@sudobility/auth_service

Framework-agnostic Firebase authentication helpers for backend services. Provides token verification with caching, site admin checking, and user info retrieval.

Installation

bun add @sudobility/auth_service

Peer Dependencies

bun add firebase-admin @sudobility/types

Usage

Initialization

import { initializeAuth } from '@sudobility/auth_service';

initializeAuth({
  firebase: {
    projectId: process.env.FIREBASE_PROJECT_ID!,
    clientEmail: process.env.FIREBASE_CLIENT_EMAIL!,
    privateKey: process.env.FIREBASE_PRIVATE_KEY!,
  },
  siteAdminEmails: process.env.SITEADMIN_EMAILS,
});

Token Verification (Hono example)

import { createCachedVerifier, isSiteAdmin } from '@sudobility/auth_service';

const { verify: verifyToken } = createCachedVerifier(300000); // 5 min TTL

const decoded = await verifyToken(token);
const isAdmin = isSiteAdmin(decoded.email);

User Info

import { getUserInfo } from '@sudobility/auth_service';

const userInfo = await getUserInfo(userId);

API

Function	Description
initializeAuth(config)	Initialize Firebase Admin SDK and site admin list
verifyIdToken(token)	Verify Firebase ID token (no caching)
createCachedVerifier(ttl)	Create cached token verifier (returns { verify, stop, cache })
isSiteAdmin(email)	Check if email is a site admin
isAnonymousUser(token)	Check if token is from anonymous user
getUserInfo(userId)	Get user info from Firebase
getFirebaseAuth()	Get Firebase Auth instance

Environment Variables

Variable	Description
FIREBASE_PROJECT_ID	Firebase project ID
FIREBASE_CLIENT_EMAIL	Firebase service account email
FIREBASE_PRIVATE_KEY	Firebase service account private key
SITEADMIN_EMAILS	Comma-separated list of site admin emails

Development

bun run build        # Build to dist/
bun run verify       # All checks + build
bun test             # Run tests
bun run typecheck    # TypeScript check
bun run lint         # Run ESLint

License

BUSL-1.1