@aintech/auth

Shared authentication library based on aina-auth (JWT HS256, TOTP MFA, magic-link).

Install

npm install @aintech/auth

Usage

import { signJWT, verifyJWT, issueTokens } from '@aintech/auth';

const tokens = issueTokens({ sub: 'user123' }, process.env.JWT_SECRET);
// { accessToken, refreshToken, tokenType, expiresIn }

API

JWT

• signJWT(payload, secret, opts?) — sign HS256 token
• verifyJWT(token, secret) — verify and decode
• issueTokens(claims, secret) — access + refresh pair
• refresh(refreshToken, secret, claimsLookup?) — rotate refresh

TOTP MFA

• generateTOTPSecret(len?) — RFC 6238 base32 secret
• totp(secret, opts?) — generate TOTP code
• verifyTOTP(secret, token, opts?) — verify with ±1 step window
• otpauthURL(secret, opts?) — QR code URL for authenticator apps

Magic Link

• createMagicToken(email, secret, ttlSec?) — generate magic link token
• verifyMagicToken(token, secret) — verify magic link

Middleware (Express/Fastify compatible)

• requireAuth(secret, opts?) — protect routes with JWT Bearer
• requireRole(...roles) — role-based access guard