@booking-guvanch/passport 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/lib/constants/passport.constant.d.ts +1 -0
- package/dist/lib/constants/passport.constant.js +4 -0
- package/dist/lib/index.d.ts +3 -0
- package/dist/lib/index.js +19 -0
- package/dist/lib/interfaces/index.d.ts +3 -0
- package/dist/lib/interfaces/index.js +19 -0
- package/dist/lib/interfaces/passport-async-options.d.ts +6 -0
- package/dist/lib/interfaces/passport-async-options.js +2 -0
- package/dist/lib/interfaces/passport-options.d.ts +4 -0
- package/dist/lib/interfaces/passport-options.js +2 -0
- package/dist/lib/interfaces/token.interface.d.ts +8 -0
- package/dist/lib/interfaces/token.interface.js +2 -0
- package/dist/lib/passport.module.d.ts +6 -0
- package/dist/lib/passport.module.js +36 -0
- package/dist/lib/passport.providers.d.ts +4 -0
- package/dist/lib/passport.providers.js +25 -0
- package/dist/lib/passport.service.d.ts +19 -0
- package/dist/lib/passport.service.js +91 -0
- package/dist/lib/utils/base64.d.ts +2 -0
- package/dist/lib/utils/base64.js +15 -0
- package/dist/lib/utils/crypto.d.ts +1 -0
- package/dist/lib/utils/crypto.js +16 -0
- package/dist/lib/utils/index.d.ts +2 -0
- package/dist/lib/utils/index.js +18 -0
- package/package.json +33 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const PASSPORT_OPTION: unique symbol;
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./passport.module"), exports);
|
|
18
|
+
__exportStar(require("./passport.service"), exports);
|
|
19
|
+
__exportStar(require("./interfaces"), exports);
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./passport-options"), exports);
|
|
18
|
+
__exportStar(require("./passport-async-options"), exports);
|
|
19
|
+
__exportStar(require("./token.interface"), exports);
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import { ModuleMetadata, FactoryProvider } from "@nestjs/common";
|
|
2
|
+
import { PassportOptions } from "./passport-options";
|
|
3
|
+
export interface PassportAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
|
|
4
|
+
useFactory: (...args: any[]) => Promise<PassportOptions> | PassportOptions;
|
|
5
|
+
inject?: FactoryProvider['inject'];
|
|
6
|
+
}
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import { DynamicModule } from '@nestjs/common';
|
|
2
|
+
import { PassportAsyncOptions, PassportOptions } from "./interfaces";
|
|
3
|
+
export declare class PassportModule {
|
|
4
|
+
static register(options: PassportOptions): DynamicModule;
|
|
5
|
+
static registerAsync(options: PassportAsyncOptions): DynamicModule;
|
|
6
|
+
}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var PassportModule_1;
|
|
9
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
10
|
+
exports.PassportModule = void 0;
|
|
11
|
+
const passport_constant_1 = require("./constants/passport.constant");
|
|
12
|
+
const common_1 = require("@nestjs/common");
|
|
13
|
+
const passport_providers_1 = require("./passport.providers");
|
|
14
|
+
const passport_service_1 = require("./passport.service");
|
|
15
|
+
let PassportModule = PassportModule_1 = class PassportModule {
|
|
16
|
+
static register(options) {
|
|
17
|
+
return {
|
|
18
|
+
module: PassportModule_1,
|
|
19
|
+
providers: [(0, passport_providers_1.createPassportProvider)(options), passport_service_1.PassportService],
|
|
20
|
+
exports: [passport_constant_1.PASSPORT_OPTION, passport_service_1.PassportService],
|
|
21
|
+
};
|
|
22
|
+
}
|
|
23
|
+
static registerAsync(options) {
|
|
24
|
+
return {
|
|
25
|
+
module: PassportModule_1,
|
|
26
|
+
providers: [(0, passport_providers_1.createPassportAsyncProvider)(options), passport_service_1.PassportService],
|
|
27
|
+
exports: [passport_constant_1.PASSPORT_OPTION, passport_service_1.PassportService],
|
|
28
|
+
imports: options.imports || [],
|
|
29
|
+
};
|
|
30
|
+
}
|
|
31
|
+
};
|
|
32
|
+
exports.PassportModule = PassportModule;
|
|
33
|
+
exports.PassportModule = PassportModule = PassportModule_1 = __decorate([
