@selvajs/selva 4.20.0-beta.4 → 4.20.0-beta.5

package/build/server/chunks/chunks/api-token-codec.js-BEHsbOP6.js

@@ -1,67 +0,0 @@
-import { c as createTokenCodec } from './token-codec.js-CxK2DiO-.js';
-import { randomBytes } from 'node:crypto';
-import { crc32 } from 'node:zlib';
-
-//#region ../server/src/tokens/api-token-codec.ts
-/**
-* API token format: `selva_` + 30 base62 random chars + 6 base62 chars of
-* CRC32 over the random part. 42 chars total.
-*
-* - The prefix is what secret scanners match on; `sk_` was dropped because
-*   Stripe and OpenAI keys share it.
-* - 30 base62 chars carry ~178 bits of entropy.
-* - The checksum lets the resolver reject a typo or a truncated paste without
-*   a store lookup. It is not a MAC: the HMAC at rest is what authenticates.
-* - CRC32 tops out below 62^6, so 6 chars always fit; shorter values are
-*   left-padded with `0`.
-*/
-var API_TOKEN_PREFIX = "selva_";
-var RANDOM_LENGTH = 30;
-var CHECKSUM_LENGTH = 6;
-var TOKEN_LENGTH = 42;
-var BASE62 = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
-var BODY_PATTERN = /^[0-9A-Za-z]+$/;
-function randomBase62(length) {
-	let out = "";
-	while (out.length < length) for (const byte of randomBytes(length * 2)) {
-		if (byte < 248) out += BASE62[byte % 62];
-		if (out.length === length) break;
-	}
-	return out;
-}
-function checksum(random) {
-	let n = crc32(random);
-	let out = "";
-	for (let i = 0; i < CHECKSUM_LENGTH; i++) {
-		out = BASE62[n % 62] + out;
-		n = Math.floor(n / 62);
-	}
-	return out;
-}
-/**
-* Shape only, no secret needed. For spotting a key where it must not be, such
-* as a query string, without flagging text that merely starts with `selva_`.
-*/
-function looksLikeApiToken(value) {
-	return value.length === TOKEN_LENGTH && value.startsWith("selva_") && BODY_PATTERN.test(value.slice(6));
-}
-function createApiTokenCodec(secret) {
-	return {
-		...createTokenCodec({
-			prefix: API_TOKEN_PREFIX,
-			secret
-		}),
-		mintRawToken() {
-			const random = randomBase62(RANDOM_LENGTH);
-			return API_TOKEN_PREFIX + random + checksum(random);
-		},
-		hasValidChecksum(raw) {
-			if (!looksLikeApiToken(raw)) return false;
-			const body = raw.slice(6);
-			return checksum(body.slice(0, RANDOM_LENGTH)) === body.slice(RANDOM_LENGTH);
-		}
-	};
-}
-
-export { createApiTokenCodec as c, looksLikeApiToken as l };
-//# sourceMappingURL=api-token-codec.js-BEHsbOP6.js.map

