@revealui/core 0.2.1 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api/compression.d.ts.map +1 -1
- package/dist/api/payload-optimization.d.ts.map +1 -1
- package/dist/api/rate-limit.d.ts +29 -28
- package/dist/api/rate-limit.d.ts.map +1 -1
- package/dist/api/rate-limit.js +63 -3
- package/dist/api/response-cache.d.ts.map +1 -1
- package/dist/api/response-cache.js +1 -1
- package/dist/api/rest.d.ts.map +1 -1
- package/dist/api/rest.js +3 -2
- package/dist/auth/access.d.ts.map +1 -1
- package/dist/auth/index.d.ts.map +1 -1
- package/dist/cache/query-cache.d.ts +12 -10
- package/dist/cache/query-cache.d.ts.map +1 -1
- package/dist/cache/query-cache.js +38 -42
- package/dist/caching/index.d.ts +6 -0
- package/dist/caching/index.d.ts.map +1 -0
- package/dist/caching/index.js +5 -0
- package/dist/client/admin/RichText.d.ts +1 -1
- package/dist/client/admin/RichText.d.ts.map +1 -1
- package/dist/client/admin/components/AdminDashboard.d.ts.map +1 -1
- package/dist/client/admin/components/AdminDashboard.js +195 -205
- package/dist/client/admin/components/CollectionList.d.ts.map +1 -1
- package/dist/client/admin/components/DocumentForm.d.ts.map +1 -1
- package/dist/client/admin/components/DocumentForm.js +130 -6
- package/dist/client/admin/components/GlobalForm.d.ts.map +1 -1
- package/dist/client/admin/context/ServerFunctionContext.d.ts +8 -0
- package/dist/client/admin/context/ServerFunctionContext.d.ts.map +1 -0
- package/dist/client/admin/context/ServerFunctionContext.js +15 -0
- package/dist/client/admin/i18n/en.d.ts.map +1 -1
- package/dist/client/admin/index.d.ts +1 -0
- package/dist/client/admin/index.d.ts.map +1 -1
- package/dist/client/admin/index.js +1 -0
- package/dist/client/admin/layout.d.ts +1 -1
- package/dist/client/admin/layout.d.ts.map +1 -1
- package/dist/client/admin/layout.js +3 -2
- package/dist/client/admin/page.d.ts.map +1 -1
- package/dist/client/admin/utils/apiClient.d.ts.map +1 -1
- package/dist/client/admin/utils/apiClient.js +0 -4
- package/dist/client/admin/utils/index.d.ts +0 -1
- package/dist/client/admin/utils/index.d.ts.map +1 -1
- package/dist/client/admin/utils/index.js +0 -1
- package/dist/client/admin/utils/serializeConfig.d.ts.map +1 -1
- package/dist/client/hooks.d.ts.map +1 -1
- package/dist/client/index.d.ts.map +1 -1
- package/dist/client/richtext/RichTextEditor.d.ts.map +1 -1
- package/dist/client/richtext/components/ImageNodeComponent.d.ts.map +1 -1
- package/dist/client/richtext/components/ImageNodeComponent.js +0 -1
- package/dist/client/richtext/components/ImageUploadButton.d.ts +2 -0
- package/dist/client/richtext/components/ImageUploadButton.d.ts.map +1 -1
- package/dist/client/richtext/components/ImageUploadButton.js +30 -15
- package/dist/client/richtext/index.d.ts.map +1 -1
- package/dist/client/richtext/nodes/DecoratorBlockNode.d.ts.map +1 -1
- package/dist/client/richtext/nodes/ImageNode.d.ts.map +1 -1
- package/dist/client/richtext/plugins/CollaborationPlugin.d.ts.map +1 -1
- package/dist/client/richtext/plugins/CursorsOverlayPlugin.d.ts.map +1 -1
- package/dist/client/richtext/plugins/FloatingToolbarPlugin.d.ts.map +1 -1
- package/dist/client/richtext/plugins/FloatingToolbarPlugin.js +1 -3
- package/dist/client/richtext/plugins/ImagePlugin.d.ts.map +1 -1
- package/dist/client/richtext/plugins/ToolbarPlugin.d.ts.map +1 -1
- package/dist/client/ui/index.d.ts.map +1 -1
- package/dist/client/ui/index.js +1 -1
- package/dist/collections/CollectionOperations.d.ts +7 -7
- package/dist/collections/CollectionOperations.d.ts.map +1 -1
- package/dist/collections/CollectionOperations.js +15 -1
- package/dist/collections/hooks.d.ts.map +1 -1
- package/dist/collections/index.d.ts.map +1 -1
- package/dist/collections/operations/create.d.ts +4 -5
- package/dist/collections/operations/create.d.ts.map +1 -1
- package/dist/collections/operations/create.js +35 -6
- package/dist/collections/operations/createMany.d.ts +12 -0
- package/dist/collections/operations/createMany.d.ts.map +1 -0
- package/dist/collections/operations/createMany.js +43 -0
- package/dist/collections/operations/delete.d.ts +1 -1
- package/dist/collections/operations/delete.d.ts.map +1 -1
- package/dist/collections/operations/delete.js +31 -2
- package/dist/collections/operations/deleteMany.d.ts +11 -0
- package/dist/collections/operations/deleteMany.d.ts.map +1 -0
- package/dist/collections/operations/deleteMany.js +50 -0
- package/dist/collections/operations/fieldHooks.d.ts +2 -2
- package/dist/collections/operations/fieldHooks.d.ts.map +1 -1
- package/dist/collections/operations/fieldHooks.js +4 -4
- package/dist/collections/operations/find.d.ts +2 -4
- package/dist/collections/operations/find.d.ts.map +1 -1
- package/dist/collections/operations/find.js +115 -8
- package/dist/collections/operations/findById.d.ts +3 -4
- package/dist/collections/operations/findById.d.ts.map +1 -1
- package/dist/collections/operations/findById.js +53 -1
- package/dist/collections/operations/sqlAdapter.d.ts +23 -0
- package/dist/collections/operations/sqlAdapter.d.ts.map +1 -0
- package/dist/collections/operations/sqlAdapter.js +76 -0
- package/dist/collections/operations/update.d.ts +3 -5
- package/dist/collections/operations/update.d.ts.map +1 -1
- package/dist/collections/operations/update.js +103 -11
- package/dist/collections/operations/updateMany.d.ts +11 -0
- package/dist/collections/operations/updateMany.d.ts.map +1 -0
- package/dist/collections/operations/updateMany.js +52 -0
