@shware/http 2.11.4 → 2.12.0

package/dist/webhook/index.cjs

@@ -1,77 +1,48 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/webhook/index.ts
-var webhook_exports = {};
-__export(webhook_exports, {
-  verifyStandardWebhook: () => verifyStandardWebhook
-});
-module.exports = __toCommonJS(webhook_exports);
-var import_node_crypto = require("crypto");
-var import_status = require("../error/status.cjs");
-var WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60;
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_error_status = require("../error/status.cjs");
+let node_crypto = require("node:crypto");
+//#region src/webhook/index.ts
+const WEBHOOK_TOLERANCE_IN_SECONDS = 300;
 function verifyTimestamp(webhookTimestamp) {
-  const now = Math.floor(Date.now() / 1e3);
-  const timestamp = parseInt(webhookTimestamp, 10);
-  if (isNaN(timestamp)) {
-    throw import_status.Status.invalidArgument("invalid webhook timestamp").error();
-  }
-  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {
-    throw import_status.Status.invalidArgument("webhook timestamp is too old").error();
-  }
-  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {
-    throw import_status.Status.invalidArgument("webhook timestamp is too new").error();
-  }
-  return timestamp;
+	const now = Math.floor(Date.now() / 1e3);
+	const timestamp = parseInt(webhookTimestamp, 10);
+	if (isNaN(timestamp)) throw require_error_status.Status.invalidArgument("invalid webhook timestamp").error();
+	if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) throw require_error_status.Status.invalidArgument("webhook timestamp is too old").error();
+	if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) throw require_error_status.Status.invalidArgument("webhook timestamp is too new").error();
+	return timestamp;
 }
+/**
+* reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
+* hono usage:
+* ```ts
+* const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');
+* ```
+*/
 function verifyStandardWebhook(headers, payload, secret) {
-  const webhookId = headers["webhook-id"];
-  const webhookTimestamp = headers["webhook-timestamp"];
-  const webhookSignature = headers["webhook-signature"];
-  if (!webhookId || !webhookTimestamp || !webhookSignature) {
-    throw import_status.Status.invalidArgument("invalid webhook").error();
-  }
-  const timestamp = verifyTimestamp(webhookTimestamp);
-  const encoder = new TextEncoder();
-  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
-  const hmac = (0, import_node_crypto.createHmac)("sha256", Buffer.from(secret, "base64"));
-  const digest = hmac.update(toSign).digest();
-  const computedSignature = `v1,${Buffer.from(digest).toString("base64")}`;
-  const expectedSignature = computedSignature.split(",")[1];
-  const passedSignatures = webhookSignature.split(" ");
-  for (const versionedSignature of passedSignatures) {
-    const [version, signature] = versionedSignature.split(",");
-    if (version !== "v1") continue;
-    if ((0, import_node_crypto.timingSafeEqual)(encoder.encode(signature), encoder.encode(expectedSignature))) {
-      try {
-        return JSON.parse(payload);
-      } catch (_) {
-        console.error("invalid payload", payload);
-        throw import_status.Status.invalidArgument("invalid webhook payload").error();
-      }
-    }
-  }
-  console.error("webhook verification failed");
-  throw import_status.Status.invalidArgument("invalid webhook signature").error();
+	const webhookId = headers["webhook-id"];
+	const webhookTimestamp = headers["webhook-timestamp"];
+	const webhookSignature = headers["webhook-signature"];
+	if (!webhookId || !webhookTimestamp || !webhookSignature) throw require_error_status.Status.invalidArgument("invalid webhook").error();
+	const timestamp = verifyTimestamp(webhookTimestamp);
+	const encoder = new TextEncoder();
+	const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
+	const digest = (0, node_crypto.createHmac)("sha256", Buffer.from(secret, "base64")).update(toSign).digest();
+	const expectedSignature = `v1,${Buffer.from(digest).toString("base64")}`.split(",")[1];
+	const passedSignatures = webhookSignature.split(" ");
+	for (const versionedSignature of passedSignatures) {
+		const [version, signature] = versionedSignature.split(",");
+		if (version !== "v1") continue;
+		if ((0, node_crypto.timingSafeEqual)(encoder.encode(signature), encoder.encode(expectedSignature))) try {
+			return JSON.parse(payload);
+		} catch (_) {
+			console.error("invalid payload", payload);
+			throw require_error_status.Status.invalidArgument("invalid webhook payload").error();
+		}
+	}
+	console.error("webhook verification failed");
+	throw require_error_status.Status.invalidArgument("invalid webhook signature").error();
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  verifyStandardWebhook
-});
+//#endregion
+exports.verifyStandardWebhook = verifyStandardWebhook;
+
 //# sourceMappingURL=index.cjs.map

