@blinkk/root-password-protect 1.0.0-rc.34

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2023-2024 Blinkk LLC
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/bin/root-password-protect.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+
+import {createRequire} from 'node:module';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {Command} from 'commander';
+import {bgGreen, black} from 'kleur/colors';
+import {generateHash} from '../dist/cli.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
+const packageJson = require(path.join(__dirname, '../package.json'));
+
+async function main() {
+  console.log(`🥕 ${bgGreen(black(' root-password-protect'))} v${packageJson.version}`);
+
+  const program = new Command('root-password-protect');
+  program.version(packageJson.version);
+  program
+    .command('generate-hash <password>')
+    .description('generates root-cms.d.ts from *.schema.ts files in the project')
+    .action(generateHash);
+  await program.parseAsync(process.argv);
+}
+
+main();

package/dist/cli.js

@@ -0,0 +1,45 @@
+// core/password.ts
+import crypto from "crypto";
+var PASSWORD_ITERATIONS = 1e4;
+var PASSWORD_HASH_LENGTH = 64;
+var PASSWORD_DIGEST = "sha256";
+async function hashPassword(password) {
+  const salt = crypto.randomBytes(16).toString("hex");
+  const hash = await generateHash(password, salt);
+  return { hash, salt };
+}
+function generateHash(password, salt) {
+  return new Promise((resolve, reject) => {
+    crypto.pbkdf2(
+      password,
+      salt,
+      PASSWORD_ITERATIONS,
+      PASSWORD_HASH_LENGTH,
+      PASSWORD_DIGEST,
+      (err, derivedKey) => {
+        if (err) {
+          console.error("password hashing failed");
+          console.error(err);
+          reject(err);
+          return;
+        }
+        const hash = derivedKey.toString("hex");
+        resolve(hash);
+      }
+    );
+  });
+}
+
+// cli/commands/generate-hash.ts
+async function generateHash2(password) {
+  const { hash, salt } = await hashPassword(password);
+  console.log('// Generated by: `root-password-protect generate-hash "..."`.');
+  console.log("password: {");
+  console.log(`  hash: '${hash}',`);
+  console.log(`  salt: '${salt}',`);
+  console.log("}");
+}
+export {
+  generateHash2 as generateHash
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist/core.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/core.js

@@ -0,0 +1 @@
+//# sourceMappingURL=data:application/json;base64,ewogICJ2ZXJzaW9uIjogMywKICAic291cmNlcyI6IFtdLAogICJzb3VyY2VzQ29udGVudCI6IFtdLAogICJtYXBwaW5ncyI6ICIiLAogICJuYW1lcyI6IFtdCn0K

package/dist/plugin.d.ts

@@ -0,0 +1,36 @@
+import { Plugin } from '@blinkk/root';
+
+interface PasswordProtectedRoute {
+    /**
+     * URL glob pattern to match (regex not supported yet).
+     */
+    source: string;
+    password: {
+        /**
+         * A hash of the password. Note: a plain-text password should never be
+         * stored in code. Consider storing this value in a `.env` file for extra
+         * security.
+         *
+         * Generate this by running:
+         * ```
+         * root-password-protect generate-hash "MY_PASSWORD"
+         * ````
+         */
+        hash: string;
+        /**
+         * A random string used to generate the password hash.
+         *
+         * Generate this by running:
+         * ```
+         * root-password-protect generate-hash "MY_PASSWORD"
+         * ````
+         */
+        salt: string;
+    };
+}
+interface PasswordProtectPluginOptions {
+    protectedRoutes: PasswordProtectedRoute[];
+}
+declare function passwordProtectPlugin(options: PasswordProtectPluginOptions): Plugin;
+
+export { type PasswordProtectPluginOptions, type PasswordProtectedRoute, passwordProtectPlugin };

