@eggjs/security 5.0.0-beta.20 → 5.0.0-beta.21

package/dist/config.default-AcwQOAG0.js

@@ -1,166 +0,0 @@
-import z from "zod";
-import { Context } from "egg";
-
-//#region src/config/config.default.ts
-const CSRFSupportRequestItem = z.object({
-	path: z.instanceof(RegExp),
-	methods: z.array(z.string())
-});
-const LookupAddress = z.object({
-	address: z.string(),
-	family: z.number()
-});
-const LookupAddressAndStringArray = z.union([z.string(), LookupAddress]).array();
-const SSRFCheckAddressFunction = z.function().args(z.union([
-	z.string(),
-	LookupAddress,
-	LookupAddressAndStringArray
-]), z.union([z.number(), z.string()]), z.string()).returns(z.boolean());
-const SecurityMiddlewareName = z.enum([
-	"csrf",
-	"hsts",
-	"methodnoallow",
-	"noopen",
-	"nosniff",
-	"csp",
-	"xssProtection",
-	"xframe",
-	"dta"
-]);
-/**
-* (ctx) => boolean
-*/
-const IgnoreOrMatchHandler = z.function().args(z.instanceof(Context)).returns(z.boolean());
-const IgnoreOrMatch = z.union([
-	z.string(),
-	z.instanceof(RegExp),
-	IgnoreOrMatchHandler
-]);
-const IgnoreOrMatchOption = z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional();
-const SecurityConfig = z.object({
-	domainWhiteList: z.array(z.string()).default([]),
-	protocolWhiteList: z.array(z.string()).default([]),
-	defaultMiddleware: z.union([z.string(), z.array(SecurityMiddlewareName)]).default(SecurityMiddlewareName.options),
-	csrf: z.preprocess((val) => {
-		if (typeof val === "boolean") return { enable: val };
-		return val;
-	}, z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true),
-		type: z.enum([
-			"ctoken",
-			"referer",
-			"all",
-			"any"
-		]).default("ctoken"),
-		ignoreJSON: z.boolean().default(false),
-		cookieName: z.union([z.string(), z.array(z.string())]).default("csrfToken"),
-		sessionName: z.string().default("csrfToken"),
-		headerName: z.string().default("x-csrf-token"),
-		bodyName: z.union([z.string(), z.array(z.string())]).default("_csrf"),
-		queryName: z.union([z.string(), z.array(z.string())]).default("_csrf"),
-		rotateWhenInvalid: z.boolean().default(false),
-		useSession: z.boolean().default(false),
-		cookieDomain: z.union([z.string(), z.function().args(z.instanceof(Context)).returns(z.string())]).optional(),
-		supportedRequests: z.array(CSRFSupportRequestItem).default([{
-			path: /^\//,
-			methods: [
-				"POST",
-				"PATCH",
-				"DELETE",
-				"PUT",
-				"CONNECT"
-			]
-		}]),
-		refererWhiteList: z.array(z.string()).default([]),
-		cookieOptions: z.object({
-			signed: z.boolean(),
-			httpOnly: z.boolean(),
-			overwrite: z.boolean()
-		}).default({
-			signed: false,
-			httpOnly: false,
-			overwrite: true
-		})
-	}).default({})),
-	xframe: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true),
-		value: z.string().default("SAMEORIGIN")
-	}).default({}),
-	hsts: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(false),
-		maxAge: z.number().default(365 * 24 * 3600),
-		includeSubdomains: z.boolean().default(false)
-	}).default({}),
-	methodnoallow: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	noopen: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	nosniff: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	xssProtection: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true),
-		value: z.coerce.string().default("1; mode=block")
-	}).default({}),
-	csp: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(false),
-		policy: z.record(z.union([
-			z.string(),
-			z.array(z.string()),
-			z.boolean()
-		])).default({}),
-		reportOnly: z.boolean().optional(),
-		supportIE: z.boolean().optional()
-	}).default({}),
-	referrerPolicy: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(false),
-		value: z.string().default("no-referrer-when-downgrade")
-	}).default({}),
-	dta: z.object({
-		match: IgnoreOrMatchOption,
-		ignore: IgnoreOrMatchOption,
-		enable: z.boolean().default(true)
-	}).default({}),
-	ssrf: z.object({
-		ipBlackList: z.array(z.string()).optional(),
-		ipExceptionList: z.array(z.string()).optional(),
-		hostnameExceptionList: z.array(z.string()).optional(),
-		checkAddress: SSRFCheckAddressFunction.optional()
-	}).default({}),
-	match: z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional(),
-	ignore: z.union([IgnoreOrMatch, IgnoreOrMatch.array()]).optional(),
-	__protocolWhiteListSet: z.set(z.string()).optional().readonly()
-});
-const SecurityHelperOnTagAttrHandler = z.function().args(z.string(), z.string(), z.string(), z.boolean()).returns(z.union([z.string(), z.void()]));
-const SecurityHelperConfig = z.object({ shtml: z.object({
-	whiteList: z.record(z.array(z.string())).optional(),
-	domainWhiteList: z.array(z.string()).optional(),
-	onTagAttr: SecurityHelperOnTagAttrHandler.optional()
-}).default({}) });
-var config_default_default = {
-	security: SecurityConfig.parse({}),
-	helper: SecurityHelperConfig.parse({})
-};
-
-//#endregion
-export { LookupAddress, SecurityConfig, SecurityHelperConfig, SecurityMiddlewareName, config_default_default };