@c9up/warden 0.1.4 → 0.1.6

package/dist/mfa/OtpProvider.js

@@ -0,0 +1,104 @@
+/**
+ * OtpProvider — delivered one-time passcodes (email / SMS). Unlike TOTP this is
+ * a challenge/response flow: `start()` mints a code, persists it (hashed, with
+ * an expiry and an attempt budget) and hands it to a delivery channel; the user
+ * later submits it to `verify()`.
+ *
+ * Delivery is pluggable — the app supplies an email or SMS channel. The store
+ * is pluggable too, with an in-memory default mirroring the rest of warden.
+ */
+import { createHash, randomBytes, randomInt, timingSafeEqual, } from "node:crypto";
+import { WardenError } from "../errors.js";
+export class MemoryOtpChallengeStore {
+    #store = new Map();
+    async save(c) {
+        this.#store.set(c.id, c);
+    }
+    async find(id) {
+        return this.#store.get(id) ?? null;
+    }
+    async delete(id) {
+        this.#store.delete(id);
+    }
+}
+export class OtpProvider {
+    kind = "otp";
+    #channel;
+    #store;
+    #digits;
+    #ttlMs;
+    #maxAttempts;
+    constructor(config) {
+        if (!config?.channel) {
+            throw new WardenError("INVALID_CONFIG", "OtpProvider requires a delivery channel (email/SMS)");
+        }
+        this.#channel = config.channel;
+        this.#store = config.store ?? new MemoryOtpChallengeStore();
+        this.#digits = config.digits ?? 6;
+        this.#ttlMs = (config.ttlSeconds ?? 300) * 1000;
+        this.#maxAttempts = config.maxAttempts ?? 5;
+    }
+    /** Mint a code, persist the challenge, and deliver it to `recipient`. */
+    async start(recipient, nowMs = Date.now()) {
+        const code = this.#randomCode();
+        const id = randomBytes(16).toString("hex");
+        const expiresAt = nowMs + this.#ttlMs;
+        await this.#store.save({
+            id,
+            recipient,
+            hash: saltedHash(code),
+            expiresAt,
+            attempts: 0,
+        });
+        await this.#channel.send(recipient, code);
+        return { challengeId: id, expiresAt };
+    }
+    /**
+     * Verify a submitted code. Wrong codes consume an attempt; the challenge is
+     * deleted on success, on expiry, or once the attempt budget is exhausted.
+     */
+    async verify(challengeId, code, nowMs = Date.now()) {
+        const challenge = await this.#store.find(challengeId);
+        if (!challenge) {
+            return { ok: false, reason: "not_found" };
+        }
+        if (nowMs > challenge.expiresAt) {
+            await this.#store.delete(challengeId);
+            return { ok: false, reason: "expired" };
+        }
+        if (matchesStored(challenge.hash, code.replace(/\s/g, ""))) {
+            await this.#store.delete(challengeId);
+            return { ok: true };
+        }
+        const attempts = challenge.attempts + 1;
+        if (attempts >= this.#maxAttempts) {
+            await this.#store.delete(challengeId);
+            return { ok: false, reason: "too_many_attempts" };
+        }
+        await this.#store.save({ ...challenge, attempts });
+        return { ok: false, reason: "mismatch" };
+    }
+    #randomCode() {
+        const max = 10 ** this.#digits;
+        return randomInt(0, max).toString().padStart(this.#digits, "0");
+    }
+}
+function saltedHash(code) {
+    const salt = randomBytes(8);
+    const digest = createHash("sha256").update(salt).update(code).digest();
+    return `${salt.toString("hex")}$${digest.toString("hex")}`;
+}
+function matchesStored(stored, candidate) {
+    const sep = stored.indexOf("$");
+    if (sep === -1) {
+        return false;
+    }
+    const salt = Buffer.from(stored.slice(0, sep), "hex");
+    const expected = Buffer.from(stored.slice(sep + 1), "hex");
+    const actual = createHash("sha256").update(salt).update(candidate).digest();
+    if (actual.length !== expected.length) {
+        return false;
+    }
+    return timingSafeEqual(actual, expected);
+}
+//# sourceMappingURL=OtpProvider.js.map