- package/dist/collections/registry.d.ts +12 -0
- package/dist/collections/registry.d.ts.map +1 -0
- package/dist/collections/registry.js +38 -0
- package/dist/config/index.d.ts.map +1 -1
- package/dist/config/runtime.d.ts.map +1 -1
- package/dist/config/utils.d.ts +0 -10
- package/dist/config/utils.d.ts.map +1 -1
- package/dist/config/utils.js +0 -13
- package/dist/database/index.d.ts +3 -0
- package/dist/database/index.d.ts.map +1 -1
- package/dist/database/index.js +1 -5
- package/dist/database/safe-parse.d.ts.map +1 -1
- package/dist/database/ssl-config.d.ts.map +1 -1
- package/dist/database/type-adapter.d.ts.map +1 -1
- package/dist/database/universal-postgres.d.ts.map +1 -1
- package/dist/database/universal-postgres.js +6 -1
- package/dist/dataloader.d.ts.map +1 -1
- package/dist/error-handling/error-boundary.d.ts.map +1 -1
- package/dist/error-handling/error-reporter.d.ts +1 -1
- package/dist/error-handling/error-reporter.d.ts.map +1 -1
- package/dist/error-handling/error-reporter.js +19 -5
- package/dist/error-handling/fallback-components.d.ts.map +1 -1
- package/dist/error-handling/fallback-components.js +1 -1
- package/dist/error-handling/index.d.ts +2 -4
- package/dist/error-handling/index.d.ts.map +1 -1
- package/dist/error-handling/index.js +1 -4
- package/dist/factories/builders.d.ts.map +1 -1
- package/dist/factories/index.d.ts.map +1 -1
- package/dist/features.d.ts +7 -7
- package/dist/features.d.ts.map +1 -1
- package/dist/features.js +2 -2
- package/dist/fieldTraversal.d.ts.map +1 -1
- package/dist/fields/config/types.d.ts.map +1 -1
- package/dist/fields/getDefaultValue.d.ts.map +1 -1
- package/dist/fields/getFieldPaths.d.ts.map +1 -1
- package/dist/fields/hooks/afterRead/index.d.ts.map +1 -1
- package/dist/fields/hooks/afterRead/promise.d.ts.map +1 -1
- package/dist/fields/hooks/afterRead/traverseFields.d.ts.map +1 -1
- package/dist/generated/types/cms.d.ts.map +1 -1
- package/dist/generated/types/cms.js +0 -1
- package/dist/generated/types/neon.d.ts.map +1 -1
- package/dist/generated/types/neon.js +4 -2
- package/dist/globals/GlobalOperations.d.ts.map +1 -1
- package/dist/globals/GlobalOperations.js +16 -4
- package/dist/globals/index.d.ts.map +1 -1
- package/dist/index.d.ts +15 -4
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +15 -5
- package/dist/instance/RevealUIInstance.d.ts.map +1 -1
- package/dist/instance/RevealUIInstance.js +6 -19
- package/dist/instance/index.d.ts.map +1 -1
- package/dist/instance/logger.d.ts.map +1 -1
- package/dist/instance/methods/create.d.ts.map +1 -1
- package/dist/instance/methods/create.js +0 -3
- package/dist/instance/methods/delete.d.ts.map +1 -1
- package/dist/instance/methods/delete.js +1 -4
- package/dist/instance/methods/find.d.ts.map +1 -1
- package/dist/instance/methods/find.js +0 -3
- package/dist/instance/methods/findById.d.ts.map +1 -1
- package/dist/instance/methods/findById.js +0 -3
- package/dist/instance/methods/hooks.d.ts.map +1 -1
- package/dist/instance/methods/update.d.ts.map +1 -1
- package/dist/instance/methods/update.js +0 -3
- package/dist/jobs/index.d.ts +16 -0
- package/dist/jobs/index.d.ts.map +1 -0
- package/dist/jobs/index.js +14 -0
- package/dist/jobs/queue.d.ts +57 -0
- package/dist/jobs/queue.d.ts.map +1 -0
- package/dist/jobs/queue.js +134 -0
- package/dist/license-encryption.d.ts +21 -0
- package/dist/license-encryption.d.ts.map +1 -0
- package/dist/license-encryption.js +74 -0
- package/dist/license.d.ts +26 -3
- package/dist/license.d.ts.map +1 -1
- package/dist/license.js +87 -7
- package/dist/monitoring/alerts.d.ts +4 -4
- package/dist/monitoring/alerts.d.ts.map +1 -1
- package/dist/monitoring/cleanup-manager.d.ts.map +1 -1
- package/dist/monitoring/health-monitor.d.ts.map +1 -1
- package/dist/monitoring/index.d.ts.map +1 -1
- package/dist/monitoring/process-registry.d.ts.map +1 -1
- package/dist/monitoring/query-monitor.d.ts.map +1 -1
- package/dist/monitoring/types.d.ts.map +1 -1
- package/dist/monitoring/zombie-detector.d.ts.map +1 -1
- package/dist/monitoring/zombie-detector.js +5 -0
- package/dist/nextjs/index.d.ts.map +1 -1
- package/dist/nextjs/utilities.d.ts.map +1 -1
- package/dist/nextjs/withRevealUI.d.ts.map +1 -1
- package/dist/observability/alerts.d.ts.map +1 -1
- package/dist/observability/alerts.js +1 -2
- package/dist/observability/health-check.d.ts +0 -4
- package/dist/observability/health-check.d.ts.map +1 -1
- package/dist/observability/health-check.js +0 -36
- package/dist/observability/index.d.ts.map +1 -1
- package/dist/observability/logger.d.ts.map +1 -1
- package/dist/observability/logger.js +1 -1
- package/dist/observability/metrics.d.ts.map +1 -1
- package/dist/observability/tracing.d.ts.map +1 -1
- package/dist/observability/tracing.js +0 -1
- package/dist/plugins/form-builder.d.ts.map +1 -1
- package/dist/plugins/index.d.ts.map +1 -1
- package/dist/plugins/nested-docs.d.ts +4 -0
- package/dist/plugins/nested-docs.d.ts.map +1 -1
- package/dist/plugins/nested-docs.js +50 -6
- package/dist/plugins/redirects.d.ts.map +1 -1
- package/dist/queries/index.d.ts.map +1 -1
- package/dist/queries/queryBuilder.d.ts.map +1 -1
- package/dist/queries/queryBuilder.js +13 -5
- package/dist/relationships/analyzer.d.ts.map +1 -1
- package/dist/relationships/analyzer.js +8 -0
- package/dist/relationships/index.d.ts.map +1 -1
- package/dist/relationships/populate-core.d.ts +57 -0
- package/dist/relationships/populate-core.d.ts.map +1 -0
- package/dist/relationships/populate-core.js +116 -0
