@eggjs/cookies 4.0.0-beta.20 → 4.0.0-beta.21

package/dist/cookie.d.ts

@@ -0,0 +1,66 @@
+export interface CookieSetOptions {
+    /**
+     * The path for the cookie to be set in
+     */
+    path?: string | null;
+    /**
+     * The domain for the cookie
+     */
+    domain?: string | (() => string);
+    /**
+     * Is overridable
+     */
+    overwrite?: boolean;
+    /**
+     * Is the same site
+     */
+    sameSite?: string | boolean;
+    /**
+     * Encrypt the cookie's value or not
+     */
+    encrypt?: boolean;
+    /**
+     * Max age for browsers
+     */
+    maxAge?: number;
+    /**
+     * Expire time
+     */
+    expires?: Date;
+    /**
+     * Is for http only
+     */
+    httpOnly?: boolean;
+    /**
+     * Encrypt the cookie's value or not
+     */
+    secure?: boolean;
+    /**
+     * Once `true` and secure set to `true`, ignore the secure error in a none-ssl environment.
+     */
+    ignoreSecureError?: boolean;
+    /**
+     * Is it signed or not.
+     */
+    signed?: boolean | number;
+    /**
+     * Is it partitioned or not.
+     */
+    partitioned?: boolean;
+    /**
+     * Remove unpartitioned same name cookie or not.
+     */
+    removeUnpartitioned?: boolean;
+    /**
+     * The cookie priority.
+     */
+    priority?: 'low' | 'medium' | 'high' | 'LOW' | 'MEDIUM' | 'HIGH';
+}
+export declare class Cookie {
+    name: string;
+    value: string;
+    readonly attrs: CookieSetOptions;
+    constructor(name: string, value?: string | null, attrs?: CookieSetOptions);
+    toString(): string;
+    toHeader(): string;
+}

package/dist/cookie.js

@@ -0,0 +1,94 @@
+import assert from 'node:assert';
+/**
+ * RegExp to match field-content in RFC 7230 sec 3.2
+ *
+ * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
+ * field-vchar   = VCHAR / obs-text
+ * obs-text      = %x80-FF
+ */
+const fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/; // eslint-disable-line no-control-regex
+/**
+ * RegExp to match Same-Site cookie attribute value.
+ * https://en.wikipedia.org/wiki/HTTP_cookie#SameSite_cookie
+ */
+const sameSiteRegExp = /^(?:none|lax|strict)$/i;
+/**
+ * RegExp to match Priority cookie attribute value.
+ */
+const PRIORITY_REGEXP = /^(?:low|medium|high)$/i;
+export class Cookie {
+    name;
+    value;
+    attrs;
+    constructor(name, value, attrs) {
+        assert(fieldContentRegExp.test(name), 'argument name is invalid');
+        assert(!value || fieldContentRegExp.test(value), 'argument value is invalid');
+        this.name = name;
+        this.value = value ?? '';
+        this.attrs = mergeDefaultAttrs(attrs);
+        assert(!this.attrs.path || fieldContentRegExp.test(this.attrs.path), 'argument option path is invalid');
+        if (typeof this.attrs.domain === 'function') {
+            this.attrs.domain = this.attrs.domain();
+        }
+        assert(!this.attrs.domain || fieldContentRegExp.test(this.attrs.domain), 'argument option domain is invalid');
+        assert(!this.attrs.sameSite || this.attrs.sameSite === true || sameSiteRegExp.test(this.attrs.sameSite), 'argument option sameSite is invalid');
+        assert(!this.attrs.priority || PRIORITY_REGEXP.test(this.attrs.priority), 'argument option priority is invalid');
+        if (!value) {
+            this.attrs.expires = new Date(0);
+            // make sure maxAge is empty
+            this.attrs.maxAge = undefined;
+        }
+    }
+    toString() {
+        return this.name + '=' + this.value;
+    }
+    toHeader() {
+        let header = this.toString();
+        const attrs = this.attrs;
+        if (attrs.path) {
+            header += '; path=' + attrs.path;
+        }
+        const maxAge = typeof attrs.maxAge === 'string' ? parseInt(attrs.maxAge, 10) : attrs.maxAge;
+        // ignore 0, `session` and other invalid maxAge
+        if (maxAge) {
+            header += '; max-age=' + Math.round(maxAge / 1000);
+            attrs.expires = new Date(Date.now() + maxAge);
+        }
+        if (attrs.expires) {
+            header += '; expires=' + attrs.expires.toUTCString();
+        }
+        if (attrs.domain) {
+            header += '; domain=' + attrs.domain;
+        }
+        if (attrs.priority) {
+            header += '; priority=' + attrs.priority.toLowerCase();
+        }
+        if (attrs.sameSite) {
+            header += '; samesite=' + (attrs.sameSite === true ? 'strict' : attrs.sameSite.toLowerCase());
+        }
+        if (attrs.secure) {
+            header += '; secure';
+        }
+        if (attrs.httpOnly) {
+            header += '; httponly';
+        }
+        if (attrs.partitioned) {
+            header += '; partitioned';
+        }
+        return header;
+    }
+}
+function mergeDefaultAttrs(attrs) {
+    const merged = {
+        path: '/',
+        httpOnly: true,
+        secure: false,
+        overwrite: false,
+        sameSite: false,
+        partitioned: false,
+        priority: undefined,
+        ...attrs,
+    };
+    return merged;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cookies.d.ts

