@dax-crafta/auth 1.3.0 → 1.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dax-crafta/auth",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Authentication plugin for crafta framework",
   "main": "src/index.js",
   "private": false,

package/src/utils/mfa.js

@@ -0,0 +1,38 @@
+const speakeasy = require('speakeasy');
+const qrcode = require('qrcode');
+
+class MFAService {
+  async generateSecret(label, issuer = 'App') {
+    const secret = speakeasy.generateSecret({
+      length: 20,
+      name: label,
+      issuer
+    });
+
+    const qrCodeUrl = await qrcode.toDataURL(secret.otpauth_url);
+
+    return {
+      secret: secret.base32,
+      qrCode: qrCodeUrl
+    };
+  }
+
+  verifyToken(token, secret) {
+    return speakeasy.totp.verify({
+      secret,
+      encoding: 'base32',
+      token,
+      window: 1
+    });
+  }
+
+  generateBackupCodes() {
+    const codes = [];
+    for (let i = 0; i < 10; i++) {
+      codes.push(speakeasy.generateSecret({ length: 10 }).base32);
+    }
+    return codes;
+  }
+}
+
+module.exports = MFAService;

package/src/utils/password-policy.js

@@ -0,0 +1,60 @@
+const zxcvbn = require('zxcvbn');
+
+class PasswordPolicy {
+  constructor(config = {}) {
+    this.config = {
+      minLength: config.minLength || 8,
+      requireUppercase: config.requireUppercase !== false,
+      requireLowercase: config.requireLowercase !== false,
+      requireNumbers: config.requireNumbers !== false,
+      requireSpecialChars: config.requireSpecialChars !== false,
+      passwordHistory: config.passwordHistory || 3,
+      expiryDays: config.expiryDays || 90,
+      minStrength: config.minStrength || 3
+    };
+  }
+
+  validate(password, userInfo = {}) {
+    const errors = [];
+
+    if (password.length < this.config.minLength) {
+      errors.push(`Password must be at least ${this.config.minLength} characters long`);
+    }
+
+    if (this.config.requireUppercase && !/[A-Z]/.test(password)) {
+      errors.push('Password must contain at least one uppercase letter');
+    }
+
+    if (this.config.requireLowercase && !/[a-z]/.test(password)) {
+      errors.push('Password must contain at least one lowercase letter');
+    }
+
+    if (this.config.requireNumbers && !/\d/.test(password)) {
+      errors.push('Password must contain at least one number');
+    }
+
+    if (this.config.requireSpecialChars && !/[!@#$%^&*(),.?":{}|<>]/.test(password)) {
+      errors.push('Password must contain at least one special character');
+    }
+
+    const strength = zxcvbn(password, [userInfo.email, userInfo.name]);
+    if (strength.score < this.config.minStrength) {
+      errors.push('Password is too weak. Please choose a stronger password');
+    }
+
+    return {
+      isValid: errors.length === 0,
+      errors,
+      strength: strength.score
+    };
+  }
+
+  isExpired(lastPasswordChange) {
+    if (!this.config.expiryDays) return false;
+    
+    const expiryDate = new Date(lastPasswordChange.getTime() + this.config.expiryDays * 24 * 60 * 60 * 1000);
+    return expiryDate < new Date();
+  }
+}
+
+module.exports = PasswordPolicy;