- package/dist/relationships/populate-helpers.d.ts +5 -51
- package/dist/relationships/populate-helpers.d.ts.map +1 -1
- package/dist/relationships/populate-helpers.js +4 -109
- package/dist/relationships/population.d.ts +1 -9
- package/dist/relationships/population.d.ts.map +1 -1
- package/dist/relationships/population.js +8 -3
- package/dist/revealui.d.ts.map +1 -1
- package/dist/richtext/exports/client/rcc.d.ts.map +1 -1
- package/dist/richtext/exports/client/rcc.js +1 -1
- package/dist/richtext/exports/server/rsc.d.ts +17 -0
- package/dist/richtext/exports/server/rsc.d.ts.map +1 -1
- package/dist/richtext/exports/server/rsc.js +61 -5
- package/dist/richtext/index.d.ts.map +1 -1
- package/dist/richtext/lexical.d.ts.map +1 -1
- package/dist/security/index.d.ts +3 -16
- package/dist/security/index.d.ts.map +1 -1
- package/dist/security/index.js +3 -16
- package/dist/server/index.d.ts.map +1 -1
- package/dist/server/renderPage.d.ts.map +1 -1
- package/dist/storage/index.d.ts +1 -0
- package/dist/storage/index.d.ts.map +1 -1
- package/dist/storage/index.js +2 -4
- package/dist/storage/vercel-blob.d.ts.map +1 -1
- package/dist/storage/vercel-blob.js +3 -0
- package/dist/translations/index.d.ts.map +1 -1
- package/dist/types/access.d.ts.map +1 -1
- package/dist/types/api.d.ts.map +1 -1
- package/dist/types/cms.d.ts.map +1 -1
- package/dist/types/config.d.ts.map +1 -1
- package/dist/types/core.d.ts +1 -1
- package/dist/types/core.d.ts.map +1 -1
- package/dist/types/extensions.d.ts.map +1 -1
- package/dist/types/frontend.d.ts.map +1 -1
- package/dist/types/generated.d.ts.map +1 -1
- package/dist/types/hooks.d.ts.map +1 -1
- package/dist/types/index.d.ts +1 -1
- package/dist/types/index.d.ts.map +1 -1
- package/dist/types/interfaces/app.d.ts.map +1 -1
- package/dist/types/jobs.d.ts.map +1 -1
- package/dist/types/legacy.d.ts.map +1 -1
- package/dist/types/plugins.d.ts.map +1 -1
- package/dist/types/query.d.ts.map +1 -1
- package/dist/types/request.d.ts.map +1 -1
- package/dist/types/richtext.d.ts.map +1 -1
- package/dist/types/runtime.d.ts +60 -1
- package/dist/types/runtime.d.ts.map +1 -1
- package/dist/types/schema.d.ts.map +1 -1
- package/dist/types/user.d.ts.map +1 -1
- package/dist/utils/access-conversion.d.ts.map +1 -1
- package/dist/utils/api-wrapper.d.ts.map +1 -1
- package/dist/utils/api-wrapper.js +1 -1
- package/dist/utils/block-conversion.d.ts.map +1 -1
- package/dist/utils/cache.d.ts.map +1 -1
- package/dist/utils/deep-clone.js +0 -1
- package/dist/utils/error-responses.d.ts.map +1 -1
- package/dist/utils/error-responses.js +2 -3
- package/dist/utils/errors.d.ts +36 -0
- package/dist/utils/errors.d.ts.map +1 -1
- package/dist/utils/errors.js +103 -0
- package/dist/utils/field-conversion.d.ts +1 -1
- package/dist/utils/field-conversion.d.ts.map +1 -1
- package/dist/utils/flattenResult.d.ts.map +1 -1
- package/dist/utils/flattenResult.js +0 -1
- package/dist/utils/getBlockSelect.d.ts.map +1 -1
- package/dist/utils/getSelectMode.d.ts.map +1 -1
- package/dist/utils/isValidID.d.ts.map +1 -1
- package/dist/utils/json-parsing.d.ts.map +1 -1
- package/dist/utils/logger-client.d.ts.map +1 -1
- package/dist/utils/logger-server.d.ts.map +1 -1
- package/dist/utils/logger.d.ts.map +1 -1
- package/dist/utils/request-context.d.ts.map +1 -1
- package/dist/utils/stripUnselectedFields.d.ts.map +1 -1
- package/dist/utils/type-guards.d.ts.map +1 -1
- package/package.json +58 -26
- package/dist/caching/app-cache.d.ts +0 -237
- package/dist/caching/app-cache.d.ts.map +0 -1
- package/dist/caching/app-cache.js +0 -430
- package/dist/caching/cdn-config.d.ts +0 -155
- package/dist/caching/cdn-config.d.ts.map +0 -1
- package/dist/caching/cdn-config.js +0 -411
- package/dist/caching/edge-cache.d.ts +0 -177
- package/dist/caching/edge-cache.d.ts.map +0 -1
- package/dist/caching/edge-cache.js +0 -385
- package/dist/caching/service-worker.d.ts +0 -154
- package/dist/caching/service-worker.d.ts.map +0 -1
- package/dist/caching/service-worker.js +0 -437
- package/dist/client/admin/utils/auth.d.ts +0 -23
- package/dist/client/admin/utils/auth.d.ts.map +0 -1
- package/dist/client/admin/utils/auth.js +0 -52
- package/dist/client/http/client.d.ts +0 -15
- package/dist/client/http/client.d.ts.map +0 -1
- package/dist/client/http/client.js +0 -49
- package/dist/client/http/fetchBanner.d.ts +0 -18
- package/dist/client/http/fetchBanner.d.ts.map +0 -1
- package/dist/client/http/fetchBanner.js +0 -44
- package/dist/client/http/fetchCard.d.ts +0 -18
- package/dist/client/http/fetchCard.d.ts.map +0 -1
- package/dist/client/http/fetchCard.js +0 -46
- package/dist/client/http/fetchEvents.d.ts +0 -18
- package/dist/client/http/fetchEvents.d.ts.map +0 -1
- package/dist/client/http/fetchEvents.js +0 -44
- package/dist/client/http/fetchHero.d.ts +0 -17
- package/dist/client/http/fetchHero.d.ts.map +0 -1
- package/dist/client/http/fetchHero.js +0 -55
- package/dist/client/http/fetchMainInfos.d.ts +0 -17
- package/dist/client/http/fetchMainInfos.d.ts.map +0 -1
- package/dist/client/http/fetchMainInfos.js +0 -44
- package/dist/client/http/fetchVideos.d.ts +0 -13
- package/dist/client/http/fetchVideos.d.ts.map +0 -1
- package/dist/client/http/fetchVideos.js +0 -36
- package/dist/client/http/index.d.ts +0 -19
- package/dist/client/http/index.d.ts.map +0 -1
- package/dist/client/http/index.js +0 -11
- package/dist/error-handling/circuit-breaker.d.ts +0 -262
- package/dist/error-handling/circuit-breaker.d.ts.map +0 -1
- package/dist/error-handling/circuit-breaker.js +0 -542
