@trebired/frontend 8.4.3 → 8.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (119) hide show
  1. package/CHANGELOG.md +16 -0
  2. package/README.md +43 -1
  3. package/dist/config/normalize.d.ts.map +1 -1
  4. package/dist/config/normalize.js +21 -4
  5. package/dist/config/normalize.js.map +1 -1
  6. package/dist/config/scss.d.ts.map +1 -1
  7. package/dist/config/scss.js +1 -0
  8. package/dist/config/scss.js.map +1 -1
  9. package/dist/config/types/assets.d.ts +5 -2
  10. package/dist/config/types/assets.d.ts.map +1 -1
  11. package/dist/config/types.d.ts +2 -2
  12. package/dist/config/types.d.ts.map +1 -1
  13. package/dist/icons/index.d.ts +12 -2
  14. package/dist/icons/index.d.ts.map +1 -1
  15. package/dist/icons/index.js +36 -1
  16. package/dist/icons/index.js.map +1 -1
  17. package/dist/icons/react/index.d.ts +2 -0
  18. package/dist/icons/react/index.d.ts.map +1 -1
  19. package/dist/icons/react/index.js +3 -3
  20. package/dist/icons/react/index.js.map +1 -1
  21. package/dist/icons/server/static.d.ts +25 -0
  22. package/dist/icons/server/static.d.ts.map +1 -0
  23. package/dist/icons/server/static.js +56 -0
  24. package/dist/icons/server/static.js.map +1 -0
  25. package/dist/index.d.ts +2 -0
  26. package/dist/index.d.ts.map +1 -1
  27. package/dist/index.js +1 -1
  28. package/dist/index.js.map +1 -1
  29. package/dist/server/http.d.ts +2 -44
  30. package/dist/server/http.d.ts.map +1 -1
  31. package/dist/server/http.js +1 -68
  32. package/dist/server/http.js.map +1 -1
  33. package/dist/server/index.d.ts +1 -4
  34. package/dist/server/index.d.ts.map +1 -1
  35. package/dist/server/index.js +1 -4
  36. package/dist/server/index.js.map +1 -1
  37. package/dist/server/services.d.ts +0 -3
  38. package/dist/server/services.d.ts.map +1 -1
  39. package/dist/server/services.js +0 -5
  40. package/dist/server/services.js.map +1 -1
  41. package/dist/src/config/normalize.d.ts.map +1 -1
  42. package/dist/src/config/normalize.js +21 -4
  43. package/dist/src/config/normalize.js.map +1 -1
  44. package/dist/src/config/scss.d.ts.map +1 -1
  45. package/dist/src/config/scss.js +1 -0
  46. package/dist/src/config/scss.js.map +1 -1
  47. package/dist/src/config/types/assets.d.ts +5 -2
  48. package/dist/src/config/types/assets.d.ts.map +1 -1
  49. package/dist/src/config/types.d.ts +2 -2
  50. package/dist/src/config/types.d.ts.map +1 -1
  51. package/dist/src/icons/index.d.ts +12 -2
  52. package/dist/src/icons/index.d.ts.map +1 -1
  53. package/dist/src/icons/index.js +36 -1
  54. package/dist/src/icons/index.js.map +1 -1
  55. package/dist/src/icons/react/index.d.ts +2 -0
  56. package/dist/src/icons/react/index.d.ts.map +1 -1
  57. package/dist/src/icons/react/index.js +3 -3
  58. package/dist/src/icons/react/index.js.map +1 -1
  59. package/dist/src/icons/server/static.d.ts +25 -0
  60. package/dist/src/icons/server/static.d.ts.map +1 -0
  61. package/dist/src/icons/server/static.js +56 -0
  62. package/dist/src/icons/server/static.js.map +1 -0
  63. package/dist/src/index.d.ts +2 -0
  64. package/dist/src/index.d.ts.map +1 -1
  65. package/dist/src/index.js +1 -1
  66. package/dist/src/index.js.map +1 -1
  67. package/dist/src/server/http.d.ts +2 -44
  68. package/dist/src/server/http.d.ts.map +1 -1
  69. package/dist/src/server/http.js +1 -68
  70. package/dist/src/server/http.js.map +1 -1
  71. package/dist/src/server/index.d.ts +1 -4
  72. package/dist/src/server/index.d.ts.map +1 -1
  73. package/dist/src/server/index.js +1 -4
  74. package/dist/src/server/index.js.map +1 -1
  75. package/dist/src/server/services.d.ts +0 -3
  76. package/dist/src/server/services.d.ts.map +1 -1
  77. package/dist/src/server/services.js +0 -5
  78. package/dist/src/server/services.js.map +1 -1
  79. package/package.json +2 -2
  80. package/dist/server/request-log.d.ts +0 -12
  81. package/dist/server/request-log.d.ts.map +0 -1
