@bee.js/node 0.0.96 → 0.0.98

package/beehive.js

@@ -4,6 +4,7 @@ const beeORM = require("./lib/ORM/beeORM");
 const beeDBA = require("./lib/DBA/beeDBA");
 const beeJWT = require("./lib/JWT/beeJWT");
 const beeTools = require("./tools/beeTools");
+const crypto = require("crypto");
 
 module.exports = function hive(req = {}, res = {}, model = null) {
   model =
@@ -468,7 +469,28 @@ module.exports = function hive(req = {}, res = {}, model = null) {
     },
 
     response: function (sendData = data, action = null, status) {
-      const out = { data: sendData, counters, action, error };
+      let responseData = sendData;
+      let e2eeConfig = null;
+
+      if (
+        sendData &&
+        typeof sendData === "object" &&
+        !Array.isArray(sendData) &&
+        sendData.e2ee
+      ) {
+        const hasDataOverride = Object.prototype.hasOwnProperty.call(
+          sendData,
+          "data"
+        );
+        const isConfigOnly = Object.keys(sendData).length === 1;
+
+        if (hasDataOverride || isConfigOnly) {
+          e2eeConfig = sendData.e2ee;
+          responseData = hasDataOverride ? sendData.data : data;
+        }
+      }
+
+      const out = { data: responseData, counters, action, error };
 
       if (res.headersSent)
         return console.error("ERROR beejs: headers already sent");
@@ -477,6 +499,39 @@ module.exports = function hive(req = {}, res = {}, model = null) {
 
       if (global.configs.debug) out.debug = debug;
 
+      if (e2eeConfig) {
+        try {
+          const algorithm =
+            e2eeConfig.algorithm || e2eeConfig.alghoritimo || "aes-256-gcm";
+          const key =
+            typeof e2eeConfig.key === "string" ? e2eeConfig.key : "";
+
+          if (key) {
+            const iv = crypto.randomBytes(12);
+            const hashKey =
+              /^[a-f0-9]{64}$/i.test(key)
+                ? Buffer.from(key, "hex")
+                : crypto.createHash("sha256").update(key).digest();
+            const cipher = crypto.createCipheriv(algorithm, hashKey, iv);
+            const jsonData = JSON.stringify(out.data ?? null);
+            const encryptedBuffer = Buffer.concat([
+              cipher.update(jsonData, "utf8"),
+              cipher.final(),
+            ]);
+            const tag = cipher.getAuthTag();
+            out.data = {
+              e2ee: {
+                encrypted: encryptedBuffer.toString("base64"),
+                iv: iv.toString("base64"),
+                tag: tag.toString("base64"),
+              },
+            };
+          }
+        } catch (e) {
+          console.error("ERROR beejs: e2ee encryption failed", e);
+        }
+      }
+
       if (status) res.status(status).send(out);
       else
         switch (req.method) {

package/lib/JWT/beeJWT.js

@@ -2,7 +2,7 @@ const CryptoJS = require("crypto-js");
 const log = require("../beeHive/log");
 
 function base64url(source) {
-  encodedSource = CryptoJS.enc.Base64.stringify(source);
+  let encodedSource = CryptoJS.enc.Base64.stringify(source);
   encodedSource = encodedSource.replace(/=+$/, "");
   encodedSource = encodedSource.replace(/\+/g, "-");
   encodedSource = encodedSource.replace(/\//g, "_");
@@ -10,7 +10,17 @@ function base64url(source) {
   return encodedSource;
 }
 
-module.exports = function token(_payload = null, header = {}) {
+function base64urlDecode(input = "") {
+  if (!input) return "";
+
+  let normalized = input.replace(/-/g, "+").replace(/_/g, "/");
+  const pad = normalized.length % 4;
+  if (pad) normalized += "=".repeat(4 - pad);
+
+  return Buffer.from(normalized, "base64").toString("utf8");
+}
+
+module.exports = function token(_payload = null, header = {}, options = {}) {
   if (_payload) {
     let { jwt, ...payload } = _payload;
 
@@ -19,7 +29,10 @@ module.exports = function token(_payload = null, header = {}) {
 
     let secret = global.configs.jwt.secret;
     let iat = new Date().getTime();
-    let exp = new Date().getTime() + 60 * 1000;
+    // options.expires is in minutes (default: 1 minute)
+    const expiresInMinutes =
+      typeof options.expires === "number" ? options.expires : 1;
+    let exp = new Date().getTime() + expiresInMinutes * 60 * 1000;
 
     header = {
       ...header,
@@ -55,7 +68,9 @@ module.exports = function token(_payload = null, header = {}) {
     ...this,
     verify: function (token) {
       const secret = global.configs.jwt.secret;
+      if (!token || typeof token !== "string") return false;
       const array = token.split(".");
+      if (array.length !== 3) return false;
       const header = array[0];
       const payload = array[1];
 
@@ -63,9 +78,21 @@ module.exports = function token(_payload = null, header = {}) {
         CryptoJS.HmacSHA256(`${header}.${payload}`, secret)
       );
 
-      return token === `${header}.${payload}.${signature}`
-        ? new Buffer.from(payload, "base64").toString("ascii")
-        : false;
+      if (token !== `${header}.${payload}.${signature}`) return false;
+
+      let payloadDecoded = base64urlDecode(payload);
+      let payloadJson;
+      try {
+        payloadJson = JSON.parse(payloadDecoded);
+      } catch (error) {
+        return false;
+      }
+
+      if (payloadJson?.exp && new Date().getTime() > payloadJson.exp) {
+        return { error: { message: "TOKEN_EXPIRED", status: 401 } };
+      }
+
+      return payloadDecoded;
     },
   };
 };

package/lib/WEB/route.js

@@ -16,7 +16,10 @@ module.exports = async function(req, res, next, ignoreMiddlewares = false) {
             log(`Token verify: ${token}`)
 
             token = beeJWT().verify(token)
-            
+
+            if (token?.error?.message === "TOKEN_EXPIRED")
+                return res.status(token.error.status || 401).send({data: null, error: {message: 'TOKEN_EXPIRED'}, action: 'TOKEN_EXPIRED'})
+
             if(!token)
                 return res.status(validSession.errorCode || 401).send({data: null, error: {message: validSession.error || 'NOT_AUTHENTICATED'}, action: validSession.failAction || 'NOT_AUTHENTICATED'})
 
@@ -25,4 +28,4 @@ module.exports = async function(req, res, next, ignoreMiddlewares = false) {
     }
 
     next()
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bee.js/node",
-  "version": "0.0.96",
+  "version": "0.0.98",
   "description": "A JavaScript framework for making Node.js API´s",
   "main": "index.js",
   "scripts": {
@@ -40,4 +40,4 @@
     "uuid": "^9.0.0",
     "ws": "^8.18.1"
   }
-}
+}