@shware/http 2.11.3 → 2.12.0

package/dist/hono/csrf.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hono/csrf.ts"],"sourcesContent":["import { timingSafeEqual } from 'crypto';\nimport type { MiddlewareHandler } from 'hono';\nimport { getCookie } from 'hono/cookie';\nimport { METHOD_NAME_ALL } from 'hono/router';\nimport { RegExpRouter } from 'hono/router/reg-exp-router';\nimport { SmartRouter } from 'hono/router/smart-router';\nimport { TrieRouter } from 'hono/router/trie-router';\nimport { Status } from '../error/status';\n\ntype HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';\n\nexport type CSRFIgnoreRule = string | { path: string; methods?: [HTTPMethod, ...HTTPMethod[]] };\n\nexport interface CSRFConfig {\n  /**\n   * Cookie name for CSRF token\n   * @default 'XSRF-TOKEN'\n   */\n  cookieName?: string;\n\n  /**\n   * Header name for CSRF token\n   * @default 'X-XSRF-TOKEN'\n   */\n  headerName?: string;\n\n  /**\n   * Ignore rules for specific paths and methods\n   * @example\n   * [\n   *   { path: '/api/webhook/*', methods: ['POST'] },\n   *   { path: '/auth/apple/callback' }, // ignores all methods\n   * ]\n   */\n  ignores?: CSRFIgnoreRule[];\n\n  /**\n   * Skip CSRF check for these methods\n   * @default ['GET', 'HEAD', 'OPTIONS']\n   */\n  safeMethods?: HTTPMethod[];\n\n  /**\n   * Origin allowed to bypass CSRF check\n   * @default undefined\n   */\n  origin?: string[];\n\n  /**\n   * Sec-Fetch-Site allowed to bypass CSRF check\n   * @default undefined\n   */\n  secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;\n\n  /**\n   * Custom error message\n   * @default 'CSRF token validation failed'\n   */\n  errorMessage?: string;\n}\n\n/** use timing safe compare to prevent timing attack */\nfunction safeCompare(a: string, b: string): boolean {\n  if (typeof a !== 'string' || typeof b !== 'string') return false;\n  if (a.length === 0 || b.length === 0) return false;\n\n  const bufferA = Buffer.from(a, 'utf-8');\n  const bufferB = Buffer.from(b, 'utf-8');\n  if (bufferA.length !== bufferB.length) return false;\n  return timingSafeEqual(bufferA, bufferB);\n}\n\n/**\n * Create CSRF protection middleware\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { csrf } from '@shware/http/hono';\n *\n * const app = new Hono();\n *\n * // basic usage\n * app.use(csrf());\n *\n * // with configuration\n * app.use(csrf({\n *   cookieName: 'csrf-token',\n *   headerName: 'X-CSRF-Token',\n *   ignores: [\n *     { path: '/api/webhook/*', methods: ['POST'] },\n *     { path: '/auth/apple/callback' },\n *   ]\n * }));\n * ```\n */\nexport function csrf(config: CSRFConfig = {}): MiddlewareHandler {\n  const cookieName = config.cookieName ?? 'XSRF-TOKEN';\n  const headerName = config.headerName ?? 'X-XSRF-TOKEN';\n  const safeMethods = new Set(config.safeMethods ?? ['GET', 'HEAD', 'OPTIONS']);\n  const errorMessage = config.errorMessage ?? 'CSRF token validation failed';\n\n  // initialize router for matching ignore rules\n  const router = new SmartRouter<boolean>({\n    routers: [new RegExpRouter(), new TrieRouter()],\n  });\n\n  // register ignore rules\n  if (config.ignores) {\n    for (const rule of config.ignores) {\n      if (typeof rule === 'string') {\n        router.add(METHOD_NAME_ALL, rule, true);\n      } else if (rule.methods && rule.methods.length > 0) {\n        for (const method of rule.methods) {\n          router.add(method, rule.path, true);\n        }\n      } else {\n        // if no methods are specified, ignore all methods\n        router.add(METHOD_NAME_ALL, rule.path, true);\n      }\n    }\n  }\n\n  // return middleware\n  return async (c, next) => {\n    const method = c.req.method;\n    const path = c.req.path;\n\n    // check if the request should be ignored\n    // 1. ignore safe methods\n    if (safeMethods.has(method)) {\n      await next();\n      return;\n    }\n\n    // 2. ignore configured origin\n    if (config.origin && config.origin.includes(c.req.header('origin') ?? '')) {\n      await next();\n      return;\n    }\n\n    // 3. ignore configured secFetchSite\n    if (\n      config.secFetchSite &&\n      config.secFetchSite.includes((c.req.header('sec-fetch-site') ?? '') as never)\n    ) {\n      await next();\n      return;\n    }\n\n    // 4. ignore configured ignore rules\n    const [matched] = router.match(method, path);\n    if (matched.length > 0) {\n      await next();\n      return;\n    }\n\n    const cookieToken = getCookie(c, cookieName);\n    const headerToken = c.req.header(headerName);\n\n    if (!cookieToken || !headerToken) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    if (!safeCompare(cookieToken, headerToken)) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    await