@stacksjs/bun-router 0.0.17 → 0.0.18

package/src/middleware/security_suite.ts

@@ -1,257 +0,0 @@
-import type { EnhancedRequest, MiddlewareHandler, NextFunction } from '../types'
-import { config } from '../config'
-import ContentSecurityPolicy from './content_security_policy'
-import DDoSProtection from './ddos_protection'
-import Helmet from './helmet'
-import InputValidation from './input_validation'
-import Security from './security'
-
-export interface SecuritySuiteOptions {
-  helmet?: boolean | object
-  security?: boolean | object
-  ddosProtection?: boolean | object
-  inputValidation?: boolean | object
-  contentSecurityPolicy?: boolean | object
-  order?: string[]
-}
-
-/**
- * Comprehensive security middleware suite that combines multiple security layers
- */
-export default class SecuritySuite {
-  private middlewares: MiddlewareHandler[] = []
-
-  constructor(options: SecuritySuiteOptions = {}) {
-    const securityConfig = (config.server?.security || {}) as any
-
-    // Default order of security middleware execution
-    const defaultOrder = [
-      'ddosProtection',
-      'security',
-      'helmet',
-      'contentSecurityPolicy',
-      'inputValidation',
-    ]
-
-    const order = options.order || defaultOrder
-
-    // Initialize middleware based on configuration and order
-    for (const middlewareName of order) {
-      switch (middlewareName) {
-        case 'ddosProtection':
-          if (options.ddosProtection !== false && securityConfig.ddos?.enabled !== false) {
-            const ddosOptions = typeof options.ddosProtection === 'object'
-              ? options.ddosProtection
-              : {}
-            const ddosInstance = new DDoSProtection(ddosOptions)
-            this.middlewares.push((req: EnhancedRequest, next: NextFunction) =>
-              ddosInstance.handle(req, next),
-            )
-          }
-          break
-
-        case 'security':
-          if (options.security !== false) {
-            const securityOptions = typeof options.security === 'object'
-              ? options.security
-              : {}
-            const securityInstance = new Security(securityOptions)
-            this.middlewares.push((req: EnhancedRequest, next: NextFunction) =>
-              securityInstance.handle(req, next),
-            )
-          }
-          break
-
-        case 'helmet':
-          if (options.helmet !== false && securityConfig.helmet?.enabled !== false) {
-            const helmetOptions = typeof options.helmet === 'object'
-              ? options.helmet
-              : {}
-            const helmetInstance = new Helmet(helmetOptions)
-            this.middlewares.push((req: EnhancedRequest, next: NextFunction) =>
-              helmetInstance.handle(req, next),
-            )
-          }
-          break
-
-        case 'contentSecurityPolicy':
-          if (options.contentSecurityPolicy !== false
-            && securityConfig.helmet?.contentSecurityPolicy !== false) {
-            const cspOptions = typeof options.contentSecurityPolicy === 'object'
-              ? options.contentSecurityPolicy
-              : {}
-            const cspInstance = new ContentSecurityPolicy(cspOptions)
-            this.middlewares.push((req: EnhancedRequest, next: NextFunction) =>
-              cspInstance.handle(req, next),
-            )
-          }
-          break
-
-        case 'inputValidation':
-          if (options.inputValidation !== false
-            && securityConfig.inputValidation?.enabled !== false) {
-            const validationOptions = typeof options.inputValidation === 'object'
-              ? options.inputValidation
-              : {}
-            const validationInstance = new InputValidation(validationOptions)
-            this.middlewares.push((req: EnhancedRequest, next: NextFunction) =>
-              validationInstance.handle(req, next),
-            )
-          }
-          break
-      }
-    }
-  }
-
-  async handle(req: EnhancedRequest, next: NextFunction): Promise<Response | null> {
-    // Execute all security middleware in sequence
-    let currentIndex = 0
-
-    const executeNext = async (): Promise<Response | null> => {
-      if (currentIndex >= this.middlewares.length) {
-        return await next()
-      }
-
-      const middleware = this.middlewares[currentIndex++]
-      return await middleware(req, executeNext)
-    }
-
-    return await executeNext()
-  }
-}
-
-/**
- * Factory function to create a security suite middleware
- */
-export function securitySuite(options: SecuritySuiteOptions = {}): MiddlewareHandler {
-  const instance = new SecuritySuite(options)
-  return async (req: EnhancedRequest, next: NextFunction) => instance.handle(req, next)
-}
-
-/**
- * Preset configurations for different security levels
- */
-export const securityPresets = {
-  /**
-   * Basic security - minimal performance impact
-   */
-  basic: (): MiddlewareHandler => securitySuite({
-    helmet: true,
-    security: {
-      attackPrevention: { enabled: true },
-      requestFiltering: { enabled: true },
-      responseSecurity: { enabled: true },
-    },
-    ddosProtection: false,
-    inputValidation: false,
-    contentSecurityPolicy: false,
-  }),
-
-  /**
-   * Standard security - balanced security and performance
-   */
-  standard: (): MiddlewareHandler => securitySuite({
-    helmet: true,
-    security: true,
-    ddosProtection: {
-      enabled: true,
-      maxRequestsPerMinute: 200,
-      burstLimit: 50,
-    },
-    inputValidation: {
-      enabled: true,
-      sanitizeByDefault: true,
-    },
-    contentSecurityPolicy: false,
-  }),
-
-  /**
-   * High security - maximum protection
-   */
-  high: (): MiddlewareHandler => securitySuite({
-    helmet: true,
-    security: true,
-    ddosProtection: {
-      enabled: true,
-      maxRequestsPerMinute: 100,
-      burstLimit: 20,
-      blockDuration: 600000, // 10 minutes
-    },
-    inputValidation: {
-      enabled: true,
-      sanitizeByDefault: true,
-      strictMode: true,
-    },
-    contentSecurityPolicy: {
-      directives: {
-        'default-src': ['\'self\''],
-        'script-src': ['\'self\''],
-        'style-src': ['\'self\''],
-        'img-src': ['\'self\'', 'data:'],
-        'font-src': ['\'self\''],
-        'connect-src': ['\'self\''],
-        'media-src': ['\'self\''],
-        'object-src': ['\'none\''],
-        'child-src': ['\'none\''],
-        'worker-src': ['\'self\''],
-        'frame-ancestors': ['\'none\''],
-        'form-action': ['\'self\''],
-        'base-uri': ['\'self\''],
-        'manifest-src': ['\'self\''],
-      },
-    },
-  }),
-
-  /**
-   * API security - optimized for API endpoints
-   */
-  api: (): MiddlewareHandler => securitySuite({
-    helmet: {
-      contentSecurityPolicy: false, // Not needed for APIs
-      frameguard: false,
-    },
-    security: {
-      attackPrevention: { enabled: true },
-      requestFiltering: {
-        enabled: true,
-        allowedMethods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH'],
-      },
-      responseSecurity: { enabled: true },
-    },
-    ddosProtection: {
-      enabled: true,
-      maxRequestsPerMinute: 500,
-      burstLimit: 100,
-    },
-    inputValidation: {
-      enabled: true,
-      sanitizeByDefault: true,
-    },
-    contentSecurityPolicy: false,
-  }),
-
-  /**
-   * Development security - minimal restrictions for development
-   */
-  development: (): MiddlewareHandler => securitySuite({
-    helmet: {
-      contentSecurityPolicy: false,
-      hsts: false,
-    },
-    security: {
-      attackPrevention: { enabled: true },
-      requestFiltering: {
-        enabled: false,
-        blockSuspiciousPatterns: false,
-      },
-      responseSecurity: { enabled: false },
-    },
-    ddosProtection: false,
-    inputValidation: {
-      enabled: true,
-      sanitizeByDefault: false,
-      strictMode: false,
-    },
-    contentSecurityPolicy: false,
-  }),
-}

package/src/middleware/session.ts

@@ -1,91 +0,0 @@
-import type { CookieOptions, EnhancedRequest, NextFunction } from '../types'
-import type { SessionStore, SessionData } from '../types/core'
-import { config } from '../config'
-import { MemorySessionStore } from '../session/memory-store'
-import { SessionManager, generateSessionId } from '../session/index'
-
-/**
- * Session middleware with pluggable store support.
- *
- * By default uses an in-memory store. Configure with a different store
- * for persistent sessions (file, redis, database).
- *
- * @example
- * // Use default memory store
- * const session = new Session()
- *
- * // Use a custom store
- * import { RedisSessionStore } from 'bun-router/session'
- * const session = new Session({ store: new RedisSessionStore(redisClient) })
- */
-export default class Session {
-  private store: SessionStore<SessionData>
-
-  constructor(options?: { store?: SessionStore<SessionData> }) {
-    this.store = options?.store || new MemorySessionStore()
-  }
-
-  async handle(req: EnhancedRequest, next: NextFunction): Promise<Response> {
-    const sessionConfig = config.server?.security?.auth?.session
-
-    const cookieName = sessionConfig?.name || 'session'
-
-    // Get session ID from cookie or generate a new one
-    let sessionId = req.cookies?.get(cookieName) || ''
-    let isNewSession = false
-
-    if (!sessionId) {
-      sessionId = generateSessionId()
-      isNewSession = true
-    }
-
-    // Load session data from store
-    let sessionData = isNewSession ? null : await this.store.get(sessionId)
-
-    if (!sessionData) {
-      sessionData = { id: sessionId }
-      isNewSession = true
-    }
-
-    // Create session manager and attach to request
-    const manager = new SessionManager(sessionId, sessionData, this.store)
-    req.session = manager
-
-    // Continue to next middleware/handler
-    const response = await next()
-
-    // Save session after the response
-    await manager.save()
-
-    // Set session cookie on the response
-    const cookieOptions: CookieOptions = {
-      maxAge: sessionConfig?.cookie?.maxAge || 86400000,
-      path: sessionConfig?.cookie?.path || '/',
-    }
-
-    if (sessionConfig?.cookie?.httpOnly !== false) {
-      cookieOptions.httpOnly = true
-    }
-
-    if (sessionConfig?.cookie?.secure) {
-      cookieOptions.secure = true
-    }
-
-    if (sessionConfig?.cookie?.sameSite) {
-      cookieOptions.sameSite = sessionConfig.cookie.sameSite
-    }
-
-    // Add cookie to response via _cookiesToSet array
-    if (!req._cookiesToSet) {
-      req._cookiesToSet = []
-    }
-
-    req._cookiesToSet.push({
-      name: cookieName,
-      value: manager.id,
-      options: cookieOptions,
-    })
-
-    return response || new Response('Not Found', { status: 404 })
-  }
-}

package/src/model-binding/index.ts

@@ -1,18 +0,0 @@
-export {
-  bindModel,
-  createModelBindingMiddleware,
-  ModelBindingFactory,
-  type ModelBindingMiddlewareOptions,
-  ModelBindingUtils,
-  TypedModelBinding,
-  withModelBinding,
-} from './model-middleware'
-
-export {
-  type ModelBindingConfig,
-  ModelFactory,
-  ModelRegistry,
-  modelRegistry,
-  type ModelResolutionResult,
-  ModelUtils,
-} from './model-registry'