Connectum API Reference / @connectum/auth / createAuthInterceptor

Function: createAuthInterceptor()

createAuthInterceptor(options): Interceptor

Defined in: packages/auth/src/auth-interceptor.ts:81

Create a generic authentication interceptor.

Extracts credentials from request headers, verifies them using a user-provided callback, and stores the resulting AuthContext in AsyncLocalStorage for downstream access.

Parameters

options

AuthInterceptorOptions

Authentication options

Returns

Interceptor

ConnectRPC interceptor

Examples

import { createAuthInterceptor } from '@connectum/auth';

const auth = createAuthInterceptor({
  extractCredentials: (req) => req.header.get('x-api-key'),
  verifyCredentials: async (apiKey) => {
    const user = await db.findByApiKey(apiKey);
    if (!user) throw new Error('Invalid API key');
    return {
      subject: user.id,
      roles: user.roles,
      scopes: [],
      claims: {},
      type: 'api-key',
    };
  },
});

const auth = createAuthInterceptor({
  verifyCredentials: async (token) => {
    const payload = await verifyToken(token);
    return {
      subject: payload.sub,
      roles: payload.roles ?? [],
      scopes: payload.scope?.split(' ') ?? [],
      claims: payload,
      type: 'jwt',
    };
  },
});