@riao/crypto 1.0.0

package/LICENSE.md

@@ -0,0 +1,22 @@
+Copyright (c) 2026 riao-project and others
+
+MIT
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,23 @@
+# riao-crypto
+
+{{ remrg:task Write a brief project description }}
+
+## Installation
+
+```bash
+npm install riao-crypto
+```
+
+## Getting Started
+
+Read the [Getting Started Guide](./docs/guides/getting-started.md) to get started.
+
+## Contributing
+
+- [Contributing Guide](./CONTRIBUTING.md)
+- [Setup Guide](./docs/guides//setup.md)
+- [Development Guide](./docs/guides/development.md)
+
+## License
+
+Licensed under the [MIT](LICENSE.md).

package/dist/src/_virtual/__vite-browser-external.cjs

@@ -0,0 +1,4 @@
+//#region __vite-browser-external
+var e=require("./_rolldown/runtime.cjs").__commonJSMin((e,r)=>{r.exports={}});
+//#endregion
+Object.defineProperty(exports,"default",{enumerable:!0,get:function(){return e()}});

package/dist/src/_virtual/__vite-browser-external.mjs

@@ -0,0 +1,5 @@
+import{__commonJSMin as r}from"./_rolldown/runtime.mjs";
+//#region __vite-browser-external
+var o=/* @__PURE__ */r((r,o)=>{o.exports={}});
+//#endregion
+export default o();export{o as require___vite_browser_external};

package/dist/src/_virtual/_rolldown/runtime.cjs

@@ -0,0 +1,4 @@
+//#region \0rolldown/runtime.js
+var e=Object.create,t=Object.defineProperty,r=Object.getOwnPropertyDescriptor,o=Object.getOwnPropertyNames,l=Object.getPrototypeOf,n=Object.prototype.hasOwnProperty;
+//#endregion
+exports.__commonJSMin=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),exports.__toESM=(p,a,c)=>(c=null!=p?e(l(p)):{},((e,l,p,a)=>{if(l&&"object"==typeof l||"function"==typeof l)for(var c,u=o(l),b=0,O=u.length;b<O;b++)c=u[b],n.call(e,c)||c===p||t(e,c,{get:(e=>l[e]).bind(null,c),enumerable:!(a=r(l,c))||a.enumerable});return e})(!a&&p&&p.__esModule&&n.call(p,"default")?c:t(c,"default",{value:p,enumerable:!0}),p));

package/dist/src/_virtual/_rolldown/runtime.mjs

@@ -0,0 +1,4 @@
+//#region \0rolldown/runtime.js
+var e=Object.create,t=Object.defineProperty,r=Object.getOwnPropertyDescriptor,o=Object.getOwnPropertyNames,l=Object.getPrototypeOf,n=Object.prototype.hasOwnProperty,p=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),a=(p,a,c)=>(c=null!=p?e(l(p)):{},((e,l,p,a)=>{if(l&&"object"==typeof l||"function"==typeof l)for(var c,u=o(l),b=0,O=u.length;b<O;b++)c=u[b],n.call(e,c)||c===p||t(e,c,{get:(e=>l[e]).bind(null,c),enumerable:!(a=r(l,c))||a.enumerable});return e})(!a&&p&&p.__esModule&&n.call(p,"default")?c:t(c,"default",{value:p,enumerable:!0}),p));
+//#endregion
+export{p as __commonJSMin,a as __toESM};

package/dist/src/crypto.cjs

@@ -0,0 +1,5 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const r=require("./_virtual/_rolldown/runtime.cjs"),e=require("./_virtual/__vite-browser-external.cjs");
+//#region src/crypto.ts
+var t=r.__toESM(e.default,1),o=t.constants.RSA_PKCS1_OAEP_PADDING,p="sha256";function c(r,e){return e=t.Buffer.isBuffer(e)?e:t.Buffer.from(e),t.publicEncrypt({key:r,padding:o,oaepHash:p},e)}function i(r,e){return t.privateDecrypt({key:r,padding:o,oaepHash:p},e)}
+//#endregion
+exports.Decryptor=class{privateKey;constructor(r){this.privateKey=r}decrypt(r){return i(this.privateKey,r)}},exports.Encryptor=class{publicKey;constructor(r){this.publicKey=r}encrypt(r){return c(this.publicKey,r)}},exports.decrypt=i,exports.encrypt=c;

