@dimgit9/passport 1.0.0 → 1.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/constants/passport.contants.d.ts +1 -0
- package/dist/constants/passport.contants.js +4 -0
- package/dist/index.d.ts +3 -0
- package/dist/index.js +19 -0
- package/dist/interfaces/index.d.ts +3 -0
- package/dist/interfaces/index.js +19 -0
- package/dist/interfaces/passport-async-options.interface.d.ts +6 -0
- package/dist/interfaces/passport-async-options.interface.js +2 -0
- package/{lib/interfaces/passport-options.interface.ts → dist/interfaces/passport-options.interface.d.ts} +1 -2
- package/dist/interfaces/passport-options.interface.js +2 -0
- package/dist/interfaces/token.interface.d.ts +8 -0
- package/dist/interfaces/token.interface.js +2 -0
- package/dist/passport.module.d.ts +6 -0
- package/dist/passport.module.js +38 -0
- package/dist/passport.providers.d.ts +4 -0
- package/dist/passport.providers.js +24 -0
- package/dist/passport.service.d.ts +21 -0
- package/dist/passport.service.js +92 -0
- package/dist/utils/base64.d.ts +2 -0
- package/dist/utils/base64.js +18 -0
- package/dist/utils/crypto.d.ts +1 -0
- package/dist/utils/crypto.js +11 -0
- package/dist/utils/index.d.ts +2 -0
- package/dist/utils/index.js +18 -0
- package/package.json +4 -1
- package/.github/workflows/publish.yml +0 -30
- package/lib/constants/passport.contants.ts +0 -1
- package/lib/index.ts +0 -4
- package/lib/interfaces/index.ts +0 -3
- package/lib/interfaces/passport-async-options.interface.ts +0 -7
- package/lib/interfaces/token.interface.ts +0 -9
- package/lib/passport.module.ts +0 -33
- package/lib/passport.providers.ts +0 -32
- package/lib/passport.service.ts +0 -94
- package/lib/utils/base64.ts +0 -17
- package/lib/utils/crypto.ts +0 -11
- package/lib/utils/index.ts +0 -2
- package/tsconfig.build.json +0 -9
- package/tsconfig.json +0 -13
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const PASSPORT_OPTIONS_KEY: unique symbol;
|
package/dist/index.d.ts
ADDED
package/dist/index.js
ADDED
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./interfaces"), exports);
|
|
18
|
+
__exportStar(require("./passport.module"), exports);
|
|
19
|
+
__exportStar(require("./passport.service"), exports);
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./passport-async-options.interface"), exports);
|
|
18
|
+
__exportStar(require("./passport-options.interface"), exports);
|
|
19
|
+
__exportStar(require("./token.interface"), exports);
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import { FactoryProvider, ModuleMetadata } from "@nestjs/common";
|
|
2
|
+
import { PassportOptions } from "./passport-options.interface";
|
|
3
|
+
export interface PassportAsyncOptions extends Pick<ModuleMetadata, "imports"> {
|
|
4
|
+
useFactory: (...args: any[]) => Promise<PassportOptions> | PassportOptions;
|
|
5
|
+
inject?: FactoryProvider["inject"];
|
|
6
|
+
}
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import { DynamicModule } from "@nestjs/common";
|
|
2
|
+
import { PassportAsyncOptions, PassportOptions } from "./interfaces";
|
|
3
|
+
export declare class PassportModule {
|
|
4
|
+
static register(options: PassportOptions): DynamicModule;
|
|
5
|
+
