Cloudflare Access middleware for Hono

This is a Cloudflare Access third-party middleware for Hono.

This middleware can be used to validate that your application is being served behind Cloudflare Access by verifying the JWT received, User details from the JWT are also available inside the request context.

This middleware will also ensure the Access policy serving the application is from a specific Access Team.

Usage

import { cloudflareAccess } from '@hono/cloudflare-access'
import { Hono } from 'hono'

const app = new Hono()

app.use('*', cloudflareAccess('my-access-team-name'))
app.get('/', (c) => c.text('foo'))

export default app

Access JWT payload

import { cloudflareAccess, CloudflareAccessVariables } from '@hono/cloudflare-access'
import { Hono } from 'hono'

type myVariables = {
  user: number
}

const app = new Hono<{ Variables: myVariables & CloudflareAccessVariables }>()

app.use('*', cloudflareAccess('my-access-team-name'))
app.get('/', (c) => {
  const payload = c.get('accessPayload')
  
  return c.text(`You just authenticated with the email ${payload.email}`)
})

export default app

Errors throw by the middleware

| Error | HTTP Code | |--------------------------------------------------------------------------------------------------------|-----------| | Authentication error: Missing bearer token | 401 | | Authentication error: Unable to decode Bearer token | 401 | | Authentication error: Token is expired | 401 | | Authentication error: Expected team name {your-team-name}, but received ${different-team-signed-token} | 401 | | Authentication error: Invalid Token | 401 |

Author

Gabriel Massadas https://github.com/g4brym

License

MIT