package/dist/src/crypto.d.ts

@@ -0,0 +1,14 @@
+import { Buffer } from 'buffer';
+import * as crypto from 'crypto';
+export declare function encrypt(publicKey: crypto.KeyObject, data: string | Buffer): Buffer;
+export declare function decrypt(privateKey: crypto.KeyObject, encryptedData: Buffer): Buffer;
+export declare class Encryptor {
+    private publicKey;
+    constructor(publicKey: crypto.KeyObject);
+    encrypt(data: string | Buffer): Buffer;
+}
+export declare class Decryptor {
+    private privateKey;
+    constructor(privateKey: crypto.KeyObject);
+    decrypt(encryptedData: Buffer): Buffer;
+}

package/dist/src/crypto.mjs

@@ -0,0 +1,5 @@
+import{__toESM as r}from"./_virtual/_rolldown/runtime.mjs";import{require___vite_browser_external as t}from"./_virtual/__vite-browser-external.mjs";
+//#region src/crypto.ts
+var e=/* @__PURE__ */r(t(),1),i=e.constants.RSA_PKCS1_OAEP_PADDING,a="sha256";function n(r,t){return t=e.Buffer.isBuffer(t)?t:e.Buffer.from(t),e.publicEncrypt({key:r,padding:i,oaepHash:a},t)}function p(r,t){return e.privateDecrypt({key:r,padding:i,oaepHash:a},t)}var s=class{publicKey;constructor(r){this.publicKey=r}encrypt(r){return n(this.publicKey,r)}},o=class{privateKey;constructor(r){this.privateKey=r}decrypt(r){return p(this.privateKey,r)}};
+//#endregion
+export{o as Decryptor,s as Encryptor,p as decrypt,n as encrypt};

package/dist/src/hash.cjs

@@ -0,0 +1,4 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});let e=require("bcrypt");
+//#region src/hash.ts
+//#endregion
+exports.Hash=class{rounds=12;async make(r,a){return await(0,e.hash)(r,a||this.rounds)}async check(r,a){return await(0,e.compare)(r,a)}};

package/dist/src/hash.d.ts

@@ -0,0 +1,5 @@
+export declare class Hash {
+    rounds: number;
+    make(input: string, rounds?: number): Promise<string>;
+    check(input: string, hashed: string): Promise<boolean>;
+}

package/dist/src/hash.mjs

@@ -0,0 +1,5 @@
+import{compare as r,hash as a}from"bcrypt";
+//#region src/hash.ts
+var t=class{rounds=12;async make(r,t){return await a(r,t||this.rounds)}async check(a,t){return await r(a,t)}};
+//#endregion
+export{t as Hash};

package/dist/src/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const r=require("./crypto.cjs"),e=require("./hash.cjs"),t=require("./jwt.cjs"),o=require("./keypair.cjs");exports.Decryptor=r.Decryptor,exports.Encryptor=r.Encryptor,exports.Hash=e.Hash,exports.Jwt=t.Jwt,exports.KeyPairGenerator=o.KeyPairGenerator,exports.decrypt=r.decrypt,exports.encrypt=r.encrypt;

package/dist/src/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Export the public library here.
+ *
+ * See docs/guides/public-exports.md for
+ *  detailed conventions on naming, export patterns,
+ *  and package.json configuration.
+ */
+export * from './crypto';
+export * from './hash';
+export * from './jwt';
+export * from './keypair';
+export * from './secret';

package/dist/src/index.mjs

@@ -0,0 +1 @@
+import{Decryptor as m,Encryptor as r,decrypt as o,encrypt as p}from"./crypto.mjs";import{Hash as t}from"./hash.mjs";import{Jwt as i}from"./jwt.mjs";import{KeyPairGenerator as j}from"./keypair.mjs";export{m as Decryptor,r as Encryptor,t as Hash,i as Jwt,j as KeyPairGenerator,o as decrypt,p as encrypt};

