@arex95/vue-core 1.1.23 → 1.1.25

package/dist/index.mjs

@@ -2518,20 +2518,35 @@ function ab2hex(buffer) {
  * Converts a hexadecimal string to a Uint8Array.
  * @param hex The hexadecimal string to convert.
  * @returns The Uint8Array.
+ * @throws {TypeError} If the input is not a string.
+ * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
  */
 function hex2ab(hex) {
-    if (!hex || !/^[0-9a-fA-F]*$/.test(hex)) {
+    if (typeof hex !== "string") {
+        throw new TypeError("Input must be a string.");
+    }
+    if (hex.length === 0) {
         return new Uint8Array();
     }
-    const matches = hex.match(/[0-9a-fA-F]{1,2}/g);
-    return new Uint8Array(matches ? matches.map((byte) => parseInt(byte, 16)) : []);
+    if (!/^[0-9a-fA-F]*$/.test(hex) || hex.length % 2 !== 0) {
+        throw new Error("Invalid hexadecimal string format or odd length.");
+    }
+    const array = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        array[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return array;
 }
 /**
  * Derives an encryption key from a secret key.
  * @param secretKey The secret key in plain text.
  * @returns A promise that resolves with the derived CryptoKey.
+ * @throws {Error} If the secretKey is null or empty.
  */
 async function importKey(secretKey) {
+    if (!secretKey) {
+        throw new Error("Secret key cannot be null or empty.");
+    }
     const keyMaterial = new TextEncoder().encode(secretKey);
     const digest = await crypto.subtle.digest("SHA-256", keyMaterial);
     return crypto.subtle.importKey("raw", digest, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
@@ -2541,6 +2556,7 @@ async function importKey(secretKey) {
  * @param value The value to encrypt.
  * @param secretKey The secret key for encryption.
  * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
  */
 async function encrypt(value, secretKey) {
     const key = await importKey(secretKey);
@@ -2554,13 +2570,31 @@ async function encrypt(value, secretKey) {
  * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
  * @param secretKey The secret key for decryption.
  * @returns A promise that resolves with the decrypted value.
+ * @throws {Error} If encryptedValue is null or empty, too short,
+ * or if the IV/ciphertext have incorrect lengths after conversion.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ * @throws {TypeError} If hex2ab receives an invalid input type.
  */
 async function decrypt(encryptedValue, secretKey) {
+    if (!encryptedValue) {
+        throw new Error("Encrypted value cannot be null or empty.");
+    }
+    // For AES-CBC, the IV is ALWAYS 16 bytes.
+    // 16 bytes * 2 hex characters/byte = 32 hex characters for the IV.
+    if (encryptedValue.length < 32) {
+        throw new Error("Encrypted value is too short. Expected at least 32 hexadecimal characters for the IV.");
+    }
     const key = await importKey(secretKey);
     const ivHex = encryptedValue.substring(0, 32);
     const ciphertextHex = encryptedValue.substring(32);
     const iv = hex2ab(ivHex);
     const ciphertext = hex2ab(ciphertextHex);
+    if (iv.byteLength !== 16) {
+        throw new Error(`Converted IV has incorrect length: ${iv.byteLength} bytes. Expected 16 bytes.`);
+    }
+    if (ciphertext.byteLength === 0) {
+        throw new Error("Ciphertext is empty. No data to decrypt.");
+    }
     const decryptedBuffer = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, ciphertext);
     return new TextDecoder().decode(decryptedBuffer);
 }
@@ -2617,7 +2651,7 @@ async function getDecryptedItem(key, secretKey, isRememberMe) {
 const cleanCredentials = async (preference) => {
     const tokensConfig = getTokenConfig();
     Object.keys(tokensConfig).forEach((key) => {
-        const storage = preference === "session" ? sessionStorage : localStorage;
+        const storage = preference === "local" ? localStorage : sessionStorage;
         storage.removeItem(tokensConfig[key]);
     });
 };
@@ -2631,7 +2665,7 @@ const cleanCredentials = async (preference) => {
  */
 const getAuthToken = async (secretKey, preference) => {
     const tokensConfig = getTokenConfig();
-    return await getDecryptedItem(tokensConfig.ACCESS_TOKEN, secretKey, preference === "session");
+    return await getDecryptedItem(tokensConfig.ACCESS_TOKEN, secretKey, preference === "local");
 };
 /**
  * Retrieves the authentication refresh token from storage, decrypting it
@@ -2643,7 +2677,7 @@ const getAuthToken = async (secretKey, preference) => {
  */
 const getAuthRefreshToken = async (secretKey, preference) => {
     const tokensConfig = getTokenConfig();
-    return await getDecryptedItem(tokensConfig.REFRESH_TOKEN, secretKey, preference === "session");
+    return await getDecryptedItem(tokensConfig.REFRESH_TOKEN, secretKey, preference === "local");
 };
 /**
  * Stores the authentication token (access token) in storage after encrypting it,
@@ -2656,7 +2690,7 @@ const getAuthRefreshToken = async (secretKey, preference) => {
  */
 const storeAuthToken = async (token, secretKey, preference) => {
     const tokensConfig = getTokenConfig();
-    await storeEncryptedItem(tokensConfig.ACCESS_TOKEN, token, secretKey, preference === "session");
+    await storeEncryptedItem(tokensConfig.ACCESS_TOKEN, token, secretKey, preference === "local");
 };
 /**
  * Stores the authentication refresh token in storage after encrypting it,
@@ -2669,7 +2703,7 @@ const storeAuthToken = async (token, secretKey, preference) => {
  */
 const storeAuthRefreshToken = async (token, secretKey, preference) => {
     const tokensConfig = getTokenConfig();
-    await storeEncryptedItem(tokensConfig.REFRESH_TOKEN, token, secretKey, preference === "session");
+    await storeEncryptedItem(tokensConfig.REFRESH_TOKEN, token, secretKey, preference === "local");
 };
 /**
  * Verifies the validity and expiration of the current authentication token.