package/build/server/chunks/chunks/api-token-codec.js-BEHsbOP6.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-token-codec.js-BEHsbOP6.js","sources":["../../../../.svelte-kit/output/server/chunks/api-token-codec.js"],"sourcesContent":["import { t as createTokenCodec } from \"./token-codec.js\";\nimport { randomBytes } from \"node:crypto\";\nimport { crc32 } from \"node:zlib\";\n//#region ../server/src/tokens/api-token-codec.ts\n/**\n* API token format: `selva_` + 30 base62 random chars + 6 base62 chars of\n* CRC32 over the random part. 42 chars total.\n*\n* - The prefix is what secret scanners match on; `sk_` was dropped because\n*   Stripe and OpenAI keys share it.\n* - 30 base62 chars carry ~178 bits of entropy.\n* - The checksum lets the resolver reject a typo or a truncated paste without\n*   a store lookup. It is not a MAC: the HMAC at rest is what authenticates.\n* - CRC32 tops out below 62^6, so 6 chars always fit; shorter values are\n*   left-padded with `0`.\n*/\nvar API_TOKEN_PREFIX = \"selva_\";\nvar RANDOM_LENGTH = 30;\nvar CHECKSUM_LENGTH = 6;\nvar TOKEN_LENGTH = 42;\nvar BASE62 = \"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\";\nvar BODY_PATTERN = /^[0-9A-Za-z]+$/;\nfunction randomBase62(length) {\n\tlet out = \"\";\n\twhile (out.length < length) for (const byte of randomBytes(length * 2)) {\n\t\tif (byte < 248) out += BASE62[byte % 62];\n\t\tif (out.length === length) break;\n\t}\n\treturn out;\n}\nfunction checksum(random) {\n\tlet n = crc32(random);\n\tlet out = \"\";\n\tfor (let i = 0; i < CHECKSUM_LENGTH; i++) {\n\t\tout = BASE62[n % 62] + out;\n\t\tn = Math.floor(n / 62);\n\t}\n\treturn out;\n}\n/**\n* Shape only, no secret needed. For spotting a key where it must not be, such\n* as a query string, without flagging text that merely starts with `selva_`.\n*/\nfunction looksLikeApiToken(value) {\n\treturn value.length === TOKEN_LENGTH && value.startsWith(\"selva_\") && BODY_PATTERN.test(value.slice(6));\n}\nfunction createApiTokenCodec(secret) {\n\treturn {\n\t\t...createTokenCodec({\n\t\t\tprefix: API_TOKEN_PREFIX,\n\t\t\tsecret\n\t\t}),\n\t\tmintRawToken() {\n\t\t\tconst random = randomBase62(RANDOM_LENGTH);\n\t\t\treturn API_TOKEN_PREFIX + random + checksum(random);\n\t\t},\n\t\thasValidChecksum(raw) {\n\t\t\tif (!looksLikeApiToken(raw)) return false;\n\t\t\tconst body = raw.slice(6);\n\t\t\treturn checksum(body.slice(0, RANDOM_LENGTH)) === body.slice(RANDOM_LENGTH);\n\t\t}\n\t};\n}\n//#endregion\nexport { createApiTokenCodec as n, looksLikeApiToken as r, API_TOKEN_PREFIX as t };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,gBAAgB,GAAG,QAAQ;AAC/B,IAAI,aAAa,GAAG,EAAE;AACtB,IAAI,eAAe,GAAG,CAAC;AACvB,IAAI,YAAY,GAAG,EAAE;AACrB,IAAI,MAAM,GAAG,gEAAgE;AAC7E,IAAI,YAAY,GAAG,gBAAgB;AACnC,SAAS,YAAY,CAAC,MAAM,EAAE;AAC9B,CAAC,IAAI,GAAG,GAAG,EAAE;AACb,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,MAAM,EAAE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;AACzE,EAAE,IAAI,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;AAC1C,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE;AAC7B,CAAC;AACD,CAAC,OAAO,GAAG;AACX;AACA,SAAS,QAAQ,CAAC,MAAM,EAAE;AAC1B,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC,IAAI,GAAG,GAAG,EAAE;AACb,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE;AAC3C,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG;AAC5B,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;AACxB,CAAC;AACD,CAAC,OAAO,GAAG;AACX;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,KAAK,EAAE;AAClC,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxG;AACA,SAAS,mBAAmB,CAAC,MAAM,EAAE;AACrC,CAAC,OAAO;AACR,EAAE,GAAG,gBAAgB,CAAC;AACtB,GAAG,MAAM,EAAE,gBAAgB;AAC3B,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,YAAY,GAAG;AACjB,GAAG,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC;AAC7C,GAAG,OAAO,gBAAgB,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;AACtD,EAAE,CAAC;AACH,EAAE,gBAAgB,CAAC,GAAG,EAAE;AACxB,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK;AAC5C,GAAG,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5B,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;AAC9E,EAAE;AACF,EAAE;AACF;;;;"}