@@ -0,0 +1,43 @@
+import { Keygrip } from './keygrip.ts';
+import { type CookieSetOptions } from './cookie.ts';
+export interface DefaultCookieOptions extends CookieSetOptions {
+    /**
+     * Auto get and set `_CHIPS-` prefix cookie to adaptation CHIPS mode (The default value is false).
+     */
+    autoChips?: boolean;
+}
+export interface CookieGetOptions {
+    /**
+     * Whether to sign or not (The default value is true).
+     */
+    signed?: boolean;
+    /**
+     * Encrypt the cookie's value or not (The default value is false).
+     */
+    encrypt?: boolean;
+}
+/**
+ * cookies for egg
+ * extend pillarjs/cookies, add encrypt and decrypt
+ */
+export declare class Cookies {
+    #private;
+    readonly ctx: Record<string, any>;
+    readonly app: Record<string, any>;
+    readonly secure: boolean;
+    constructor(ctx: Record<string, any>, keys: string[], defaultCookieOptions?: DefaultCookieOptions);
+    get keys(): Keygrip;
+    /**
+     * get cookie value by name
+     * @param  {String} name - cookie's name
+     * @param  {Object} opts - cookies' options
+     *            - {Boolean} signed - default to true
+     *            - {Boolean} encrypt - default to false
+     * @return {String} value - cookie's value
+     */
+    get(name: string, opts?: CookieGetOptions): string | undefined;
+    _get(name: string, opts: CookieGetOptions): string | undefined;
+    set(name: string, value: string | null, opts?: CookieSetOptions): this;
+    isSameSiteNoneCompatible(userAgent: string): boolean;
+    isPartitionedCompatible(userAgent: string): boolean;
+}

