@cocreate/authenticate 1.10.2 → 1.12.1

package/.github/workflows/automated.yml

@@ -1,8 +1,10 @@
 name: Automated Workflow
+
 on:
   push:
     branches:
       - master
+
 jobs:
   about:
     runs-on: ubuntu-latest
@@ -18,52 +20,37 @@ jobs:
         with:
           direction: overwrite-github
           githubToken: "${{ secrets.GITHUB }}"
+
   release:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/checkout@v4
         with:
-          node-version: 14
-      - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@v3
-        id: semantic
+          fetch-depth: 0 # Required so semantic-release can trace git tags/history
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          extra_plugins: |
-            @semantic-release/changelog
+          node-version: 22
+
+      - name: Install Semantic Release & Plugins
+        # Installs semantic-release and its plugins on the runner
+        run: |
+          npm install -g semantic-release \
+            @semantic-release/changelog \
+            @semantic-release/npm \
+            @semantic-release/github \
             @semantic-release/git
-            @semantic-release/github
+
+      - name: Run Semantic Release (Native)
+        id: semantic
+        # This will automatically pick up your export default config file in the repository root
+        run: npx semantic-release
         env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB }}"
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
           NPM_TOKEN: "${{ secrets.NPM_TOKEN }}"
+
     outputs:
       new_release_published: "${{ steps.semantic.outputs.new_release_published }}"
-      new_release_version: "${{ steps.semantic.outputs.new_release_version }}"
-  upload:
-    runs-on: ubuntu-latest
-    needs: release
-    if: needs.release.outputs.new_release_published == 'true'
-    env:
-      VERSION: "${{ needs.release.outputs.new_release_version }}"
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: 16
-      - name: Set npm registry auth
-        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-      - name: Install dependencies
-        run: yarn install
-      
-      - name: Set Environment Variables
-        run: |
-          echo "organization_id=${{ secrets.COCREATE_ORGANIZATION_ID }}" >> $GITHUB_ENV
-          echo "key=${{ secrets.COCREATE_KEY }}" >> $GITHUB_ENV
-          echo "host=${{ secrets.COCREATE_HOST }}" >> $GITHUB_ENV
-      - name: CoCreate Upload
-        run: coc upload
-
+      new_release_version: "${{ steps.semantic.outputs.new_release_version }}"

package/CHANGELOG.md

@@ -1,3 +1,31 @@
+## [1.12.1](https://github.com/CoCreate-app/CoCreate-authenticate/compare/v1.12.0...v1.12.1) (2026-07-17)
+
+
+### Bug Fixes
+
+* bump dependencies ([45aac1d](https://github.com/CoCreate-app/CoCreate-authenticate/commit/45aac1d37a9afb021ff4fb2556d41fa608769f1b))
+
+# [1.12.0](https://github.com/CoCreate-app/CoCreate-authenticate/compare/v1.11.0...v1.12.0) (2026-07-17)
+
+
+### Features
+
+* update automated workflow and release configuration for improved semantic release handling ([27e796c](https://github.com/CoCreate-app/CoCreate-authenticate/commit/27e796c89a53e9efeb708e736ef003b16aa5df9e))
+
+# [1.11.0](https://github.com/CoCreate-app/CoCreate-authenticate/compare/v1.10.2...v1.11.0) (2026-07-14)
+
+
+### Bug Fixes
+
+* removed post install ([5fd376c](https://github.com/CoCreate-app/CoCreate-authenticate/commit/5fd376cdfe83f0902c3e34c962ac7b45713a6bea))
+* semantic version handling. Reorganize .gitignore for improved clarity and structure ([142646c](https://github.com/CoCreate-app/CoCreate-authenticate/commit/142646cf3d25491af4113c98f51361a71be72193))
+* update module export to ES6 syntax in release.config.js ([ed8bcac](https://github.com/CoCreate-app/CoCreate-authenticate/commit/ed8bcac530a19268a9259babcf4cd975c301b1cd))
+
+
+### Features
+
+* add ESM support and improve key pair management functions ([2418adb](https://github.com/CoCreate-app/CoCreate-authenticate/commit/2418adba54911236be478783b3b965e4cfcf9e98))
+
 ## [1.10.2](https://github.com/CoCreate-app/CoCreate-authenticate/compare/v1.10.1...v1.10.2) (2025-05-01)
 