static registerAsync(options: PassportAsyncOptions): DynamicModule;
|
|
6
|
+
}
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var PassportModule_1;
|
|
9
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
10
|
+
exports.PassportModule = void 0;
|
|
11
|
+
const common_1 = require("@nestjs/common");
|
|
12
|
+
const passport_providers_1 = require("./passport.providers");
|
|
13
|
+
const passport_service_1 = require("./passport.service");
|
|
14
|
+
const passport_contants_1 = require("./constants/passport.contants");
|
|
15
|
+
let PassportModule = PassportModule_1 = class PassportModule {
|
|
16
|
+
static register(options) {
|
|
17
|
+
const optionsProvider = (0, passport_providers_1.createPassportOptionsProvider)(options);
|
|
18
|
+
return {
|
|
19
|
+
module: PassportModule_1,
|
|
20
|
+
providers: [optionsProvider, passport_service_1.PassportService],
|
|
21
|
+
exports: [passport_service_1.PassportService, passport_contants_1.PASSPORT_OPTIONS_KEY],
|
|
22
|
+
};
|
|
23
|
+
}
|
|
24
|
+
static registerAsync(options) {
|
|
25
|
+
const optionsProvider = (0, passport_providers_1.createPassportAsyncOptionsProvider)(options);
|
|
26
|
+
return {
|
|
27
|
+
module: PassportModule_1,
|
|
28
|
+
imports: options.imports ?? [],
|
|
29
|
+
providers: [optionsProvider, passport_service_1.PassportService],
|
|
30
|
+
exports: [passport_service_1.PassportService, passport_contants_1.PASSPORT_OPTIONS_KEY],
|
|
31
|
+
};
|
|
32
|
+
}
|
|
33
|
+
};
|
|
34
|
+
exports.PassportModule = PassportModule;
|
|
35
|
+
exports.PassportModule = PassportModule = PassportModule_1 = __decorate([
|
|
36
|
+
(0, common_1.Global)(),
|
|
37
|
+
(0, common_1.Module)({})
|
|
38
|
+
], PassportModule);
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import { type Provider } from "@nestjs/common";
|
|
2
|
+
import { PassportAsyncOptions, type PassportOptions } from "./interfaces";
|
|
3
|
+
export declare function createPassportOptionsProvider(options: PassportOptions): Provider;
|
|
4
|
+
export declare function createPassportAsyncOptionsProvider(options: PassportAsyncOptions): Provider;
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.createPassportOptionsProvider = createPassportOptionsProvider;
|
|
4
|
+
exports.createPassportAsyncOptionsProvider = createPassportAsyncOptionsProvider;
|
|
5
|
+
const passport_contants_1 = require("./constants/passport.contants");
|
|
6
|
+
function createPassportOptionsProvider(options) {
|
|
7
|
+
return {
|
|
8
|
+
provide: passport_contants_1.PASSPORT_OPTIONS_KEY,
|
|
9
|
+
useValue: Object.freeze({ ...options }),
|
|
10
|
+
};
|
|
11
|
+
}
|
|
12
|
+
function createPassportAsyncOptionsProvider(options) {
|
|
13
|
+
return {
|
|
14
|
+
provide: passport_contants_1.PASSPORT_OPTIONS_KEY,
|
|
15
|
+
useFactory: async (...args) => {
|
|
16
|
+
const resolved = await options.useFactory(...args);
|
|
17
|
+
if (!resolved || typeof resolved.secretKey != "string") {
|
|
18
|
+
throw new Error('[PassportModule]: "secretKey" is required and must be a string');
|
|
19
|
+
}
|
|
20
|
+
return Object.freeze({ ...resolved });
|
|
21
|
+
},
|
|
22
|
+
inject: options.inject ?? [],
|
|
23
|
+
};
|
|
24
