@0xmonaco/react 0.7.5 → 0.7.7

package/dist/provider/types.js

@@ -1,9 +0,0 @@
-export var AuthenticationStatus;
-(function (AuthenticationStatus) {
-    /** User is not authenticated */
-    AuthenticationStatus["UNAUTHENTICATED"] = "unauthenticated";
-    /** Authentication is in progress */
-    AuthenticationStatus["AUTHENTICATING"] = "authenticating";
-    /** User is successfully authenticated */
-    AuthenticationStatus["AUTHENTICATED"] = "authenticated";
-})(AuthenticationStatus || (AuthenticationStatus = {}));

package/dist/utils/index.d.ts

@@ -1 +0,0 @@
-export * from "./tokenStorage";

package/dist/utils/index.js

@@ -1 +0,0 @@
-export * from "./tokenStorage";

package/dist/utils/tokenStorage.d.ts

@@ -1,38 +0,0 @@
-import type { AuthState } from "@0xmonaco/types";
-/**
- * Save auth state to localStorage
- *
- * @security This function stores authentication tokens (including refresh tokens) in localStorage,
- * which is accessible to any JavaScript running on the page. This makes tokens vulnerable to XSS attacks.
- *
- * Security recommendations:
- * - Implement Content Security Policy (CSP) headers to mitigate XSS risks
- * - Sanitize all user input to prevent XSS vulnerabilities
- * - Consider the tradeoffs: localStorage provides persistence across sessions but sacrifices XSS protection
- * - For high-security requirements, consider httpOnly cookies (requires backend changes)
- *
- * @param authState - The authentication state to persist
- */
-export declare function saveAuthState(authState: AuthState): void;
-/**
- * Load auth state from localStorage
- * @returns The persisted auth state or null if not found/invalid
- */
-export declare function loadAuthState(): AuthState | null;
-/**
- * Clear auth state from localStorage
- */
-export declare function clearAuthState(): void;
-/**
- * Check if the stored token is expired
- * @param authState - The auth state to check
- * @param bufferSeconds - Buffer time before actual expiry (default: 60 seconds)
- * @returns True if token is expired or will expire within buffer time
- */
-export declare function isTokenExpired(authState: AuthState, bufferSeconds?: number): boolean;
-/**
- * Get time until token expiration in seconds
- * @param authState - The auth state to check
- * @returns Seconds until expiration (negative if already expired)
- */
-export declare function getTimeUntilExpiry(authState: AuthState): number;

package/dist/utils/tokenStorage.js

@@ -1,102 +0,0 @@
-/**
- * Storage key for persisting auth tokens
- */
-const STORAGE_KEY = "monaco_auth_state";
-/**
- * Save auth state to localStorage
- *
- * @security This function stores authentication tokens (including refresh tokens) in localStorage,
- * which is accessible to any JavaScript running on the page. This makes tokens vulnerable to XSS attacks.
- *
- * Security recommendations:
- * - Implement Content Security Policy (CSP) headers to mitigate XSS risks
- * - Sanitize all user input to prevent XSS vulnerabilities
- * - Consider the tradeoffs: localStorage provides persistence across sessions but sacrifices XSS protection
- * - For high-security requirements, consider httpOnly cookies (requires backend changes)
- *
- * @param authState - The authentication state to persist
- */
-export function saveAuthState(authState) {
-    try {
-        const data = JSON.stringify({
-            accessToken: authState.accessToken,
-            refreshToken: authState.refreshToken,
-            expiresAt: authState.expiresAt,
-            user: authState.user,
-        });
-        localStorage.setItem(STORAGE_KEY, data);
-    }
-    catch (error) {
-        console.warn("Failed to save auth state to localStorage:", error);
-    }
-}
-/**
- * Load auth state from localStorage
- * @returns The persisted auth state or null if not found/invalid
- */
-export function loadAuthState() {
-    try {
-        const data = localStorage.getItem(STORAGE_KEY);
-        if (!data)
-            return null;
-        const parsed = JSON.parse(data);
-        // Validate required fields and types
-        if (typeof parsed.accessToken !== "string" ||
-            parsed.accessToken.length === 0 ||
-            typeof parsed.refreshToken !== "string" ||
-            parsed.refreshToken.length === 0 ||
-            typeof parsed.expiresAt !== "number" ||
-            !Number.isFinite(parsed.expiresAt) ||
-            parsed.expiresAt <= 0 ||
-            typeof parsed.user !== "object" ||
-            parsed.user === null ||
-            typeof parsed.user.id !== "string" ||
-            parsed.user.id.length === 0 ||
-            typeof parsed.user.address !== "string" ||
-            parsed.user.address.length === 0) {
-            clearAuthState();
-            return null;
-        }
-        return {
-            accessToken: parsed.accessToken,
-            refreshToken: parsed.refreshToken,
-            expiresAt: parsed.expiresAt,
-            user: parsed.user,
-        };
-    }
-    catch (error) {
-        console.warn("Failed to load auth state from localStorage:", error);
-        clearAuthState();
-        return null;
-    }
-}
-/**
- * Clear auth state from localStorage
- */
-export function clearAuthState() {
-    try {
-        localStorage.removeItem(STORAGE_KEY);
-    }
-    catch (error) {
-        console.warn("Failed to clear auth state from localStorage:", error);
-    }
-}
-/**
- * Check if the stored token is expired
- * @param authState - The auth state to check
- * @param bufferSeconds - Buffer time before actual expiry (default: 60 seconds)
- * @returns True if token is expired or will expire within buffer time
- */
-export function isTokenExpired(authState, bufferSeconds = 60) {
-    const now = Math.floor(Date.now() / 1000);
-    return authState.expiresAt <= now + bufferSeconds;
-}
-/**
- * Get time until token expiration in seconds
- * @param authState - The auth state to check
- * @returns Seconds until expiration (negative if already expired)
- */
-export function getTimeUntilExpiry(authState) {
-    const now = Math.floor(Date.now() / 1000);
-    return authState.expiresAt - now;
-}