@dimgit9/passport 1.0.0 → 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/dist/constants/passport.contants.d.ts +1 -0
  2. package/dist/constants/passport.contants.js +4 -0
  3. package/dist/index.d.ts +3 -0
  4. package/dist/index.js +19 -0
  5. package/dist/interfaces/index.d.ts +3 -0
  6. package/dist/interfaces/index.js +19 -0
  7. package/dist/interfaces/passport-async-options.interface.d.ts +6 -0
  8. package/dist/interfaces/passport-async-options.interface.js +2 -0
  9. package/{lib/interfaces/passport-options.interface.ts → dist/interfaces/passport-options.interface.d.ts} +1 -2
  10. package/dist/interfaces/passport-options.interface.js +2 -0
  11. package/dist/interfaces/token.interface.d.ts +8 -0
  12. package/dist/interfaces/token.interface.js +2 -0
  13. package/dist/passport.module.d.ts +6 -0
  14. package/dist/passport.module.js +38 -0
  15. package/dist/passport.providers.d.ts +4 -0
  16. package/dist/passport.providers.js +24 -0
  17. package/dist/passport.service.d.ts +21 -0
  18. package/dist/passport.service.js +92 -0
  19. package/dist/utils/base64.d.ts +2 -0
  20. package/dist/utils/base64.js +18 -0
  21. package/dist/utils/crypto.d.ts +1 -0
  22. package/dist/utils/crypto.js +11 -0
  23. package/dist/utils/index.d.ts +2 -0
  24. package/dist/utils/index.js +18 -0
  25. package/package.json +4 -1
  26. package/.github/workflows/publish.yml +0 -30
  27. package/lib/constants/passport.contants.ts +0 -1
  28. package/lib/index.ts +0 -4
  29. package/lib/interfaces/index.ts +0 -3
  30. package/lib/interfaces/passport-async-options.interface.ts +0 -7
  31. package/lib/interfaces/token.interface.ts +0 -9
  32. package/lib/passport.module.ts +0 -33
  33. package/lib/passport.providers.ts +0 -32
  34. package/lib/passport.service.ts +0 -94
  35. package/lib/utils/base64.ts +0 -17
  36. package/lib/utils/crypto.ts +0 -11
  37. package/lib/utils/index.ts +0 -2
  38. package/tsconfig.build.json +0 -9
  39. package/tsconfig.json +0 -13
@@ -0,0 +1 @@
1
+ export declare const PASSPORT_OPTIONS_KEY: unique symbol;
@@ -0,0 +1,4 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.PASSPORT_OPTIONS_KEY = void 0;
4
+ exports.PASSPORT_OPTIONS_KEY = Symbol("PassportOptions");
@@ -0,0 +1,3 @@
1
+ export * from "./interfaces";
2
+ export * from "./passport.module";
3
+ export * from "./passport.service";
package/dist/index.js ADDED
@@ -0,0 +1,19 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./interfaces"), exports);
18
+ __exportStar(require("./passport.module"), exports);
19
+ __exportStar(require("./passport.service"), exports);
@@ -0,0 +1,3 @@
1
+ export * from "./passport-async-options.interface";
2
+ export * from "./passport-options.interface";
3
+ export * from "./token.interface";
@@ -0,0 +1,19 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./passport-async-options.interface"), exports);
18
+ __exportStar(require("./passport-options.interface"), exports);
19
+ __exportStar(require("./token.interface"), exports);
@@ -0,0 +1,6 @@
1
+ import { FactoryProvider, ModuleMetadata } from "@nestjs/common";
2
+ import { PassportOptions } from "./passport-options.interface";
3
+ export interface PassportAsyncOptions extends Pick<ModuleMetadata, "imports"> {
4
+ useFactory: (...args: any[]) => Promise<PassportOptions> | PassportOptions;
5
+ inject?: FactoryProvider["inject"];
6
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -1,4 +1,3 @@
1
1
  export interface PassportOptions {
2
- secretKey: string
2
+ secretKey: string;
3
3
  }
4
-
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,8 @@
1
+ export interface TokenPayload {
2