package/dist/webhook/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhook/index.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { Status } from '../error/status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport function verifyStandardWebhook<T = unknown>(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n): T {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload) as T;\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA4C;AAC5C,oBAAuB;AAEvB,IAAM,+BAA+B,IAAI;AAEzC,SAAS,gBAAgB,kBAA0B;AACjD,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,YAAY,SAAS,kBAAkB,EAAE;AAC/C,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,qBAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAAA,EAClE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,qBAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,qBAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,SAAO;AACT;AASO,SAAS,sBACd,SACA,SACA,QACG;AACH,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,qBAAO,gBAAgB,iBAAiB,EAAE,MAAM;AAAA,EACxD;AACA,QAAM,YAAY,gBAAgB,gBAAgB;AAElD,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAS,QAAQ,OAAO,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE;AACpE,QAAM,WAAO,+BAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAC/D,QAAM,SAAS,KAAK,OAAO,MAAM,EAAE,OAAO;AAE1C,QAAM,oBAAoB,MAAM,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,CAAC;AACtE,QAAM,oBAAoB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACxD,QAAM,mBAAmB,iBAAiB,MAAM,GAAG;AAEnD,aAAW,sBAAsB,kBAAkB;AACjD,UAAM,CAAC,SAAS,SAAS,IAAI,mBAAmB,MAAM,GAAG;AACzD,QAAI,YAAY,KAAM;AACtB,YAAI,oCAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAAG;AACjF,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,SAAS,GAAG;AACV,gBAAQ,MAAM,mBAAmB,OAAO;AACxC,cAAM,qBAAO,gBAAgB,yBAAyB,EAAE,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,UAAQ,MAAM,6BAA6B;AAC3C,QAAM,qBAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAClE;","names":[]}
+{"version":3,"file":"index.cjs","names":["Status"],"sources":["../../src/webhook/index.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { Status } from '../error/status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport function verifyStandardWebhook<T = unknown>(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n): T {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload) as T;\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";;;;AAGA,MAAM,+BAA+B;AAErC,SAAS,gBAAgB,kBAA0B;CACjD,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CACxC,MAAM,YAAY,SAAS,kBAAkB,EAAE;CAC/C,IAAI,MAAM,SAAS,GACjB,MAAMA,qBAAAA,OAAO,gBAAgB,2BAA2B,CAAC,CAAC,MAAM;CAElE,IAAI,YAAY,MAAM,8BACpB,MAAMA,qBAAAA,OAAO,gBAAgB,8BAA8B,CAAC,CAAC,MAAM;CAErE,IAAI,YAAY,MAAM,8BACpB,MAAMA,qBAAAA,OAAO,gBAAgB,8BAA8B,CAAC,CAAC,MAAM;CAErE,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,SACA,SACA,QACG;CACH,MAAM,YAAY,QAAQ;CAC1B,MAAM,mBAAmB,QAAQ;CACjC,MAAM,mBAAmB,QAAQ;CACjC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBACtC,MAAMA,qBAAAA,OAAO,gBAAgB,iBAAiB,CAAC,CAAC,MAAM;CAExD,MAAM,YAAY,gBAAgB,gBAAgB;CAElD,MAAM,UAAU,IAAI,YAAY;CAChC,MAAM,SAAS,QAAQ,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS;CAEpE,MAAM,UAAA,GAAA,YAAA,WAAA,CADkB,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAC5C,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO;CAG1C,MAAM,oBAAoB,MADM,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,IACzB,MAAM,GAAG,CAAC,CAAC;CACvD,MAAM,mBAAmB,iBAAiB,MAAM,GAAG;CAEnD,KAAK,MAAM,sBAAsB,kBAAkB;EACjD,MAAM,CAAC,SAAS,aAAa,mBAAmB,MAAM,GAAG;EACzD,IAAI,YAAY,MAAM;EACtB,KAAA,GAAA,YAAA,gBAAA,CAAoB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAC9E,IAAI;GACF,OAAO,KAAK,MAAM,OAAO;EAC3B,SAAS,GAAG;GACV,QAAQ,MAAM,mBAAmB,OAAO;GACxC,MAAMA,qBAAAA,OAAO,gBAAgB,yBAAyB,CAAC,CAAC,MAAM;EAChE;CAEJ;CACA,QAAQ,MAAM,6BAA6B;CAC3C,MAAMA,qBAAAA,OAAO,gBAAgB,2BAA2B,CAAC,CAAC,MAAM;AAClE"}