package/dist/plugin.js

@@ -0,0 +1,311 @@
+// core/plugin.ts
+import bodyParser from "body-parser";
+import micromatch from "micromatch";
+
+// core/password-page.tsx
+import { render as renderToString } from "preact-render-to-string";
+import { jsx, jsxs } from "preact/jsx-runtime";
+var CSS = `
+.signin {
+  font-family: 'Google Sans', arial, sans-serif;
+  text-align: center;
+  padding: 48px 20px;
+  color: #3c4043;
+}
+
+.signin__headline {
+  margin-bottom: 40px;
+}
+
+.signin__headline__icon {
+  margin-bottom: 20px;
+}
+
+.signin__headline__icon svg {
+  width: 72px;
+  height: 72px;
+}
+
+.signin__headline__title {
+  font-size: 36px;
+  line-height: 1.3;
+  font-weight: 500;
+  margin-bottom: 20px;
+}
+
+.signin__headline__body {
+  font-size: 18px;
+  line-height: 1.5;
+  font-weight: 500;
+}
+
+.signin__form {
+  display: flex;
+  gap: 8px;
+  justify-content: center;
+}
+
+.signin__form__password {
+  box-sizing: border-box;
+  border: 1px solid #dadce0;
+  border-radius: 4px;
+  height: 40px;
+  font-family: inherit;
+  font-size: 14px;
+  line-height: 1;
+  letter-spacing: .25px;
+  padding: 0 12px;
+  min-width: 250px;
+  transition: all 0.218s ease;
+}
+
+.signin__form__password:focus {
+  border-color: #d2e3fc;
+  background-color: rgba(66, 133, 244, 0.04);
+}
+
+.signin__button {
+  align-items: center;
+  -webkit-appearance: none;
+  -moz-appearance: none;
+  appearance: none;
+  display: inline-flex;
+  align-items: center;
+  text-align: center;
+  gap: 12px;
+  padding: 8px 11px;
+  background: white;
+  border: 1px solid #dadce0;
+  border-radius: 4px;
+  cursor: pointer;
+  font-family: inherit;
+  padding: 0 12px;
+  height: 40px;
+  box-sizing: border-box;
+  transition: all 0.218s ease;
+}
+
+.signin__button:hover {
+  border-color: #d2e3fc;
+  background-color: rgba(66, 133, 244, 0.04);
+}
+
+.signin__button__icon {
+  width: 18px;
+  height: 18px;
+  background-color: white;
+}
+
+.signin__button__label {
+  font-size: 14px;
+  line-height: 1;
+  letter-spacing: .25px;
+  font-weight: 500;
+  color: #3c4043;
+}
+
+.signin__error {
+  color: red;
+  font-weight: bold;
+  text-align: center;
+  max-width: 60ch;
+  margin: 20px auto 0;
+}
+`;
+function PasswordPage(props) {
+  return /* @__PURE__ */ jsxs("html", { children: [
+    /* @__PURE__ */ jsxs("head", { children: [
+      /* @__PURE__ */ jsx("meta", { charset: "utf-8" }),
+      /* @__PURE__ */ jsx("title", { children: "Protected" }),
+      /* @__PURE__ */ jsx(
+        "link",
+        {
+          rel: "icon",
+          href: "https://lh3.googleusercontent.com/ijK50TfQlV_yJw3i-CMlnD6osH4PboZBILZrJcWhoNMEmoyCD5e1bAxXbaOPe5w4gG_Scf37EXrmZ6p8sP2lue5fLZ419m5JyLMs=e385-w256",
+          type: "image/png"
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        "link",
+        {
+          rel: "stylesheet",
+          href: "https://fonts.googleapis.com/css2?family=Google+Sans:wght@500&display=swap"
+        }
+      ),
+      /* @__PURE__ */ jsx("style", { children: CSS })
+    ] }),
+    /* @__PURE__ */ jsx("body", { children: /* @__PURE__ */ jsx("div", { id: "root", children: /* @__PURE__ */ jsxs("div", { className: "signin", children: [
+      /* @__PURE__ */ jsxs("div", { className: "signin__headline", children: [
+        /* @__PURE__ */ jsx("div", { className: "signin__headline__icon", children: /* @__PURE__ */ jsx(ShieldIcon, {}) }),
+        /* @__PURE__ */ jsx("h1", { children: "This page is protected." }),
+        /* @__PURE__ */ jsx("p", { className: "signin__headline__body", children: "Enter the password below to continue:" })
