Fix next boilerplates to not use getSSRSession util method

supertokens · Nov 1, 2024 · dfd535d · dfd535d
1 parent 6bcb6bd
commit dfd535d
Show file tree

Hide file tree

Showing 4 changed files with 122 additions and 4 deletions.
diff --git a/boilerplate/fullstack/next-app-dir-multitenancy/app/components/home.tsx b/boilerplate/fullstack/next-app-dir-multitenancy/app/components/home.tsx
@@ -7,7 +7,7 @@ import { CelebrateIcon, SeparatorLine } from "../../assets/images";
 import { CallAPIButton } from "./callApiButton";
 import { LinksComponent } from "./linksComponent";
 import { SessionAuthForNextJS } from "./sessionAuthForNextJS";
-import { getSSRSession } from "supertokens-node/nextjs";
+import { getSessionForSSR } from "../util";
 
 export async function HomePage() {
     const cookiesFromReq = await cookies();
@@ -17,7 +17,7 @@ export async function HomePage() {
             value,
         })
     );
-    const { accessTokenPayload, hasToken, error } = await getSSRSession(cookiesArray);
+    const { accessTokenPayload, hasToken, error } = await getSessionForSSR(cookiesArray);
 
     if (error) {
         return <div>Something went wrong while trying to get the session. Error - {error.message}</div>;

diff --git a/boilerplate/fullstack/next-app-dir-multitenancy/app/util.ts b/boilerplate/fullstack/next-app-dir-multitenancy/app/util.ts
@@ -0,0 +1,59 @@
+import JsonWebToken from "jsonwebtoken";
+import type { JwtHeader, JwtPayload, SigningKeyCallback } from "jsonwebtoken";
+import jwksClient from "jwks-rsa";
+import { appInfo } from "./config/appInfo";
+
+const client = jwksClient({
+    jwksUri: `${appInfo.apiDomain}${appInfo.apiBasePath}/jwt/jwks.json`,
+});
+
+async function verifyToken(token: string): Promise<JwtPayload> {
+    const getPublicKey = (header: JwtHeader, callback: SigningKeyCallback) => {
+        client.getSigningKey(header.kid, (err, key) => {
+            if (err) {
+                callback(err);
+            } else {
+                const signingKey = key?.getPublicKey();
+                callback(null, signingKey);
+            }
+        });
+    };
+
+    return new Promise((resolve, reject) => {
+        JsonWebToken.verify(token, getPublicKey, {}, (err, decoded) => {
+            if (err) {
+                reject(err);
+            } else {
+                resolve(decoded as JwtPayload);
+            }
+        });
+    });
+}
+
+/**
+ * A helper function to retrieve session details on the server side.
+ *
+ * NOTE: This function does not use the getSession function from the supertokens-node SDK
+ * because getSession can update the access token. These updated tokens would not be
+ * propagated to the client side, as request interceptors do not run on the server side.
+ */
+export async function getSessionForSSR(cookies: Array<{ name: string; value: string }>): Promise<{
+    accessTokenPayload: JwtPayload | undefined;
+    hasToken: boolean;
+    error: Error | undefined;
+}> {
+    let accessToken = cookies.find((cookie) => cookie.name === "sAccessToken")?.value;
+    const hasToken = !!accessToken;
+    try {
+        if (accessToken) {
+            const decoded = await verifyToken(accessToken);
+            return { accessTokenPayload: decoded, hasToken, error: undefined };
+        }
+        return { accessTokenPayload: undefined, hasToken, error: undefined };
+    } catch (error) {
+        if (error instanceof JsonWebToken.TokenExpiredError) {
+            return { accessTokenPayload: undefined, hasToken, error: undefined };
+        }
+        return { accessTokenPayload: undefined, hasToken, error: error as Error };
+    }
+}
diff --git a/boilerplate/fullstack/next-app-dir/app/components/home.tsx b/boilerplate/fullstack/next-app-dir/app/components/home.tsx
@@ -7,7 +7,7 @@ import { CelebrateIcon, SeparatorLine } from "../../assets/images";
 import { CallAPIButton } from "./callApiButton";
 import { LinksComponent } from "./linksComponent";
 import { SessionAuthForNextJS } from "./sessionAuthForNextJS";
-import { getSSRSession } from "supertokens-node/nextjs";
+import { getSessionForSSR } from "../util";
 
 export async function HomePage() {
     const cookiesFromReq = await cookies();
@@ -17,7 +17,7 @@ export async function HomePage() {
             value,
         })
     );
-    const { accessTokenPayload, hasToken, error } = await getSSRSession(cookiesArray);
+    const { accessTokenPayload, hasToken, error } = await getSessionForSSR(cookiesArray);
 
     if (error) {
         return <div>Something went wrong while trying to get the session. Error - {error.message}</div>;

diff --git a/boilerplate/fullstack/next-app-dir/app/util.ts b/boilerplate/fullstack/next-app-dir/app/util.ts
@@ -0,0 +1,59 @@
+import JsonWebToken from "jsonwebtoken";
+import type { JwtHeader, JwtPayload, SigningKeyCallback } from "jsonwebtoken";
+import jwksClient from "jwks-rsa";
+import { appInfo } from "./config/appInfo";
+
+const client = jwksClient({
+    jwksUri: `${appInfo.apiDomain}${appInfo.apiBasePath}/jwt/jwks.json`,
+});
+
+async function verifyToken(token: string): Promise<JwtPayload> {
+    const getPublicKey = (header: JwtHeader, callback: SigningKeyCallback) => {
+        client.getSigningKey(header.kid, (err, key) => {
+            if (err) {
+                callback(err);
+            } else {
+                const signingKey = key?.getPublicKey();
+                callback(null, signingKey);
+            }
+        });
+    };
+
+    return new Promise((resolve, reject) => {
+        JsonWebToken.verify(token, getPublicKey, {}, (err, decoded) => {
+            if (err) {
+                reject(err);
+            } else {
+                resolve(decoded as JwtPayload);
+            }
+        });
+    });
+}
+
+/**
+ * A helper function to retrieve session details on the server side.
+ *
+ * NOTE: This function does not use the getSession function from the supertokens-node SDK
+ * because getSession can update the access token. These updated tokens would not be
+ * propagated to the client side, as request interceptors do not run on the server side.
+ */
+export async function getSessionForSSR(cookies: Array<{ name: string; value: string }>): Promise<{
+    accessTokenPayload: JwtPayload | undefined;
+    hasToken: boolean;
+    error: Error | undefined;
+}> {
+    let accessToken = cookies.find((cookie) => cookie.name === "sAccessToken")?.value;
+    const hasToken = !!accessToken;
+    try {
+        if (accessToken) {
+            const decoded = await verifyToken(accessToken);
+            return { accessTokenPayload: decoded, hasToken, error: undefined };
+        }
+        return { accessTokenPayload: undefined, hasToken, error: undefined };
+    } catch (error) {
+        if (error instanceof JsonWebToken.TokenExpiredError) {
+            return { accessTokenPayload: undefined, hasToken, error: undefined };
+        }
+        return { accessTokenPayload: undefined, hasToken, error: error as Error };
+    }
+}