@unchainedshop/utils 4.5.0 → 4.6.1

package/lib/generate-random-hash.js

@@ -1,6 +1,7 @@
 import Hashids from 'hashids';
 const hashids = new Hashids('unchained', 6, 'ABCDEFGHIJKLMNPQRSTUVWXYZ23456789');
 export default () => {
-    const randomNumber = Math.floor(Math.random() * (999999999 - 1)) + 1;
+    const randomBytes = crypto.getRandomValues(new Uint32Array(1));
+    const randomNumber = (randomBytes[0] % 999999998) + 1;
     return hashids.encode(randomNumber);
 };

package/lib/timing-safe-equal.d.ts

@@ -0,0 +1,2 @@
+export declare function timingSafeEqual(bufferA: ArrayBuffer, bufferB: ArrayBuffer): Promise<boolean>;
+export declare function timingSafeStringEqual(a: string, b: string): Promise<boolean>;

package/lib/timing-safe-equal.js

@@ -0,0 +1,18 @@
+export async function timingSafeEqual(bufferA, bufferB) {
+    if (bufferA.byteLength !== bufferB.byteLength) {
+        return false;
+    }
+    const algorithm = { name: 'HMAC', hash: 'SHA-256' };
+    const key = await crypto.subtle.generateKey(algorithm, false, ['sign', 'verify']);
+    const signature = await crypto.subtle.sign(algorithm, key, bufferA);
+    return crypto.subtle.verify(algorithm, key, signature, bufferB);
+}
+export async function timingSafeStringEqual(a, b) {
+    if (a === null || a === undefined || b === null || b === undefined) {
+        return false;
+    }
+    const encoder = new TextEncoder();
+    const bufferA = encoder.encode(a);
+    const bufferB = encoder.encode(b);
+    return timingSafeEqual(bufferA.buffer, bufferB.buffer);
+}

package/lib/utils-index.d.ts

@@ -8,6 +8,7 @@ export { default as generateRandomHash } from './generate-random-hash.ts';
 export { default as buildObfuscatedFieldsFilter } from './build-obfuscated-fields-filter.ts';
 export { default as sha256 } from './sha256.ts';
 export { default as sha1 } from './sha1.ts';
+export { timingSafeEqual, timingSafeStringEqual } from './timing-safe-equal.ts';
 export declare const SortDirection: {
     readonly ASC: "ASC";
     readonly DESC: "DESC";

package/lib/utils-index.js

@@ -8,6 +8,7 @@ export { default as generateRandomHash } from "./generate-random-hash.js";
 export { default as buildObfuscatedFieldsFilter } from "./build-obfuscated-fields-filter.js";
 export { default as sha256 } from "./sha256.js";
 export { default as sha1 } from "./sha1.js";
+export { timingSafeEqual, timingSafeStringEqual } from "./timing-safe-equal.js";
 export const SortDirection = {
     ASC: 'ASC',
     DESC: 'DESC',

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@unchainedshop/utils",
-  "version": "4.5.0",
+  "description": "Common utility functions and base classes for the Unchained Engine",
+  "version": "4.6.1",
   "main": "lib/utils-index.js",
   "types": "lib/utils-index.d.ts",
   "type": "module",
@@ -28,7 +29,7 @@
   },
   "homepage": "https://github.com/unchainedshop/unchained#readme",
   "dependencies": {
-    "@unchainedshop/logger": "^4.5.0",
+    "@unchainedshop/logger": "^4.6.0",
     "hashids": "^2.3.0",
     "resolve-accept-language": "^3.1.11"
   },