@eggjs/cookies 3.1.0 → 4.0.0-beta.13

package/dist/esm/cookies.js

@@ -1,286 +0,0 @@
-import assert from 'node:assert';
-import { base64decode, base64encode } from 'utility';
-import { isSameSiteNoneCompatible } from 'should-send-same-site-none';
-import { Keygrip } from './keygrip.js';
-import { Cookie } from './cookie.js';
-import { CookieError } from './error.js';
-const keyCache = new Map();
-/**
- * cookies for egg
- * extend pillarjs/cookies, add encrypt and decrypt
- */
-export class Cookies {
-    #keysArray;
-    #keys;
-    #defaultCookieOptions;
-    #autoChips;
-    ctx;
-    app;
-    secure;
-    #parseChromiumResult;
-    constructor(ctx, keys, defaultCookieOptions) {
-        this.#keysArray = keys;
-        // default cookie options
-        this.#defaultCookieOptions = defaultCookieOptions;
-        this.#autoChips = defaultCookieOptions?.autoChips;
-        this.ctx = ctx;
-        this.secure = this.ctx.secure;
-        this.app = ctx.app;
-    }
-    get keys() {
-        if (!this.#keys) {
-            assert(Array.isArray(this.#keysArray), '.keys required for encrypt/sign cookies');
-            const cache = keyCache.get(this.#keysArray);
-            if (cache) {
-                this.#keys = cache;
-            }
-            else {
-                this.#keys = new Keygrip(this.#keysArray);
-                keyCache.set(this.#keysArray, this.#keys);
-            }
-        }
-        return this.#keys;
-    }
-    /**
-     * get cookie value by name
-     * @param  {String} name - cookie's name
-     * @param  {Object} opts - cookies' options
-     *            - {Boolean} signed - default to true
-     *            - {Boolean} encrypt - default to false
-     * @return {String} value - cookie's value
-     */
-    get(name, opts = {}) {
-        let value = this._get(name, opts);
-        if (value === undefined && this.#autoChips) {
-            // try to read _CHIPS-${name} prefix cookie
-            value = this._get(this.#formatChipsCookieName(name), opts);
-        }
-        return value;
-    }
-    _get(name, opts) {
-        const signed = computeSigned(opts);
-        const header = this.ctx.get('cookie');
-        if (!header)
-            return;
-        const match = header.match(getPattern(name));
-        if (!match)
-            return;
-        let value = match[1];
-        if (!opts.encrypt && !signed)
-            return value;
-        // signed
-        if (signed) {
-            const sigName = name + '.sig';
-            const sigValue = this.get(sigName, { signed: false });
-            if (!sigValue)
-                return;
-            const raw = name + '=' + value;
-            const index = this.keys.verify(raw, sigValue);
-            if (index < 0) {
-                // can not match any key, remove ${name}.sig
-                this.set(sigName, null, { path: '/', signed: false, overwrite: true });
-                return;
-            }
-            if (index > 0) {
-                // not signed by the first key, update sigValue
-                this.set(sigName, this.keys.sign(raw), { signed: false, overwrite: true });
-            }
-            return value;
-        }
-        // encrypt
-        value = base64decode(value, true, 'buffer');
-        const res = this.keys.decrypt(value);
-        return res ? res.value.toString() : undefined;
-    }
-    set(name, value, opts) {
-        opts = {
-            ...this.#defaultCookieOptions,
-            ...opts,
-        };
-        const signed = computeSigned(opts);
-        const shouldIgnoreSecureError = opts && opts.ignoreSecureError;
-        value = value || '';
-        if (!shouldIgnoreSecureError) {
-            if (!this.secure && opts.secure) {