next();\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAgC;AAEhC,oBAA0B;AAC1B,oBAAgC;AAChC,4BAA6B;AAC7B,0BAA4B;AAC5B,yBAA2B;AAC3B,oBAAuB;AAuDvB,SAAS,YAAY,GAAW,GAAoB;AAClD,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,EAAE,WAAW,KAAK,EAAE,WAAW,EAAG,QAAO;AAE7C,QAAM,UAAU,OAAO,KAAK,GAAG,OAAO;AACtC,QAAM,UAAU,OAAO,KAAK,GAAG,OAAO;AACtC,MAAI,QAAQ,WAAW,QAAQ,OAAQ,QAAO;AAC9C,aAAO,+BAAgB,SAAS,OAAO;AACzC;AA0BO,SAAS,KAAK,SAAqB,CAAC,GAAsB;AAC/D,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,cAAc,IAAI,IAAI,OAAO,eAAe,CAAC,OAAO,QAAQ,SAAS,CAAC;AAC5E,QAAM,eAAe,OAAO,gBAAgB;AAG5C,QAAM,SAAS,IAAI,gCAAqB;AAAA,IACtC,SAAS,CAAC,IAAI,mCAAa,GAAG,IAAI,8BAAW,CAAC;AAAA,EAChD,CAAC;AAGD,MAAI,OAAO,SAAS;AAClB,eAAW,QAAQ,OAAO,SAAS;AACjC,UAAI,OAAO,SAAS,UAAU;AAC5B,eAAO,IAAI,+BAAiB,MAAM,IAAI;AAAA,MACxC,WAAW,KAAK,WAAW,KAAK,QAAQ,SAAS,GAAG;AAClD,mBAAW,UAAU,KAAK,SAAS;AACjC,iBAAO,IAAI,QAAQ,KAAK,MAAM,IAAI;AAAA,QACpC;AAAA,MACF,OAAO;AAEL,eAAO,IAAI,+BAAiB,KAAK,MAAM,IAAI;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AAGA,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,SAAS,EAAE,IAAI;AACrB,UAAM,OAAO,EAAE,IAAI;AAInB,QAAI,YAAY,IAAI,MAAM,GAAG;AAC3B,YAAM,KAAK;AACX;AAAA,IACF;AAGA,QAAI,OAAO,UAAU,OAAO,OAAO,SAAS,EAAE,IAAI,OAAO,QAAQ,KAAK,EAAE,GAAG;AACzE,YAAM,KAAK;AACX;AAAA,IACF;AAGA,QACE,OAAO,gBACP,OAAO,aAAa,SAAU,EAAE,IAAI,OAAO,gBAAgB,KAAK,EAAY,GAC5E;AACA,YAAM,KAAK;AACX;AAAA,IACF;AAGA,UAAM,CAAC,OAAO,IAAI,OAAO,MAAM,QAAQ,IAAI;AAC3C,QAAI,QAAQ,SAAS,GAAG;AACtB,YAAM,KAAK;AACX;AAAA,IACF;AAEA,UAAM,kBAAc,yBAAU,GAAG,UAAU;AAC3C,UAAM,cAAc,EAAE,IAAI,OAAO,UAAU;AAE3C,QAAI,CAAC,eAAe,CAAC,aAAa;AAChC,YAAM,qBAAO,iBAAiB,YAAY,EAAE,MAAM;AAAA,IACpD;AAEA,QAAI,CAAC,YAAY,aAAa,WAAW,GAAG;AAC1C,YAAM,qBAAO,iBAAiB,YAAY,EAAE,MAAM;AAAA,IACpD;AAEA,UAAM,KAAK;AAAA,EACb;AACF;","names":[]}
+{"version":3,"file":"csrf.cjs","names":["SmartRouter","RegExpRouter","TrieRouter","METHOD_NAME_ALL","Status"],"sources":["../../src/hono/csrf.ts"],"sourcesContent":["import { timingSafeEqual } from 'node:crypto';\nimport type { MiddlewareHandler } from 'hono';\nimport { getCookie } from 'hono/cookie';\nimport { METHOD_NAME_ALL } from 'hono/router';\nimport { RegExpRouter } from 'hono/router/reg-exp-router';\nimport { SmartRouter } from 'hono/router/smart-router';\nimport { TrieRouter } from 'hono/router/trie-router';\nimport { Status } from '../error/status';\n\ntype HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';\n\nexport type CSRFIgnoreRule = string | { path: string; methods?: [HTTPMethod, ...HTTPMethod[]] };\n\nexport interface CSRFConfig {\n  /**\n   * Cookie name for CSRF token\n   * @default 'XSRF-TOKEN'\n   */\n  cookieName?: string;\n\n  /**\n   * Header name for CSRF token\n   * @default 'X-XSRF-TOKEN'\n   */\n  headerName?: string;\n\n  /**\n   * Ignore rules for specific paths and methods\n   * @example\n   * [\n   *   { path: '/api/webhook/*', methods: ['POST'] },\n   *   { path: '/auth/apple/callback' }, // ignores all methods\n   * ]\n   */\n  ignores?: CSRFIgnoreRule[];\n\n  /**\n   * Skip CSRF check for these methods\n   * @default ['GET', 'HEAD', 'OPTIONS']\n   */\n  safeMethods?: HTTPMethod[];\n\n  /**\n   * Origin allowed to bypass CSRF check\n   * @default undefined\n   */\n  origin?: string[];\n\n  /**\n   * Sec-Fetch-Site allowed to bypass CSRF check\n   * @default undefined\n   */\n  secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;\n\n  /**\n   * Custom error message\n   * @default 'CSRF token validation failed'\n   */\n  errorMessage?: string;\n}\n\n/** use timing safe compare to prevent timing attack */\nfunction safeCompare(a: string, b: string): boolean {\n  if (typeof a !== 'string' || typeof b !== 'string') return false;\n  if (a.length === 0 || b.length === 0) return false;\n\n  const bufferA = Buffer.from(a, 'utf-8');\n  const bufferB = Buffer.from(b, 'utf-8');\n  if (bufferA.length !== bufferB.length) return false;\n  return timingSafeEqual(bufferA, bufferB);\n}\n\n/**\n * Create CSRF protection middleware\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { csrf } from '@shware/http/hono';\n *\n * const app = new Hono();\n *\n * // basic usage\n * app.use(csrf());\n *\n * // with configuration\n * app.use(csrf({\n *   cookieName: 'csrf-token',\n *   headerName: 'X-CSRF-Token',\n *   ignores: [\n *     { path: '/api/webhook/*', methods: ['POST'] },\n *     { path: '/auth/apple/callback' },\n *   ]\n * }));\n * ```\n */\nexport function csrf(config: CSRFConfig = {}): MiddlewareHandler {\n  const cookieName = config.cookieName ?? 'XSRF-TOKEN';\n  const headerName = config.headerName ?? 'X-XSRF-TOKEN';\n  const safeMethods = new Set(config.safeMethods ?? ['GET', 'HEAD', 'OPTIONS']);\n  const errorMessage = config.errorMessage ?? 'CSRF token validation failed';\n\n  // initialize router for matching ignore rules\n  const router = new SmartRouter<boolean>({\n    routers: [new RegExpRouter(), new TrieRouter()],\n  });\n\n  // register ignore rules\n  if (config.ignores) {\n    for (const rule of config.ignores) {\n      if (typeof rule === 'string') {\n        router.add(METHOD_NAME_ALL, rule, true);\n      } else if (rule.methods && rule.methods.length > 0) {\n        for (const method of rule.methods) {\n          router.add(method, rule.path, true);\n        }\n      } else {\n        // if no methods are specified, ignore all methods\n        router.add(METHOD_NAME_ALL, rule.path, true);\n      }\n    }\n  }\n\n  // return middleware\n  return async (c, next) => {\n    const method = c.req.method;\n    const path = c.req.path;\n\n    // check if the request should be ignored\n    // 1. ignore safe methods\n    if (safeMethods.has(method)) {\n      await next();\n      return;\n    }\n\n    // 2. ignore configured origin\n    if (config.origin && config.origin.includes(c.req.header('origin') ?? '')) {\n      await next();\n      return;\n    }\n\n    // 3. ignore configured secFetchSite\n    if (\n      config.secFetchSite &&\n      config.secFetchSite.includes((c.req.header('sec-fetch-site') ?? '') as never)\n    ) {\n      await next();\n      return;\n    }\n\n    // 