- package/dist/error-handling/retry.d.ts +0 -194
- package/dist/error-handling/retry.d.ts.map +0 -1
- package/dist/error-handling/retry.js +0 -450
- package/dist/errors/index.d.ts +0 -23
- package/dist/errors/index.d.ts.map +0 -1
- package/dist/errors/index.js +0 -40
- package/dist/generated/agents/index.d.ts +0 -8
- package/dist/generated/agents/index.d.ts.map +0 -1
- package/dist/generated/agents/index.js +0 -7
- package/dist/generated/components/index.d.ts +0 -8
- package/dist/generated/components/index.d.ts.map +0 -1
- package/dist/generated/components/index.js +0 -7
- package/dist/generated/functions/index.d.ts +0 -8
- package/dist/generated/functions/index.d.ts.map +0 -1
- package/dist/generated/functions/index.js +0 -7
- package/dist/generated/hooks/index.d.ts +0 -8
- package/dist/generated/hooks/index.d.ts.map +0 -1
- package/dist/generated/hooks/index.js +0 -7
- package/dist/generated/plans/index.d.ts +0 -8
- package/dist/generated/plans/index.d.ts.map +0 -1
- package/dist/generated/plans/index.js +0 -7
- package/dist/generated/prompts/index.d.ts +0 -8
- package/dist/generated/prompts/index.d.ts.map +0 -1
- package/dist/generated/prompts/index.js +0 -7
- package/dist/generated/tools/index.d.ts +0 -8
- package/dist/generated/tools/index.d.ts.map +0 -1
- package/dist/generated/tools/index.js +0 -7
- package/dist/generated/types/supabase.d.ts +0 -193
- package/dist/generated/types/supabase.d.ts.map +0 -1
- package/dist/generated/types/supabase.js +0 -5
- package/dist/optimization/asset-optimizer.d.ts +0 -202
- package/dist/optimization/asset-optimizer.d.ts.map +0 -1
- package/dist/optimization/asset-optimizer.js +0 -312
- package/dist/optimization/build-optimizer.d.ts +0 -202
- package/dist/optimization/build-optimizer.d.ts.map +0 -1
- package/dist/optimization/build-optimizer.js +0 -271
- package/dist/optimization/bundle-analyzer.d.ts +0 -98
- package/dist/optimization/bundle-analyzer.d.ts.map +0 -1
- package/dist/optimization/bundle-analyzer.js +0 -322
- package/dist/optimization/code-splitting.d.ts +0 -131
- package/dist/optimization/code-splitting.d.ts.map +0 -1
- package/dist/optimization/code-splitting.js +0 -277
- package/dist/plugin/index.d.ts +0 -12
- package/dist/plugin/index.d.ts.map +0 -1
- package/dist/plugin/index.js +0 -4
- package/dist/security/audit.d.ts +0 -188
- package/dist/security/audit.d.ts.map +0 -1
- package/dist/security/audit.js +0 -431
- package/dist/security/auth.d.ts +0 -241
- package/dist/security/auth.d.ts.map +0 -1
- package/dist/security/auth.js +0 -476
- package/dist/security/authorization.d.ts +0 -235
- package/dist/security/authorization.d.ts.map +0 -1
- package/dist/security/authorization.js +0 -434
- package/dist/security/encryption.d.ts +0 -214
- package/dist/security/encryption.d.ts.map +0 -1
- package/dist/security/encryption.js +0 -517
- package/dist/security/gdpr.d.ts +0 -300
- package/dist/security/gdpr.d.ts.map +0 -1
- package/dist/security/gdpr.js +0 -465
- package/dist/security/headers.d.ts +0 -182
- package/dist/security/headers.d.ts.map +0 -1
- package/dist/security/headers.js +0 -402
- package/dist/utils/jwt-validation.d.ts +0 -14
- package/dist/utils/jwt-validation.d.ts.map +0 -1
- package/dist/utils/jwt-validation.js +0 -36
- package/dist/utils/request-headers.d.ts +0 -15
- package/dist/utils/request-headers.d.ts.map +0 -1
- package/dist/utils/request-headers.js +0 -31
package/dist/security/audit.js
DELETED
|
@@ -1,431 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Audit Logging System
|
|
3
|
-
*
|
|
4
|
-
* Track security-relevant events and user actions for compliance
|
|
5
|
-
*/
|
|
6
|
-
/**
|
|
7
|
-
* Audit logging system
|
|
8
|
-
*/
|
|
9
|
-
export class AuditSystem {
|
|
10
|
-
storage;
|
|
11
|
-
filters = [];
|
|
12
|
-
constructor(storage) {
|
|
13
|
-
this.storage = storage;
|
|
14
|
-
}
|
|
15
|
-
/**
|
|
16
|
-
* Log audit event
|
|
17
|
-
*/
|
|
18
|
-
async log(event) {
|
|
19
|
-
const fullEvent = {
|
|
20
|
-
...event,
|
|
21
|
-
id: crypto.randomUUID(),
|
|
22
|
-
timestamp: new Date().toISOString(),
|
|
23
|
-
};
|
|
24
|
-
// Apply filters
|
|
25
|
-
const shouldLog = this.filters.every((filter) => filter(fullEvent));
|
|
26
|
-
if (!shouldLog) {
|
|
27
|
-
return;
|
|
28
|
-
}
|
|
29
|
-
await this.storage.write(fullEvent);
|
|
30
|
-
}
|
|
31
|
-
/**
|
|
32
|
-
* Log authentication event
|
|
33
|
-
*/
|
|
34
|
-
async logAuth(type, actorId, result, metadata) {
|
|
35
|
-
await this.log({
|
|
36
|
-
type,
|
|
37
|
-
severity: result === 'failure' ? 'medium' : 'low',
|
|
38
|
-
actor: {
|
|
39
|
-
id: actorId,
|
|
40
|
-
type: 'user',
|
|
41
|
-
},
|
|
42
|
-
action: type.replace('auth.', ''),
|
|
43
|
-
result,
|
|
44
|
-
metadata,
|
|
45
|
-
});
|
|
46
|
-
}
|
|
47
|
-
/**
|
|
48
|
-
* Log data access event
|
|
49
|
-
*/
|
|
50
|
-
async logDataAccess(action, actorId, resourceType, resourceId, result, changes) {
|
|
51
|
-
await this.log({
|
|
52
|
-
type: `data.${action}`,
|
|
53
|
-
severity: action === 'delete' ? 'high' : 'medium',
|
|
54
|
-
actor: {
|
|
55
|
-
id: actorId,
|
|
56
|
-
type: 'user',
|
|
57
|
-
},
|
|
58
|
-
resource: {
|
|
59
|
-
type: resourceType,
|
|
60
|
-
id: resourceId,
|
|
61
|
-
},
|
|
62
|
-
action,
|
|
63
|
-
result,
|
|
64
|
-
changes,
|
|
65
|
-
});
|
|
66
|
-
}
|
|
67
|
-
/**
|
|
68
|
-
* Log permission change
|
|
69
|
-
*/
|
|
70
|
-
async logPermissionChange(action, actorId, targetUserId, permission, result) {
|
|
71
|
-
await this.log({
|
|
72
|
-
