@tozielinski/next-upstash-nonce 1.2.3 → 1.3.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.3.0](https://github.com/tozielinski/next-upstash-nonce/compare/v1.2.3...v1.3.0) (2025-11-22)
+
+
+### Features
+
+* create two new methods, to check nonces in the header of a request [verifyNonceFromRequest(), verifyAndDeleteNonceFromRequest()] ([a768479](https://github.com/tozielinski/next-upstash-nonce/commit/a76847993bb7fe66bf21900d83eb1ca5760d8afa))
+
 ## [1.2.3](https://github.com/tozielinski/next-upstash-nonce/compare/v1.2.2...v1.2.3) (2025-11-21)
 
 

package/dist/index.js

@@ -20,15 +20,27 @@ class NonceManager {
      * and returns the nonce string.
      */
     async create() {
-        // const buffer = crypto.randomBytes(this.length);
-        // const nonce = buffer.toString("hex");
         const nonce = (0, uuid_1.v4)();
         const key = this.prefix + nonce;
-        // console.log("creating nonce:", nonce);
-        // set with ttl (nx not required — collisions extremely unlikely)
         await this.redis.set(key, "1", { ex: this.ttlSeconds });
         return nonce;
     }
+    /**
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
+     */
+    async verify(nonce) {
+        if (!nonce)
+            return false;
+        try {
+            const res = await this.redis.get(`nonce:${nonce}`);
+            return res !== null;
+        }
+        catch (err) {
+            console.error("verify error:", err);
+            return false;
+        }
+    }
     /**
      * verifies a nonce and deletes it from Redis,
      * returning true if the nonce exists and has not expired.
@@ -36,16 +48,6 @@ class NonceManager {
     async verifyAndDelete(nonce) {
         if (!nonce)
             return false;
-        //       const key = this.prefix + nonce;
-        //
-        //       const script = `
-        //   local v = redis.call('GET', KEYS[1])
-        //   if v then
-        //     redis.call('DEL', KEYS[1])
-        //     return v
-        //   end
-        //   return nil
-        // `;
         try {
             const res = await this.redis.get(`nonce:${nonce}`);
             // const res = await (this.redis as any).eval(script, { keys: [key] });
@@ -58,6 +60,62 @@ class NonceManager {
             return false;
         }
     }
+    /**
+     * verifies a nonce from the Header of a request
+     * returns a NonceCheckResult if the nonce exists and has not expired.
+     */
+    async verifyNonceFromRequest(req) {
+        const nonce = req.headers.get("x-api-nonce");
+        if (!nonce) {
+            const response = Response.json({ error: "Missing x-api-nonce header" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "missing-header",
+                response,
+            };
+        }
+        const valid = await this.verify(nonce);
+        if (!valid) {
+            const response = Response.json({ error: "Invalid or expired nonce" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "invalid-or-expired",
+                response,
+            };
+        }
+        return {
+            valid: true,
+            nonce,
+        };
+    }
+    /**
+     * verifies a nonce from the Header of a request and deletes it from Redis
+     * returns a NonceCheckResult if the nonce exists and has not expired.
+     */
+    async verifyAndDeleteNonceFromRequest(req) {
+        const nonce = req.headers.get("x-api-nonce");
+        if (!nonce) {
+            const response = Response.json({ error: "Missing x-api-nonce header" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "missing-header",
+                response,
+            };
+        }
+        const valid = await this.verifyAndDelete(nonce);
+        if (!valid) {
+            const response = Response.json({ error: "Invalid or expired nonce" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "invalid-or-expired",
+                response,
+            };
+        }
+        return {
+            valid: true,
+            nonce,
+        };
+    }
     /**
      * Optional: delete a nonce from Redis manually
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tozielinski/next-upstash-nonce",
-  "version": "1.2.3",
+  "version": "1.3.0",
   "description": "Create, store, verify and delete nonces in Redis by Upstash for Next.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -32,7 +32,6 @@
   "homepage": "https://github.com/tozielinski/next-upstash-nonce#readme",
   "dependencies": {
     "@upstash/redis": "1.22.0",
-    "crypto": "^1.0.1",
     "uuid": "^13.0.0"
   },
   "devDependencies": {