@adonis-agora/durable 1.0.0-rc.2 → 1.0.0-rc.20

package/dist/src/dashboard/session_cookie.js

@@ -1,97 +0,0 @@
-import { createHmac, timingSafeEqual } from 'node:crypto';
-/**
- * Dependency-free, framework-light signed session cookie for the dashboard's
- * built-in {@link file://./auth.ts dashboardAuth} mechanism. Stateless
- * HMAC-SHA256 over `node:crypto` only (no JWT dependency, no store, no
- * AdonisJS types) — ported verbatim from `@dudousxd/nestjs-durable` so the
- * cookie format is identical across the two dashboards and this stays
- * unit-testable without an `HttpContext`.
- */
-/** Clock-skew grace applied to `exp` so a marginally-late clock doesn't bounce a valid cookie. */
-const EXP_GRACE_MS = 30_000;
-function base64urlEncode(value) {
-    return Buffer.from(value, 'utf8').toString('base64url');
-}
-function base64urlDecode(value) {
-    return Buffer.from(value, 'base64url').toString('utf8');
-}
-function hmac(secret, payload) {
-    return createHmac('sha256', secret).update(payload).digest('base64url');
-}
-/**
- * Sign a session into the cookie value `base64url(payload).base64url(hmac)`. Stateless
- * HMAC-SHA256, no store, `node:crypto` only — no JWT dependency.
- */
-export function signSessionCookie(user, options) {
-    const issuedAt = options.now ?? Date.now();
-    const session = {
-        sub: user.id,
-        ...(user.name !== undefined ? { name: user.name } : {}),
-        roles: user.roles ?? [],
-        iat: issuedAt,
-        exp: issuedAt + options.ttlMs,
-    };
-    const encodedPayload = base64urlEncode(JSON.stringify(session));
-    const signature = hmac(options.secret, encodedPayload);
-    return `${encodedPayload}.${signature}`;
-}
-/** Type guard for the decoded payload shape — defends against tampered/legacy payloads. */
-function isSessionPayload(value) {
-    if (typeof value !== 'object' || value === null)
-        return false;
-    const record = { ...value };
-    if (typeof record.sub !== 'string')
-        return false;
-    if (record.name !== undefined && typeof record.name !== 'string')
-        return false;
-    if (!Array.isArray(record.roles))
-        return false;
-    if (!record.roles.every((role) => typeof role === 'string'))
-        return false;
-    if (typeof record.iat !== 'number' || !Number.isFinite(record.iat))
-        return false;
-    if (typeof record.exp !== 'number' || !Number.isFinite(record.exp))
-        return false;
-    return true;
-}
-/**
- * Verify a cookie value and return the session, or `null` for anything that's tampered,
- * malformed, or expired (past `exp` + a 30s grace). Constant-time signature comparison. NEVER
- * throws — any parse failure yields `null`.
- */
-export function verifySessionCookie(value, options) {
-    try {
-        const dot = value.indexOf('.');
-        if (dot <= 0 || dot === value.length - 1)
-            return null;
-        const encodedPayload = value.slice(0, dot);
-        const providedSignature = value.slice(dot + 1);
-        const expectedSignature = hmac(options.secret, encodedPayload);
-        const provided = Buffer.from(providedSignature, 'base64url');
-        const expected = Buffer.from(expectedSignature, 'base64url');
-        // timingSafeEqual throws on a length mismatch — guard it so a wrong-length (tampered)
-        // signature returns null instead of throwing.
-        if (provided.length !== expected.length)
-            return null;
-        if (!timingSafeEqual(provided, expected))
-            return null;
-        const decoded = JSON.parse(base64urlDecode(encodedPayload));
-        if (!isSessionPayload(decoded))
-            return null;
-        const now = options.now ?? Date.now();
-        if (now > decoded.exp + EXP_GRACE_MS)
-            return null;
-        const session = {
-            sub: decoded.sub,
-            ...(decoded.name !== undefined ? { name: decoded.name } : {}),
-            roles: decoded.roles,
-            iat: decoded.iat,
-            exp: decoded.exp,
-        };
-        return session;
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=session_cookie.js.map

package/dist/src/dashboard/session_cookie.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session_cookie.js","sourceRoot":"","sources":["../../../src/dashboard/session_cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;;;;GAOG;AAEH,kGAAkG;AAClG,MAAM,YAAY,GAAG,MAAM,CAAC;AAuC5B,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,OAAe;IAC3C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA0B,EAAE,OAAoB;IAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAqB;QAChC,GAAG,EAAE,IAAI,CAAC,EAAE;QACZ,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,KAAK;KAC9B,CAAC;IACF,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACvD,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,2FAA2F;AAC3F,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACrD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,OAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAC7D,sFAAsF;QACtF,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,YAAY;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,OAAO,GAAqB;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}