@tanakayuto/intmax402-fetch 0.1.0

package/README.md

@@ -0,0 +1,121 @@
+# @tanakayuto/intmax402-fetch
+
+Web標準の `Request`/`Response` で動く INTMAX402 認証アダプター。
+
+Hono、Next.js、Cloudflare Workers など、すべての fetch ベースフレームワークで使える共通基盤です。
+
+## インストール
+
+```bash
+npm install @tanakayuto/intmax402-fetch
+```
+
+## 使い方
+
+### Cloudflare Workers
+
+```typescript
+import { handleIntmax402 } from "@tanakayuto/intmax402-fetch"
+
+const config = {
+  secret: process.env.INTMAX402_SECRET!,
+  mode: "signature" as const,
+}
+
+export default {
+  async fetch(request: Request): Promise<Response> {
+    const result = await handleIntmax402(request, config)
+    if (result.response) {
+      // 認証失敗 → エラーレスポンスを返す
+      return result.response
+    }
+    // 認証成功 → result.context にアドレス等が入る
+    const { address } = result.context
+    return new Response(`Hello, ${address}!`)
+  },
+}
+```
+
+### Hono
+
+```typescript
+import { Hono } from "hono"
+import { handleIntmax402 } from "@tanakayuto/intmax402-fetch"
+
+const app = new Hono()
+
+const config = {
+  secret: process.env.INTMAX402_SECRET!,
+  mode: "signature" as const,
+}
+
+app.use("/protected/*", async (c, next) => {
+  const result = await handleIntmax402(c.req.raw, config)
+  if (result.response) {
+    return result.response
+  }
+  c.set("intmax402", result.context)
+  await next()
+})
+
+app.get("/protected/resource", (c) => {
+  const ctx = c.get("intmax402")
+  return c.json({ message: "Access granted", address: ctx.address })
+})
+```
+
+### Next.js App Router (Middleware)
+
+```typescript
+// middleware.ts
+import { NextRequest, NextResponse } from "next/server"
+import { handleIntmax402 } from "@tanakayuto/intmax402-fetch"
+
+const config = {
+  secret: process.env.INTMAX402_SECRET!,
+  mode: "payment" as const,
+  serverAddress: process.env.SERVER_ADDRESS!,
+  amount: process.env.PAYMENT_AMOUNT!,
+}
+
+export async function middleware(request: NextRequest) {
+  const result = await handleIntmax402(request, config)
+  if (result.response) {
+    return result.response
+  }
+  // 認証成功 → ヘッダーにアドレスを追加して続行
+  const requestHeaders = new Headers(request.headers)
+  requestHeaders.set("x-intmax402-address", result.context.address)
+  return NextResponse.next({ request: { headers: requestHeaders } })
+}
+
+export const config = {
+  matcher: "/api/protected/:path*",
+}
+```
+
+## API
+
+### `handleIntmax402(request, config)`
+
+**パラメータ:**
+- `request: Request` — Web標準の Request オブジェクト
+- `config: INTMAX402Config` — 認証設定
+
+**戻り値:**
+- 認証失敗時: `{ response: Response, context: null }` — このレスポンスをクライアントに返す
+- 認証成功時: `{ response: null, context: Intmax402Context }` — 次のハンドラに進む
+
+### `Intmax402Context`
+
+```typescript
+interface Intmax402Context {
+  address: string   // 認証済みウォレットアドレス
+  verified: boolean // 常に true
+  txHash?: string   // payment モード時のトランザクションハッシュ
+}
+```
+
+## ライセンス
+
+MIT

package/dist/handler.d.ts

@@ -0,0 +1,18 @@
+import { INTMAX402Config } from "@tanakayuto/intmax402-core";
+export interface Intmax402Context {
+    address: string;
+    verified: boolean;
+    txHash?: string;
+}
+/**
+ * Handle INTMAX402 authentication for any Web Standard fetch-based framework.
+ * Returns null if auth passes (proceed to next handler).
+ * Returns Response if auth fails (return this response to client).
+ */
+export declare function handleIntmax402(request: Request, config: INTMAX402Config): Promise<{
+    response: Response;
+    context: null;
+} | {
+    response: null;
+    context: Intmax402Context;
+}>;