package/dist/cookies.js

@@ -0,0 +1,287 @@
+import assert from 'node:assert';
+import { base64decode, base64encode } from 'utility';
+import { isSameSiteNoneCompatible } from 'should-send-same-site-none';
+import { Keygrip } from "./keygrip.js";
+import { Cookie } from "./cookie.js";
+import { CookieError } from "./error.js";
+const keyCache = new Map();
+/**
+ * cookies for egg
+ * extend pillarjs/cookies, add encrypt and decrypt
+ */
+export class Cookies {
+    #keysArray;
+    #keys;
+    #defaultCookieOptions;
+    #autoChips;
+    ctx;
+    app;
+    secure;
+    #parseChromiumResult;
+    constructor(ctx, keys, defaultCookieOptions) {
+        this.#keysArray = keys;
+        // default cookie options
+        this.#defaultCookieOptions = defaultCookieOptions;
+        this.#autoChips = defaultCookieOptions?.autoChips;
+        this.ctx = ctx;
+        this.secure = this.ctx.secure;
+        this.app = ctx.app;
+    }
+    get keys() {
+        if (!this.#keys) {
+            assert(Array.isArray(this.#keysArray), '.keys required for encrypt/sign cookies');
+            const cache = keyCache.get(this.#keysArray);
+            if (cache) {
+                this.#keys = cache;
+            }
+            else {
+                this.#keys = new Keygrip(this.#keysArray);
+                keyCache.set(this.#keysArray, this.#keys);
+            }
+        }
+        return this.#keys;
+    }
+    /**
+     * get cookie value by name
+     * @param  {String} name - cookie's name
+     * @param  {Object} opts - cookies' options
+     *            - {Boolean} signed - default to true
+     *            - {Boolean} encrypt - default to false
+     * @return {String} value - cookie's value
+     */
+    get(name, opts = {}) {
+        let value = this._get(name, opts);
+        if (value === undefined && this.#autoChips) {
+            // try to read _CHIPS-${name} prefix cookie
+            value = this._get(this.#formatChipsCookieName(name), opts);
+        }
+        return value;
+    }
+    _get(name, opts) {
+        const signed = computeSigned(opts);
+        const header = this.ctx.get('cookie');
+        if (!header)
+            return;
+        const match = header.match(getPattern(name));
+        if (!match)
+            return;
+        let value = match[1];
+        if (!opts.encrypt && !signed)
+            return value;
+        // signed
+        if (signed) {
+            const sigName = name + '.sig';
+            const sigValue = this.get(sigName, { signed: false });
+            if (!sigValue)
+                return;
+            const raw = name + '=' + value;
+            const index = this.keys.verify(raw, sigValue);
+            if (index < 0) {
+                // can not match any key, remove ${name}.sig
+                this.set(sigName, null, { path: '/', signed: false, overwrite: true });
+                return;
+            }
+            if (index > 0) {
+                // not signed by the first key, update sigValue
+                this.set(sigName, this.keys.sign(raw), { signed: false, overwrite: true });
+            }
+            return value;
+        }
+        // encrypt
+        value = base64decode(value, true, 'buffer');
+        const res = this.keys.decrypt(value);
+        return res ? res.value.toString() : undefined;
+    }
+    set(name, value, opts) {
+        opts = {
+            ...this.#defaultCookieOptions,
+            ...opts,
+        };
+        const signed = computeSigned(opts);
+        const shouldIgnoreSecureError = opts && opts.ignoreSecureError;
+        value = value || '';
+        if (!shouldIgnoreSecureError) {
+            if (!this.secure && opts.secure) {
+                throw new CookieError('Cannot send secure cookie over unencrypted connection');
+            }
+        }
+        let headers = this.ctx.response.get('set-cookie') || [];
+        if (!Array.isArray(headers)) {
+            headers = [headers];
+        }
+        // encrypt
+        if (opts.encrypt) {
+            value = value && base64encode(this.keys.encrypt(value), true);
+        }
+        // http://browsercookielimits.squawky.net/
+        if (value.length > 4093) {
+            this.app.emit('cookieLimitExceed', { name, value, ctx: this.ctx });
+        }
+        // https://github.com/linsight/should-send-same-site-none
+        // fixed SameSite=None: Known Incompatible Clients
+        const userAgent = this.ctx.get('user-agent');
+        let isSameSiteNone = false;
+        // disable autoChips if partitioned enable
+        let autoChips = !opts.partitioned && this.#autoChips;
+        if (opts.sameSite && typeof opts.sameSite === 'string' && opts.sameSite.toLowerCase() === 'none') {
+            isSameSiteNone = true;
+            if (opts.secure === false || !this.secure || (userAgent && !this.isSameSiteNoneCompatible(userAgent))) {
+                // Non-secure context or Incompatible clients, don't send SameSite=None property
+                opts.sameSite = false;
+                isSameSiteNone = false;
+            }
+        }
+        if (autoChips || opts.partitioned) {
+            // allow to set partitioned: secure=true and sameSite=none and chrome >= 118
+            if (!isSameSiteNone ||
+                opts.secure === false ||
+                !this.secure ||
+                (userAgent && !this.isPartitionedCompatible(userAgent))) {
+                // Non-secure context or Incompatible clients, don't send partitioned property
+                autoChips = false;
+                opts.partitioned = false;
+            }
+        }