4. ignore configured ignore rules\n    const [matched] = router.match(method, path);\n    if (matched.length > 0) {\n      await next();\n      return;\n    }\n\n    const cookieToken = getCookie(c, cookieName);\n    const headerToken = c.req.header(headerName);\n\n    if (!cookieToken || !headerToken) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    if (!safeCompare(cookieToken, headerToken)) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    await next();\n  };\n}\n"],"mappings":";;;;;;;;;;AA8DA,SAAS,YAAY,GAAW,GAAoB;CAClD,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM,UAAU,OAAO;CAC3D,IAAI,EAAE,WAAW,KAAK,EAAE,WAAW,GAAG,OAAO;CAE7C,MAAM,UAAU,OAAO,KAAK,GAAG,OAAO;CACtC,MAAM,UAAU,OAAO,KAAK,GAAG,OAAO;CACtC,IAAI,QAAQ,WAAW,QAAQ,QAAQ,OAAO;CAC9C,QAAA,GAAA,YAAA,gBAAA,CAAuB,SAAS,OAAO;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,KAAK,SAAqB,CAAC,GAAsB;CAC/D,MAAM,aAAa,OAAO,cAAc;CACxC,MAAM,aAAa,OAAO,cAAc;CACxC,MAAM,cAAc,IAAI,IAAI,OAAO,eAAe;EAAC;EAAO;EAAQ;CAAS,CAAC;CAC5E,MAAM,eAAe,OAAO,gBAAgB;CAG5C,MAAM,SAAS,IAAIA,yBAAAA,YAAqB,EACtC,SAAS,CAAC,IAAIC,2BAAAA,aAAa,GAAG,IAAIC,wBAAAA,WAAW,CAAC,EAChD,CAAC;CAGD,IAAI,OAAO,SACT,KAAK,MAAM,QAAQ,OAAO,SACxB,IAAI,OAAO,SAAS,UAClB,OAAO,IAAIC,YAAAA,iBAAiB,MAAM,IAAI;MACjC,IAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,GAC/C,KAAK,MAAM,UAAU,KAAK,SACxB,OAAO,IAAI,QAAQ,KAAK,MAAM,IAAI;MAIpC,OAAO,IAAIA,YAAAA,iBAAiB,KAAK,MAAM,IAAI;CAMjD,OAAO,OAAO,GAAG,SAAS;EACxB,MAAM,SAAS,EAAE,IAAI;EACrB,MAAM,OAAO,EAAE,IAAI;EAInB,IAAI,YAAY,IAAI,MAAM,GAAG;GAC3B,MAAM,KAAK;GACX;EACF;EAGA,IAAI,OAAO,UAAU,OAAO,OAAO,SAAS,EAAE,IAAI,OAAO,QAAQ,KAAK,EAAE,GAAG;GACzE,MAAM,KAAK;GACX;EACF;EAGA,IACE,OAAO,gBACP,OAAO,aAAa,SAAU,EAAE,IAAI,OAAO,gBAAgB,KAAK,EAAY,GAC5E;GACA,MAAM,KAAK;GACX;EACF;EAGA,MAAM,CAAC,WAAW,OAAO,MAAM,QAAQ,IAAI;EAC3C,IAAI,QAAQ,SAAS,GAAG;GACtB,MAAM,KAAK;GACX;EACF;EAEA,MAAM,eAAA,GAAA,YAAA,UAAA,CAAwB,GAAG,UAAU;EAC3C,MAAM,cAAc,EAAE,IAAI,OAAO,UAAU;EAE3C,IAAI,CAAC,eAAe,CAAC,aACnB,MAAMC,qBAAAA,OAAO,iBAAiB,YAAY,CAAC,CAAC,MAAM;EAGpD,IAAI,CAAC,YAAY,aAAa,WAAW,GACvC,MAAMA,qBAAAA,OAAO,iBAAiB,YAAY,CAAC,CAAC,MAAM;EAGpD,MAAM,KAAK;CACb;AACF"}

package/dist/hono/csrf.d.cts

@@ -1,50 +1,50 @@
-import { MiddlewareHandler } from 'hono';
-
+import { MiddlewareHandler } from "hono";
+//#region src/hono/csrf.d.ts
 type HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';
 type CSRFIgnoreRule = string | {
-    path: string;
-    methods?: [HTTPMethod, ...HTTPMethod[]];
+  path: string;
+  methods?: [HTTPMethod, ...HTTPMethod[]];
 };
 interface CSRFConfig {
-    /**
-     * Cookie name for CSRF token
-     * @default 'XSRF-TOKEN'
-     */
-    cookieName?: string;
-    /**
-     * Header name for CSRF token
-     * @default 'X-XSRF-TOKEN'
-     */
-    headerName?: string;
-    /**
-     * Ignore rules for specific paths and methods
-     * @example
-     * [
-     *   { path: '/api/webhook/*', methods: ['POST'] },
-     *   { path: '/auth/apple/callback' }, // ignores all methods
-     * ]
-     */
-    ignores?: CSRFIgnoreRule[];
-    /**
-     * Skip CSRF check for these methods
-     * @default ['GET', 'HEAD', 'OPTIONS']
-     */
-    safeMethods?: HTTPMethod[];
-    /**
-     * Origin allowed to bypass CSRF check
-     * @default undefined
-     */
-    origin?: string[];
-    /**
-     * Sec-Fetch-Site allowed to bypass CSRF check
-     * @default undefined
-     */
-    secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;
-    /**
-     * Custom error message
-     * @default 'CSRF token validation failed'
-     */
-    errorMessage?: string;
+  /**
+   * Cookie name for CSRF token
+   * @default 'XSRF-TOKEN'
+   */
+  cookieName?: string;
+  /**
+   * Header name for CSRF token
+   * @default 'X-XSRF-TOKEN'
+   */
+  headerName?: string;
+  /**
+   * Ignore rules for specific paths and methods
+   * @example
+   * [
+   *   { path: '/api/webhook/*', methods: ['POST'] },
+   *   { path: '/auth/apple/callback' }, // ignores all methods
+   * ]
+   */
+  ignores?: CSRFIgnoreRule[];
+  /**
+   * Skip CSRF check for these methods
+   * @default ['GET', 'HEAD', 'OPTIONS']
+   */
+  safeMethods?: HTTPMethod[];
+  /**
+   * Origin allowed to bypass CSRF check
+   * @default undefined
+   */
+  origin?: string[];
+  /**
+   * Sec-Fetch-Site allowed to bypass CSRF check
+   * @default undefined
+   */
+  secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;
+  /**
+   * Custom error message
+   * @default 'CSRF token validation failed'
+   */
+  errorMessage?: string;
 }
 /**
  * Create CSRF protection middleware
@@ -71,5 +71,6 @@ interface CSRFConfig {
  * ```
  */
 declare function csrf(config?: CSRFConfig): MiddlewareHandler;
-
-export { type CSRFConfig, type CSRFIgnoreRule, csrf };
+//#endregion
+export { CSRFConfig, CSRFIgnoreRule, csrf };
+//# sourceMappingURL=csrf.d.cts.map

package/dist/hono/csrf.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.cts","names":[],"sources":["../../src/hono/csrf.ts"],"mappings":";;KASK;KAEO;EAA4B;EAAc,WAAW,eAAe;;UAE/D;;;;;EAKf;;;;;EAMA;;;;;;;;;EAUA,UAAU;;;;;EAMV,cAAc;;;;;EAMd;;;;;EAMA,eAAe;;;;;EAMf;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsCc,KAAK,SAAQ,aAAkB"}

package/dist/hono/csrf.d.mts

@@ -0,0 +1,76 @@
+import { MiddlewareHandler } from "hono";
+//#region src/hono/csrf.d.ts
+type HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';
+type CSRFIgnoreRule = string | {
+  path: string;
+  methods?: [HTTPMethod, ...HTTPMethod[]];
