@arkadecx/arkade-cloud-functions-auth

arkade-cloud-functions-auth

Install

yarn install @arkadecx/arkade-cloud-functions-auth

Usage

Server side

import { auth } from '@arkadecx/arkade-cloud-functions-auth';

const r = auth(req, {
  hmacSecret: 'any secret',
  originDomainWhitelist: ['www.google.com.au'],
});
if (!r) {
  return res.status(401).json({ error: 'Unauthorised' });
}

AuthOptions

name	desc	default value
enableHmacCheck	if enable hmac check	true
hmacSecret	secrect used to encrypt	''
enableOriginCheck	if enable origin domain check	true
originDomainWhitelist	origin domain whilelist	[]

Client side

import { hmacSignature } from '@arkadecx/arkade-cloud-functions-auth';

const body = {
    //payload here
  };
const route = '/api/route';

const now = Date.now();
const signature = hmacSignature(
    'any secret',
    now,
    route,
    body
);
const response = await fetch(route, {
    method: 'post',
    headers: {
        'Content-Type': 'application/json',
        'x-authentication': `${now}:${signature}`,
    },
    body: JSON.stringify(body),
});

Limitation

• Only work with NextJS api at the moment
• If POST request, only works with Content-Type: application/json