@react-foundry/fastify-consent-cookies 0.1.9 → 0.2.1

package/dist/common.js

@@ -1,2 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};

package/dist/index.js

@@ -1,12 +1,6 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fastifyConsentCookies = exports.defaultSecret = void 0;
-const cookie_1 = __importDefault(require("cookie"));
-const cryptr_1 = __importDefault(require("cryptr"));
-const fastify_plugin_1 = __importDefault(require("fastify-plugin"));
+import cookie from 'cookie';
+import Cryptr from 'cryptr';
+import fp from 'fastify-plugin';
 const consentCookie = {
     name: 'consent',
     description: 'A store of the cookies that you have consented to.',
@@ -26,12 +20,12 @@ const decodeClear = (v, req) => {
     }
 };
 const joinSet = (v, s) => Array.from(v).join(s);
-exports.defaultSecret = 'changeme';
-const fastifyConsentCookiesPlugin = async (fastify, { cookies: _cookies, secret = exports.defaultSecret, ...defaults }) => {
-    if (secret === exports.defaultSecret) {
+export const defaultSecret = 'changeme';
+const fastifyConsentCookiesPlugin = async (fastify, { cookies: _cookies, secret = defaultSecret, ...defaults }) => {
+    if (secret === defaultSecret) {
         fastify.log.warn('Cookie secret has not been set; cookies could be decrypted!');
     }
-    const cryptr = new cryptr_1.default(secret, { encoding: 'base64' });
+    const cryptr = new Cryptr(secret, { encoding: 'base64' });
     const encodeSecure = (v) => cryptr.encrypt(encodeClear(v));
     const decodeSecure = (v, req) => {
         try {
@@ -52,7 +46,7 @@ const fastifyConsentCookiesPlugin = async (fastify, { cookies: _cookies, secret
     fastify.decorateReply('setCookie');
     fastify.decorateReply('setCookieConsent');
     fastify.addHook('preHandler', async (req, reply) => {
-        const cookieData = cookie_1.default.parse(req.headers.cookie || '');
+        const cookieData = cookie.parse(req.headers.cookie || '');
         const _consent = cookieData[consentCookie.name];
         const consent = _consent || '';
         const active = (cookies
@@ -99,7 +93,7 @@ const fastifyConsentCookiesPlugin = async (fastify, { cookies: _cookies, secret
                     const overrun = size - maxSize;
                     req.log.warn(`Attempting to set cookie, '${name}', which is ${overrun} bytes larger than allowed (4kiB) and likely to be rejected`);
                 }
-                this.header('Set-Cookie', cookie_1.default.serialize(name, content, {
+                this.header('Set-Cookie', cookie.serialize(name, content, {
                     path: '/',
                     domain: undefined,
                     sameSite: 'strict',
@@ -121,8 +115,8 @@ const fastifyConsentCookiesPlugin = async (fastify, { cookies: _cookies, secret
         reply.setCookieConsent = setCookieConsent;
     });
 };
-exports.fastifyConsentCookies = (0, fastify_plugin_1.default)(fastifyConsentCookiesPlugin, {
+export const fastifyConsentCookies = fp(fastifyConsentCookiesPlugin, {
     fastify: '5.x',
     name: 'consent-cookies',
 });
-exports.default = exports.fastifyConsentCookies;
+export default fastifyConsentCookies;

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@react-foundry/fastify-consent-cookies",
-  "version": "0.1.9",
+  "version": "0.2.1",
   "description": "Fastify plugin to parse and set cookies only with user consent.",
+  "type": "module",
   "main": "dist/index.js",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.mjs",
-      "require": "./dist/index.js",
-      "default": "./dist/index.mjs"
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
     }
   },
   "files": [
@@ -25,7 +25,7 @@
     "jest-environment-jsdom": "30.3.0",
     "ts-jest": "29.4.9",
     "typescript": "5.9.3",
-    "@react-foundry/types-helpers": "0.1.9"
+    "@react-foundry/types-helpers": "0.2.1"
   },
   "dependencies": {
     "cookie": "^1.1.1",
@@ -34,11 +34,9 @@
   },
   "scripts": {
     "test": "NODE_OPTIONS=--experimental-vm-modules jest",
-    "build": "npm run build:esm && npm run build:cjs",
-    "build:esm": "tsc -m es2022 && find dist -name '*.js' -exec sh -c 'mv \"$0\" \"${0%.js}.mjs\"' {} \\;",
-    "build:cjs": "tsc",
+    "build": "tsc",
     "clean": "rm -rf dist tsconfig.tsbuildinfo"
   },
-  "module": "dist/index.mjs",
+  "module": "dist/index.js",
   "typings": "dist/index.d.ts"
 }

package/dist/common.mjs

@@ -1 +0,0 @@
-export {};

