@starklabs/forge 1.3.25-builtin-configs.0 → 2.0.0

package/dist/oauth/returnPath.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Accepts a post-login path from the front-end (`?returnTo=/dashboard`) only if it is a plain
+ * same-site path. Absolute URLs, protocol-relative `//host`, backslash tricks and control
+ * characters are dropped, so the callback can never be turned into an open redirect.
+ */
+export declare const safeReturnPath: (value: unknown) => string | undefined;
+//# sourceMappingURL=returnPath.d.ts.map

package/dist/oauth/returnPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"returnPath.d.ts","sourceRoot":"","sources":["../../src/oauth/returnPath.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,cAAc,UAAW,OAAO,KAAG,MAAM,GAAG,SAWxD,CAAC"}

package/dist/oauth/returnPath.js

@@ -0,0 +1,22 @@
+/**
+ * Accepts a post-login path from the front-end (`?returnTo=/dashboard`) only if it is a plain
+ * same-site path. Absolute URLs, protocol-relative `//host`, backslash tricks and control
+ * characters are dropped, so the callback can never be turned into an open redirect.
+ */
+export const safeReturnPath = (value) => {
+    if (typeof value !== "string" || value.length === 0 || value.length > 512)
+        return undefined;
+    if (!value.startsWith("/") || value.startsWith("//") || value.includes("\\"))
+        return undefined;
+    // eslint-disable-next-line no-control-regex
+    if (/[\u0000-\u001f\u007f]/.test(value))
+        return undefined;
+    try {
+        const parsed = new URL(value, "http://forge.invalid");
+        return parsed.origin === "http://forge.invalid" ? `${parsed.pathname}${parsed.search}${parsed.hash}` : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+//# sourceMappingURL=returnPath.js.map

package/dist/oauth/returnPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"returnPath.js","sourceRoot":"","sources":["../../src/oauth/returnPath.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAsB,EAAE;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,4CAA4C;IAC5C,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,MAAM,KAAK,sBAAsB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC"}

package/dist/security/CryptoVault.d.ts

@@ -0,0 +1,28 @@
+/** The value stored in the database for an encrypted field. */
+export interface SealedValue {
+    str: string;
+    nonce: string;
+    publicKey: string;
+    securedPrivateKey: string;
+}
+export declare const isSealedValue: (value: unknown) => value is SealedValue;
+/**
+ * Field-level encryption.
+ *
+ * Every value gets its own key pair. The value is sealed with the public key,
+ * and the private key is itself encrypted with the master key, so a database
+ * leak alone reveals nothing. The stored format is identical to Forge 1.x.
+ */
+export declare class CryptoVault {
+    private readonly masterKey;
+    constructor(masterKey: string | undefined);
+    get isConfigured(): boolean;
+    seal(plain: string): Promise<SealedValue>;
+    unseal(sealed: SealedValue): Promise<string>;
+    private requireKey;
+}
+/** Generates a base64 master key for {@link CryptoVault}. Keep it secret and never rotate it casually. */
+export declare const generateMasterKey: () => Promise<string>;
+/** Generates a 64-byte random secret for signing JWTs. */
+export declare const generateJWTSecret: () => Promise<string>;
+//# sourceMappingURL=CryptoVault.d.ts.map

package/dist/security/CryptoVault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoVault.d.ts","sourceRoot":"","sources":["../../src/security/CryptoVault.ts"],"names":[],"mappings":"AAGA,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,KAAK,IAAI,WAIvD,CAAC;AAEF;;;;;;GAMG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAtC,YAA6B,SAAS,EAAE,MAAM,GAAG,SAAS,EAAI;IAE9D,IAAI,YAAY,IAAI,OAAO,CAE1B;IAEK,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAsB9C;IAEK,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BjD;IAED,OAAO,CAAC,UAAU;CASnB;AAED,0GAA0G;AAC1G,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,MAAM,CAGxD,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,MAAM,CAGxD,CAAC"}

