@eggjs/security 5.0.0-beta.19 → 5.0.0-beta.20

package/dist/config/config.default.js

@@ -1,166 +1,3 @@
-import z from "zod";
-import { Context } from "egg";
+import { LookupAddress, SecurityConfig, SecurityHelperConfig, SecurityMiddlewareName, config_default_default } from "../config.default-AcwQOAG0.js";
 
-//#region src/config/config.default.ts
-const CSRFSupportRequestItem = z.object({
-	path: z.instanceof(RegExp),
-	methods: z.array(z.string())
-});
-const LookupAddress = z.object({
-	address: z.string(),
-	family: z.number()
-});
-const LookupAddressAndStringArray = z.union([z.string(), LookupAddress]).array();
-const SSRFCheckAddressFunction = z.function().args(z.union([
-	z.string(),
-	LookupAddress,
-	LookupAddressAndStringArray
-]), z.union([z.number(), z.string()]), z.string()).returns(z.boolean());
-const SecurityMiddlewareName = z.enum([
-	"csrf",
-	"hsts",
-	"methodnoallow",
-	"noopen",
-	"nosniff",
-	"csp",
-	"xssProtection",
-	"xframe",
-	"dta"
-]);
-/**
-* (ctx) => boolean
-*/
-const IgnoreOrMatchHandler = z.function().args(z.instanceof(Context)).returns(z.boolean());
-const IgnoreOrMatch = z.union([
-	z.string(),
-	z.instanceof(RegExp),
-	IgnoreOrMatchHandler
-]);
-const IgnoreOrMatchOption = z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional();
-const SecurityConfig = z.object({
-	domainWhiteList: z.array(z.string()).default([]),
-	protocolWhiteList: z.array(z.string()).default([]),
-	defaultMiddleware: z.union([z.string(), z.array(SecurityMiddlewareName)]).default(SecurityMiddlewareName.options),
-	csrf: z.preprocess((val) => {
-		if (typeof val === "boolean") return { enable: val };
-		return val;
-	}, z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true),
-		type: z.enum([
-			"ctoken",
-			"referer",
-			"all",
-			"any"
-		]).default("ctoken"),
-		ignoreJSON: z.boolean().default(false),
-		cookieName: z.union([z.string(), z.array(z.string())]).default("csrfToken"),
-		sessionName: z.string().default("csrfToken"),
-		headerName: z.string().default("x-csrf-token"),
-		bodyName: z.union([z.string(), z.array(z.string())]).default("_csrf"),
-		queryName: z.union([z.string(), z.array(z.string())]).default("_csrf"),
-		rotateWhenInvalid: z.boolean().default(false),
-		useSession: z.boolean().default(false),
-		cookieDomain: z.union([z.string(), z.function().args(z.instanceof(Context)).returns(z.string())]).optional(),
-		supportedRequests: z.array(CSRFSupportRequestItem).default([{
-			path: /^\//,
-			methods: [
-				"POST",
-				"PATCH",
-				"DELETE",
-				"PUT",
-				"CONNECT"
-			]
-		}]),
-		refererWhiteList: z.array(z.string()).default([]),
-		cookieOptions: z.object({
-			signed: z.boolean(),
-			httpOnly: z.boolean(),
-			overwrite: z.boolean()
-		}).default({
-			signed: false,
-			httpOnly: false,
-			overwrite: true
-		})
-	}).default({})),
-	xframe: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true),
-		value: z.string().default("SAMEORIGIN")
-	}).default({}),
-	hsts: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(false),
-		maxAge: z.number().default(365 * 24 * 3600),
-		includeSubdomains: z.boolean().default(false)
-	}).default({}),
-	methodnoallow: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	noopen: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	nosniff: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	xssProtection: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true),
-		value: z.coerce.string().default("1; mode=block")
-	}).default({}),
-	csp: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(false),
-		policy: z.record(z.union([
-			z.string(),
-			z.array(z.string()),
-			z.boolean()
-		])).default({}),
-		reportOnly: z.boolean().optional(),
-		supportIE: z.boolean().optional()
-	}).default({}),
-	referrerPolicy: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(false),
-		value: z.string().default("no-referrer-when-downgrade")
-	}).default({}),
-	dta: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	ssrf: z.object({
-		ipBlackList: z.array(z.string()).optional(),
-		ipExceptionList: z.array(z.string()).optional(),
-		hostnameExceptionList: z.array(z.string()).optional(),
-		checkAddress: SSRFCheckAddressFunction.optional()
-	}).default({}),
-	match: z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional(),
-	ignore: z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional(),
-	__protocolWhiteListSet: z.set(z.string()).optional().readonly()
-});
-const SecurityHelperOnTagAttrHandler = z.function().args(z.string(), z.string(), z.string(), z.boolean()).returns(z.union([z.string(), z.void()]));
-const SecurityHelperConfig = z.object({ shtml: z.object({
-	whiteList: z.record(z.array(z.string())).optional(),
-	domainWhiteList: z.array(z.string()).optional(),
-	onTagAttr: SecurityHelperOnTagAttrHandler.optional()
-}).default({}) });
-var config_default_default = {
-	security: SecurityConfig.parse({}),
-	helper: SecurityHelperConfig.parse({})
-};
-
-//#endregion
 export { LookupAddress, SecurityConfig, SecurityHelperConfig, SecurityMiddlewareName, config_default_default as default };