  82. package/dist/server/request-log.js +0 -116
  83. package/dist/server/request-log.js.map +0 -1
  84. package/dist/server/security/cors.d.ts +0 -22
  85. package/dist/server/security/cors.d.ts.map +0 -1
  86. package/dist/server/security/cors.js +0 -41
  87. package/dist/server/security/cors.js.map +0 -1
  88. package/dist/server/security/helpers.d.ts +0 -6
  89. package/dist/server/security/helpers.d.ts.map +0 -1
  90. package/dist/server/security/helpers.js +0 -17
  91. package/dist/server/security/helpers.js.map +0 -1
  92. package/dist/server/security/policy.d.ts +0 -42
  93. package/dist/server/security/policy.d.ts.map +0 -1
  94. package/dist/server/security/policy.js +0 -159
  95. package/dist/server/security/policy.js.map +0 -1
  96. package/dist/server/security.d.ts +0 -17
  97. package/dist/server/security.d.ts.map +0 -1
  98. package/dist/server/security.js +0 -27
  99. package/dist/server/security.js.map +0 -1
  100. package/dist/src/server/request-log.d.ts +0 -12
  101. package/dist/src/server/request-log.d.ts.map +0 -1
  102. package/dist/src/server/request-log.js +0 -116
  103. package/dist/src/server/request-log.js.map +0 -1
  104. package/dist/src/server/security/cors.d.ts +0 -22
  105. package/dist/src/server/security/cors.d.ts.map +0 -1
  106. package/dist/src/server/security/cors.js +0 -41
  107. package/dist/src/server/security/cors.js.map +0 -1
  108. package/dist/src/server/security/helpers.d.ts +0 -6
  109. package/dist/src/server/security/helpers.d.ts.map +0 -1
  110. package/dist/src/server/security/helpers.js +0 -17
  111. package/dist/src/server/security/helpers.js.map +0 -1
  112. package/dist/src/server/security/policy.d.ts +0 -42
  113. package/dist/src/server/security/policy.d.ts.map +0 -1
  114. package/dist/src/server/security/policy.js +0 -159
  115. package/dist/src/server/security/policy.js.map +0 -1
  116. package/dist/src/server/security.d.ts +0 -17
  117. package/dist/src/server/security.d.ts.map +0 -1
  118. package/dist/src/server/security.js +0 -27
  119. package/dist/src/server/security.js.map +0 -1
@@ -1,159 +0,0 @@
1
- import crypto from "node:crypto";
2
- import { setResponseHeader, } from "../../../server/http.js";
3
- import { attachUseMiddleware, responseLocals, securityText, } from "./helpers.js";
4
- function createNonceMiddleware(options = {}) {
5
- const bytes = Math.max(8, Math.floor(Number(options.bytes) || 16));
6
- const localsKey = options.localsKey || "nonce";
7
- return function nonceMiddleware(_req, res, next) {
8
- const locals = responseLocals(res);
9
- if (locals)
10
- locals[localsKey] = crypto.randomBytes(bytes).toString("base64");
11
- return next();
12
- };
13
- }
14
- function attachNonceMiddleware(app, options = {}) {
15
- attachUseMiddleware(app, createNonceMiddleware(options));
16
- }
17
- function hstsHeader(options) {
18
- if (options === false)
19
- return "";
20
- if (typeof options === "string")
21
- return options;
22
- if (options && typeof options === "object" && options.header) {
23
- return options.header;
24
- }
25
- return "max-age=31536000; includeSubDomains; preload";
26
- }
27
- function shouldSendHsts(req, options) {
28
- if (options === false)
29
- return false;
30
- if (options && typeof options === "object" && options.shouldSend) {
31
- return options.shouldSend(req);
32
- }
33
- return Boolean(req && req.secure);
34
- }
35
- function defaultPermissionsPolicy() {
36
- return [
37
- "geolocation=()",
38
- "camera=()",
39
- "microphone=()",
40
- "payment=()",
41
- "gamepad=()",
42
- "gyroscope=()",
43
- "magnetometer=()",
44
- "display-capture=()",
45
- ];
46
- }
47
- function permissionsPolicyHeader(input) {
48
- if (input === false)
49
- return "";
50
- if (typeof input === "string")
51
- return input;
52
- const entries = input || defaultPermissionsPolicy();
53
- return Array.from(entries).join(", ");
54
- }
55
