@engjts/nexus 0.1.0

package/dist/security/auth/JWTProvider.d.ts

@@ -0,0 +1,104 @@
+/**
+ * JWT Provider
+ *
+ * Provider untuk JWT authentication yang bisa di-inject via DI system.
+ * Mudah digunakan di route handler tanpa perlu setup middleware manual.
+ */
+import { Context } from '../../core';
+import type { User } from '../types';
+export interface JWTProviderConfig {
+    secret: string;
+    expiresIn?: string | number;
+    issuer?: string;
+    audience?: string;
+}
+export interface TokenPayload {
+    id: string | number;
+    email?: string;
+    username?: string;
+    roles?: string[];
+    permissions?: string[];
+    [key: string]: any;
+}
+export interface VerifyResult {
+    valid: boolean;
+    user: User | null;
+    error?: string;
+    expired?: boolean;
+}
+/**
+ * JWT Provider Class
+ *
+ * @example
+ * ```typescript
+ * // Setup di app
+ * const jwt = new JWTProvider({
+ *   secret: process.env.JWT_SECRET!,
+ *   expiresIn: '1h'
+ * });
+ *
+ * const app = createApp().provide({ jwt });
+ *
+ * // Gunakan di route
+ * app.post('/login', async (ctx, { jwt }) => {
+ *   const token = await jwt.sign({ id: user.id, email: user.email });
+ *   return { token };
+ * });
+ *
+ * app.get('/profile', async (ctx, { jwt }) => {
+ *   const result = await jwt.verify(ctx);
+ *   if (!result.valid) return ctx.response.status(401).json({ error: 'Unauthorized' });
+ *   return { user: result.user };
+ * });
+ * ```
+ */
+export declare class JWTProvider {
+    private config;
+    constructor(config: JWTProviderConfig);
+    /**
+     * Generate JWT token dari user/payload
+     */
+    sign(payload: TokenPayload, options?: Partial<JWTProviderConfig>): Promise<string>;
+    /**
+     * Verify token dari Authorization header atau cookie
+     */
+    verify(ctx: Context, options?: {
+        cookieName?: string;
+    }): Promise<VerifyResult>;
+    /**
+     * Verify token string langsung
+     */
+    verifyToken(token: string): Promise<VerifyResult>;
+    /**
+     * Decode token tanpa verify (untuk debugging)
+     */
+    decode(token: string): TokenPayload | null;
+    /**
+     * Refresh token (generate token baru dengan expiry baru)
+     */
+    refresh(token: string, options?: Partial<JWTProviderConfig>): Promise<string | null>;
+    /**
+     * Create middleware untuk protect route
+     */
+    middleware(options?: {
+        cookieName?: string;
+    }): (ctx: Context, next: (ctx: Context) => Promise<any>) => Promise<any>;
+    /**
+     * Check apakah user punya role tertentu
+     */
+    hasRole(user: User, role: string | string[]): boolean;
+    /**
+     * Check apakah user punya permission tertentu
+     */
+    hasPermission(user: User, permission: string | string[]): boolean;
+    private extractToken;
+    private parseExpiry;
+    private base64UrlEncode;
+    private base64UrlDecode;
+    private createSignature;
+}
+/**
+ * Factory function untuk create JWTProvider
+ */
+export declare function createJWTProvider(config: JWTProviderConfig): JWTProvider;
+//# sourceMappingURL=JWTProvider.d.ts.map

package/dist/security/auth/JWTProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWTProvider.d.ts","sourceRoot":"","sources":["../../../src/security/auth/JWTProvider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,EAAE,IAAI,EAAa,MAAM,UAAU,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,iBAAiB;IAUrC;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BxF;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAUpF;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAoDvD;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAY1C;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiB1F;;OAEG;IACH,UAAU,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,IAC5B,KAAK,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC;IAiBlE;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAKrD;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAOjE,OAAO,CAAC,YAAY;IA4BpB,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,eAAe;YAMT,eAAe;CAO9B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAExE"}

