@tozielinski/next-upstash-nonce 1.2.3 → 1.3.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.3.1](https://github.com/tozielinski/next-upstash-nonce/compare/v1.3.0...v1.3.1) (2025-11-22)
+
+
+### Bug Fixes
+
+* enable type generation ([6df83aa](https://github.com/tozielinski/next-upstash-nonce/commit/6df83aa769f367481231b21f7cac0d3c0297af40))
+
+## [1.3.0](https://github.com/tozielinski/next-upstash-nonce/compare/v1.2.3...v1.3.0) (2025-11-22)
+
+
+### Features
+
+* create two new methods, to check nonces in the header of a request [verifyNonceFromRequest(), verifyAndDeleteNonceFromRequest()] ([a768479](https://github.com/tozielinski/next-upstash-nonce/commit/a76847993bb7fe66bf21900d83eb1ca5760d8afa))
+
 ## [1.2.3](https://github.com/tozielinski/next-upstash-nonce/compare/v1.2.2...v1.2.3) (2025-11-21)
 
 

package/README.md

@@ -52,9 +52,28 @@ export async function POST(req: Request) {
 
     const valid = await nonceManager.verifyAndDelete(nonce);
 
+    // valid will be true if nonce was found and deleted
+    // false if nonce was not found or expired
+    
     return NextResponse.json({nonce: nonce, valid: valid});
 }
 ```
+or more simple
+```typescript
+'use server'
+mport {NextResponse} from "next/server";
+import {nonceManager} from "@/[wherever you store your nonceManager instance]";
+
+export async function POST(req: Request) {
+    const result = await nonceManager.verifyAndDeleteNonceFromRequest(req);
+
+    // result will be {nonce: string, valid: true} or
+    // {valid false, reason: string, response: NextResponse}
+    // if nonce was not found or expired
+    
+    return NextResponse.json({nonce: result.nonce, valid: result.valid});
+}
+```
 ### Use it in your client side
 ```typescript
 'use client'

package/dist/index.d.ts

@@ -0,0 +1,53 @@
+import { Redis } from "@upstash/redis";
+export type NonceOptions = {
+    length?: number;
+    ttlSeconds?: number;
+    prefix?: string;
+};
+export type NonceCheckResult = {
+    valid: true;
+    nonce: string;
+} | {
+    valid: false;
+    reason: "missing-header" | "invalid-or-expired";
+    response: Response;
+};
+export declare class NonceManager {
+    private redis;
+    private length;
+    private ttlSeconds;
+    private prefix;
+    constructor(redis: Redis, opts?: NonceOptions);
+    /**
+     * generates a new, secure nonce,
+     * inserts it into Redis with a TTL,
+     * and returns the nonce string.
+     */
+    create(): Promise<string>;
+    /**
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
+     */
+    verify(nonce: string): Promise<boolean>;
+    /**
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
+     */
+    verifyAndDelete(nonce: string): Promise<boolean>;
+    /**
+     * verifies a nonce from the Header of a request
+     * returns a NonceCheckResult if the nonce exists and has not expired.
+     */
+    verifyNonceFromRequest(req: Request): Promise<NonceCheckResult>;
+    /**
+     * verifies a nonce from the Header of a request and deletes it from Redis
+     * returns a NonceCheckResult if the nonce exists and has not expired.
+     */
+    verifyAndDeleteNonceFromRequest(req: Request): Promise<NonceCheckResult>;
+    /**
+     * Optional: delete a nonce from Redis manually
+     */
+    delete(nonce: string): Promise<void>;
+}
+export default NonceManager;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAGvC,MAAM,MAAM,YAAY,GAAG;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAK;IAC7B,KAAK,EAAE,IAAI,CAAC;IACZ,KAAK,EAAE,MAAM,CAAA;CAChB,GAAG;IACA,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IAChD,QAAQ,EAAE,QAAQ,CAAA;CACrB,CAAC;AAEF,qBAAa,YAAY;IACrB,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAS;gBAGX,KAAK,EAAE,KAAK,EAAE,IAAI,GAAE,YAAiB;IAQjD;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAS/B;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa7C;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAetD;;;OAGG;IACG,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoCrE;;;OAGG;IACG,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoC9E;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAI7C;AAGD,eAAe,YAAY,CAAC"}

