koaJwtSecret type declaration is incorrect

[auth0]

koaJwtSecret type declaration is incorrect

[ironpark]

i have same problem.

import Koa from "koa";
import Router from "koa-router";
import jwt from "koa-jwt";
import { koaJwtSecret } from "jwks-rsa";
import { ApolloServer } from "apollo-server-koa";
import graphqlSchema from "./schema";

const graphqlServer = new ApolloServer({
  schema: graphqlSchema,
});

const app = new Koa();
const router = new Router();

app.use(
  jwt({
    secret: koaJwtSecret({
      cache: true,
      rateLimit: true,
      jwksRequestsPerMinute: 2,
      jwksUri: "test/jwks.json",
    }),
    audience: "http://myapi/protected",
    issuer: "http://issuer",
    algorithms: ["RS256"],
  }),
);

app.ts:28:7 - error TS2345: Argument of type '{ secret: (name: string, scheme: string, options?: any) => void; audience: string; issuer: string...' is not assignable to parameter of type 'Options'.
  Types of property 'secret' are incompatible.
    Type '(name: string, scheme: string, options?: any) => void' is not assignable to type 'string | string[] | Buffer | Buffer[] | SecretLoader'.
      Type '(name: string, scheme: string, options?: any) => void' is not assignable to type 'SecretLoader'.
        Type 'void' is not assignable to type 'Promise<string | string[] | Buffer | Buffer[]>'.

 28   jwt({
          ~
 29     secret: koaJwtSecret({
    ~~~~~~~~~~~~~~~~~~~~~~~~~~
...
 37     algorithms: ["RS256"],
    ~~~~~~~~~~~~~~~~~~~~~~~~~~
 38   }),
    ~~~

[cocojoe]

Care to share some information that would help address this issue?
What is your setup? What is the actual error message you are seeing?
Thx

[asafigan]

Sorry, I was frustrated when I opened this issue so I didn't elaborate.

The types for hapiJwt2Key, hapiJwt2KeyAsync, and koaJwtSecret are all the same, which is not true. It looks like they were just copied and pasted for each other. koaJwtSecret is wrong; the others might be wrong too.

What it is now:

function koaJwtSecret(options: JwksRsa.Options): (name: string, scheme: string, options?: any) => void;

If you read the source code, the return type is completely wrong. It is more like:

function koaJwtSecret(options: JwksRsa.Options): (options: {alg: string, kid: string}) => Promise<string>;

I am not sure that the inputs and promise are all strings by reading just src/integrations/koa.js, but that is my best guess.

[sjdweb]

I'm having this problem too.

This should match the signature of SecretLoader in koa-jwt package.

export type SecretLoader = (header: any, payload: any) => Promise<string | string[] | Buffer | Buffer[]>;

You can shut the compiler up for the time being:

app.use(
  jwt({
    secret: koaJwtSecret({
      cache: true,
      rateLimit: true,
      jwksRequestsPerMinute: 2,
      jwksUri: "test/jwks.json",
    }) as jwt.SecretLoader,
    audience: "http://myapi/protected",
    issuer: "http://issuer",
    algorithms: ["RS256"],
  }),
);