@alexdevco/passport 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Alexander Borovskikh (@AlexDevCo)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/README.md

@@ -0,0 +1 @@
+# @AlexDevCo/passport library

package/dist/constants/index.d.ts

@@ -0,0 +1 @@
+export * from './passport.constants';

package/dist/constants/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./passport.constants"), exports);

package/dist/constants/passport.constants.d.ts

@@ -0,0 +1 @@
+export declare const PASSPORT_OPTIONS: unique symbol;

package/dist/constants/passport.constants.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PASSPORT_OPTIONS = void 0;
+exports.PASSPORT_OPTIONS = Symbol('PassportOptions');

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './interfaces';
+export * from './passport.module';
+export * from './passport.service';

package/dist/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./interfaces"), exports);
+__exportStar(require("./passport.module"), exports);
+__exportStar(require("./passport.service"), exports);

package/dist/interfaces/index.d.ts

@@ -0,0 +1,3 @@
+export * from './passport-async-options.interface';
+export * from './passport-options.interface';
+export * from './token.interface';

package/dist/interfaces/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./passport-async-options.interface"), exports);
+__exportStar(require("./passport-options.interface"), exports);
+__exportStar(require("./token.interface"), exports);

package/dist/interfaces/passport-async-options.interface.d.ts

@@ -0,0 +1,6 @@
+import type { FactoryProvider, ModuleMetadata } from '@nestjs/common';
+import { IPassportOptions } from './passport-options.interface';
+export interface IPassportAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+    useFactory: (...args: any[]) => Promise<IPassportOptions> | IPassportOptions;
+    inject?: FactoryProvider['inject'];
+}

package/dist/interfaces/passport-async-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/interfaces/passport-options.interface.d.ts

@@ -0,0 +1,3 @@
+export interface IPassportOptions {
+    secretKey: string;
+}

package/dist/interfaces/passport-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/interfaces/token.interface.d.ts

@@ -0,0 +1,8 @@
+export interface ITokenPayload {
+    sub: string | number;
+}
+export interface IVerifyResult {
+    valid: boolean;
+    reason?: string;
+    userId?: string;
+}

package/dist/interfaces/token.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/passport.module.d.ts

@@ -0,0 +1,6 @@
+import { type DynamicModule } from '@nestjs/common';
+import type { IPassportAsyncOptions, IPassportOptions } from './interfaces';
+export declare class PassportModule {
+    static register(options: IPassportOptions): DynamicModule;
+    static registerAsync(options: IPassportAsyncOptions): DynamicModule;
+}

package/dist/passport.module.js

@@ -0,0 +1,38 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var PassportModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PassportModule = void 0;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("./constants");
+const passport_providers_1 = require("./passport.providers");
+const passport_service_1 = require("./passport.service");
+let PassportModule = PassportModule_1 = class PassportModule {
+    static register(options) {
+        const optionsProvider = (0, passport_providers_1.createPassportOptionsProvider)(options);
+        return {
+            module: PassportModule_1,
+            providers: [optionsProvider, passport_service_1.PassportService],
+            exports: [passport_service_1.PassportService, constants_1.PASSPORT_OPTIONS]
+        };
+    }
+    static registerAsync(options) {
+        const optionProvider = (0, passport_providers_1.createPassportAsyncOptionsProvider)(options);
+        return {
+            module: PassportModule_1,
+            imports: options.imports ?? [],
+            providers: [optionProvider, passport_service_1.PassportService],
+            exports: [passport_service_1.PassportService, constants_1.PASSPORT_OPTIONS]
+        };
+    }
+};
+exports.PassportModule = PassportModule;
+exports.PassportModule = PassportModule = PassportModule_1 = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({})
+], PassportModule);

package/dist/passport.providers.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from '@nestjs/common';
+import type { IPassportAsyncOptions, IPassportOptions } from './interfaces';
+export declare function createPassportOptionsProvider(options: IPassportOptions): Provider;
+export declare function createPassportAsyncOptionsProvider(options: IPassportAsyncOptions): Provider;

package/dist/passport.providers.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPassportOptionsProvider = createPassportOptionsProvider;
+exports.createPassportAsyncOptionsProvider = createPassportAsyncOptionsProvider;
+const constants_1 = require("./constants");
+function createPassportOptionsProvider(options) {
+    return {
+        provide: constants_1.PASSPORT_OPTIONS,
+        useValue: Object.freeze({ ...options })
+    };
+}
+function createPassportAsyncOptionsProvider(options) {
+    return {
+        provide: constants_1.PASSPORT_OPTIONS,
+        useFactory: async (...args) => {
+            const resolved = await options.useFactory(...args);
+            if (!resolved || typeof resolved.secretKey !== 'string')
+                throw new Error('[PassportModule] "sercetKey" is required and must be a string');
+            return Object.freeze({ ...resolved });
+        },
+        inject: options.inject ?? []
+    };
+}

package/dist/passport.service.d.ts

@@ -0,0 +1,21 @@
+import { IPassportOptions } from './interfaces';
+export declare class PassportService {
+    private readonly options;
+    private readonly SECRET_KEY;
+    private static readonly HMAC_DOMAIN;
+    private static readonly INTERNAL_SEPARATOR;
+    constructor(options: IPassportOptions);
+    private now;
+    private serialize;
+    private computeHmac;
+    generate(secretKey: string, userId: string, ttl: number): string;
+    verify(token: string): {
+        valid: boolean;
+        reason: string;
+        userId?: undefined;
+    } | {
+        valid: boolean;
+        userId: string;
+        reason?: undefined;
+    };
+}