package/dist/webhook/index.d.cts

@@ -1,3 +1,4 @@
+//#region src/webhook/index.d.ts
 /**
  * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
  * hono usage:
@@ -6,5 +7,6 @@
  * ```
  */
 declare function verifyStandardWebhook<T = unknown>(headers: Record<string, string>, payload: string, secret: string): T;
-
+//#endregion
 export { verifyStandardWebhook };
+//# sourceMappingURL=index.d.cts.map

package/dist/webhook/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/webhook/index.ts"],"mappings":";;;;;;;;iBA2BgB,sBAAsB,aACpC,SAAS,wBACT,iBACA,iBACC"}

package/dist/webhook/{index.d.ts → index.d.mts}

@@ -1,3 +1,4 @@
+//#region src/webhook/index.d.ts
 /**
  * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
  * hono usage:
@@ -6,5 +7,6 @@
  * ```
  */
 declare function verifyStandardWebhook<T = unknown>(headers: Record<string, string>, payload: string, secret: string): T;
-
+//#endregion
 export { verifyStandardWebhook };
+//# sourceMappingURL=index.d.mts.map

package/dist/webhook/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/webhook/index.ts"],"mappings":";;;;;;;;iBA2BgB,sBAAsB,aACpC,SAAS,wBACT,iBACA,iBACC"}