+ sub: string | number;
3
+ }
4
+ export interface VerifyResult {
5
+ valid: boolean;
6
+ reason?: string;
7
+ userId?: string;
8
+ }
@@ -0,0 +1,2 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
@@ -0,0 +1,6 @@
1
+ import { DynamicModule } from "@nestjs/common";
2
+ import { PassportAsyncOptions, PassportOptions } from "./interfaces";
3
+ export declare class PassportModule {
4
+ static register(options: PassportOptions): DynamicModule;
5
+ static registerAsync(options: PassportAsyncOptions): DynamicModule;
6
+ }
@@ -0,0 +1,38 @@
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
7
+ };
8
+ var PassportModule_1;
9
+ Object.defineProperty(exports, "__esModule", { value: true });
10
+ exports.PassportModule = void 0;
11
+ const common_1 = require("@nestjs/common");
12
+ const passport_providers_1 = require("./passport.providers");
13
+ const passport_service_1 = require("./passport.service");
14
+ const passport_contants_1 = require("./constants/passport.contants");
15
+ let PassportModule = PassportModule_1 = class PassportModule {
16
+ static register(options) {
17
+ const optionsProvider = (0, passport_providers_1.createPassportOptionsProvider)(options);
18
+ return {
19
+ module: PassportModule_1,
20
+ providers: [optionsProvider, passport_service_1.PassportService],
21
+ exports: [passport_service_1.PassportService, passport_contants_1.PASSPORT_OPTIONS_KEY],
22
+ };
23
+ }
24
+ static registerAsync(options) {
25
+ const optionsProvider = (0, passport_providers_1.createPassportAsyncOptionsProvider)(options);
26
+ return {
27
+ module: PassportModule_1,
28
+ imports: options.imports ?? [],
29
+ providers: [optionsProvider, passport_service_1.PassportService],
30
+ exports: [passport_service_1.PassportService, passport_contants_1.PASSPORT_OPTIONS_KEY],
31
+ };
32
+ }
33
+ };
34
+ exports.PassportModule = PassportModule;
35
+ exports.PassportModule = PassportModule = PassportModule_1 = __decorate([
36
+ (0, common_1.Global)(),
37
+ (0, common_1.Module)({})
38
+ ], PassportModule);
@@ -0,0 +1,4 @@
1
+ import { type Provider } from "@nestjs/common";
2
+ import { PassportAsyncOptions, type PassportOptions } from "./interfaces";
3
+ export declare function createPassportOptionsProvider(options: PassportOptions): Provider;
4
+ export declare function createPassportAsyncOptionsProvider(options: PassportAsyncOptions): Provider;
@@ -0,0 +1,24 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.createPassportOptionsProvider = createPassportOptionsProvider;
4
+ exports.createPassportAsyncOptionsProvider = createPassportAsyncOptionsProvider;
5
+ const passport_contants_1 = require("./constants/passport.contants");
6
+ function createPassportOptionsProvider(options) {
7
+ return {
8
+ provide: passport_contants_1.PASSPORT_OPTIONS_KEY,
9
+ useValue: Object.freeze({ ...options }),
10
+ };
11
+ }
12
+ function createPassportAsyncOptionsProvider(options) {
13
+ return {
14
+ provide: passport_contants_1.PASSPORT_OPTIONS_KEY,
15
+ useFactory: async (...args) => {
16
+ const resolved = await options.useFactory(...args);
17
+ if (!resolved || typeof resolved.secretKey != "string") {
18
+ throw new Error('[PassportModule]: "secretKey" is required and must be a string');
19
+ }
20
+ return Object.freeze({ ...resolved });
21
+ },
22
+ inject: options.inject ?? [],
23
+ };
24
+ }
@@ -0,0 +1,21 @@
1
+ import { PassportOptions } from "./interfaces";
2
+ export declare class PassportService {
3
+ private readonly options;
4
+ private readonly SECRET_KEY;
5
+ private static readonly HMAC_DOMAIN;
6
+ private static readonly INTERNAL_SEP;
7
+ constructor(options: PassportOptions);