+        // remove unpartitioned same name cookie first
+        if (opts.partitioned && opts.removeUnpartitioned) {
+            const overwrite = opts.overwrite;
+            if (overwrite) {
+                opts.overwrite = false;
+                headers = ignoreCookiesByName(headers, name);
+            }
+            const removeCookieOpts = {
+                ...opts,
+                partitioned: false,
+            };
+            const removeUnpartitionedCookie = new Cookie(name, '', removeCookieOpts);
+            // if user not set secure, reset secure to ctx.secure
+            if (opts.secure === undefined) {
+                removeUnpartitionedCookie.attrs.secure = this.secure;
+            }
+            headers = pushCookie(headers, removeUnpartitionedCookie);
+            // signed
+            if (signed) {
+                removeUnpartitionedCookie.name += '.sig';
+                headers = ignoreCookiesByNameAndPath(headers, removeUnpartitionedCookie.name, removeUnpartitionedCookie.attrs.path);
+                headers = pushCookie(headers, removeUnpartitionedCookie);
+            }
+        }
+        else if (autoChips) {
+            // add _CHIPS-${name} prefix cookie
+            const newCookieName = this.#formatChipsCookieName(name);
+            const newCookieOpts = {
+                ...opts,
+                partitioned: true,
+            };
+            const newPartitionedCookie = new Cookie(newCookieName, value, newCookieOpts);
+            // if user not set secure, reset secure to ctx.secure
+            if (opts.secure === undefined)
+                newPartitionedCookie.attrs.secure = this.secure;
+            headers = pushCookie(headers, newPartitionedCookie);
+            // signed
+            if (signed) {
+                newPartitionedCookie.value = value && this.keys.sign(newPartitionedCookie.toString());
+                newPartitionedCookie.name += '.sig';
+                headers = ignoreCookiesByNameAndPath(headers, newPartitionedCookie.name, newPartitionedCookie.attrs.path);
+                headers = pushCookie(headers, newPartitionedCookie);
+            }
+        }
+        const cookie = new Cookie(name, value, opts);
+        // if user not set secure, reset secure to ctx.secure
+        if (opts.secure === undefined) {
+            cookie.attrs.secure = this.secure;
+        }
+        headers = pushCookie(headers, cookie);
+        // signed
+        if (signed) {
+            cookie.value = value && this.keys.sign(cookie.toString());
+            cookie.name += '.sig';
+            headers = pushCookie(headers, cookie);
+        }
+        this.ctx.set('set-cookie', headers);
+        return this;
+    }
+    #formatChipsCookieName(name) {
+        return `_CHIPS-${name}`;
+    }
+    #parseChromiumAndMajorVersion(userAgent) {
+        if (!this.#parseChromiumResult) {
+            this.#parseChromiumResult = parseChromiumAndMajorVersion(userAgent);
+        }
+        return this.#parseChromiumResult;
+    }
+    isSameSiteNoneCompatible(userAgent) {
+        // Chrome >= 80.0.0.0
+        const result = this.#parseChromiumAndMajorVersion(userAgent);
+        if (result.chromium) {
+            return result.majorVersion >= 80;
+        }
+        return isSameSiteNoneCompatible(userAgent);
+    }
+    isPartitionedCompatible(userAgent) {
+        // support: Chrome >= 114.0.0.0
+        // default enable: Chrome >= 118.0.0.0
+        // https://developers.google.com/privacy-sandbox/3pcd/chips
+        const result = this.#parseChromiumAndMajorVersion(userAgent);
+        if (result.chromium) {
+            return result.majorVersion >= 118;
+        }
+        return false;
+    }
+}
+// https://github.com/linsight/should-send-same-site-none/blob/master/index.js#L86
+function parseChromiumAndMajorVersion(userAgent) {
+    const m = /Chrom[^ /]{1,100}\/(\d{1,100}?)\./.exec(userAgent);
+    if (!m) {
+        return { chromium: false, majorVersion: 0 };
+    }
+    // Extract digits from first capturing group.
+    return { chromium: true, majorVersion: parseInt(m[1]) };
+}
+const _patternCache = new Map();
+function getPattern(name) {
+    const cache = _patternCache.get(name);
+    if (cache) {
+        return cache;
+    }
+    const reg = new RegExp('(?:^|;) *' + name.replace(/[-[\]{}()*+?.,\\^$|#\s]/g, '\\$&') + '=([^;]*)');
+    _patternCache.set(name, reg);
+    return reg;
+}
+function computeSigned(opts) {
+    // encrypt default to false, signed default to true.
+    // disable singed when encrypt is true.
+    if (opts.encrypt)
+        return false;
+    return opts.signed !== false;
+}
+function pushCookie(cookies, cookie) {
+    if (cookie.attrs.overwrite) {
+        cookies = ignoreCookiesByName(cookies, cookie.name);
+    }
+    cookies.push(cookie.toHeader());
+    return cookies;
+}
+function ignoreCookiesByName(cookies, name) {
+    const prefix = `${name}=`;
+    return cookies.filter(c => !c.startsWith(prefix));
+}
+function ignoreCookiesByNameAndPath(cookies, name, path) {
+    if (!path) {
+        return ignoreCookiesByName(cookies, name);
+    }
+    const prefix = `${name}=`;
+    // foo=hello; path=/path1; samesite=none
+    const includedPath = `; path=${path};`;
+    // foo=hello; path=/path1
+    const endsWithPath = `; path=${path}`;
+    return cookies.filter(c => {
+        if (c.startsWith(prefix)) {
+            if (c.includes(includedPath) || c.endsWith(endsWithPath)) {
+                return false;
+            }
+        }
+        return true;
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/error.d.ts