|
|
34
|
+
(0, common_1.Global)(),
|
|
35
|
+
(0, common_1.Module)({})
|
|
36
|
+
], PassportModule);
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import { PassportAsyncOptions, PassportOptions } from "./interfaces";
|
|
2
|
+
import { Provider } from "@nestjs/common";
|
|
3
|
+
export declare const createPassportProvider: (options: PassportOptions) => Provider;
|
|
4
|
+
export declare const createPassportAsyncProvider: (options: PassportAsyncOptions) => Provider;
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.createPassportAsyncProvider = exports.createPassportProvider = void 0;
|
|
4
|
+
const passport_constant_1 = require("./constants/passport.constant");
|
|
5
|
+
const createPassportProvider = (options) => {
|
|
6
|
+
return {
|
|
7
|
+
provide: passport_constant_1.PASSPORT_OPTION,
|
|
8
|
+
useValue: Object.freeze({ ...options }),
|
|
9
|
+
};
|
|
10
|
+
};
|
|
11
|
+
exports.createPassportProvider = createPassportProvider;
|
|
12
|
+
const createPassportAsyncProvider = (options) => {
|
|
13
|
+
return {
|
|
14
|
+
provide: passport_constant_1.PASSPORT_OPTION,
|
|
15
|
+
useFactory: async (...args) => {
|
|
16
|
+
const config = await options.useFactory(...args);
|
|
17
|
+
if (!config || typeof config.secretKey !== 'string') {
|
|
18
|
+
throw new Error('Passport configuration is required');
|
|
19
|
+
}
|
|
20
|
+
return Object.freeze({ ...config });
|
|
21
|
+
},
|
|
22
|
+
inject: options.inject || [],
|
|
23
|
+
};
|
|
24
|
+
};
|
|
25
|
+
exports.createPassportAsyncProvider = createPassportAsyncProvider;
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import { PassportOptions } from './interfaces';
|
|
2
|
+
export declare class PassportService {
|
|
3
|
+
private readonly secretKey;
|
|
4
|
+
private readonly ttl;
|
|
5
|
+
constructor(options: PassportOptions);
|
|
6
|
+
private readonly HMAC_DOMAIN;
|
|
7
|
+
private readonly INTERNAL_SEP;
|
|
8
|
+
private now;
|
|
9
|
+
private serialize;
|
|
10
|
+
private computeHmac;
|
|
11
|
+
generateToken(userId: string, ttl: number): string;
|
|
12
|
+
verifyToken(token: string): {
|
|
13
|
+
valid: boolean;
|
|
14
|
+
reason: string;
|
|
15
|
+
} | {
|
|
16
|
+
valid: boolean;
|
|
17
|
+
reason?: undefined;
|
|
18
|
+
};
|
|
19
|
+
}
|
|
@@ -0,0 +1,91 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
|
+
};
|
|
14
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
15
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
16
|
+
};
|
|
17
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
18
|
+
exports.PassportService = void 0;
|
|
19
|
+
const crypto_1 = __importDefault(require("crypto"));
|
|
20
|
+
const utils_1 = require("./utils");
|
|
21
|
+
const common_1 = require("@nestjs/common");
|
|
22
|
+
const passport_constant_1 = require("./constants/passport.constant");
|
|
23
|
+
let PassportService = class PassportService {
|
|
24
|
+
secretKey;
|
|
25
|
+
ttl;
|
|
26
|
+
constructor(options) {
|
|
27
|
+
this.secretKey = options.secretKey;
|
|
28
|
+
this.ttl = options.ttl;
|
|
29
|
+
}
|
|
30
|
+
HMAC_DOMAIN = 'passportTokenAuth/v1';
|
|
31
|
+
INTERNAL_SEP = '|';
|
|
32
|
+
now() {
|
|
33
|
+
return Math.floor(Date.now() / 1000);
|
|
34
|
+
}
|
|
35
|
+
serialize(user, iat, exp) {
|
|
36
|
+
return [this.HMAC_DOMAIN, user, iat, exp].join(this.INTERNAL_SEP);
|
|
37
|
+
}
|
|
38
|
+
computeHmac(data) {
|
|
39
|
+
return crypto_1.default.createHmac('sha256', this.secretKey).update(data).digest('hex');
|
|
40
|
+
}
|
|
41
|
+
generateToken(userId, ttl) {
|
|
42
|
+
const iat = this.now();
|
|
43
|
+
const exp = iat + ttl;
|
|
44
|
+
const userPart = (0, utils_1.base64UrlEncode)(userId);
|
|
45
|
+
const iatPart = (0, utils_1.base64UrlEncode)(iat.toString());
|
|
46
|
+
const expPart = (0, utils_1.base64UrlEncode)(exp.toString());
|
|
47
|
+
const data = this.serialize(userPart, iatPart, expPart);
|
|
48
|
+
const hmac = this.computeHmac(data);
|
|
49
|
+
