@arex95/vue-core 1.1.11 → 1.1.12

package/dist/composables/auth/useAuth.d.ts

@@ -16,8 +16,8 @@ export declare function configureAuth(options: AuthConfig): void;
  */
 export declare function useAuth(secretKey?: string): {
     isAuthenticated: import("vue").ComputedRef<boolean>;
-    jwt: import("vue").ComputedRef<string | null>;
-    refresh_token: import("vue").ComputedRef<string | null>;
+    jwt: import("vue").Ref<string | null, string | null>;
+    refresh_token: import("vue").Ref<string | null, string | null>;
     tokenExpiry: import("vue").ComputedRef<number | null>;
     login: (params: {} | undefined, isRememberMe: boolean) => Promise<import("axios").AxiosResponse<any, any>>;
     refresh: () => Promise<import("axios").AxiosResponse<any, any> | undefined>;

package/dist/composables/monitoring/useApiActivity.d.ts

@@ -1,5 +1,5 @@
 export declare function useApiActivity(sessionTimeoutMin: number, checkIntervalSec: number): {
-    pause: import("@vueuse/shared").Fn;
-    resume: import("@vueuse/shared").Fn;
+    pause: import("@vueuse/core").Fn;
+    resume: import("@vueuse/core").Fn;
     updateTimestamp: () => void;
 };

package/dist/index.mjs

@@ -1,9 +1,8 @@
-import { useTimeoutFn, useBreakpoints, breakpointsTailwind, useWindowSize } from '@vueuse/core';
+import { useTimeoutFn, useBreakpoints, breakpointsTailwind, useWindowSize, computedAsync } from '@vueuse/core';
 import axios from 'axios';
 import { useRouter } from 'vue-router';
 import { useQuery } from '@tanstack/vue-query';
 import { ref, watch, onServerPrefetch, onMounted, computed } from 'vue';
-import * as CryptoJS from 'crypto-js';
 import { jwtDecode } from 'jwt-decode';
 import { v4 } from 'uuid';
 
