@forwardimpact/librpc 0.1.101 → 0.1.103

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forwardimpact/librpc",
-  "version": "0.1.101",
+  "version": "0.1.103",
   "description": "gRPC server and client framework — ship service endpoints without reimplementing transport.",
   "keywords": [
     "grpc",
@@ -55,7 +55,7 @@
     "@grpc/grpc-js": "^1.14.4"
   },
   "devDependencies": {
-    "@forwardimpact/libharness": "^0.1.14"
+    "@forwardimpact/libmock": "^0.1.0"
   },
   "engines": {
     "bun": ">=1.2.0",

package/src/auth.js

@@ -8,14 +8,17 @@ import grpc from "@grpc/grpc-js";
 export class HmacAuth {
   #secret;
   #tokenLifetimeMs;
+  #now;
 
   /**
    * Creates a new HMAC authenticator instance
    * @param {string} secret - Shared secret key for HMAC generation (minimum 32 characters)
    * @param {number} tokenLifetimeSeconds - Token lifetime in seconds (default: 60)
+   * @param {object} [options] - Optional collaborators
+   * @param {() => number} [options.now] - Injectable clock (default: Date.now)
    * @throws {Error} When secret is too short or invalid
    */
-  constructor(secret, tokenLifetimeSeconds = 60) {
+  constructor(secret, tokenLifetimeSeconds = 60, { now = Date.now } = {}) {
     if (!secret || typeof secret !== "string") {
       throw new Error("Secret must be a non-empty string");
     }
@@ -28,6 +31,7 @@ export class HmacAuth {
 
     this.#secret = secret;
     this.#tokenLifetimeMs = tokenLifetimeSeconds * 1000;
+    this.#now = now;
   }
 
   /**
@@ -41,7 +45,7 @@ export class HmacAuth {
       throw new Error("Service ID must be a non-empty string");
     }
 
-    const timestamp = Date.now();
+    const timestamp = this.#now();
     const payload = `${serviceId}:${timestamp}`;
     const signature = crypto
       .createHmac("sha256", this.#secret)
@@ -92,7 +96,7 @@ export class HmacAuth {
       }
 
       // Check token expiration
-      const now = Date.now();
+      const now = this.#now();
       if (now - timestamp > this.#tokenLifetimeMs) {
         return {
           isValid: false,

package/src/server.js

@@ -170,10 +170,11 @@ export class Server extends Rpc {
         );
         callback(null, response);
       } catch (error) {
-        callback({
-          code: this.grpc().status.INTERNAL,
-          message: error?.message || String(error),
-        });
+        const code =
+          typeof error?.code === "number"
+            ? error.code
+            : this.grpc().status.INTERNAL;
+        callback({ code, message: error?.message || String(error) });
       }
     };
   }