@adaptivestone/framework 5.0.0-alpha.16 → 5.0.0-alpha.18

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+### 5.0.0-alpha.18
+
+[BREAKING] default aut responce changed to be unified. {token, user} = > {data:{token, user}}
+[UPDATE] RateLimiter updae key generation
+
+### 5.0.0-alpha.17
+
+[NEW] generateRandomBytes command
+[UPDATE] update deps
+
 ### 5.0.0-alpha.16
 
 [UPDATE] no warning of direct usage body and query

package/commands/GenerateRandomBytes.js

@@ -0,0 +1,15 @@
+import { randomBytes } from 'node:crypto';
+import AbstractCommand from '../modules/AbstractCommand.js';
+
+class GenerateRandomBytes extends AbstractCommand {
+  async run() {
+    const sizes = [16, 32, 64, 128, 256];
+    for (const size of sizes) {
+      const bytes = randomBytes(size).toString('hex');
+      this.logger.info(`${size} bytes: ${bytes}`);
+    }
+    return true;
+  }
+}
+
+export default GenerateRandomBytes;

package/config/auth.js

@@ -1,6 +1,9 @@
 export default {
   hashRounds: 64,
   saltSecret:
-    process.env.AUTH_SALT || console.error('AUTH_SALT is not defined'),
+    process.env.AUTH_SALT ||
+    console.error(
+      'AUTH_SALT is not defined. You can "npm run cli generateRandomBytes" and use it',
+    ),
   isAuthWithVefificationFlow: true,
 };

package/controllers/Auth.js

@@ -83,7 +83,7 @@ class Auth extends AbstractController {
     }
     const token = await user.generateToken();
 
-    return res.status(200).json({ token, user: user.getPublic() });
+    return res.status(200).json({ data: { token, user: user.getPublic() } });
   }
 
   async postRegister(req, res) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adaptivestone/framework",
-  "version": "5.0.0-alpha.16",
+  "version": "5.0.0-alpha.18",
   "description": "Adaptive stone node js framework",
   "main": "index.js",
   "type": "module",

package/services/http/middleware/RateLimiter.js

@@ -87,7 +87,7 @@ class RateLimiter extends AbstractMiddleware {
       }
     }
     if (route) {
-      key.push(req.originalUrl);
+      key.push(req.baseUrl + req.path); // to avoid quesry params
     }
     if (user && req.appInfo?.user) {
       key.push(req.appInfo?.user.id);