@sebastienrousseau/crypto-server 0.0.8 → 0.0.24

package/dist/utils/route-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/route-helpers.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAGL,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAOtB,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAEnD,OAAO,EAAE,CAAC,EACV,KAAK,EAAE,YAAY,GAEjB;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CAAE,GACtE,IAAI,CAmBP;AAUD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,GAAG,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAA;CAAE,EAChE,KAAK,EAAE;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAA;KAAE,CAAA;CAAE,EACzE,SAAS,EAAE,MAAM,GAChB,OAAO,CAkBT"}
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/route-helpers.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAGL,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAOtB,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAEnD,OAAO,EAAE,CAAC,EACV,KAAK,EAAE,YAAY,GAEjB;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CAAE,GACtE,IAAI,CAmBP;AAsBD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,GAAG,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAA;CAAE,EAChE,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,GAChB,YAAY,CA6Bd"}

package/dist/utils/route-helpers.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.collectValidation = collectValidation;
 exports.classifyCryptoError = classifyCryptoError;
+const problem_1 = require("../lib/problem");
 const validation_1 = require("./validation");
 function collectValidation(results, reply) {
     const errors = [];
@@ -22,21 +23,26 @@ function collectValidation(results, reply) {
     }
     return out;
 }
+const INPUT_ERROR_PATTERNS = [
+    /invalid hex/i,
+    /must be \d+ bytes/i,
+    /too short/i,
+    /unsupported/i,
+    /expected.*length/i,
+    /of length \d+ expected/i,
+];
 function classifyCryptoError(error, request, reply, operation) {
     const msg = error instanceof Error ? error.message : String(error);
-    const isInputError = /invalid hex/i.test(msg) ||
-        /must be \d+ bytes/i.test(msg) ||
-        /too short/i.test(msg) ||
-        /unsupported/i.test(msg) ||
-        /expected.*length/i.test(msg) ||
-        /of length \d+ expected/i.test(msg);
+    const code = (0, problem_1.isCryptoError)(error) ? error.code : undefined;
+    const isInputError = code === undefined
+        ? INPUT_ERROR_PATTERNS.some((pattern) => pattern.test(msg))
+        : (0, problem_1.cryptoErrorStatus)(code) === 400;
+    const extensions = code === undefined ? {} : { code };
     if (isInputError) {
         request.log.error(error, `${operation} input error`);
-        return reply
-            .status(400)
-            .send({ error: `${operation} failed: invalid input` });
+        return (0, problem_1.sendProblem)(reply, 400, "invalid-input", `${operation} failed: invalid input`, extensions);
     }
     request.log.error(error, `${operation} failed`);
-    return reply.status(500).send({ error: `${operation} failed` });
+    return (0, problem_1.sendProblem)(reply, 500, "internal-error", `${operation} failed`, extensions);
 }
 //# sourceMappingURL=route-helpers.js.map

package/dist/utils/trace.d.ts

@@ -0,0 +1,12 @@
+import type { FastifyReply, FastifyRequest } from "fastify";
+export interface TraceparentComponents {
+    version: string;
+    traceId: string;
+    parentId: string;
+    flags: string;
+}
+export declare function isValidTraceparent(header: unknown): header is string;
+export declare function parseTraceparent(header: string): TraceparentComponents | null;
+export declare function generateTraceparent(sampled?: boolean): string;
+export declare function propagateTraceContext(request: FastifyRequest, reply: FastifyReply): void;
+//# sourceMappingURL=trace.d.ts.map

package/dist/utils/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/utils/trace.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAa5D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAQD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,MAAM,CAUpE;AAQD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAS7E;AAQD,wBAAgB,mBAAmB,CAAC,OAAO,UAAO,GAAG,MAAM,CAK1D;AASD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,GAClB,IAAI,CAqBN"}