package/dist/src/jwt.cjs

@@ -0,0 +1,5 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./_virtual/_rolldown/runtime.cjs"),t=require("./_virtual/__vite-browser-external.cjs");let r=require("jsonwebtoken");r=e.__toESM(r,1);
+//#region src/jwt.ts
+var i=e.__toESM(t.default,1);
+//#endregion
+exports.Jwt=class{publicKey;privateKey;expiresIn;notBefore;algorithm;constructor(e){if(this.expiresIn=e.expiresIn??this.expiresIn,this.notBefore=e.notBefore??this.notBefore,this.algorithm=e.algorithm??("secret"in e?"HS512":"ES512"),"secret"in e&&e.secret)this.privateKey=this.publicKey=(0,i.createSecretKey)(i.Buffer.from(e.secret));else{if(!("privateKey"in e)||!e.privateKey)throw new Error("No valid signing key provided. Please pass a secret or a key pair");this.publicKey=e.publicKey,this.privateKey=e.privateKey}}tokenOptions(){return{expiresIn:this.expiresIn??"15m",notBefore:this.notBefore??"1s",algorithm:this.algorithm}}async generateToken(e,t={}){return t={...this.tokenOptions(),...t},{token:await r.sign(e,this.privateKey,t)}}async decodeToken(e){const t=await r.verify(e,this.publicKey,{algorithms:[this.algorithm]});if("string"==typeof t)throw new Error("Invalid token: payload is a string");return delete t.iat,delete t.nbf,delete t.exp,t}};

package/dist/src/jwt.d.ts

@@ -0,0 +1,25 @@
+import { default as ms } from 'ms';
+import { Secret, SecretAlgorithm } from './secret';
+import { KeyPair, KeyPairAlgorithm } from './keypair';
+import { KeyObject } from 'crypto';
+import * as jwt from 'jsonwebtoken';
+export type JwtPayload = Record<string, unknown>;
+export type JwtSigningOptions = Secret | KeyPair;
+export type JwtOptions = JwtSigningOptions & {
+    expiresIn?: ms.StringValue;
+    notBefore?: ms.StringValue;
+};
+export interface Token {
+    token: string;
+}
+export declare class Jwt<TPayload extends JwtPayload = JwtPayload> {
+    protected publicKey: KeyObject;
+    protected privateKey: KeyObject;
+    protected expiresIn?: ms.StringValue;
+    protected notBefore?: ms.StringValue;
+    protected algorithm: SecretAlgorithm | KeyPairAlgorithm;
+    constructor(options: JwtOptions);
+    protected tokenOptions(): jwt.SignOptions;
+    generateToken(data: TPayload, options?: jwt.SignOptions): Promise<Token>;
+    decodeToken(token: string): Promise<TPayload>;
+}

package/dist/src/jwt.mjs

@@ -0,0 +1,5 @@
+import{__toESM as e}from"./_virtual/_rolldown/runtime.mjs";import{require___vite_browser_external as t}from"./_virtual/__vite-browser-external.mjs";import*as r from"jsonwebtoken";
+//#region src/jwt.ts
+var i=/* @__PURE__ */e(t(),1),o=class{publicKey;privateKey;expiresIn;notBefore;algorithm;constructor(e){if(this.expiresIn=e.expiresIn??this.expiresIn,this.notBefore=e.notBefore??this.notBefore,this.algorithm=e.algorithm??("secret"in e?"HS512":"ES512"),"secret"in e&&e.secret)this.privateKey=this.publicKey=(0,i.createSecretKey)(i.Buffer.from(e.secret));else{if(!("privateKey"in e)||!e.privateKey)throw new Error("No valid signing key provided. Please pass a secret or a key pair");this.publicKey=e.publicKey,this.privateKey=e.privateKey}}tokenOptions(){return{expiresIn:this.expiresIn??"15m",notBefore:this.notBefore??"1s",algorithm:this.algorithm}}async generateToken(e,t={}){return t={...this.tokenOptions(),...t},{token:await r.sign(e,this.privateKey,t)}}async decodeToken(e){const t=await r.verify(e,this.publicKey,{algorithms:[this.algorithm]});if("string"==typeof t)throw new Error("Invalid token: payload is a string");return delete t.iat,delete t.nbf,delete t.exp,t}};
+//#endregion
+export{o as Jwt};