+};
+interface CSRFConfig {
+  /**
+   * Cookie name for CSRF token
+   * @default 'XSRF-TOKEN'
+   */
+  cookieName?: string;
+  /**
+   * Header name for CSRF token
+   * @default 'X-XSRF-TOKEN'
+   */
+  headerName?: string;
+  /**
+   * Ignore rules for specific paths and methods
+   * @example
+   * [
+   *   { path: '/api/webhook/*', methods: ['POST'] },
+   *   { path: '/auth/apple/callback' }, // ignores all methods
+   * ]
+   */
+  ignores?: CSRFIgnoreRule[];
+  /**
+   * Skip CSRF check for these methods
+   * @default ['GET', 'HEAD', 'OPTIONS']
+   */
+  safeMethods?: HTTPMethod[];
+  /**
+   * Origin allowed to bypass CSRF check
+   * @default undefined
+   */
+  origin?: string[];
+  /**
+   * Sec-Fetch-Site allowed to bypass CSRF check
+   * @default undefined
+   */
+  secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;
+  /**
+   * Custom error message
+   * @default 'CSRF token validation failed'
+   */
+  errorMessage?: string;
+}
+/**
+ * Create CSRF protection middleware
+ *
+ * @example
+ * ```ts
+ * import { Hono } from 'hono';
+ * import { csrf } from '@shware/http/hono';
+ *
+ * const app = new Hono();
+ *
+ * // basic usage
+ * app.use(csrf());
+ *
+ * // with configuration
+ * app.use(csrf({
+ *   cookieName: 'csrf-token',
+ *   headerName: 'X-CSRF-Token',
+ *   ignores: [
+ *     { path: '/api/webhook/*', methods: ['POST'] },
+ *     { path: '/auth/apple/callback' },
+ *   ]
+ * }));
+ * ```
+ */
+declare function csrf(config?: CSRFConfig): MiddlewareHandler;
+//#endregion
+export { CSRFConfig, CSRFIgnoreRule, csrf };
+//# sourceMappingURL=csrf.d.mts.map

package/dist/hono/csrf.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.mts","names":[],"sources":["../../src/hono/csrf.ts"],"mappings":";;KASK;KAEO;EAA4B;EAAc,WAAW,eAAe;;UAE/D;;;;;EAKf;;;;;EAMA;;;;;;;;;EAUA,UAAU;;;;;EAMV,cAAc;;;;;EAMd;;;;;EAMA,eAAe;;;;;EAMf;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsCc,KAAK,SAAQ,aAAkB"}

package/dist/hono/csrf.mjs

@@ -1,72 +1,85 @@
-// src/hono/csrf.ts
-import { timingSafeEqual } from "crypto";
-import { getCookie } from "hono/cookie";
+import { Status } from "../error/status.mjs";
 import { METHOD_NAME_ALL } from "hono/router";
 import { RegExpRouter } from "hono/router/reg-exp-router";
 import { SmartRouter } from "hono/router/smart-router";
 import { TrieRouter } from "hono/router/trie-router";
-import { Status } from "../error/status.mjs";
+import { timingSafeEqual } from "node:crypto";
+import { getCookie } from "hono/cookie";
+//#region src/hono/csrf.ts
+/** use timing safe compare to prevent timing attack */
 function safeCompare(a, b) {
-  if (typeof a !== "string" || typeof b !== "string") return false;
-  if (a.length === 0 || b.length === 0) return false;
-  const bufferA = Buffer.from(a, "utf-8");
-  const bufferB = Buffer.from(b, "utf-8");
-  if (bufferA.length !== bufferB.length) return false;
-  return timingSafeEqual(bufferA, bufferB);
+	if (typeof a !== "string" || typeof b !== "string") return false;
+	if (a.length === 0 || b.length === 0) return false;
+	const bufferA = Buffer.from(a, "utf-8");
+	const bufferB = Buffer.from(b, "utf-8");
+	if (bufferA.length !== bufferB.length) return false;
+	return timingSafeEqual(bufferA, bufferB);
 }
+/**
+* Create CSRF protection middleware
+*
+* @example
+* ```ts
+* import { Hono } from 'hono';
+* import { csrf } from '@shware/http/hono';
+*
+* const app = new Hono();
+*
+* // basic usage
+* app.use(csrf());
+*
+* // with configuration
+* app.use(csrf({
+*   cookieName: 'csrf-token',
+*   headerName: 'X-CSRF-Token',
+*   ignores: [
+*     { path: '/api/webhook/*', methods: ['POST'] },
+*     { path: '/auth/apple/callback' },
+*   ]
+* }));
+* ```
+*/
 function csrf(config = {}) {
-  const cookieName = config.cookieName ?? "XSRF-TOKEN";
-  const headerName = config.headerName ?? "X-XSRF-TOKEN";
-  const safeMethods = new Set(config.safeMethods ?? ["GET", "HEAD", "OPTIONS"]);
-  const errorMessage = config.errorMessage ?? "CSRF token validation failed";
-  const router = new SmartRouter({
-    routers: [new RegExpRouter(), new TrieRouter()]
-  });
-  if (config.ignores) {
-    for (const rule of config.ignores) {
-      if (typeof rule === "string") {
-        router.add(METHOD_NAME_ALL, rule, true);
-      } else if (rule.methods && rule.methods.length > 0) {
-        for (const method of rule.methods) {
-          router.add(method, rule.path, true);
-        }
-      } else {
-        router.add(METHOD_NAME_ALL, rule.path, true);
-      }
-    }
-  }
-  return async (c, next) => {
-    const method = c.req.method;
-    const path = c.req.path;
-    if (safeMethods.has(method)) {
-      await next();
-      return;
-    }
-    if (config.origin && config.origin.includes(c.req.header("origin") ?? "")) {
-      await next();
-      return;
-    }
-    if (config.secFetchSite && config.secFetchSite.includes(c.req.header("sec-fetch-site") ?? "")) {
-      await next();
-      return;
-    }
-    const [matched] = router.match(method, path);
-    if (matched.length > 0) {
-      await next();
-      return;
-    }
-    const cookieToken = getCookie(c, cookieName);
-    const headerToken = c.req.header(headerName);
-    if (!cookieToken || !headerToken) {
-      throw Status.permissionDenied(errorMessage).error();
-    }
-    if (!safeCompare(cookieToken, headerToken)) {