type: `permission.${action}`,
|
|
73
|
-
severity: 'high',
|
|
74
|
-
actor: {
|
|
75
|
-
id: actorId,
|
|
76
|
-
type: 'user',
|
|
77
|
-
},
|
|
78
|
-
resource: {
|
|
79
|
-
type: 'user',
|
|
80
|
-
id: targetUserId,
|
|
81
|
-
},
|
|
82
|
-
action,
|
|
83
|
-
result,
|
|
84
|
-
metadata: {
|
|
85
|
-
permission,
|
|
86
|
-
},
|
|
87
|
-
});
|
|
88
|
-
}
|
|
89
|
-
/**
|
|
90
|
-
* Log security event
|
|
91
|
-
*/
|
|
92
|
-
async logSecurityEvent(type, severity, actorId, message, metadata) {
|
|
93
|
-
await this.log({
|
|
94
|
-
type: `security.${type}`,
|
|
95
|
-
severity,
|
|
96
|
-
actor: {
|
|
97
|
-
id: actorId,
|
|
98
|
-
type: 'user',
|
|
99
|
-
},
|
|
100
|
-
action: type,
|
|
101
|
-
result: 'failure',
|
|
102
|
-
message,
|
|
103
|
-
metadata,
|
|
104
|
-
});
|
|
105
|
-
}
|
|
106
|
-
/**
|
|
107
|
-
* Log GDPR event
|
|
108
|
-
*/
|
|
109
|
-
async logGDPREvent(type, actorId, result, metadata) {
|
|
110
|
-
await this.log({
|
|
111
|
-
type: `gdpr.${type}`,
|
|
112
|
-
severity: 'high',
|
|
113
|
-
actor: {
|
|
114
|
-
id: actorId,
|
|
115
|
-
type: 'user',
|
|
116
|
-
},
|
|
117
|
-
action: type,
|
|
118
|
-
result,
|
|
119
|
-
metadata,
|
|
120
|
-
});
|
|
121
|
-
}
|
|
122
|
-
/**
|
|
123
|
-
* Query audit logs
|
|
124
|
-
*/
|
|
125
|
-
async query(query) {
|
|
126
|
-
return this.storage.query(query);
|
|
127
|
-
}
|
|
128
|
-
/**
|
|
129
|
-
* Count audit logs
|
|
130
|
-
*/
|
|
131
|
-
async count(query) {
|
|
132
|
-
return this.storage.count(query);
|
|
133
|
-
}
|
|
134
|
-
/**
|
|
135
|
-
* Add filter
|
|
136
|
-
*/
|
|
137
|
-
addFilter(filter) {
|
|
138
|
-
this.filters.push(filter);
|
|
139
|
-
}
|
|
140
|
-
/**
|
|
141
|
-
* Remove filter
|
|
142
|
-
*/
|
|
143
|
-
removeFilter(filter) {
|
|
144
|
-
const index = this.filters.indexOf(filter);
|
|
145
|
-
if (index > -1) {
|
|
146
|
-
this.filters.splice(index, 1);
|
|
147
|
-
}
|
|
148
|
-
}
|
|
149
|
-
}
|
|
150
|
-
/**
|
|
151
|
-
* In-memory audit storage (for development)
|
|
152
|
-
*/
|
|
153
|
-
export class InMemoryAuditStorage {
|
|
154
|
-
events = [];
|
|
155
|
-
maxEvents;
|
|
156
|
-
constructor(maxEvents = 10000) {
|
|
157
|
-
this.maxEvents = maxEvents;
|
|
158
|
-
}
|
|
159
|
-
async write(event) {
|
|
160
|
-
this.events.push(event);
|
|
161
|
-
// Trim old events
|
|
162
|
-
if (this.events.length > this.maxEvents) {
|
|
163
|
-
this.events.shift();
|
|
164
|
-
}
|
|
165
|
-
}
|
|
166
|
-
async query(query) {
|
|
167
|
-
let results = [...this.events];
|
|
168
|
-
// Filter by type
|
|
169
|
-
if (query.types && query.types.length > 0) {
|
|
170
|
-
results = results.filter((e) => query.types?.includes(e.type));
|
|
171
|
-
}
|
|
172
|
-
// Filter by actor
|
|
173
|
-
if (query.actorId) {
|
|
174
|
-
results = results.filter((e) => e.actor.id === query.actorId);
|
|
175
|
-
}
|
|
176
|
-
// Filter by resource
|
|
177
|
-
if (query.resourceType) {
|
|
178
|
-
results = results.filter((e) => e.resource?.type === query.resourceType);
|
|
179
|
-
}
|
|
180
|
-
if (query.resourceId) {
|
|
181
|
-
results = results.filter((e) => e.resource?.id === query.resourceId);
|
|
182
|
-
}
|
|
183
|
-
// Filter by date range
|
|
184
|
-
if (query.startDate) {
|
|
185
|
-
results = results.filter((e) => new Date(e.timestamp) >= query.startDate);
|
|
186
|
-
}
|
|
187
|
-
if (query.endDate) {
|
|
188
|
-
results = results.filter((e) => new Date(e.timestamp) <= query.endDate);
|
|
189
|
-
}
|
|
190
|
-
// Filter by severity
|
|
191
|
-
if (query.severity && query.severity.length > 0) {
|
|
192
|
-
results = results.filter((e) => query.severity?.includes(e.severity));
|
|
193
|
-
}
|
|
194
|
-
// Filter by result
|
|
195
|
-
if (query.result && query.result.length > 0) {
|
|
196
|
-
results = results.filter((e) => query.result?.includes(e.result));
|
|
197
|
-
}
|
|
198
|
-
// Sort by timestamp (newest first)
|
|
199
|
-
results.sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
|
|
200
|
-
// Apply pagination
|
|
201
|
-
const offset = query.offset || 0;
|
|
202
|
-
const limit = query.limit || 100;
|
|
203
|
-
return results.slice(offset, offset + limit);
|
|
204
|
-
}
|
|
205
|
-
async count(query) {
|
|
206
|
-
const results = await this.query({ ...query, limit: undefined, offset: undefined });
|
|
207
|
-
return results.length;
|
|
208
|
-
}
|
|
209
|
-
/**
|
|
210
|
-
* Clear all events
|
|
211
|
-
*/
|
|
212
|
-
clear() {
|
|
213
|
-
this.events = [];
|
|
214
|
-
}
|
|
215
|
-
/**
|
|
216
|
-
* Get all events
|
|
217
|
-
*/
|
|
218
|
-
getAll() {
|
|
219
|
-
return [...this.events];
|
|
220
|
-
}
|
|
221
|
-
}
|
|
222
|
-
/**
|
|
223
|
-
* Audit trail decorator
|
|
224
|
-
*/
|
|
225
|
-
export function AuditTrail(type, action, options) {
|
|
226
|
-
return (_target, _propertyKey, descriptor) => {
|
|
227
|
-
const originalMethod = descriptor.value;
|
|
228
|
-
descriptor.value = async function (...args) {
|
|
229
|
-
const actorId = this.user?.id || 'system';
|
|
230
|
-
const before = options?.captureChanges ? args[0] : undefined;
|
|
231
|
-
let result = 'success';
|
|
232
|
-
let error;
|
|
233
|
-
try {
|
|
234
|
-
const returnValue = await originalMethod.apply(this, args);
|
|
235
|
-
// Log audit event
|
|
236
|
-
if (this.audit) {
|
|
237
|
-
await this.audit.log({
|
|
238
|
-
type,
|
|
239
|
-
severity: options?.severity || 'medium',
|
|
240
|
-
actor: {
|
|
241
|
-
id: actorId,
|
|
242
|
-
type: 'user',
|
|
243
|
-
},
|
|
244
|
-
resource: options?.resourceType
|
|
245
|
-
? {
|
|
246
|
-
