fix: update jsonwebtoken from v9.0.1 to v9.0.2

Ref: https://github.blog/2023-04-19-introducing-npm-package-provenance/

.eslintrc.json

@@ -1,6 +1,7 @@
 {
   "extends": ["conventions", "prettier"],
   "plugins": ["prettier", "import", "unicorn"],
+  "parser": "@typescript-eslint/parser",
   "parserOptions": {
     "project": "./tsconfig.json"
   },

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,6 +1,6 @@
 <!-- Please first discuss the change you wish to make via issue before making a change. It might avoid a waste of your time. -->
 
-## What changes this PR introduce?
+# What changes this PR introduce?
 
 ## List any relevant issue numbers
 

.github/workflows/build.yml

@@ -10,16 +10,18 @@ jobs:
   build:
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v3.0.0'
+      - uses: 'actions/checkout@v4.0.0'
 
-      - name: 'Use Node.js'
+      - name: 'Setup Node.js'
-        uses: 'actions/setup-node@v3.1.0'
+        uses: 'actions/setup-node@v3.8.1'
         with:
-          node-version: 'lts/*'
+          node-version: '20.x'
           cache: 'npm'
 
-      - name: 'Install'
+      - name: 'Install dependencies'
-        run: 'npm install'
+        run: 'npm clean-install'
 
       - name: 'Build'
         run: 'npm run build'
+
+      - run: 'npm run build:typescript'

.github/workflows/lint.yml

@@ -10,19 +10,19 @@ jobs:
   lint:
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v3.0.0'
+      - uses: 'actions/checkout@v4.0.0'
 
-      - name: 'Use Node.js'
+      - name: 'Setup Node.js'
-        uses: 'actions/setup-node@v3.1.0'
+        uses: 'actions/setup-node@v3.8.1'
         with:
-          node-version: 'lts/*'
+          node-version: '20.x'
           cache: 'npm'
 
-      - name: 'Install'
+      - name: 'Install dependencies'
-        run: 'npm install'
+        run: 'npm clean-install'
 
       - run: 'npm run lint:commit -- --to "${{ github.sha }}"'
       - run: 'npm run lint:editorconfig'
       - run: 'npm run lint:markdown'
-      - run: 'npm run lint:typescript'
+      - run: 'npm run lint:eslint'
       - run: 'npm run lint:prettier'

.github/workflows/release.yml

@@ -7,21 +7,31 @@ on:
 jobs:
   release:
     runs-on: 'ubuntu-latest'
+    permissions:
+      contents: 'write'
+      issues: 'write'
+      pull-requests: 'write'
+      id-token: 'write'
     steps:
-      - uses: 'actions/checkout@v3.0.0'
+      - uses: 'actions/checkout@v4.0.0'
 
-      - name: 'Use Node.js'
+      - name: 'Setup Node.js'
-        uses: 'actions/setup-node@v3.1.0'
+        uses: 'actions/setup-node@v3.8.1'
         with:
-          node-version: 'lts/*'
+          node-version: '20.x'
           cache: 'npm'
 
-      - name: 'Install'
+      - name: 'Install dependencies'
-        run: 'npm install'
+        run: 'npm clean-install'
 
       - name: 'Build Package'
         run: 'npm run build'
 
+      - run: 'npm run build:typescript'
+
+      - name: 'Verify the integrity of provenance attestations and registry signatures for installed dependencies'
+        run: 'npm audit signatures'
+
       - name: 'Release'
         run: 'npm run release'
         env:

.github/workflows/test.yml

@@ -10,22 +10,19 @@ jobs:
   test:
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@v3.0.0'
+      - uses: 'actions/checkout@v4.0.0'
 
-      - name: 'Use Node.js'
+      - name: 'Setup Node.js'
-        uses: 'actions/setup-node@v3.1.0'
+        uses: 'actions/setup-node@v3.8.1'
         with:
-          node-version: 'lts/*'
+          node-version: '20.x'
           cache: 'npm'
 