-                throw new CookieError('Cannot send secure cookie over unencrypted connection');
-            }
-        }
-        let headers = this.ctx.response.get('set-cookie') || [];
-        if (!Array.isArray(headers)) {
-            headers = [headers];
-        }
-        // encrypt
-        if (opts.encrypt) {
-            value = value && base64encode(this.keys.encrypt(value), true);
-        }
-        // http://browsercookielimits.squawky.net/
-        if (value.length > 4093) {
-            this.app.emit('cookieLimitExceed', { name, value, ctx: this.ctx });
-        }
-        // https://github.com/linsight/should-send-same-site-none
-        // fixed SameSite=None: Known Incompatible Clients
-        const userAgent = this.ctx.get('user-agent');
-        let isSameSiteNone = false;
-        // disable autoChips if partitioned enable
-        let autoChips = !opts.partitioned && this.#autoChips;
-        if (opts.sameSite && typeof opts.sameSite === 'string' && opts.sameSite.toLowerCase() === 'none') {
-            isSameSiteNone = true;
-            if (opts.secure === false || !this.secure || (userAgent && !this.isSameSiteNoneCompatible(userAgent))) {
-                // Non-secure context or Incompatible clients, don't send SameSite=None property
-                opts.sameSite = false;
-                isSameSiteNone = false;
-            }
-        }
-        if (autoChips || opts.partitioned) {
-            // allow to set partitioned: secure=true and sameSite=none and chrome >= 118
-            if (!isSameSiteNone || opts.secure === false || !this.secure || (userAgent && !this.isPartitionedCompatible(userAgent))) {
-                // Non-secure context or Incompatible clients, don't send partitioned property
-                autoChips = false;
-                opts.partitioned = false;
-            }
-        }
-        // remove unpartitioned same name cookie first
-        if (opts.partitioned && opts.removeUnpartitioned) {
-            const overwrite = opts.overwrite;
-            if (overwrite) {
-                opts.overwrite = false;
-                headers = ignoreCookiesByName(headers, name);
-            }
-            const removeCookieOpts = {
-                ...opts,
-                partitioned: false,
-            };
-            const removeUnpartitionedCookie = new Cookie(name, '', removeCookieOpts);
-            // if user not set secure, reset secure to ctx.secure
-            if (opts.secure === undefined) {
-                removeUnpartitionedCookie.attrs.secure = this.secure;
-            }
-            headers = pushCookie(headers, removeUnpartitionedCookie);
-            // signed
-            if (signed) {
-                removeUnpartitionedCookie.name += '.sig';
-                headers = ignoreCookiesByNameAndPath(headers, removeUnpartitionedCookie.name, removeUnpartitionedCookie.attrs.path);
-                headers = pushCookie(headers, removeUnpartitionedCookie);
-            }
-        }
-        else if (autoChips) {
-            // add _CHIPS-${name} prefix cookie
-            const newCookieName = this.#formatChipsCookieName(name);
-            const newCookieOpts = {
-                ...opts,
-                partitioned: true,
-            };
-            const newPartitionedCookie = new Cookie(newCookieName, value, newCookieOpts);
-            // if user not set secure, reset secure to ctx.secure
-            if (opts.secure === undefined)
-                newPartitionedCookie.attrs.secure = this.secure;
-            headers = pushCookie(headers, newPartitionedCookie);
-            // signed
-            if (signed) {
-                newPartitionedCookie.value = value && this.keys.sign(newPartitionedCookie.toString());