type: options.resourceType,
|
|
247
|
-
id: args[0]?.id || 'unknown',
|
|
248
|
-
}
|
|
249
|
-
: undefined,
|
|
250
|
-
action,
|
|
251
|
-
result,
|
|
252
|
-
changes: options?.captureChanges
|
|
253
|
-
? {
|
|
254
|
-
before: before,
|
|
255
|
-
after: returnValue,
|
|
256
|
-
}
|
|
257
|
-
: undefined,
|
|
258
|
-
});
|
|
259
|
-
}
|
|
260
|
-
return returnValue;
|
|
261
|
-
}
|
|
262
|
-
catch (err) {
|
|
263
|
-
result = 'failure';
|
|
264
|
-
error = err;
|
|
265
|
-
// Log failure
|
|
266
|
-
if (this.audit) {
|
|
267
|
-
await this.audit.log({
|
|
268
|
-
type,
|
|
269
|
-
severity: 'high',
|
|
270
|
-
actor: {
|
|
271
|
-
id: actorId,
|
|
272
|
-
type: 'user',
|
|
273
|
-
},
|
|
274
|
-
resource: options?.resourceType
|
|
275
|
-
? {
|
|
276
|
-
type: options.resourceType,
|
|
277
|
-
id: args[0]?.id || 'unknown',
|
|
278
|
-
}
|
|
279
|
-
: undefined,
|
|
280
|
-
action,
|
|
281
|
-
result,
|
|
282
|
-
message: error.message,
|
|
283
|
-
});
|
|
284
|
-
}
|
|
285
|
-
throw error;
|
|
286
|
-
}
|
|
287
|
-
};
|
|
288
|
-
return descriptor;
|
|
289
|
-
};
|
|
290
|
-
}
|
|
291
|
-
/**
|
|
292
|
-
* Audit middleware
|
|
293
|
-
*/
|
|
294
|
-
export function createAuditMiddleware(audit, getUser) {
|
|
295
|
-
return async (request, next) => {
|
|
296
|
-
const user = getUser(request);
|
|
297
|
-
const startTime = Date.now();
|
|
298
|
-
try {
|
|
299
|
-
const response = await next();
|
|
300
|
-
// Log successful request
|
|
301
|
-
await audit.log({
|
|
302
|
-
type: 'data.read',
|
|
303
|
-
severity: 'low',
|
|
304
|
-
actor: {
|
|
305
|
-
id: user.id,
|
|
306
|
-
type: 'user',
|
|
307
|
-
ip: user.ip,
|
|
308
|
-
userAgent: user.userAgent,
|
|
309
|
-
},
|
|
310
|
-
action: request.method,
|
|
311
|
-
result: 'success',
|
|
312
|
-
metadata: {
|
|
313
|
-
path: request.url,
|
|
314
|
-
duration: Date.now() - startTime,
|
|
315
|
-
status: response.status,
|
|
316
|
-
},
|
|
317
|
-
});
|
|
318
|
-
return response;
|
|
319
|
-
}
|
|
320
|
-
catch (error) {
|
|
321
|
-
// Log failed request
|
|
322
|
-
await audit.log({
|
|
323
|
-
type: 'data.read',
|
|
324
|
-
severity: 'medium',
|
|
325
|
-
actor: {
|
|
326
|
-
id: user.id,
|
|
327
|
-
type: 'user',
|
|
328
|
-
ip: user.ip,
|
|
329
|
-
userAgent: user.userAgent,
|
|
330
|
-
},
|
|
331
|
-
action: request.method,
|
|
332
|
-
result: 'failure',
|
|
333
|
-
message: error instanceof Error ? error.message : 'Unknown error',
|
|
334
|
-
metadata: {
|
|
335
|
-
path: request.url,
|
|
336
|
-
duration: Date.now() - startTime,
|
|
337
|
-
},
|
|
338
|
-
});
|
|
339
|
-
throw error;
|
|
340
|
-
}
|
|
341
|
-
};
|
|
342
|
-
}
|
|
343
|
-
/**
|
|
344
|
-
* Audit report generator
|
|
345
|
-
*/
|
|
346
|
-
export class AuditReportGenerator {
|
|
347
|
-
audit;
|
|
348
|
-
constructor(audit) {
|
|
349
|
-
this.audit = audit;
|
|
350
|
-
}
|
|
351
|
-
/**
|
|
352
|
-
* Generate security report
|
|
353
|
-
*/
|
|
354
|
-
async generateSecurityReport(startDate, endDate) {
|
|
355
|
-
const allEvents = await this.audit.query({
|
|
356
|
-
startDate,
|
|
357
|
-
endDate,
|
|
358
|
-
});
|
|
359
|
-
const securityViolations = allEvents.filter((e) => e.type.startsWith('security.')).length;
|
|
360
|
-
const failedLogins = allEvents.filter((e) => e.type === 'auth.failed_login').length;
|
|
361
|
-
const permissionChanges = allEvents.filter((e) => e.type.startsWith('permission.')).length;
|
|
362
|
-
const dataExports = allEvents.filter((e) => e.type === 'data.export').length;
|
|
363
|
-
const criticalEvents = allEvents.filter((e) => e.severity === 'critical');
|
|
364
|
-
return {
|
|
365
|
-
totalEvents: allEvents.length,
|
|
366
|
-
securityViolations,
|
|
367
|
-
failedLogins,
|
|
368
|
-
permissionChanges,
|
|
369
|
-
dataExports,
|
|
370
|
-
criticalEvents,
|
|
371
|
-
};
|
|
372
|
-
}
|
|
373
|
-
/**
|
|
374
|
-
* Generate user activity report
|
|
375
|
-
*/
|
|
376
|
-
async generateUserActivityReport(userId, startDate, endDate) {
|
|
377
|
-
const events = await this.audit.query({
|
|
378
|
-
actorId: userId,
|
|
379
|
-
startDate,
|
|
380
|
-
endDate,
|
|
381
|
-
});
|
|
382
|
-
const actionsByType = events.reduce((acc, event) => {
|
|
383
|
-
acc[event.type] = (acc[event.type] || 0) + 1;
|
|
384
|
-
return acc;
|
|
385
|
-
}, {});
|
|
386
|
-
const failedActions = events.filter((e) => e.result === 'failure').length;
|
|
387
|
-
return {
|
|
388
|
-
totalActions: events.length,
|
|
389
|
-
actionsByType,
|
|
390
|
-
failedActions,
|
|
391
|
-
recentActions: events.slice(0, 10),
|
|
392
|
-
};
|
|
393
|
-
}
|
|
394
|
-
/**
|
|
395
|
-
* Generate compliance report
|
|
396
|
-
*/
|
|
397
|
-
async generateComplianceReport(startDate, endDate) {
|
|
398
|
-
const events = await this.audit.query({
|
|
399
|
-
startDate,
|
|
400
|
-
endDate,
|
|
401
|
-
});
|
|
402
|
-
const dataAccesses = events.filter((e) => e.type === 'data.read').length;
|
|
403
|
-
const dataModifications = events.filter((e) => e.type === 'data.update' || e.type === 'data.create').length;
|
|
404
|
-
const dataDeletions = events.filter((e) => e.type === 'data.delete').length;
|
|
405
|
-
const gdprRequests = events.filter((e) => e.type.startsWith('gdpr.')).length;
|
|
406
|
-
// Check if audit trail is complete (no gaps)
|
|
407
|
-
const auditTrailComplete = this.checkAuditTrailContinuity(events);
|
|
408
|
-
return {
|
|
409
|
-
dataAccesses,
|
|
410
|
-
dataModifications,
|
|
411
|
-
dataDeletions,
|
|
412
|
-
gdprRequests,
|
|
413
|
-
auditTrailComplete,
|
|
414
|
-
};
|
|
415
|