-      - name: 'Install'
+      - name: 'Install dependencies'
-        run: 'npm install'
+        run: 'npm clean-install'
 
       - name: 'Build'
         run: 'npm run build'
 
       - name: 'Test'
         run: 'npm run test'
-
-      - name: 'Upload Coverage'
-        uses: 'codecov/codecov-action@v3.0.0'

.husky/pre-commit

@@ -3,3 +3,4 @@
 
 npm run lint:staged
 npm run build
+npm run build:typescript

.lintstagedrc.json

@@ -2,5 +2,5 @@
   "*": ["editorconfig-checker"],
   "*.{js,jsx,ts,tsx}": ["prettier --write", "eslint --fix"],
   "*.{json,jsonc,yml,yaml}": ["prettier --write"],
-  "*.{md}": ["prettier --write", "markdownlint --dot --fix"]
+  "*.{md,mdx}": ["prettier --write", "markdownlint-cli2 --fix"]
 }

.markdownlint-cli2.jsonc

@@ -0,0 +1,11 @@
+{
+  "config": {
+    "extends": "markdownlint/style/prettier",
+    "relative-links": true,
+    "default": true,
+    "MD033": false
+  },
+  "globs": ["**/*.{md,mdx}"],
+  "ignores": ["**/node_modules"],
+  "customRules": ["markdownlint-rule-relative-links"]
+}

.markdownlint.json

@@ -1,7 +0,0 @@
-{
-  "default": true,
-  "MD013": false,
-  "MD024": false,
-  "MD033": false,
-  "MD041": false
-}

.npmrc

@@ -1 +1,2 @@
 save-exact=true
+provenance=true

.nycrc.json

@@ -1,5 +0,0 @@
-{
-  "reporter": ["text", "cobertura"],
-  "src": "./build",
-  "all": true
-}

.swcrc

@@ -1,22 +1,13 @@
 {
+  "sourceMaps": true,
   "jsc": {
     "parser": {
       "syntax": "typescript",
-      "decorators": true,
       "dynamicImport": true
     },
-    "transform": {
+    "target": "esnext"
-      "legacyDecorator": true,
-      "decoratorMetadata": true
-    },
-    "target": "es2022",
-    "loose": true
   },
   "module": {
-    "type": "es6",
+    "type": "es6"
-    "strict": false,
-    "strictMode": true,
-    "lazy": false,
-    "noInterop": false
   }
 }

.taprc

@@ -1,9 +0,0 @@
-ts: false
-jsx: false
-flow: false
-check-coverage: false
-coverage: false
-timeout: 10000
-
-files:
-  - 'build/**/*.test.js'

.vscode/settings.json

@@ -6,5 +6,6 @@
   "editor.formatOnSave": true,
   "editor.codeActionsOnSave": {
     "source.fixAll": true
-  }
+  },
+  "eslint.options": { "ignorePath": ".gitignore" }
 }

CODE_OF_CONDUCT.md

@@ -60,7 +60,7 @@ representative at an online or offline event.
 
 Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported to the community leaders responsible for enforcement at
-contact@divlo.fr.
+<contact@theoludwig.fr>.
 All complaints will be reviewed and investigated promptly and fairly.
 
 All community leaders are obligated to respect the privacy and security of the

CONTRIBUTING.md

@@ -29,26 +29,4 @@ If you're adding new features to **Thream/socketio-jwt**, please include tests.
 