package/dist/src/keypair.cjs

@@ -0,0 +1,5 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("./_virtual/_rolldown/runtime.cjs"),t=require("./_virtual/__vite-browser-external.cjs");
+//#region src/keypair.ts
+var r=e.__toESM(t.default,1);
+//#endregion
+exports.KeyPairGenerator=class{algorithm;constructor(e){this.algorithm=e.algorithm}generate(){let e=null,t={};if("RS256"===this.algorithm?(e="rsa",t.modulusLength=2048):"RS384"===this.algorithm?(e="rsa",t.modulusLength=3072):"RS512"===this.algorithm?(e="rsa",t.modulusLength=4096):"ES256"===this.algorithm?(e="ec",t.namedCurve="prime256v1"):"ES384"===this.algorithm?(e="ec",t.namedCurve="secp384r1"):"ES512"===this.algorithm&&(e="ec",t.namedCurve="secp521r1"),null===e)throw new Error("Keypair type could not be inferred");const{publicKey:i,privateKey:a}=r.generateKeyPairSync(e,t);return{algorithm:this.algorithm,publicKey:i,privateKey:a}}async load(e){const t=(await(0,r.readFile)(e.publicKeyPath)).toString(),i=(await(0,r.readFile)(e.privateKeyPath)).toString();return{algorithm:this.algorithm,publicKey:r.createPublicKey(t),privateKey:r.createPrivateKey(i)}}async save(e){const t=e.keys.publicKey,i=e.keys.privateKey;await(0,r.writeFile)(e.publicKeyPath,t.export({format:"pem",type:"spki"})),await(0,r.writeFile)(e.privateKeyPath,i.export({format:"pem",type:"pkcs8"}))}};

package/dist/src/keypair.d.ts

@@ -0,0 +1,23 @@
+import * as crypto from 'crypto';
+export type KeyPairAlgorithm = 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512';
+export interface KeyPair {
+    publicKey: crypto.KeyObject;
+    privateKey: crypto.KeyObject;
+    algorithm: KeyPairAlgorithm;
+}
+export declare class KeyPairGenerator {
+    algorithm: KeyPairAlgorithm;
+    constructor(options: {
+        algorithm: KeyPairAlgorithm;
+    });
+    generate(): KeyPair;
+    load(options: {
+        publicKeyPath: string;
+        privateKeyPath: string;
+    }): Promise<KeyPair>;
+    save(options: {
+        keys: KeyPair;
+        publicKeyPath: string;
+        privateKeyPath: string;
+    }): Promise<void>;
+}

package/dist/src/keypair.mjs

@@ -0,0 +1,5 @@
+import{__toESM as e}from"./_virtual/_rolldown/runtime.mjs";import{require___vite_browser_external as t}from"./_virtual/__vite-browser-external.mjs";
+//#region src/keypair.ts
+var r=/* @__PURE__ */e(t(),1),i=class{algorithm;constructor(e){this.algorithm=e.algorithm}generate(){let e=null,t={};if("RS256"===this.algorithm?(e="rsa",t.modulusLength=2048):"RS384"===this.algorithm?(e="rsa",t.modulusLength=3072):"RS512"===this.algorithm?(e="rsa",t.modulusLength=4096):"ES256"===this.algorithm?(e="ec",t.namedCurve="prime256v1"):"ES384"===this.algorithm?(e="ec",t.namedCurve="secp384r1"):"ES512"===this.algorithm&&(e="ec",t.namedCurve="secp521r1"),null===e)throw new Error("Keypair type could not be inferred");const{publicKey:i,privateKey:a}=r.generateKeyPairSync(e,t);return{algorithm:this.algorithm,publicKey:i,privateKey:a}}async load(e){const t=(await(0,r.readFile)(e.publicKeyPath)).toString(),i=(await(0,r.readFile)(e.privateKeyPath)).toString();return{algorithm:this.algorithm,publicKey:r.createPublicKey(t),privateKey:r.createPrivateKey(i)}}async save(e){const t=e.keys.publicKey,i=e.keys.privateKey;await(0,r.writeFile)(e.publicKeyPath,t.export({format:"pem",type:"spki"})),await(0,r.writeFile)(e.privateKeyPath,i.export({format:"pem",type:"pkcs8"}))}};
+//#endregion
+export{i as KeyPairGenerator};