-
}
|
|
416
|
-
/**
|
|
417
|
-
* Check audit trail continuity
|
|
418
|
-
*/
|
|
419
|
-
checkAuditTrailContinuity(events) {
|
|
420
|
-
if (events.length === 0)
|
|
421
|
-
return true;
|
|
422
|
-
// Sort by timestamp
|
|
423
|
-
const sorted = events.sort((a, b) => new Date(a.timestamp).getTime() - new Date(b.timestamp).getTime());
|
|
424
|
-
// Check for gaps (simplified - just check if we have events)
|
|
425
|
-
return sorted.length > 0;
|
|
426
|
-
}
|
|
427
|
-
}
|
|
428
|
-
/**
|
|
429
|
-
* Global audit system
|
|
430
|
-
*/
|
|
431
|
-
export const audit = new AuditSystem(new InMemoryAuditStorage());
|
package/dist/security/auth.d.ts
DELETED
|
@@ -1,241 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Authentication System
|
|
3
|
-
*
|
|
4
|
-
* JWT-based authentication with session management, token refresh, and OAuth support
|
|
5
|
-
*/
|
|
6
|
-
export interface User {
|
|
7
|
-
id: string;
|
|
8
|
-
email: string;
|
|
9
|
-
username?: string;
|
|
10
|
-
roles: string[];
|
|
11
|
-
permissions: string[];
|
|
12
|
-
metadata?: Record<string, unknown>;
|
|
13
|
-
}
|
|
14
|
-
export interface AuthToken {
|
|
15
|
-
accessToken: string;
|
|
16
|
-
refreshToken?: string;
|
|
17
|
-
expiresAt: number;
|
|
18
|
-
tokenType: 'Bearer' | 'JWT';
|
|
19
|
-
}
|
|
20
|
-
export interface AuthSession {
|
|
21
|
-
user: User;
|
|
22
|
-
token: AuthToken;
|
|
23
|
-
createdAt: number;
|
|
24
|
-
lastActivity: number;
|
|
25
|
-
expiresAt: number;
|
|
26
|
-
deviceInfo?: {
|
|
27
|
-
userAgent: string;
|
|
28
|
-
ip: string;
|
|
29
|
-
device: string;
|
|
30
|
-
};
|
|
31
|
-
}
|
|
32
|
-
export interface JWTPayload {
|
|
33
|
-
sub: string;
|
|
34
|
-
email: string;
|
|
35
|
-
roles: string[];
|
|
36
|
-
permissions: string[];
|
|
37
|
-
iat: number;
|
|
38
|
-
exp: number;
|
|
39
|
-
iss?: string;
|
|
40
|
-
aud?: string;
|
|
41
|
-
[key: string]: unknown;
|
|
42
|
-
}
|
|
43
|
-
export interface AuthConfig {
|
|
44
|
-
jwtSecret: string;
|
|
45
|
-
jwtAlgorithm?: 'HS256' | 'HS384' | 'HS512' | 'RS256';
|
|
46
|
-
accessTokenExpiry?: number;
|
|
47
|
-
refreshTokenExpiry?: number;
|
|
48
|
-
issuer?: string;
|
|
49
|
-
audience?: string;
|
|
50
|
-
sessionTimeout?: number;
|
|
51
|
-
refreshThreshold?: number;
|
|
52
|
-
}
|
|
53
|
-
/**
|
|
54
|
-
* Authentication system
|
|
55
|
-
*/
|
|
56
|
-
export declare class AuthSystem {
|
|
57
|
-
private static readonly MAX_SESSIONS;
|
|
58
|
-
private config;
|
|
59
|
-
private sessions;
|
|
60
|
-
private refreshTokens;
|
|
61
|
-
private sessionCleanupInterval?;
|
|
62
|
-
constructor(config: AuthConfig);
|
|
63
|
-
/**
|
|
64
|
-
* Authenticate user with credentials
|
|
65
|
-
*/
|
|
66
|
-
authenticate(_email: string, _password: string, _deviceInfo?: AuthSession['deviceInfo']): Promise<{
|
|
67
|
-
user: User;
|
|
68
|
-
token: AuthToken;
|
|
69
|
-
session: AuthSession;
|
|
70
|
-
}>;
|
|
71
|
-
/**
|
|
72
|
-
* Create JWT token
|
|
73
|
-
*/
|
|
74
|
-
createToken(user: User, expiresIn?: number): Promise<AuthToken>;
|
|
75
|
-
/**
|
|
76
|
-
* Verify and decode JWT token
|
|
77
|
-
*/
|
|
78
|
-
verifyToken(token: string): Promise<JWTPayload>;
|
|
79
|
-
/**
|
|
80
|
-
* Refresh access token
|
|
81
|
-
*/
|
|
82
|
-
refreshAccessToken(refreshToken: string): Promise<AuthToken>;
|
|
83
|
-
/**
|
|
84
|
-
* Create session
|
|
85
|
-
*/
|
|
86
|
-
createSession(user: User, token: AuthToken, deviceInfo?: AuthSession['deviceInfo']): AuthSession;
|
|
87
|
-
/**
|
|
88
|
-
* Get session
|
|
89
|
-
*/
|
|
90
|
-
getSession(userId: string): AuthSession | undefined;
|
|
91
|
-
/**
|
|
92
|
-
* Update session activity
|
|
93
|
-
*/
|
|
94
|
-
updateSessionActivity(userId: string): void;
|
|
95
|
-
/**
|
|
96
|
-
* Destroy session
|
|
97
|
-
*/
|
|
98
|
-
destroySession(userId: string): void;
|
|
99
|
-
/**
|
|
100
|
-
* Destroy all sessions for user
|
|
101
|
-
*/
|
|
102
|
-
destroyAllSessions(userId: string): void;
|
|
103
|
-
/**
|
|
104
|
-
* Check if token needs refresh
|
|
105
|
-
*/
|
|
106
|
-
shouldRefreshToken(token: AuthToken): boolean;
|
|
107
|
-
/**
|
|
108
|
-
* Get user from token
|
|
109
|
-
*/
|
|
110
|
-
getUserFromToken(token: string): Promise<User | null>;
|
|
111
|
-
/**
|
|
112
|
-
* Encode JWT using jose library (Web Crypto API)
|
|
113
|
-
*/
|
|
114
|
-
private encodeJWT;
|
|
115
|
-
/**
|
|
116
|
-
* Decode and verify JWT using jose library (Web Crypto API)
|
|
117
|
-
*/
|
|
118
|
-
private decodeJWT;
|
|
119
|
-
/**
|
|
120
|
-
* Generate cryptographically secure refresh token
|
|
121
|
-
*/
|
|
122
|
-
private generateRefreshToken;
|
|
123
|
-
/**
|
|
124
|
-
* Start session cleanup interval
|
|
125
|
-
*/
|
|
126
|
-
private startSessionCleanup;
|
|
127
|
-
/**
|
|
128
|
-
* Stop session cleanup
|
|
129
|
-
*/
|
|
130
|
-
destroy(): void;
|
|
131
|
-
}
|
|
132
|
-
/**
|
|
133
|
-
* OAuth configuration
|
|
134
|
-
*/
|
|
135
|
-
export interface OAuthConfig {
|
|
136
|
-
provider: 'google' | 'github' | 'microsoft' | 'custom';
|
|
137
|
-
clientId: string;
|
|
138
|
-
clientSecret: string;
|
|
139
|
-
redirectUri: string;
|
|
140
|
-
scope?: string[];
|
|
141
|
-
authorizationUrl?: string;
|
|
142
|
-
tokenUrl?: string;
|
|
143
|
-
userInfoUrl?: string;
|
|
144
|
-
}
|
|
145
|
-
/**
|
|
146
|
-
* OAuth provider configurations
|
|
147
|
-
*/
|
|
148
|
-
export declare const OAuthProviders: {
|
|
149
|
-
google: {
|
|
150
|
-
authorizationUrl: string;
|
|
151
|
-
tokenUrl: string;
|
|
152
|
-
userInfoUrl: string;
|
|
153