- function applySecurityHeaders(req, res, options = {}) {
56
- const hsts = hstsHeader(options.hsts);
57
- if (hsts && shouldSendHsts(req, options.hsts)) {
58
- setResponseHeader(res, "Strict-Transport-Security", hsts);
59
- }
60
- setResponseHeader(res, "X-Content-Type-Options", "nosniff");
61
- if (options.dnsPrefetchControl !== false) {
62
- setResponseHeader(res, "X-DNS-Prefetch-Control", options.dnsPrefetchControl || "off");
63
- }
64
- if (options.permittedCrossDomainPolicies !== false) {
65
- setResponseHeader(res, "X-Permitted-Cross-Domain-Policies", options.permittedCrossDomainPolicies || "none");
66
- }
67
- if (options.frameOptions !== false) {
68
- setResponseHeader(res, "X-Frame-Options", options.frameOptions || "SAMEORIGIN");
69
- }
70
- if (options.referrerPolicy !== false) {
71
- setResponseHeader(res, "Referrer-Policy", options.referrerPolicy || "strict-origin-when-cross-origin");
72
- }
73
- const permissions = permissionsPolicyHeader(options.permissionsPolicy);
74
- if (permissions)
75
- setResponseHeader(res, "Permissions-Policy", permissions);
76
- if (options.crossOriginOpenerPolicy !== false) {
77
- setResponseHeader(res, "Cross-Origin-Opener-Policy", options.crossOriginOpenerPolicy || "same-origin");
78
- }
79
- if (options.crossOriginResourcePolicy !== false) {
80
- setResponseHeader(res, "Cross-Origin-Resource-Policy", options.crossOriginResourcePolicy || "same-origin");
81
- }
82
- if (options.originAgentCluster !== false) {
83
- setResponseHeader(res, "Origin-Agent-Cluster", options.originAgentCluster || "?1");
84
- }
85
- if (options.acceptClientHints && options.acceptClientHints.length) {
86
- setResponseHeader(res, "Accept-CH", options.acceptClientHints.join(", "));
87
- }
88
- }
89
- function createSecurityHeadersMiddleware(options = {}) {
90
- return function securityHeadersMiddleware(req, res, next) {
91
- applySecurityHeaders(req, res, options);
92
- return next();
93
- };
94
- }
95
- function attachSecurityHeadersMiddleware(app, options = {}) {
96
- attachUseMiddleware(app, createSecurityHeadersMiddleware(options));
97
- }
98
- function cspNonce(res, options) {
99
- const key = options.nonceLocalKey || "nonce";
100
- const nonce = res && res.locals ? res.locals[key] : "";
101
- return securityText(nonce) || "";
102
- }
103
- function defaultContentSecurityPolicyDirectives(context) {
104
- return [
105
- "default-src 'self'",
106
- `script-src 'self' 'nonce-${context.nonce}'`,
107
- `script-src-elem 'self' 'nonce-${context.nonce}'`,
108
- "script-src-attr 'none'",
109
- "style-src 'self' 'unsafe-inline'",
110
- "font-src 'self' data:",
111
- "img-src 'self' data: blob: https:",
112
- "worker-src 'self' blob:",
113
- "frame-src 'self'",
114
- "connect-src 'self'",
115
- "frame-ancestors 'self'",
116
- "object-src 'none'",
117
- "base-uri 'self'",
118
- "form-action 'self'",
119
- ];
120
- }
121
- function contentSecurityPolicyDirectives(context, options) {
122
- if (typeof options.directives === "function") {
123
- return options.directives(context);
124
- }
125
- return options.directives || defaultContentSecurityPolicyDirectives(context);
126
- }
127
- function contentSecurityPolicyHeader(context, options = {}) {
128
- const values = Array.from(contentSecurityPolicyDirectives(context, options))
129
- .map((directive) => String(directive || "").trim())
130
- .filter(Boolean);
131
- if (options.shouldUpgradeInsecureRequests &&
132
- options.shouldUpgradeInsecureRequests(context.req)) {
133
- values.push("upgrade-insecure-requests");
134
- }
135
- return values.join("; ");
136
- }
137
- function applyContentSecurityPolicy(req, res, options = {}) {
138
- const nonce = cspNonce(res, options);
139
- if (!nonce) {
140
- throw new Error("Content security policy nonce is missing. Ensure nonce middleware runs first.");
141
- }
142
- setResponseHeader(res, "Content-Security-Policy", contentSecurityPolicyHeader({ nonce, req }, options));