-      throw Status.permissionDenied(errorMessage).error();
-    }
-    await next();
-  };
+	const cookieName = config.cookieName ?? "XSRF-TOKEN";
+	const headerName = config.headerName ?? "X-XSRF-TOKEN";
+	const safeMethods = new Set(config.safeMethods ?? [
+		"GET",
+		"HEAD",
+		"OPTIONS"
+	]);
+	const errorMessage = config.errorMessage ?? "CSRF token validation failed";
+	const router = new SmartRouter({ routers: [new RegExpRouter(), new TrieRouter()] });
+	if (config.ignores) for (const rule of config.ignores) if (typeof rule === "string") router.add(METHOD_NAME_ALL, rule, true);
+	else if (rule.methods && rule.methods.length > 0) for (const method of rule.methods) router.add(method, rule.path, true);
+	else router.add(METHOD_NAME_ALL, rule.path, true);
+	return async (c, next) => {
+		const method = c.req.method;
+		const path = c.req.path;
+		if (safeMethods.has(method)) {
+			await next();
+			return;
+		}
+		if (config.origin && config.origin.includes(c.req.header("origin") ?? "")) {
+			await next();
+			return;
+		}
+		if (config.secFetchSite && config.secFetchSite.includes(c.req.header("sec-fetch-site") ?? "")) {
+			await next();
+			return;
+		}
+		const [matched] = router.match(method, path);
+		if (matched.length > 0) {
+			await next();
+			return;
+		}
+		const cookieToken = getCookie(c, cookieName);
+		const headerToken = c.req.header(headerName);
+		if (!cookieToken || !headerToken) throw Status.permissionDenied(errorMessage).error();
+		if (!safeCompare(cookieToken, headerToken)) throw Status.permissionDenied(errorMessage).error();
+		await next();
+	};
 }
-export {
-  csrf
-};
+//#endregion
+export { csrf };
+
 //# sourceMappingURL=csrf.mjs.map

package/dist/hono/csrf.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hono/csrf.ts"],"sourcesContent":["import { timingSafeEqual } from 'crypto';\nimport type { MiddlewareHandler } from 'hono';\nimport { getCookie } from 'hono/cookie';\nimport { METHOD_NAME_ALL } from 'hono/router';\nimport { RegExpRouter } from 'hono/router/reg-exp-router';\nimport { SmartRouter } from 'hono/router/smart-router';\nimport { TrieRouter } from 'hono/router/trie-router';\nimport { Status } from '../error/status';\n\ntype HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';\n\nexport type CSRFIgnoreRule = string | { path: string; methods?: [HTTPMethod, ...HTTPMethod[]] };\n\nexport interface CSRFConfig {\n  /**\n   * Cookie name for CSRF token\n   * @default 'XSRF-TOKEN'\n   */\n  cookieName?: string;\n\n  /**\n   * Header name for CSRF token\n   * @default 'X-XSRF-TOKEN'\n   */\n  headerName?: string;\n\n  /**\n   * Ignore rules for specific paths and methods\n   * @example\n   * [\n   *   { path: '/api/webhook/*', methods: ['POST'] },\n   *   { path: '/auth/apple/callback' }, // ignores all methods\n   * ]\n   */\n  ignores?: CSRFIgnoreRule[];\n\n  /**\n   * Skip CSRF check for these methods\n   * @default ['GET', 'HEAD', 'OPTIONS']\n   */\n  safeMethods?: HTTPMethod[];\n\n  /**\n   * Origin allowed to bypass CSRF check\n   * @default undefined\n   */\n  origin?: string[];\n\n  /**\n   * Sec-Fetch-Site allowed to bypass CSRF check\n   * @default undefined\n   */\n  secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;\n\n  /**\n   * Custom error message\n   * @default 'CSRF token validation failed'\n   */\n  errorMessage?: string;\n}\n\n/** use timing safe compare to prevent timing attack */\nfunction safeCompare(a: string, b: string): boolean {\n  if (typeof a !== 'string' || typeof b !== 'string') return false;\n  if (a.length === 0 || b.length === 0) return false;\n\n  const bufferA = Buffer.from(a, 'utf-8');\n  const bufferB = Buffer.from(b, 'utf-8');\n  if (bufferA.length !== bufferB.length) return false;\n  return timingSafeEqual(bufferA, bufferB);\n}\n\n/**\n * Create CSRF protection middleware\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { csrf } from '@shware/http/hono';\n *\n * const app = new Hono();\n *\n * // basic usage\n * app.use(csrf());\n *\n * // with configuration\n * app.use(csrf({\n *   cookieName: 'csrf-token',\n *   headerName: 'X-CSRF-Token',\n *   ignores: [\n *     { path: '/api/webhook/*', methods: ['POST'] },\n *     { path: '/auth/apple/callback' },\n *   ]\n * }));\n * ```\n */\nexport function csrf(config: CSRFConfig = {}): MiddlewareHandler {\n  const cookieName = config.cookieName ?? 'XSRF-TOKEN';\n  const headerName = config.headerName ?? 'X-XSRF-TOKEN';\n  const safeMethods = new Set(config.safeMethods ?? ['GET', 'HEAD', 'OPTIONS']);\n  const errorMessage = config.errorMessage ?? 'CSRF token validation failed';\n\n  // initialize router for matching ignore rules\n  const router = new SmartRouter<boolean>({\n    routers: [new RegExpRouter(), new TrieRouter()],\n  });\n\n  // register ignore rules\n  if (config.ignores) {\n    for (const rule of config.ignores) {\n      if (typeof rule === 'string') {\n        router.add(METHOD_NAME_ALL, rule, true);\n      } else if (rule.methods && rule.methods.length > 0) {\n        for (const method of rule.methods) {\n          router.add(method, rule.path, true);\n        }\n      } else {\n        // if no methods are specified, ignore all methods\n        router.add(METHOD_NAME_ALL, rule.path, true);\n      }\n    }\n  }\n\n  // return middleware\n  return async (c, next) => {\n    const method = c.req.method;\n    const path = c.req.path;\n\n    // check if the request should