@@ -0,0 +1,3 @@
+export declare class CookieError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}

package/dist/error.js

@@ -0,0 +1,10 @@
+export class CookieError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = this.constructor.name;
+        if ('captureStackTrace' in Error) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/index.d.ts

@@ -1,130 +1,4 @@
-//#region src/keygrip.d.ts
-declare class Keygrip {
-  #private;
-  constructor(keys: string[]);
-  encrypt(data: string, key?: string): Buffer<ArrayBuffer>;
-  decrypt(data: string | Buffer): {
-    value: Buffer;
-    index: number;
-  } | false;
-  sign(data: string | Buffer, key?: string): string;
-  verify(data: string, digest: string): number;
-}
-//#endregion
-//#region src/cookie.d.ts
-interface CookieSetOptions {
-  /**
-   * The path for the cookie to be set in
-   */
-  path?: string | null;
-  /**
-   * The domain for the cookie
-   */
-  domain?: string | (() => string);
-  /**
-   * Is overridable
-   */
-  overwrite?: boolean;
-  /**
-   * Is the same site
-   */
-  sameSite?: string | boolean;
-  /**
-   * Encrypt the cookie's value or not
-   */
-  encrypt?: boolean;
-  /**
-   * Max age for browsers
-   */
-  maxAge?: number;
-  /**
-   * Expire time
-   */
-  expires?: Date;
-  /**
-   * Is for http only
-   */
-  httpOnly?: boolean;
-  /**
-   * Encrypt the cookie's value or not
-   */
-  secure?: boolean;
-  /**
-   * Once `true` and secure set to `true`, ignore the secure error in a none-ssl environment.
-   */
-  ignoreSecureError?: boolean;
-  /**
-   * Is it signed or not.
-   */
-  signed?: boolean | number;
-  /**
-   * Is it partitioned or not.
-   */
-  partitioned?: boolean;
-  /**
-   * Remove unpartitioned same name cookie or not.
-   */
-  removeUnpartitioned?: boolean;
-  /**
-   * The cookie priority.
-   */
-  priority?: 'low' | 'medium' | 'high' | 'LOW' | 'MEDIUM' | 'HIGH';
-}
-declare class Cookie {
-  name: string;
-  value: string;
-  readonly attrs: CookieSetOptions;
-  constructor(name: string, value?: string | null, attrs?: CookieSetOptions);
-  toString(): string;
-  toHeader(): string;
-}
-//#endregion
-//#region src/cookies.d.ts
-interface DefaultCookieOptions extends CookieSetOptions {
-  /**
-   * Auto get and set `_CHIPS-` prefix cookie to adaptation CHIPS mode (The default value is false).
-   */
-  autoChips?: boolean;
-}
-interface CookieGetOptions {
-  /**
-   * Whether to sign or not (The default value is true).
-   */
-  signed?: boolean;
-  /**
-   * Encrypt the cookie's value or not (The default value is false).
-   */
-  encrypt?: boolean;
-}
-/**
- * cookies for egg
- * extend pillarjs/cookies, add encrypt and decrypt
- */
-declare class Cookies {
-  #private;
-  readonly ctx: Record<string, any>;
-  readonly app: Record<string, any>;
-  readonly secure: boolean;
-  constructor(ctx: Record<string, any>, keys: string[], defaultCookieOptions?: DefaultCookieOptions);
-  get keys(): Keygrip;
-  /**
-   * get cookie value by name
-   * @param  {String} name - cookie's name
-   * @param  {Object} opts - cookies' options
-   *            - {Boolean} signed - default to true
-   *            - {Boolean} encrypt - default to false
-   * @return {String} value - cookie's value
-   */
-  get(name: string, opts?: CookieGetOptions): string | undefined;
-  _get(name: string, opts: CookieGetOptions): string | undefined;
-  set(name: string, value: string | null, opts?: CookieSetOptions): this;
-  isSameSiteNoneCompatible(userAgent: string): boolean;
-  isPartitionedCompatible(userAgent: string): boolean;
-}
-//#endregion
-//#region src/error.d.ts
-declare class CookieError extends Error {
-  constructor(message: string, options?: ErrorOptions);
-}
-//#endregion
-export { Cookie, CookieError, CookieGetOptions, CookieSetOptions, Cookies, DefaultCookieOptions, Keygrip };
+export * from './cookies.ts';
+export * from './cookie.ts';
+export * from './error.ts';
+export * from './keygrip.ts';

