@travelclw/proof-protocol 0.1.0 → 0.1.1

package/README.md

@@ -36,7 +36,6 @@ pnpm add jose@^5
 - `AUTH_PROOF_DEVICE_SESSION_SECRET`
 - `AUTH_PROOF_DEVICE_SESSION_TTL_SECONDS`
 - `AUTH_PROOF_TIME_TOLERANCE_SECONDS`
-- `AUTH_PROOF_SHADOW_BLOCK_MISSING_PROOF=0|1`
 
 服务端应在启动阶段调用 `resolveProofServerConfig()`：
 

package/browser.js

@@ -59,6 +59,7 @@ const createBrowserProofClient = options => {
   const recordId = String(options?.recordId || 'request-proof-key').trim()
   const required = () => isRequestProofRequired(options?.required?.())
   let proofKeyPromise = null
+  let resetPromise = null
 
   if (!databaseName || !storeName || !recordId) {
     throw new Error('request_proof_storage_failed')
@@ -150,7 +151,9 @@ const createBrowserProofClient = options => {
 
   const getOrCreateKey = () => {
     if (!proofKeyPromise) {
+      const pendingReset = resetPromise
       proofKeyPromise = (async () => {
+        await pendingReset
         const storedKey = await readStoredKey()
         if (isStoredKeyValid(storedKey)) return storedKey
         return storeIfAbsent(await generateCandidate())
@@ -162,24 +165,33 @@ const createBrowserProofClient = options => {
     return proofKeyPromise
   }
 
-  const reset = async () => {
-    const pendingKey = proofKeyPromise
-    proofKeyPromise = null
-    await pendingKey?.catch(() => undefined)
-    if (!globalThis.indexedDB) return
+  const reset = () => {
+    const pendingReset = resetPromise
+    const operation = (async () => {
+      const pendingKey = proofKeyPromise
+      proofKeyPromise = null
+      await pendingReset?.catch(() => undefined)
+      await pendingKey?.catch(() => undefined)
+      if (!globalThis.indexedDB) return
 
-    const database = await openDatabase()
-    try {
-      await new Promise((resolve, reject) => {
-        const transaction = database.transaction(storeName, 'readwrite')
-        transaction.objectStore(storeName).delete(recordId)
-        transaction.oncomplete = () => resolve()
-        transaction.onerror = () => reject(new Error('request_proof_reset_failed'))
-        transaction.onabort = () => reject(new Error('request_proof_reset_failed'))
-      })
-    } finally {
-      database.close()
-    }
+      const database = await openDatabase()
+      try {
+        await new Promise((resolve, reject) => {
+          const transaction = database.transaction(storeName, 'readwrite')
+          transaction.objectStore(storeName).delete(recordId)
+          transaction.oncomplete = () => resolve()
+          transaction.onerror = () => reject(new Error('request_proof_reset_failed'))
+          transaction.onabort = () => reject(new Error('request_proof_reset_failed'))
+        })
+      } finally {
+        database.close()
+      }
+    })()
+
+    resetPromise = operation
+    return operation.finally(() => {
+      if (resetPromise === operation) resetPromise = null
+    })
   }
 
   const getRegistration = async () => {

package/node.d.ts

@@ -41,7 +41,6 @@ export type ProofServerConfig = {
   deviceSessionSecret: string
   deviceSessionTtlSeconds: number
   timeToleranceSeconds: number
-  shadowBlockMissingProof: boolean
 }
 
 export const REQUEST_PROOF_REASON_TEXT: Readonly<Record<string, string>>
@@ -72,7 +71,6 @@ export function resolveProofServerConfig(options?: {
   deviceSessionSecret?: string
   deviceSessionTtlSeconds?: number
   timeToleranceSeconds?: number
-  shadowBlockMissingProof?: boolean
 }): ProofServerConfig
 
 export { RequestProofValidationError } from './core'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@travelclw/proof-protocol",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Framework-independent browser and Node.js request Proof protocol",
   "license": "MIT",
   "author": "travelclw",

package/server.js

@@ -238,15 +238,6 @@ const integerSetting = (value, fallback, name, minimum, maximum) => {
   return parsed
 }
 
-const booleanSetting = (value, fallback, name) => {
-  if (value === undefined || String(value).trim() === '') return fallback
-  const normalized = String(value).trim()
-  if (normalized !== '0' && normalized !== '1') {
-    throw new Error(`${name} must be 0 or 1`)
-  }
-  return normalized === '1'
-}
-
 const resolveProofServerConfig = options => {
   const env = options?.env ?? (typeof process !== 'undefined' ? process.env : {})
   const mode = normalizeProofMode(readOverride(env, 'AUTH_PROOF_MODE', options?.mode))
@@ -270,16 +261,6 @@ const resolveProofServerConfig = options => {
     30,
     DEFAULT_REQUEST_PROOF_TIME_TOLERANCE_SECONDS,
   )
-  const shadowBlockMissingProof = booleanSetting(
-    readOverride(
-      env,
-      'AUTH_PROOF_SHADOW_BLOCK_MISSING_PROOF',
-      options?.shadowBlockMissingProof ? '1' : '0',
-    ),
-    false,
-    'AUTH_PROOF_SHADOW_BLOCK_MISSING_PROOF',
-  )
-
   if (mode !== 'off' && deviceSessionSecret.length < 32) {
     throw new Error(
       'AUTH_PROOF_DEVICE_SESSION_SECRET is required when AUTH_PROOF_MODE is shadow or enforce and must contain at least 32 characters',
@@ -290,7 +271,6 @@ const resolveProofServerConfig = options => {
     deviceSessionSecret,
     deviceSessionTtlSeconds,
     timeToleranceSeconds,
-    shadowBlockMissingProof,
   }
 }