks : {})
+    let jwks = opts.jwks
+    if (typeof jwks === 'boolean') {
+      jwks = {}
+    } else if (jwks.allowedDomains) {
+      jwks.issuersWhitelist = jwks.allowedDomains
+      delete jwks.allowedDomains
+    }
+    const getJwks = buildGetJwks(jwks)
     app.register(jwt, {
       formatUser,
       ...opts,
       decode: { complete: true },
       secret: function (request, token) {
         const {
           header: { kid, alg },
-          payload: { iss }
+          payload: { iss },
         } = token
         return getJwks.getPublicKey({ kid, domain: iss, alg })
-      }
+      },
     })
   } else {
     app.register(jwt, { formatUser, ...opts })

lib/webhook.js

@@ -7,7 +7,7 @@ const createError = require('@fastify/error')
 const notAllowed = new Set([
   'content-length',
   'host',
-  'connection'
+  'connection',
 ])
 
 module.exports = fp(async function (app, pluginOpts) {
@@ -28,9 +28,9 @@ module.exports = fp(async function (app, pluginOpts) {
       method: 'POST',
       headers: {
         ...headers,
-        'accept-encoding': 'identity'
+        'accept-encoding': 'identity',
       },
-      body
+      body,
     })
 
     if (res.statusCode > 299) {