@tozielinski/next-upstash-nonce 0.1.4 → 1.1.4

package/.github/workflows/publish.yml

@@ -0,0 +1,34 @@
+name: Publish to npm
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    name: Publish package to npm
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org/"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Publish to npm via Trusted Publishing
+        run: npm publish --access public

package/.github/workflows/release-please.yml

@@ -0,0 +1,27 @@
+name: Release Please
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Release Please
+        uses: googleapis/release-please-action@v4
+        with:
+          token: ${{ secrets.GH_PAT }}
+          release-type: node
+          path: "."                 # das root package
+          config-file: .release-please-config.json
+          manifest-file: .release-please-manifest.json
+

package/.release-please-config.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "release-type": "node",
+  "packages": {
+    ".": {
+      "component": "next-upstash-nonce"
+    }
+  }
+}

package/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.1.4"
+}

package/CHANGELOG.md

@@ -0,0 +1,37 @@
+# Changelog
+
+## [1.1.4](https://github.com/tozielinski/next-upstash-nonce/compare/v1.1.3...v1.1.4) (2025-11-21)
+
+
+### Bug Fixes
+
+* try to implement auto-merge ([49705cf](https://github.com/tozielinski/next-upstash-nonce/commit/49705cf1227cb2c8fc294600d0f7b308a6e865ca))
+
+## [1.1.3](https://github.com/tozielinski/next-upstash-nonce/compare/v1.1.2...v1.1.3) (2025-11-21)
+
+
+### Bug Fixes
+
+* changed back to crypto ([b7db377](https://github.com/tozielinski/next-upstash-nonce/commit/b7db3770cf13f0473b9c566a2e8812276cea43fb))
+* try to implement auto-merge ([3155121](https://github.com/tozielinski/next-upstash-nonce/commit/31551211d8c2cfeb4b33ce6f45a3fb7959ac7934))
+
+## [1.1.2](https://github.com/tozielinski/next-upstash-nonce/compare/v1.1.1...v1.1.2) (2025-11-21)
+
+
+### Bug Fixes
+
+* enable trusted publisher on npm ([48ea331](https://github.com/tozielinski/next-upstash-nonce/commit/48ea331c423e2bb4df7c558ebf4b6a1673529ead))
+
+## [1.1.1](https://github.com/tozielinski/next-upstash-nonce/compare/v1.1.0...v1.1.1) (2025-11-21)
+
+
+### Bug Fixes
+
+* initialize release flow ([fee5eb3](https://github.com/tozielinski/next-upstash-nonce/commit/fee5eb36ba3e904ee07a1970c2d82546babbc61b))
+
+## [1.1.0](https://github.com/tozielinski/next-upstash-nonce/compare/v1.0.0...v1.1.0) (2025-11-21)
+
+
+### Features
+
+* initialize release flow ([70274c3](https://github.com/tozielinski/next-upstash-nonce/commit/70274c3610ebf02f080e513eee8626774e84a977))

package/README.md

@@ -1,8 +1,8 @@
 # next-upstash-nonce
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![npm version](https://img.shields.io/npm/v/%40tozielinski%2Fnext-upstash-nonce)](https://www.npmjs.com/package/@tozielinski/next-upstash-nonce)
 
-
-Create, store, verify and delete nonces in Redis by Upstash for Next.js
+## Create, store, verify and delete nonces in Redis by Upstash for Next.js
 
 # Quick Start
 ### Install the package:

package/dist/index.d.ts

@@ -11,17 +11,18 @@ export declare class NonceManager {
     private prefix;
     constructor(redis: Redis, opts?: NonceOptions);
     /**
-     * Generiert einen neuen, kryptographisch sicheren Nonce,
-     * speichert ihn in Redis und gibt ihn zurück.
+     * generates a new, secure nonce,
+     * inserts it into Redis with a TTL,
+     * and returns the nonce string.
      */
     create(): Promise<string>;
     /**
-     * Verifiziert einen Nonce: prüft ob vorhanden, und löscht ihn atomisch.
-     * Gibt true zurück, wenn Validierung erfolgreich war (Nonce existierte und wurde entfernt).
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
      */
     verifyAndDelete(nonce: string): Promise<boolean>;
     /**
-     * Optional: entferne einen Nonce ohne Verifizierung
+     * Optional: delete a nonce from Redis manually
      */
     delete(nonce: string): Promise<void>;
 }

package/dist/index.js

@@ -1,11 +1,8 @@
 "use strict";
 'use server';
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NonceManager = void 0;
-const crypto_1 = __importDefault(require("crypto"));
+const uuid_1 = require("uuid");
 class NonceManager {
     constructor(redis, opts = {}) {
         this.redis = redis;
@@ -14,21 +11,23 @@ class NonceManager {
         this.prefix = opts.prefix ?? "nonce:";
     }
     /**
-     * Generiert einen neuen, kryptographisch sicheren Nonce,
-     * speichert ihn in Redis und gibt ihn zurück.
+     * generates a new, secure nonce,
+     * inserts it into Redis with a TTL,
+     * and returns the nonce string.
      */
     async create() {
-        const buffer = crypto_1.default.randomBytes(this.length);
-        const nonce = buffer.toString("hex");
+        // const buffer = crypto.randomBytes(this.length);
+        // const nonce = buffer.toString("hex");
+        const nonce = (0, uuid_1.v4)();
         const key = this.prefix + nonce;
-        console.log("creating nonce:", nonce);
+        // console.log("creating nonce:", nonce);
         // set with ttl (nx not required — collisions extremely unlikely)
         await this.redis.set(key, "1", { ex: this.ttlSeconds });
         return nonce;
     }
     /**
-     * Verifiziert einen Nonce: prüft ob vorhanden, und löscht ihn atomisch.
-     * Gibt true zurück, wenn Validierung erfolgreich war (Nonce existierte und wurde entfernt).
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
      */
     async verifyAndDelete(nonce) {
         if (!nonce)
@@ -56,7 +55,7 @@ class NonceManager {
         }
     }
     /**
-     * Optional: entferne einen Nonce ohne Verifizierung
+     * Optional: delete a nonce from Redis manually
      */
     async delete(nonce) {
         const key = this.prefix + nonce;

