@syldel/crypto-utils 1.0.1

package/LICENSE.MD

@@ -0,0 +1,5 @@
+Copyright (c) 2026, Syl-Studio Inc. c/o Syl. D.
+
+Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,76 @@
+# @syldel/crypto-utils
+
+Lightweight JWT and AES-256-GCM utilities
+
+---
+
+## 👨‍💻 Développement
+
+### Installation des dépendances
+```bash
+npm install
+```
+
+### Compilation
+Génère le dossier `dist/` contenant les fichiers JavaScript et les déclarations de types (`.d.ts`).
+```bash
+npm run build
+```
+
+### Qualité du code
+Le projet utilise **ESLint** pour la logique et **Prettier** pour le formatage.
+```bash
+# Vérifier les erreurs
+npx eslint .
+```
+
+---
+
+## 🔗 Utilisation en local (Development Workflow)
+
+Pour utiliser ce package dans tes autres projets sans le publier sur NPM :
+
+1.  Dans le dossier `crypto-utils` :
+    ```bash
+    npm link
+    ```
+2.  Dans ton projet (ex: `my-nest-project`) :
+    ```bash
+    npm link @syldel/crypto-utils
+    ```
+
+---
+
+## 📦 Publication
+
+Le projet utilise des **Granular Access Tokens** pour la publication afin de contourner la double authentification (2FA) manuelle tout en maintenant une sécurité maximale.
+
+### Configuration du Token
+1. Générer un token sur NPM avec les permissions `Read and Write`.
+2. Restreindre l'accès au package `@syldel/crypto-utils` uniquement.
+3. Utiliser l'option `Bypass 2FA` pour permettre l'automatisation.
+
+### Commande de publication rapide
+Si tu n'utilises pas de fichier `.npmrc`, tu peux publier en passant le token directement :
+```bash
+npm publish --access public --//registry.npmjs.org/:_authToken=TON_TOKEN_ICI
+```
+
+### Configuration de la publication
+Créez un fichier .npmrc à la racine (ignoré par Git) pour l'authentification :
+
+```
+//registry.npmjs.org/:_authToken=npm_votre_token_ici
+```
+
+### Publier une nouvelle version
+La commande suivante automatise le build, l'incrémentation de version et l'envoi vers NPM :
+
+```bash
+npm run release
+```
+
+### Pousse le commit ET le tag sur GitHub
+```bash
+git push origin main --follow-tags
+```

package/dist/aes-gcm.util.d.ts

@@ -0,0 +1,10 @@
+export interface EncryptedData {
+    data: string;
+    iv: string;
+    tag: string;
+}
+export declare class AesGcmUtil {
+    private static validateKey;
+    static encrypt(text: string, key: Buffer | string): EncryptedData;
+    static decrypt(payload: EncryptedData, key: Buffer | string): string;
+}

package/dist/aes-gcm.util.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AesGcmUtil = void 0;
+const crypto = __importStar(require("crypto"));
+class AesGcmUtil {
+    static validateKey(key) {
+        const encryptionKey = typeof key === 'string' ? Buffer.from(key, 'hex') : key;
+        if (encryptionKey.length !== 32) {
+            throw new Error('Invalid Key: Key must be 32 bytes (64 hex characters)');
+        }
+        return encryptionKey;
+    }
+    static encrypt(text, key) {
+        const encryptionKey = this.validateKey(key);
+        const iv = crypto.randomBytes(12);
+        const cipher = crypto.createCipheriv('aes-256-gcm', encryptionKey, iv);
+        let encrypted = cipher.update(text, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        return {
+            data: encrypted,
+            iv: iv.toString('hex'),
+            tag: cipher.getAuthTag().toString('hex'),
+        };
+    }
+    static decrypt(payload, key) {
+        const encryptionKey = this.validateKey(key);
+        const decipher = crypto.createDecipheriv('aes-256-gcm', encryptionKey, Buffer.from(payload.iv, 'hex'));
+        decipher.setAuthTag(Buffer.from(payload.tag, 'hex'));
+        let decrypted = decipher.update(payload.data, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+}
+exports.AesGcmUtil = AesGcmUtil;

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './jwt.util';
+export * from './aes-gcm.util';

package/dist/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./jwt.util"), exports);
+__exportStar(require("./aes-gcm.util"), exports);

package/dist/jwt.util.d.ts

@@ -0,0 +1,4 @@
+export declare class PureJwtUtil {
+    static verify<T extends object>(token: string, secret: string): T;
+    static sign(payload: Record<string, any>, secret: string): string;
+}

package/dist/jwt.util.js

@@ -0,0 +1,73 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PureJwtUtil = void 0;
+const crypto = __importStar(require("crypto"));
+class PureJwtUtil {
+    static verify(token, secret) {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            throw new Error('Invalid token format');
+        const [headerB64, payloadB64, signatureB64] = parts;
+        const dataToVerify = `${headerB64}.${payloadB64}`;
+        const expectedSignature = crypto
+            .createHmac('sha256', secret)
+            .update(dataToVerify)
+            .digest('base64url');
+        if (signatureB64 !== expectedSignature) {
+            throw new Error('Invalid signature');
+        }
+        const payload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString('utf8'));
+        const payloadRecord = payload;
+        if (typeof payloadRecord.exp === 'number') {
+            if (Date.now() >= payloadRecord.exp * 1000) {
+                throw new Error('Token expired');
+            }
+        }
+        return payload;
+    }
+    static sign(payload, secret) {
+        const header = { alg: 'HS256', typ: 'JWT' };
+        const encode = (obj) => Buffer.from(JSON.stringify(obj)).toString('base64url');
+        const encodedHeader = encode(header);
+        const encodedPayload = encode(payload);
+        const signature = crypto
+            .createHmac('sha256', secret)
+            .update(`${encodedHeader}.${encodedPayload}`)
+            .digest('base64url');
+        return `${encodedHeader}.${encodedPayload}.${signature}`;
+    }
+}
+exports.PureJwtUtil = PureJwtUtil;

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@syldel/crypto-utils",
+  "version": "1.0.1",
+  "description": "Lightweight JWT and AES-256-GCM utilities",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "clean": "rm -rf dist",
+    "build": "npm run lint && npm run clean && tsc -p tsconfig.json",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "prepublishOnly": "npm run build",
+    "release": "npm run build && npm version patch && npm publish"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "jwt",
+    "aes",
+    "crypto",
+    "security",
+    "nestjs"
+  ],
+  "author": "Syl. D.",
+  "license": "ISC",
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/jest": "^30.0.0",
+    "eslint": "^10.0.1",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-jsonc": "^3.0.0",
+    "eslint-plugin-prettier": "^5.5.5",
+    "jest": "^30.2.0",
+    "jsonc-eslint-parser": "^3.1.0",
+    "prettier": "^3.8.1",
+    "ts-jest": "^29.4.6",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.56.0"
+  },
+  "overrides": {
+    "minimatch": "^10.2.1"
+  }
+}