-                newPartitionedCookie.name += '.sig';
-                headers = ignoreCookiesByNameAndPath(headers, newPartitionedCookie.name, newPartitionedCookie.attrs.path);
-                headers = pushCookie(headers, newPartitionedCookie);
-            }
-        }
-        const cookie = new Cookie(name, value, opts);
-        // if user not set secure, reset secure to ctx.secure
-        if (opts.secure === undefined) {
-            cookie.attrs.secure = this.secure;
-        }
-        headers = pushCookie(headers, cookie);
-        // signed
-        if (signed) {
-            cookie.value = value && this.keys.sign(cookie.toString());
-            cookie.name += '.sig';
-            headers = pushCookie(headers, cookie);
-        }
-        this.ctx.set('set-cookie', headers);
-        return this;
-    }
-    #formatChipsCookieName(name) {
-        return `_CHIPS-${name}`;
-    }
-    #parseChromiumAndMajorVersion(userAgent) {
-        if (!this.#parseChromiumResult) {
-            this.#parseChromiumResult = parseChromiumAndMajorVersion(userAgent);
-        }
-        return this.#parseChromiumResult;
-    }
-    isSameSiteNoneCompatible(userAgent) {
-        // Chrome >= 80.0.0.0
-        const result = this.#parseChromiumAndMajorVersion(userAgent);
-        if (result.chromium) {
-            return result.majorVersion >= 80;
-        }
-        return isSameSiteNoneCompatible(userAgent);
-    }
-    isPartitionedCompatible(userAgent) {
-        // support: Chrome >= 114.0.0.0
-        // default enable: Chrome >= 118.0.0.0
-        // https://developers.google.com/privacy-sandbox/3pcd/chips
-        const result = this.#parseChromiumAndMajorVersion(userAgent);
-        if (result.chromium) {
-            return result.majorVersion >= 118;
-        }
-        return false;
-    }
-}
-// https://github.com/linsight/should-send-same-site-none/blob/master/index.js#L86
-function parseChromiumAndMajorVersion(userAgent) {
-    const m = /Chrom[^ /]{1,100}\/(\d{1,100}?)\./.exec(userAgent);
-    if (!m) {
-        return { chromium: false, majorVersion: 0 };
-    }
-    // Extract digits from first capturing group.
-    return { chromium: true, majorVersion: parseInt(m[1]) };
-}
-const _patternCache = new Map();
-function getPattern(name) {
-    const cache = _patternCache.get(name);
-    if (cache) {
-        return cache;
-    }
-    const reg = new RegExp('(?:^|;) *' +
-        name.replace(/[-[\]{}()*+?.,\\^$|#\s]/g, '\\$&') +
-        '=([^;]*)');
-    _patternCache.set(name, reg);
-    return reg;
-}
-function computeSigned(opts) {
-    // encrypt default to false, signed default to true.
-    // disable singed when encrypt is true.
-    if (opts.encrypt)
-        return false;
-    return opts.signed !== false;
-}
-function pushCookie(cookies, cookie) {
-    if (cookie.attrs.overwrite) {
-        cookies = ignoreCookiesByName(cookies, cookie.name);
-    }
-    cookies.push(cookie.toHeader());
-    return cookies;
-}
-function ignoreCookiesByName(cookies, name) {
-    const prefix = `${name}=`;
-    return cookies.filter(c => !c.startsWith(prefix));
-}
-function ignoreCookiesByNameAndPath(cookies, name, path) {
-    if (!path) {
-        return ignoreCookiesByName(cookies, name);
-    }
-    const prefix = `${name}=`;
-    // foo=hello; path=/path1; samesite=none
-    const includedPath = `; path=${path};`;
-    // foo=hello; path=/path1
-    const endsWithPath = `; path=${path}`;
-    return cookies.filter(c => {
-        if (c.startsWith(prefix)) {
-            if (c.includes(includedPath) || c.endsWith(endsWithPath)) {
-                return false;
-            }
-        }
-        return true;
-    });
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/error.d.ts

