@arex95/vue-core 1.1.24 → 1.1.26

package/dist/index.mjs

@@ -2518,20 +2518,35 @@ function ab2hex(buffer) {
  * Converts a hexadecimal string to a Uint8Array.
  * @param hex The hexadecimal string to convert.
  * @returns The Uint8Array.
+ * @throws {TypeError} If the input is not a string.
+ * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
  */
 function hex2ab(hex) {
-    if (!hex || !/^[0-9a-fA-F]*$/.test(hex)) {
+    if (typeof hex !== "string") {
+        throw new TypeError("Input must be a string.");
+    }
+    if (hex.length === 0) {
         return new Uint8Array();
     }
-    const matches = hex.match(/[0-9a-fA-F]{1,2}/g);
-    return new Uint8Array(matches ? matches.map((byte) => parseInt(byte, 16)) : []);
+    if (!/^[0-9a-fA-F]*$/.test(hex) || hex.length % 2 !== 0) {
+        throw new Error("Invalid hexadecimal string format or odd length.");
+    }
+    const array = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        array[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return array;
 }
 /**
  * Derives an encryption key from a secret key.
  * @param secretKey The secret key in plain text.
  * @returns A promise that resolves with the derived CryptoKey.
+ * @throws {Error} If the secretKey is null or empty.
  */
 async function importKey(secretKey) {
+    if (!secretKey) {
+        throw new Error("Secret key cannot be null or empty.");
+    }
     const keyMaterial = new TextEncoder().encode(secretKey);
     const digest = await crypto.subtle.digest("SHA-256", keyMaterial);
     return crypto.subtle.importKey("raw", digest, { name: "AES-CBC", length: 256 }, false, ["encrypt", "decrypt"]);
@@ -2541,6 +2556,7 @@ async function importKey(secretKey) {
  * @param value The value to encrypt.
  * @param secretKey The secret key for encryption.
  * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
  */
 async function encrypt(value, secretKey) {
     const key = await importKey(secretKey);
@@ -2554,13 +2570,31 @@ async function encrypt(value, secretKey) {
  * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
  * @param secretKey The secret key for decryption.
  * @returns A promise that resolves with the decrypted value.
+ * @throws {Error} If encryptedValue is null or empty, too short,
+ * or if the IV/ciphertext have incorrect lengths after conversion.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ * @throws {TypeError} If hex2ab receives an invalid input type.
  */
 async function decrypt(encryptedValue, secretKey) {
+    if (!encryptedValue) {
+        throw new Error("Encrypted value cannot be null or empty.");
+    }
+    // For AES-CBC, the IV is ALWAYS 16 bytes.
+    // 16 bytes * 2 hex characters/byte = 32 hex characters for the IV.
+    if (encryptedValue.length < 32) {
+        throw new Error("Encrypted value is too short. Expected at least 32 hexadecimal characters for the IV.");
+    }
     const key = await importKey(secretKey);
     const ivHex = encryptedValue.substring(0, 32);
     const ciphertextHex = encryptedValue.substring(32);
     const iv = hex2ab(ivHex);
     const ciphertext = hex2ab(ciphertextHex);
+    if (iv.byteLength !== 16) {
+        throw new Error(`Converted IV has incorrect length: ${iv.byteLength} bytes. Expected 16 bytes.`);
+    }
+    if (ciphertext.byteLength === 0) {
+        throw new Error("Ciphertext is empty. No data to decrypt.");
+    }
     const decryptedBuffer = await crypto.subtle.decrypt({ name: "AES-CBC", iv: iv }, key, ciphertext);
     return new TextDecoder().decode(decryptedBuffer);
 }
@@ -3319,6 +3353,15 @@ function useAuth(secretKey = getSecretKey()) {
     const login = async (params, persistence) => {
         try {
             const { data } = await axiosInstance.post(endpoints.LOGIN, params);
+            if (!data) {
+                throw new Error("LOGIN_ERROR: No data received from login endpoint.");
+            }
+            if (!data.access_token) {
+                throw new Error("LOGIN_ERROR: Access token not found in response.");
+            }
+            if (!data.refresh_token) {
+                throw new Error("LOGIN_ERROR: Refresh token not found in response.");
+            }
             configSession({
                 persistencePreference: persistence,
             });

package/dist/utils/encryption.d.ts

@@ -8,12 +8,15 @@ export declare function ab2hex(buffer: ArrayBuffer | Uint8Array): string;
  * Converts a hexadecimal string to a Uint8Array.
  * @param hex The hexadecimal string to convert.
  * @returns The Uint8Array.
+ * @throws {TypeError} If the input is not a string.
+ * @throws {Error} If the hexadecimal string format is invalid or has an odd length.
  */
 export declare function hex2ab(hex: string): Uint8Array;
 /**
  * Derives an encryption key from a secret key.
  * @param secretKey The secret key in plain text.
  * @returns A promise that resolves with the derived CryptoKey.
+ * @throws {Error} If the secretKey is null or empty.
  */
 export declare function importKey(secretKey: string): Promise<CryptoKey>;
 /**
@@ -21,6 +24,7 @@ export declare function importKey(secretKey: string): Promise<CryptoKey>;
  * @param value The value to encrypt.
  * @param secretKey The secret key for encryption.
  * @returns A promise that resolves with the IV (hex) + ciphertext (hex) string.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
  */
 export declare function encrypt(value: string, secretKey: string): Promise<string>;
 /**
@@ -28,5 +32,9 @@ export declare function encrypt(value: string, secretKey: string): Promise<strin
  * @param encryptedValue The encrypted string (IV_hex + ciphertext_hex).
  * @param secretKey The secret key for decryption.
  * @returns A promise that resolves with the decrypted value.
+ * @throws {Error} If encryptedValue is null or empty, too short,
+ * or if the IV/ciphertext have incorrect lengths after conversion.
+ * @throws {Error} If the secretKey is null or empty (via importKey).
+ * @throws {TypeError} If hex2ab receives an invalid input type.
  */
 export declare function decrypt(encryptedValue: string, secretKey: string): Promise<string>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arex95/vue-core",
-  "version": "1.1.24",
+  "version": "1.1.26",
   "description": "Opinionated Vue Core",
   "main": "dist/index.js",
   "module": "dist/index.mjs",