package/dist/index.js

@@ -1,407 +1,5 @@
-import assert from "node:assert";
-import { base64decode, base64encode } from "utility";
-import { isSameSiteNoneCompatible } from "should-send-same-site-none";
-import { debuglog } from "node:util";
-import crypto from "node:crypto";
-
-//#region src/keygrip.ts
-const debug = debuglog("egg/cookies:keygrip");
-const KEY_LEN = 32;
-const IV_SIZE = 16;
-const passwordCache = /* @__PURE__ */ new Map();
-const replacer = {
-	"/": "_",
-	"+": "-",
-	"=": ""
-};
-function constantTimeCompare(a, b) {
-	if (a.length !== b.length) return false;
-	return crypto.timingSafeEqual(a, b);
-}
-var Keygrip = class {
-	#keys;
-	#hash = "sha256";
-	#cipher = "aes-256-cbc";
-	constructor(keys) {
-		assert(Array.isArray(keys) && keys.length > 0, "keys must be provided and should be an array");
-		this.#keys = keys;
-	}
-	encrypt(data, key) {
-		key = key || this.#keys[0];
-		const password = keyToPassword(key);
-		const cipher = crypto.createCipheriv(this.#cipher, password.key, password.iv);
-		return crypt(cipher, data);
-	}
-	decrypt(data) {
-		const keys = this.#keys;
-		for (let i = 0; i < keys.length; i++) {
-			const value = this.#decryptByKey(data, keys[i]);
-			if (value !== false) return {
-				value,
-				index: i
-			};
-		}
-		return false;
-	}
-	#decryptByKey(data, key) {
-		try {
-			const password = keyToPassword(key);
-			const cipher = crypto.createDecipheriv(this.#cipher, password.key, password.iv);
-			return crypt(cipher, data);
-		} catch (err) {
-			debug("crypt error: %s", err);
-			return false;
-		}
-	}
-	sign(data, key) {
-		key = key || this.#keys[0];
-		return crypto.createHmac(this.#hash, key).update(data).digest("base64").replace(/\/|\+|=/g, (x) => {
-			return replacer[x];
-		});
-	}
-	verify(data, digest) {
-		const keys = this.#keys;
-		for (let i = 0; i < keys.length; i++) {
-			const key = keys[i];
-			if (constantTimeCompare(Buffer.from(digest), Buffer.from(this.sign(data, key)))) {
-				debug("data %s match key %s, index: %d", data, key, i);
-				return i;
-			}
-		}
-		return -1;
-	}
-};
-function crypt(cipher, data) {
-	const text = Buffer.isBuffer(data) ? cipher.update(data) : cipher.update(data, "utf-8");
-	const pad = cipher.final();
-	return Buffer.concat([text, pad]);
-}
-function keyToPassword(key) {
-	if (passwordCache.has(key)) return passwordCache.get(key);
-	const bytes = Buffer.alloc(KEY_LEN + IV_SIZE);
-	let lastHash = null, nBytes = 0;
-	while (nBytes < bytes.length) {
-		const hash = crypto.createHash("md5");
-		if (lastHash) hash.update(lastHash);
-		hash.update(key);
-		lastHash = hash.digest();
-		lastHash.copy(bytes, nBytes);
-		nBytes += lastHash.length;
-	}
-	const password = {
-		key: bytes.subarray(0, KEY_LEN),
-		iv: bytes.subarray(KEY_LEN, bytes.length)
-	};
-	passwordCache.set(key, password);
-	return password;
-}
-
-//#endregion
-//#region src/cookie.ts
-/**
-* RegExp to match field-content in RFC 7230 sec 3.2
-*
-* field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
-* field-vchar   = VCHAR / obs-text
-* obs-text      = %x80-FF
-*/
-const fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;
-/**
-* RegExp to match Same-Site cookie attribute value.
-* https://en.wikipedia.org/wiki/HTTP_cookie#SameSite_cookie
-*/
-const sameSiteRegExp = /^(?:none|lax|strict)$/i;
-/**
-* RegExp to match Priority cookie attribute value.
-*/
-const PRIORITY_REGEXP = /^(?:low|medium|high)$/i;
-var Cookie = class {
-	name;
-	value;
-	attrs;
-	constructor(name, value, attrs) {
-		assert(fieldContentRegExp.test(name), "argument name is invalid");
-		assert(!value || fieldContentRegExp.test(value), "argument value is invalid");
-		this.name = name;
-		this.value = value ?? "";
-		this.attrs = mergeDefaultAttrs(attrs);
-		assert(!this.attrs.path || fieldContentRegExp.test(this.attrs.path), "argument option path is invalid");
-		if (typeof this.attrs.domain === "function") this.attrs.domain = this.attrs.domain();
-		assert(!this.attrs.domain || fieldContentRegExp.test(this.attrs.domain), "argument option domain is invalid");
-		assert(!this.attrs.sameSite || this.attrs.sameSite === true || sameSiteRegExp.test(this.attrs.sameSite), "argument option sameSite is invalid");
-		assert(!this.attrs.priority || PRIORITY_REGEXP.test(this.attrs.priority), "argument option priority is invalid");
-		if (!value) {
-			this.attrs.expires = /* @__PURE__ */ new Date(0);
-			this.attrs.maxAge = void 0;
-		}
-	}
-	toString() {
-		return this.name + "=" + this.value;
-	}
-	toHeader() {
-		let header = this.toString();
-		const attrs = this.attrs;
-		if (attrs.path) header += "; path=" + attrs.path;
-		const maxAge = typeof attrs.maxAge === "string" ? parseInt(attrs.maxAge, 10) : attrs.maxAge;
-		if (maxAge) {
-			header += "; max-age=" + Math.round(maxAge / 1e3);
-			attrs.expires = new Date(Date.now() + maxAge);
-		}
-		if (attrs.expires) header += "; expires=" + attrs.expires.toUTCString();
-		if (attrs.domain) header += "; domain=" + attrs.domain;
-		if (attrs.priority) header += "; priority=" + attrs.priority.toLowerCase();
-		if (attrs.sameSite) header += "; samesite=" + (attrs.sameSite === true ? "strict" : attrs.sameSite.toLowerCase());
-		if (attrs.secure) header += "; secure";
-		if (attrs.httpOnly) header += "; httponly";
-		if (attrs.partitioned) header += "; partitioned";
-		return header;
-	}
-};
-function mergeDefaultAttrs(attrs) {
-	return {
-		path: "/",
-		httpOnly: true,
-		secure: false,
-		overwrite: false,
-		sameSite: false,
-		partitioned: false,
-		priority: void 0,
-		...attrs
-	};
-}
-
-//#endregion
-//#region src/error.ts
-var CookieError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = this.constructor.name;
-		if ("captureStackTrace" in Error) Error.captureStackTrace(this, this.constructor);
-	}
-};
-
-//#endregion
-//#region src/cookies.ts
-const keyCache = /* @__PURE__ */ new Map();
-/**
-* cookies for egg
-* extend pillarjs/cookies, add encrypt and decrypt
-*/
-var Cookies = class {
-	#keysArray;
-	#keys;
-	#defaultCookieOptions;
-	#autoChips;
-	ctx;
-	app;
-	secure;
-	#parseChromiumResult;
-	constructor(ctx, keys, defaultCookieOptions) {
-		this.#keysArray = keys;
-		this.#defaultCookieOptions = defaultCookieOptions;
-		this.#autoChips = defaultCookieOptions?.autoChips;
-		this.ctx = ctx;
-		this.secure = this.ctx.secure;
-		this.app = ctx.app;
-	}
-	get keys() {
-		if (!this.#keys) {
-			assert(Array.isArray(this.#keysArray), ".keys required for encrypt/sign cookies");
-			const cache = keyCache.get(this.#keysArray);
-			if (cache) this.#keys = cache;
-			else {
-				this.#keys = new Keygrip(this.#keysArray);
-				keyCache.set(this.#keysArray, this.#keys);
-			}
-		}
-		return this.#keys;
-	}
-	/**
-	* get cookie value by name
-	* @param  {String} name - cookie's name
-	* @param  {Object} opts - cookies' options