package/dist/security/CryptoVault.js

@@ -0,0 +1,85 @@
+import { ConfigurationError, ErrorCode, InternalError } from "../errors/index.js";
+import { getSodium } from "./Sodium.js";
+export const isSealedValue = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const v = value;
+    return ["str", "nonce", "publicKey", "securedPrivateKey"].every((k) => typeof v[k] === "string" && v[k] !== "");
+};
+/**
+ * Field-level encryption.
+ *
+ * Every value gets its own key pair. The value is sealed with the public key,
+ * and the private key is itself encrypted with the master key, so a database
+ * leak alone reveals nothing. The stored format is identical to Forge 1.x.
+ */
+export class CryptoVault {
+    masterKey;
+    constructor(masterKey) {
+        this.masterKey = masterKey;
+    }
+    get isConfigured() {
+        return Boolean(this.masterKey);
+    }
+    async seal(plain) {
+        const sodium = await getSodium();
+        const key = this.requireKey(sodium);
+        if (typeof plain !== "string" || plain === "") {
+            throw new InternalError({ message: "A non-empty string is required to encrypt.", code: ErrorCode.ENCRYPTION_FAILED });
+        }
+        try {
+            const keyPair = sodium.crypto_box_keypair();
+            const encrypted = sodium.crypto_box_seal(sodium.from_string(plain), keyPair.publicKey);
+            const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+            const securedPrivateKey = sodium.crypto_secretbox_easy(keyPair.privateKey, nonce, key);
+            return {
+                str: sodium.to_base64(encrypted),
+                nonce: sodium.to_base64(nonce),
+                publicKey: sodium.to_base64(keyPair.publicKey),
+                securedPrivateKey: sodium.to_base64(securedPrivateKey),
+            };
+        }
+        catch (cause) {
+            throw new InternalError({ message: "Encryption failed.", code: ErrorCode.ENCRYPTION_FAILED, cause });
+        }
+    }
+    async unseal(sealed) {
+        const sodium = await getSodium();
+        const key = this.requireKey(sodium);
+        if (!isSealedValue(sealed)) {
+            throw new InternalError({ message: "The stored encrypted value is malformed.", code: ErrorCode.DECRYPTION_FAILED });
+        }
+        try {
+            const privateKey = sodium.crypto_secretbox_open_easy(sodium.from_base64(sealed.securedPrivateKey), sodium.from_base64(sealed.nonce), key);
+            const plain = sodium.crypto_box_seal_open(sodium.from_base64(sealed.str), sodium.from_base64(sealed.publicKey), privateKey);
+            return sodium.to_string(plain);
+        }
+        catch (cause) {
+            throw new InternalError({
+                message: "Decryption failed. The master key may have changed.",
+                code: ErrorCode.DECRYPTION_FAILED,
+                cause,
+            });
+        }
+    }
+    requireKey(sodium) {
+        if (!this.masterKey) {
+            throw new ConfigurationError({
+                message: "A master key is required for field encryption.",
+                hint: "Run generateMasterKey() once, store the result in an environment variable and pass it as 'masterKey'.",
+            });
+        }
+        return sodium.from_base64(this.masterKey, sodium.base64_variants.ORIGINAL);
+    }
+}
+/** Generates a base64 master key for {@link CryptoVault}. Keep it secret and never rotate it casually. */
+export const generateMasterKey = async () => {
+    const sodium = await getSodium();
+    return sodium.to_base64(sodium.crypto_secretbox_keygen(), sodium.base64_variants.ORIGINAL);
+};
+/** Generates a 64-byte random secret for signing JWTs. */
+export const generateJWTSecret = async () => {
+    const sodium = await getSodium();
+    return sodium.to_base64(sodium.randombytes_buf(64), sodium.base64_variants.ORIGINAL);
+};
+//# sourceMappingURL=CryptoVault.js.map

