@posiwise/common-services 0.1.76 → 0.1.78

package/index.d.ts

@@ -7,6 +7,7 @@ export * from './lib/permission.service';
 export * from './lib/toast.service';
 export * from './lib/auth.service';
 export * from './lib/local-storage.service';
+export * from './lib/secure-token-storage.service';
 export * from './lib/integrations-api-http.service';
 export * from './lib/link-loader.service';
 export * from './lib/user.service';
@@ -39,4 +40,3 @@ export * from './lib/logo-caching.service';
 export * from './lib/hopscotch.service';
 export * from './lib/brain.service';
 export * from './lib/brain-api-http.service';
-export * from './lib/jquery.service';

package/lib/auth.service.d.ts

@@ -5,11 +5,13 @@ import { SignUpValues } from './common-services.interface';
 import { IntegrationsApiHttpService } from './integrations-api-http.service';
 import { LocalStorage } from './local-storage.service';
 import { MainApiHttpService } from './main-api-http.service';
+import { SecureTokenStorageService } from './secure-token-storage.service';
 import { CustomToastService } from './toast.service';
 import { UserService } from './user.service';
 import * as i0 from "@angular/core";
 export declare class AuthService {
     private readonly localStorage;
+    private readonly secureTokenStorage;
     private readonly router;
     private readonly http;
     private readonly userService;
@@ -24,7 +26,7 @@ export declare class AuthService {
     platform: string;
     platform$: import("rxjs").Observable<string>;
     isUserPersonated: boolean;
-    constructor(localStorage: LocalStorage, router: Router, http: MainApiHttpService, userService: UserService, toastr: CustomToastService, appConfigService: AppConfigService, integrationsApi: IntegrationsApiHttpService, document: Document);
+    constructor(localStorage: LocalStorage, secureTokenStorage: SecureTokenStorageService, router: Router, http: MainApiHttpService, userService: UserService, toastr: CustomToastService, appConfigService: AppConfigService, integrationsApi: IntegrationsApiHttpService, document: Document);
     getToken(): string;
     getImpersonatedToken(): string;
     setHeaderKey(): void;
@@ -38,9 +40,13 @@ export declare class AuthService {
     private getPlatform;
     signInUser(email: string, password: string): import("rxjs").Observable<any>;
     signInUserWith2Fa(email: string, password: string, google_code: any): import("rxjs").Observable<any>;
-    storeToken(token: string): import("rxjs").Observable<void>;
+    storeToken(token: string): import("rxjs").Observable<boolean>;
     storePlatform(plat: string): import("rxjs").Observable<void>;
     logout(): import("rxjs").Observable<any>;
+    /**
+     * Clear all authentication tokens
+     */
+    clearTokens(): import("rxjs").Observable<boolean>;
     getToken$(): import("rxjs").Observable<string>;
     getNewsletterSubscription(token: string): import("rxjs").Observable<any>;
     unsubscribeNewsletter(token: string): import("rxjs").Observable<any>;

package/lib/brain.service.d.ts

@@ -1,7 +1,7 @@
 import { BrainApiHttpService } from './brain-api-http.service';
 import * as i0 from "@angular/core";
 export declare class BrainApiService {
-    private api;
+    private readonly api;
     constructor(api: BrainApiHttpService);
     invokeModel(payload: {
         model_name: 'claude' | 'deepseek';