be ignored\n    // 1. ignore safe methods\n    if (safeMethods.has(method)) {\n      await next();\n      return;\n    }\n\n    // 2. ignore configured origin\n    if (config.origin && config.origin.includes(c.req.header('origin') ?? '')) {\n      await next();\n      return;\n    }\n\n    // 3. ignore configured secFetchSite\n    if (\n      config.secFetchSite &&\n      config.secFetchSite.includes((c.req.header('sec-fetch-site') ?? '') as never)\n    ) {\n      await next();\n      return;\n    }\n\n    // 4. ignore configured ignore rules\n    const [matched] = router.match(method, path);\n    if (matched.length > 0) {\n      await next();\n      return;\n    }\n\n    const cookieToken = getCookie(c, cookieName);\n    const headerToken = c.req.header(headerName);\n\n    if (!cookieToken || !headerToken) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    if (!safeCompare(cookieToken, headerToken)) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    await next();\n  };\n}\n"],"mappings":";AAAA,SAAS,uBAAuB;AAEhC,SAAS,iBAAiB;AAC1B,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AAuDvB,SAAS,YAAY,GAAW,GAAoB;AAClD,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,EAAE,WAAW,KAAK,EAAE,WAAW,EAAG,QAAO;AAE7C,QAAM,UAAU,OAAO,KAAK,GAAG,OAAO;AACtC,QAAM,UAAU,OAAO,KAAK,GAAG,OAAO;AACtC,MAAI,QAAQ,WAAW,QAAQ,OAAQ,QAAO;AAC9C,SAAO,gBAAgB,SAAS,OAAO;AACzC;AA0BO,SAAS,KAAK,SAAqB,CAAC,GAAsB;AAC/D,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,cAAc,IAAI,IAAI,OAAO,eAAe,CAAC,OAAO,QAAQ,SAAS,CAAC;AAC5E,QAAM,eAAe,OAAO,gBAAgB;AAG5C,QAAM,SAAS,IAAI,YAAqB;AAAA,IACtC,SAAS,CAAC,IAAI,aAAa,GAAG,IAAI,WAAW,CAAC;AAAA,EAChD,CAAC;AAGD,MAAI,OAAO,SAAS;AAClB,eAAW,QAAQ,OAAO,SAAS;AACjC,UAAI,OAAO,SAAS,UAAU;AAC5B,eAAO,IAAI,iBAAiB,MAAM,IAAI;AAAA,MACxC,WAAW,KAAK,WAAW,KAAK,QAAQ,SAAS,GAAG;AAClD,mBAAW,UAAU,KAAK,SAAS;AACjC,iBAAO,IAAI,QAAQ,KAAK,MAAM,IAAI;AAAA,QACpC;AAAA,MACF,OAAO;AAEL,eAAO,IAAI,iBAAiB,KAAK,MAAM,IAAI;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AAGA,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,SAAS,EAAE,IAAI;AACrB,UAAM,OAAO,EAAE,IAAI;AAInB,QAAI,YAAY,IAAI,MAAM,GAAG;AAC3B,YAAM,KAAK;AACX;AAAA,IACF;AAGA,QAAI,OAAO,UAAU,OAAO,OAAO,SAAS,EAAE,IAAI,OAAO,QAAQ,KAAK,EAAE,GAAG;AACzE,YAAM,KAAK;AACX;AAAA,IACF;AAGA,QACE,OAAO,gBACP,OAAO,aAAa,SAAU,EAAE,IAAI,OAAO,gBAAgB,KAAK,EAAY,GAC5E;AACA,YAAM,KAAK;AACX;AAAA,IACF;AAGA,UAAM,CAAC,OAAO,IAAI,OAAO,MAAM,QAAQ,IAAI;AAC3C,QAAI,QAAQ,SAAS,GAAG;AACtB,YAAM,KAAK;AACX;AAAA,IACF;AAEA,UAAM,cAAc,UAAU,GAAG,UAAU;AAC3C,UAAM,cAAc,EAAE,IAAI,OAAO,UAAU;AAE3C,QAAI,CAAC,eAAe,CAAC,aAAa;AAChC,YAAM,OAAO,iBAAiB,YAAY,EAAE,MAAM;AAAA,IACpD;AAEA,QAAI,CAAC,YAAY,aAAa,WAAW,GAAG;AAC1C,YAAM,OAAO,iBAAiB,YAAY,EAAE,MAAM;AAAA,IACpD;AAEA,UAAM,KAAK;AAAA,EACb;AACF;","names":[]}
+{"version":3,"file":"csrf.mjs","names":[],"sources":["../../src/hono/csrf.ts"],"sourcesContent":["import { timingSafeEqual } from 'node:crypto';\nimport type { MiddlewareHandler } from 'hono';\nimport { getCookie } from 'hono/cookie';\nimport { METHOD_NAME_ALL } from 'hono/router';\nimport { RegExpRouter } from 'hono/router/reg-exp-router';\nimport { SmartRouter } from 'hono/router/smart-router';\nimport { TrieRouter } from 'hono/router/trie-router';\nimport { Status } from '../error/status';\n\ntype HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'HEAD' | 'OPTIONS';\n\nexport type CSRFIgnoreRule = string | { path: string; methods?: [HTTPMethod, ...HTTPMethod[]] };\n\nexport interface CSRFConfig {\n  /**\n   * Cookie name for CSRF token\n   * @default 'XSRF-TOKEN'\n   */\n  cookieName?: string;\n\n  /**\n   * Header name for CSRF token\n   * @default 'X-XSRF-TOKEN'\n   */\n  headerName?: string;\n\n  /**\n   * Ignore rules for specific paths and methods\n   * @example\n   * [\n   *   { path: '/api/webhook/*', methods: ['POST'] },\n   *   { path: '/auth/apple/callback' }, // ignores all methods\n   * ]\n   */\n  ignores?: CSRFIgnoreRule[];\n\n  /**\n   * Skip CSRF check for these methods\n   * @default ['GET', 'HEAD', 'OPTIONS']\n   */\n  safeMethods?: HTTPMethod[];\n\n  /**\n   * Origin allowed to bypass CSRF check\n   * @default undefined\n   */\n  origin?: string[];\n\n  /**\n   * Sec-Fetch-Site allowed to bypass CSRF check\n   * @default undefined\n   */\n  secFetchSite?: Array<'same-origin' | 'same-site' | 'none' | 'cross-origin'>;\n\n  /**\n   * Custom error message\n   * @default 'CSRF token validation failed'\n   */\n  errorMessage?: string;\n}\n\n/** use timing safe compare to prevent timing attack */\nfunction safeCompare(a: string, b: string): boolean {\n  if (typeof a !== 'string' || typeof b !== 'string') return false;\n  if (a.length === 0 || b.length === 0) return false;\n\n  const bufferA = Buffer.from(a, 'utf-8');\n  const bufferB = Buffer.from(b, 'utf-8');\n  if (bufferA.length !== bufferB.length) return false;\n  return timingSafeEqual(bufferA, bufferB);\n}\n\n/**\n * Create CSRF protection middleware\n *\n * @example\n * ```ts\n * import { Hono } from 'hono';\n * import { csrf } from '@shware/http/hono';\n *\n * const app = new Hono();\n *\n * // basic usage\n * app.use(csrf());\n *\n * // with configuration\n * app.use(csrf({\n *   cookieName: 'csrf-token',\n *   headerName: 'X-CSRF-Token',\n *   ignores: [\n *     { path: '/api/webhook/*', methods: ['POST'] },\n *     { path: '/auth/apple/callback' },\n *   ]\n * }));\n * ```\n */\nexport function csrf(config: CSRFConfig = {}): MiddlewareHandler {\n  const cookieName = config.cookieName ?? 