8
+ private now;
9
+ private serialize;
10
+ private computeHmac;
11
+ generate(userId: string, ttl: number): string;
12
+ verify(token: string): {
13
+ valid: boolean;
14
+ reason: string;
15
+ userId?: undefined;
16
+ } | {
17
+ valid: boolean;
18
+ userId: string;
19
+ reason?: undefined;
20
+ };
21
+ }
@@ -0,0 +1,92 @@
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
7
+ };
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
10
+ };
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
13
+ };
14
+ var PassportService_1;
15
+ Object.defineProperty(exports, "__esModule", { value: true });
16
+ exports.PassportService = void 0;
17
+ const node_crypto_1 = require("node:crypto");
18
+ const utils_1 = require("./utils");
19
+ const common_1 = require("@nestjs/common");
20
+ const passport_contants_1 = require("./constants/passport.contants");
21
+ // console.log("GENERATED TOKEN: ", generateToken("123", "user-123", 1))
22
+ // console.log(
23
+ // "VERIFY TOKEN: ",
24
+ // verifyToken(
25
+ // "123",
26
+ // "dXNlci0xMjM.MTc3MTQ3MjI4OQ.MTc3MTQ3MjI5MA.3077b9755ab7f77d997120ba148bb129dcecc1a1fa3ee9def5cc93bc3128b590",
27
+ // ),
28
+ // )
29
+ let PassportService = class PassportService {
30
+ static { PassportService_1 = this; }
31
+ options;
32
+ SECRET_KEY;
33
+ static HMAC_DOMAIN = "PassportTokenAuth/v1";
34
+ static INTERNAL_SEP = "|";
35
+ constructor(options) {
36
+ this.options = options;
37
+ this.SECRET_KEY = options.secretKey;
38
+ }
39
+ now() {
40
+ return Math.floor(Date.now() / 1000);
41
+ }
42
+ serialize(user, iat, exp) {
43
+ return [PassportService_1.HMAC_DOMAIN, user, iat, exp].join(PassportService_1.INTERNAL_SEP);
44
+ }
45
+ computeHmac(data) {
46
+ return (0, node_crypto_1.createHmac)("sha256", this.SECRET_KEY).update(data).digest("hex");
47
+ }
48
+ generate(userId, ttl) {
49
+ const issuedAt = this.now();
50
+ const expiresAt = issuedAt + ttl;
51
+ const userPart = (0, utils_1.base64UrlEncode)(userId);
52
+ const iatPart = (0, utils_1.base64UrlEncode)(String(issuedAt));
53
+ const expPart = (0, utils_1.base64UrlEncode)(String(expiresAt));
54
+ const serialized = this.serialize(userPart, iatPart, expPart);
55
+ const mac = this.computeHmac(serialized);
56
+ return `${userPart}.${iatPart}.${expPart}.${mac}`;
57
+ }
58
+ verify(token) {
59
+ const parts = token.split(".");
60
+ if (parts.length != 4)
61
+ return {
62
+ valid: false,
63
+ reason: "Invalid format",
64
+ };
65
+ const [userPart, iatPart, expPart, mac] = parts;
66
+ const serialized = this.serialize(userPart, iatPart, expPart);
67
+ const expectedMac = this.computeHmac(serialized);
68
+ if (!(0, utils_1.constantTimeEqual)(expectedMac, mac))
69
+ return {
70
+ valid: false,
71
+ reason: "Invalid signature",
72
+ };
73
+ const expNum = Number((0, utils_1.base64UrlDecode)(expPart));
74
+ if (!Number.isFinite(expNum))
75
+ return {
76
+ valid: false,
77
+ reason: "Error",
78
+ };
79
+ if (this.now() > expNum)
80
+ return { valid: false, reason: "Expired" };
81
+ return {
82
+ valid: true,
83
+ userId: (0, utils_1.base64UrlDecode)(userPart),
84
+ };
85
+ }
86
+ };
87
+ exports.PassportService = PassportService;
88
+ exports.PassportService = PassportService = PassportService_1 = __decorate([
89
+ (0, common_1.Injectable)(),
90
+ __param(0, (0, common_1.Inject)(passport_contants_1.PASSPORT_OPTIONS_KEY)),
91
+ __metadata("design:paramtypes", [Object])
92
+ ], PassportService);
@@ -0,0 +1,2 @@
1
+ export declare function base64UrlEncode(buf: Buffer | string): string;
2
+ export declare function base64UrlDecode(base: string): string;