package/dist/security/auth/JWTProvider.js

@@ -0,0 +1,288 @@
+"use strict";
+/**
+ * JWT Provider
+ *
+ * Provider untuk JWT authentication yang bisa di-inject via DI system.
+ * Mudah digunakan di route handler tanpa perlu setup middleware manual.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTProvider = void 0;
+exports.createJWTProvider = createJWTProvider;
+/**
+ * JWT Provider Class
+ *
+ * @example
+ * ```typescript
+ * // Setup di app
+ * const jwt = new JWTProvider({
+ *   secret: process.env.JWT_SECRET!,
+ *   expiresIn: '1h'
+ * });
+ *
+ * const app = createApp().provide({ jwt });
+ *
+ * // Gunakan di route
+ * app.post('/login', async (ctx, { jwt }) => {
+ *   const token = await jwt.sign({ id: user.id, email: user.email });
+ *   return { token };
+ * });
+ *
+ * app.get('/profile', async (ctx, { jwt }) => {
+ *   const result = await jwt.verify(ctx);
+ *   if (!result.valid) return ctx.response.status(401).json({ error: 'Unauthorized' });
+ *   return { user: result.user };
+ * });
+ * ```
+ */
+class JWTProvider {
+    config;
+    constructor(config) {
+        if (!config.secret) {
+            throw new Error('JWT secret is required');
+        }
+        this.config = {
+            expiresIn: '1h',
+            ...config
+        };
+    }
+    /**
+     * Generate JWT token dari user/payload
+     */
+    async sign(payload, options) {
+        const config = { ...this.config, ...options };
+        const header = { alg: 'HS256', typ: 'JWT' };
+        // Calculate expiry
+        let exp;
+        const expiresIn = config.expiresIn || '1h';
+        if (typeof expiresIn === 'number') {
+            exp = Math.floor(Date.now() / 1000) + expiresIn;
+        }
+        else {
+            exp = Math.floor(Date.now() / 1000) + this.parseExpiry(expiresIn);
+        }
+        const tokenPayload = {
+            ...payload,
+            iat: Math.floor(Date.now() / 1000),
+            exp,
+            ...(config.issuer && { iss: config.issuer }),
+            ...(config.audience && { aud: config.audience })
+        };
+        const encodedHeader = this.base64UrlEncode(JSON.stringify(header));
+        const encodedPayload = this.base64UrlEncode(JSON.stringify(tokenPayload));
+        const signature = await this.createSignature(`${encodedHeader}.${encodedPayload}`, config.secret);
+        return `${encodedHeader}.${encodedPayload}.${signature}`;
+    }
+    /**
+     * Verify token dari Authorization header atau cookie
+     */
+    async verify(ctx, options) {
+        const token = this.extractToken(ctx, options?.cookieName);
+        if (!token) {
+            return { valid: false, user: null, error: 'No token provided' };
+        }
+        return this.verifyToken(token);
+    }
+    /**
+     * Verify token string langsung
+     */
+    async verifyToken(token) {
+        try {
+            const parts = token.split('.');
+            if (parts.length !== 3) {
+                return { valid: false, user: null, error: 'Invalid token format' };
+            }
+            const [encodedHeader, encodedPayload, signature] = parts;
+            // Verify signature
+            const expectedSignature = await this.createSignature(`${encodedHeader}.${encodedPayload}`, this.config.secret);
+            if (signature !== expectedSignature) {
+                return { valid: false, user: null, error: 'Invalid signature' };
+            }
+            // Decode payload
+            const payload = JSON.parse(this.base64UrlDecode(encodedPayload));
+            // Check expiry
+            if (payload.exp && payload.exp < Math.floor(Date.now() / 1000)) {
+                return { valid: false, user: null, error: 'Token expired', expired: true };
+            }
+            // Check issuer
+            if (this.config.issuer && payload.iss !== this.config.issuer) {
+                return { valid: false, user: null, error: 'Invalid issuer' };
+            }
+            // Check audience
+            if (this.config.audience && payload.aud !== this.config.audience) {
+                return { valid: false, user: null, error: 'Invalid audience' };
+            }
+            const user = {
+                id: payload.id,
+                email: payload.email,
+                username: payload.username,
+                roles: payload.roles || [],
+                permissions: payload.permissions || []
+            };
+            return { valid: true, user };
+        }
+        catch (error) {
+            return { valid: false, user: null, error: 'Token verification failed' };
+        }
+    }
+    /**
+     * Decode token tanpa verify (untuk debugging)
+     */
+    decode(token) {
+        try {
+            const parts = token.split('.');
+            if (parts.length !== 3)
+                return null;
+            const payload = JSON.parse(this.base64UrlDecode(parts[1]));
+            return payload;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Refresh token (generate token baru dengan expiry baru)
+     */
+    async refresh(token, options) {
+        const result = await this.verifyToken(token);
+        if (!result.valid || !result.user) {
+            return null;
+        }
+        // Generate new token with same user data
+        return this.sign({
+            id: result.user.id,
+            email: result.user.email,
+            username: result.user.username,
+            roles: result.user.roles,
+            permissions: result.user.permissions
+        }, options);
+    }
+    /**
+     * Create middleware untuk protect route
+     */
+    middleware(options) {
+        return async (ctx, next) => {
+            const result = await this.verify(ctx, options);
+            if (!result.valid) {
+                return ctx.response.status(401).json({
+                    error: 'Unauthorized',
+                    message: result.error
+                });
+            }
+            // Attach user ke context
+            ctx.user = result.user;
+            return next(ctx);
+        };
+    }
+    /**
+     * Check apakah user punya role tertentu
+     */
+    hasRole(user, role) {
+        const roles = Array.isArray(role) ? role : [role];
+        return roles.some(r => user.roles?.includes(r));
+    }
+    /**
+     * Check apakah user punya permission tertentu
+     */
+    hasPermission(user, permission) {
+        const permissions = Array.isArray(permission) ? permission : [permission];
+        return permissions.some(p => user.permissions?.includes(p));
+    }
+    // === Private Methods ===
+    extractToken(ctx, cookieName) {
+        // 1. Check Authorization header
+        const authHeader = ctx.headers?.authorization || ctx.headers?.Authorization;
+        if (authHeader) {
+            const header = Array.isArray(authHeader) ? authHeader[0] : authHeader;
+            if (header.startsWith('Bearer ')) {
+                return header.slice(7);
+            }
+        }
+        // 2. Check cookie
+        if (cookieName) {
+            const cookieHeader = ctx.headers?.cookie;
+            if (cookieHeader) {
+                const cookies = Array.isArray(cookieHeader) ? cookieHeader[0] : cookieHeader;
+                const match = cookies.match(new RegExp(`${cookieName}=([^;]+)`));
+                if (match)
+                    return match[1];
+            }
+        }
+        // 3. Check query parameter (for websocket atau special cases)
+        if (ctx.query?.token) {
+            return ctx.query.token;
+        }
+        return null;
+    }
+    parseExpiry(expiry) {
+        const match = expiry.match(/^(\d+)([smhd])$/);
+        if (!match)
+            return 3600; // default 1h
+        const value = parseInt(match[1]);
+        const unit = match[2];
+        switch (unit) {
+            case 's': return value;
+            case 'm': return value * 60;
+            case 'h': return value * 3600;
+            case 'd': return value * 86400;
+            default: return 3600;
+        }
+    }
+    base64UrlEncode(str) {
+        const base64 = Buffer.from(str).toString('base64');
+        return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+    base64UrlDecode(str) {
+        let base64 = str.replace(/-/g, '+').replace(/_/g, '/');
+        while (base64.length % 4)
+            base64 += '=';
+        return Buffer.from(base64, 'base64').toString('utf-8');
+    }
+    async createSignature(data, secret) {
+        const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
+        const hmac = crypto.createHmac('sha256', secret);
+        hmac.update(data);
+        const signature = hmac.digest('base64');
+        return signature.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+}
+exports.JWTProvider = JWTProvider;
+/**
+ * Factory function untuk create JWTProvider
+ */
+function createJWTProvider(config) {
+    return new JWTProvider(config);
+}
+//# sourceMappingURL=JWTProvider.js.map