 ## Commits
 
-The commit message guidelines respect [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/master/%40commitlint/config-conventional) and [Semantic Versioning](https://semver.org/) for releases.
+The commit message guidelines adheres to [Conventional Commits](https://www.conventionalcommits.org/) and [Semantic Versioning](https://semver.org/) for releases.
-
-### Types
-
-Types define which kind of changes you made to the project.
-
-| Types    | Description                                                                                                  |
-| -------- | ------------------------------------------------------------------------------------------------------------ |
-| feat     | A new feature.                                                                                               |
-| fix      | A bug fix.                                                                                                   |
-| docs     | Documentation only changes.                                                                                  |
-| style    | Changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc).      |
-| refactor | A code change that neither fixes a bug nor adds a feature.                                                   |
-| perf     | A code change that improves performance.                                                                     |
-| test     | Adding missing tests or correcting existing tests.                                                           |
-| build    | Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm).         |
-| ci       | Changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs). |
-| chore    | Other changes that don't modify src or test files.                                                           |
-| revert   | Reverts a previous commit.                                                                                   |
-
-### Scopes
-
-Scopes define what part of the code changed.

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) Auth0, Inc. <support@auth0.com> (http://auth0.com) and Thream contributors
+Copyright (c) Auth0, Inc. <support@auth0.com> (<https://auth0.com/>) and Thream contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -12,7 +12,6 @@
   <a href="https://github.com/Thream/socketio-jwt/actions/workflows/build.yml"><img src="https://github.com/Thream/socketio-jwt/actions/workflows/build.yml/badge.svg?branch=develop" /></a>
   <a href="https://github.com/Thream/socketio-jwt/actions/workflows/lint.yml"><img src="https://github.com/Thream/socketio-jwt/actions/workflows/lint.yml/badge.svg?branch=develop" /></a>
   <a href="https://github.com/Thream/socketio-jwt/actions/workflows/test.yml"><img src="https://github.com/Thream/socketio-jwt/actions/workflows/test.yml/badge.svg?branch=develop" /></a>
-  <a href="https://codecov.io/gh/Thream/socketio-jwt"><img src="https://codecov.io/gh/Thream/socketio-jwt/branch/develop/graph/badge.svg" alt="codecov" /></a>
   <br />
   <a href="https://conventionalcommits.org"><img src="https://img.shields.io/badge/Conventional%20Commits-1.0.0-yellow.svg" alt="Conventional Commits" /></a>
   <a href="https://github.com/semantic-release/semantic-release"><img src="https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg" alt="semantic-release" /></a>
@@ -23,13 +22,12 @@
 
 Authenticate socket.io incoming connections with JWTs.
 
-Compatible with `socket.io >= 3.0.0`.
+This repository was originally forked from [auth0-socketio-jwt](https://github.com/auth0-community/auth0-socketio-jwt) and it is not intended to take any credit but to improve the code from now on.
-
-This repository was originally forked from [auth0-socketio-jwt](https://github.com/auth0-community/auth0-socketio-jwt) & it is not intended to take any credit but to improve the code from now on.
 
 ## Prerequisites
 
 - [Node.js](https://nodejs.org/) >= 16.0.0
+- [Socket.IO](https://socket.io/) >= 3.0.0
 
