@ambushsoftworks/nestjs-auth-graphql 0.9.0-rc.4 → 0.9.0

package/dist/utils/personal-data.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setPersonalDataLogSalt = setPersonalDataLogSalt;
+exports.emailForLog = emailForLog;
+exports.ipForLog = ipForLog;
+exports.maskPhoneDigits = maskPhoneDigits;
+exports.redactSecurityEventMetadata = redactSecurityEventMetadata;
+const crypto_1 = require("crypto");
+const ip_hash_1 = require("./ip-hash");
+let configuredSalt;
+let processSalt;
+function setPersonalDataLogSalt(salt) {
+    configuredSalt = salt || undefined;
+}
+function currentSalt() {
+    if (configuredSalt) {
+        return configuredSalt;
+    }
+    processSalt ??= (0, crypto_1.randomBytes)(32).toString('hex');
+    return processSalt;
+}
+function hashEmail(email) {
+    return (0, crypto_1.createHmac)('sha256', currentSalt())
+        .update(email.trim().toLowerCase())
+        .digest('hex')
+        .slice(0, 16);
+}
+function emailForLog(email) {
+    return email ? `emailHash=${hashEmail(email)}` : 'emailHash=none';
+}
+function ipForLog(ipAddress) {
+    return ipAddress ? `ipHash=${(0, ip_hash_1.hashIp)(ipAddress, currentSalt())}` : 'ipHash=none';
+}
+function maskPhoneDigits(phoneNumber) {
+    if (!phoneNumber) {
+        return 'none';
+    }
+    const digitCount = phoneNumber.replace(/\D/g, '').length;
+    let seen = 0;
+    return phoneNumber.replace(/\d/g, (digit) => (++seen > digitCount - 2 ? digit : 'X'));
+}
+const EMAIL_FIELDS = ['email', 'normalizedEmail', 'newEmail'];
+const IP_FIELDS = ['ipAddress', 'ip'];
+const PHONE_FIELDS = ['phoneNumber', 'phone'];
+function redactSecurityEventMetadata(metadata) {
+    const redacted = {};
+    for (const [field, value] of Object.entries(metadata)) {
+        const present = typeof value === 'string' && value.length > 0;
+        if (EMAIL_FIELDS.includes(field)) {
+            if (present)
+                redacted[`${field}Hash`] = hashEmail(value);
+        }
+        else if (IP_FIELDS.includes(field)) {
+            if (present)
+                redacted.ipHash = (0, ip_hash_1.hashIp)(value, currentSalt());
+        }
+        else if (PHONE_FIELDS.includes(field)) {
+            if (present)
+                redacted[field] = maskPhoneDigits(value);
+        }
+        else {
+            redacted[field] = value;
+        }
+    }
+    return redacted;
+}
+//# sourceMappingURL=personal-data.js.map

package/dist/utils/personal-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-data.js","sourceRoot":"","sources":["../../src/utils/personal-data.ts"],"names":[],"mappings":";;AA6BA,wDAEC;AAqBD,kCAEC;AAOD,4BAEC;AAMD,0CAQC;AAeD,kEAoBC;AAhHD,mCAAiD;AACjD,uCAAmC;AAoBnC,IAAI,cAAkC,CAAC;AACvC,IAAI,WAA+B,CAAC;AAOpC,SAAgB,sBAAsB,CAAC,IAAwB;IAC7D,cAAc,GAAG,IAAI,IAAI,SAAS,CAAC;AACrC,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,WAAW,KAAK,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAMD,SAAgB,WAAW,CAAC,KAAgC;IAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,aAAa,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACpE,CAAC;AAOD,SAAgB,QAAQ,CAAC,SAAoC;IAC3D,OAAO,SAAS,CAAC,CAAC,CAAC,UAAU,IAAA,gBAAM,EAAC,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;AAClF,CAAC;AAMD,SAAgB,eAAe,CAAC,WAAsC;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;IACzD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;AAC9D,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACtC,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AAW9C,SAAgB,2BAA2B,CACzC,QAAiC;IAEjC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAE9D,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,OAAO;gBAAE,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO;gBAAE,QAAQ,CAAC,MAAM,GAAG,IAAA,gBAAM,EAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO;gBAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ambushsoftworks/nestjs-auth-graphql",
-  "version": "0.9.0-rc.4",
+  "version": "0.9.0",
   "description": "Production-grade authentication package for NestJS with GraphQL, supporting JWT, OAuth, email/SMS verification, and biometric auth",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",