package/dist/security/CryptoVault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoVault.js","sourceRoot":"","sources":["../../src/security/CryptoVault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAUxC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAClH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACO,SAAS;IAAtC,YAA6B,SAA6B;yBAA7B,SAAS;IAAuB,CAAC;IAE9D,IAAI,YAAY;QACd,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACxH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACvF,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACzE,MAAM,iBAAiB,GAAG,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvF,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;gBAChC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC9B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC9C,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC;aACvD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAmB;QAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,0BAA0B,CAClD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAChC,GAAG,CACJ,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,oBAAoB,CACvC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EACpC,UAAU,CACX,CAAC;YACF,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC;gBACtB,OAAO,EAAE,qDAAqD;gBAC9D,IAAI,EAAE,SAAS,CAAC,iBAAiB;gBACjC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,MAA6C;QAC9D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,gDAAgD;gBACzD,IAAI,EAAE,uGAAuG;aAC9G,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;CACF;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAqB,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,uBAAuB,EAAE,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AAC7F,CAAC,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAqB,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACvF,CAAC,CAAC"}

package/dist/security/PasswordHasher.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Argon2id password hashing.
+ *
+ * New hashes use libsodium's self-describing string format (`$argon2id$...`),
+ * which embeds salt and parameters and is verified in constant time. Hashes
+ * written by Forge 1.x (`salt:hash`, both base64) are still accepted, and
+ * {@link needsRehash} tells the caller when to upgrade them after a login.
+ */
+export declare class PasswordHasher {
+    private dummyHash;
+    hash(password: string): Promise<string>;
+    verify(password: string, stored: string | undefined | null): Promise<boolean>;
+    /** True when the stored hash uses the 1.x format or weaker parameters. */
+    needsRehash(stored: string): Promise<boolean>;
+    /**
+     * Burns the same CPU time as a real verification. Call it when the account
+     * does not exist so response time does not reveal which e-mails are registered.
+     */
+    verifyAgainstDummy(password: string): Promise<void>;
+    private verifyLegacy;
+}
+//# sourceMappingURL=PasswordHasher.d.ts.map

package/dist/security/PasswordHasher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordHasher.d.ts","sourceRoot":"","sources":["../../src/security/PasswordHasher.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,SAAS,CAA8B;IAEzC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU5C;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAYlF;IAED,0EAA0E;IACpE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYlD;IAED;;;OAGG;IACG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxD;IAED,OAAO,CAAC,YAAY;CAgBrB"}

package/dist/security/PasswordHasher.js

@@ -0,0 +1,64 @@
+import { InternalError } from "../errors/index.js";
+import { getSodium } from "./Sodium.js";
+/**
+ * Argon2id password hashing.
+ *
+ * New hashes use libsodium's self-describing string format (`$argon2id$...`),
+ * which embeds salt and parameters and is verified in constant time. Hashes
+ * written by Forge 1.x (`salt:hash`, both base64) are still accepted, and
+ * {@link needsRehash} tells the caller when to upgrade them after a login.
+ */
+export class PasswordHasher {
+    dummyHash;
+    async hash(password) {
+        if (typeof password !== "string" || password.length === 0) {
+            throw new InternalError({ message: "Cannot hash an empty password." });
+        }
+        const sodium = await getSodium();
+        return sodium.crypto_pwhash_str(password, sodium.crypto_pwhash_OPSLIMIT_INTERACTIVE, sodium.crypto_pwhash_MEMLIMIT_INTERACTIVE);
+    }
+    async verify(password, stored) {
+        if (typeof password !== "string" || !password || typeof stored !== "string" || !stored)
+            return false;
+        const sodium = await getSodium();
+        try {
+            if (stored.startsWith("$argon2")) {
+                return sodium.crypto_pwhash_str_verify(stored, password);
+            }
+            return this.verifyLegacy(sodium, password, stored);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** True when the stored hash uses the 1.x format or weaker parameters. */
+    async needsRehash(stored) {
+        if (!stored.startsWith("$argon2"))
+            return true;
+        const sodium = await getSodium();
+        try {
+            return sodium.crypto_pwhash_str_needs_rehash(stored, sodium.crypto_pwhash_OPSLIMIT_INTERACTIVE, sodium.crypto_pwhash_MEMLIMIT_INTERACTIVE);
+        }
+        catch {
+            return true;
+        }
+    }
+    /**
+     * Burns the same CPU time as a real verification. Call it when the account
+     * does not exist so response time does not reveal which e-mails are registered.
+     */
+    async verifyAgainstDummy(password) {
+        this.dummyHash ??= this.hash("forge-timing-equaliser");
+        await this.verify(password, await this.dummyHash);
+    }
+    verifyLegacy(sodium, password, stored) {
+        const [saltB64, hashB64] = stored.split(":");
+        if (!saltB64 || !hashB64)
+            return false;
+        const salt = sodium.from_base64(saltB64);
+        const expected = sodium.from_base64(hashB64);
+        const actual = sodium.crypto_pwhash(32, password, salt, sodium.crypto_pwhash_OPSLIMIT_INTERACTIVE, sodium.crypto_pwhash_MEMLIMIT_INTERACTIVE, sodium.crypto_pwhash_ALG_DEFAULT);
+        return expected.length === actual.length && sodium.memcmp(expected, actual);
+    }
+}
+//# sourceMappingURL=PasswordHasher.js.map