package/dist/handler.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleIntmax402 = handleIntmax402;
+const intmax402_core_1 = require("@tanakayuto/intmax402-core");
+const crypto_1 = require("@tanakayuto/intmax402-express/dist/crypto");
+const verify_payment_1 = require("@tanakayuto/intmax402-express/dist/verify-payment");
+/**
+ * Handle INTMAX402 authentication for any Web Standard fetch-based framework.
+ * Returns null if auth passes (proceed to next handler).
+ * Returns Response if auth fails (return this response to client).
+ */
+async function handleIntmax402(request, config) {
+    const url = new URL(request.url);
+    const authHeader = request.headers.get("authorization");
+    const ip = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim()
+        ?? request.headers.get("x-real-ip")
+        ?? "unknown";
+    if (!authHeader) {
+        const nonce = (0, intmax402_core_1.generateNonce)(config.secret, ip, url.pathname, config.bindIp ?? false);
+        const statusCode = config.mode === "payment" ? 402 : 401;
+        return {
+            response: new Response(JSON.stringify({
+                error: config.mode === "payment" ? "Payment Required" : "Unauthorized",
+                protocol: "INTMAX402",
+                mode: config.mode,
+            }), {
+                status: statusCode,
+                headers: {
+                    "Content-Type": "application/json",
+                    "WWW-Authenticate": buildWWWAuthenticate(nonce, config),
+                },
+            }),
+            context: null,
+        };
+    }
+    const credential = (0, intmax402_core_1.parseAuthorization)(authHeader);
+    if (!credential) {
+        return { response: errorResponse(401, "Invalid authorization header"), context: null };
+    }
+    if (!(0, intmax402_core_1.verifyNonce)(credential.nonce, config.secret, ip, url.pathname, config.bindIp ?? false)) {
+        return { response: errorResponse(401, "Invalid or expired nonce"), context: null };
+    }
+    if (config.allowList && config.allowList.length > 0) {
+        if (!config.allowList.includes(credential.address.toLowerCase())) {
+            return { response: errorResponse(403, "Address not in allow list"), context: null };
+        }
+    }
+    const isValidSig = (0, crypto_1.verifySignature)(credential.signature, credential.nonce, credential.address);
+    if (!isValidSig) {
+        return { response: errorResponse(401, "Invalid signature"), context: null };
+    }
+    if (config.mode === "payment") {
+        if (!credential.txHash) {
+            return { response: errorResponse(402, "Payment transaction hash required"), context: null };
+        }
+        if (!config.serverAddress || !config.amount) {
+            return { response: errorResponse(500, "Server misconfigured"), context: null };
+        }
+        const paymentResult = await (0, verify_payment_1.verifyPayment)(credential.txHash, config.amount, config.serverAddress);
+        if (!paymentResult.valid) {
+            return { response: errorResponse(402, paymentResult.error ?? "Payment verification failed"), context: null };
+        }
+    }
+    return {
+        response: null,
+        context: { address: credential.address, verified: true, txHash: credential.txHash },
+    };
+}
+function buildWWWAuthenticate(nonce, config) {
+    let header = `INTMAX402 realm="intmax402", nonce="${nonce}", mode="${config.mode}"`;
+    if (config.serverAddress)
+        header += `, serverAddress="${config.serverAddress}"`;
+    if (config.amount)
+        header += `, amount="${config.amount}"`;
+    if (config.tokenAddress)
+        header += `, tokenAddress="${config.tokenAddress}"`;
+    if (config.chainId)
+        header += `, chainId="${config.chainId}"`;
+    return header;
+}
+function errorResponse(status, message) {
+    return new Response(JSON.stringify({ error: message }), {
+        status,
+        headers: { "Content-Type": "application/json" },
+    });
+}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { handleIntmax402, type Intmax402Context } from "./handler";
+export type { INTMAX402Config } from "@tanakayuto/intmax402-core";

package/dist/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleIntmax402 = void 0;
+var handler_1 = require("./handler");
+Object.defineProperty(exports, "handleIntmax402", { enumerable: true, get: function () { return handler_1.handleIntmax402; } });

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@tanakayuto/intmax402-fetch",
+  "version": "0.1.0",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zaq2989/intmax402"
+  },
+  "keywords": [
+    "intmax",
+    "http-402",
+    "payment",
+    "ai-agent",
+    "fetch",
+    "web-standard",
+    "cloudflare-workers"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@tanakayuto/intmax402-core": "0.2.2",
+    "@tanakayuto/intmax402-express": "0.2.2",
+    "ethers": "^6.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.4.0",
+    "@types/node": "^20.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist"
+  }
+}