 ## 💾 Install
 
@@ -133,7 +131,7 @@ io.on('connection', async (socket) => {
 
 ```ts
 import { io } from 'socket.io-client'
-import { isUnauthorizedError } from '@thream/socketio-jwt'
+import { isUnauthorizedError } from '@thream/socketio-jwt/build/UnauthorizedError.js'
 
 // Require Bearer Token
 const socket = io('http://localhost:9000', {

package.json

@@ -8,20 +8,25 @@
   "main": "build/index.js",
   "types": "build/index.d.ts",
   "files": [
-    "build"
+    "build",
+    "!**/*.test.js",
+    "!**/*.test.d.ts",
+    "!**/*.map"
   ],
   "engines": {
-    "node": ">=16.0.0"
+    "node": ">=16.0.0",
+    "npm": ">=9.0.0"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "keywords": [
     "socket",
     "socket.io",
     "jwt"
   ],
-  "author": "Divlo <contact@divlo.fr>",
+  "author": "Théo LUDWIG <contact@theoludwig.fr>",
   "repository": {
     "type": "git",
     "url": "https://github.com/Thream/socketio-jwt"
@@ -31,15 +36,16 @@
   },
   "homepage": "https://github.com/Thream/socketio-jwt#readme",
   "scripts": {
-    "build": "rimraf ./build && swc ./src --out-dir ./build && tsc",
+    "build": "rimraf ./build && swc ./src --out-dir ./build",
     "build:dev": "swc ./src --out-dir ./build --watch",
+    "build:typescript": "tsc",
     "lint:commit": "commitlint",
     "lint:editorconfig": "editorconfig-checker",
-    "lint:markdown": "markdownlint \"**/*.md\" --dot --ignore-path \".gitignore\"",
+    "lint:markdown": "markdownlint-cli2",
-    "lint:typescript": "eslint \"**/*.{js,jsx,ts,tsx}\" --ignore-path \".gitignore\"",
+    "lint:eslint": "eslint . --max-warnings 0 --report-unused-disable-directives --ignore-path .gitignore",
-    "lint:prettier": "prettier \".\" --check --ignore-path \".gitignore\"",
+    "lint:prettier": "prettier . --check",
     "lint:staged": "lint-staged",
-    "test": "c8 tap",
+    "test": "cross-env NODE_ENV=test node --enable-source-maps --test build/",
     "release": "semantic-release",
     "postinstall": "husky install",
     "prepublishOnly": "pinst --disable",
@@ -49,39 +55,39 @@
     "socket.io": ">=3.0.0"
   },
   "dependencies": {
-    "jsonwebtoken": "8.5.1"
+    "jsonwebtoken": "9.0.2"
   },
   "devDependencies": {
-    "@commitlint/cli": "16.2.3",
+    "@commitlint/cli": "17.7.1",
-    "@commitlint/config-conventional": "16.2.1",
+    "@commitlint/config-conventional": "17.7.0",
-    "@swc/cli": "0.1.57",
+    "@swc/cli": "0.1.62",
-    "@swc/core": "1.2.164",
+    "@swc/core": "1.3.85",
-    "@types/jsonwebtoken": "8.5.8",
+    "@tsconfig/strictest": "2.0.2",
-    "@types/node": "17.0.23",
+    "@types/jsonwebtoken": "9.0.3",
-    "@types/tap": "15.0.6",
+    "@types/node": "20.6.2",
-    "@typescript-eslint/eslint-plugin": "5.18.0",
+    "@typescript-eslint/eslint-plugin": "6.7.2",
-    "@typescript-eslint/parser": "5.18.0",
+    "@typescript-eslint/parser": "6.7.2",
-    "axios": "0.26.1",
+    "axios": "1.5.0",
-    "c8": "7.11.0",
+    "cross-env": "7.0.3",
-    "editorconfig-checker": "4.0.2",
+    "editorconfig-checker": "5.1.1",
-    "eslint": "8.12.0",
+    "eslint": "8.49.0",
-    "eslint-config-conventions": "2.0.0",
+    "eslint-config-conventions": "11.0.1",
-    "eslint-config-prettier": "8.5.0",
+    "eslint-config-prettier": "9.0.0",
-    "eslint-plugin-import": "2.26.0",
+    "eslint-plugin-import": "2.28.1",
-    "eslint-plugin-prettier": "4.0.0",
+    "eslint-plugin-prettier": "5.0.0",
-    "eslint-plugin-promise": "6.0.0",
+    "eslint-plugin-promise": "6.1.1",
-    "eslint-plugin-unicorn": "42.0.0",
+    "eslint-plugin-unicorn": "48.0.1",
-    "fastify": "3.28.0",
+    "fastify": "4.23.2",
-    "husky": "7.0.4",
+    "husky": "8.0.3",
-    "lint-staged": "12.3.7",
+    "lint-staged": "14.0.1",
-    "markdownlint-cli": "0.31.1",
+    "markdownlint-cli2": "0.10.0",
+    "markdownlint-rule-relative-links": "2.1.0",
     "pinst": "3.0.0",
-    "prettier": "2.6.2",
+    "prettier": "3.0.3",
-    "rimraf": "3.0.2",
+    "rimraf": "5.0.1",
-    "semantic-release": "19.0.2",
+    "semantic-release": "22.0.0",