@@ -0,0 +1,18 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.base64UrlEncode = base64UrlEncode;
4
+ exports.base64UrlDecode = base64UrlDecode;
5
+ function base64UrlEncode(buf) {
6
+ const b = typeof buf === "string" ? Buffer.from(buf) : buf;
7
+ return b
8
+ .toString("base64")
9
+ .replace(/\+/g, "-")
10
+ .replace(/\//g, "_")
11
+ .replace(/=+$/, "");
12
+ }
13
+ function base64UrlDecode(base) {
14
+ base = base.replace(/-/g, "+").replace(/_/g, "/");
15
+ while (base.length % 4)
16
+ base += "=";
17
+ return Buffer.from(base, "base64").toString();
18
+ }
@@ -0,0 +1 @@
1
+ export declare function constantTimeEqual(a: string, b: string): boolean;
@@ -0,0 +1,11 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.constantTimeEqual = constantTimeEqual;
4
+ const node_crypto_1 = require("node:crypto");
5
+ function constantTimeEqual(a, b) {
6
+ const bufA = Buffer.from(a);
7
+ const bufB = Buffer.from(b);
8
+ if (bufA.length !== bufB.length)
9
+ return false;
10
+ return (0, node_crypto_1.timingSafeEqual)(bufA, bufB);
11
+ }
@@ -0,0 +1,2 @@
1
+ export * from "./base64";
2
+ export * from "./crypto";
@@ -0,0 +1,18 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./base64"), exports);
18
+ __exportStar(require("./crypto"), exports);
package/package.json CHANGED
@@ -1,9 +1,12 @@
1
1
  {
2
2
  "name": "@dimgit9/passport",
3
- "version": "1.0.0",
3
+ "version": "1.0.2",
4
4
  "description": "Lightweight authentication library",
5
5
  "main": "./dist/index.js",
6
6
  "types": "./dist/index.d.ts",
7
+ "files": [
8
+ "dist"
9
+ ],
7
10
  "scripts": {
8
11
  "build": "tsc -p tsconfig.build.json"
9
12
  },
@@ -1,30 +0,0 @@
1
- name: Publish
2
-
3
- on:
4
- push:
5
- branches:
6
- - main
7
-
8
- jobs:
9
- publish:
10
- runs-on: ubuntu-latest
11
- steps:
12
- - name: Checkout repository
13
- uses: actions/checkout@v4
14
-
15
- - name: Setup Node.js
16
- uses: actions/setup-node@v4
17
- with:
18
- node-version: 20
19
- registry-url: "https://registry.npmjs.org"
20
-
21
- - name: Install deps
22
- run: npm install --frozen-lockfile
23
-
24
- - name: Build
25
- run: npm run build
26
-
27
- - name: Publish Package
28
- run: npm publish
29
- env:
30
- NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -1 +0,0 @@
1
- export const PASSPORT_OPTIONS_KEY = Symbol("PassportOptions")
package/lib/index.ts DELETED
@@ -1,4 +0,0 @@
1
- export * from "./interfaces"
2
-
3
- export * from "./passport.module"
4
- export * from "./passport.service"
@@ -1,3 +0,0 @@
1
- export * from "./passport-async-options.interface"
2
- export * from "./passport-options.interface"
3
- export * from "./token.interface"
@@ -1,7 +0,0 @@
1
- import { FactoryProvider, ModuleMetadata } from "@nestjs/common"
2
- import { PassportOptions } from "./passport-options.interface"
3
-
4
- export interface PassportAsyncOptions extends Pick<ModuleMetadata, "imports"> {
5
- useFactory: (...args: any[]) => Promise<PassportOptions> | PassportOptions
6
- inject?: FactoryProvider["inject"]
7
- }
@@ -1,9 +0,0 @@
1
- export interface TokenPayload {
2
- sub: string | number
3
- }
4
-
5
- export interface VerifyResult {
6
- valid: boolean
7
- reason?: string
8
- userId?: string
9
- }
@@ -1,33 +0,0 @@
1
- import { DynamicModule, Global, Module } from "@nestjs/common"
2
- import { PassportAsyncOptions, PassportOptions } from "./interfaces"
3
- import {
4
- createPassportAsyncOptionsProvider,
5
- createPassportOptionsProvider,
6
- } from "./passport.providers"
7
- import { PassportService } from "./passport.service"
8
- import { PASSPORT_OPTIONS_KEY } from "./constants/passport.contants"
9
-
10
- @Global()
11
- @Module({})