package/dist/webhook/index.mjs

@@ -1,52 +1,47 @@
-// src/webhook/index.ts
-import { createHmac, timingSafeEqual } from "crypto";
 import { Status } from "../error/status.mjs";
-var WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60;
+import { createHmac, timingSafeEqual } from "node:crypto";
+//#region src/webhook/index.ts
+const WEBHOOK_TOLERANCE_IN_SECONDS = 300;
 function verifyTimestamp(webhookTimestamp) {
-  const now = Math.floor(Date.now() / 1e3);
-  const timestamp = parseInt(webhookTimestamp, 10);
-  if (isNaN(timestamp)) {
-    throw Status.invalidArgument("invalid webhook timestamp").error();
-  }
-  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {
-    throw Status.invalidArgument("webhook timestamp is too old").error();
-  }
-  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {
-    throw Status.invalidArgument("webhook timestamp is too new").error();
-  }
-  return timestamp;
+	const now = Math.floor(Date.now() / 1e3);
+	const timestamp = parseInt(webhookTimestamp, 10);
+	if (isNaN(timestamp)) throw Status.invalidArgument("invalid webhook timestamp").error();
+	if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) throw Status.invalidArgument("webhook timestamp is too old").error();
+	if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) throw Status.invalidArgument("webhook timestamp is too new").error();
+	return timestamp;
 }
+/**
+* reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
+* hono usage:
+* ```ts
+* const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');
+* ```
+*/
 function verifyStandardWebhook(headers, payload, secret) {
-  const webhookId = headers["webhook-id"];
-  const webhookTimestamp = headers["webhook-timestamp"];
-  const webhookSignature = headers["webhook-signature"];
-  if (!webhookId || !webhookTimestamp || !webhookSignature) {
-    throw Status.invalidArgument("invalid webhook").error();
-  }
-  const timestamp = verifyTimestamp(webhookTimestamp);
-  const encoder = new TextEncoder();
-  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
-  const hmac = createHmac("sha256", Buffer.from(secret, "base64"));
-  const digest = hmac.update(toSign).digest();
-  const computedSignature = `v1,${Buffer.from(digest).toString("base64")}`;
-  const expectedSignature = computedSignature.split(",")[1];
-  const passedSignatures = webhookSignature.split(" ");
-  for (const versionedSignature of passedSignatures) {
-    const [version, signature] = versionedSignature.split(",");
-    if (version !== "v1") continue;
-    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {
-      try {
-        return JSON.parse(payload);
-      } catch (_) {
-        console.error("invalid payload", payload);
-        throw Status.invalidArgument("invalid webhook payload").error();
-      }
-    }
-  }
-  console.error("webhook verification failed");
-  throw Status.invalidArgument("invalid webhook signature").error();
+	const webhookId = headers["webhook-id"];
+	const webhookTimestamp = headers["webhook-timestamp"];
+	const webhookSignature = headers["webhook-signature"];
+	if (!webhookId || !webhookTimestamp || !webhookSignature) throw Status.invalidArgument("invalid webhook").error();
+	const timestamp = verifyTimestamp(webhookTimestamp);
+	const encoder = new TextEncoder();
+	const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
+	const digest = createHmac("sha256", Buffer.from(secret, "base64")).update(toSign).digest();
+	const expectedSignature = `v1,${Buffer.from(digest).toString("base64")}`.split(",")[1];
+	const passedSignatures = webhookSignature.split(" ");
+	for (const versionedSignature of passedSignatures) {
+		const [version, signature] = versionedSignature.split(",");
+		if (version !== "v1") continue;
+		if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) try {
+			return JSON.parse(payload);
+		} catch (_) {
+			console.error("invalid payload", payload);
+			throw Status.invalidArgument("invalid webhook payload").error();
+		}
+	}
+	console.error("webhook verification failed");
+	throw Status.invalidArgument("invalid webhook signature").error();
 }
-export {
-  verifyStandardWebhook
-};
+//#endregion
+export { verifyStandardWebhook };
+
 //# sourceMappingURL=index.mjs.map