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import { PassportOptions } from "./interfaces";
|
|
2
|
+
export declare class PassportService {
|
|
3
|
+
private readonly options;
|
|
4
|
+
private readonly SECRET_KEY;
|
|
5
|
+
private static readonly HMAC_DOMAIN;
|
|
6
|
+
private static readonly INTERNAL_SEP;
|
|
7
|
+
constructor(options: PassportOptions);
|
|
8
|
+
private now;
|
|
9
|
+
private serialize;
|
|
10
|
+
private computeHmac;
|
|
11
|
+
generate(userId: string, ttl: number): string;
|
|
12
|
+
verify(token: string): {
|
|
13
|
+
valid: boolean;
|
|
14
|
+
reason: string;
|
|
15
|
+
userId?: undefined;
|
|
16
|
+
} | {
|
|
17
|
+
valid: boolean;
|
|
18
|
+
userId: string;
|
|
19
|
+
reason?: undefined;
|
|
20
|
+
};
|
|
21
|
+
}
|
|
@@ -0,0 +1,92 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
+
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
+
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
+
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
+
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
+
};
|
|
8
|
+
var __metadata = (this && this.__metadata) || function (k, v) {
|
|
9
|
+
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
|
|
10
|
+
};
|
|
11
|
+
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
|
+
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
|
+
};
|
|
14
|
+
var PassportService_1;
|
|
15
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
16
|
+
exports.PassportService = void 0;
|
|
17
|
+
const node_crypto_1 = require("node:crypto");
|
|
18
|
+
const utils_1 = require("./utils");
|
|
19
|
+
const common_1 = require("@nestjs/common");
|
|
20
|
+
const passport_contants_1 = require("./constants/passport.contants");
|
|
21
|
+
// console.log("GENERATED TOKEN: ", generateToken("123", "user-123", 1))
|
|
22
|
+
// console.log(
|
|
23
|
+
// "VERIFY TOKEN: ",
|
|
24
|
+
// verifyToken(
|
|
25
|
+
// "123",
|
|
26
|
+
// "dXNlci0xMjM.MTc3MTQ3MjI4OQ.MTc3MTQ3MjI5MA.3077b9755ab7f77d997120ba148bb129dcecc1a1fa3ee9def5cc93bc3128b590",
|
|
27
|
+
// ),
|
|
28
|
+
// )
|
|
29
|
+
let PassportService = class PassportService {
|
|
30
|
+
static { PassportService_1 = this; }
|
|
31
|
+
options;
|
|
32
|
+
SECRET_KEY;
|
|
33
|
+
static HMAC_DOMAIN = "PassportTokenAuth/v1";
|
|
34
|
+
static INTERNAL_SEP = "|";
|
|
35
|
+
constructor(options) {
|
|
36
|
+
this.options = options;
|
|
37
|
+
this.SECRET_KEY = options.secretKey;
|
|
38
|
+
}
|
|
39
|
+
now() {
|
|
40
|
+
return Math.floor(Date.now() / 1000);
|
|
41
|
+
}
|
|
42
|
+
serialize(user, iat, exp) {
|
|
43
|
+
return [PassportService_1.HMAC_DOMAIN, user, iat, exp].join(PassportService_1.INTERNAL_SEP);
|
|
44
|
+
}
|
|
45
|
+
computeHmac(data) {
|
|
46
|
+
return (0, node_crypto_1.createHmac)("sha256", this.SECRET_KEY).update(data).digest("hex");
|
|
47
|
+
}
|
|
48
|
+
generate(userId, ttl) {
|
|
49
|
+
const issuedAt = this.now();
|
|
50
|
+
const expiresAt = issuedAt + ttl;
|
|
51
|
+
const userPart = (0, utils_1.base64UrlEncode)(userId);
|
|
52
|
+
const iatPart = (0, utils_1.base64UrlEncode)(String(issuedAt));
|
|
53
|
+
const expPart = (0, utils_1.base64UrlEncode)(String(expiresAt));
|
|
54
|
+
const serialized = this.serialize(userPart, iatPart, expPart);
|
|