@@ -1,3 +0,0 @@
-export declare class CookieError extends Error {
-    constructor(message: string, options?: ErrorOptions);
-}

package/dist/esm/error.js

@@ -1,7 +0,0 @@
-export class CookieError extends Error {
-    constructor(message, options) {
-        super(message, options);
-        this.name = this.constructor.name;
-    }
-}
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZXJyb3IuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvZXJyb3IudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsTUFBTSxPQUFPLFdBQVksU0FBUSxLQUFLO0lBQ3BDLFlBQVksT0FBZSxFQUFFLE9BQXNCO1FBQ2pELEtBQUssQ0FBQyxPQUFPLEVBQUUsT0FBTyxDQUFDLENBQUM7UUFDeEIsSUFBSSxDQUFDLElBQUksR0FBRyxJQUFJLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQztJQUNwQyxDQUFDO0NBQ0YifQ==

package/dist/esm/index.d.ts

@@ -1,4 +0,0 @@
-export * from './cookies.js';
-export * from './cookie.js';
-export * from './error.js';
-export * from './keygrip.js';

package/dist/esm/index.js

@@ -1,5 +0,0 @@
-export * from './cookies.js';
-export * from './cookie.js';
-export * from './error.js';
-export * from './keygrip.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxjQUFjLENBQUM7QUFDN0IsY0FBYyxhQUFhLENBQUM7QUFDNUIsY0FBYyxZQUFZLENBQUM7QUFDM0IsY0FBYyxjQUFjLENBQUMifQ==

package/dist/esm/keygrip.d.ts

@@ -1,11 +0,0 @@
-export declare class Keygrip {
-    #private;
-    constructor(keys: string[]);
-    encrypt(data: string, key?: string): Buffer<ArrayBuffer>;
-    decrypt(data: string | Buffer): {
-        value: Buffer;
-        index: number;
-    } | false;
-    sign(data: string | Buffer, key?: string): string;
-    verify(data: string, digest: string): number;
-}