+      ] }),
+      /* @__PURE__ */ jsxs("form", { className: "signin__form", method: "POST", children: [
+        /* @__PURE__ */ jsx(
+          "input",
+          {
+            id: "password",
+            className: "signin__form__password",
+            name: "password",
+            type: "password",
+            placeholder: "Password"
+          }
+        ),
+        /* @__PURE__ */ jsx("button", { className: "signin__button", type: "submit", children: /* @__PURE__ */ jsx("div", { className: "signin__button__label", children: "Submit" }) })
+      ] }),
+      props.error && /* @__PURE__ */ jsx("p", { className: "signin__error", children: props.error })
+    ] }) }) })
+  ] });
+}
+function ShieldIcon() {
+  return /* @__PURE__ */ jsxs(
+    "svg",
+    {
+      xmlns: "http://www.w3.org/2000/svg",
+      class: "icon icon-tabler icon-tabler-shield-lock-filled",
+      width: "36",
+      height: "36",
+      viewBox: "0 0 24 24",
+      "stroke-width": "1.5",
+      stroke: "#ff4500",
+      fill: "none",
+      "stroke-linecap": "round",
+      "stroke-linejoin": "round",
+      children: [
+        /* @__PURE__ */ jsx("path", { stroke: "none", d: "M0 0h24v24H0z", fill: "none" }),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M11.998 2l.118 .007l.059 .008l.061 .013l.111 .034a.993 .993 0 0 1 .217 .112l.104 .082l.255 .218a11 11 0 0 0 7.189 2.537l.342 -.01a1 1 0 0 1 1.005 .717a13 13 0 0 1 -9.208 16.25a1 1 0 0 1 -.502 0a13 13 0 0 1 -9.209 -16.25a1 1 0 0 1 1.005 -.717a11 11 0 0 0 7.531 -2.527l.263 -.225l.096 -.075a.993 .993 0 0 1 .217 -.112l.112 -.034a.97 .97 0 0 1 .119 -.021l.115 -.007zm.002 7a2 2 0 0 0 -1.995 1.85l-.005 .15l.005 .15a2 2 0 0 0 .995 1.581v1.769l.007 .117a1 1 0 0 0 1.993 -.117l.001 -1.768a2 2 0 0 0 -1.001 -3.732z",
+            "stroke-width": "0",
+            fill: "currentColor"
+          }
+        )
+      ]
+    }
+  );
+}
+async function renderPasswordPage(req, res, props) {
+  const mainHtml = renderToString(/* @__PURE__ */ jsx(PasswordPage, { ...props }));
+  const html = `<!doctype html>
+${mainHtml}`;
+  res.setHeader("Content-Type", "text/html");
+  res.send(html);
+}
+
+// core/password.ts
+import crypto from "crypto";
+var PASSWORD_ITERATIONS = 1e4;
+var PASSWORD_HASH_LENGTH = 64;
+var PASSWORD_DIGEST = "sha256";
+async function hashPassword(password) {
+  const salt = crypto.randomBytes(16).toString("hex");
+  const hash = await generateHash(password, salt);
+  return { hash, salt };
+}
+async function verifyPassword(password, hash, salt) {
+  const generatedHash = await generateHash(password, salt);
+  return hash === generatedHash;
+}
+function generateHash(password, salt) {
+  return new Promise((resolve, reject) => {
+    crypto.pbkdf2(
+      password,
+      salt,
+      PASSWORD_ITERATIONS,
+      PASSWORD_HASH_LENGTH,
+      PASSWORD_DIGEST,
+      (err, derivedKey) => {
+        if (err) {
+          console.error("password hashing failed");
+          console.error(err);
+          reject(err);
+          return;
+        }
+        const hash = derivedKey.toString("hex");
+        resolve(hash);
+      }
+    );
+  });
+}
+
+// core/plugin.ts
+function passwordProtectPlugin(options) {
+  const protectedRoutesUserConfig = options.protectedRoutes || [];
+  const protectedRoutes = protectedRoutesUserConfig.filter((protectedRoute) => {
+    return Boolean(
+      protectedRoute.source && protectedRoute.password && protectedRoute.password.hash && protectedRoute.password.salt
+    );
+  });
+  function getProtectedRouteConfig(req) {
