@mudrichenkoevgeny/web-platform-sdk-core-security 0.0.1 → 0.1.0

package/src/usecase/security-use-cases.test.ts

@@ -1,67 +0,0 @@
-import { describe, it, expect } from 'vitest'
-import { RefreshOpenSecuritySettingsUseCase } from '@/usecase/refresh-open-security-settings-use-case'
-import { ValidatePasswordUseCase } from '@/usecase/validate-password-use-case'
-import { PasswordPolicyValidator } from '@/domain/model/password-policy-validator'
-import { OpenSecuritySettingsRepositoryMock } from '@/mock/repository/open-security-settings-repository-mock'
-import { ClientSecurityErrorCodes } from '@/error/naming/client-security-error-codes'
-import type { SecurityError } from '@/error/model/security-error'
-
-describe('Security Use Cases', () => {
-  describe('RefreshOpenSecuritySettingsUseCase', () => {
-    it('delegates to repository refresh method', async () => {
-      const repo = new OpenSecuritySettingsRepositoryMock()
-      const useCase = new RefreshOpenSecuritySettingsUseCase(repo)
-
-      expect(repo.refreshCallCount).toBe(0)
-      const result = await useCase.execute()
-
-      expect(repo.refreshCallCount).toBe(1)
-      expect(result.success).toBe(true)
-    })
-  })
-
-  describe('ValidatePasswordUseCase', () => {
-    it('validates password successfully using repository policy', async () => {
-      const repo = new OpenSecuritySettingsRepositoryMock()
-      const validator = new PasswordPolicyValidator()
-      const useCase = new ValidatePasswordUseCase(repo, validator)
-
-      const result = await useCase.execute('Valid123!')
-      expect(result.success).toBe(true)
-    })
-
-    it('returns SecurityError if password fails validation', async () => {
-      const repo = new OpenSecuritySettingsRepositoryMock()
-      const validator = new PasswordPolicyValidator()
-      const useCase = new ValidatePasswordUseCase(repo, validator)
-
-      const result = await useCase.execute('short')
-      expect(result.success).toBe(false)
-      if (!result.success) {
-        expect((result.error as SecurityError).code).toBe(ClientSecurityErrorCodes.PASSWORD_TOO_SHORT)
-      }
-    })
-
-    it('uses fallback policy if repository fetch fails', async () => {
-      const repo = new OpenSecuritySettingsRepositoryMock({ shouldFailGet: true })
-      const validator = new PasswordPolicyValidator()
-      const useCase = new ValidatePasswordUseCase(repo, validator)
-
-      // Fallback policy requires min length 8 and a letter.
-      const resultShort = await useCase.execute('1234567')
-      expect(resultShort.success).toBe(false)
-      if (!resultShort.success) {
-        expect((resultShort.error as SecurityError).code).toBe(ClientSecurityErrorCodes.PASSWORD_TOO_SHORT)
-      }
-
-      const resultNoLetter = await useCase.execute('12345678')
-      expect(resultNoLetter.success).toBe(false)
-      if (!resultNoLetter.success) {
-        expect((resultNoLetter.error as SecurityError).code).toBe(ClientSecurityErrorCodes.PASSWORD_NO_LETTER)
-      }
-
-      const resultValid = await useCase.execute('a1234567')
-      expect(resultValid.success).toBe(true)
-    })
-  })
-})