55
|
+
const mac = this.computeHmac(serialized);
|
|
56
|
+
return `${userPart}.${iatPart}.${expPart}.${mac}`;
|
|
57
|
+
}
|
|
58
|
+
verify(token) {
|
|
59
|
+
const parts = token.split(".");
|
|
60
|
+
if (parts.length != 4)
|
|
61
|
+
return {
|
|
62
|
+
valid: false,
|
|
63
|
+
reason: "Invalid format",
|
|
64
|
+
};
|
|
65
|
+
const [userPart, iatPart, expPart, mac] = parts;
|
|
66
|
+
const serialized = this.serialize(userPart, iatPart, expPart);
|
|
67
|
+
const expectedMac = this.computeHmac(serialized);
|
|
68
|
+
if (!(0, utils_1.constantTimeEqual)(expectedMac, mac))
|
|
69
|
+
return {
|
|
70
|
+
valid: false,
|
|
71
|
+
reason: "Invalid signature",
|
|
72
|
+
};
|
|
73
|
+
const expNum = Number((0, utils_1.base64UrlDecode)(expPart));
|
|
74
|
+
if (!Number.isFinite(expNum))
|
|
75
|
+
return {
|
|
76
|
+
valid: false,
|
|
77
|
+
reason: "Error",
|
|
78
|
+
};
|
|
79
|
+
if (this.now() > expNum)
|
|
80
|
+
return { valid: false, reason: "Expired" };
|
|
81
|
+
return {
|
|
82
|
+
valid: true,
|
|
83
|
+
userId: (0, utils_1.base64UrlDecode)(userPart),
|
|
84
|
+
};
|
|
85
|
+
}
|
|
86
|
+
};
|
|
87
|
+
exports.PassportService = PassportService;
|
|
88
|
+
exports.PassportService = PassportService = PassportService_1 = __decorate([
|
|
89
|
+
(0, common_1.Injectable)(),
|
|
90
|
+
__param(0, (0, common_1.Inject)(passport_contants_1.PASSPORT_OPTIONS_KEY)),
|
|
91
|
+
__metadata("design:paramtypes", [Object])
|
|
92
|
+
], PassportService);
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.base64UrlEncode = base64UrlEncode;
|
|
4
|
+
exports.base64UrlDecode = base64UrlDecode;
|
|
5
|
+
function base64UrlEncode(buf) {
|
|
6
|
+
const b = typeof buf === "string" ? Buffer.from(buf) : buf;
|
|
7
|
+
return b
|
|
8
|
+
.toString("base64")
|
|
9
|
+
.replace(/\+/g, "-")
|
|
10
|
+
.replace(/\//g, "_")
|
|
11
|
+
.replace(/=+$/, "");
|
|
12
|
+
}
|
|
13
|
+
function base64UrlDecode(base) {
|
|
14
|
+
base = base.replace(/-/g, "+").replace(/_/g, "/");
|
|
15
|
+
while (base.length % 4)
|
|
16
|
+
base += "=";
|
|
17
|
+
return Buffer.from(base, "base64").toString();
|
|
18
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function constantTimeEqual(a: string, b: string): boolean;
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.constantTimeEqual = constantTimeEqual;
|
|
4
|
+
const node_crypto_1 = require("node:crypto");
|
|
5
|
+
function constantTimeEqual(a, b) {
|
|
6
|
+
const bufA = Buffer.from(a);
|
|
7
|
+
const bufB = Buffer.from(b);
|
|
8
|
+
if (bufA.length !== bufB.length)
|
|
9
|
+
return false;
|
|
10
|
+
return (0, node_crypto_1.timingSafeEqual)(bufA, bufB);
|
|
11
|
+
}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./base64"), exports);
|
|
18
|
+
__exportStar(require("./crypto"), exports);
|
package/package.json
CHANGED
|
@@ -1,9 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dimgit9/passport",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.2",
|
|
4
4
|
"description": "Lightweight authentication library",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|
|
7
|
+
"files": [
|
|
8
|
+
"dist"
|
|
9
|
+
],
|
|
7
10
|
"scripts": {
|
|
8
11
|
"build": "tsc -p tsconfig.build.json"
|
|
9
12
|
},
|