-    "socket.io": "4.4.1",
+    "socket.io": "4.7.2",
-    "socket.io-client": "4.4.1",
+    "socket.io-client": "4.7.2",
-    "tap": "16.0.1",
+    "typescript": "5.2.2"
-    "typescript": "4.6.3"
   }
 }

src/UnauthorizedError.ts

@@ -15,6 +15,16 @@ export class UnauthorizedError extends Error {
   }
 }
 
-export const isUnauthorizedError = (error: any): error is UnauthorizedError => {
+export const isUnauthorizedError = (
-  return error.data.type === 'UnauthorizedError'
+  error: unknown
+): error is UnauthorizedError => {
+  return (
+    typeof error === 'object' &&
+    error != null &&
+    'data' in error &&
+    typeof error.data === 'object' &&
+    error.data != null &&
+    'type' in error.data &&
+    error.data.type === 'UnauthorizedError'
+  )
 }

src/__test__/authorize.test.ts

@@ -1,15 +1,18 @@
-import tap from 'tap'
+import test from 'node:test'
+import assert from 'node:assert/strict'
+
 import axios from 'axios'
-import { io, Socket } from 'socket.io-client'
+import type { Socket } from 'socket.io-client'
+import { io } from 'socket.io-client'
 
 import { isUnauthorizedError } from '../UnauthorizedError.js'
+import type { Profile } from './fixture/index.js'
 import {
   API_URL,
   fixtureStart,
   fixtureStop,
   getSocket,
-  basicProfile,
+  basicProfile
-  Profile
 } from './fixture/index.js'
 
 export const api = axios.create({
@@ -23,7 +26,7 @@ const secretCallback = async (): Promise<string> => {
   return 'somesecret'
 }
 
-await tap.test('authorize', async (t) => {
+await test('authorize', async (t) => {
   await t.test('with secret as string in options', async (t) => {
     let token = ''
     let socket: Socket | null = null
@@ -39,71 +42,76 @@ await tap.test('authorize', async (t) => {
       await fixtureStop()
     })
 
-    await t.test('should emit error with no token provided', (t) => {
+    await t.test('should emit error with no token provided', () => {
-      t.plan(4)
       socket = io(API_URL)
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(error.data.message, 'no token provided')
+          assert.strictEqual(error.data.message, 'no token provided')
-          t.equal(error.data.code, 'credentials_required')
+          assert.strictEqual(error.data.code, 'credentials_required')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should emit error with bad token format', (t) => {
+    await t.test('should emit error with bad token format', () => {
-      t.plan(4)
       socket = io(API_URL, {
         auth: { token: 'testing' }
       })
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(error.data.message, 'Format is Authorization: Bearer [token]')
+          assert.strictEqual(
-          t.equal(error.data.code, 'credentials_bad_format')
+            error.data.message,
+            'Format is Authorization: Bearer [token]'
+          )
+          assert.strictEqual(error.data.code, 'credentials_bad_format')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should emit error with unauthorized handshake', (t) => {
+    await t.test('should emit error with unauthorized handshake', () => {
-      t.plan(4)
       socket = io(API_URL, {
         auth: { token: 'Bearer testing' }
       })
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(
+          assert.strictEqual(
             error.data.message,
             'Unauthorized: Token is missing or invalid Bearer'
           )
-          t.equal(error.data.code, 'invalid_token')
+          assert.strictEqual(error.data.code, 'invalid_token')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should connect the user', (t) => {
+    await t.test('should connect the user', () => {
-      t.plan(1)
       socket = io(API_URL, {
         auth: { token: `Bearer ${token}` }
       })
       socket.on('connect', async () => {
-        t.pass()
+        assert.ok(true)
       })
       socket.on('connect_error', async (error) => {
-        t.fail(error.message)
+        assert.fail(error.message)
       })
     })
   })
@@ -123,71 +131,76 @@ await tap.test('authorize', async (t) => {
       await fixtureStop()