package/dist/security/PasswordHasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordHasher.js","sourceRoot":"","sources":["../../src/security/PasswordHasher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,CAA8B;IAE/C,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,iBAAiB,CAC7B,QAAQ,EACR,MAAM,CAAC,kCAAkC,EACzC,MAAM,CAAC,kCAAkC,CAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,MAAiC;QAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAErG,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,OAAO,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,8BAA8B,CAC1C,MAAM,EACN,MAAM,CAAC,kCAAkC,EACzC,MAAM,CAAC,kCAAkC,CAC1C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAEO,YAAY,CAAC,MAA6C,EAAE,QAAgB,EAAE,MAAc;QAClG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CACjC,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,MAAM,CAAC,kCAAkC,EACzC,MAAM,CAAC,kCAAkC,EACzC,MAAM,CAAC,yBAAyB,CACjC,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/security/Sodium.d.ts

@@ -0,0 +1,4 @@
+import sodium from "libsodium-wrappers-sumo";
+/** Resolves once libsodium's WASM is initialised. */
+export declare const getSodium: () => Promise<typeof sodium>;
+//# sourceMappingURL=Sodium.d.ts.map

package/dist/security/Sodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sodium.d.ts","sourceRoot":"","sources":["../../src/security/Sodium.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAE7C,qDAAqD;AACrD,eAAO,MAAM,SAAS,QAAa,OAAO,CAAC,OAAO,MAAM,CAGvD,CAAC"}

package/dist/security/Sodium.js

@@ -0,0 +1,7 @@
+import sodium from "libsodium-wrappers-sumo";
+/** Resolves once libsodium's WASM is initialised. */
+export const getSodium = async () => {
+    await sodium.ready;
+    return sodium;
+};
+//# sourceMappingURL=Sodium.js.map

package/dist/security/Sodium.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sodium.js","sourceRoot":"","sources":["../../src/security/Sodium.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAE7C,qDAAqD;AACrD,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,IAA4B,EAAE;IAC1D,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/security/TokenService.d.ts