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
name: Publish
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
push:
|
|
5
|
-
branches:
|
|
6
|
-
- main
|
|
7
|
-
|
|
8
|
-
jobs:
|
|
9
|
-
publish:
|
|
10
|
-
runs-on: ubuntu-latest
|
|
11
|
-
steps:
|
|
12
|
-
- name: Checkout repository
|
|
13
|
-
uses: actions/checkout@v4
|
|
14
|
-
|
|
15
|
-
- name: Setup Node.js
|
|
16
|
-
uses: actions/setup-node@v4
|
|
17
|
-
with:
|
|
18
|
-
node-version: 20
|
|
19
|
-
registry-url: "https://registry.npmjs.org"
|
|
20
|
-
|
|
21
|
-
- name: Install deps
|
|
22
|
-
run: npm install --frozen-lockfile
|
|
23
|
-
|
|
24
|
-
- name: Build
|
|
25
|
-
run: npm run build
|
|
26
|
-
|
|
27
|
-
- name: Publish Package
|
|
28
|
-
run: npm publish
|
|
29
|
-
env:
|
|
30
|
-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export const PASSPORT_OPTIONS_KEY = Symbol("PassportOptions")
|
package/lib/index.ts
DELETED
package/lib/interfaces/index.ts
DELETED
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
import { FactoryProvider, ModuleMetadata } from "@nestjs/common"
|
|
2
|
-
import { PassportOptions } from "./passport-options.interface"
|
|
3
|
-
|
|
4
|
-
export interface PassportAsyncOptions extends Pick<ModuleMetadata, "imports"> {
|
|
5
|
-
useFactory: (...args: any[]) => Promise<PassportOptions> | PassportOptions
|
|
6
|
-
inject?: FactoryProvider["inject"]
|
|
7
|
-
}
|
package/lib/passport.module.ts
DELETED
|
@@ -1,33 +0,0 @@
|
|
|
1
|
-
import { DynamicModule, Global, Module } from "@nestjs/common"
|
|
2
|
-
import { PassportAsyncOptions, PassportOptions } from "./interfaces"
|
|
3
|
-
import {
|
|
4
|
-
createPassportAsyncOptionsProvider,
|
|
5
|
-
createPassportOptionsProvider,
|
|
6
|
-
} from "./passport.providers"
|
|
7
|
-
import { PassportService } from "./passport.service"
|
|
8
|
-
import { PASSPORT_OPTIONS_KEY } from "./constants/passport.contants"
|
|
9
|
-
|
|
10
|
-
@Global()
|
|
11
|
-
@Module({})
|
|
12
|
-
export class PassportModule {
|
|
13
|
-
static register(options: PassportOptions): DynamicModule {
|
|
14
|
-
const optionsProvider = createPassportOptionsProvider(options)
|
|
15
|
-
|
|
16
|
-
return {
|
|
17
|
-
module: PassportModule,
|
|
18
|
-
providers: [optionsProvider, PassportService],
|
|
19
|
-
exports: [PassportService, PASSPORT_OPTIONS_KEY],
|
|
20
|
-
}
|
|
21
|
-
}
|
|
22
|
-
|
|
23
|
-
static registerAsync(options: PassportAsyncOptions): DynamicModule {
|
|
24
|
-
const optionsProvider = createPassportAsyncOptionsProvider(options)
|
|
25
|
-
|
|
26
|
-
return {
|
|
27
|
-
module: PassportModule,
|
|
28
|
-
imports: options.imports ?? [],
|
|
29
|
-
providers: [optionsProvider, PassportService],
|
|
30
|
-
exports: [PassportService, PASSPORT_OPTIONS_KEY],
|
|
31
|
-
}
|
|
32
|
-
}
|
|
33
|
-
}
|
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
import { type Provider } from "@nestjs/common"
|
|
2
|
-
import { PassportAsyncOptions, type PassportOptions } from "./interfaces"
|
|
3
|
-
import { PASSPORT_OPTIONS_KEY } from "./constants/passport.contants"
|
|
4
|
-
|
|
5
|
-
export function createPassportOptionsProvider(
|
|
6
|
-
options: PassportOptions,
|
|
7
|
-
): Provider {
|
|
8
|
-
return {