package/dist/src/secret.d.ts

@@ -0,0 +1,5 @@
+export type SecretAlgorithm = 'HS256' | 'HS384' | 'HS512';
+export interface Secret {
+    secret: string;
+    algorithm: SecretAlgorithm;
+}

package/dist/test/setup-file.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/setup-global.d.ts

@@ -0,0 +1,2 @@
+export declare function setup(): Promise<void>;
+export declare function teardown(): Promise<void>;

package/dist/test/unit/crypto.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/hash.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/index.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/jwt.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/keypair.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/vite.config.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import('vite').UserConfig;
+export default _default;

package/dist/vitest.config.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import('vite').UserConfig;
+export default _default;

package/package.json

@@ -0,0 +1,73 @@
+{
+	"name": "@riao/crypto",
+	"version": "1.0.0",
+	"description": "",
+	"author": "riao-project",
+	"license": "MIT",
+	"type": "module",
+	"scripts": {
+		"build": "vite build",
+		"dev": "vite build --watch",
+		"prepare": "npm run build",
+		"preview": "vite preview",
+		"typecheck": "tsc -p tsconfig.json --noEmit",
+		"lint": "eslint . --fix && prettier --write .",
+		"lint:check": "prettier --check . && eslint .",
+		"test": "npm run lint && npm run typecheck && npm run test:run",
+		"test:ci": "npm run lint:check && npm run typecheck && npm run test:run",
+		"test:dev": "vitest --ui --coverage",
+		"test:run": "vitest run --coverage"
+	},
+	"engines": {
+		"node": ">=22.0.0",
+		"npm": ">=10.8.2"
+	},
+	"dependencies": {
+		"bcrypt": "^6.0.0",
+		"jsonwebtoken": "^9.0.3",
+		"ms": "^2.1.3"
+	},
+	"devDependencies": {
+		"@eslint/js": "^10.0.1",
+		"@types/bcrypt": "^6.0.0",
+		"@types/jsonwebtoken": "^9.0.10",
+		"@types/ms": "^2.1.0",
+		"@types/node": "^22.19.17",
+		"@typescript-eslint/eslint-plugin": "^8.57.2",
+		"@typescript-eslint/parser": "^8.57.2",
+		"@vitest/coverage-v8": "^4.1.2",
+		"@vitest/ui": "^4.1.2",
+		"eslint": "^10.1.0",
+		"fast-glob": "^3.3.3",
+		"globals": "^17.6.0",
+		"prettier": "^3.8.1",
+		"prettier-plugin-brace-style": "^0.10.1",
+		"terser": "^5.46.1",
+		"typescript": "^5.9.3",
+		"vite": "^8.0.9",
+		"vite-plugin-dts": "^4.5.4",
+		"vitest": "^4.1.2"
+	},
+	"keywords": [],
+	"main": "./dist/src/index.cjs",
+	"module": "./dist/src/index.mjs",
+	"types": "./dist/src/index.d.ts",
+	"exports": {
+		"./package.json": "./package.json",
+		".": {
+			"types": "./dist/src/index.d.ts",
+			"import": "./dist/src/index.mjs",
+			"require": "./dist/src/index.cjs",
+			"default": "./dist/src/index.mjs"
+		},
+		"./*": {
+			"types": "./dist/src/*/index.d.ts",
+			"import": "./dist/src/*/index.mjs",
+			"require": "./dist/src/*/index.cjs",
+			"default": "./dist/src/*/index.mjs"
+		}
+	},
+	"files": [
+		"dist"
+	]
+}