package/dist/mfa/OtpProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OtpProvider.js","sourceRoot":"","sources":["../../src/mfa/OtpProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACN,UAAU,EACV,WAAW,EACX,SAAS,EACT,eAAe,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAwB3C,MAAM,OAAO,uBAAuB;IACnC,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,CAAe;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACpC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;CACD;AA8BD,MAAM,OAAO,WAAW;IACd,IAAI,GAAG,KAAc,CAAC;IACtB,QAAQ,CAAqB;IAC7B,MAAM,CAAoB;IAC1B,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,YAAY,CAAS;IAE9B,YAAY,MAAiB;QAC5B,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CACpB,gBAAgB,EAChB,qDAAqD,CACrD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,KAAK,CACV,SAAiB,EACjB,QAAgB,IAAI,CAAC,GAAG,EAAE;QAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,EAAE;YACF,SAAS;YACT,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;YACtB,SAAS;YACT,QAAQ,EAAE,CAAC;SACX,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACX,WAAmB,EACnB,IAAY,EACZ,QAAgB,IAAI,CAAC,GAAG,EAAE;QAE1B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,WAAW;QACV,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;QAC/B,OAAO,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;CACD;AAED,SAAS,UAAU,CAAC,IAAY;IAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,SAAiB;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC"}

package/dist/mfa/TotpProvider.d.ts

@@ -0,0 +1,52 @@
+/**
+ * TotpProvider — RFC 6238 time-based one-time passwords (HOTP/RFC 4226 under
+ * the hood). Pure TypeScript on Node's `crypto.createHmac` — no native binding
+ * and no third-party dependency: a TOTP is a single HMAC, not CPU-bound work.
+ *
+ * Compatible with Google Authenticator / 1Password / Authy by default
+ * (SHA1, 6 digits, 30s period).
+ */
+export type TotpAlgorithm = "SHA1" | "SHA256" | "SHA512";
+export interface TotpConfig {
+    /** HMAC algorithm. Default `SHA1` (authenticator-app compatible). */
+    algorithm?: TotpAlgorithm;
+    /** Number of digits in the generated code. Default `6`. */
+    digits?: number;
+    /** Time step in seconds. Default `30`. */
+    period?: number;
+    /**
+     * How many time steps before/after `now` are accepted on `verify`, to
+     * tolerate clock skew. Default `1` (i.e. ±30s with the default period).
+     */
+    window?: number;
+}
+export interface TotpEnrollment {
+    /** Base32 secret to persist against the user. */
+    secret: string;
+    /** `otpauth://` URI to render as a QR code during enrollment. */
+    uri: string;
+}
+export declare class TotpProvider {
+    #private;
+    readonly kind: "totp";
+    constructor(config?: TotpConfig);
+    /**
+     * Generate a fresh secret and the `otpauth://` provisioning URI. Persist
+     * `secret`; render `uri` as a QR code for the user to scan.
+     *
+     * @param account  Identifies the account in the authenticator (usually the
+     *                 user's email or username).
+     * @param issuer   Your app/brand name, shown as the entry label.
+     */
+    enroll(account: string, issuer: string): TotpEnrollment;
+    /** Build the `otpauth://totp/...` provisioning URI for an existing secret. */
+    uri(secret: string, account: string, issuer: string): string;
+    /** Generate the code for a given secret at a given time (ms since epoch). */
+    generate(secret: string, atMs?: number): string;
+    /**
+     * Verify a user-supplied code against the secret, accepting codes from the
+     * surrounding `window` time steps to tolerate clock skew. Constant-time.
+     */
+    verify(secret: string, code: string, atMs?: number): boolean;
+}
+//# sourceMappingURL=TotpProvider.d.ts.map

package/dist/mfa/TotpProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpProvider.d.ts","sourceRoot":"","sources":["../../src/mfa/TotpProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,UAAU;IAC1B,qEAAqE;IACrE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;CACZ;AASD,qBAAa,YAAY;;IACxB,QAAQ,CAAC,IAAI,EAAG,MAAM,CAAU;gBAGpB,MAAM,GAAE,UAAe;IAUnC;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc;IAKvD,8EAA8E;IAC9E,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAY5D,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAmB,GAAG,MAAM;IAK3D;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAmB,GAAG,OAAO;CAoCxE"}

