@dax-crafta/auth 1.2.9 → 1.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dax-crafta/auth",
-  "version": "1.2.9",
+  "version": "1.3.1",
   "description": "Authentication plugin for crafta framework",
   "main": "src/index.js",
   "private": false,

package/src/services/audit.service.js

@@ -0,0 +1,55 @@
+const AuditLog = require('../models/audit-log');
+const winston = require('winston');
+
+class AuditService {
+  constructor() {
+    this.logger = winston.createLogger({
+      level: 'info',
+      format: winston.format.json(),
+      transports: [
+        new winston.transports.File({ filename: 'audit.log' })
+      ]
+    });
+  }
+
+  async logActivity(data) {
+    const log = new AuditLog({
+      userId: data.userId,
+      action: data.action,
+      ipAddress: data.ipAddress,
+      userAgent: data.userAgent,
+      details: data.details,
+      status: data.status
+    });
+
+    await log.save();
+    this.logger.info('Activity logged', { logId: log._id, ...data });
+    return log;
+  }
+
+  async getUserActivity(userId, filters = {}) {
+    const query = { userId, ...filters };
+    return AuditLog.find(query).sort({ timestamp: -1 });
+  }
+
+  async getActivityByDateRange(startDate, endDate) {
+    return AuditLog.find({
+      timestamp: {
+        $gte: startDate,
+        $lte: endDate
+      }
+    }).sort({ timestamp: -1 });
+  }
+
+  async getFailedLoginAttempts(userId, timeWindow) {
+    const since = new Date(Date.now() - timeWindow);
+    return AuditLog.countDocuments({
+      userId,
+      action: 'login',
+      status: 'failure',
+      timestamp: { $gte: since }
+    });
+  }
+}
+
+module.exports = AuditService;

package/src/utils/password-policy.js

@@ -0,0 +1,60 @@
+const zxcvbn = require('zxcvbn');
+
+class PasswordPolicy {
+  constructor(config = {}) {
+    this.config = {
+      minLength: config.minLength || 8,
+      requireUppercase: config.requireUppercase !== false,
+      requireLowercase: config.requireLowercase !== false,
+      requireNumbers: config.requireNumbers !== false,
+      requireSpecialChars: config.requireSpecialChars !== false,
+      passwordHistory: config.passwordHistory || 3,
+      expiryDays: config.expiryDays || 90,
+      minStrength: config.minStrength || 3
+    };
+  }
+
+  validate(password, userInfo = {}) {
+    const errors = [];
+
+    if (password.length < this.config.minLength) {
+      errors.push(`Password must be at least ${this.config.minLength} characters long`);
+    }
+
+    if (this.config.requireUppercase && !/[A-Z]/.test(password)) {
+      errors.push('Password must contain at least one uppercase letter');
+    }
+
+    if (this.config.requireLowercase && !/[a-z]/.test(password)) {
+      errors.push('Password must contain at least one lowercase letter');
+    }
+
+    if (this.config.requireNumbers && !/\d/.test(password)) {
+      errors.push('Password must contain at least one number');
+    }
+
+    if (this.config.requireSpecialChars && !/[!@#$%^&*(),.?":{}|<>]/.test(password)) {
+      errors.push('Password must contain at least one special character');
+    }
+
+    const strength = zxcvbn(password, [userInfo.email, userInfo.name]);
+    if (strength.score < this.config.minStrength) {
+      errors.push('Password is too weak. Please choose a stronger password');
+    }
+
+    return {
+      isValid: errors.length === 0,
+      errors,
+      strength: strength.score
+    };
+  }
+
+  isExpired(lastPasswordChange) {
+    if (!this.config.expiryDays) return false;
+    
+    const expiryDate = new Date(lastPasswordChange.getTime() + this.config.expiryDays * 24 * 60 * 60 * 1000);
+    return expiryDate < new Date();
+  }
+}
+
+module.exports = PasswordPolicy;