|
|
9
|
-
provide: PASSPORT_OPTIONS_KEY,
|
|
10
|
-
useValue: Object.freeze({ ...options }),
|
|
11
|
-
}
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
export function createPassportAsyncOptionsProvider(
|
|
15
|
-
options: PassportAsyncOptions,
|
|
16
|
-
): Provider {
|
|
17
|
-
return {
|
|
18
|
-
provide: PASSPORT_OPTIONS_KEY,
|
|
19
|
-
useFactory: async (...args: any[]) => {
|
|
20
|
-
const resolved = await options.useFactory!(...args)
|
|
21
|
-
|
|
22
|
-
if (!resolved || typeof resolved.secretKey != "string") {
|
|
23
|
-
throw new Error(
|
|
24
|
-
'[PassportModule]: "secretKey" is required and must be a string',
|
|
25
|
-
)
|
|
26
|
-
}
|
|
27
|
-
|
|
28
|
-
return Object.freeze({ ...options })
|
|
29
|
-
},
|
|
30
|
-
inject: options.inject ?? [],
|
|
31
|
-
}
|
|
32
|
-
}
|
package/lib/passport.service.ts
DELETED
|
@@ -1,94 +0,0 @@
|
|
|
1
|
-
import { createHmac } from "node:crypto"
|
|
2
|
-
import { base64UrlDecode, base64UrlEncode, constantTimeEqual } from "./utils"
|
|
3
|
-
import { Inject, Injectable } from "@nestjs/common"
|
|
4
|
-
import { PASSPORT_OPTIONS_KEY } from "./constants/passport.contants"
|
|
5
|
-
import { PassportOptions } from "./interfaces"
|
|
6
|
-
|
|
7
|
-
// console.log("GENERATED TOKEN: ", generateToken("123", "user-123", 1))
|
|
8
|
-
|
|
9
|
-
// console.log(
|
|
10
|
-
// "VERIFY TOKEN: ",
|
|
11
|
-
// verifyToken(
|
|
12
|
-
// "123",
|
|
13
|
-
// "dXNlci0xMjM.MTc3MTQ3MjI4OQ.MTc3MTQ3MjI5MA.3077b9755ab7f77d997120ba148bb129dcecc1a1fa3ee9def5cc93bc3128b590",
|
|
14
|
-
// ),
|
|
15
|
-
// )
|
|
16
|
-
|
|
17
|
-
@Injectable()
|
|
18
|
-
export class PassportService {
|
|
19
|
-
private readonly SECRET_KEY: string
|
|
20
|
-
|
|
21
|
-
private static readonly HMAC_DOMAIN = "PassportTokenAuth/v1"
|
|
22
|
-
private static readonly INTERNAL_SEP = "|"
|
|
23
|
-
|
|
24
|
-
constructor(
|
|
25
|
-
@Inject(PASSPORT_OPTIONS_KEY) private readonly options: PassportOptions,
|
|
26
|
-
) {
|
|
27
|
-
this.SECRET_KEY = options.secretKey
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
private now() {
|
|
31
|
-
return Math.floor(Date.now() / 1000)
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
private serialize(user: string, iat: string, exp: string) {
|
|
35
|
-
return [PassportService.HMAC_DOMAIN, user, iat, exp].join(
|
|
36
|
-
PassportService.INTERNAL_SEP,
|
|
37
|
-
)
|
|
38
|
-
}
|
|
39
|
-
|
|
40
|
-
private computeHmac(data: string) {
|
|
41
|
-
return createHmac("sha256", this.SECRET_KEY).update(data).digest("hex")
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
generate(userId: string, ttl: number) {
|
|
45
|
-
const issuedAt = this.now()
|
|
46
|
-
const expiresAt = issuedAt + ttl
|
|
47
|
-
|
|
48
|
-
const userPart = base64UrlEncode(userId)
|
|
49
|
-
const iatPart = base64UrlEncode(String(issuedAt))
|
|
50
|
-
const expPart = base64UrlEncode(String(expiresAt))
|
|
51
|
-
|
|
52
|
-
const serialized = this.serialize(userPart, iatPart, expPart)
|
|
53
|
-
const mac = this.computeHmac(serialized)
|
|
54
|
-
|
|
55
|
-
return `${userPart}.${iatPart}.${expPart}.${mac}`
|
|
56
|
-
}
|
|
57
|
-
|
|
58
|
-
verify(token: string) {
|
|
59
|
-
const parts = token.split(".")