package/dist/mfa/TotpProvider.js

@@ -0,0 +1,103 @@
+/**
+ * TotpProvider — RFC 6238 time-based one-time passwords (HOTP/RFC 4226 under
+ * the hood). Pure TypeScript on Node's `crypto.createHmac` — no native binding
+ * and no third-party dependency: a TOTP is a single HMAC, not CPU-bound work.
+ *
+ * Compatible with Google Authenticator / 1Password / Authy by default
+ * (SHA1, 6 digits, 30s period).
+ */
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { WardenError } from "../errors.js";
+import { base32Decode, base32Encode } from "./base32.js";
+const DEFAULTS = {
+    algorithm: "SHA1",
+    digits: 6,
+    period: 30,
+    window: 1,
+};
+export class TotpProvider {
+    kind = "totp";
+    #cfg;
+    constructor(config = {}) {
+        this.#cfg = { ...DEFAULTS, ...config };
+        if (this.#cfg.digits < 6 || this.#cfg.digits > 8) {
+            throw new WardenError("INVALID_CONFIG", `TOTP digits must be 6-8, got ${this.#cfg.digits}`);
+        }
+    }
+    /**
+     * Generate a fresh secret and the `otpauth://` provisioning URI. Persist
+     * `secret`; render `uri` as a QR code for the user to scan.
+     *
+     * @param account  Identifies the account in the authenticator (usually the
+     *                 user's email or username).
+     * @param issuer   Your app/brand name, shown as the entry label.
+     */
+    enroll(account, issuer) {
+        const secret = base32Encode(randomBytes(20));
+        return { secret, uri: this.uri(secret, account, issuer) };
+    }
+    /** Build the `otpauth://totp/...` provisioning URI for an existing secret. */
+    uri(secret, account, issuer) {
+        const label = encodeURIComponent(`${issuer}:${account}`);
+        const params = new URLSearchParams({
+            secret,
+            issuer,
+            algorithm: this.#cfg.algorithm,
+            digits: String(this.#cfg.digits),
+            period: String(this.#cfg.period),
+        });
+        return `otpauth://totp/${label}?${params.toString()}`;
+    }
+    /** Generate the code for a given secret at a given time (ms since epoch). */
+    generate(secret, atMs = Date.now()) {
+        const counter = Math.floor(atMs / 1000 / this.#cfg.period);
+        return this.#hotp(base32Decode(secret), counter);
+    }
+    /**
+     * Verify a user-supplied code against the secret, accepting codes from the
+     * surrounding `window` time steps to tolerate clock skew. Constant-time.
+     */
+    verify(secret, code, atMs = Date.now()) {
+        const normalized = code.replace(/\s/g, "");
+        if (normalized.length !== this.#cfg.digits) {
+            return false;
+        }
+        const key = base32Decode(secret);
+        const current = Math.floor(atMs / 1000 / this.#cfg.period);
+        for (let offset = -this.#cfg.window; offset <= this.#cfg.window; offset++) {
+            if (constantTimeEqual(this.#hotp(key, current + offset), normalized)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /** RFC 4226 HOTP: HMAC over the 8-byte counter, dynamically truncated. */
+    #hotp(key, counter) {
+        const buf = Buffer.alloc(8);
+        // 64-bit big-endian counter. Codes stay valid well past year 2^53,
+        // so splitting hi/lo at 2^32 is safe and avoids BigInt overhead.
+        buf.writeUInt32BE(Math.floor(counter / 2 ** 32), 0);
+        buf.writeUInt32BE(counter >>> 0, 4);
+        const hmac = createHmac(this.#cfg.algorithm.toLowerCase(), Buffer.from(key))
+            .update(buf)
+            .digest();
+        const off = hmac[hmac.length - 1] & 0xf;
+        const bin = ((hmac[off] & 0x7f) << 24) |
+            ((hmac[off + 1] & 0xff) << 16) |
+            ((hmac[off + 2] & 0xff) << 8) |
+            (hmac[off + 3] & 0xff);
+        return (bin % 10 ** this.#cfg.digits)
+            .toString()
+            .padStart(this.#cfg.digits, "0");
+    }
+}
+/** Length-safe constant-time string compare (avoids early-exit timing leaks). */
+function constantTimeEqual(a, b) {
+    const ba = Buffer.from(a);
+    const bb = Buffer.from(b);
+    if (ba.length !== bb.length) {
+        return false;
+    }
+    return timingSafeEqual(ba, bb);
+}
+//# sourceMappingURL=TotpProvider.js.map