package/src/usecase/validate-password-use-case.ts

@@ -1,76 +0,0 @@
-import type { AppResult, AppError } from '@mudrichenkoevgeny/web-platform-sdk-core-common'
-import type { OpenSecuritySettingsRepository } from '@/repository/open-security-settings-repository'
-import type { PasswordPolicyValidator, PasswordPolicyFailReason } from '@/domain/model/password-policy-validator'
-import { SecurityError } from '@/error/model/security-error'
-import type { OpenPasswordPolicy } from '@/domain/model/open-security-settings'
-
-/** Default fallback password policy if loading from repository fails. */
-const FALLBACK_PASSWORD_POLICY: OpenPasswordPolicy = {
-  minLength: 8,
-  requireLetter: true,
-  requireUpperCase: false,
-  requireLowerCase: false,
-  requireDigit: false,
-  requireSpecialChar: false
-}
-
-/**
- * Validates a password string against the current {@link OpenPasswordPolicy} from {@link OpenSecuritySettingsRepository}.
- */
-export class ValidatePasswordUseCase {
-  /**
-   * Constructs a new {@link ValidatePasswordUseCase}.
-   *
-   * @param openSecuritySettingsRepository - Source of the active password policy
-   * @param passwordPolicyValidator - Pure domain logic validator implementation
-   */
-  public constructor(
-    private readonly openSecuritySettingsRepository: OpenSecuritySettingsRepository,
-    private readonly passwordPolicyValidator: PasswordPolicyValidator
-  ) {}
-
-  /**
-   * Evaluates the candidate password.
-   *
-   * @param password - Candidate password to validate
-   * @returns AppResult resolving to void on success, or SecurityError on failure
-   */
-  public async execute(password: string): Promise<AppResult<void, AppError>> {
-    const securitySettingsResult = await this.openSecuritySettingsRepository.getOpenSecuritySettings()
-
-    const passwordPolicy = securitySettingsResult.success
-      ? securitySettingsResult.data.openPasswordPolicy
-      : FALLBACK_PASSWORD_POLICY
-
-    const validationResult = this.passwordPolicyValidator.validate(passwordPolicy, password)
-
-    if (validationResult.success) {
-      return { success: true, data: undefined }
-    }
-
-    const primaryReason = validationResult.reasons[0] as PasswordPolicyFailReason
-    return {
-      success: false,
-      error: this.toSecurityError(primaryReason, passwordPolicy.minLength)
-    }
-  }
-
-  private toSecurityError(reason: PasswordPolicyFailReason, minLength: number): SecurityError {
-    switch (reason) {
-      case 'TOO_SHORT':
-        return SecurityError.passwordTooShort(minLength)
-      case 'NO_LETTER':
-        return SecurityError.passwordNoLetter()
-      case 'NO_UPPERCASE':
-        return SecurityError.passwordNoUpperCase()
-      case 'NO_LOWERCASE':
-        return SecurityError.passwordNoLowerCase()
-      case 'NO_DIGIT':
-        return SecurityError.passwordNoDigit()
-      case 'NO_SPECIAL_CHAR':
-        return SecurityError.passwordNoSpecialChar()
-      case 'TOO_COMMON':
-        return SecurityError.passwordTooCommon()
-    }
-  }
-}

package/tsconfig.json

@@ -1,16 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "jsx": "react-jsx",
-    "declaration": true,
-    "declarationMap": true,
-    "paths": {
-      "@/*": ["./src/*"]
-    }
-  },
-  "include": [
-    "src/**/*"
-  ]
-}

package/vite.config.ts

@@ -1,50 +0,0 @@
-import { defineConfig } from 'vite'
-import svgr from 'vite-plugin-svgr'
-import dts from 'vite-plugin-dts'
-import { fileURLToPath, URL } from 'node:url'
-
-export default defineConfig(({ command, mode }) => {
-  const isTest = mode === 'test' || process.env.NODE_ENV === 'test'
-  const plugins = [
-    svgr({
-      svgrOptions: {
-        icon: true
-      }
-    })
-  ]
-
-  if (!isTest && command === 'build') {
-    plugins.push(dts({ rollupTypes: true }))
-  }
-
-  return {
-    plugins,
-    resolve: {
-      alias: {
-        '@': fileURLToPath(new URL('./src', import.meta.url))
-      }
-    },
-    test: {
-      name: 'core-security',
-      globals: true,
-      environment: 'jsdom',
-      include: ['src/**/*.{test,spec}.{js,mjs,cjs,ts,mts,cts,jsx,tsx}'],
-      server: {
-        deps: {
-          inline: ['@mudrichenkoevgeny/shared-foundation']
-        }
-      }
-    },
-    build: {
-      lib: {
-        entry: './src/index.ts',
-        name: 'WebPlatformSdkCoreSecurity',
-        fileName: 'index',
-        formats: ['es']
-      },
-      rollupOptions: {
-        external: ['react', 'react-dom', 'react/jsx-runtime']
-      }
-    }
-  }
-})