+    for (const protectedRoute of protectedRoutes) {
+      if (micromatch.isMatch(req.path, protectedRoute.source)) {
+        return protectedRoute;
+      }
+    }
+    return null;
+  }
+  return {
+    name: "root-password-protect",
+    configureServer: (server) => {
+      if (protectedRoutes.length === 0) {
+        return;
+      }
+      server.use(bodyParser.urlencoded({ extended: true }));
+      server.use(async (req, res, next) => {
+        const protectedRoute = getProtectedRouteConfig(req);
+        if (protectedRoute) {
+          await handleProtectedRoute(protectedRoute, req, res, next);
+          return;
+        }
+        next();
+      });
+    }
+  };
+}
+async function handleProtectedRoute(protectedRoute, req, res, next) {
+  if (req.method === "POST") {
+    if (req.get("content-type") !== "application/x-www-form-urlencoded" || !req.body || !req.body.password) {
+      res.status(400);
+      renderPasswordPage(req, res, { error: "Bad request (no password)." });
+      return;
+    }
+    const password = req.body.password;
+    const isValid2 = await verifyPassword(
+      password,
+      protectedRoute.password.hash,
+      protectedRoute.password.salt
+    );
+    if (!isValid2) {
+      renderPasswordPage(req, res, { error: "Incorrect password." });
+      return;
+    }
+    await setSessionCookie(protectedRoute, res);
+    next();
+    return;
+  }
+  const isValid = await verifySessionCookie(protectedRoute, req);
+  if (isValid) {
+    next();
+    return;
+  }
+  renderPasswordPage(req, res);
+}
+async function setSessionCookie(protectedRoute, res) {
+  const { hash, salt } = await hashPassword(protectedRoute.password.hash);
+  res.session.setItem("password_protect.hash", hash);
+  res.session.setItem("password_protect.salt", salt);
+  res.saveSession();
+}
+async function verifySessionCookie(protectedRoute, req) {
+  const hash = req.session.getItem("password_protect.hash");
+  const salt = req.session.getItem("password_protect.salt");
+  if (!hash || !salt) {
+    return false;
+  }
+  return await verifyPassword(protectedRoute.password.hash, hash, salt);
+}
+export {
+  passwordProtectPlugin
+};
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@blinkk/root-password-protect",
+  "version": "1.0.0-rc.34",
+  "author": "s@blinkk.com",
+  "license": "MIT",
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/blinkk/rootjs.git",
+    "directory": "packages/root-password-protect"
+  },
+  "files": [
+    "dist/**/*"
+  ],
+  "bin": {
+    "root-password-protect": "./bin/root-password-protect.js"
+  },
+  "type": "module",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/core.d.ts",
+      "import": "./dist/core.js"
+    },
+    "./plugin": {
+      "types": "./dist/plugin.d.ts",
+      "import": "./dist/plugin.js"
+    }
+  },
+  "dependencies": {
+    "@types/micromatch": "4.0.6",
+    "body-parser": "1.20.2",
+    "commander": "11.0.0",
+    "kleur": "4.1.5",
+    "micromatch": "4.0.5"
+  },
+  "peerDependencies": {
+    "@blinkk/root": "1.0.0-rc.34",
+    "firebase-admin": ">=11",
+    "firebase-functions": ">=4",
+    "preact": ">=10",
+    "preact-render-to-string": ">=5"
+  },
+  "devDependencies": {
+    "@types/body-parser": "1.19.3",
+    "@types/node": "20.11.25",
+    "preact": "10.19.3",
+    "preact-render-to-string": "6.3.1",
+    "tsup": "8.0.1",
+    "vite": "5.0.8",
+    "@blinkk/root": "1.0.0-rc.34"
+  },
+  "scripts": {
+    "build": "tsup-node --config=./core/tsup.config.ts",
+    "dev": "pnpm build --watch",
+    "test": "pnpm build"
+  }
+}