return `${userPart}.${iatPart}.${expPart}.${hmac}`;
|
|
50
|
+
}
|
|
51
|
+
verifyToken(token) {
|
|
52
|
+
const parts = token.split('.');
|
|
53
|
+
if (parts.length !== 4) {
|
|
54
|
+
return {
|
|
55
|
+
valid: false,
|
|
56
|
+
reason: 'Invalid token format',
|
|
57
|
+
};
|
|
58
|
+
}
|
|
59
|
+
const [userPart, iatPart, expPart, hmac] = parts;
|
|
60
|
+
const data = this.serialize(userPart, iatPart, expPart);
|
|
61
|
+
const computedHmac = this.computeHmac(data);
|
|
62
|
+
const isValid = (0, utils_1.constantTimeEquals)(hmac, computedHmac);
|
|
63
|
+
if (!isValid) {
|
|
64
|
+
return {
|
|
65
|
+
valid: false,
|
|
66
|
+
reason: 'Invalid token signature',
|
|
67
|
+
};
|
|
68
|
+
}
|
|
69
|
+
if (!Number.isFinite(Number((0, utils_1.base64UrlDecode)(expPart)))) {
|
|
70
|
+
return {
|
|
71
|
+
valid: false,
|
|
72
|
+
reason: 'Invalid token expiration',
|
|
73
|
+
};
|
|
74
|
+
}
|
|
75
|
+
if (Number((0, utils_1.base64UrlDecode)(iatPart)) > this.now() || Number((0, utils_1.base64UrlDecode)(expPart)) < this.now()) {
|
|
76
|
+
return {
|
|
77
|
+
valid: false,
|
|
78
|
+
reason: 'Token expired',
|
|
79
|
+
};
|
|
80
|
+
}
|
|
81
|
+
return {
|
|
82
|
+
valid: true,
|
|
83
|
+
};
|
|
84
|
+
}
|
|
85
|
+
};
|
|
86
|
+
exports.PassportService = PassportService;
|
|
87
|
+
exports.PassportService = PassportService = __decorate([
|
|
88
|
+
(0, common_1.Injectable)(),
|
|
89
|
+
__param(0, (0, common_1.Inject)(passport_constant_1.PASSPORT_OPTION)),
|
|
90
|
+
__metadata("design:paramtypes", [Object])
|
|
91
|
+
], PassportService);
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.base64UrlEncode = base64UrlEncode;
|
|
4
|
+
exports.base64UrlDecode = base64UrlDecode;
|
|
5
|
+
function base64UrlEncode(buf) {
|
|
6
|
+
const str = typeof buf === 'string' ? Buffer.from(buf) : buf;
|
|
7
|
+
return str.toString('base64').replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
|
|
8
|
+
}
|
|
9
|
+
function base64UrlDecode(str) {
|
|
10
|
+
let decoded = str.replace(/-/g, '+').replace(/_/g, '/');
|
|
11
|
+
while (decoded.length % 4) {
|
|
12
|
+
decoded += '=';
|
|
13
|
+
}
|
|
14
|
+
return Buffer.from(decoded, 'base64').toString('utf-8');
|
|
15
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const constantTimeEquals: (a: string, b: string) => boolean;
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.constantTimeEquals = void 0;
|
|
7
|
+
const crypto_1 = __importDefault(require("crypto"));
|
|
8
|
+
const constantTimeEquals = (a, b) => {
|
|
9
|
+
const bufA = Buffer.from(a);
|
|
10
|
+
const bufB = Buffer.from(b);
|
|
11
|
+
if (bufA.length !== bufB.length) {
|
|
12
|
+
return false;
|
|
13
|
+
}
|
|
14
|
+
return crypto_1.default.timingSafeEqual(bufA, bufB);
|
|
15
|
+
};
|
|
16
|
+
exports.constantTimeEquals = constantTimeEquals;
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./base64"), exports);
|
|
18
|
+
__exportStar(require("./crypto"), exports);
|
package/package.json
ADDED
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@booking-guvanch/passport",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "",
|
|
5
|
+
"main": "dist/src/lib/index.js",
|
|
6
|
+
"types": "dist/src/lib/index.d.ts",
|
|
7
|
+
"files": [
|
|
8
|
+
"dist"
|
|
9
|
+
],
|
|
10
|
+
"publishConfig": {
|
|
11
|
+
"access": "public"
|
|
12
|
+
},
|
|
13
|
+
"scripts": {
|
|
14
|
+
"build": "tsc -p tsconfig.build.json",
|
|
15
|
+
"format": "prettier --write \"src/**/*.ts\""
|
|
16
|
+
},
|
|
17
|
+
"keywords": [],
|
|
18
|
+
"author": "",
|
|
19
|
+
"license": "ISC",
|
|
20
|
+
"type": "commonjs",
|
|
21
|
+
"devDependencies": {
|
|
22
|
+
"@booking-guvanch/core": "^1.0.3",
|
|
23
|
+
"@types/node": "^25.5.0",
|
|
24
|
+
"prettier": "^3.8.1",
|
|
25
|
+
"typescript": "^6.0.2"
|
|
26
|
+
},
|
|
27
|
+
"dependencies": {
|
|
28
|
+
"@nestjs/common": "^11.1.17",
|
|
29
|
+
"@nestjs/core": "^11.1.17",
|
|
30
|
+
"reflect-metadata": "^0.2.2",
|
|
31
|
+
"rxjs": "^7.8.2"
|
|
32
|
+
}
|
|
33
|
+
}
|