@@ -3013,42 +3012,67 @@ function configureAuth(options) {
         config.storageKeys = { ...config.storageKeys, ...options.storageKeys };
     }
 }
+function ab2hex(buffer) {
+    return Array.from(buffer)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+function hex2ab(hex) {
+    return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));
+}
+async function importKey(secretKey) {
+    const encoder = new TextEncoder();
+    const keyMaterial = await crypto.subtle.digest("SHA-256", encoder.encode(secretKey));
+    return await crypto.subtle.importKey("raw", keyMaterial, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
+}
 /**
- * Encrypts a value using AES encryption.
+ * Encrypts a value using AES-256 CBC encryption with Web Cryptography API.
+ * The IV is generated randomly for each encryption and prepended to the ciphertext.
  *
  * @param {string} value - The value to encrypt.
- * @param {string} key - The encryption key.
- * @returns {string} The encrypted string.
- */
-const encrypt = (value, key) => {
-    return CryptoJS.AES.encrypt(value, key).toString();
+ * @param {string} secretKey - The encryption key string.
+ * @returns {Promise<string>} A promise that resolves to the encrypted string (hex IV + hex ciphertext).
+ */
+const encrypt = async (value, secretKey) => {
+    const key = await importKey(secretKey);
+    const textEncoder = new TextEncoder();
+    const data = textEncoder.encode(value);
+    const iv = crypto.getRandomValues(new Uint8Array(16));
+    const encryptedContentBuffer = await crypto.subtle.encrypt({ name: "AES-CBC", iv: iv }, key, data);
+    const encryptedContentUint8 = new Uint8Array(encryptedContentBuffer);
+    return ab2hex(iv) + ab2hex(encryptedContentUint8);
 };
 /**
- * Decrypts an AES encrypted value.
+ * Decrypts an AES-256 CBC encrypted value using Web Cryptography API.
+ * The IV is extracted from the beginning of the encrypted string.
  *
- * @param {string} value - The encrypted value.
- * @param {string} key - The encryption key.
- * @returns {string} The decrypted string.
- */
-const decrypt = (value, key) => {
-    const bytes = CryptoJS.AES.decrypt(value, key);
-    return bytes.toString(CryptoJS.enc.Utf8);
+ * @param {string} value - The encrypted string (hex IV + hex ciphertext).
+ * @param {string} secretKey - The decryption key string.
+ * @returns {Promise<string>} A promise that resolves to the decrypted string.
+ */
+const decrypt = async (value, secretKey) => {
+    const key = await importKey(secretKey);
+    const iv = hex2ab(value.substring(0, 32));
+    const encryptedData = hex2ab(value.substring(32));
+    const decryptedContent = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, encryptedData);
+    return new TextDecoder().decode(decryptedContent);
 };
 /**
  * Stores an encrypted value in sessionStorage or localStorage.
  *
  * @param {string} key - Storage key.
- * @param {any} value - Value to store.
+ * @param {string} value - Value to store.
  * @param {string} secretKey - Encryption key.
  * @param {boolean} isRememberMe - Whether to store in localStorage.
  * @param {number} [attempt=0] - Retry attempt count.
  * @returns {Promise<void>}
  */
-const storeEncryptedItem = async (value, key, secretKey, isRememberMe, attempt = 0) => {
+const storeEncryptedItem = async (key, value, secretKey, isRememberMe, attempt = 0) => {
     const storage = isRememberMe ? localStorage : sessionStorage;
     if (typeof window !== "undefined" && storage) {
         try {
-            storage.setItem(key, encrypt(value, secretKey));
+            const encryptedValue = await encrypt(value, secretKey);
+            storage.setItem(key, encryptedValue);
             return;
         }
         catch (error) {
@@ -3074,13 +3098,15 @@ const storeEncryptedItem = async (value, key, secretKey, isRememberMe, attempt =
  * @param {string} key - Storage key.
  * @param {string} secretKey - Decryption key.
  * @param {boolean} isRememberMe - Whether to retrieve from localStorage.
- * @returns {string|null} The decrypted value or null.
+ * @returns {Promise<string|null>} The decrypted value or null.
  */
-function getDecryptedValue(key, secretKey, isRememberMe) {
+async function getDecryptedValue(key, secretKey, isRememberMe) {
     const storage = sessionStorage;
     try {
         const value = storage.getItem(key);
-        return value ? decrypt(value, secretKey) : null;
+        if (!value)
+            return null;
+        return await decrypt(value, secretKey);
     }
     catch (error) {
         handleError(error, false);
@@ -3094,8 +3120,8 @@ function getDecryptedValue(key, secretKey, isRememberMe) {
  * @returns {Object} Auth composable methods and properties.
  */
 function useAuth(secretKey = getSecretKey()) {
-    const jwt = computed(() => getDecryptedValue(config.storageKeys.ACCESS_TOKEN, secretKey));
-    const refresh_token = computed(() => getDecryptedValue(config.storageKeys.REFRESH_TOKEN, secretKey));
+    const jwt = computedAsync(async () => await getDecryptedValue(config.storageKeys.ACCESS_TOKEN, secretKey), null);
+    const refresh_token = computedAsync(async () => await getDecryptedValue(config.storageKeys.REFRESH_TOKEN, secretKey), null);
     /**
      * Computes token expiration timestamp.
      */
@@ -3172,7 +3198,7 @@ function useAuth(secretKey = getSecretKey()) {
      * Clears stored authentication data.
      */
     const cleanStorage = async () => {
-        Object.keys(config.storageKeys).forEach(key => {
+        Object.keys(config.storageKeys).forEach((key) => {
             sessionStorage.removeItem(config.storageKeys[key]);
             localStorage.removeItem(config.storageKeys[key]);
         });
@@ -3182,9 +3208,9 @@ function useAuth(secretKey = getSecretKey()) {
      */
     const verifyToken = async () => {
         if (!jwt.value) {
-            handleError('TOKEN_MISSING: No valid token found', true, '/auth-error', 'query');
+            handleError("TOKEN_MISSING: No valid token found", true, "/auth-error", "query");
             await cleanStorage();
-            throw new Error('TOKEN_MISSING: No valid token found');
+            throw new Error("TOKEN_MISSING: No valid token found");
         }
         try {
             const decoded = jwtDecode(jwt.value);
@@ -3212,7 +3238,7 @@ function useAuth(secretKey = getSecretKey()) {
         refresh,
         logout,
         cleanStorage,
-        verifyToken
+        verifyToken,
     };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arex95/vue-core",
-  "version": "1.1.11",
+  "version": "1.1.12",
   "description": "Opinionated Vue Core",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -35,7 +35,9 @@
     "axios": ">=1.6.0",
     "uuid": ">=11.1.0",
     "vue": ">=3.0.0",
-    "vue-router": ">=4.5.0"
+    "vue-router": ">=4.5.0",
+    "crypto-js": "^4.2.0",
+    "jwt-decode": "^4.0.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.23.0",