@acpus/web 0.1.0-alpha.0

package/dist/server/security.js

@@ -0,0 +1,43 @@
+import { randomBytes, createHash } from "node:crypto";
+import { apiError } from "./errors.js";
+export function createAccessPolicy(options = {}) {
+    if (!options.enabled)
+        return {};
+    const token = options.token ?? randomBytes(24).toString("base64url");
+    return { token, tokenHash: sha256(token) };
+}
+export function requireToken(policy) {
+    return async (context, next) => {
+        if (!policy.tokenHash) {
+            await next();
+            return;
+        }
+        const header = context.req.header("authorization") ?? "";
+        const token = [
+            header.startsWith("Bearer ") ? header.slice("Bearer ".length) : undefined,
+            context.req.query("token"),
+            cookieToken(context.req.header("cookie")),
+        ].find(value => value !== undefined);
+        if (token === undefined || sha256(token) !== policy.tokenHash)
+            apiError(401, "unauthorized", "Bearer token is required.");
+        const shouldSetCookie = context.req.query("token") === token;
+        await next();
+        if (shouldSetCookie) {
+            context.header("set-cookie", `acpus_web_token=${encodeURIComponent(token)}; HttpOnly; SameSite=Lax; Path=/; Max-Age=86400`);
+        }
+    };
+}
+function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function cookieToken(cookie) {
+    if (!cookie)
+        return undefined;
+    for (const entry of cookie.split(";")) {
+        const [name, ...rest] = entry.trim().split("=");
+        if (name === "acpus_web_token")
+            return decodeURIComponent(rest.join("="));
+    }
+    return undefined;
+}
+//# sourceMappingURL=security.js.map

package/dist/server/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/server/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAYvC,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IAClE,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG;YACZ,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC1B,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;SAC1C,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAErC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;YAC3D,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,2BAA2B,CAAC,CAAC;QAE7D,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;QAC7D,MAAM,IAAI,EAAE,CAAC;QACb,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,mBAAmB,kBAAkB,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,iBAAiB;YAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}