fix #2 add bearer support

src/module.ts

@@ -7,7 +7,8 @@ import {
 
 // Module options TypeScript interface definition
 export interface ModuleOptions {
-  tokenHeader: string;
+  tokenHeader?: string;
+  prefix?: string;
   noAuthRoutes: string[];
 }
 

src/runtime/server/middleware/tokenAuth.ts

@@ -25,10 +25,13 @@ export default defineEventHandler(async (event) => {
     });
   }
 
+  const strippedToken = token
+    .toLowerCase()
+    .replace(`${options.prefix?.toLowerCase()} `, "");
   let user;
   try {
     const prisma = new PrismaClient();
-    user = await prisma.users.findFirst({ where: { token } });
+    user = await prisma.users.findFirst({ where: { token: strippedToken } });
   } catch (error) {
     console.error({ error });
   }

test/bearer.test.ts

@@ -0,0 +1,31 @@
+import { describe, it, expect } from "vitest";
+import { fileURLToPath } from "node:url";
+import { setup, $fetch } from "@nuxt/test-utils/e2e";
+
+describe("middleware", async () => {
+  await setup({
+    rootDir: fileURLToPath(new URL("./fixtures/bearer", import.meta.url)),
+  });
+
+  it("deny access with an invalid token", async () => {
+    try {
+      const response = await $fetch("/api/users", {
+        method: "GET",
+        headers: { authorization: "invalidTestToken" },
+      });
+      expect(true).toBe(false);
+    } catch (err) {
+      const typedErr = err as { statusCode: number; statusMessage: string };
+      expect(typedErr.statusCode).toBe(401);
+      expect(typedErr.statusMessage).toBe("Authentication error");
+    }
+  });
+
+  it("allow access with valid bearer token", async () => {
+    const response = await $fetch("/api/users", {
+      method: "GET",
+      headers: { authorization: "Bearer 270fsdg04%rt2f6$)b4eblok0dfgauranga" },
+    });
+    expect(response.results[0].name).toBe("Gauranga");
+  });
+});

test/fixtures/bearer/app.vue

@@ -0,0 +1,6 @@
+<template>
+  <div>basic</div>
+</template>
+
+<script setup>
+</script>

test/fixtures/bearer/nuxt.config.ts

@@ -0,0 +1,10 @@
+import NuxtTokenAuthentication from "../../../src/module";
+
+export default defineNuxtConfig({
+  modules: [NuxtTokenAuthentication],
+  nuxtTokenAuthentication: {
+    noAuthRoutes: ["GET:/api/route_noauth"],
+    tokenHeader: "Authorization",
+    prefix: "Bearer",
+  },
+});

test/fixtures/bearer/package.json

@@ -0,0 +1,5 @@
+{
+  "private": true,
+  "name": "basic",
+  "type": "module"
+}

test/fixtures/bearer/server/api/route_noauth.ts

@@ -0,0 +1,3 @@
+export default defineEventHandler(async (event) => {
+  return { result: "Gauranga" };
+});

test/fixtures/bearer/server/api/users.get.ts

@@ -0,0 +1,3 @@
+export default defineEventHandler(async (event) => {
+  return { results: [{ id: 1, name: "Gauranga" }] };
+});