12
- export class PassportModule {
13
- static register(options: PassportOptions): DynamicModule {
14
- const optionsProvider = createPassportOptionsProvider(options)
15
-
16
- return {
17
- module: PassportModule,
18
- providers: [optionsProvider, PassportService],
19
- exports: [PassportService, PASSPORT_OPTIONS_KEY],
20
- }
21
- }
22
-
23
- static registerAsync(options: PassportAsyncOptions): DynamicModule {
24
- const optionsProvider = createPassportAsyncOptionsProvider(options)
25
-
26
- return {
27
- module: PassportModule,
28
- imports: options.imports ?? [],
29
- providers: [optionsProvider, PassportService],
30
- exports: [PassportService, PASSPORT_OPTIONS_KEY],
31
- }
32
- }
33
- }
@@ -1,32 +0,0 @@
1
- import { type Provider } from "@nestjs/common"
2
- import { PassportAsyncOptions, type PassportOptions } from "./interfaces"
3
- import { PASSPORT_OPTIONS_KEY } from "./constants/passport.contants"
4
-
5
- export function createPassportOptionsProvider(
6
- options: PassportOptions,
7
- ): Provider {
8
- return {
9
- provide: PASSPORT_OPTIONS_KEY,
10
- useValue: Object.freeze({ ...options }),
11
- }
12
- }
13
-
14
- export function createPassportAsyncOptionsProvider(
15
- options: PassportAsyncOptions,
16
- ): Provider {
17
- return {
18
- provide: PASSPORT_OPTIONS_KEY,
19
- useFactory: async (...args: any[]) => {
20
- const resolved = await options.useFactory!(...args)
21
-
22
- if (!resolved || typeof resolved.secretKey != "string") {
23
- throw new Error(
24
- '[PassportModule]: "secretKey" is required and must be a string',
25
- )
26
- }
27
-
28
- return Object.freeze({ ...options })
29
- },
30
- inject: options.inject ?? [],
31
- }
32
- }
@@ -1,94 +0,0 @@
1
- import { createHmac } from "node:crypto"
2
- import { base64UrlDecode, base64UrlEncode, constantTimeEqual } from "./utils"
3
- import { Inject, Injectable } from "@nestjs/common"
4
- import { PASSPORT_OPTIONS_KEY } from "./constants/passport.contants"
5
- import { PassportOptions } from "./interfaces"
6
-
7
- // console.log("GENERATED TOKEN: ", generateToken("123", "user-123", 1))
8
-
9
- // console.log(
10
- // "VERIFY TOKEN: ",
11
- // verifyToken(
12
- // "123",
13
- // "dXNlci0xMjM.MTc3MTQ3MjI4OQ.MTc3MTQ3MjI5MA.3077b9755ab7f77d997120ba148bb129dcecc1a1fa3ee9def5cc93bc3128b590",
14
- // ),
15
- // )
16
-
17
- @Injectable()
18
- export class PassportService {
19
- private readonly SECRET_KEY: string
20
-
21
- private static readonly HMAC_DOMAIN = "PassportTokenAuth/v1"
22
- private static readonly INTERNAL_SEP = "|"
23
-
24
- constructor(
25
- @Inject(PASSPORT_OPTIONS_KEY) private readonly options: PassportOptions,
26
- ) {
27
- this.SECRET_KEY = options.secretKey
28
- }
29
-
30
- private now() {
31
- return Math.floor(Date.now() / 1000)
32
- }
33
-
34
- private serialize(user: string, iat: string, exp: string) {
35
- return [PassportService.HMAC_DOMAIN, user, iat, exp].join(
36
- PassportService.INTERNAL_SEP,
37
- )
38
- }
39
-
40
- private computeHmac(data: string) {
41
- return createHmac("sha256", this.SECRET_KEY).update(data).digest("hex")
42
- }
43
-
44
- generate(userId: string, ttl: number) {
45
- const issuedAt = this.now()
46
- const expiresAt = issuedAt + ttl
47
-
48
- const userPart = base64UrlEncode(userId)
49
- const iatPart = base64UrlEncode(String(issuedAt))
50
- const expPart = base64UrlEncode(String(expiresAt))
51
-
52
- const serialized = this.serialize(userPart, iatPart, expPart)
53
- const mac = this.computeHmac(serialized)
54
-
55
- return `${userPart}.${iatPart}.${expPart}.${mac}`
56
- }
57
-
58
- verify(token: string) {
59
- const parts = token.split(".")