package/dist/config.default-AcwQOAG0.js

@@ -0,0 +1,166 @@
+import z from "zod";
+import { Context } from "egg";
+
+//#region src/config/config.default.ts
+const CSRFSupportRequestItem = z.object({
+	path: z.instanceof(RegExp),
+	methods: z.array(z.string())
+});
+const LookupAddress = z.object({
+	address: z.string(),
+	family: z.number()
+});
+const LookupAddressAndStringArray = z.union([z.string(), LookupAddress]).array();
+const SSRFCheckAddressFunction = z.function().args(z.union([
+	z.string(),
+	LookupAddress,
+	LookupAddressAndStringArray
+]), z.union([z.number(), z.string()]), z.string()).returns(z.boolean());
+const SecurityMiddlewareName = z.enum([
+	"csrf",
+	"hsts",
+	"methodnoallow",
+	"noopen",
+	"nosniff",
+	"csp",
+	"xssProtection",
+	"xframe",
+	"dta"
+]);
+/**
+* (ctx) => boolean
+*/
+const IgnoreOrMatchHandler = z.function().args(z.instanceof(Context)).returns(z.boolean());
+const IgnoreOrMatch = z.union([
+	z.string(),
+	z.instanceof(RegExp),
+	IgnoreOrMatchHandler
+]);
+const IgnoreOrMatchOption = z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional();
+const SecurityConfig = z.object({
+	domainWhiteList: z.array(z.string()).default([]),
+	protocolWhiteList: z.array(z.string()).default([]),
+	defaultMiddleware: z.union([z.string(), z.array(SecurityMiddlewareName)]).default(SecurityMiddlewareName.options),
+	csrf: z.preprocess((val) => {
+		if (typeof val === "boolean") return { enable: val };
+		return val;
+	}, z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true),
+		type: z.enum([
+			"ctoken",
+			"referer",
+			"all",
+			"any"
+		]).default("ctoken"),
+		ignoreJSON: z.boolean().default(false),
+		cookieName: z.union([z.string(), z.array(z.string())]).default("csrfToken"),
+		sessionName: z.string().default("csrfToken"),
+		headerName: z.string().default("x-csrf-token"),
+		bodyName: z.union([z.string(), z.array(z.string())]).default("_csrf"),
+		queryName: z.union([z.string(), z.array(z.string())]).default("_csrf"),
+		rotateWhenInvalid: z.boolean().default(false),
+		useSession: z.boolean().default(false),
+		cookieDomain: z.union([z.string(), z.function().args(z.instanceof(Context)).returns(z.string())]).optional(),
+		supportedRequests: z.array(CSRFSupportRequestItem).default([{
+			path: /^\//,
+			methods: [
+				"POST",
+				"PATCH",
+				"DELETE",
+				"PUT",
+				"CONNECT"
+			]
+		}]),
+		refererWhiteList: z.array(z.string()).default([]),
+		cookieOptions: z.object({
+			signed: z.boolean(),
+			httpOnly: z.boolean(),
+			overwrite: z.boolean()
+		}).default({
+			signed: false,
+			httpOnly: false,
+			overwrite: true
+		})
+	}).default({})),
+	xframe: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true),
+		value: z.string().default("SAMEORIGIN")
+	}).default({}),
+	hsts: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(false),
+		maxAge: z.number().default(365 * 24 * 3600),
+		includeSubdomains: z.boolean().default(false)
+	}).default({}),
+	methodnoallow: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true)
+	}).default({}),
+	noopen: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true)
+	}).default({}),
+	nosniff: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true)
+	}).default({}),
+	xssProtection: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true),
+		value: z.coerce.string().default("1; mode=block")
+	}).default({}),
+	csp: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(false),
+		policy: z.record(z.union([
+			z.string(),
+			z.array(z.string()),
+			z.boolean()
+		])).default({}),
+		reportOnly: z.boolean().optional(),
+		supportIE: z.boolean().optional()
+	}).default({}),
+	referrerPolicy: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(false),
+		value: z.string().default("no-referrer-when-downgrade")
+	}).default({}),
+	dta: z.object({
+		match: IgnoreOrMatchOption,
+		ignore: IgnoreOrMatchOption,
+		enable: z.boolean().default(true)
+	}).default({}),
+	ssrf: z.object({
+		ipBlackList: z.array(z.string()).optional(),
+		ipExceptionList: z.array(z.string()).optional(),
+		hostnameExceptionList: z.array(z.string()).optional(),
+		checkAddress: SSRFCheckAddressFunction.optional()
+	}).default({}),
+	match: z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional(),
+	ignore: z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional(),
+	__protocolWhiteListSet: z.set(z.string()).optional().readonly()
+});
+const SecurityHelperOnTagAttrHandler = z.function().args(z.string(), z.string(), z.string(), z.boolean()).returns(z.union([z.string(), z.void()]));
+const SecurityHelperConfig = z.object({ shtml: z.object({
+	whiteList: z.record(z.array(z.string())).optional(),
+	domainWhiteList: z.array(z.string()).optional(),
+	onTagAttr: SecurityHelperOnTagAttrHandler.optional()
+}).default({}) });
+var config_default_default = {
+	security: SecurityConfig.parse({}),
+	helper: SecurityHelperConfig.parse({})
+};
+
+//#endregion
+export { LookupAddress, SecurityConfig, SecurityHelperConfig, SecurityMiddlewareName, config_default_default };