@nauth-toolkit/mfa-totp 0.1.3

package/dist/src/totp.service.js

@@ -0,0 +1,163 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOTPService = void 0;
+const otplib_1 = require("otplib");
+const QRCode = __importStar(require("qrcode"));
+const core_1 = require("@nauth-toolkit/core");
+class TOTPService {
+    config;
+    logger;
+    defaultConfig = {
+        window: 1,
+        stepSeconds: 30,
+        digits: 6,
+        algorithm: 'sha1',
+    };
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+        this.configureAuthenticator();
+    }
+    configureAuthenticator() {
+        const totpConfig = this.getTOTPConfig();
+        otplib_1.authenticator.options = {
+            step: totpConfig.stepSeconds,
+            window: totpConfig.window,
+            digits: totpConfig.digits,
+            algorithm: totpConfig.algorithm,
+        };
+        this.logger?.debug?.(`TOTP configured: step=${totpConfig.stepSeconds}s, window=${totpConfig.window}, digits=${totpConfig.digits}`);
+    }
+    getTOTPConfig() {
+        return {
+            ...this.defaultConfig,
+            ...this.config.mfa?.totp,
+        };
+    }
+    getIssuer() {
+        return this.config.mfa?.issuer || 'nauth-toolkit';
+    }
+    async generateSecret(accountName) {
+        this.logger?.log?.(`Generating TOTP secret for: ${accountName}`);
+        const secret = otplib_1.authenticator.generateSecret();
+        const issuer = this.getIssuer();
+        const otpauthUrl = otplib_1.authenticator.keyuri(accountName, issuer, secret);
+        let qrCode;
+        try {
+            qrCode = await QRCode.toDataURL(otpauthUrl);
+        }
+        catch (error) {
+            this.logger?.error?.('Failed to generate QR code', error);
+            throw new core_1.NAuthException(core_1.AuthErrorCode.INTERNAL_ERROR, 'Failed to generate QR code');
+        }
+        const manualEntryKey = this.formatSecretForManualEntry(secret);
+        this.logger?.log?.(`TOTP secret generated successfully for: ${accountName}`);
+        return {
+            secret,
+            qrCode,
+            manualEntryKey,
+            issuer,
+            accountName,
+        };
+    }
+    formatSecretForManualEntry(secret) {
+        return secret.match(/.{1,4}/g)?.join(' ') || secret;
+    }
+    verifyCode(secret, code) {
+        try {
+            const cleanCode = code.replace(/\s/g, '');
+            if (!/^\d{6}$/.test(cleanCode)) {
+                this.logger?.warn?.('Invalid TOTP code format');
+                return false;
+            }
+            const isValid = otplib_1.authenticator.verify({
+                token: cleanCode,
+                secret,
+            });
+            if (isValid) {
+                this.logger?.debug?.('TOTP code verified successfully');
+            }
+            else {
+                this.logger?.warn?.('TOTP code verification failed');
+            }
+            return isValid;
+        }
+        catch (error) {
+            this.logger?.error?.('TOTP verification error', error);
+            return false;
+        }
+    }
+    verifyCodeWithDetails(secret, code) {
+        const cleanCode = code.replace(/\s/g, '');
+        if (!cleanCode) {
+            return { valid: false, error: 'Code is required' };
+        }
+        if (!/^\d{6}$/.test(cleanCode)) {
+            return { valid: false, error: 'Code must be 6 digits' };
+        }
+        if (!secret || secret.length < 16) {
+            return { valid: false, error: 'Invalid secret' };
+        }
+        const isValid = this.verifyCode(secret, cleanCode);
+        if (!isValid) {
+            return { valid: false, error: 'Invalid or expired code' };
+        }
+        return { valid: true };
+    }
+    generateCode(secret) {
+        return otplib_1.authenticator.generate(secret);
+    }
+    isValidSecret(secret) {
+        if (!secret || typeof secret !== 'string') {
+            return false;
+        }
+        if (secret.length < 16) {
+            return false;
+        }
+        if (!/^[A-Z2-7]+$/.test(secret)) {
+            return false;
+        }
+        return true;
+    }
+    getTimeRemaining() {
+        const totpConfig = this.getTOTPConfig();
+        const now = Math.floor(Date.now() / 1000);
+        const elapsed = now % totpConfig.stepSeconds;
+        return totpConfig.stepSeconds - elapsed;
+    }
+}
+exports.TOTPService = TOTPService;
+//# sourceMappingURL=totp.service.js.map

package/dist/src/totp.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.service.js","sourceRoot":"","sources":["../../src/totp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAuC;AACvC,+CAAiC;AACjC,8CAA0G;AA0B1G,MAAa,WAAW;IASH;IACA;IATF,aAAa,GAAyB;QACrD,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,MAAM;KAClB,CAAC;IAEF,YACmB,MAAmB,EACnB,MAAmB;QADnB,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAa;QAGpC,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAcO,sBAAsB;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAExC,sBAAa,CAAC,OAAO,GAAG;YACtB,IAAI,EAAE,UAAU,CAAC,WAAW;YAC5B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAgB;SACvC,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAClB,yBAAyB,UAAU,CAAC,WAAW,aAAa,UAAU,CAAC,MAAM,YAAY,UAAU,CAAC,MAAM,EAAE,CAC7G,CAAC;IACJ,CAAC;IAQO,aAAa;QACnB,OAAO;YACL,GAAG,IAAI,CAAC,aAAa;YACrB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAQO,SAAS;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,eAAe,CAAC;IACpD,CAAC;IAuBD,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;QAGjE,MAAM,MAAM,GAAG,sBAAa,CAAC,cAAc,EAAE,CAAC;QAG9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAGhC,MAAM,UAAU,GAAG,sBAAa,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAGrE,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;QACvF,CAAC;QAGD,MAAM,cAAc,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,WAAW,EAAE,CAAC,CAAC;QAE7E,OAAO;YACL,MAAM;YACN,MAAM;YACN,cAAc;YACd,MAAM;YACN,WAAW;SACZ,CAAC;IACJ,CAAC;IAiBO,0BAA0B,CAAC,MAAc;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;IACtD,CAAC;IA4BD,UAAU,CAAC,MAAc,EAAE,IAAY;QACrC,IAAI,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAE1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YAGD,MAAM,OAAO,GAAG,sBAAa,CAAC,MAAM,CAAC;gBACnC,KAAK,EAAE,SAAS;gBAChB,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,iCAAiC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,+BAA+B,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAmBD,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC1D,CAAC;QAGD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACnD,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAsBD,YAAY,CAAC,MAAc;QACzB,OAAO,sBAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAiBD,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAgBD,gBAAgB;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC;QAC7C,OAAO,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC;IAC1C,CAAC;CACF;AA7TD,kCA6TC"}