package/dist/utils/encryption.d.ts

@@ -8,12 +8,15 @@ export declare function ab2hex(buffer: ArrayBuffer | Uint8Array): string;
  * Converts a hexadecimal string to a Uint8Array.
  * @param hex The hexadecimal string to convert.
  * @returns The Uint8Array.
+ * @throws {TypeError} If the input is not a string.
+ * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
  */
 export declare function hex2ab(hex: string): Uint8Array;
 /**
  * Derives an encryption key from a secret key.
  * @param secretKey The secret key in plain text.
  * @returns A promise that resolves with the derived CryptoKey.
+ * @throws {Error} If the secretKey is null or empty.
  */
 export declare function importKey(secretKey: string): Promise<CryptoKey>;
 /**
@@ -21,6 +24,7 @@ export declare function importKey(secretKey: string): Promise<CryptoKey>;
  * @param value The value to encrypt.
  * @param secretKey The secret key for encryption.
  * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
  */
 export declare function encrypt(value: string, secretKey: string): Promise<string>;
 /**
@@ -28,5 +32,9 @@ export declare function encrypt(value: string, secretKey: string): Promise<strin
  * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
  * @param secretKey The secret key for decryption.
  * @returns A promise that resolves with the decrypted value.
+ * @throws {Error} If encryptedValue is null or empty, too short,
+ * or if the IV/ciphertext have incorrect lengths after conversion.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ * @throws {TypeError} If hex2ab receives an invalid input type.
  */
 export declare function decrypt(encryptedValue: string, secretKey: string): Promise<string>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arex95/vue-core",
-  "version": "1.1.23",
+  "version": "1.1.25",
   "description": "Opinionated Vue Core",
   "main": "dist/index.js",
   "module": "dist/index.mjs",