@drawbridge/drawbridge-utils 0.0.141 → 0.0.142

package/dist/env.d.cts

@@ -1,10 +1,10 @@
 // Boot-time required-environment-variable validation. A service calls
 // assertEnv(required) as the first thing in index.js so a missing must-have
 // config fails loudly at startup instead of silently degrading at first use
-// (e.g. a missing OAUTH_TOKEN_HMAC_KEY surfacing only as failed socket auth).
+// (e.g. a missing HMAC_OAUTH_TOKEN_KEY surfacing only as failed socket auth).
 //
 //   const { assertEnv } = require( '@drawbridge/drawbridge-utils/env' );
-//   assertEnv([ 'MONGODB_URI', 'REDIS_URL', 'OAUTH_TOKEN_HMAC_KEY' ]);
+//   assertEnv([ 'MONGODB_URI', 'REDIS_URL', 'HMAC_OAUTH_TOKEN_KEY' ]);
 //
 // Reports EVERY missing var in one message (not just the first) and exits the
 // process with code 1. A var counts as missing when unset, null, or an

package/dist/env.d.ts

@@ -1,10 +1,10 @@
 // Boot-time required-environment-variable validation. A service calls
 // assertEnv(required) as the first thing in index.js so a missing must-have
 // config fails loudly at startup instead of silently degrading at first use
-// (e.g. a missing OAUTH_TOKEN_HMAC_KEY surfacing only as failed socket auth).
+// (e.g. a missing HMAC_OAUTH_TOKEN_KEY surfacing only as failed socket auth).
 //
 //   const { assertEnv } = require( '@drawbridge/drawbridge-utils/env' );
-//   assertEnv([ 'MONGODB_URI', 'REDIS_URL', 'OAUTH_TOKEN_HMAC_KEY' ]);
+//   assertEnv([ 'MONGODB_URI', 'REDIS_URL', 'HMAC_OAUTH_TOKEN_KEY' ]);
 //
 // Reports EVERY missing var in one message (not just the first) and exits the
 // process with code 1. A var counts as missing when unset, null, or an

package/dist/oauth/index.cjs

@@ -217,7 +217,7 @@ var toOption = (scope) => ({
 });
 var developerOptions = developer.map(toOption);
 var scopeOptions = scopes.map(toOption);
-var hashToken = (raw) => hash(raw, process.env.OAUTH_TOKEN_HMAC_KEY);
+var hashToken = (raw) => hash(raw, process.env.HMAC_OAUTH_TOKEN_KEY);
 var generateToken = () => generate(32, "base64url");
 var REFRESH_LEAD_SECONDS = 60;
 var createOAuthClient = ({

package/dist/oauth/index.d.cts

@@ -255,10 +255,10 @@ const scopeOptions = scopes.map( toOption );
 // fix the OAuth-specific conventions (32 bytes base64url, env-keyed HMAC)
 // ─────────────────────────────────────────────────────────────────────────
 
-// Hash an OAuth token with the deployment's HMAC key (OAUTH_TOKEN_HMAC_KEY).
+// Hash an OAuth token with the deployment's HMAC key (HMAC_OAUTH_TOKEN_KEY).
 // Falls back to plain SHA256 if the env var is unset — fine for local dev,
 // not for production (DB compromise would then allow token forgery).
-const hashToken = ( raw ) => hash( raw, process.env.OAUTH_TOKEN_HMAC_KEY );
+const hashToken = ( raw ) => hash( raw, process.env.HMAC_OAUTH_TOKEN_KEY );
 
 // 32 cryptographically random bytes encoded as a 43-char base64url string —
 // the shape used for access tokens, refresh tokens, PATs, and authorization

package/dist/oauth/index.d.ts

@@ -255,10 +255,10 @@ const scopeOptions = scopes.map( toOption );
 // fix the OAuth-specific conventions (32 bytes base64url, env-keyed HMAC)
 // ─────────────────────────────────────────────────────────────────────────
 
-// Hash an OAuth token with the deployment's HMAC key (OAUTH_TOKEN_HMAC_KEY).
+// Hash an OAuth token with the deployment's HMAC key (HMAC_OAUTH_TOKEN_KEY).
 // Falls back to plain SHA256 if the env var is unset — fine for local dev,
 // not for production (DB compromise would then allow token forgery).
-const hashToken = ( raw ) => hash( raw, process.env.OAUTH_TOKEN_HMAC_KEY );
+const hashToken = ( raw ) => hash( raw, process.env.HMAC_OAUTH_TOKEN_KEY );
 
 // 32 cryptographically random bytes encoded as a 43-char base64url string —
 // the shape used for access tokens, refresh tokens, PATs, and authorization

package/dist/oauth/index.js

@@ -162,7 +162,7 @@ var toOption = (scope) => ({
 });
 var developerOptions = developer.map(toOption);
 var scopeOptions = scopes.map(toOption);
-var hashToken = (raw) => hash(raw, process.env.OAUTH_TOKEN_HMAC_KEY);
+var hashToken = (raw) => hash(raw, process.env.HMAC_OAUTH_TOKEN_KEY);
 var generateToken = () => generate(32, "base64url");
 var REFRESH_LEAD_SECONDS = 60;
 var createOAuthClient = ({

package/dist/oauth/server.cjs

@@ -143,7 +143,7 @@ var toOption = (scope) => ({
 });
 var developerOptions = developer.map(toOption);
 var scopeOptions = scopes.map(toOption);
-var hashToken = (raw) => hash(raw, process.env.OAUTH_TOKEN_HMAC_KEY);
+var hashToken = (raw) => hash(raw, process.env.HMAC_OAUTH_TOKEN_KEY);
 var generateToken = () => generate(32, "base64url");
 
 // lib/oauth/server.js

package/dist/oauth/server.js

@@ -107,7 +107,7 @@ var toOption = (scope) => ({
 });
 var developerOptions = developer.map(toOption);
 var scopeOptions = scopes.map(toOption);
-var hashToken = (raw) => hash(raw, process.env.OAUTH_TOKEN_HMAC_KEY);
+var hashToken = (raw) => hash(raw, process.env.HMAC_OAUTH_TOKEN_KEY);
 var generateToken = () => generate(32, "base64url");
 
 // lib/oauth/server.js

package/package.json

@@ -216,5 +216,5 @@
     "prepublishOnly": ". \"$HOME/.nvm/nvm.sh\" && nvm use && tsup && node --test"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.141"
+  "version": "0.0.142"
 }