'XSRF-TOKEN';\n  const headerName = config.headerName ?? 'X-XSRF-TOKEN';\n  const safeMethods = new Set(config.safeMethods ?? ['GET', 'HEAD', 'OPTIONS']);\n  const errorMessage = config.errorMessage ?? 'CSRF token validation failed';\n\n  // initialize router for matching ignore rules\n  const router = new SmartRouter<boolean>({\n    routers: [new RegExpRouter(), new TrieRouter()],\n  });\n\n  // register ignore rules\n  if (config.ignores) {\n    for (const rule of config.ignores) {\n      if (typeof rule === 'string') {\n        router.add(METHOD_NAME_ALL, rule, true);\n      } else if (rule.methods && rule.methods.length > 0) {\n        for (const method of rule.methods) {\n          router.add(method, rule.path, true);\n        }\n      } else {\n        // if no methods are specified, ignore all methods\n        router.add(METHOD_NAME_ALL, rule.path, true);\n      }\n    }\n  }\n\n  // return middleware\n  return async (c, next) => {\n    const method = c.req.method;\n    const path = c.req.path;\n\n    // check if the request should be ignored\n    // 1. ignore safe methods\n    if (safeMethods.has(method)) {\n      await next();\n      return;\n    }\n\n    // 2. ignore configured origin\n    if (config.origin && config.origin.includes(c.req.header('origin') ?? '')) {\n      await next();\n      return;\n    }\n\n    // 3. ignore configured secFetchSite\n    if (\n      config.secFetchSite &&\n      config.secFetchSite.includes((c.req.header('sec-fetch-site') ?? '') as never)\n    ) {\n      await next();\n      return;\n    }\n\n    // 4. ignore configured ignore rules\n    const [matched] = router.match(method, path);\n    if (matched.length > 0) {\n      await next();\n      return;\n    }\n\n    const cookieToken = getCookie(c, cookieName);\n    const headerToken = c.req.header(headerName);\n\n    if (!cookieToken || !headerToken) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    if (!safeCompare(cookieToken, headerToken)) {\n      throw Status.permissionDenied(errorMessage).error();\n    }\n\n    await next();\n  };\n}\n"],"mappings":";;;;;;;;;AA8DA,SAAS,YAAY,GAAW,GAAoB;CAClD,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM,UAAU,OAAO;CAC3D,IAAI,EAAE,WAAW,KAAK,EAAE,WAAW,GAAG,OAAO;CAE7C,MAAM,UAAU,OAAO,KAAK,GAAG,OAAO;CACtC,MAAM,UAAU,OAAO,KAAK,GAAG,OAAO;CACtC,IAAI,QAAQ,WAAW,QAAQ,QAAQ,OAAO;CAC9C,OAAO,gBAAgB,SAAS,OAAO;AACzC;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,SAAgB,KAAK,SAAqB,CAAC,GAAsB;CAC/D,MAAM,aAAa,OAAO,cAAc;CACxC,MAAM,aAAa,OAAO,cAAc;CACxC,MAAM,cAAc,IAAI,IAAI,OAAO,eAAe;EAAC;EAAO;EAAQ;CAAS,CAAC;CAC5E,MAAM,eAAe,OAAO,gBAAgB;CAG5C,MAAM,SAAS,IAAI,YAAqB,EACtC,SAAS,CAAC,IAAI,aAAa,GAAG,IAAI,WAAW,CAAC,EAChD,CAAC;CAGD,IAAI,OAAO,SACT,KAAK,MAAM,QAAQ,OAAO,SACxB,IAAI,OAAO,SAAS,UAClB,OAAO,IAAI,iBAAiB,MAAM,IAAI;MACjC,IAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,GAC/C,KAAK,MAAM,UAAU,KAAK,SACxB,OAAO,IAAI,QAAQ,KAAK,MAAM,IAAI;MAIpC,OAAO,IAAI,iBAAiB,KAAK,MAAM,IAAI;CAMjD,OAAO,OAAO,GAAG,SAAS;EACxB,MAAM,SAAS,EAAE,IAAI;EACrB,MAAM,OAAO,EAAE,IAAI;EAInB,IAAI,YAAY,IAAI,MAAM,GAAG;GAC3B,MAAM,KAAK;GACX;EACF;EAGA,IAAI,OAAO,UAAU,OAAO,OAAO,SAAS,EAAE,IAAI,OAAO,QAAQ,KAAK,EAAE,GAAG;GACzE,MAAM,KAAK;GACX;EACF;EAGA,IACE,OAAO,gBACP,OAAO,aAAa,SAAU,EAAE,IAAI,OAAO,gBAAgB,KAAK,EAAY,GAC5E;GACA,MAAM,KAAK;GACX;EACF;EAGA,MAAM,CAAC,WAAW,OAAO,MAAM,QAAQ,IAAI;EAC3C,IAAI,QAAQ,SAAS,GAAG;GACtB,MAAM,KAAK;GACX;EACF;EAEA,MAAM,cAAc,UAAU,GAAG,UAAU;EAC3C,MAAM,cAAc,EAAE,IAAI,OAAO,UAAU;EAE3C,IAAI,CAAC,eAAe,CAAC,aACnB,MAAM,OAAO,iBAAiB,YAAY,CAAC,CAAC,MAAM;EAGpD,IAAI,CAAC,YAAY,aAAa,WAAW,GACvC,MAAM,OAAO,iBAAiB,YAAY,CAAC,CAAC,MAAM;EAGpD,MAAM,KAAK;CACb;AACF"}

package/dist/hono/geolocation.cjs

@@ -1,37 +1,13 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/hono/geolocation.ts
-var geolocation_exports = {};
-__export(geolocation_exports, {
-  geolocation: () => geolocation
-});
-module.exports = __toCommonJS(geolocation_exports);
-var import_adapter = require("hono/adapter");
-var import_geolocation = require("../utils/geolocation.cjs");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_utils_geolocation = require("../utils/geolocation.cjs");
+let hono_adapter = require("hono/adapter");
+//#region src/hono/geolocation.ts
 function geolocation(c) {
-  if ((0, import_adapter.getRuntimeKey)() === "workerd") return (0, import_geolocation.getGeolocationFromCloudflare)(c.req.raw);
-  if (c.req.header("x-vercel-id")) return (0, import_geolocation.getGeolocationFromVercel)(c.req.raw);
-  return (0, import_geolocation.getGeolocationFromCloudfront)(c.req.raw);
+	if ((0, hono_adapter.getRuntimeKey)() === "workerd") return require_utils_geolocation.getGeolocationFromCloudflare(c.req.raw);
+	if (c.req.header("x-vercel-id")) return require_utils_geolocation.getGeolocationFromVercel(c.req.raw);
+	return require_utils_geolocation.getGeolocationFromCloudfront(c.req.raw);
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  geolocation
-});
+//#endregion
+exports.geolocation = geolocation;
+
 //# sourceMappingURL=geolocation.cjs.map