@@ -0,0 +1,63 @@
+import type { Duration } from "../config/Duration.js";
+export type TokenType = "access" | "refresh";
+export interface MfaChallengeClaims {
+    typ: "mfa";
+    sub: string;
+}
+export interface OAuthStateClaims {
+    typ: "oauth_state";
+    /** Provider name the flow was started for. */
+    prv: string;
+    /** Random `state` sent to the provider. */
+    st: string;
+    /** PKCE code verifier. */
+    cv?: string;
+    /** Safe front-end path to return to after sign-in. */
+    rt?: string;
+}
+export interface AccessClaims {
+    sub: string;
+    typ: "access";
+}
+export interface RefreshClaims {
+    sub: string;
+    typ: "refresh";
+    /** Unique id of this refresh token (its database record). */
+    jti: string;
+    /** Id shared by every token descended from one login. */
+    fam: string;
+}
+/**
+ * Signs and verifies JWTs.
+ *
+ * Hardening over 1.x: the algorithm is pinned (no `alg` confusion), tokens
+ * carry a `typ` claim so a long-lived refresh token can never be used as an
+ * access token, and issuer is checked.
+ */
+export declare class TokenService {
+    private readonly secret;
+    constructor(secret: string | undefined);
+    signAccess(userId: string, expiresIn: Duration): string;
+    signRefresh(claims: Omit<RefreshClaims, "typ">, expiresIn: Duration): string;
+    verifyAccess(token: string | undefined): AccessClaims;
+    verifyRefresh(token: string | undefined): RefreshClaims;
+    /** Proof that the password (or magic link) step succeeded and a second factor is now needed. Not a session. */
+    signMfaChallenge(userId: string, expiresIn: Duration): string;
+    verifyMfaChallenge(token: string | undefined): MfaChallengeClaims;
+    /** Short-lived, signed envelope for the OAuth `state`, PKCE verifier and return path (kept in a cookie). */
+    signOAuthState(claims: Omit<OAuthStateClaims, "typ">, expiresIn: Duration): string;
+    verifyOAuthState(token: string | undefined): OAuthStateClaims;
+    private sign;
+    private verify;
+    private requireSecret;
+}
+/** Hashing and comparison helpers for high-entropy secrets (refresh tokens, reset tokens). */
+export declare const sha256: (value: string) => string;
+export declare const safeEqual: (a: string, b: string) => boolean;
+/** Generates a URL-safe random token. */
+export declare const randomToken: (bytes?: number) => string;
+/** Generates a numeric code using a cryptographically secure RNG. */
+export declare const randomNumericCode: (digits?: number) => string;
+/** Keyed hash for short one-time codes so a database leak does not expose live codes. */
+export declare const hmacCode: (code: string, key: string) => string;
+//# sourceMappingURL=TokenService.d.ts.map

package/dist/security/TokenService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenService.d.ts","sourceRoot":"","sources":["../../src/security/TokenService.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7C,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,aAAa,CAAC;IACnB,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,SAAS,CAAC;IACf,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;CACb;AAkBD;;;;;;GAMG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,MAAM,GAAG,SAAS,EAAI;IAE3D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,GAAG,MAAM,CAEtD;IAED,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,GAAG,MAAM,CAE3E;IAED,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAEpD;IAED,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAMtD;IAED,+GAA+G;IAC/G,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,GAAG,MAAM,CAE5D;IAED,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAYhE;IAED,4GAA4G;IAC5G,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,GAAG,MAAM,CAEjF;IAED,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,CAe5D;IAED,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,MAAM;IA0Bd,OAAO,CAAC,aAAa;CAItB;AAED,8FAA8F;AAC9F,eAAO,MAAM,MAAM,UAAW,MAAM,KAAG,MAA0D,CAAC;AAElG,eAAO,MAAM,SAAS,MAAO,MAAM,KAAK,MAAM,KAAG,OAIhD,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,WAAW,sBAAiB,MAAkD,CAAC;AAE5F,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,uBAAiB,MACc,CAAC;AAE9D,yFAAyF;AACzF,eAAO,MAAM,QAAQ,SAAU,MAAM,OAAO,MAAM,KAAG,MACC,CAAC"}