-	*            - {Boolean} signed - default to true
-	*            - {Boolean} encrypt - default to false
-	* @return {String} value - cookie's value
-	*/
-	get(name, opts = {}) {
-		let value = this._get(name, opts);
-		if (value === void 0 && this.#autoChips) value = this._get(this.#formatChipsCookieName(name), opts);
-		return value;
-	}
-	_get(name, opts) {
-		const signed = computeSigned(opts);
-		const header = this.ctx.get("cookie");
-		if (!header) return;
-		const match = header.match(getPattern(name));
-		if (!match) return;
-		let value = match[1];
-		if (!opts.encrypt && !signed) return value;
-		if (signed) {
-			const sigName = name + ".sig";
-			const sigValue = this.get(sigName, { signed: false });
-			if (!sigValue) return;
-			const raw = name + "=" + value;
-			const index = this.keys.verify(raw, sigValue);
-			if (index < 0) {
-				this.set(sigName, null, {
-					path: "/",
-					signed: false,
-					overwrite: true
-				});
-				return;
-			}
-			if (index > 0) this.set(sigName, this.keys.sign(raw), {
-				signed: false,
-				overwrite: true
-			});
-			return value;
-		}
-		value = base64decode(value, true, "buffer");
-		const res = this.keys.decrypt(value);
-		return res ? res.value.toString() : void 0;
-	}
-	set(name, value, opts) {
-		opts = {
-			...this.#defaultCookieOptions,
-			...opts
-		};
-		const signed = computeSigned(opts);
-		const shouldIgnoreSecureError = opts && opts.ignoreSecureError;
-		value = value || "";
-		if (!shouldIgnoreSecureError) {
-			if (!this.secure && opts.secure) throw new CookieError("Cannot send secure cookie over unencrypted connection");
-		}
-		let headers = this.ctx.response.get("set-cookie") || [];
-		if (!Array.isArray(headers)) headers = [headers];
-		if (opts.encrypt) value = value && base64encode(this.keys.encrypt(value), true);
-		if (value.length > 4093) this.app.emit("cookieLimitExceed", {
-			name,
-			value,
-			ctx: this.ctx
-		});
-		const userAgent = this.ctx.get("user-agent");
-		let isSameSiteNone = false;
-		let autoChips = !opts.partitioned && this.#autoChips;
-		if (opts.sameSite && typeof opts.sameSite === "string" && opts.sameSite.toLowerCase() === "none") {
-			isSameSiteNone = true;
-			if (opts.secure === false || !this.secure || userAgent && !this.isSameSiteNoneCompatible(userAgent)) {
-				opts.sameSite = false;
-				isSameSiteNone = false;
-			}
-		}
-		if (autoChips || opts.partitioned) {
-			if (!isSameSiteNone || opts.secure === false || !this.secure || userAgent && !this.isPartitionedCompatible(userAgent)) {
-				autoChips = false;
-				opts.partitioned = false;
-			}
-		}
-		if (opts.partitioned && opts.removeUnpartitioned) {
-			if (opts.overwrite) {
-				opts.overwrite = false;
-				headers = ignoreCookiesByName(headers, name);
-			}
-			const removeCookieOpts = {
-				...opts,
-				partitioned: false
-			};
-			const removeUnpartitionedCookie = new Cookie(name, "", removeCookieOpts);
-			if (opts.secure === void 0) removeUnpartitionedCookie.attrs.secure = this.secure;
-			headers = pushCookie(headers, removeUnpartitionedCookie);
-			if (signed) {
-				removeUnpartitionedCookie.name += ".sig";
-				headers = ignoreCookiesByNameAndPath(headers, removeUnpartitionedCookie.name, removeUnpartitionedCookie.attrs.path);
-				headers = pushCookie(headers, removeUnpartitionedCookie);
-			}
-		} else if (autoChips) {
-			const newCookieName = this.#formatChipsCookieName(name);
-			const newCookieOpts = {
-				...opts,
-				partitioned: true
-			};
-			const newPartitionedCookie = new Cookie(newCookieName, value, newCookieOpts);
-			if (opts.secure === void 0) newPartitionedCookie.attrs.secure = this.secure;
-			headers = pushCookie(headers, newPartitionedCookie);
-			if (signed) {
-				newPartitionedCookie.value = value && this.keys.sign(newPartitionedCookie.toString());
-				newPartitionedCookie.name += ".sig";
-				headers = ignoreCookiesByNameAndPath(headers, newPartitionedCookie.name, newPartitionedCookie.attrs.path);
-				headers = pushCookie(headers, newPartitionedCookie);
-			}
-		}
-		const cookie = new Cookie(name, value, opts);
-		if (opts.secure === void 0) cookie.attrs.secure = this.secure;
-		headers = pushCookie(headers, cookie);
-		if (signed) {
-			cookie.value = value && this.keys.sign(cookie.toString());
-			cookie.name += ".sig";
-			headers = pushCookie(headers, cookie);
-		}
-		this.ctx.set("set-cookie", headers);
-		return this;
-	}
-	#formatChipsCookieName(name) {
-		return `_CHIPS-${name}`;
-	}
-	#parseChromiumAndMajorVersion(userAgent) {
-		if (!this.#parseChromiumResult) this.#parseChromiumResult = parseChromiumAndMajorVersion(userAgent);
-		return this.#parseChromiumResult;
-	}
-	isSameSiteNoneCompatible(userAgent) {
-		const result = this.#parseChromiumAndMajorVersion(userAgent);
-		if (result.chromium) return result.majorVersion >= 80;
-		return isSameSiteNoneCompatible(userAgent);
-	}
-	isPartitionedCompatible(userAgent) {
-		const result = this.#parseChromiumAndMajorVersion(userAgent);
-		if (result.chromium) return result.majorVersion >= 118;
-		return false;
-	}
-};
-function parseChromiumAndMajorVersion(userAgent) {
-	const m = /Chrom[^ /]{1,100}\/(\d{1,100}?)\./.exec(userAgent);
-	if (!m) return {
-		chromium: false,
-		majorVersion: 0
-	};
-	return {
-		chromium: true,
-		majorVersion: parseInt(m[1])
-	};
-}
-const _patternCache = /* @__PURE__ */ new Map();
-function getPattern(name) {
-	const cache = _patternCache.get(name);
-	if (cache) return cache;
-	const reg = /* @__PURE__ */ new RegExp("(?:^|;) *" + name.replace(/[-[\]{}()*+?.,\\^$|#\s]/g, "\\$&") + "=([^;]*)");
-	_patternCache.set(name, reg);
-	return reg;
-}
-function computeSigned(opts) {
-	if (opts.encrypt) return false;
-	return opts.signed !== false;
-}
-function pushCookie(cookies, cookie) {
-	if (cookie.attrs.overwrite) cookies = ignoreCookiesByName(cookies, cookie.name);
-	cookies.push(cookie.toHeader());
-	return cookies;
-}
-function ignoreCookiesByName(cookies, name) {
-	const prefix = `${name}=`;
-	return cookies.filter((c) => !c.startsWith(prefix));
-}
-function ignoreCookiesByNameAndPath(cookies, name, path) {
-	if (!path) return ignoreCookiesByName(cookies, name);
-	const prefix = `${name}=`;
-	const includedPath = `; path=${path};`;
-	const endsWithPath = `; path=${path}`;
-	return cookies.filter((c) => {
-		if (c.startsWith(prefix)) {
-			if (c.includes(includedPath) || c.endsWith(endsWithPath)) return false;
-		}
-		return true;
-	});
-}
-
-//#endregion
-export { Cookie, CookieError, Cookies, Keygrip };
+export * from "./cookies.js";
+export * from "./cookie.js";
+export * from "./error.js";
+export * from "./keygrip.js";
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxjQUFjLENBQUM7QUFDN0IsY0FBYyxhQUFhLENBQUM7QUFDNUIsY0FBYyxZQUFZLENBQUM7QUFDM0IsY0FBYyxjQUFjLENBQUMifQ==