package/dist/webhook/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhook/index.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { Status } from '../error/status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport function verifyStandardWebhook<T = unknown>(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n): T {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload) as T;\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;AAC5C,SAAS,cAAc;AAEvB,IAAM,+BAA+B,IAAI;AAEzC,SAAS,gBAAgB,kBAA0B;AACjD,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,YAAY,SAAS,kBAAkB,EAAE;AAC/C,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,OAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAAA,EAClE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,OAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,OAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,SAAO;AACT;AASO,SAAS,sBACd,SACA,SACA,QACG;AACH,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,OAAO,gBAAgB,iBAAiB,EAAE,MAAM;AAAA,EACxD;AACA,QAAM,YAAY,gBAAgB,gBAAgB;AAElD,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAS,QAAQ,OAAO,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE;AACpE,QAAM,OAAO,WAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAC/D,QAAM,SAAS,KAAK,OAAO,MAAM,EAAE,OAAO;AAE1C,QAAM,oBAAoB,MAAM,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,CAAC;AACtE,QAAM,oBAAoB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACxD,QAAM,mBAAmB,iBAAiB,MAAM,GAAG;AAEnD,aAAW,sBAAsB,kBAAkB;AACjD,UAAM,CAAC,SAAS,SAAS,IAAI,mBAAmB,MAAM,GAAG;AACzD,QAAI,YAAY,KAAM;AACtB,QAAI,gBAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAAG;AACjF,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,SAAS,GAAG;AACV,gBAAQ,MAAM,mBAAmB,OAAO;AACxC,cAAM,OAAO,gBAAgB,yBAAyB,EAAE,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,UAAQ,MAAM,6BAA6B;AAC3C,QAAM,OAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAClE;","names":[]}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/webhook/index.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { Status } from '../error/status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport function verifyStandardWebhook<T = unknown>(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n): T {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload) as T;\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";;;AAGA,MAAM,+BAA+B;AAErC,SAAS,gBAAgB,kBAA0B;CACjD,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CACxC,MAAM,YAAY,SAAS,kBAAkB,EAAE;CAC/C,IAAI,MAAM,SAAS,GACjB,MAAM,OAAO,gBAAgB,2BAA2B,CAAC,CAAC,MAAM;CAElE,IAAI,YAAY,MAAM,8BACpB,MAAM,OAAO,gBAAgB,8BAA8B,CAAC,CAAC,MAAM;CAErE,IAAI,YAAY,MAAM,8BACpB,MAAM,OAAO,gBAAgB,8BAA8B,CAAC,CAAC,MAAM;CAErE,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,SACA,SACA,QACG;CACH,MAAM,YAAY,QAAQ;CAC1B,MAAM,mBAAmB,QAAQ;CACjC,MAAM,mBAAmB,QAAQ;CACjC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBACtC,MAAM,OAAO,gBAAgB,iBAAiB,CAAC,CAAC,MAAM;CAExD,MAAM,YAAY,gBAAgB,gBAAgB;CAElD,MAAM,UAAU,IAAI,YAAY;CAChC,MAAM,SAAS,QAAQ,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS;CAEpE,MAAM,SADO,WAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAC5C,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO;CAG1C,MAAM,oBAAoB,MADM,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,IACzB,MAAM,GAAG,CAAC,CAAC;CACvD,MAAM,mBAAmB,iBAAiB,MAAM,GAAG;CAEnD,KAAK,MAAM,sBAAsB,kBAAkB;EACjD,MAAM,CAAC,SAAS,aAAa,mBAAmB,MAAM,GAAG;EACzD,IAAI,YAAY,MAAM;EACtB,IAAI,gBAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAC9E,IAAI;GACF,OAAO,KAAK,MAAM,OAAO;EAC3B,SAAS,GAAG;GACV,QAAQ,MAAM,mBAAmB,OAAO;GACxC,MAAM,OAAO,gBAAgB,yBAAyB,CAAC,CAAC,MAAM;EAChE;CAEJ;CACA,QAAQ,MAAM,6BAA6B;CAC3C,MAAM,OAAO,gBAAgB,2BAA2B,CAAC,CAAC,MAAM;AAClE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shware/http",