|
|
60
|
-
|
|
61
|
-
if (parts.length != 4)
|
|
62
|
-
return {
|
|
63
|
-
valid: false,
|
|
64
|
-
reason: "Invalid format",
|
|
65
|
-
}
|
|
66
|
-
|
|
67
|
-
const [userPart, iatPart, expPart, mac] = parts
|
|
68
|
-
|
|
69
|
-
const serialized = this.serialize(userPart, iatPart, expPart)
|
|
70
|
-
|
|
71
|
-
const expectedMac = this.computeHmac(serialized)
|
|
72
|
-
|
|
73
|
-
if (!constantTimeEqual(expectedMac, mac))
|
|
74
|
-
return {
|
|
75
|
-
valid: false,
|
|
76
|
-
reason: "Invalid signature",
|
|
77
|
-
}
|
|
78
|
-
|
|
79
|
-
const expNum = Number(base64UrlDecode(expPart))
|
|
80
|
-
|
|
81
|
-
if (!Number.isFinite(expNum))
|
|
82
|
-
return {
|
|
83
|
-
valid: false,
|
|
84
|
-
reason: "Error",
|
|
85
|
-
}
|
|
86
|
-
|
|
87
|
-
if (this.now() > expNum) return { valid: false, reason: "Expired" }
|
|
88
|
-
|
|
89
|
-
return {
|
|
90
|
-
valid: true,
|
|
91
|
-
userId: base64UrlDecode(userPart),
|
|
92
|
-
}
|
|
93
|
-
}
|
|
94
|
-
}
|
package/lib/utils/base64.ts
DELETED
|
@@ -1,17 +0,0 @@
|
|
|
1
|
-
export function base64UrlEncode(buf: Buffer | string) {
|
|
2
|
-
const b = typeof buf === "string" ? Buffer.from(buf) : buf
|
|
3
|
-
|
|
4
|
-
return b
|
|
5
|
-
.toString("base64")
|
|
6
|
-
.replace(/\+/g, "-")
|
|
7
|
-
.replace(/\//g, "_")
|
|
8
|
-
.replace(/=+$/, "")
|
|
9
|
-
}
|
|
10
|
-
|
|
11
|
-
export function base64UrlDecode(base: string) {
|
|
12
|
-
base = base.replace(/-/g, "+").replace(/_/g, "/")
|
|
13
|
-
|
|
14
|
-
while (base.length % 4) base += "="
|
|
15
|
-
|
|
16
|
-
return Buffer.from(base, "base64").toString()
|
|
17
|
-
}
|
package/lib/utils/crypto.ts
DELETED
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
import { timingSafeEqual } from "node:crypto"
|
|
2
|
-
|
|
3
|
-
export function constantTimeEqual(a: string, b: string) {
|
|
4
|
-
const bufA = Buffer.from(a)
|
|
5
|
-
|
|
6
|
-
const bufB = Buffer.from(b)
|
|
7
|
-
|
|
8
|
-
if (bufA.length !== bufB.length) return false
|
|
9
|
-
|
|
10
|
-
return timingSafeEqual(bufA, bufB)
|
|
11
|
-
}
|
package/lib/utils/index.ts
DELETED
package/tsconfig.build.json
DELETED
package/tsconfig.json
DELETED
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"compilerOptions": {
|
|
3
|
-
"module": "commonjs",
|
|
4
|
-
"target": "es2024",
|
|
5
|
-
"strict": true,
|
|
6
|
-
"esModuleInterop": true,
|
|
7
|
-
"skipLibCheck": true,
|
|
8
|
-
"experimentalDecorators": true,
|
|
9
|
-
"emitDecoratorMetadata": true,
|
|
10
|
-
"forceConsistentCasingInFileNames": true,
|
|
11
|
-
"strictNullChecks": false
|
|
12
|
-
}
|
|
13
|
-
}
|