@anteros/core 0.0.1-alpha.4 → 0.0.1-alpha.5

package/index.ts

@@ -1,4 +1,3 @@
-import "./lib/buffer-polyfill";
 import { define } from "./lib/define";
 import { bootApp } from "./server/boot";
 import { useRest } from "./database/rest";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@anteros/core",
   "module": "index.ts",
-  "version": "0.0.1-alpha.4",
+  "version": "0.0.1-alpha.5",
   "type": "module",
   "description": "Anteros Core",
   "private": false,

package/server/hono.ts

@@ -129,16 +129,22 @@ function createApp(): Hono<{ Variables: HonoVariables }> {
             })
             const bearer = c.req.header('Authorization')?.replace('Bearer ', '');
             if (bearer) {
-                const { value, error } = await jwt.verify(bearer);
-                const isValid = !error && value != null;
-                const isExpired = !!error && error.toLowerCase().includes('exp');
-
-                const tokenData = {
-                    value: bearer,
-                    decoded: isValid ? (value as Record<string, unknown>) : null,
-                    provided: true,
-                    expired: isExpired || (value != null && typeof (value as any)?.exp === 'number' && (value as any).exp * 1000 < Date.now()),
-                };
+                let tokenData: { value: string | null; decoded: Record<string, unknown> | null; provided: boolean; expired: boolean };
+                try {
+                    const { value, error } = await jwt.verify(bearer);
+                    const isValid = !error && value != null;
+                    const isExpired = !!error && error.toLowerCase().includes('exp');
+
+                    tokenData = {
+                        value: bearer,
+                        decoded: isValid ? (value as Record<string, unknown>) : null,
+                        provided: true,
+                        expired: isExpired || (value != null && typeof (value as any)?.exp === 'number' && (value as any).exp * 1000 < Date.now()),
+                    };
+                } catch {
+                    // Malformed token — treat as invalid, don't crash
+                    tokenData = { value: null, decoded: null, provided: true, expired: true };
+                }
 
                 requestCtxStorage.set('token', tokenData);
                 c.set('token', tokenData);

package/utils/func.ts

@@ -19,22 +19,29 @@ const jwt = {
         audience?: string | string[];
         subject?: string;
     }) => {
-        let SECRET_ = cfg.server.jwt?.secret || Bun.env.JWT_SECRET
-        if (!SECRET_) throw new Error('JWT_SECRET is not set');
-        let EXPIRES_IN = cfg.server.jwt?.expiresIn || '1h'
-
-        const secret = new TextEncoder().encode(SECRET_);
-        const signer = new Jose.SignJWT(payload)
-            .setProtectedHeader({ alg: 'HS256' })
-            .setIssuedAt()
-            .setExpirationTime(EXPIRES_IN || '1h')
-
-        if (options?.issuer) signer.setIssuer(options.issuer)
-        if (options?.audience) signer.setAudience(options.audience)
-        if (options?.subject) signer.setSubject(options.subject)
-
-        const token = await signer.sign(secret);
-        return token;
+        try {
+            let SECRET_ = cfg.server.jwt?.secret || Bun.env.JWT_SECRET
+            if (!SECRET_) throw new Error('JWT_SECRET is not set');
+            let EXPIRES_IN = cfg.server.jwt?.expiresIn || '1h'
+
+            const secret = new TextEncoder().encode(SECRET_);
+            const signer = new Jose.SignJWT(payload)
+                .setProtectedHeader({ alg: 'HS256' })
+                .setIssuedAt()
+                .setExpirationTime(EXPIRES_IN || '1h')
+
+            if (options?.issuer) signer.setIssuer(options.issuer)
+            if (options?.audience) signer.setAudience(options.audience)
+            if (options?.subject) signer.setSubject(options.subject)
+
+            const token = await signer.sign(secret);
+            return token;
+        } catch (err: any) {
+            throw new AppError(err?.message || 'Failed to sign token', {
+                code: 'JWT_SIGN_ERROR',
+                status: 500,
+            });
+        }
     },
     verify: async (token: string): Promise<{ value: Record<string, unknown> | null, error: string | null }> => {
         try {
@@ -47,10 +54,10 @@ const jwt = {
                 value: payload,
                 error: null
             }
-        } catch (error) {
+        } catch (err: any) {
             return {
                 value: null,
-                error: error instanceof Error ? error.message : 'Invalid token'
+                error: err instanceof Error ? err.message : String(err)
             }
         }
     }

package/lib/buffer-polyfill.ts

@@ -1,57 +0,0 @@
-/**
- * Polyfill for Bun's Buffer to accept numeric encodings.
- *
- * Node.js allows encoding to be passed as a number (e.g. 3 = 'latin1'),
- * but Bun throws "Invalid encoding: 3". This patches Buffer.from,
- * Buffer.alloc, and Buffer.allocUnsafe to convert numeric encodings
- * to their string equivalents before calling the original methods.
- *
- * Required by: mongodb driver (bson), and any library that uses
- * legacy numeric encoding values internally.
- */
-const ENCODING_MAP: Record<number, string> = {
-  0: "utf8",
-  1: "utf-8",
-  2: "utf16le",
-  3: "latin1",
-  4: "latin1", // binary alias
-  5: "base64",
-  6: "base64url",
-  7: "hex",
-  8: "ascii",
-  9: "ucs2",
-  10: "ucs-2",
-};
-
-function normalizeEncoding(
-  encoding: string | number | undefined,
-): BufferEncoding | undefined {
-  if (encoding === undefined || typeof encoding === "string") {
-    return encoding as BufferEncoding | undefined;
-  }
-  const mapped = ENCODING_MAP[encoding];
-  if (mapped) return mapped as BufferEncoding;
-  return undefined;
-}
-
-// Patch Buffer.from
-const _Buffer_from = Buffer.from.bind(Buffer) as typeof Buffer.from;
-(Buffer as any).from = function (
-  ...args: any[]
-): Buffer {
-  if (args.length >= 2 && typeof args[1] === "number") {
-    args[1] = normalizeEncoding(args[1]);
-  }
-  return _Buffer_from(...args as [any, any?, any?]);
-};
-
-// Patch Buffer.alloc
-const _Buffer_alloc = Buffer.alloc.bind(Buffer);
-(Buffer as any).alloc = function (
-  ...args: any[]
-): Buffer {
-  if (args.length >= 2 && typeof args[1] === "number") {
-    args[1] = normalizeEncoding(args[1]);
-  }
-  return _Buffer_alloc(...args as [any, any?, any?]);
-};