     })
 
-    await t.test('should emit error with no token provided', (t) => {
+    await t.test('should emit error with no token provided', () => {
-      t.plan(4)
       socket = io(API_URL)
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(error.data.message, 'no token provided')
+          assert.strictEqual(error.data.message, 'no token provided')
-          t.equal(error.data.code, 'credentials_required')
+          assert.strictEqual(error.data.code, 'credentials_required')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should emit error with bad token format', (t) => {
+    await t.test('should emit error with bad token format', () => {
-      t.plan(4)
       socket = io(API_URL, {
         auth: { token: 'testing' }
       })
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(error.data.message, 'Format is Authorization: Bearer [token]')
+          assert.strictEqual(
-          t.equal(error.data.code, 'credentials_bad_format')
+            error.data.message,
+            'Format is Authorization: Bearer [token]'
+          )
+          assert.strictEqual(error.data.code, 'credentials_bad_format')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should emit error with unauthorized handshake', (t) => {
+    await t.test('should emit error with unauthorized handshake', () => {
-      t.plan(4)
       socket = io(API_URL, {
         auth: { token: 'Bearer testing' }
       })
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(
+          assert.strictEqual(
             error.data.message,
             'Unauthorized: Token is missing or invalid Bearer'
           )
-          t.equal(error.data.code, 'invalid_token')
+          assert.strictEqual(error.data.code, 'invalid_token')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should connect the user', (t) => {
+    await t.test('should connect the user', () => {
-      t.plan(1)
       socket = io(API_URL, {
         auth: { token: `Bearer ${token}` }
       })
       socket.on('connect', async () => {
-        t.pass()
+        assert.ok(true)
       })
       socket.on('connect_error', async (error) => {
-        t.fail(error.message)
+        assert.fail(error.message)
       })
     })
   })
@@ -220,104 +233,107 @@ await tap.test('authorize', async (t) => {
       await fixtureStop()
     })
 
-    await t.test('should emit error with no token provided', (t) => {
+    await t.test('should emit error with no token provided', () => {
-      t.plan(4)
       socket = io(API_URL)
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(error.data.message, 'no token provided')
+          assert.strictEqual(error.data.message, 'no token provided')
-          t.equal(error.data.code, 'credentials_required')
+          assert.strictEqual(error.data.code, 'credentials_required')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should emit error with bad token format', (t) => {
+    await t.test('should emit error with bad token format', () => {
-      t.plan(4)
       socket = io(API_URL, {
         auth: { token: 'testing' }
       })
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(error.data.message, 'Format is Authorization: Bearer [token]')
+          assert.strictEqual(
-          t.equal(error.data.code, 'credentials_bad_format')
+            error.data.message,
+            'Format is Authorization: Bearer [token]'
+          )
+          assert.strictEqual(error.data.code, 'credentials_bad_format')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should emit error with unauthorized handshake', (t) => {
+    await t.test('should emit error with unauthorized handshake', () => {
-      t.plan(4)
       socket = io(API_URL, {
         auth: { token: 'Bearer testing' }
       })
       socket.on('connect_error', async (error) => {
-        t.equal(isUnauthorizedError(error), true)
+        assert.strictEqual(isUnauthorizedError(error), true)
         if (isUnauthorizedError(error)) {
-          t.equal(
+          assert.strictEqual(
             error.data.message,