package/dist/utils/trace.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isValidTraceparent = isValidTraceparent;
+exports.parseTraceparent = parseTraceparent;
+exports.generateTraceparent = generateTraceparent;
+exports.propagateTraceContext = propagateTraceContext;
+const crypto_1 = require("crypto");
+const TRACEPARENT_REGEX = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;
+const ALL_ZERO_TRACE_ID = "0".repeat(32);
+const ALL_ZERO_PARENT_ID = "0".repeat(16);
+function isValidTraceparent(header) {
+    if (typeof header !== "string")
+        return false;
+    const match = TRACEPARENT_REGEX.exec(header.trim());
+    if (!match)
+        return false;
+    const traceId = match[1];
+    const parentId = match[2];
+    if (traceId === ALL_ZERO_TRACE_ID || parentId === ALL_ZERO_PARENT_ID) {
+        return false;
+    }
+    return true;
+}
+function parseTraceparent(header) {
+    if (!isValidTraceparent(header))
+        return null;
+    const match = TRACEPARENT_REGEX.exec(header.trim());
+    return {
+        version: "00",
+        traceId: match[1],
+        parentId: match[2],
+        flags: match[3],
+    };
+}
+function generateTraceparent(sampled = true) {
+    const traceId = (0, crypto_1.randomBytes)(16).toString("hex");
+    const parentId = (0, crypto_1.randomBytes)(8).toString("hex");
+    const flags = sampled ? "01" : "00";
+    return `00-${traceId}-${parentId}-${flags}`;
+}
+function propagateTraceContext(request, reply) {
+    const incoming = request.headers["traceparent"];
+    let traceparentValue;
+    if (isValidTraceparent(incoming)) {
+        traceparentValue = incoming.trim();
+        const tracestate = request.headers["tracestate"];
+        if (typeof tracestate === "string" && tracestate.trim().length > 0) {
+            reply.header("tracestate", tracestate.trim());
+        }
+    }
+    else {
+        traceparentValue = generateTraceparent();
+    }
+    reply.header("traceparent", traceparentValue);
+    const parsed = parseTraceparent(traceparentValue);
+    if (parsed) {
+        request.traceId = parsed.traceId;
+    }
+    request.traceparent =
+        traceparentValue;
+}
+//# sourceMappingURL=trace.js.map

package/dist/utils/validation.d.ts

@@ -20,6 +20,7 @@ export declare function validateOptionalNumber(value: unknown, defaultValue: num
     max?: number;
 }): ValidationResult<number>;
 export declare function validateBase64(value: unknown, fieldName: string): ValidationResult<string>;
+export declare function isEmailShaped(value: string): boolean;
 export declare function validateEmail(value: unknown, fieldName: string): ValidationResult<string>;
 export declare function validateEnum<T extends string>(value: unknown, fieldName: string, allowedValues: readonly T[]): ValidationResult<T>;
 export declare function validateDateString(value: unknown, fieldName: string): ValidationResult<Date>;

package/dist/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAKvC,MAAM,WAAW,eAAe;IAE9B,KAAK,EAAE,MAAM,CAAC;IAEd,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAEE,KAAK,EAAE,IAAI,CAAC;IAEZ,KAAK,EAAE,CAAC,CAAC;CACV,GACD;IAEE,KAAK,EAAE,KAAK,CAAC;IAEb,KAAK,EAAE,eAAe,CAAC;CACxB,CAAC;AAKN,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAiB1B;AAKD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC,gBAAgB,CAAC,MAAM,CAAC,CAoC1B;AAKD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC,gBAAgB,CAAC,MAAM,CAAC,CAK1B;AAKD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAgB1B;AAKD,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAe1B;AAKD,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,SAAS,CAAC,EAAE,GAC1B,gBAAgB,CAAC,CAAC,CAAC,CAcrB;AAKD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,IAAI,CAAC,CAexB;AAKD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,eAAe,EAAE,GACxB,IAAI,CAKN;AAOD,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAKD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,OAAO,CAcT"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,MAAM,WAAW,eAAe;IAE9B,KAAK,EAAE,MAAM,CAAC;IAEd,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAEE,KAAK,EAAE,IAAI,CAAC;IAEZ,KAAK,EAAE,CAAC,CAAC;CACV,GACD;IAEE,KAAK,EAAE,KAAK,CAAC;IAEb,KAAK,EAAE,eAAe,CAAC;CACxB,CAAC;AAKN,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAiB1B;AAKD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC,gBAAgB,CAAC,MAAM,CAAC,CAqC1B;AAKD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC,gBAAgB,CAAC,MAAM,CAAC,CAK1B;AAKD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAgB1B;AASD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMpD;AAKD,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAc1B;AAKD,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,SAAS,CAAC,EAAE,GAC1B,gBAAgB,CAAC,CAAC,CAAC,CAcrB;AAKD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,gBAAgB,CAAC,IAAI,CAAC,CAexB;AAMD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,eAAe,EAAE,GACxB,IAAI,CAIN;AAOD,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAKD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,OAAO,CAcT"}