package/dist/security/TokenService.js

@@ -0,0 +1,141 @@
+import { createHash, randomBytes, randomInt, timingSafeEqual, createHmac } from "node:crypto";
+import jwt, {} from "jsonwebtoken";
+import { BadRequestError, ErrorCode, UnauthorizedError } from "../errors/index.js";
+const ALGORITHM = "HS256";
+const ISSUER = "forge";
+const ERROR_CODES = {
+    access: {
+        missing: ErrorCode.ACCESS_TOKEN_MISSING,
+        invalid: ErrorCode.ACCESS_TOKEN_INVALID,
+        expired: ErrorCode.ACCESS_TOKEN_EXPIRED,
+    },
+    refresh: {
+        missing: ErrorCode.REFRESH_TOKEN_MISSING,
+        invalid: ErrorCode.REFRESH_TOKEN_INVALID,
+        expired: ErrorCode.REFRESH_TOKEN_EXPIRED,
+    },
+};
+/**
+ * Signs and verifies JWTs.
+ *
+ * Hardening over 1.x: the algorithm is pinned (no `alg` confusion), tokens
+ * carry a `typ` claim so a long-lived refresh token can never be used as an
+ * access token, and issuer is checked.
+ */
+export class TokenService {
+    secret;
+    constructor(secret) {
+        this.secret = secret;
+    }
+    signAccess(userId, expiresIn) {
+        return this.sign({ sub: userId, typ: "access" }, expiresIn);
+    }
+    signRefresh(claims, expiresIn) {
+        return this.sign({ ...claims, typ: "refresh" }, expiresIn);
+    }
+    verifyAccess(token) {
+        return this.verify(token, "access");
+    }
+    verifyRefresh(token) {
+        const claims = this.verify(token, "refresh");
+        if (typeof claims.jti !== "string" || typeof claims.fam !== "string") {
+            throw new UnauthorizedError({ message: "The refresh token is invalid.", code: ErrorCode.REFRESH_TOKEN_INVALID });
+        }
+        return claims;
+    }
+    /** Proof that the password (or magic link) step succeeded and a second factor is now needed. Not a session. */
+    signMfaChallenge(userId, expiresIn) {
+        return this.sign({ sub: userId, typ: "mfa" }, expiresIn);
+    }
+    verifyMfaChallenge(token) {
+        const invalid = () => new UnauthorizedError({ message: "The second-factor step has expired. Please sign in again.", code: ErrorCode.MFA_CHALLENGE_INVALID });
+        if (!token || typeof token !== "string")
+            throw invalid();
+        try {
+            const payload = jwt.verify(token, this.requireSecret(), { algorithms: [ALGORITHM], issuer: ISSUER });
+            if (payload.typ !== "mfa" || typeof payload.sub !== "string")
+                throw invalid();
+            return payload;
+        }
+        catch (error) {
+            if (error instanceof UnauthorizedError)
+                throw error;
+            throw invalid();
+        }
+    }
+    /** Short-lived, signed envelope for the OAuth `state`, PKCE verifier and return path (kept in a cookie). */
+    signOAuthState(claims, expiresIn) {
+        return this.sign({ ...claims, typ: "oauth_state" }, expiresIn);
+    }
+    verifyOAuthState(token) {
+        const invalid = () => new BadRequestError({
+            message: "The sign-in session is missing or has expired. Please start again.",
+            code: ErrorCode.OAUTH_STATE_INVALID,
+        });
+        if (!token)
+            throw invalid();
+        try {
+            const payload = jwt.verify(token, this.requireSecret(), { algorithms: [ALGORITHM], issuer: ISSUER });
+            if (payload.typ !== "oauth_state" || typeof payload.prv !== "string" || typeof payload.st !== "string")
+                throw invalid();
+            return payload;
+        }
+        catch (error) {
+            if (error instanceof BadRequestError)
+                throw error;
+            throw invalid();
+        }
+    }
+    sign(payload, expiresIn) {
+        return jwt.sign(payload, this.requireSecret(), {
+            algorithm: ALGORITHM,
+            issuer: ISSUER,
+            expiresIn: Math.max(1, expiresIn.toSeconds()),
+        });
+    }
+    verify(token, type) {
+        const codes = ERROR_CODES[type];
+        if (!token || typeof token !== "string") {
+            throw new UnauthorizedError({
+                message: type === "access" ? "Authentication is required." : "No refresh token was provided.",
+                code: codes.missing,
+            });
+        }
+        try {
+            const payload = jwt.verify(token, this.requireSecret(), { algorithms: [ALGORITHM], issuer: ISSUER });
+            if (payload.typ !== type || typeof payload.sub !== "string") {
+                throw new UnauthorizedError({ message: "The token is invalid.", code: codes.invalid });
+            }
+            return payload;
+        }
+        catch (error) {
+            if (error instanceof UnauthorizedError)
+                throw error;
+            const name = error.name;
+            throw new UnauthorizedError({
+                message: name === "TokenExpiredError" ? "The token has expired." : "The token is invalid.",
+                code: name === "TokenExpiredError" ? codes.expired : codes.invalid,
+                cause: error,
+            });
+        }
+    }
+    requireSecret() {
+        if (!this.secret)
+            throw new Error("jwtSecret is not configured");
+        return this.secret;
+    }
+}
+/** Hashing and comparison helpers for high-entropy secrets (refresh tokens, reset tokens). */
+export const sha256 = (value) => createHash("sha256").update(value).digest("hex");
+export const safeEqual = (a, b) => {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    return left.length === right.length && timingSafeEqual(left, right);
+};
+/** Generates a URL-safe random token. */
+export const randomToken = (bytes = 32) => randomBytes(bytes).toString("base64url");
+/** Generates a numeric code using a cryptographically secure RNG. */
+export const randomNumericCode = (digits = 6) => randomInt(0, 10 ** digits).toString().padStart(digits, "0");
+/** Keyed hash for short one-time codes so a database leak does not expose live codes. */
+export const hmacCode = (code, key) => createHmac("sha256", key).update(code).digest("hex");
+//# sourceMappingURL=TokenService.js.map

