feat: add support for fastify token sources

Implement a new adapter pattern to work with cookies and headers and
create an express and fastify adapter (separate packages).

For now this should be 100% backwards compatible, since the express
adapter is still part of the of the core module, but in the future we
would move this out of the package

Author: mvantellingen

.changeset/neat-tigers-taste.md

@@ -0,0 +1,8 @@
+---
+"@labdigital/federated-token-express-adapter": minor
+"@labdigital/federated-token-fastify-adapter": minor
+"@labdigital/federated-token-apollo": minor
+"@labdigital/federated-token": minor
+---
+
+Add ability to support multiple http frameworks and implement fastify

.vscode/settings.json

@@ -0,0 +1,17 @@
+{
+	"editor.codeActionsOnSave": {
+		"quickfix.biome": "explicit",
+		"source.fixAll.eslint": "never",
+		"source.organizeImports": "never",
+		"source.organizeImports.biome": "explicit"
+	},
+	"[json]": {
+		"editor.defaultFormatter": "biomejs.biome"
+	},
+	"[typescriptreact]": {
+		"editor.defaultFormatter": "biomejs.biome"
+	},
+	"[javascript]": {
+		"editor.defaultFormatter": "biomejs.biome"
+	}
+}

packages/apollo/src/gateway.ts

@@ -13,7 +13,7 @@ import type { PublicFederatedTokenContext } from "./context";
 
 type GatewayOptions = {
 	signer: TokenSigner;
-	source: TokenSource;
+	source: TokenSource<unknown, unknown>;
 };
 
 /**
@@ -27,7 +27,7 @@ export class GatewayAuthPlugin<TContext extends PublicFederatedTokenContext>
 	implements ApolloServerPlugin, GraphQLRequestListener<TContext>
 {
 	private signer: TokenSigner;
-	private tokenSource: TokenSource;
+	private tokenSource: TokenSource<unknown, unknown>;
 
 	constructor(options: GatewayOptions) {
 		this.signer = options.signer;

packages/core/package.json

@@ -5,14 +5,20 @@
 	"module": "./dist/index.js",
 	"main": "./dist/index.cjs",
 	"types": "./dist/index.d.ts",
+	"type": "module",
 	"exports": {
 		"./package.json": "./package.json",
 		".": {
 			"import": "./dist/index.js",
-			"require": "./dist/index.cjs"
+			"require": "./dist/index.cjs",
+			"types": "./dist/index.d.ts"
+		},
+		"./tokensource": {
+			"import": "./dist/tokensource/index.js",
+			"require": "./dist/tokensource/index.cjs",
+			"types": "./dist/tokensource/index.d.ts"
 		}
 	},
-	"type": "module",
 	"keywords": ["graphql", "authentication"],
 	"author": "Lab Digital <[email protected]>",
 	"license": "MIT",

packages/core/src/index.ts

@@ -2,6 +2,8 @@ export { PublicFederatedToken } from "./jwt";
 export { KeyManager, TokenSigner, type KeyManagerInterface } from "./sign";
 export { FederatedToken } from "./token";
 export {
+	type BaseCookieSourceOptions,
+	BaseCookieTokenSource,
 	CompositeTokenSource,
 	CookieTokenSource,
 	HeaderTokenSource,

packages/core/src/tokensource/base.ts

@@ -1,32 +1,27 @@
-import type { Request, Response } from "express";
+export interface TokenSource<TRequest, TResponse> {
+	deleteAccessToken(request: TRequest, response: TResponse): void;
+	deleteRefreshToken(request: TRequest, response: TResponse): void;
+	deleteDataToken(request: TRequest, response: TResponse): void;
 