package/dist/utils/validation.js

@@ -4,6 +4,7 @@ exports.validateRequiredString = validateRequiredString;
 exports.validateRequiredNumber = validateRequiredNumber;
 exports.validateOptionalNumber = validateOptionalNumber;
 exports.validateBase64 = validateBase64;
+exports.isEmailShaped = isEmailShaped;
 exports.validateEmail = validateEmail;
 exports.validateEnum = validateEnum;
 exports.validateDateString = validateDateString;
@@ -11,6 +12,7 @@ exports.sendValidationError = sendValidationError;
 exports.anonymousAllowed = anonymousAllowed;
 exports.validateApiKey = validateApiKey;
 const crypto_1 = require("crypto");
+const problem_1 = require("../lib/problem");
 function validateRequiredString(value, fieldName) {
     if (value === undefined || value === null) {
         return {
@@ -37,6 +39,7 @@ function validateRequiredNumber(value, fieldName, options) {
         };
     }
     const numValue = typeof value === "number" ? value : Number(value);
+    const { min, max } = options ?? {};
     if (!Number.isFinite(numValue)) {
         return {
             valid: false,
@@ -46,21 +49,21 @@ function validateRequiredNumber(value, fieldName, options) {
             },
         };
     }
-    if (options?.min !== undefined && numValue < options.min) {
+    if (min !== undefined && numValue < min) {
         return {
             valid: false,
             error: {
                 field: fieldName,
-                message: `${fieldName} must be at least ${options.min}`,
+                message: `${fieldName} must be at least ${min}`,
             },
         };
     }
-    if (options?.max !== undefined && numValue > options.max) {
+    if (max !== undefined && numValue > max) {
         return {
             valid: false,
             error: {
                 field: fieldName,
-                message: `${fieldName} must be at most ${options.max}`,
+                message: `${fieldName} must be at most ${max}`,
             },
         };
     }
@@ -88,12 +91,18 @@ function validateBase64(value, fieldName) {
     }
     return { valid: true, value: stringResult.value };
 }
+function isEmailShaped(value) {
+    const at = value.indexOf("@");
+    if (at < 1 || value.indexOf("@", at + 1) !== -1 || /\s/.test(value)) {
+        return false;
+    }
+    return value.slice(at + 2, -1).includes(".");
+}
 function validateEmail(value, fieldName) {
     const stringResult = validateRequiredString(value, fieldName);
     if (!stringResult.valid)
         return stringResult;
-    const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-    if (!emailRegex.test(stringResult.value)) {
+    if (!isEmailShaped(stringResult.value)) {
         return {
             valid: false,
             error: {
@@ -136,9 +145,8 @@ function validateDateString(value, fieldName) {
     return { valid: true, value: date };
 }
 function sendValidationError(reply, errors) {
-    reply.status(400).send({
-        error: "Validation failed",
-        details: errors,
+    (0, problem_1.sendProblem)(reply, 400, "validation-failed", "Validation failed", {
+        errors,
     });
 }
 function anonymousAllowed() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebastienrousseau/crypto-server",
-  "version": "0.0.8",
+  "version": "0.0.24",
   "description": "Crypto Server is a Fastify web server that exposes easy consumable REST APIs to perform low-level cryptographic operations.",
   "author": "Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>",
   "license": "MIT OR Apache-2.0",
@@ -16,16 +16,18 @@
   "engines": {
     "node": ">=22.0.0"
   },
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "sideEffects": false,
+  "type": "commonjs",
+  "main": "./dist/server.js",
+  "types": "./dist/server.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "require": "./dist/index.js",
-      "import": "./dist/index.js"
-    }
+      "types": "./dist/server.d.ts",
+      "require": "./dist/server.js",
+      "default": "./dist/server.js"
+    },
+    "./package.json": "./package.json"
   },
+  "sideEffects": false,
   "bin": {
     "crypto-server": "dist/index.js"
   },
@@ -58,20 +60,22 @@
     "fastify-healthcheck": "^5.1.0",
     "uuid": "^14.0.2",
     "winston": "^3.17.0",
-    "@sebastienrousseau/crypto-lib": "0.0.8"
+    "@sebastienrousseau/crypto-kms": "0.0.24",
+    "@sebastienrousseau/crypto-lib": "0.0.24"
   },
   "devDependencies": {
-    "@types/chai": "^4.3.7",
+    "@types/chai": "^5.2.3",
     "@types/chai-as-promised": "^8.0.2",
-    "@types/mocha": "^10.0.2",
+    "@types/mocha": "^10.0.10",
     "@types/node": "^26.6.3",
     "@types/uuid": "^11.0.0",
     "c8": "^12.0.0",
-    "chai": "^4.5.0",
-    "chai-as-promised": "^7.1.2",
-    "mocha": "^10.8.2",
-    "openpgp": "^6.3.1",
-    "prettier": "^3.9.8",
+    "chai": "^6.3.0",
+    "chai-as-promised": "^8.0.2",
+    "fast-check": "^4.10.2",
+    "mocha": "^12.0.3",
+    "openpgp": "^6.3.2",
+    "prettier": "^3.9.9",
     "rimraf": "^6.1.3",
     "ts-node": "^10.9.2",
     "typedoc": "^0.28.20",
@@ -93,8 +97,8 @@
   "scripts": {
     "build": "tsc --build tsconfig.json",
     "clean": "rimraf ./coverage ./dist ./docs",
-    "lint": "eslint --ext .ts src __tests__",
-    "lint:fix": "eslint --cache --fix --ext .ts src __tests__",
+    "lint": "eslint src __tests__",
+    "lint:fix": "eslint --cache --fix src __tests__",
     "format": "prettier --write src/**/*.ts",
     "format:check": "prettier --check \"src/**/*.ts\"",
     "start": "node dist/index.js",