package/dist/security/TokenService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenService.js","sourceRoot":"","sources":["../../src/security/TokenService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,GAAG,EAAE,EAAmB,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAoCnF,MAAM,SAAS,GAAG,OAAgB,CAAC;AACnC,MAAM,MAAM,GAAG,OAAO,CAAC;AAEvB,MAAM,WAAW,GAA6E;IAC5F,MAAM,EAAE;QACN,OAAO,EAAE,SAAS,CAAC,oBAAoB;QACvC,OAAO,EAAE,SAAS,CAAC,oBAAoB;QACvC,OAAO,EAAE,SAAS,CAAC,oBAAoB;KACxC;IACD,OAAO,EAAE;QACP,OAAO,EAAE,SAAS,CAAC,qBAAqB;QACxC,OAAO,EAAE,SAAS,CAAC,qBAAqB;QACxC,OAAO,EAAE,SAAS,CAAC,qBAAqB;KACzC;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACM,MAAM;IAAnC,YAA6B,MAA0B;sBAA1B,MAAM;IAAuB,CAAC;IAE3D,UAAU,CAAC,MAAc,EAAE,SAAmB;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAyB,EAAE,SAAS,CAAC,CAAC;IACrF,CAAC;IAED,WAAW,CAAC,MAAkC,EAAE,SAAmB;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,SAAS,EAA0B,EAAE,SAAS,CAAC,CAAC;IACrF,CAAC;IAED,YAAY,CAAC,KAAyB;QACpC,OAAO,IAAI,CAAC,MAAM,CAAe,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAgB,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+GAA+G;IAC/G,gBAAgB,CAAC,MAAc,EAAE,SAAmB;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAA+B,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,kBAAkB,CAAC,KAAyB;QAC1C,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,2DAA2D,EAAE,IAAI,EAAE,SAAS,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACzI,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAgC,CAAC;YACpI,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC9E,OAAO,OAA6B,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,4GAA4G;IAC5G,cAAc,CAAC,MAAqC,EAAE,SAAmB;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,aAAa,EAA6B,EAAE,SAAS,CAAC,CAAC;IAC5F,CAAC;IAED,gBAAgB,CAAC,KAAyB;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,eAAe,CAAC;YAClB,OAAO,EAAE,oEAAoE;YAC7E,IAAI,EAAE,SAAS,CAAC,mBAAmB;SACpC,CAAC,CAAC;QACL,IAAI,CAAC,KAAK;YAAE,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAA8B,CAAC;YAClI,IAAI,OAAO,CAAC,GAAG,KAAK,aAAa,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;gBAAE,MAAM,OAAO,EAAE,CAAC;YACxH,OAAO,OAA2B,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,OAAe,EAAE,SAAmB;QAC/C,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE;YAC7C,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAuB,KAAyB,EAAE,IAAe;QAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,iBAAiB,CAAC;gBAC1B,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,gCAAgC;gBAC7F,IAAI,EAAE,KAAK,CAAC,OAAO;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAM,CAAC;YAC1G,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;YAC/C,MAAM,IAAI,iBAAiB,CAAC;gBAC1B,OAAO,EAAE,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,uBAAuB;gBAC1F,IAAI,EAAE,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;gBAClE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,yCAAyC;AACzC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAK,GAAG,EAAE,EAAU,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE5F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,EAAU,EAAE,CACtD,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE9D,yFAAyF;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE,CAC5D,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC"}