package/dist/security/auth/JWTProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWTProvider.js","sourceRoot":"","sources":["../../../src/security/auth/JWTProvider.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoTH,8CAEC;AA1RD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,WAAW;IACd,MAAM,CAAoB;IAElC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,IAAI;YACf,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAqB,EAAE,OAAoC;QACpE,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAE5C,mBAAmB;QACnB,IAAI,GAAW,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,GAAG,OAAO;YACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClC,GAAG;YACH,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SACjD,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAElG,OAAO,GAAG,aAAa,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,OAAiC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;YAEzD,mBAAmB;YACnB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,eAAe,CAClD,GAAG,aAAa,IAAI,cAAc,EAAE,EACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;YAEF,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;gBACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YAClE,CAAC;YAED,iBAAiB;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC;YAEjE,eAAe;YACf,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAC/D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC7E,CAAC;YAED,eAAe;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YAC/D,CAAC;YAED,iBAAiB;YACjB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YACjE,CAAC;YAED,MAAM,IAAI,GAAS;gBACjB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;aACvC,CAAC;YAEF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAE/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAAoC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yCAAyC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;YAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YACxB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;YAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YACxB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;SACrC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAiC;QAC1C,OAAO,KAAK,EAAE,GAAY,EAAE,IAAoC,EAAE,EAAE;YAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnC,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,MAAM,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,yBAAyB;YACxB,GAAW,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAEhC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAU,EAAE,IAAuB;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAAU,EAAE,UAA6B;QACrD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1E,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,0BAA0B;IAElB,YAAY,CAAC,GAAY,EAAE,UAAmB;QACpD,gCAAgC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YACtE,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;YACzC,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,UAAU,UAAU,CAAC,CAAC,CAAC;gBACjE,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,aAAa;QAEtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC;YACvB,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC;YAC9B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,KAAK,CAAC;YAC/B,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,GAAG,CAAC;QACxC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,MAAc;QACxD,MAAM,MAAM,GAAG,wDAAa,QAAQ,GAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;CACF;AAzPD,kCAyPC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/dist/security/auth/adapter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Auth Adapter Exports
+ *
+ * Re-exports authentication adapters
+ */
+export * from '../adapter';
+export { JWTAuthAdapter } from './jwt';
+//# sourceMappingURL=adapter.d.ts.map