package/dist/mfa/TotpProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpProvider.js","sourceRoot":"","sources":["../../src/mfa/TotpProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAyBzD,MAAM,QAAQ,GAAG;IAChB,SAAS,EAAE,MAAuB;IAClC,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,OAAO,YAAY;IACf,IAAI,GAAG,MAAe,CAAC;IACvB,IAAI,CAAuB;IAEpC,YAAY,SAAqB,EAAE;QAClC,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,WAAW,CACpB,gBAAgB,EAChB,gCAAgC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAClD,CAAC;QACH,CAAC;IACF,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAe,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,MAAc;QAClD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YAClC,MAAM;YACN,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,kBAAkB,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,MAAc,EAAE,OAAe,IAAI,CAAC,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,IAAI,CAAC,GAAG,EAAE;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YAC3E,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,GAAe,EAAE,OAAe;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,mEAAmE;QACnE,iEAAiE;QACjE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,aAAa,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC1E,MAAM,CAAC,GAAG,CAAC;aACX,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QACxC,MAAM,GAAG,GACR,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACnC,QAAQ,EAAE;aACV,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;CACD;AAED,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC"}

package/dist/mfa/WebauthnProvider.d.ts

@@ -0,0 +1,175 @@
+/**
+ * WebauthnProvider — passkeys / FIDO2 via WebAuthn, implemented in-house on
+ * `node:crypto` (see `webauthn-codec.ts`). No third-party dependency: warden
+ * keeps its zero-runtime-dependency footprint.
+ *
+ * The browser side produces the standard `PublicKeyCredential` JSON; this
+ * provider builds the ceremony options and verifies the responses server-side.
+ *
+ * Attestation statements are NOT verified — this is a deliberate
+ * trust-on-registration posture (request `attestation: "none"` on the client),
+ * which is what the vast majority of relying parties use for 2FA / passkeys.
+ * Full attestation (packed/tpm/apple/MDS cert-chain validation) can be layered
+ * on later without changing this API.
+ *
+ * Both the per-ceremony challenge and the persisted passkeys go through
+ * pluggable stores (in-memory defaults), mirroring the rest of warden.
+ */
+/** Browser → server payload from `navigator.credentials.create()`. */
+export interface RegistrationResponseJSON {
+    id: string;
+    rawId: string;
+    type: "public-key";
+    response: {
+        clientDataJSON: string;
+        attestationObject: string;
+        transports?: string[];
+    };
+}
+/** Browser → server payload from `navigator.credentials.get()`. */
+export interface AuthenticationResponseJSON {
+    id: string;
+    rawId: string;
+    type: "public-key";
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle?: string;
+    };
+}
+export interface RegistrationOptionsJSON {
+    challenge: string;
+    rp: {
+        name: string;
+        id: string;
+    };
+    user: {
+        id: string;
+        name: string;
+        displayName: string;
+    };
+    pubKeyCredParams: Array<{
+        type: "public-key";
+        alg: number;
+    }>;
+    timeout: number;
+    attestation: "none";
+    excludeCredentials: Array<{
+        id: string;
+        type: "public-key";
+        transports?: string[];
+    }>;
+    authenticatorSelection: {
+        residentKey: string;
+        userVerification: string;
+    };
+}
+export interface AuthenticationOptionsJSON {
+    challenge: string;
+    timeout: number;
+    rpId: string;
+    userVerification: string;
+    allowCredentials?: Array<{
+        id: string;
+        type: "public-key";
+        transports?: string[];
+    }>;
+}
+/** Transient per-ceremony challenge storage. */
+export interface WebauthnChallengeStore {
+    save(state: string, challenge: string): Promise<void>;
+    /** Return the challenge for `state` and remove it (single-use). */
+    take(state: string): Promise<string | null>;
+}
+/** A registered passkey, persisted between ceremonies. */
+export interface StoredPasskey {
+    /** Base64URL credential id. */
+    id: string;
+    userId: string;
+    /** Base64URL of the raw COSE public-key bytes. */
+    publicKey: string;
+    /** COSE algorithm id (e.g. -7 for ES256). */
+    alg: number;
+    counter: number;
+    transports?: string[];
+}
+export interface WebauthnCredentialStore {
+    save(passkey: StoredPasskey): Promise<void>;
+    findById(id: string): Promise<StoredPasskey | null>;
+    findByUser(userId: string): Promise<StoredPasskey[]>;
+    updateCounter(id: string, counter: number): Promise<void>;
+}
+export declare class MemoryWebauthnChallengeStore implements WebauthnChallengeStore {
+    #private;
+    save(state: string, challenge: string): Promise<void>;
+    take(state: string): Promise<string | null>;
+}
+export declare class MemoryWebauthnCredentialStore implements WebauthnCredentialStore {
+    #private;
+    save(passkey: StoredPasskey): Promise<void>;
+    findById(id: string): Promise<StoredPasskey | null>;
+    findByUser(userId: string): Promise<StoredPasskey[]>;
+    updateCounter(id: string, counter: number): Promise<void>;
+}
+export interface WebauthnConfig {
+    /** Human-readable relying-party name (your app). */
+    rpName: string;
+    /** Relying-party ID — your registrable domain (e.g. `fluveo.ch`). */
+    rpID: string;
+    /** Expected origin(s) of the ceremony (e.g. `https://fluveo.ch`). */
+    origin: string | string[];
+    challengeStore?: WebauthnChallengeStore;
+    credentialStore?: WebauthnCredentialStore;
+    /** Ceremony timeout in ms. Default `60000`. */
+    timeout?: number;
+    /**
+     * COSE algorithms offered to the authenticator, in preference order.
+     * Default ES256, RS256, EdDSA.
+     */
+    supportedAlgorithms?: number[];
+}
+export interface WebauthnUser {
+    id: string;
+    name: string;
+    displayName?: string;
+}
+export declare class WebauthnProvider {
+    #private;
+    readonly kind: "webauthn";
+    constructor(config: WebauthnConfig);
+    /**
+     * Begin passkey registration. Returns the options to hand to the browser,
+     * plus an opaque `state` token the caller stashes in the session and passes
+     * back to `finishRegistration()`.
+     */
+    startRegistration(user: WebauthnUser): Promise<{
+        options: RegistrationOptionsJSON;
+        state: string;
+    }>;
+    /**
+     * Complete registration: validate client data + authenticator data against
+     * the stored challenge and persist the new passkey on success.
+     */
+    finishRegistration(state: string, userId: string, response: RegistrationResponseJSON): Promise<{
+        verified: boolean;
+    }>;
+    /**
+     * Begin authentication. Pass `userId` to restrict to that user's passkeys
+     * (2FA step); omit it for a usernameless / discoverable-credential sign-in.
+     */
+    startAuthentication(userId?: string): Promise<{
+        options: AuthenticationOptionsJSON;
+        state: string;
+    }>;
+    /**
+     * Complete authentication: look up the asserted credential, verify the
+     * signature against the stored challenge, and advance the replay counter.
+     * Returns the owning `userId` on success.
+     */
+    finishAuthentication(state: string, response: AuthenticationResponseJSON): Promise<{
+        verified: boolean;
+        userId?: string;
+    }>;
+}
+//# sourceMappingURL=WebauthnProvider.d.ts.map