package/dist/passport.service.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var PassportService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PassportService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const constants_1 = require("./constants");
+const utils_1 = require("./utils");
+let PassportService = class PassportService {
+    static { PassportService_1 = this; }
+    options;
+    SECRET_KEY;
+    static HMAC_DOMAIN = 'PassportTokenAuth/v1';
+    static INTERNAL_SEPARATOR = '|';
+    constructor(options) {
+        this.options = options;
+        this.SECRET_KEY = options.secretKey;
+    }
+    now() {
+        return Math.floor(Date.now() / 1000);
+    }
+    serialize(user, iat, exp) {
+        return [PassportService_1.HMAC_DOMAIN, user, iat, exp].join(PassportService_1.INTERNAL_SEPARATOR);
+    }
+    computeHmac(data) {
+        return (0, crypto_1.createHmac)('sha256', this.SECRET_KEY).update(data).digest('hex');
+    }
+    generate(secretKey, userId, ttl) {
+        const issuedAt = this.now();
+        const expiresAt = issuedAt + ttl;
+        const userPart = (0, utils_1.base64UrlEncode)(userId);
+        const iatPart = (0, utils_1.base64UrlEncode)(String(issuedAt));
+        const expPart = (0, utils_1.base64UrlEncode)(String(expiresAt));
+        const serialized = this.serialize(userPart, iatPart, expPart);
+        const mac = this.computeHmac(serialized);
+        return [userPart, iatPart, expPart, mac].join('.');
+    }
+    verify(token) {
+        const parts = token.split('.');
+        if (parts.length !== 4)
+            return { valid: false, reason: 'Invalid format' };
+        const [userPart, iatPart, expPart, mac] = parts;
+        const serialized = this.serialize(userPart, iatPart, expPart);
+        const expectedMac = this.computeHmac(serialized);
+        if (!(0, utils_1.constantTimeEqual)(expectedMac, mac))
+            return { valid: false, reason: 'Invalid signature' };
+        const expNumber = Number((0, utils_1.base64UrlDecode)(expPart));
+        if (!Number.isFinite(expNumber))
+            return { valid: false, reason: 'Error' };
+        if (this.now() > expNumber)
+            return { valid: false, reason: 'Expired' };
+        return { valid: true, userId: (0, utils_1.base64UrlDecode)(userPart) };
+    }
+};
+exports.PassportService = PassportService;
+exports.PassportService = PassportService = PassportService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(constants_1.PASSPORT_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], PassportService);

package/dist/utils/base64.d.ts

@@ -0,0 +1,2 @@
+export declare function base64UrlEncode(buf: Buffer | string): string;
+export declare function base64UrlDecode(str: string): string;

package/dist/utils/base64.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.base64UrlEncode = base64UrlEncode;
+exports.base64UrlDecode = base64UrlDecode;
+function base64UrlEncode(buf) {
+    const buffer = typeof buf === 'string' ? Buffer.from(buf) : buf;
+    return buffer
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+}
+function base64UrlDecode(str) {
+    str = str.replace(/-/g, '+').replace(/_/g, '/');
+    while (str.length % 4)
+        str += '=';
+    return Buffer.from(str, 'base64').toString();
+}

package/dist/utils/crypto.d.ts

@@ -0,0 +1 @@
+export declare function constantTimeEqual(a: string, b: string): boolean;

package/dist/utils/crypto.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.constantTimeEqual = constantTimeEqual;
+const crypto_1 = require("crypto");
+function constantTimeEqual(a, b) {
+    const bufA = Buffer.from(a);
+    const bufB = Buffer.from(b);
+    if (bufA.length !== bufB.length)
+        return false;
+    return (0, crypto_1.timingSafeEqual)(bufA, bufB);
+}

package/dist/utils/index.d.ts

@@ -0,0 +1,2 @@
+export * from './base64';
+export * from './crypto';

package/dist/utils/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./base64"), exports);
+__exportStar(require("./crypto"), exports);

package/package.json

@@ -0,0 +1,40 @@
+{
+	"name": "@alexdevco/passport",
+	"version": "1.0.1",
+	"description": "Lightweight AlexDevCo authentication library",
+	"homepage": "https://github.com/alexdevcoru/passport#readme",
+	"bugs": {
+		"url": "https://github.com/alexdevcoru/passport/issues"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/alexdevcoru/passport.git"
+	},
+	"license": "MIT",
+	"author": "Alexander Borovskikh <asborovskikh@alexdevco.ru>",
+	"type": "commonjs",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"files": [
+		"dist"
+	],
+	"scripts": {
+		"build": "tsc -p tsconfig.build.json",
+		"format": "prettier --write \"lib/**/*.ts\""
+	},
+	"dependencies": {
+		"@nestjs/common": "^11.1.13",
+		"@nestjs/core": "^11.1.13",
+		"reflect-metadata": "^0.2.2",
+		"txjs": "^0.1.1"
+	},
+	"devDependencies": {
+		"@alexdevco/core": "^1.0.7",
+		"@types/node": "^25.2.1",
+		"prettier": "^3.8.1",
+		"typescript": "^5.9.3"
+	},
+	"publishConfig": {
+		"access": "public"
+	}
+}