@fonderie/auth 5.0.2 → 5.0.3

package/dist/index.js

@@ -292,7 +292,8 @@ function verifyToken(token, config) {
 }
 
 // src/services/mfa.ts
-import { createHmac, randomBytes, timingSafeEqual } from "crypto";
+import { createHmac, randomBytes } from "crypto";
+import { constantTimeEqual } from "@fonderie/core";
 var STEP = 30;
 var DRIFT = 1;
 var DIGITS = 6;
@@ -363,16 +364,10 @@ function generateTotpUri(email2, secret, issuer) {
   });
   return `otpauth://totp/${encodeURIComponent(issuer)}:${encodeURIComponent(email2)}?${params}`;
 }
-function safeCodeEqual(a, b) {
-  const bufA = Buffer.from(a);
-  const bufB = Buffer.from(b);
-  if (bufA.length !== bufB.length) return false;
-  return timingSafeEqual(bufA, bufB);
-}
 function verifyTotpToken(token, secret) {
   const t = timeCounter();
   for (let i = -DRIFT; i <= DRIFT; i++) {
-    if (safeCodeEqual(hotp(secret, t + i), token)) {
+    if (constantTimeEqual(hotp(secret, t + i), token)) {
       return true;
     }
   }
@@ -421,7 +416,7 @@ function makeMfaCipher(keyHex) {
 }
 
 // src/dtos/user.ts
-import { stringOrEmpty, booleanOrFalse } from "@fonderie/core";
+import { stringOrEmpty, booleanOrFalse, dateOrEmpty } from "@fonderie/core";
 var DEFAULT_PREFERENCES = {
   locale: "en-US",
   timezone: "UTC",
@@ -459,7 +454,7 @@ function toUserDTO(user, phoneVerified = false) {
     phone: stringOrEmpty(user.phone),
     profileImageUrl: stringOrEmpty(user.profileImageUrl),
     isActive: typeof user.isActive === "boolean" ? user.isActive : true,
-    lastLogin: user.lastLogin instanceof Date ? user.lastLogin.toISOString() : "",
+    lastLogin: dateOrEmpty(user.lastLogin),
     preferences: {
       ...DEFAULT_PREFERENCES,
       ...cleaned,
@@ -476,8 +471,8 @@ function toUserDTO(user, phoneVerified = false) {
     suspended: booleanOrFalse(user.suspended),
     whitelist: booleanOrFalse(user.whitelist),
     ipWhitelist: Array.isArray(user.ipWhitelist) ? user.ipWhitelist : [],
-    createdAt: user.createdAt instanceof Date ? user.createdAt.toISOString() : "",
-    updatedAt: user.updatedAt instanceof Date ? user.updatedAt.toISOString() : ""
+    createdAt: dateOrEmpty(user.createdAt),
+    updatedAt: dateOrEmpty(user.updatedAt)
   };
 }
 
@@ -1715,7 +1710,7 @@ function authController(store, config, bus) {
 
 // src/controllers/user.controller.ts
 import { randomInt as randomInt2 } from "crypto";
-import { setApiResponse as setApiResponse4, HTTP as HTTP4 } from "@fonderie/core";
+import { setApiResponse as setApiResponse4, HTTP as HTTP4, dateOrEmpty as dateOrEmpty2 } from "@fonderie/core";
 import { NOTIFICATION_EVENT as NOTIFICATION_EVENT3 } from "@fonderie/events";
 function normalizePhone2(phone2) {
   return phone2.trim().replace(/[\s()\-\.]/g, "");
@@ -1935,8 +1930,8 @@ function userController(store, config, bus) {
           id: s.id,
           userAgent: s.userAgent,
           ipAddress: s.ipAddress,
-          createdAt: s.createdAt instanceof Date ? s.createdAt.toISOString() : s.createdAt,
-          expiresAt: s.expiresAt instanceof Date ? s.expiresAt.toISOString() : s.expiresAt
+          createdAt: dateOrEmpty2(s.createdAt),
+          expiresAt: dateOrEmpty2(s.expiresAt)
         })),
         security: {
           mfaEnabled: user.mfaEnabled === true,
@@ -2120,19 +2115,19 @@ function buildAuthRoutes(store, config, bus) {
 }
 
 // src/services/config-guard.ts
+import { MIN_SECRET_LENGTH, PLACEHOLDER_SECRET, secretStrengthProblem } from "@fonderie/core";
 var MODULE = "@fonderie/auth";
-var PLACEHOLDER_SECRET = /dev-secret|test-secret|changeme|change-me|your[-_]secret|placeholder|example|insecure|min-32-chars/i;
-var MIN_SECRET_LENGTH = 32;
 function collectAuthConfigProblems(config) {
   const problems = [];
   const secret = config.jwtSecret ?? "";
-  if (secret.length < MIN_SECRET_LENGTH) {
+  const secretProblem = secretStrengthProblem(secret);
+  if (secretProblem === "too-short") {
     problems.push({
       module: MODULE,
       severity: "error",
       message: `jwtSecret must be at least ${MIN_SECRET_LENGTH} characters (got ${secret.length})`
     });
-  } else if (PLACEHOLDER_SECRET.test(secret)) {
+  } else if (secretProblem === "placeholder") {
     problems.push({
       module: MODULE,
       severity: "error",