-export interface TokenSource {
-	deleteAccessToken(request: Request, response: Response): void;
-	deleteRefreshToken(request: Request, response: Response): void;
-	deleteDataToken(
-		request: Request,
-		response: Response<any, Record<string, any>>,
-	): void;
-
-	getAccessToken(request: Request): string | undefined;
-	getDataToken(request: Request): string | undefined;
-	getRefreshToken(request: Request): string | undefined;
+	getAccessToken(request: TRequest): string | undefined;
+	getDataToken(request: TRequest): string | undefined;
+	getRefreshToken(request: TRequest): string | undefined;
 
 	setDataToken(
-		request: Request,
-		response: Response,
+		request: TRequest,
+		response: TResponse,
 		token: string,
 		isAuthenticated?: boolean,
 	): void;
 	setAccessToken(
-		request: Request,
-		response: Response,
+		request: TRequest,
+		response: TResponse,
 		token: string,
 		isAuthenticated?: boolean,
 	): void;
 	setRefreshToken(
-		request: Request,
-		response: Response,
+		request: TRequest,
+		response: TResponse,
 		token: string,
 		isAuthenticated?: boolean,
 	): void;

packages/core/src/tokensource/composite.ts

@@ -1,26 +1,28 @@
 import type { Request, Response } from "express";
 import type { TokenSource } from "./base";
 
-export class CompositeTokenSource implements TokenSource {
-	private sources: TokenSource[];
+export class CompositeTokenSource<TRequest = Request, TResponse = Response>
+	implements TokenSource<TRequest, TResponse>
+{
+	private sources: TokenSource<TRequest, TResponse>[];
 
-	constructor(sources: TokenSource[]) {
+	constructor(sources: TokenSource<TRequest, TResponse>[]) {
 		this.sources = sources;
 	}
 
-	deleteAccessToken(request: Request, response: Response): void {
+	deleteAccessToken(request: TRequest, response: TResponse): void {
 		for (const source of this.sources) {
 			source.deleteAccessToken(request, response);
 		}
 	}
 
-	deleteRefreshToken(request: Request, response: Response): void {
+	deleteRefreshToken(request: TRequest, response: TResponse): void {
 		for (const source of this.sources) {
 			source.deleteRefreshToken(request, response);
 		}
 	}
 
-	getAccessToken(request: Request): string {
+	getAccessToken(request: TRequest): string {
 		for (const source of this.sources) {
 			const token = source.getAccessToken(request);
 			if (token) {
@@ -30,7 +32,7 @@ export class CompositeTokenSource implements TokenSource {
 		return "";
 	}
 
-	getRefreshToken(request: Request): string {
+	getRefreshToken(request: TRequest): string {
 		for (const source of this.sources) {
 			const token = source.getRefreshToken(request);
 			if (token) {
@@ -40,7 +42,7 @@ export class CompositeTokenSource implements TokenSource {
 		return "";
 	}
 
-	getDataToken(request: Request): string {
+	getDataToken(request: TRequest): string {
 		for (const source of this.sources) {
 			const token = source.getDataToken(request);
 			if (token) {
@@ -51,8 +53,8 @@ export class CompositeTokenSource implements TokenSource {
 	}
 
 	setAccessToken(
-		request: Request,
-		response: Response,
+		request: TRequest,
+		response: TResponse,
 		token: string,
 		isAuthenticated = false,
 	) {
@@ -62,8 +64,8 @@ export class CompositeTokenSource implements TokenSource {
 	}
 
 	setRefreshToken(
-		request: Request,
-		response: Response,
+		request: TRequest,
+		response: TResponse,
 		token: string,
 		isAuthenticated = false,
 	) {
@@ -73,8 +75,8 @@ export class CompositeTokenSource implements TokenSource {
 	}
 
 	setDataToken(
-		request: Request,
-		response: Response,
+		request: TRequest,
+		response: TResponse,
 		token: string,
 		isAuthenticated = false,
 	) {
@@ -83,7 +85,7 @@ export class CompositeTokenSource implements TokenSource {
 		}
 	}
 
-	deleteDataToken(request: Request, response: Response): void {
+	deleteDataToken(request: TRequest, response: TResponse): void {
 		for (const source of this.sources) {
 			source.deleteDataToken(request, response);
 		}