@nathapp/nestjs-csrf 4.0.0 → 4.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/guard/csrf.guard.js +2 -0
- package/dist/guard/csrf.guard.js.map +1 -1
- package/package.json +6 -6
- package/.eslintrc.js +0 -8
- package/.nax/features/nestjs-csrf/.nax-acceptance.test.ts +0 -785
- package/.turbo/turbo-build.log +0 -4
- package/CHANGELOG.md +0 -42
- package/lib/constant/csrf.constants.ts +0 -3
- package/lib/constant/index.ts +0 -1
- package/lib/decorator/index.ts +0 -1
- package/lib/decorator/skip-csrf.decorator.ts +0 -6
- package/lib/guard/csrf.guard.ts +0 -98
- package/lib/guard/index.ts +0 -1
- package/lib/index.ts +0 -12
- package/lib/interface/csrf-options.interface.ts +0 -31
- package/lib/interface/index.ts +0 -7
- package/lib/module/csrf.module.ts +0 -74
- package/lib/module/index.ts +0 -1
- package/lib/service/csrf-token.service.ts +0 -34
- package/lib/service/index.ts +0 -2
- package/lib/service/resolve-options.ts +0 -47
- package/test/csrf-token.service.behavior.spec.ts +0 -110
- package/test/csrf-token.service.spec.ts +0 -18
- package/test/csrf.constants.spec.ts +0 -11
- package/test/csrf.module.spec.ts +0 -267
- package/test/guard/csrf.guard.spec.ts +0 -347
- package/test/jest-nax.json +0 -27
- package/test/jest-test.json +0 -28
- package/test/resolve-csrf-options.spec.ts +0 -128
- package/test/skip-csrf.decorator.spec.ts +0 -77
- package/tsconfig.json +0 -9
package/dist/guard/csrf.guard.js
CHANGED
|
@@ -31,6 +31,8 @@ let DefaultCsrfGuard = DefaultCsrfGuard_1 = class DefaultCsrfGuard {
|
|
|
31
31
|
var _a, _b, _c, _d, _e;
|
|
32
32
|
if (this.options.enabled === false)
|
|
33
33
|
return true;
|
|
34
|
+
if (context.getType() !== 'http')
|
|
35
|
+
return true;
|
|
34
36
|
const http = context.switchToHttp();
|
|
35
37
|
const req = http.getRequest();
|
|
36
38
|
const res = http.getResponse();
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"csrf.guard.js","sourceRoot":"","sources":["../../lib/guard/csrf.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,uCAAyC;AACzC,0DAA+D;AAC/D,+DAAyF;AAEzF,sEAAiE;AACjE,gEAAgE;AAGzD,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAI3B,YAC+B,UAAuB,EACnC,MAAwB,EACxB,SAAoB;QADpB,WAAM,GAAN,MAAM,CAAkB;QACxB,cAAS,GAAT,SAAS,CAAW;QANtB,WAAM,GAAG,IAAI,eAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;QAQ1D,IAAI,CAAC,OAAO,GAAG,IAAA,oCAAkB,EAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,WAAW,CAAC,OAAyB;;QACnC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;
|
|
1
|
+
{"version":3,"file":"csrf.guard.js","sourceRoot":"","sources":["../../lib/guard/csrf.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,uCAAyC;AACzC,0DAA+D;AAC/D,+DAAyF;AAEzF,sEAAiE;AACjE,gEAAgE;AAGzD,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAI3B,YAC+B,UAAuB,EACnC,MAAwB,EACxB,SAAoB;QADpB,WAAM,GAAN,MAAM,CAAkB;QACxB,cAAS,GAAT,SAAS,CAAW;QANtB,WAAM,GAAG,IAAI,eAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;QAQ1D,IAAI,CAAC,OAAO,GAAG,IAAA,oCAAkB,EAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,WAAW,CAAC,OAAyB;;QACnC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAIhD,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAE9C,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAKvB,CAAC;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAGxB,CAAC;QAEL,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAA,GAAG,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1E,MAAM,cAAc,GAAG,MAAA,GAAG,CAAC,OAAO,0CAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,iBAAiB,GAAe,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC,IAAI,IAAI,CAChC,CAAC;QACF,IACE,YAAY,CAAC,MAAM,GAAG,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,uCAAsB,EAAE,YAAY,CAAC,EACtE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3B,OAAO,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAG,eAAe,CAAC,CAAA,KAAK,QAAQ;YAClD,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAW,CAAC,EACzD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAA,GAAG,CAAC,OAAO,0CAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,MAAA,GAAG,CAAC,OAAO,0CAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAEzE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,qCAAqB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,GAGb;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qFAAqF;gBACnF,4EAA4E,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAtFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,oCAAmB,CAAC,CAAA;6CACH,qCAAgB;QACb,gBAAS;GAP5B,gBAAgB,CAsF5B"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nathapp/nestjs-csrf",
|
|
3
|
-
"version": "4.0.
|
|
3
|
+
"version": "4.0.2",
|
|
4
4
|
"description": "Stateless double-submit-cookie CSRF protection for NestJS (Express + Fastify), zero runtime dependencies",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -29,24 +29,24 @@
|
|
|
29
29
|
},
|
|
30
30
|
"devDependencies": {
|
|
31
31
|
"@nathapp/eslint-config": "1.0.1",
|
|
32
|
-
"@nathapp/nestjs-common": "^4.0.
|
|
32
|
+
"@nathapp/nestjs-common": "^4.0.2",
|
|
33
33
|
"@nathapp/typescript-config": "1.0.1",
|
|
34
34
|
"@nestjs/common": "^11.0.0",
|
|
35
35
|
"@nestjs/core": "^11.0.0",
|
|
36
36
|
"@nestjs/platform-express": "^11.0.0",
|
|
37
37
|
"@nestjs/platform-fastify": "^11.0.0",
|
|
38
38
|
"@nestjs/testing": "^11.0.0",
|
|
39
|
-
"@types/jest": "^
|
|
39
|
+
"@types/jest": "^30.0.0",
|
|
40
40
|
"@types/supertest": "^6.0.3",
|
|
41
41
|
"cookie-parser": "^1.4.7",
|
|
42
42
|
"eslint": "^8.57.0",
|
|
43
43
|
"express": "^5.2.1",
|
|
44
|
-
"fastify": "^5.
|
|
45
|
-
"jest": "^
|
|
44
|
+
"fastify": "^5.12.5",
|
|
45
|
+
"jest": "^30.5.2",
|
|
46
46
|
"reflect-metadata": "^0.1.13",
|
|
47
47
|
"rxjs": "^7.8.0",
|
|
48
48
|
"supertest": "^7.0.0",
|
|
49
|
-
"ts-jest": "^29.
|
|
49
|
+
"ts-jest": "^29.4.14",
|
|
50
50
|
"typescript": "^5"
|
|
51
51
|
},
|
|
52
52
|
"directories": {
|