package/dist/index.js

@@ -20,15 +20,27 @@ class NonceManager {
      * and returns the nonce string.
      */
     async create() {
-        // const buffer = crypto.randomBytes(this.length);
-        // const nonce = buffer.toString("hex");
         const nonce = (0, uuid_1.v4)();
         const key = this.prefix + nonce;
-        // console.log("creating nonce:", nonce);
-        // set with ttl (nx not required — collisions extremely unlikely)
         await this.redis.set(key, "1", { ex: this.ttlSeconds });
         return nonce;
     }
+    /**
+     * verifies a nonce and deletes it from Redis,
+     * returning true if the nonce exists and has not expired.
+     */
+    async verify(nonce) {
+        if (!nonce)
+            return false;
+        try {
+            const res = await this.redis.get(`nonce:${nonce}`);
+            return res !== null;
+        }
+        catch (err) {
+            console.error("verify error:", err);
+            return false;
+        }
+    }
     /**
      * verifies a nonce and deletes it from Redis,
      * returning true if the nonce exists and has not expired.
@@ -36,16 +48,6 @@ class NonceManager {
     async verifyAndDelete(nonce) {
         if (!nonce)
             return false;
-        //       const key = this.prefix + nonce;
-        //
-        //       const script = `
-        //   local v = redis.call('GET', KEYS[1])
-        //   if v then
-        //     redis.call('DEL', KEYS[1])
-        //     return v
-        //   end
-        //   return nil
-        // `;
         try {
             const res = await this.redis.get(`nonce:${nonce}`);
             // const res = await (this.redis as any).eval(script, { keys: [key] });
@@ -58,6 +60,62 @@ class NonceManager {
             return false;
         }
     }
+    /**
+     * verifies a nonce from the Header of a request
+     * returns a NonceCheckResult if the nonce exists and has not expired.
+     */
+    async verifyNonceFromRequest(req) {
+        const nonce = req.headers.get("x-api-nonce");
+        if (!nonce) {
+            const response = Response.json({ error: "Missing x-api-nonce header" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "missing-header",
+                response,
+            };
+        }
+        const valid = await this.verify(nonce);
+        if (!valid) {
+            const response = Response.json({ error: "Invalid or expired nonce" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "invalid-or-expired",
+                response,
+            };
+        }
+        return {
+            valid: true,
+            nonce,
+        };
+    }
+    /**
+     * verifies a nonce from the Header of a request and deletes it from Redis
+     * returns a NonceCheckResult if the nonce exists and has not expired.
+     */
+    async verifyAndDeleteNonceFromRequest(req) {
+        const nonce = req.headers.get("x-api-nonce");
+        if (!nonce) {
+            const response = Response.json({ error: "Missing x-api-nonce header" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "missing-header",
+                response,
+            };
+        }
+        const valid = await this.verifyAndDelete(nonce);
+        if (!valid) {
+            const response = Response.json({ error: "Invalid or expired nonce" }, { status: 403 });
+            return {
+                valid: false,
+                reason: "invalid-or-expired",
+                response,
+            };
+        }
+        return {
+            valid: true,
+            nonce,
+        };
+    }
     /**
      * Optional: delete a nonce from Redis manually
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tozielinski/next-upstash-nonce",
-  "version": "1.2.3",
+  "version": "1.3.1",
   "description": "Create, store, verify and delete nonces in Redis by Upstash for Next.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -32,7 +32,6 @@
   "homepage": "https://github.com/tozielinski/next-upstash-nonce#readme",
   "dependencies": {
     "@upstash/redis": "1.22.0",
-    "crypto": "^1.0.1",
     "uuid": "^13.0.0"
   },
   "devDependencies": {