package/dist/mfa/WebauthnProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebauthnProvider.d.ts","sourceRoot":"","sources":["../../src/mfa/WebauthnProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAeH,sEAAsE;AACtE,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE;QACT,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,WAAW,0BAA0B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE;QACT,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACF;AAED,MAAM,WAAW,uBAAuB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,gBAAgB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,KAAK,CAAC;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,YAAY,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC,CAAC;IACH,sBAAsB,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,yBAAyB;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,KAAK,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,YAAY,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC,CAAC;CACH;AAED,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACtC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,mEAAmE;IACnE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC5C;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC7B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACpD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAED,qBAAa,4BAA6B,YAAW,sBAAsB;;IAEpE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGrD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAKjD;AAED,qBAAa,6BAA8B,YAAW,uBAAuB;;IAEtE,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAG3C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAGnD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAGpD,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAM/D;AAED,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,qBAAa,gBAAgB;;IAC5B,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAU;gBASxB,MAAM,EAAE,cAAc;IAoBlC;;;;OAIG;IACG,iBAAiB,CACtB,IAAI,EAAE,YAAY,GAChB,OAAO,CAAC;QAAE,OAAO,EAAE,uBAAuB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAgC/D;;;OAGG;IACG,kBAAkB,CACvB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,wBAAwB,GAChC,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IA+CjC;;;OAGG;IACG,mBAAmB,CACxB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,yBAAyB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBjE;;;;OAIG;IACG,oBAAoB,CACzB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,0BAA0B,GAClC,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAiFlD"}