package/dist/esm/keygrip.js

@@ -1,113 +0,0 @@
-import { debuglog } from 'node:util';
-import crypto from 'node:crypto';
-import assert from 'node:assert';
-const debug = debuglog('@eggjs/cookies:keygrip');
-const KEY_LEN = 32;
-const IV_SIZE = 16;
-const passwordCache = new Map();
-const replacer = {
-    '/': '_',
-    '+': '-',
-    '=': '',
-};
-function constantTimeCompare(a, b) {
-    if (a.length !== b.length) {
-        return false;
-    }
-    return crypto.timingSafeEqual(a, b);
-}
-// patch from https://github.com/crypto-utils/keygrip
-export class Keygrip {
-    #keys;
-    #hash = 'sha256';
-    #cipher = 'aes-256-cbc';
-    constructor(keys) {
-        assert(Array.isArray(keys) && keys.length > 0, 'keys must be provided and should be an array');
-        this.#keys = keys;
-    }
-    // encrypt a message
-    encrypt(data, key) {
-        key = key || this.#keys[0];
-        const password = keyToPassword(key);
-        const cipher = crypto.createCipheriv(this.#cipher, password.key, password.iv);
-        return crypt(cipher, data);
-    }
-    // decrypt a single message
-    // returns false on bad decrypts
-    decrypt(data) {
-        // decrypt every key
-        const keys = this.#keys;
-        for (let i = 0; i < keys.length; i++) {
-            const value = this.#decryptByKey(data, keys[i]);
-            if (value !== false) {
-                return { value, index: i };
-            }
-        }
-        return false;
-    }
-    #decryptByKey(data, key) {
-        try {
-            const password = keyToPassword(key);
-            const cipher = crypto.createDecipheriv(this.#cipher, password.key, password.iv);
-            return crypt(cipher, data);
-        }
-        catch (err) {
-            debug('crypt error: %s', err);
-            return false;
-        }
-    }
-    sign(data, key) {
-        // default to the first key
-        key = key || this.#keys[0];
-        // url safe base64
-        return crypto
-            .createHmac(this.#hash, key)
-            .update(data)
-            .digest('base64')
-            .replace(/\/|\+|=/g, x => {
-            return replacer[x];
-        });
-    }
-    verify(data, digest) {
-        const keys = this.#keys;
-        for (let i = 0; i < keys.length; i++) {
-            const key = keys[i];
-            if (constantTimeCompare(Buffer.from(digest), Buffer.from(this.sign(data, key)))) {
-                debug('data %s match key %s, index: %d', data, key, i);
-                return i;
-            }
-        }
-        return -1;
-    }
-}
-function crypt(cipher, data) {
-    const text = Buffer.isBuffer(data) ? cipher.update(data) : cipher.update(data, 'utf-8');
-    const pad = cipher.final();
-    return Buffer.concat([text, pad]);
-}
-function keyToPassword(key) {
-    if (passwordCache.has(key)) {
-        return passwordCache.get(key);
-    }
-    // Simulate EVP_BytesToKey.
-    // see https://github.com/nodejs/help/issues/1673#issuecomment-503222925
-    const bytes = Buffer.alloc(KEY_LEN + IV_SIZE);
-    let lastHash = null, nBytes = 0;