package/dist/security/Totp.d.ts

@@ -0,0 +1,46 @@
+/** RFC 4648 base32 (the encoding authenticator apps expect for secrets). */
+export declare const base32: {
+    encode(bytes: Uint8Array): string;
+    decode(text: string): Buffer;
+};
+export interface TotpOptions {
+    /** Code length. @default 6 */
+    digits?: number;
+    /** Seconds per code. @default 30 */
+    period?: number;
+    /** Accepted clock drift in steps either side of "now". @default 1 */
+    window?: number;
+}
+/**
+ * Time-based one-time passwords (RFC 6238, HMAC-SHA1) - what Google Authenticator, Authy,
+ * 1Password and friends generate.
+ */
+export declare class Totp {
+    readonly digits: number;
+    readonly period: number;
+    readonly window: number;
+    constructor(options?: TotpOptions);
+    /** A fresh 160-bit secret, base32 encoded. */
+    static generateSecret(bytes?: number): string;
+    /** The time step a moment falls in. */
+    stepAt(timeMs: number): number;
+    /** The code an authenticator app shows at `timeMs`. */
+    codeAt(secret: string, timeMs?: number): string;
+    /**
+     * Checks a user-supplied code against the steps around now.
+     * Returns the matching step (store it, and pass it as `afterStep` next time so a code can never be
+     * used twice), or `undefined`. Every candidate is compared in constant time with no early exit.
+     */
+    verify(secret: string, code: string, options?: {
+        now?: number;
+        afterStep?: number;
+    }): number | undefined;
+    /** The `otpauth://` URI that QR codes encode. */
+    otpauthUrl(input: {
+        secret: string;
+        issuer: string;
+        account: string;
+    }): string;
+    private hotp;
+}
+//# sourceMappingURL=Totp.d.ts.map

package/dist/security/Totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Totp.d.ts","sourceRoot":"","sources":["../../src/security/Totp.ts"],"names":[],"mappings":"AAIA,4EAA4E;AAC5E,eAAO,MAAM,MAAM;IACjB,MAAM,QAAQ,UAAU,GAAG,MAAM;IAgBjC,MAAM,OAAO,MAAM,GAAG,MAAM;CAiB7B,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,qBAAa,IAAI;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,OAAO,GAAE,WAAgB,EAIpC;IAED,8CAA8C;IAC9C,MAAM,CAAC,cAAc,CAAC,KAAK,SAAK,GAAG,MAAM,CAExC;IAED,uCAAuC;IACvC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7B;IAED,uDAAuD;IACvD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,MAAmB,GAAG,MAAM,CAE1D;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,MAAM,GAAG,SAAS,CAe3G;IAED,iDAAiD;IACjD,UAAU,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAU7E;IAED,OAAO,CAAC,IAAI;CAYb"}