package/package.json

@@ -1,11 +1,17 @@
 {
   "name": "@tozielinski/next-upstash-nonce",
-  "version": "0.1.4",
+  "version": "1.1.4",
   "description": "Create, store, verify and delete nonces in Redis by Upstash for Next.js",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
-    "build": "tsc"
+    "build": "tsc",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
   },
   "repository": {
     "type": "git",
@@ -26,10 +32,12 @@
   "homepage": "https://github.com/tozielinski/next-upstash-nonce#readme",
   "dependencies": {
     "@upstash/redis": "1.22.0",
-    "crypto": "^1.0.1"
+    "crypto": "^1.0.1",
+    "uuid": "^13.0.0"
   },
   "devDependencies": {
-    "@types/node": "^20.0.0",
-    "typescript": "^5.0.0"
+    "@types/node": "^20.19.25",
+    "typescript": "^5.0.0",
+    "vitest": "^4.0.12"
   }
 }

package/src/index.js

@@ -0,0 +1,74 @@
+'use server';
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NonceManager = void 0;
+// import {v4 as uuid} from "uuid";
+const crypto_1 = __importDefault(require("crypto"));
+class NonceManager {
+    redis;
+    length;
+    ttlSeconds;
+    prefix;
+    constructor(redis, opts = {}) {
+        this.redis = redis;
+        this.length = opts.length ?? 32; // default 32 bytes -> 64 hex chars
+        this.ttlSeconds = opts.ttlSeconds ?? 60 * 5; // default 5 minutes
+        this.prefix = opts.prefix ?? "nonce:";
+    }
+    /**
+     * generates a new, secure nonce,
+     * inserts it into Redis with a TTL,
+     * and returns the nonce string.
+     */
+    async create() {
+        const buffer = crypto_1.default.randomBytes(this.length);
+        const nonce = buffer.toString("hex");
+        // const nonce = uuid();
+        const key = this.prefix + nonce;
+        // console.log("creating nonce:", nonce);
+        // set with ttl (nx not required — collisions extremely unlikely)
+        await this.redis.set(key, "1", { ex: this.ttlSeconds });
+        return nonce;
+    }
+    /**
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
+     */
+    async verifyAndDelete(nonce) {
+        if (!nonce)
+            return false;
+        //       const key = this.prefix + nonce;
+        //
+        //       const script = `
+        //   local v = redis.call('GET', KEYS[1])
+        //   if v then
+        //     redis.call('DEL', KEYS[1])
+        //     return v
+        //   end
+        //   return nil
+        // `;
+        try {
+            const res = await this.redis.get(`nonce:${nonce}`);
+            // const res = await (this.redis as any).eval(script, { keys: [key] });
+            if (res)
+                await this.redis.del(`nonce:${nonce}`);
+            return res !== null;
+        }
+        catch (err) {
+            console.error("verifyAndDelete error:", err);
+            return false;
+        }
+    }
+    /**
+     * Optional: delete a nonce from Redis manually
+     */
+    async delete(nonce) {
+        const key = this.prefix + nonce;
+        await this.redis.del(key);
+    }
+}
+exports.NonceManager = NonceManager;
+exports.default = NonceManager;

package/src/index.ts

@@ -1,6 +1,7 @@
 'use server'
 
 import { Redis } from "@upstash/redis";
+// import {v4 as uuid} from "uuid";
 import crypto from "crypto";
 
 export type NonceOptions = {
@@ -25,15 +26,17 @@ export class NonceManager {
 
 
     /**
-     * Generiert einen neuen, kryptographisch sicheren Nonce,
-     * speichert ihn in Redis und gibt ihn zurück.
+     * generates a new, secure nonce,
+     * inserts it into Redis with a TTL,
+     * and returns the nonce string.
      */
     async create(): Promise<string> {
         const buffer = crypto.randomBytes(this.length);
         const nonce = buffer.toString("hex");
+        // const nonce = uuid();
         const key = this.prefix + nonce;
 
-console.log("creating nonce:", nonce);
+// console.log("creating nonce:", nonce);
 // set with ttl (nx not required — collisions extremely unlikely)
         await this.redis.set(key, "1", { ex: this.ttlSeconds });
         return nonce;
@@ -41,8 +44,8 @@ console.log("creating nonce:", nonce);
 
 
     /**
-     * Verifiziert einen Nonce: prüft ob vorhanden, und löscht ihn atomisch.
-     * Gibt true zurück, wenn Validierung erfolgreich war (Nonce existierte und wurde entfernt).
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
      */
     async verifyAndDelete(nonce: string): Promise<boolean> {
         if (!nonce) return false;
@@ -70,7 +73,7 @@ console.log("creating nonce:", nonce);
 
 
     /**
-     * Optional: entferne einen Nonce ohne Verifizierung
+     * Optional: delete a nonce from Redis manually
      */
     async delete(nonce: string): Promise<void> {
         const key = this.prefix + nonce;

package/tsconfig.json

@@ -1,12 +1,13 @@
 {
   "compilerOptions": {
-    "target": "es2020",
-    "module": "commonjs",
-    "declaration": true,
-    "outDir": "dist",
-    "strict": true,
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
     "esModuleInterop": true,
-    "forceConsistentCasingInFileNames": true
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "types": ["node"]
   },
-  "include": ["src/**/*"]
+  "include": ["src"]
 }