-    while (nBytes < bytes.length) {
-        const hash = crypto.createHash('md5');
-        if (lastHash)
-            hash.update(lastHash);
-        hash.update(key);
-        lastHash = hash.digest();
-        lastHash.copy(bytes, nBytes);
-        nBytes += lastHash.length;
-    }
-    // Use these for decryption.
-    const password = {
-        key: bytes.subarray(0, KEY_LEN),
-        iv: bytes.subarray(KEY_LEN, bytes.length),
-    };
-    passwordCache.set(key, password);
-    return password;
-}
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoia2V5Z3JpcC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9rZXlncmlwLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxRQUFRLEVBQUUsTUFBTSxXQUFXLENBQUM7QUFDckMsT0FBTyxNQUF1QixNQUFNLGFBQWEsQ0FBQztBQUNsRCxPQUFPLE1BQU0sTUFBTSxhQUFhLENBQUM7QUFFakMsTUFBTSxLQUFLLEdBQUcsUUFBUSxDQUFDLHdCQUF3QixDQUFDLENBQUM7QUFFakQsTUFBTSxPQUFPLEdBQUcsRUFBRSxDQUFDO0FBQ25CLE1BQU0sT0FBTyxHQUFHLEVBQUUsQ0FBQztBQUNuQixNQUFNLGFBQWEsR0FBRyxJQUFJLEdBQUcsRUFBRSxDQUFDO0FBRWhDLE1BQU0sUUFBUSxHQUEyQjtJQUN2QyxHQUFHLEVBQUUsR0FBRztJQUNSLEdBQUcsRUFBRSxHQUFHO0lBQ1IsR0FBRyxFQUFFLEVBQUU7Q0FDUixDQUFDO0FBRUYsU0FBUyxtQkFBbUIsQ0FBQyxDQUFTLEVBQUUsQ0FBUztJQUMvQyxJQUFJLENBQUMsQ0FBQyxNQUFNLEtBQUssQ0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDO1FBQzFCLE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUNELE9BQU8sTUFBTSxDQUFDLGVBQWUsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUM7QUFDdEMsQ0FBQztBQUVELHFEQUFxRDtBQUVyRCxNQUFNLE9BQU8sT0FBTztJQUNULEtBQUssQ0FBVztJQUNoQixLQUFLLEdBQUcsUUFBUSxDQUFDO0lBQ2pCLE9BQU8sR0FBRyxhQUFhLENBQUM7SUFFakMsWUFBWSxJQUFjO1FBQ3hCLE1BQU0sQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLElBQUksQ0FBQyxNQUFNLEdBQUcsQ0FBQyxFQUFFLDhDQUE4QyxDQUFDLENBQUM7UUFDL0YsSUFBSSxDQUFDLEtBQUssR0FBRyxJQUFJLENBQUM7SUFDcEIsQ0FBQztJQUVELG9CQUFvQjtJQUNwQixPQUFPLENBQUMsSUFBWSxFQUFFLEdBQVk7UUFDaEMsR0FBRyxHQUFHLEdBQUcsSUFBSSxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBQzNCLE1BQU0sUUFBUSxHQUFHLGFBQWEsQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUNwQyxNQUFNLE1BQU0sR0FBRyxNQUFNLENBQUMsY0FBYyxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsUUFBUSxDQUFDLEdBQUcsRUFBRSxRQUFRLENBQUMsRUFBRSxDQUFDLENBQUM7UUFDOUUsT0FBTyxLQUFLLENBQUMsTUFBTSxFQUFFLElBQUksQ0FBQyxDQUFDO0lBQzdCLENBQUM7SUFFRCwyQkFBMkI7SUFDM0IsZ0NBQWdDO0lBQ2hDLE9BQU8sQ0FBQyxJQUFxQjtRQUMzQixvQkFBb0I7UUFDcEIsTUFBTSxJQUFJLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQztRQUN4QixLQUFLLElBQUksQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLEdBQUcsSUFBSSxDQUFDLE1BQU0sRUFBRSxDQUFDLEVBQUUsRUFBRSxDQUFDO1lBQ3JDLE1BQU0sS0FBSyxHQUFHLElBQUksQ0FBQyxhQUFhLENBQUMsSUFBSSxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO1lBQ2hELElBQUksS0FBSyxLQUFLLEtBQUssRUFBRSxDQUFDO2dCQUNwQixPQUFPLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxDQUFDLEVBQUUsQ0FBQztZQUM3QixDQUFDO1FBQ0gsQ0FBQztRQUNELE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUVELGFBQWEsQ0FBQyxJQUFxQixFQUFFLEdBQVc7UUFDOUMsSUFBSSxDQUFDO1lBQ0gsTUFBTSxRQUFRLEdBQUcsYUFBYSxDQUFDLEdBQUcsQ0FBQyxDQUFDO1lBQ3BDLE1BQU0sTUFBTSxHQUFHLE1BQU0sQ0FBQyxnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLFFBQVEsQ0FBQyxHQUFHLEVBQUUsUUFBUSxDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBQ2hGLE9BQU8sS0FBSyxDQUFDLE1BQU0sRUFBRSxJQUFJLENBQUMsQ0FBQztRQUM3QixDQUFDO1FBQUMsT0FBTyxHQUFRLEVBQUUsQ0FBQztZQUNsQixLQUFLLENBQUMsaUJBQWlCLEVBQUUsR0FBRyxDQUFDLENBQUM7WUFDOUIsT0FBTyxLQUFLLENBQUM7UUFDZixDQUFDO0lBQ0gsQ0FBQztJQUVELElBQUksQ0FBQyxJQUFxQixFQUFFLEdBQVk7UUFDdEMsMkJBQTJCO1FBQzNCLEdBQUcsR0FBRyxHQUFHLElBQUksSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUUzQixrQkFBa0I7UUFDbEIsT0FBTyxNQUFNO2FBQ1YsVUFBVSxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsR0FBRyxDQUFDO2FBQzNCLE1BQU0sQ0FBQyxJQUFJLENBQUM7YUFDWixNQUFNLENBQUMsUUFBUSxDQUFDO2FBQ2hCLE9BQU8sQ0FBQyxVQUFVLEVBQUUsQ0FBQyxDQUFDLEVBQUU7WUFDdkIsT0FBTyxRQUFRLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDckIsQ0FBQyxDQUFDLENBQUM7SUFDUCxDQUFDO0lBRUQsTUFBTSxDQUFDLElBQVksRUFBRSxNQUFjO1FBQ2pDLE1BQU0sSUFBSSxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUM7UUFDeEIsS0FBSyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxHQUFHLElBQUksQ0FBQyxNQUFNLEVBQUUsQ0FBQyxFQUFFLEVBQUUsQ0FBQztZQUNyQyxNQUFNLEdBQUcsR0FBRyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7WUFDcEIsSUFBSSxtQkFBbUIsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxJQUFJLEVBQUUsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7Z0JBQ2hGLEtBQUssQ0FBQyxpQ0FBaUMsRUFBRSxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQyxDQUFDO2dCQUN2RCxPQUFPLENBQUMsQ0FBQztZQUNYLENBQUM7UUFDSCxDQUFDO1FBQ0QsT0FBTyxDQUFDLENBQUMsQ0FBQztJQUNaLENBQUM7Q0FDRjtBQUVELFNBQVMsS0FBSyxDQUFDLE1BQWMsRUFBRSxJQUFxQjtJQUNsRCxNQUFNLElBQUksR0FBRyxNQUFNLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLElBQUksRUFBRSxPQUFPLENBQUMsQ0FBQztJQUN4RixNQUFNLEdBQUcsR0FBRyxNQUFNLENBQUMsS0FBSyxFQUFFLENBQUM7SUFDM0IsT0FBTyxNQUFNLENBQUMsTUFBTSxDQUFDLENBQUUsSUFBSSxFQUFFLEdBQUcsQ0FBRSxDQUFDLENBQUM7QUFDdEMsQ0FBQztBQUVELFNBQVMsYUFBYSxDQUFDLEdBQVc7SUFDaEMsSUFBSSxhQUFhLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUM7UUFDM0IsT0FBTyxhQUFhLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBQ2hDLENBQUM7SUFFRCwyQkFBMkI7SUFDM0Isd0VBQXdFO0lBQ3hFLE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxLQUFLLENBQUMsT0FBTyxHQUFHLE9BQU8sQ0FBQyxDQUFDO0lBQzlDLElBQUksUUFBUSxHQUFHLElBQUksRUFDakIsTUFBTSxHQUFHLENBQUMsQ0FBQztJQUNiLE9BQU8sTUFBTSxHQUFHLEtBQUssQ0FBQyxNQUFNLEVBQUUsQ0FBQztRQUM3QixNQUFNLElBQUksR0FBRyxNQUFNLENBQUMsVUFBVSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQ3RDLElBQUksUUFBUTtZQUFFLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLENBQUM7UUFDcEMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUNqQixRQUFRLEdBQUcsSUFBSSxDQUFDLE1BQU0sRUFBRSxDQUFDO1FBQ3pCLFFBQVEsQ0FBQyxJQUFJLENBQUMsS0FBSyxFQUFFLE1BQU0sQ0FBQyxDQUFDO1FBQzdCLE1BQU0sSUFBSSxRQUFRLENBQUMsTUFBTSxDQUFDO0lBQzVCLENBQUM7SUFFRCw0QkFBNEI7SUFDNUIsTUFBTSxRQUFRLEdBQUc7UUFDZixHQUFHLEVBQUUsS0FBSyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQUUsT0FBTyxDQUFDO1FBQy9CLEVBQUUsRUFBRSxLQUFLLENBQUMsUUFBUSxDQUFDLE9BQU8sRUFBRSxLQUFLLENBQUMsTUFBTSxDQUFDO0tBQzFDLENBQUM7SUFFRixhQUFhLENBQUMsR0FBRyxDQUFDLEdBQUcsRUFBRSxRQUFRLENBQUMsQ0FBQztJQUNqQyxPQUFPLFFBQVEsQ0FBQztBQUNsQixDQUFDIn0=