143
- }
144
- function createContentSecurityPolicyMiddleware(options = {}) {
145
- return function contentSecurityPolicyMiddleware(req, res, next) {
146
- try {
147
- applyContentSecurityPolicy(req, res, options);
148
- return next();
149
- }
150
- catch (error) {
151
- return next(error);
152
- }
153
- };
154
- }
155
- function attachContentSecurityPolicyMiddleware(app, options = {}) {
156
- attachUseMiddleware(app, createContentSecurityPolicyMiddleware(options));
157
- }
158
- export { applyContentSecurityPolicy, applySecurityHeaders, attachContentSecurityPolicyMiddleware, attachNonceMiddleware, attachSecurityHeadersMiddleware, contentSecurityPolicyHeader, createContentSecurityPolicyMiddleware, createNonceMiddleware, createSecurityHeadersMiddleware, defaultContentSecurityPolicyDirectives, };
159
- //# sourceMappingURL=policy.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/server/security/policy.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AAuCtB,SAAS,qBAAqB,CAAC,UAAkC,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,OAAO,SAAS,eAAe,CAC7B,IAAa,EACb,GAAuB,EACvB,IAAmB;QAEnB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7E,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAY,EACZ,UAAkC,EAAE;IAEpC,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,OAAuC;IACzD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,8CAA8C,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CACrB,GAAsB,EACtB,OAAuC;IAEvC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACjE,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO;QACL,gBAAgB;QAChB,WAAW;QACX,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,iBAAiB;QACjB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAkD;IAElD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,IAAI,wBAAwB,EAAE,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAsB,EACtB,GAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,iBAAiB,CAAC,GAAG,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,iBAAiB,CACf,GAAG,EACH,wBAAwB,EACxB,OAAO,CAAC,kBAAkB,IAAI,KAAK,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,4BAA4B,KAAK,KAAK,EAAE,CAAC;QACnD,iBAAiB,CACf,GAAG,EACH,mCAAmC,EACnC,OAAO,CAAC,4BAA4B,IAAI,MAAM,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACnC,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACrC,iBAAiB,CACf,GAAG,EACH,iBAAiB,EACjB,OAAO,CAAC,cAAc,IAAI,iCAAiC,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAI,WAAW;QAAE,iBAAiB,CAAC,GAAG,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,uBAAuB,KAAK,KAAK,EAAE,CAAC;QAC9C,iBAAiB,CACf,GAAG,EACH,4BAA4B,EAC5B,OAAO,CAAC,uBAAuB,IAAI,aAAa,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAChD,iBAAiB,CACf,GAAG,EACH,8BAA8B,EAC9B,OAAO,CAAC,yBAAyB,IAAI,aAAa,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,iBAAiB,CAAC,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAClE,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,UAAkC,EAAE;IAEpC,OAAO,SAAS,yBAAyB,CACvC,GAAsB,EACtB,GAAuB,EACvB,IAAmB;QAEnB,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,GAAY,EACZ,UAAkC,EAAE;IAEpC,mBAAmB,CAAC,GAAG,EAAE,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CACf,GAAuB,EACvB,OAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,sCAAsC,CAC7C,OAAqC;IAErC,OAAO;QACL,oBAAoB;QACpB,4BAA4B,OAAO,CAAC,KAAK,GAAG;QAC5C,iCAAiC,OAAO,CAAC,KAAK,GAAG;QACjD,wBAAwB;QACxB,kCAAkC;QAClC,uBAAuB;QACvB,mCAAmC;QACnC,yBAAyB;QACzB,kBAAkB;QAClB,oBAAoB;QACpB,wBAAwB;QACxB,mBAAmB;QACnB,iBAAiB;QACjB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAqC,EACrC,OAAqC;IAErC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,IAAI,sCAAsC,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAqC,EACrC,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAClD,MAAM,CAAC,OAAO,CAAC,CAAC;IACjB,IACE,OAAO,CAAC,6BAA6B;QACnC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,EACpD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAsB,EACtB,GAAuB,EACvB,UAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,iBAAiB,CACf,GAAG,EACH,yBAAyB,EACzB,2BAA2B,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,UAAwC,EAAE;IAE1C,OAAO,SAAS,+BAA+B,CAC7C,GAAsB,EACtB,GAAuB,EACvB,IAAkC;QAElC,IAAI,CAAC;YACH,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,GAAY,EACZ,UAAwC,EAAE;IAE1C,mBAAmB,CAAC,GAAG,EAAE,qCAAqC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,2BAA2B,EAC3B,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,sCAAsC,GACvC,CAAC"}