             'Unauthorized: Token is missing or invalid Bearer'
           )
-          t.equal(error.data.code, 'invalid_token')
+          assert.strictEqual(error.data.code, 'invalid_token')
+          assert.ok(true)
+        } else {
+          assert.fail('should be unauthorized error')
         }
-        t.pass()
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
 
-    await t.test('should connect the user', (t) => {
+    await t.test('should connect the user', () => {
-      t.plan(1)
       socket = io(API_URL, {
         auth: { token: `Bearer ${token}` }
       })
       socket.on('connect', async () => {
-        t.pass()
+        assert.ok(true)
       })
       socket.on('connect_error', async (error) => {
-        t.fail(error.message)
+        assert.fail(error.message)
       })
     })
 
-    await t.test('should contains user properties', (t) => {
+    await t.test('should contains user properties', () => {
-      t.plan(2)
       const socketServer = getSocket()
       socketServer?.on('connection', (client: any) => {
-        t.equal(client.user.email, basicProfile.email)
+        assert.strictEqual(client.user.email, basicProfile.email)
-        t.pass()
+        assert.ok(true)
       })
       socket = io(API_URL, {
         auth: { token: `Bearer ${token}` }
       })
       socket.on('connect_error', async (error) => {
-        t.fail(error.message)
+        assert.fail(error.message)
       })
     })
 
-    await t.test('should emit error when user validation fails', (t) => {
+    await t.test('should emit error when user validation fails', () => {
-      t.plan(2)
       socket = io(API_URL, {
         auth: { token: `Bearer ${wrongToken}` }
       })
       socket.on('connect_error', async (error) => {
         try {
-          t.equal(error.message, 'Check Field validation failed')
+          assert.strictEqual(error.message, 'Check Field validation failed')
-          t.pass()
+          assert.ok(true)
         } catch {
-          t.fail()
+          assert.fail(error.message)
         }
       })
       socket.on('connect', async () => {
-        t.fail()
+        assert.fail('should not connect')
       })
     })
   })

src/__test__/fixture/index.ts

@@ -1,8 +1,10 @@
 import jwt from 'jsonwebtoken'
 import { Server as SocketIoServer } from 'socket.io'
-import fastify, { FastifyInstance } from 'fastify'
+import type { FastifyInstance } from 'fastify'
+import fastify from 'fastify'
 
-import { authorize, AuthorizeOptions } from '../../index.js'
+import type { AuthorizeOptions } from '../../index.js'
+import { authorize } from '../../index.js'
 
 interface FastifyIo {
   instance: SocketIoServer
@@ -67,7 +69,9 @@ export const fixtureStart = async (
   application.addHook('onClose', (fastify) => {
     fastify.io.instance.close()
   })
-  await application.listen(PORT)
+  await application.listen({
+    port: PORT
+  })
 }
 
 export const fixtureStop = async (): Promise<void> => {

src/authorize.ts

@@ -1,5 +1,6 @@
-import jwt, { Algorithm } from 'jsonwebtoken'
+import type { Algorithm } from 'jsonwebtoken'
-import { Socket } from 'socket.io'
+import jwt from 'jsonwebtoken'
+import type { Socket } from 'socket.io'
 
 import { UnauthorizedError } from './UnauthorizedError.js'
 
@@ -61,7 +62,7 @@ export const authorize = (options: AuthorizeOptions): SocketIOMiddleware => {
     }
     socket.encodedToken = encodedToken
     let keySecret: string | null = null
-    let decodedToken: any
+    let decodedToken: any = null
     if (typeof secret === 'string') {
       keySecret = secret
     } else {

tsconfig.json

@@ -1,15 +1,13 @@
 {
+  "extends": "@tsconfig/strictest/tsconfig.json",
   "compilerOptions": {
     "target": "ESNext",
-    "module": "ESNext",
     "lib": ["ESNext"],
-    "moduleResolution": "node",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
     "outDir": "./build",
     "rootDir": "./src",
     "emitDeclarationOnly": true,
-    "declaration": true,
+    "declaration": true
-    "strict": true,
-    "skipLibCheck": true,
-    "esModuleInterop": true
   }
 }