package/dist/security/auth/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/security/auth/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC"}

package/dist/security/auth/adapter.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Auth Adapter Exports
+ *
+ * Re-exports authentication adapters
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTAuthAdapter = void 0;
+__exportStar(require("../adapter"), exports);
+var jwt_1 = require("./jwt");
+Object.defineProperty(exports, "JWTAuthAdapter", { enumerable: true, get: function () { return jwt_1.JWTAuthAdapter; } });
+// OAuth and Session adapters will be implemented in future
+// export { OAuthAdapter } from './oauth';
+// export { SessionAdapter } from './session';
+//# sourceMappingURL=adapter.js.map

package/dist/security/auth/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/security/auth/adapter.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;AAEH,6CAA2B;AAC3B,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AAEvB,2DAA2D;AAC3D,0CAA0C;AAC1C,8CAA8C"}

package/dist/security/auth/jwt.d.ts

@@ -0,0 +1,55 @@
+/**
+ * JWT Authentication Adapter
+ *
+ * Implements JWT-based authentication
+ */
+import type { Context } from '../../core/types';
+import type { User, JWTConfig } from '../types';
+import type { AuthAdapter } from '../adapter';
+/**
+ * Simple JWT implementation (in production, use a library like jsonwebtoken)
+ * This is a basic implementation for demonstration
+ */
+export declare class JWTAuthAdapter implements AuthAdapter<JWTConfig> {
+    /**
+     * Verify JWT token and extract user
+     */
+    verify(ctx: Context, config: JWTConfig): Promise<User | null>;
+    /**
+     * Generate JWT token for user
+     */
+    generateToken(user: User, config: JWTConfig): Promise<string>;
+    /**
+     * Refresh JWT token (placeholder for future implementation)
+     */
+    refreshToken(token: string, config: JWTConfig): Promise<string | null>;
+    /**
+     * Extract token from request
+     */
+    private extractToken;
+    /**
+     * Encode JWT token (simplified HMAC-SHA256)
+     */
+    private encodeToken;
+    /**
+     * Decode and verify JWT token
+     */
+    private decodeToken;
+    /**
+     * Base64 URL encode
+     */
+    private base64UrlEncode;
+    /**
+     * Base64 URL decode
+     */
+    private base64UrlDecode;
+    /**
+     * Sign data with HMAC-SHA256
+     */
+    private sign;
+    /**
+     * Parse expiration string to seconds
+     */
+    private parseExpiration;
+}
+//# sourceMappingURL=jwt.d.ts.map

package/dist/security/auth/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/security/auth/jwt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;GAGG;AACH,qBAAa,cAAe,YAAW,WAAW,CAAC,SAAS,CAAC;IACzD;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAmCnE;;OAEG;IACG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAqBnE;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA2B5E;;OAEG;IACH,OAAO,CAAC,YAAY;IA8BpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAWnB;;OAEG;IACH,OAAO,CAAC,WAAW;IAqBnB;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAWvB;;OAEG;IACH,OAAO,CAAC,IAAI;IAQZ;;OAEG;IACH,OAAO,CAAC,eAAe;CAmB1B"}