-  "version": "2.11.4",
+  "version": "2.12.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -12,49 +12,74 @@
   "type": "module",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.mjs",
-      "require": "./dist/index.cjs"
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     },
     "./polyfills": {
-      "types": "./dist/polyfills/index.d.ts",
-      "import": "./dist/polyfills/index.mjs",
-      "require": "./dist/polyfills/index.cjs"
+      "import": {
+        "types": "./dist/polyfills/index.d.mts",
+        "default": "./dist/polyfills/index.mjs"
+      },
+      "require": {
+        "types": "./dist/polyfills/index.d.cts",
+        "default": "./dist/polyfills/index.cjs"
+      }
     },
     "./hono": {
-      "types": "./dist/hono/index.d.ts",
-      "import": "./dist/hono/index.mjs",
-      "require": "./dist/hono/index.cjs"
+      "import": {
+        "types": "./dist/hono/index.d.mts",
+        "default": "./dist/hono/index.mjs"
+      },
+      "require": {
+        "types": "./dist/hono/index.d.cts",
+        "default": "./dist/hono/index.cjs"
+      }
     },
     "./webhook": {
-      "types": "./dist/webhook/index.d.ts",
-      "import": "./dist/webhook/index.mjs",
-      "require": "./dist/webhook/index.cjs"
+      "import": {
+        "types": "./dist/webhook/index.d.mts",
+        "default": "./dist/webhook/index.mjs"
+      },
+      "require": {
+        "types": "./dist/webhook/index.d.cts",
+        "default": "./dist/webhook/index.cjs"
+      }
     },
     "./google-one-tap": {
-      "types": "./dist/google-one-tap/index.d.ts",
-      "import": "./dist/google-one-tap/index.mjs",
-      "require": "./dist/google-one-tap/index.cjs"
+      "import": {
+        "types": "./dist/google-one-tap/index.d.mts",
+        "default": "./dist/google-one-tap/index.mjs"
+      },
+      "require": {
+        "types": "./dist/google-one-tap/index.d.cts",
+        "default": "./dist/google-one-tap/index.cjs"
+      }
     }
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "vitest": "^4.1.9",
+    "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@shware/utils": "^1.4.5"
+    "@shware/utils": "^1.5.0"
   },
   "devDependencies": {
-    "@types/node": "^26.1.0",
+    "@types/node": "^26.1.1",
     "@types/react": "^19.2.17",
-    "typescript": "^6.0.3",
+    "typescript": "^7.0.2",
     "@repo/typescript-config": "0.0.0"
   },
   "peerDependencies": {
-    "hono": "^4.12.28",
-    "i18next": "^26.3.4",
-    "react": "^19"
+    "hono": "^4.12.29",
+    "i18next": "^26.3.6",
+    "react": "^19.2.7"
   },
   "peerDependenciesMeta": {
     "hono": {
@@ -69,7 +94,7 @@
   },
   "scripts": {
     "dev": "tsc --watch",
-    "build": "tsup",
+    "build": "tsdown",
     "test": "vitest run",
     "check-types": "tsc --noEmit",
     "lint": "oxlint --type-aware . --fix"

package/dist/cache/index.d.ts

@@ -1,9 +0,0 @@
-interface Props<A extends unknown[], R> {
-    name: string;
-    key: (...args: A) => string;
-    fn: (...args: A) => R;
-    condition?: (...args: A) => boolean;
-}
-declare function cache<A extends unknown[], R>(_props: Props<A, R>): void;
-
-export { cache };

package/dist/error/detail.d.ts

@@ -1,109 +0,0 @@
-import { ResolvedErrorReason } from './reason.js';
-
-/** reference: https://github.com/googleapis/googleapis/blob/master/google/rpc/error_details.proto */
-
-declare enum DetailType {
-    ERROR_INFO = "type.googleapis.com/google.rpc.ErrorInfo",
-    RETRY_INFO = "type.googleapis.com/google.rpc.RetryInfo",
-    DEBUG_INFO = "type.googleapis.com/google.rpc.DebugInfo",
-    QUOTA_FAILURE = "type.googleapis.com/google.rpc.QuotaFailure",
-    PRECONDITION_FAILURE = "type.googleapis.com/google.rpc.PreconditionFailure",
-    BAD_REQUEST = "type.googleapis.com/google.rpc.BadRequest",
-    REQUEST_INFO = "type.googleapis.com/google.rpc.RequestInfo",
-    RESOURCE_INFO = "type.googleapis.com/google.rpc.ResourceInfo",
-    HELP = "type.googleapis.com/google.rpc.Help",
-    LOCALIZED_MESSAGE = "type.googleapis.com/google.rpc.LocalizedMessage"
-}
-interface ErrorInfo {
-    '@type': DetailType.ERROR_INFO;
-    reason: ResolvedErrorReason;
-    domain?: string;
-    metadata?: Record<string, string>;
-}
-interface RetryInfo {
-    '@type': DetailType.RETRY_INFO;
-    retryDelay: number;
-}
-interface DebugInfo {
-    '@type': DetailType.DEBUG_INFO;
-    stackEntries: string[];
-    detail: string;
-}
-interface QuotaFailure {
-    '@type': DetailType.QUOTA_FAILURE;
-    violations: {
-        subject: string;
-        description: string;
-        apiService: string;
-        quoteId: string;
-        quoteValue: number;
-        quotaMetric: string;
-        quotaDimensions: Record<string, string>;
-        futureQuotaValue: number;
-    }[];
-}
-interface PreconditionFailure {
-    '@type': DetailType.PRECONDITION_FAILURE;
-    violations: {
-        type: string;
-        subject: string;
-        description: string;
-    }[];
-}
-interface BadRequest {
-    '@type': DetailType.BAD_REQUEST;
-    fieldViolations: {
-        field: string;
-        description: string;
-        reason: string;
-        localizedMessage: Omit<LocalizedMessage, '@type'>;
-    }[];
-}
-interface RequestInfo {
-    '@type': DetailType.REQUEST_INFO;
-    requestId: string;
-    servingData: string;
-}
-interface ResourceInfo {
-    '@type': DetailType.RESOURCE_INFO;
-    resourceType: string;
-    resourceName: string;
-    owner: string;
-    description: string;
-}
-interface Help {
-    '@type': DetailType.HELP;
-    links: {
-        url: string;
-        description: string;
-    }[];
-}
-interface LocalizedMessage {
-    '@type': DetailType.LOCALIZED_MESSAGE;
-    locale: string;
-    message: string;
-}
-type Detail = RetryInfo | DebugInfo | QuotaFailure | ErrorInfo | PreconditionFailure | BadRequest | RequestInfo | ResourceInfo | Help | LocalizedMessage;
-/**
- * Example usage:
- * const details = Details.new()
- *   .requestInfo({ requestId: '1234567890', servingData: '/v1/tests' })
- *   .errorInfo({ reason: 'ACCOUNT_LOCKED' });
- * */
-declare class Details {
-    readonly list: Detail[];
-    private constructor();
-    static new(): Details;
-    errorInfo(detail: Omit<ErrorInfo, '@type'>): this;
-    retryInfo(detail: Omit<RetryInfo, '@type'>): this;
-    debugInfo(detail: Omit<DebugInfo, '@type'>): this;
-    quotaFailure(detail: Omit<QuotaFailure, '@type'>): this;
-    preconditionFailure(detail: Omit<PreconditionFailure, '@type'>): this;
-    badRequest(detail: Omit<BadRequest, '@type'>): this;
-    requestInfo(detail: Omit<RequestInfo, '@type'>): this;
-    resourceInfo(detail: Omit<ResourceInfo, '@type'>): this;
-    help(detail: Omit<Help, '@type'>): this;
-    localizedMessage(detail: Omit<LocalizedMessage, '@type'>): this;
-}
-
-export { type BadRequest, type DebugInfo, type Detail, DetailType, Details, type ErrorInfo, type Help, type LocalizedMessage, type PreconditionFailure, type QuotaFailure, type RequestInfo, type ResourceInfo, type RetryInfo };

package/dist/error/i18n/en-us.d.ts

@@ -1,3 +0,0 @@
-declare const enUS: {};
-
-export { enUS };

package/dist/error/index.d.ts

@@ -1,19 +0,0 @@
-declare class LoginTimeoutError extends Error {
-    constructor(timeout: number);
-}
-declare class LoginCanceledError extends Error {
-    constructor();
-}
-declare class CheckoutCreateError extends Error {
-    constructor();
-}
-declare enum PurchaseError {
-    LOGIN_TIMEOUT = "LOGIN_TIMEOUT",
-    LOGIN_CANCELED = "LOGIN_CANCELED",
-    CHECKOUT_CANCELED = "CHECKOUT_CANCELED",
-    CHECKOUT_CREATE_FAILED = "CHECKOUT_CREATE_FAILED",
-    CHECKOUT_SESSION_ID_NOT_FOUND = "CHECKOUT_SESSION_ID_NOT_FOUND",
-    UNKNOWN = "UNKNOWN"
-}
-
-export { CheckoutCreateError, LoginCanceledError, LoginTimeoutError, PurchaseError };

package/dist/error/reason.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/error/reason.ts"],"sourcesContent":["// oxlint-disable-next-line typescript/no-empty-object-type\nexport interface ErrorReason {}\n\nexport type ResolvedErrorReason = keyof ErrorReason extends never ? string : keyof ErrorReason;\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/error/reason.d.ts

@@ -1,5 +0,0 @@
-interface ErrorReason {
-}
-type ResolvedErrorReason = keyof ErrorReason extends never ? string : keyof ErrorReason;
-
-export type { ErrorReason, ResolvedErrorReason };

package/dist/error/reason.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}