@nano-app/backend 0.6.4 → 0.6.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nano-app/backend",
-  "version": "0.6.4",
+  "version": "0.6.5",
   "description": "Backend for nano-app architecture",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,6 +19,10 @@
   ],
   "author": "Cristian Serrano",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Nano-Nathan/nano-app.git"
+  },
   "dependencies": {
     "@prisma/adapter-pg": "^7.4.0",
     "@prisma/client": "^7.4.0",

package/dist/auth/ClientCredentials.d.ts

@@ -1,15 +0,0 @@
-import type { RequestHandler } from "express";
-import type { NanoAppAuthConfig } from "../index";
-export declare class ClientCredentials {
-    private static config;
-    private static oauthSecret;
-    private static pool;
-    static init(config: NanoAppAuthConfig): Promise<void>;
-    static middleware: RequestHandler;
-    static generateToken(clientId: string, clientSecret: string): Promise<{
-        access_token: string;
-        token_type: string;
-        expires_in: number;
-    }>;
-    private static parseExpiry;
-}

package/dist/auth/ClientCredentials.js

@@ -1,132 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ClientCredentials = void 0;
-const jwt = __importStar(require("jsonwebtoken"));
-const bcrypt = __importStar(require("bcrypt"));
-const pg_1 = require("pg");
-const crypto_1 = require("crypto");
-const SCHEMA = "nano_auth";
-const TABLE = `${SCHEMA}.oauth_client`;
-class ClientCredentials {
-    static config = {};
-    static oauthSecret;
-    static pool;
-    static async init(config) {
-        // Inicializar la configuración
-        const connectionString = process.env.DATABASE_URL ?? '';
-        ClientCredentials.config = config;
-        ClientCredentials.oauthSecret = process.env.OAUTH_SECRET ?? '';
-        // Crear el pool de conexiones
-        ClientCredentials.pool = new pg_1.Pool({ connectionString });
-        // Crear el schema si no existe
-        await ClientCredentials.pool.query(`CREATE SCHEMA IF NOT EXISTS ${SCHEMA}`);
-        await ClientCredentials.pool.query(`
-      CREATE TABLE IF NOT EXISTS ${TABLE} (
-        id           SERIAL PRIMARY KEY,
-        client_id    TEXT NOT NULL UNIQUE,
-        client_secret TEXT NOT NULL,
-        created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
-      )
-    `);
-        // Verificar si existen credenciales
-        const { rows } = await ClientCredentials.pool.query(`SELECT id FROM ${TABLE} LIMIT 1`);
-        if (rows.length === 0) {
-            // Generar credenciales
-            const clientId = (0, crypto_1.randomBytes)(16).toString("hex");
-            const clientSecret = (0, crypto_1.randomBytes)(32).toString("hex");
-            const hashed = await bcrypt.hash(clientSecret, 10);
-            // Insertar credenciales
-            await ClientCredentials.pool.query(`INSERT INTO ${TABLE} (client_id, client_secret) VALUES ($1, $2)`, [clientId, hashed]);
-            // Mostrar credenciales
-            console.log("\n══════════════════════════════════════════════════════");
-            console.log("          NANO-APP: OAuth Client Credentials          ");
-            console.log("   Guarda estas credenciales, no se mostrarán más.    ");
-            console.log("══════════════════════════════════════════════════════\n");
-            console.log(`client_id:     ${clientId}`);
-            console.log(`client_secret: ${clientSecret}\n\n`);
-        }
-    }
-    static middleware = async (req, res, next) => {
-        const publicRoutes = ["/oauth/token", ...(ClientCredentials.config.publicRoutes ?? [])];
-        // Si la ruta es pública, continuar
-        if (publicRoutes.includes(req.path)) {
-            return next();
-        }
-        // Validar que el header de autenticación sea válido
-        const authHeader = req.headers.authorization;
-        if (!authHeader?.startsWith("Bearer ")) {
-            return next({ status: 401, message: "Header de autenticación inválido" });
-        }
-        // Obtener el token y secret
-        const token = authHeader.slice(7);
-        // Verificar que el token sea válido
-        try {
-            const payload = jwt.verify(token, ClientCredentials.oauthSecret);
-            req.oauthClient = { clientId: payload.sub };
-            return next();
-        }
-        catch {
-            return next({ status: 401, message: "Sesión expirada" });
-        }
-    };
-    static async generateToken(clientId, clientSecret) {
-        if (!ClientCredentials.pool) {
-            throw { status: 500, message: "ClientCredentials no inicializado" };
-        }
-        const { rows } = await ClientCredentials.pool.query(`SELECT client_id, client_secret FROM ${TABLE} WHERE client_id = $1 LIMIT 1`, [clientId]);
-        if (rows.length === 0) {
-            throw { status: 401, message: "Credenciales de cliente inválidas" };
-        }
-        const valid = await bcrypt.compare(clientSecret, rows[0].client_secret);
-        if (!valid) {
-            throw { status: 401, message: "Credenciales de cliente inválidas" };
-        }
-        const expiry = ClientCredentials.config.tokenExpiry ?? '1h';
-        const expiresInSeconds = ClientCredentials.parseExpiry(expiry);
-        const access_token = jwt.sign({ sub: rows[0].client_id }, ClientCredentials.oauthSecret, { expiresIn: expiry });
-        return { access_token, token_type: "Bearer", expires_in: expiresInSeconds };
-    }
-    static parseExpiry(expiry) {
-        const match = expiry.match(/^(\d+)(s|m|h|d)$/);
-        if (!match)
-            return 3600;
-        const value = parseInt(match[1], 10);
-        const unit = match[2];
-        const multipliers = { s: 1, m: 60, h: 3600, d: 86400 };
-        return value * (multipliers[unit] ?? 3600);
-    }
-}
-exports.ClientCredentials = ClientCredentials;

package/dist/auth/TokenEndpoint.d.ts

@@ -1,5 +0,0 @@
-import { Endpoint, type ApiResponse } from "../index";
-import type { Request, Response } from "express";
-export declare class TokenEndpoint extends Endpoint {
-    protected POST(req: Request, res: Response): Promise<ApiResponse>;
-}

package/dist/auth/TokenEndpoint.js

@@ -1,33 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TokenEndpoint = void 0;
-const index_1 = require("../index");
-class TokenEndpoint extends index_1.Endpoint {
-    async POST(req, res) {
-        let clientId;
-        let clientSecret;
-        // Authorization: Basic <base64(clientId:clientSecret)>
-        const authHeader = req.headers.authorization;
-        if (authHeader?.startsWith("Basic ")) {
-            const decoded = Buffer.from(authHeader.slice(6), "base64").toString("utf-8");
-            const colon = decoded.indexOf(":");
-            if (colon !== -1) {
-                clientId = decoded.slice(0, colon);
-                clientSecret = decoded.slice(colon + 1);
-            }
-        }
-        // Body: client_id y client_secret (JSON o form-urlencoded)
-        if (!clientId || !clientSecret) {
-            clientId = req.body?.client_id;
-            clientSecret = req.body?.client_secret;
-        }
-        if (!clientId || !clientSecret) {
-            throw { status: 400, message: "client_id y client_secret son campos requeridos" };
-        }
-        const tokenData = await index_1.ClientCredentials.generateToken(clientId, clientSecret);
-        // RFC 6749 §5.1: la respuesta del token endpoint debe ser plana, sin wrappers
-        res.json(tokenData);
-        return {};
-    }
-}
-exports.TokenEndpoint = TokenEndpoint;