package/dist/esm/package.json

@@ -1,3 +0,0 @@
-{
-  "type": "module"
-}

package/dist/package.json

@@ -1,4 +0,0 @@
-{
-  "name": "@eggjs/cookies",
-  "version": "3.1.0"
-}

package/src/cookie.ts

@@ -1,165 +0,0 @@
-import assert from 'node:assert';
-
-/**
- * RegExp to match field-content in RFC 7230 sec 3.2
- *
- * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
- * field-vchar   = VCHAR / obs-text
- * obs-text      = %x80-FF
- */
-const fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/; // eslint-disable-line no-control-regex
-
-/**
-* RegExp to match Same-Site cookie attribute value.
-* https://en.wikipedia.org/wiki/HTTP_cookie#SameSite_cookie
-*/
-const sameSiteRegExp = /^(?:none|lax|strict)$/i;
-
-/**
- * RegExp to match Priority cookie attribute value.
- */
-const PRIORITY_REGEXP = /^(?:low|medium|high)$/i;
-
-export interface CookieSetOptions {
-  /**
-   * The path for the cookie to be set in
-   */
-  path?: string | null;
-  /**
-   * The domain for the cookie
-   */
-  domain?: string | (() => string);
-  /**
-   * Is overridable
-   */
-  overwrite?: boolean;
-  /**
-   * Is the same site
-   */
-  sameSite?: string | boolean;
-  /**
-   * Encrypt the cookie's value or not
-   */
-  encrypt?: boolean;
-  /**
-   * Max age for browsers
-   */
-  maxAge?: number;
-  /**
-   * Expire time
-   */
-  expires?: Date;
-  /**
-  * Is for http only
-  */
-  httpOnly?: boolean;
-  /**
-  * Encrypt the cookie's value or not
-  */
-  secure?: boolean;
-
-  /**
-  * Once `true` and secure set to `true`, ignore the secure error in a none-ssl environment.
-  */
-  ignoreSecureError?: boolean;
-  /**
-   * Is it signed or not.
-   */
-  signed?: boolean | number;
-  /**
-   * Is it partitioned or not.
-   */
-  partitioned?: boolean;
-  /**
-   * Remove unpartitioned same name cookie or not.
-   */
-  removeUnpartitioned?: boolean;
-  /**
-   * The cookie priority.
-   */
-  priority?: 'low' | 'medium' | 'high' | 'LOW' | 'MEDIUM' | 'HIGH';
-}
-
-export class Cookie {
-  name: string;
-  value: string;
-  readonly attrs: CookieSetOptions;
-
-  constructor(name: string, value?: string | null, attrs?: CookieSetOptions) {
-    assert(fieldContentRegExp.test(name), 'argument name is invalid');
-    assert(!value || fieldContentRegExp.test(value), 'argument value is invalid');
-    this.name = name;
-    this.value = value ?? '';
-    this.attrs = mergeDefaultAttrs(attrs);
-    assert(!this.attrs.path || fieldContentRegExp.test(this.attrs.path),
-      'argument option path is invalid');
-    if (typeof this.attrs.domain === 'function') {
-      this.attrs.domain = this.attrs.domain();
-    }
-    assert(!this.attrs.domain || fieldContentRegExp.test(this.attrs.domain),
-      'argument option domain is invalid');
-    assert(!this.attrs.sameSite || this.attrs.sameSite === true || sameSiteRegExp.test(this.attrs.sameSite),
-      'argument option sameSite is invalid');
-    assert(!this.attrs.priority || PRIORITY_REGEXP.test(this.attrs.priority),
-      'argument option priority is invalid');
-    if (!value) {
-      this.attrs.expires = new Date(0);
-      // make sure maxAge is empty
-      this.attrs.maxAge = undefined;
-    }
-  }
-
-  toString() {
-    return this.name + '=' + this.value;
-  }
-
-  toHeader() {
-    let header = this.toString();
-    const attrs = this.attrs;
-    if (attrs.path) {
-      header += '; path=' + attrs.path;
-    }
-    const maxAge = typeof attrs.maxAge === 'string' ? parseInt(attrs.maxAge, 10) : attrs.maxAge;
-    // ignore 0, `session` and other invalid maxAge
-    if (maxAge) {
-      header += '; max-age=' + Math.round(maxAge / 1000);
-      attrs.expires = new Date(Date.now() + maxAge);
-    }
-    if (attrs.expires) {
-      header += '; expires=' + attrs.expires.toUTCString();
-    }
-    if (attrs.domain) {
-      header += '; domain=' + attrs.domain;
-    }
-    if (attrs.priority) {
-      header += '; priority=' + attrs.priority.toLowerCase();
-    }
-    if (attrs.sameSite) {
-      header += '; samesite=' + (attrs.sameSite === true ? 'strict' : attrs.sameSite.toLowerCase());
-    }
-    if (attrs.secure) {
-      header += '; secure';
-    }
-    if (attrs.httpOnly) {
-      header += '; httponly';
-    }
-    if (attrs.partitioned) {
-      header += '; partitioned';
-    }
-    return header;
-  }
-}
-
-function mergeDefaultAttrs(attrs?: CookieSetOptions) {
-  const merged = {
-    path: '/',
-    httpOnly: true,
-    secure: false,
-    overwrite: false,
-    sameSite: false,
-    partitioned: false,
-    priority: undefined,
-    ...attrs,
-  };
-  return merged;
-}