@@ -1,17 +0,0 @@
1
- import type { ServerResponseLike } from "./http.js";
2
- type SecurityState = {
3
- csrfToken: string | null;
4
- nonce: string;
5
- };
6
- type SecurityMiddlewareOptions = {
7
- csrfLocalKey?: string;
8
- localsKey?: string;
9
- nonceLocalKey?: string;
10
- };
11
- declare function createSecurityState(res: ServerResponseLike | null | undefined, options?: SecurityMiddlewareOptions): SecurityState;
12
- declare function applySecurityToLocals(res: ServerResponseLike | null | undefined, options?: SecurityMiddlewareOptions): SecurityState;
13
- declare function createSecurityMiddleware(options?: SecurityMiddlewareOptions): (_req: unknown, res: ServerResponseLike, next: () => unknown) => unknown;
14
- declare function attachSecurityMiddleware(app: unknown, options?: SecurityMiddlewareOptions): void;
15
- export { applySecurityToLocals, attachSecurityMiddleware, createSecurityMiddleware, createSecurityState, };
16
- export type { SecurityMiddlewareOptions, SecurityState };
17
- //# sourceMappingURL=security.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAOpD,KAAK,aAAa,GAAG;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,iBAAS,mBAAmB,CAC1B,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,GAAE,yBAA8B,GACtC,aAAa,CAMf;AAED,iBAAS,qBAAqB,CAC5B,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,GAAE,yBAA8B,iBAOxC;AAED,iBAAS,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,IAErE,MAAM,OAAO,EACb,KAAK,kBAAkB,EACvB,MAAM,MAAM,OAAO,aAKtB;AAED,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,yBAA8B,QAGxC;AAED,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,GACpB,CAAC;AACF,YAAY,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC"}
@@ -1,27 +0,0 @@
1
- import { attachUseMiddleware, responseLocals, securityText, } from "./security/helpers.js";
2
- function createSecurityState(res, options = {}) {
3
- const locals = responseLocals(res) || {};
4
- return {
5
- csrfToken: securityText(locals[options.csrfLocalKey || "csrfToken"]),
6
- nonce: securityText(locals[options.nonceLocalKey || "nonce"]) || "",
7
- };
8
- }
9
- function applySecurityToLocals(res, options = {}) {
10
- const locals = responseLocals(res);
11
- if (!locals)
12
- return null;
13
- const state = createSecurityState(res, options);
14
- locals[options.localsKey || "security"] = state;
15
- return state;
16
- }
17
- function createSecurityMiddleware(options = {}) {
18
- return function securityMiddleware(_req, res, next) {
19
- applySecurityToLocals(res, options);
20
- return next();
21
- };
22
- }
23
- function attachSecurityMiddleware(app, options = {}) {
24
- attachUseMiddleware(app, createSecurityMiddleware(options));
25
- }
26
- export { applySecurityToLocals, attachSecurityMiddleware, createSecurityMiddleware, createSecurityState, };
27
- //# sourceMappingURL=security.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAa/B,SAAS,mBAAmB,CAC1B,GAA0C,EAC1C,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO;QACL,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;QACpE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA0C,EAC1C,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAqC,EAAE;IACvE,OAAO,SAAS,kBAAkB,CAChC,IAAa,EACb,GAAuB,EACvB,IAAmB;QAEnB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAAY,EACZ,UAAqC,EAAE;IAEvC,mBAAmB,CAAC,GAAG,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,GACpB,CAAC"}