|
-
scope: string[];
|
|
154
|
-
};
|
|
155
|
-
github: {
|
|
156
|
-
authorizationUrl: string;
|
|
157
|
-
tokenUrl: string;
|
|
158
|
-
userInfoUrl: string;
|
|
159
|
-
scope: string[];
|
|
160
|
-
};
|
|
161
|
-
microsoft: {
|
|
162
|
-
authorizationUrl: string;
|
|
163
|
-
tokenUrl: string;
|
|
164
|
-
userInfoUrl: string;
|
|
165
|
-
scope: string[];
|
|
166
|
-
};
|
|
167
|
-
};
|
|
168
|
-
/**
|
|
169
|
-
* OAuth client
|
|
170
|
-
*/
|
|
171
|
-
export declare class OAuthClient {
|
|
172
|
-
private config;
|
|
173
|
-
constructor(config: OAuthConfig);
|
|
174
|
-
/**
|
|
175
|
-
* Get authorization URL
|
|
176
|
-
*/
|
|
177
|
-
getAuthorizationUrl(state?: string): string;
|
|
178
|
-
/**
|
|
179
|
-
* Exchange code for token
|
|
180
|
-
*/
|
|
181
|
-
exchangeCodeForToken(code: string): Promise<{
|
|
182
|
-
access_token: string;
|
|
183
|
-
refresh_token?: string;
|
|
184
|
-
expires_in: number;
|
|
185
|
-
token_type: string;
|
|
186
|
-
}>;
|
|
187
|
-
/**
|
|
188
|
-
* Get user info
|
|
189
|
-
*/
|
|
190
|
-
getUserInfo(accessToken: string): Promise<{
|
|
191
|
-
id: string;
|
|
192
|
-
email: string;
|
|
193
|
-
name?: string;
|
|
194
|
-
picture?: string;
|
|
195
|
-
}>;
|
|
196
|
-
}
|
|
197
|
-
/**
|
|
198
|
-
* Password hashing utilities
|
|
199
|
-
*
|
|
200
|
-
* Uses PBKDF2 with a random salt for secure password hashing.
|
|
201
|
-
* For even stronger hashing, use bcryptjs (available in @revealui/auth).
|
|
202
|
-
*/
|
|
203
|
-
export declare class PasswordHasher {
|
|
204
|
-
private static readonly ITERATIONS;
|
|
205
|
-
private static readonly KEY_LENGTH;
|
|
206
|
-
private static readonly DIGEST;
|
|
207
|
-
/**
|
|
208
|
-
* Hash password with PBKDF2 and random salt
|
|
209
|
-
*/
|
|
210
|
-
static hash(password: string): Promise<string>;
|
|
211
|
-
/**
|
|
212
|
-
* Verify password against stored hash
|
|
213
|
-
*/
|
|
214
|
-
static verify(password: string, storedHash: string): Promise<boolean>;
|
|
215
|
-
}
|
|
216
|
-
/**
|
|
217
|
-
* Two-factor authentication
|
|
218
|
-
*/
|
|
219
|
-
export declare class TwoFactorAuth {
|
|
220
|
-
/**
|
|
221
|
-
* Generate TOTP secret
|
|
222
|
-
*/
|
|
223
|
-
static generateSecret(): string;
|
|
224
|
-
/**
|
|
225
|
-
* Generate TOTP code
|
|
226
|
-
*/
|
|
227
|
-
static generateCode(secret: string, timestamp?: number): string;
|
|
228
|
-
/**
|
|
229
|
-
* Verify TOTP code
|
|
230
|
-
*/
|
|
231
|
-
static verifyCode(secret: string, code: string, window?: number): boolean;
|
|
232
|
-
/**
|
|
233
|
-
* Base32 encode
|
|
234
|
-
*/
|
|
235
|
-
private static base32Encode;
|
|
236
|
-
/**
|
|
237
|
-
* HMAC-SHA1 implementation for TOTP
|
|
238
|
-
*/
|
|
239
|
-
private static hmac;
|
|
240
|
-
}
|
|
241
|
-
//# sourceMappingURL=auth.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/security/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,QAAQ,GAAG,KAAK,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAA;IACV,KAAK,EAAE,SAAS,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE;QACX,SAAS,EAAE,MAAM,CAAA;QACjB,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAA;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAYD;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAS;IAC7C,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,aAAa,CAAiC;IACtD,OAAO,CAAC,sBAAsB,CAAC,CAAgB;gBAEnC,MAAM,EAAE,UAAU;IAK9B;;OAEG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,GACtC,OAAO,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,WAAW,CAAA;KAAE,CAAC;IAMlE;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,IAAI,EACV,SAAS,GAAE,MAAsC,GAChD,OAAO,CAAC,SAAS,CAAC;IA4BrB;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA4BrD;;OAEG;IACG,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAkBlE;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,GAAG,WAAW;IAoChG;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAgBnD;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAS3C;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAUpC;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO;IAK7C;;OAEG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAe3D;;OAEG;YACW,SAAS;IAoBvB;;OAEG;YACW,SAAS;IAMvB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAK5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;OAEG;IACH,OAAO,IAAI,IAAI;CAKhB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAA;IACtD,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;CAmB1B,CAAA;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAa;gBAEf,MAAM,EAAE,WAAW;IAQ/B;;OAEG;IACH,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAe3C;;OAEG;IACG,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,YAAY,EAAE,MAAM,CAAA;QACpB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,EAAE,MAAM,CAAA;KACnB,CAAC;IAsBF;;OAEG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAC;CAaH;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAS;IAC3C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAK;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAW;IAEzC;;OAEG;WACU,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBpD;;OAEG;WACU,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA8B5E;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,MAAM,CAAC,cAAc,IAAI,MAAM;IAW/B;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM;IAc/D;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAU,GAAG,OAAO;IAmB5E;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IAwB3B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,IAAI;CAIpB"}
|