package/dist/hono/geolocation.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hono/geolocation.ts"],"sourcesContent":["import type { Context } from 'hono';\nimport { getRuntimeKey } from 'hono/adapter';\nimport {\n  type Geolocation,\n  getGeolocationFromCloudflare,\n  getGeolocationFromCloudfront,\n  getGeolocationFromVercel,\n} from '../utils/geolocation';\n\nexport function geolocation(c: Context): Geolocation {\n  if (getRuntimeKey() === 'workerd') return getGeolocationFromCloudflare(c.req.raw);\n  if (c.req.header('x-vercel-id')) return getGeolocationFromVercel(c.req.raw);\n  return getGeolocationFromCloudfront(c.req.raw);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,qBAA8B;AAC9B,yBAKO;AAEA,SAAS,YAAY,GAAyB;AACnD,UAAI,8BAAc,MAAM,UAAW,YAAO,iDAA6B,EAAE,IAAI,GAAG;AAChF,MAAI,EAAE,IAAI,OAAO,aAAa,EAAG,YAAO,6CAAyB,EAAE,IAAI,GAAG;AAC1E,aAAO,iDAA6B,EAAE,IAAI,GAAG;AAC/C;","names":[]}
+{"version":3,"file":"geolocation.cjs","names":["getGeolocationFromCloudflare","getGeolocationFromVercel","getGeolocationFromCloudfront"],"sources":["../../src/hono/geolocation.ts"],"sourcesContent":["import type { Context } from 'hono';\nimport { getRuntimeKey } from 'hono/adapter';\nimport {\n  type Geolocation,\n  getGeolocationFromCloudflare,\n  getGeolocationFromCloudfront,\n  getGeolocationFromVercel,\n} from '../utils/geolocation';\n\nexport function geolocation(c: Context): Geolocation {\n  if (getRuntimeKey() === 'workerd') return getGeolocationFromCloudflare(c.req.raw);\n  if (c.req.header('x-vercel-id')) return getGeolocationFromVercel(c.req.raw);\n  return getGeolocationFromCloudfront(c.req.raw);\n}\n"],"mappings":";;;;AASA,SAAgB,YAAY,GAAyB;CACnD,KAAA,GAAA,aAAA,cAAA,CAAkB,MAAM,WAAW,OAAOA,0BAAAA,6BAA6B,EAAE,IAAI,GAAG;CAChF,IAAI,EAAE,IAAI,OAAO,aAAa,GAAG,OAAOC,0BAAAA,yBAAyB,EAAE,IAAI,GAAG;CAC1E,OAAOC,0BAAAA,6BAA6B,EAAE,IAAI,GAAG;AAC/C"}

package/dist/hono/geolocation.d.cts

@@ -1,6 +1,7 @@
-import { Context } from 'hono';
-import { Geolocation } from '../utils/geolocation.cjs';
-
+import { Geolocation } from "../utils/geolocation.cjs";
+import { Context } from "hono";
+//#region src/hono/geolocation.d.ts
 declare function geolocation(c: Context): Geolocation;
-
+//#endregion
 export { geolocation };
+//# sourceMappingURL=geolocation.d.cts.map

package/dist/hono/geolocation.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geolocation.d.cts","names":[],"sources":["../../src/hono/geolocation.ts"],"mappings":";;;iBASgB,YAAY,GAAG,UAAU"}

package/dist/hono/geolocation.d.mts

@@ -0,0 +1,7 @@
+import { Geolocation } from "../utils/geolocation.mjs";
+import { Context } from "hono";
+//#region src/hono/geolocation.d.ts
+declare function geolocation(c: Context): Geolocation;
+//#endregion
+export { geolocation };
+//# sourceMappingURL=geolocation.d.mts.map

package/dist/hono/geolocation.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geolocation.d.mts","names":[],"sources":["../../src/hono/geolocation.ts"],"mappings":";;;iBASgB,YAAY,GAAG,UAAU"}

package/dist/hono/geolocation.mjs

@@ -1,16 +1,12 @@
-// src/hono/geolocation.ts
+import { getGeolocationFromCloudflare, getGeolocationFromCloudfront, getGeolocationFromVercel } from "../utils/geolocation.mjs";
 import { getRuntimeKey } from "hono/adapter";
-import {
-  getGeolocationFromCloudflare,
-  getGeolocationFromCloudfront,
-  getGeolocationFromVercel
-} from "../utils/geolocation.mjs";
+//#region src/hono/geolocation.ts
 function geolocation(c) {
-  if (getRuntimeKey() === "workerd") return getGeolocationFromCloudflare(c.req.raw);
-  if (c.req.header("x-vercel-id")) return getGeolocationFromVercel(c.req.raw);
-  return getGeolocationFromCloudfront(c.req.raw);
+	if (getRuntimeKey() === "workerd") return getGeolocationFromCloudflare(c.req.raw);
+	if (c.req.header("x-vercel-id")) return getGeolocationFromVercel(c.req.raw);
+	return getGeolocationFromCloudfront(c.req.raw);
 }
-export {
-  geolocation
-};
+//#endregion
+export { geolocation };
+
 //# sourceMappingURL=geolocation.mjs.map

package/dist/hono/geolocation.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hono/geolocation.ts"],"sourcesContent":["import type { Context } from 'hono';\nimport { getRuntimeKey } from 'hono/adapter';\nimport {\n  type Geolocation,\n  getGeolocationFromCloudflare,\n  getGeolocationFromCloudfront,\n  getGeolocationFromVercel,\n} from '../utils/geolocation';\n\nexport function geolocation(c: Context): Geolocation {\n  if (getRuntimeKey() === 'workerd') return getGeolocationFromCloudflare(c.req.raw);\n  if (c.req.header('x-vercel-id')) return getGeolocationFromVercel(c.req.raw);\n  return getGeolocationFromCloudfront(c.req.raw);\n}\n"],"mappings":";AACA,SAAS,qBAAqB;AAC9B;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,SAAS,YAAY,GAAyB;AACnD,MAAI,cAAc,MAAM,UAAW,QAAO,6BAA6B,EAAE,IAAI,GAAG;AAChF,MAAI,EAAE,IAAI,OAAO,aAAa,EAAG,QAAO,yBAAyB,EAAE,IAAI,GAAG;AAC1E,SAAO,6BAA6B,EAAE,IAAI,GAAG;AAC/C;","names":[]}
+{"version":3,"file":"geolocation.mjs","names":[],"sources":["../../src/hono/geolocation.ts"],"sourcesContent":["import type { Context } from 'hono';\nimport { getRuntimeKey } from 'hono/adapter';\nimport {\n  type Geolocation,\n  getGeolocationFromCloudflare,\n  getGeolocationFromCloudfront,\n  getGeolocationFromVercel,\n} from '../utils/geolocation';\n\nexport function geolocation(c: Context): Geolocation {\n  if (getRuntimeKey() === 'workerd') return getGeolocationFromCloudflare(c.req.raw);\n  if (c.req.header('x-vercel-id')) return getGeolocationFromVercel(c.req.raw);\n  return getGeolocationFromCloudfront(c.req.raw);\n}\n"],"mappings":";;;AASA,SAAgB,YAAY,GAAyB;CACnD,IAAI,cAAc,MAAM,WAAW,OAAO,6BAA6B,EAAE,IAAI,GAAG;CAChF,IAAI,EAAE,IAAI,OAAO,aAAa,GAAG,OAAO,yBAAyB,EAAE,IAAI,GAAG;CAC1E,OAAO,6BAA6B,EAAE,IAAI,GAAG;AAC/C"}