package/dist/index.mjs

@@ -1,122 +0,0 @@
-import cookie from 'cookie';
-import Cryptr from 'cryptr';
-import fp from 'fastify-plugin';
-const consentCookie = {
-    name: 'consent',
-    description: 'A store of the cookies that you have consented to.',
-    httpOnly: false,
-    sameSite: 'lax'
-};
-const id = (v) => v;
-const encodeClear = (v) => JSON.stringify(v);
-const decodeClear = (v, req) => {
-    try {
-        return JSON.parse(v);
-    }
-    catch (e) {
-        const log = (req?.log || console);
-        log.warn('Unable to parse cookie data as JSON');
-        return undefined;
-    }
-};
-const joinSet = (v, s) => Array.from(v).join(s);
-export const defaultSecret = 'changeme';
-const fastifyConsentCookiesPlugin = async (fastify, { cookies: _cookies, secret = defaultSecret, ...defaults }) => {
-    if (secret === defaultSecret) {
-        fastify.log.warn('Cookie secret has not been set; cookies could be decrypted!');
-    }
-    const cryptr = new Cryptr(secret, { encoding: 'base64' });
-    const encodeSecure = (v) => cryptr.encrypt(encodeClear(v));
-    const decodeSecure = (v, req) => {
-        try {
-            return decodeClear(cryptr.decrypt(v), req);
-        }
-        catch (e) {
-            const log = (req || fastify).log;
-            log.warn('Unable to decrypt cookie data');
-            return undefined;
-        }
-    };
-    const cookies = ([
-        consentCookie,
-        ..._cookies
-    ]).filter(id);
-    fastify.decorateRequest('cookiesMeta');
-    fastify.decorateRequest('cookies');
-    fastify.decorateReply('setCookie');
-    fastify.decorateReply('setCookieConsent');
-    fastify.addHook('preHandler', async (req, reply) => {
-        const cookieData = cookie.parse(req.headers.cookie || '');
-        const _consent = cookieData[consentCookie.name];
-        const consent = _consent || '';
-        const active = (cookies
-            .filter(e => e.group === undefined || consent.includes(e.name))
-            .reduce((acc, { name, ...cur }) => ({
-            ...acc,
-            [name]: cur
-        }), {}));
-        const decryptedCookies = (Object.keys(cookieData)
-            .filter(e => active[e])
-            .reduce((acc, cur) => ({
-            ...acc,
-            [cur]: (active[cur].httpOnly === false
-                ? decodeClear(cookieData[cur])
-                : decodeSecure(cookieData[cur]))
-        }), {}));
-        const foundCookieNames = new Set(Object.keys(cookieData));
-        const activeNames = new Set(Object.keys(active));
-        const cookieNames = new Set(Object.keys(decryptedCookies));
-        const rejected = foundCookieNames.difference(cookieNames);
-        req.log.debug(`${foundCookieNames.size} cookies found on request; ${joinSet(foundCookieNames, ', ')}`);
-        req.log.debug(`${activeNames.size} cookies are active; ${joinSet(activeNames, ', ')}`);
-        req.log.debug(`${cookieNames.size} cookies are available; ${joinSet(cookieNames, ', ')}`);
-        if (rejected.size) {
-            req.log.warn(`${rejected.size} cookies were rejected; ${joinSet(rejected, ', ')}`);
-        }
-        req.cookiesMeta = cookies.map(({ name, description, group }) => ({
-            name,
-            description,
-            group,
-            consent: consent.includes(name)
-        }));
-        req.cookies = decryptedCookies;
-        const setCookie = function (name, value, options) {
-            if (active[name]) {
-                const { description, group, httpOnly: _httpOnly, ...declaration } = active[name];
-                const httpOnly = _httpOnly !== false;
-                const content = (!httpOnly
-                    ? encodeClear(value)
-                    : encodeSecure(value));
-                const size = content.length;
-                const maxSize = 4096;
-                if (size > maxSize) {
-                    const overrun = size - maxSize;
-                    req.log.warn(`Attempting to set cookie, '${name}', which is ${overrun} bytes larger than allowed (4kiB) and likely to be rejected`);
-                }
-                this.header('Set-Cookie', cookie.serialize(name, content, {
-                    path: '/',
-                    domain: undefined,
-                    sameSite: 'strict',
-                    secure: true,
-                    ...defaults,
-                    ...declaration,
-                    ...options,
-                    httpOnly
-                }));
-            }
-            else {
-                throw new Error(`No consent for cookie, "${name}".`);
-            }
-        };
-        const setCookieConsent = function (value) {
-            this.setCookie(consentCookie.name, value);
-        };
-        reply.setCookie = setCookie;
-        reply.setCookieConsent = setCookieConsent;
-    });
-};
-export const fastifyConsentCookies = fp(fastifyConsentCookiesPlugin, {
-    fastify: '5.x',
-    name: 'consent-cookies',
-});
-export default fastifyConsentCookies;