13431068834

Committed 20 Feb 2025 08:33AM UTC coverage: 90.591% (-1.2%) from 91.81%

Build # 13431068834

Build Type

push

github

Committed by

web-flow

Commit Message

Merge pull request #473 from thyming/jwt-auth

JWT authentication and authorization

Run Details

101 of 131 branches covered (77.1%)

Branch coverage included in aggregate %.

154 of 162 new or added lines in 12 files covered. (95.06%)

25 existing lines in 6 files now uncovered.

910 of 985 relevant lines covered (92.39%)

4.34 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

81.82

/src/plugins/remote-cache/auth/static.ts

import { badRequest, unauthorized } from '@hapi/boom'
import { FastifyInstance } from 'fastify'
import fp from 'fastify-plugin'

export default fp(async (fastify: FastifyInstance) => {
  const allowedTokens = fastify.config.TURBO_TOKEN
  if (!(Array.isArray(allowedTokens) && allowedTokens.length)) {
    throw new Error(
      `'allowedTokens' options must be a string[], ${typeof allowedTokens} provided instead`,
    )
  }
  const tokens = new Set(allowedTokens)

  fastify.addHook('onRequest', async function (request) {
    let authHeader = request.headers.authorization
    authHeader = Array.isArray(authHeader) ? authHeader.join() : authHeader

    if (!authHeader) {
      throw badRequest('Missing Authorization header')
    }
    const [, token] = authHeader.split('Bearer ')
    if (!tokens.has(token)) {
      throw unauthorized('Invalid authorization token')
    }
  })
})

1	import { badRequest, unauthorized } from '@hapi/boom'	1✔
2	import { FastifyInstance } from 'fastify'	1✔
3	import fp from 'fastify-plugin'	1✔
4		1✔
5	export default fp(async (fastify: FastifyInstance) => {	1✔
6	const allowedTokens = fastify.config.TURBO_TOKEN	8✔
7	if (!(Array.isArray(allowedTokens) && allowedTokens.length)) {	8!
NEW 8	throw new Error(	×
NEW 9	`'allowedTokens' options must be a string[], ${typeof allowedTokens} provided instead`,	×
NEW 10	)	×
NEW 11	}	×
12	const tokens = new Set(allowedTokens)	8✔
13		8✔
14	fastify.addHook('onRequest', async function (request) {	8✔
15	let authHeader = request.headers.authorization	47✔
16	authHeader = Array.isArray(authHeader) ? authHeader.join() : authHeader	47!
17		47✔
18	if (!authHeader) {	47✔
19	throw badRequest('Missing Authorization header')	5✔
20	}	5✔
21	const [, token] = authHeader.split('Bearer ')	47✔
22	if (!tokens.has(token)) {	47✔
23	throw unauthorized('Invalid authorization token')	5✔
24	}	5✔
25	})	8✔
26	})	1✔

ducktors / turborepo-remote-cache / 13431068834

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous