@stacksjs/security 0.58.48 → 0.58.50

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/security",
   "type": "module",
-  "version": "0.58.48",
+  "version": "0.58.50",
   "description": "The Stacks framework security.",
   "author": "Chris Breuer",
   "license": "MIT",
@@ -38,7 +38,8 @@
   ],
   "files": [
     "README.md",
-    "dist"
+    "dist",
+    "src"
   ],
   "scripts": {
     "build": "bun --bun build.ts",

package/src/crypt.ts

@@ -0,0 +1,23 @@
+import aes from 'crypto-js/aes'
+import utf8 from 'crypto-js/enc-utf8'
+import { env } from '@stacksjs/env'
+
+function encrypt(message: string): string {
+  const passphrase = env.APP_KEY
+
+  if (!passphrase)
+    throw new Error('APP_KEY is not defined')
+
+  return aes.encrypt(message, passphrase).toString()
+}
+
+function decrypt(encrypted: string): string {
+  const passphrase = env.APP_KEY
+
+  if (!passphrase)
+    throw new Error('APP_KEY is not defined')
+
+  return aes.decrypt(encrypted, passphrase).toString(utf8)
+}
+
+export { encrypt, decrypt }

package/src/hash.ts

@@ -0,0 +1,54 @@
+import bcryptjs from 'bcryptjs'
+import { Base64 } from 'js-base64'
+import md5 from 'crypto-js/md5'
+import { hashing } from '@stacksjs/config'
+
+async function make(password: string, algorithm = 'bcrypt') {
+  if (algorithm === 'bcrypt')
+    return bcryptEncode(password)
+
+  if (algorithm === 'base64')
+    return base64Encode(password)
+
+  throw new Error('Unsupported algorithm')
+}
+
+type Algorithm = 'bcrypt' | 'base64'
+
+async function verify(password: string, hash: string, algorithm?: Algorithm) {
+  if (algorithm === 'bcrypt')
+    return bcryptVerify(password, hash)
+
+  if (algorithm === 'base64')
+    return base64Verify(password, hash)
+
+  throw new Error('Unsupported algorithm')
+}
+
+async function bcryptEncode(password: string) {
+  if (!hashing.bcrypt)
+    throw new Error('Bcrypt hashing is not configured')
+
+  const salt = bcryptjs.genSaltSync(hashing.bcrypt.rounds)
+  const hash = await bcryptjs.hash(password, salt)
+
+  return hash
+}
+
+async function bcryptVerify(password: string, hash: string) {
+  return await bcryptjs.compare(password, hash)
+}
+
+function base64Encode(password: string) {
+  return Base64.encode(password)
+}
+
+function base64Verify(password: string, hash: string) {
+  return Base64.decode(hash) === password
+}
+
+function md5Encode(password: string) {
+  return md5(password)
+}
+
+export { make as makeHash, verify as verifyHash, base64Encode, base64Verify, bcryptEncode, bcryptVerify, md5Encode }

package/src/index.ts

@@ -0,0 +1,3 @@
+export * from './key'
+export * from './crypt'
+export * from './hash'

package/src/key.ts

@@ -0,0 +1,11 @@
+import { getRandomValues } from 'node:crypto'
+import utf8 from 'crypto-js/enc-utf8'
+import base64 from 'crypto-js/enc-base64'
+
+export function generateAppKey() {
+  const random = getRandomValues(new Uint8Array(32))
+  const encodedWord = utf8.parse(random.toString())
+  const key = base64.stringify(encodedWord)
+
+  return `base64:${key}`
+}