package/dist/keygrip.d.ts

@@ -0,0 +1,11 @@
+export declare class Keygrip {
+    #private;
+    constructor(keys: string[]);
+    encrypt(data: string, key?: string): Buffer<ArrayBuffer>;
+    decrypt(data: string | Buffer): {
+        value: Buffer;
+        index: number;
+    } | false;
+    sign(data: string | Buffer, key?: string): string;
+    verify(data: string, digest: string): number;
+}

package/dist/keygrip.js

@@ -0,0 +1,113 @@
+import { debuglog } from 'node:util';
+import crypto, {} from 'node:crypto';
+import assert from 'node:assert';
+const debug = debuglog('egg/cookies:keygrip');
+const KEY_LEN = 32;
+const IV_SIZE = 16;
+const passwordCache = new Map();
+const replacer = {
+    '/': '_',
+    '+': '-',
+    '=': '',
+};
+function constantTimeCompare(a, b) {
+    if (a.length !== b.length) {
+        return false;
+    }
+    return crypto.timingSafeEqual(a, b);
+}
+// patch from https://github.com/crypto-utils/keygrip
+export class Keygrip {
+    #keys;
+    #hash = 'sha256';
+    #cipher = 'aes-256-cbc';
+    constructor(keys) {
+        assert(Array.isArray(keys) && keys.length > 0, 'keys must be provided and should be an array');
+        this.#keys = keys;
+    }
+    // encrypt a message
+    encrypt(data, key) {
+        key = key || this.#keys[0];
+        const password = keyToPassword(key);
+        const cipher = crypto.createCipheriv(this.#cipher, password.key, password.iv);
+        return crypt(cipher, data);
+    }
+    // decrypt a single message
+    // returns false on bad decrypts
+    decrypt(data) {
+        // decrypt every key
+        const keys = this.#keys;
+        for (let i = 0; i < keys.length; i++) {
+            const value = this.#decryptByKey(data, keys[i]);
+            if (value !== false) {
+                return { value, index: i };
+            }
+        }
+        return false;
+    }
+    #decryptByKey(data, key) {
+        try {
+            const password = keyToPassword(key);
+            const cipher = crypto.createDecipheriv(this.#cipher, password.key, password.iv);
+            return crypt(cipher, data);
+        }
+        catch (err) {
+            debug('crypt error: %s', err);
+            return false;
+        }
+    }
+    sign(data, key) {
+        // default to the first key
+        key = key || this.#keys[0];
+        // url safe base64
+        return crypto
+            .createHmac(this.#hash, key)
+            .update(data)
+            .digest('base64')
+            .replace(/\/|\+|=/g, x => {
+            return replacer[x];
+        });
+    }
+    verify(data, digest) {
+        const keys = this.#keys;
+        for (let i = 0; i < keys.length; i++) {
+            const key = keys[i];
+            if (constantTimeCompare(Buffer.from(digest), Buffer.from(this.sign(data, key)))) {
+                debug('data %s match key %s, index: %d', data, key, i);
+                return i;
+            }
+        }
+        return -1;
+    }
+}
+function crypt(cipher, data) {
+    const text = Buffer.isBuffer(data) ? cipher.update(data) : cipher.update(data, 'utf-8');
+    const pad = cipher.final();
+    return Buffer.concat([text, pad]);
+}
+function keyToPassword(key) {
+    if (passwordCache.has(key)) {
+        return passwordCache.get(key);
+    }
+    // Simulate EVP_BytesToKey.
+    // see https://github.com/nodejs/help/issues/1673#issuecomment-503222925
+    const bytes = Buffer.alloc(KEY_LEN + IV_SIZE);
+    let lastHash = null, nBytes = 0;
+    while (nBytes < bytes.length) {
+        const hash = crypto.createHash('md5');
+        if (lastHash)
+            hash.update(lastHash);
+        hash.update(key);
+        lastHash = hash.digest();
+        lastHash.copy(bytes, nBytes);
+        nBytes += lastHash.length;
+    }
+    // Use these for decryption.
+    const password = {
+        key: bytes.subarray(0, KEY_LEN),
+        iv: bytes.subarray(KEY_LEN, bytes.length),
+    };
+    passwordCache.set(key, password);
+    return password;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eggjs/cookies",
-  "version": "4.0.0-beta.20",
+  "version": "4.0.0-beta.21",
   "engines": {
     "node": ">=22.18.0"
   },
@@ -20,7 +20,7 @@
     "oxlint": "^1.19.0",
     "typescript": "^5.9.3",
     "tsdown": "^0.15.4",
-    "@eggjs/tsconfig": "3.1.0-beta.20"
+    "@eggjs/tsconfig": "3.1.0-beta.21"
   },
   "repository": {
     "type": "git",
@@ -42,7 +42,7 @@
     "./package.json": "./package.json"
   },
   "scripts": {
-    "build": "tsdown",
+    "build": "tsdown && rimraf dist && tsc -b --clean && tsc",
     "typecheck": "tsc --noEmit",
     "lint": "oxlint --type-aware",
     "lint:fix": "npm run lint -- --fix",