@downcity/city 0.2.205 → 0.2.213

package/bin/federation/auth/token-signer.js

@@ -1,116 +0,0 @@
-/**
- * user_token 签发与校验模块。
- *
- * Downcity 使用 Web Crypto API 的 HMAC-SHA256 生成最小可用的 user_token。
- * 零 Node.js 依赖，兼容所有现代运行时（Node、Workers、Deno、Bun、浏览器）。
- */
-import { httpError, base64UrlEncode, base64UrlDecode, base64UrlEncodeBytes, base64UrlDecodeBytes, timingSafeEqualBytes } from "../../utils/helpers.js";
-export class TokenSigner {
-    signingKey;
-    /** 缓存的 CryptoKey，避免每次签名都重新 import */
-    cryptoKey;
-    constructor(signingKey) {
-        if (!signingKey) {
-            throw new Error("TokenSigner requires a signing key");
-        }
-        this.signingKey = signingKey;
-    }
-    /**
-     * 获取（或缓存）HMAC CryptoKey。
-     *
-     * 使用 Web Crypto API 的 crypto.subtle.importKey，
-     * 首次调用时创建并缓存 Promise，后续复用。
-     */
-    getCryptoKey() {
-        if (!this.cryptoKey) {
-            const encoder = new TextEncoder();
-            this.cryptoKey = crypto.subtle.importKey("raw", encoder.encode(this.signingKey), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
-        }
-        return this.cryptoKey;
-    }
-    /** 签发 user_token */
-    async sign(input) {
-        if (!input || typeof input.city_id !== "string" || input.city_id.length === 0) {
-            throw new TypeError("city_id is required");
-        }
-        if (typeof input.user_id !== "string" || input.user_id.length === 0) {
-            throw new TypeError("user_id is required");
-        }
-        const ttl = input.ttl;
-        const now = Math.floor(Date.now() / 1000);
-        const payload = {
-            aud: "downcity:user",
-            city_id: input.city_id,
-            user_id: input.user_id,
-            metadata: input.metadata ?? {},
-            iat: now,
-        };
-        if (ttl) {
-            payload.exp = now + TokenSigner.parseTTL(ttl);
-        }
-        const encodedPayload = base64UrlEncode(JSON.stringify(payload));
-        const signature = await signPayload(await this.getCryptoKey(), encodedPayload);
-        return `ub_${encodedPayload}.${signature}`;
-    }
-    /** 校验并解析 user_token，失败抛 httpError(401) */
-    async verify(token) {
-        const rawToken = token.startsWith("ub_") ? token.slice(3) : token;
-        const [encodedPayload, signature] = rawToken.split(".");
-        if (!encodedPayload || !signature) {
-            throw httpError(401, "Invalid user token");
-        }
-        if (!await verifyPayload(await this.getCryptoKey(), encodedPayload, signature)) {
-            throw httpError(401, "Invalid user token signature");
-        }
-        const payload = JSON.parse(base64UrlDecode(encodedPayload));
-        const now = Math.floor(Date.now() / 1000);
-        if (payload.exp && payload.exp <= now) {
-            throw httpError(401, "User token expired");
-        }
-        if (payload.aud !== "downcity:user") {
-            throw httpError(401, "Invalid user token audience");
-        }
-        if (!payload.city_id || !payload.user_id) {
-            throw httpError(401, "Invalid user token payload");
-        }
-        return payload;
-    }
-    /** 把 ttl 解析成秒数 */
-    static parseTTL(ttl) {
-        if (typeof ttl === "number" && Number.isFinite(ttl) && ttl > 0) {
-            return ttl;
-        }
-        if (typeof ttl !== "string") {
-            throw new TypeError("ttl must be a positive number of seconds or a string like 1h");
-        }
-        const match = ttl.match(/^(\d+)(s|m|h|d)$/);
-        if (!match) {
-            throw new Error(`Invalid ttl: ${ttl}`);
-        }
-        const value = Number(match[1]);
-        const unit = match[2];
-        const multipliers = {
-            s: 1,
-            m: 60,
-            h: 60 * 60,
-            d: 24 * 60 * 60,
-        };
-        return value * multipliers[unit];
-    }
-}
-/**
- * 使用 HMAC-SHA256 对 payload 签名，返回 base64url 编码的签名。
- */
-async function signPayload(cryptoKey, encodedPayload) {
-    const signature = await crypto.subtle.sign("HMAC", cryptoKey, new TextEncoder().encode(encodedPayload));
-    return base64UrlEncodeBytes(new Uint8Array(signature));
-}
-/**
- * 验证 HMAC-SHA256 签名是否匹配。
- */
-async function verifyPayload(cryptoKey, encodedPayload, signature) {
-    const expected = base64UrlDecodeBytes(signature);
-    const actual = await crypto.subtle.sign("HMAC", cryptoKey, new TextEncoder().encode(encodedPayload));
-    return timingSafeEqualBytes(new Uint8Array(actual), expected);
-}
-//# sourceMappingURL=token-signer.js.map

package/bin/federation/auth/token-signer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-signer.js","sourceRoot":"","sources":["../../../src/federation/auth/token-signer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGvJ,MAAM,OAAO,WAAW;IACb,UAAU,CAAS;IAE5B,qCAAqC;IAC7B,SAAS,CAAsB;IAEvC,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACK,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CACtC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,KAA2B;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAqB;YAChC,GAAG,EAAE,eAAe;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;QAC/E,OAAO,MAAM,cAAc,IAAI,SAAS,EAAE,CAAC;IAC7C,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/E,MAAM,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAqB,CAAC;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACtC,MAAM,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;YACpC,MAAM,SAAS,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,SAAS,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kBAAkB;IAClB,MAAM,CAAC,QAAQ,CAAC,GAAoB;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YAC/D,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAA0B,CAAC;QAC/C,MAAM,WAAW,GAAG;YAClB,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,EAAE;YACL,CAAC,EAAE,EAAE,GAAG,EAAE;YACV,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;SAChB,CAAC;QAEF,OAAO,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,SAAoB,EAAE,cAAsB;IACrE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,MAAM,EACN,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CACzC,CAAC;IACF,OAAO,oBAAoB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,SAAoB,EAAE,cAAsB,EAAE,SAAiB;IAC1F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACrC,MAAM,EACN,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CACzC,CAAC;IACF,OAAO,oBAAoB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC"}