 

package/package.json

@@ -1,18 +1,10 @@
 {
   "name": "@cocreate/authenticate",
-  "version": "1.10.2",
+  "version": "1.12.1",
   "description": "A simple authenticate component in vanilla javascript. Easily configured using HTML5 data-attributes and/or JavaScript API.",
   "keywords": [
     "authenticate",
-    "cocreate",
-    "low-code-framework",
-    "no-code-framework",
-    "cocreatejs",
-    "cocreatejs-component",
-    "cocreate-framework",
-    "no-code",
     "low-code",
-    "collaborative-framework",
     "realtime",
     "realtime-framework",
     "collaboration",
@@ -21,9 +13,8 @@
     "javascript-framework"
   ],
   "scripts": {
-    "start": "npx webpack --config webpack.config.js --watch",
-    "build": "NODE_ENV=production npx webpack --config webpack.config.js",
-    "postinstall": "node -e \"const { execSync } = require('child_process'); try { execSync('coc --version', { stdio: 'ignore' }); } catch (error) { try { execSync('npm install -g @cocreate/cli', { stdio: 'inherit' }); console.log('Installed \"@cocreate/cli\" globally.'); } catch (error) { console.error('Failed to install \"@cocreate/cli\" globally:', error); } }\""
+    "start": "webpack --config webpack.config.js --watch",
+    "build": "NODE_ENV=production webpack --config webpack.config.js"
   },
   "publishConfig": {
     "access": "public"
@@ -37,6 +28,7 @@
   "bugs": {
     "url": "https://github.com/CoCreate-app/CoCreate-authenticate/issues"
   },
+  "type": "module",
   "main": "./src/index.js",
   "homepage": "https://cocreate.app/docs/authenticate",
   "dependencies": {

package/release.config.js

@@ -1,4 +1,4 @@
-module.exports = {
+export default {
   dryRun: false,
   branches: ["master"],
   plugins: [
@@ -10,12 +10,20 @@ module.exports = {
         changelogFile: "CHANGELOG.md",
       },
     ],
-    "@semantic-release/npm",
-    "@semantic-release/github",
+    "@semantic-release/npm", 
     [
-      "@semantic-release/git",
+      "@semantic-release/github", 
       {
+        successComment: false,
+        failTitle: false,
+      },
+    ],
+    [
+      "@semantic-release/git", 
+      {
+        // Only stage and commit the changelog and package.json
         assets: ["CHANGELOG.md", "package.json"],
+        message: "chore(release): ${nextRelease.version} [skip ci]",
       },
     ],
   ],

package/src/index.js

@@ -1,86 +1,104 @@
-const crypto = require('crypto');
-const jwt = require('jsonwebtoken');
-
-// Configuration
+/********************************************************************************
+ * Copyright (C) 2023 CoCreate and Contributors.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published
+ * by the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ ********************************************************************************/
+
+// Commercial Licensing Information:
+// For commercial use of this software without the copyleft provisions of the AGPLv3,
+// you must obtain a commercial license from CoCreate LLC.
+// For details, visit <https://cocreate.app/licenses/> or contact us at sales@cocreate.app.
+
+import crypto from 'crypto';
+import jwt from 'jsonwebtoken';
+import crud from '@cocreate/crud-server';
+
+// ==========================================
+// Module-Level Sandbox State (ESM Singleton Container)
+// ==========================================
 const tokenExpiration = 60; // Token expiration in minutes
-
-// Array to store key pairs
 const keyPairs = new Map();
-
-// Map to store authenticated user payload and tokens
 const sessions = new Map();
 
-class CoCreateAuthenticate {
-    constructor(crud) {
-        this.wsManager = crud.wsManager
-        this.crud = crud
-    }
-
-    // Create new RSA key pair
-    createKeyPair() {
-        const { privateKey, publicKey } = crypto.generateKeyPairSync('rsa', {
-            modulusLength: 2048,
-        });
-
-        let created = new Date(new Date().toISOString()).getTime()
-        const keyPair = {
-            privateKey,
-            publicKey,
-            created,
-            expires: created + tokenExpiration * 60 * 1000, // Convert minutes to milliseconds
-        };
-
-        keyPairs.set(keyPair._id, keyPair);
-
-        // crud.send({
-        //     method: 'object.create',
-        //     array: 'keys',
-        //     object: {
-        //         ...keyPair,
-        //     },
-        //     organization_id: process.env.organization_id,
-        // });
-
-        return keyPair;
-    }
+/**
+ * Generates a new RSA key pair dynamically and tracks its expiration lifecycle.
+ * @returns {Object} Newly created key pair configuration
+ */
+function createKeyPair() {
+    const { privateKey, publicKey } = crypto.generateKeyPairSync('rsa', {
+        modulusLength: 2048,
+    });
+
+    const created = new Date(new Date().toISOString()).getTime();
+    const keyPair = {
+        _id: crypto.randomUUID ? crypto.randomUUID() : Math.random().toString(36).substring(2),
+        privateKey,
+        publicKey,
+        created,
+        expires: created + tokenExpiration * 60 * 1000,
+    };
+
+    keyPairs.set(keyPair._id, keyPair);
+    return keyPair;
+}
 
-    // Delete new RSA key pair
-    deleteKeyPair(keyPair) {
-        keyPairs.delete(keyPair._id)
-        // crud.send({
-        //     method: 'object.delete',
-        //     array: 'keys',
-        //     object: {
-        //         _id: keyPair._id,
-        //         type: 'RSA'
-        //     },
-        //     organization_id: process.env.organization_id,
-        // });
+/**
+ * Deletes an expired or revoked RSA key pair from local tracking.
+ * @param {Object} keyPair - The target key pair to remove
+ */
+function deleteKeyPair(keyPair) {
+    if (keyPair && keyPair._id) {
+        keyPairs.delete(keyPair._id);
     }
+}
 