package/lib/secure-token-storage.service.d.ts

@@ -0,0 +1,94 @@
+import { Observable } from 'rxjs';
+import * as i0 from "@angular/core";
+/**
+ * Secure Token Storage Service
+ *
+ * This service provides secure token storage using memory + secure cookies.
+ * NO localStorage usage - tokens are stored only in memory and secure cookies.
+ *
+ * Security Features:
+ * - Memory storage (primary) - not persistent across refreshes
+ * - Secure cookies (backup) - with SameSite=Strict protection
+ * - No localStorage - prevents XSS token theft
+ * - Secure flag for HTTPS
+ * - CSRF protection via SameSite cookies
+ */
+export declare class SecureTokenStorageService {
+    private readonly document;
+    private readonly TOKEN_COOKIE_NAME;
+    private readonly IMPERSONATED_TOKEN_COOKIE_NAME;
+    private readonly PHONEGAP_TOKEN_COOKIE_NAME;
+    private readonly memoryStorage;
+    private readonly tokenSubject;
+    private readonly impersonatedTokenSubject;
+    private readonly phonegapTokenSubject;
+    constructor(document: Document);
+    /**
+     * Store authentication token securely
+     */
+    storeToken(token: string): Observable<boolean>;
+    /**
+     * Store impersonated user token
+     */
+    storeImpersonatedToken(token: string): Observable<boolean>;
+    /**
+     * Store phonegap impersonated token
+     */
+    storePhonegapToken(token: string): Observable<boolean>;
+    /**
+     * Get authentication token
+     */
+    getToken(): string | null;
+    /**
+     * Get impersonated token
+     */
+    getImpersonatedToken(): string | null;
+    /**
+     * Get phonegap token
+     */
+    getPhonegapToken(): string | null;
+    /**
+     * Get token as Observable
+     */
+    getToken$(): Observable<string | null>;
+    /**
+     * Get impersonated token as Observable
+     */
+    getImpersonatedToken$(): Observable<string | null>;
+    /**
+     * Get phonegap token as Observable
+     */
+    getPhonegapToken$(): Observable<string | null>;
+    /**
+     * Remove all tokens
+     */
+    clearTokens(): Observable<boolean>;
+    /**
+     * Remove specific token
+     */
+    removeToken(): Observable<boolean>;
+    /**
+     * Remove impersonated tokens
+     */
+    removeImpersonatedTokens(): Observable<boolean>;
+    /**
+     * Set secure cookie
+     * Note: HttpOnly cannot be set from client-side JavaScript
+     * For maximum security, backend should set httpOnly cookies
+     */
+    private setSecureCookie;
+    /**
+     * Get cookie value
+     */
+    private getCookieValue;
+    /**
+     * Delete cookie
+     */
+    private deleteCookie;
+    /**
+     * Initialize tokens from storage on service startup
+     */
+    private initializeTokens;
+    static ɵfac: i0.ɵɵFactoryDeclaration<SecureTokenStorageService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<SecureTokenStorageService>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@posiwise/common-services",
-  "version": "0.1.76",
+  "version": "0.1.78",
   "peerDependencies": {
     "@angular/common": "17.3.11",
     "@angular/core": "17.3.11",

package/esm2022/lib/jquery.service.mjs

@@ -1,35 +0,0 @@
-import { Injectable } from '@angular/core';
-import * as i0 from "@angular/core";
-export class JQueryService {
-    constructor() {
-        this.loadPromise = null;
-    }
-    ensure() {
-        if (!this.loadPromise) {
-            this.loadPromise = import('jquery')
-                .then((mod) => {
-                const $ = (mod.default ?? mod);
-                // Only assign if not already set
-                if (!window.$) {
-                    window.$ = $;
-                }
-                if (!window.jQuery) {
-                    window.jQuery = $;
-                }
-                return $;
-            })
-                .catch(err => {
-                console.error('Failed to load jQuery:', err);
-                throw err;
-            });
-        }
-        return this.loadPromise;
-    }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.11", ngImport: i0, type: JQueryService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
-    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.11", ngImport: i0, type: JQueryService, providedIn: 'root' }); }
-}
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.11", ngImport: i0, type: JQueryService, decorators: [{
-            type: Injectable,
-            args: [{ providedIn: 'root' }]
-        }] });
-//# sourceMappingURL=data:application/json;base64,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

package/lib/jquery.service.d.ts

@@ -1,14 +0,0 @@
-/// <reference types="jquery" />
-import * as i0 from "@angular/core";
-declare global {
-    interface Window {
-        $: any;
-        jQuery: JQueryStatic;
-    }
-}
-export declare class JQueryService {
-    private loadPromise;
-    ensure(): Promise<JQueryStatic>;
-    static ɵfac: i0.ɵɵFactoryDeclaration<JQueryService, never>;
-    static ɵprov: i0.ɵɵInjectableDeclaration<JQueryService>;
-}