60
-
61
- if (parts.length != 4)
62
- return {
63
- valid: false,
64
- reason: "Invalid format",
65
- }
66
-
67
- const [userPart, iatPart, expPart, mac] = parts
68
-
69
- const serialized = this.serialize(userPart, iatPart, expPart)
70
-
71
- const expectedMac = this.computeHmac(serialized)
72
-
73
- if (!constantTimeEqual(expectedMac, mac))
74
- return {
75
- valid: false,
76
- reason: "Invalid signature",
77
- }
78
-
79
- const expNum = Number(base64UrlDecode(expPart))
80
-
81
- if (!Number.isFinite(expNum))
82
- return {
83
- valid: false,
84
- reason: "Error",
85
- }
86
-
87
- if (this.now() > expNum) return { valid: false, reason: "Expired" }
88
-
89
- return {
90
- valid: true,
91
- userId: base64UrlDecode(userPart),
92
- }
93
- }
94
- }
@@ -1,17 +0,0 @@
1
- export function base64UrlEncode(buf: Buffer | string) {
2
- const b = typeof buf === "string" ? Buffer.from(buf) : buf
3
-
4
- return b
5
- .toString("base64")
6
- .replace(/\+/g, "-")
7
- .replace(/\//g, "_")
8
- .replace(/=+$/, "")
9
- }
10
-
11
- export function base64UrlDecode(base: string) {
12
- base = base.replace(/-/g, "+").replace(/_/g, "/")
13
-
14
- while (base.length % 4) base += "="
15
-
16
- return Buffer.from(base, "base64").toString()
17
- }
@@ -1,11 +0,0 @@
1
- import { timingSafeEqual } from "node:crypto"
2
-
3
- export function constantTimeEqual(a: string, b: string) {
4
- const bufA = Buffer.from(a)
5
-
6
- const bufB = Buffer.from(b)
7
-
8
- if (bufA.length !== bufB.length) return false
9
-
10
- return timingSafeEqual(bufA, bufB)
11
- }
@@ -1,2 +0,0 @@
1
- export * from "./base64"
2
- export * from "./crypto"
@@ -1,9 +0,0 @@
1
- {
2
- "extends": "./tsconfig.json",
3
- "compilerOptions": {
4
- "declaration": true,
5
- "outDir": "./dist"
6
- },
7
- "include": ["lib/**/*"],
8
- "exclude": ["node_modules", "dist", "test"]
9
- }
package/tsconfig.json DELETED
@@ -1,13 +0,0 @@
1
- {
2
- "compilerOptions": {
3
- "module": "commonjs",
4
- "target": "es2024",
5
- "strict": true,
6
- "esModuleInterop": true,
7
- "skipLibCheck": true,
8
- "experimentalDecorators": true,
9
- "emitDecoratorMetadata": true,
10
- "forceConsistentCasingInFileNames": true,
11
- "strictNullChecks": false
12
- }
13
- }