-    // Function to sign a new token using the newest keyPair
-    encodeToken(organization_id, user_id, clientId, host) {
-        let keyPair = null
-        const currentTime = new Date(new Date().toISOString()).getTime();
-        for (let [key, value] of keyPairs) {
-            if (currentTime > value.expires) {
-                this.deleteKeyPair(value);
-            } else {
-                keyPair = value
-            }
-        }
-
-        if (!keyPair) {
-            keyPair = this.createKeyPair();
+/**
+ * Creates and signs a new token utilizing the latest available RSA key pair.
+ * Saves session markers back to storage and registers client tracking nodes.
+ */
+function encodeToken(organization_id, user_id, clientId, host) {
+    let keyPair = null;
+    const currentTime = new Date(new Date().toISOString()).getTime();
+    
+    for (let [key, value] of keyPairs) {
+        if (currentTime > value.expires) {
+            deleteKeyPair(value);
+        } else {
+            keyPair = value;
         }
+    }
 
-        const token = jwt.sign({ user_id, clientId }, keyPair.privateKey, { algorithm: 'RS256', expiresIn: tokenExpiration * 60 });
-
-        // TODO: session could have previous user ip and device information which we could use to comapre to current ip and device information 
-        const session = { user_id, clientId, token, expires: currentTime + tokenExpiration * 60 * 1000 }
-        sessions.set(clientId, session)
+    if (!keyPair) {
+        keyPair = createKeyPair();
+    }
 
-        this.crud.send({
+    const token = jwt.sign({ user_id, clientId }, keyPair.privateKey, { 
+        algorithm: 'RS256', 
+        expiresIn: tokenExpiration * 60 
+    });
+
+    const session = { 
+        user_id, 
+        clientId, 
+        token, 
+        expires: currentTime + tokenExpiration * 60 * 1000 
+    };
+    
+    sessions.set(clientId, session);
+
+    if (crud) {
+        crud.send({
             method: 'object.update',
             host,
             array: 'clients',
@@ -91,58 +109,74 @@ class CoCreateAuthenticate {
             upsert: true,
             organization_id
         });
-
-        return token;
     }
 
-    // Verify and decode a token using the available keys
-    async decodeToken(token, organization_id, clientId, host) {
-        if (!token)
-            return {}
-        const currentTime = new Date().getTime();
-
-        let session = sessions.get(clientId)
-        if (!session || session.token !== token)
-            session = await this.read(organization_id, clientId, host)
-
-        // TODO: request must be made from same clientId and user_id that created the token
-        if (session && currentTime < session.expires && session.token === token)
-            return { user_id: session.user_id, expires: session.expires };
+    return token;
+}
 
-        sessions.delete(clientId)
-        this.crud.send({
-            method: 'object.update',
-            host,
-            array: 'clients',
-            object: {
-                _id: clientId,
-                session: undefined
-            },
-            organization_id,
-        });
+/**
+ * Reads, parses, and validates the configuration and active state of client sessions.
+ */
+async function read(organization_id, clientId, host) {
+    if (!crud) return null;
+
+    const client = await crud.send({
+        method: 'object.read',
+        host,
+        array: 'clients',
+        object: {
+            _id: clientId
+        },
+        organization_id,
+    });
+
+    if (client && client.object && client.object.length) {
+        sessions.set(clientId, client.object[0].session);
+        return client.object[0].session;
+    }
+    return null;
+}
 
-        return {}
+/**
+ * Verifies and decodes an incoming session token, resolving the associated user identifier.
+ */
+async function decodeToken(token, organization_id, clientId, host) {
+    if (!token) return {};
+    
+    const currentTime = new Date().getTime();
+    let session = sessions.get(clientId);
+
+    if (!session || session.token !== token) {
+        session = await read(organization_id, clientId, host);
+    }
 
+    if (session && currentTime < session.expires && session.token === token) {
+        return { user_id: session.user_id, expires: session.expires };
     }
 
-    async read(organization_id, clientId, host) {
-        const client = await this.crud.send({
-            method: 'object.read',
+    sessions.delete(clientId);
+    
+    if (crud) {
+        crud.send({
+            method: 'object.update',
             host,
             array: 'clients',
             object: {
-                _id: clientId
+                _id: clientId,
+                session: null
             },
             organization_id,
         });
-
-        if (client.object && client.object.length) {
-            sessions.set(clientId, client.object[0].session)
-            return client.object[0].session
-        }
-
     }
 
+    return {};
 }
 
-module.exports = CoCreateAuthenticate;
+// Export the API directly as a flat default object manifest
+export default {
+    createKeyPair,
+    deleteKeyPair,
+    encodeToken,
+    decodeToken,
+    read
+};