gkm-auth

gkm-auth

Docs: https://geekmidas.github.io/toolbox/packages/auth.html

Activation

• Files importing @geekmidas/auth, @geekmidas/auth/client, @geekmidas/auth/server
• Files using TokenClient, CacheTokenStorage, TokenStorage
• Files with getAccessToken(), refreshTokens(), or JWT payload handling
• Files implementing auth middleware, token validation, or refresh endpoints

Key patterns

import { TokenClient } from '@geekmidas/auth/client';
import { CacheTokenStorage } from '@geekmidas/auth/cache';

const tokenClient = new TokenClient({
  storage: new CacheTokenStorage(cache),
  refreshEndpoint: '/auth/refresh',
  onTokensRefreshed: (tokens) => console.log('Tokens refreshed'),
});

const accessToken = await tokenClient.getAccessToken();

• Automatic token refresh with configurable strategies
• Multiple storage backends: memory, cache (Upstash/Redis), or custom
• Type-safe token payloads — infer user data from JWT claims
• Server-side: validate tokens, generate JWTs, handle refresh flows
• OpenAuth integration support for OAuth providers

Integration points

• @geekmidas/cache — CacheTokenStorage backend for token persistence
• @geekmidas/constructs — protect endpoints with auth middleware
• @geekmidas/errors — throw unauthorized errors for invalid tokens
• @geekmidas/logger — audit token refresh events