@verdaccio/signature 8.0.5 → 8.1.0

package/build/_virtual/_rolldown/runtime.js

@@ -0,0 +1,33 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+exports.__exportAll = __exportAll;
+exports.__toESM = __toESM;

package/build/_virtual/_rolldown/runtime.mjs

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll };

package/build/index.d.ts

@@ -1,6 +1,6 @@
-export { aesDecryptDeprecated, aesEncryptDeprecated, generateRandomSecretKeyDeprecated, } from './legacy-signature';
 export { aesDecrypt, aesEncrypt } from './signature';
-export { signPayload, verifyPayload, SignOptionsSignature, VerifyOptionsSignature, } from './jwt-token';
+export { signPayload, verifyPayload } from './jwt-token';
+export type { SignOptionsSignature, VerifyOptionsSignature } from './jwt-token';
 export * as utils from './utils';
 export * as types from './types';
 export { parseBasicPayload } from './token';

package/build/index.js

@@ -1,77 +1,26 @@
-"use strict";
-
-function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "SignOptionsSignature", {
-  enumerable: true,
-  get: function get() {
-    return _jwtToken.SignOptionsSignature;
-  }
-});
-Object.defineProperty(exports, "VerifyOptionsSignature", {
-  enumerable: true,
-  get: function get() {
-    return _jwtToken.VerifyOptionsSignature;
-  }
-});
-Object.defineProperty(exports, "aesDecrypt", {
-  enumerable: true,
-  get: function get() {
-    return _signature.aesDecrypt;
-  }
-});
-Object.defineProperty(exports, "aesDecryptDeprecated", {
-  enumerable: true,
-  get: function get() {
-    return _legacySignature.aesDecryptDeprecated;
-  }
-});
-Object.defineProperty(exports, "aesEncrypt", {
-  enumerable: true,
-  get: function get() {
-    return _signature.aesEncrypt;
-  }
-});
-Object.defineProperty(exports, "aesEncryptDeprecated", {
-  enumerable: true,
-  get: function get() {
-    return _legacySignature.aesEncryptDeprecated;
-  }
-});
-Object.defineProperty(exports, "generateRandomSecretKeyDeprecated", {
-  enumerable: true,
-  get: function get() {
-    return _legacySignature.generateRandomSecretKeyDeprecated;
-  }
-});
-Object.defineProperty(exports, "parseBasicPayload", {
-  enumerable: true,
-  get: function get() {
-    return _token.parseBasicPayload;
-  }
-});
-Object.defineProperty(exports, "signPayload", {
-  enumerable: true,
-  get: function get() {
-    return _jwtToken.signPayload;
-  }
-});
-exports.utils = exports.types = void 0;
-Object.defineProperty(exports, "verifyPayload", {
-  enumerable: true,
-  get: function get() {
-    return _jwtToken.verifyPayload;
-  }
-});
-var _legacySignature = require("./legacy-signature");
-var _signature = require("./signature");
-var _jwtToken = require("./jwt-token");
-var _utils = _interopRequireWildcard(require("./utils"));
-exports.utils = _utils;
-var _types = _interopRequireWildcard(require("./types"));
-exports.types = _types;
-var _token = require("./token");
-function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
-//# sourceMappingURL=index.js.map
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_signature = require("./signature.js");
+const require_jwt_token = require("./jwt-token.js");
+const require_utils = require("./utils.js");
+const require_types = require("./types.js");
+const require_token = require("./token.js");
+exports.aesDecrypt = require_signature.aesDecrypt;
+exports.aesEncrypt = require_signature.aesEncrypt;
+exports.parseBasicPayload = require_token.parseBasicPayload;
+exports.signPayload = require_jwt_token.signPayload;
+Object.defineProperty(exports, "types", {
+	enumerable: true,
+	get: function() {
+		return require_types.types_exports;
+	}
+});
+Object.defineProperty(exports, "utils", {
+	enumerable: true,
+	get: function() {
+		return require_utils.utils_exports;
+	}
+});
+exports.verifyPayload = require_jwt_token.verifyPayload;

package/build/index.mjs

@@ -0,0 +1,6 @@
+import { aesDecrypt, aesEncrypt } from "./signature.mjs";
+import { signPayload, verifyPayload } from "./jwt-token.mjs";
+import { utils_exports } from "./utils.mjs";
+import { types_exports } from "./types.mjs";
+import { parseBasicPayload } from "./token.mjs";
+export { aesDecrypt, aesEncrypt, parseBasicPayload, signPayload, types_exports as types, utils_exports as utils, verifyPayload };

package/build/jwt-token.js

@@ -1,65 +1,39 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.signPayload = signPayload;
-exports.verifyPayload = verifyPayload;
-var _debug = _interopRequireDefault(require("debug"));
-var _jsonwebtoken = _interopRequireDefault(require("jsonwebtoken"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
-function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
-function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
-function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
-function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
-function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
-function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
-function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
-var debug = (0, _debug["default"])('verdaccio:auth:token:jwt');
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let jsonwebtoken = require("jsonwebtoken");
+jsonwebtoken = require_runtime.__toESM(jsonwebtoken);
+//#region src/jwt-token.ts
+var debug$1 = (0, debug.default)("verdaccio:auth:token:jwt");
 /**
- * Sign the payload and return JWT
- * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback
- * @param payload
- * @param secretOrPrivateKey
- * @param options
- */
-function signPayload(_x, _x2) {
-  return _signPayload.apply(this, arguments);
-}
-function _signPayload() {
-  _signPayload = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(payload, secretOrPrivateKey) {
-    var options,
-      _args = arguments;
-    return _regenerator().w(function (_context) {
-      while (1) switch (_context.n) {
-        case 0:
-          options = _args.length > 2 && _args[2] !== undefined ? _args[2] : {};
-          return _context.a(2, new Promise(function (resolve, reject) {
-            debug('sign jwt token');
-            _jsonwebtoken["default"].sign(payload, secretOrPrivateKey, // FIXME: upgrade to the latest library and types
-            _objectSpread({
-              // 1 === 1ms (one millisecond)
-              notBefore: '1ms'
-            }, options), function (error, token) {
-              if (error) {
-                debug('error on sign jwt token %s', error.message);
-                return reject(error);
-              }
-              debug('signed jwt token successfully');
-              return resolve(token);
-            });
-          }));
-      }
-    }, _callee);
-  }));
-  return _signPayload.apply(this, arguments);
+* Sign the payload and return JWT
+* https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback
+* @param payload
+* @param secretOrPrivateKey
+* @param options
+*/
+async function signPayload(payload, secretOrPrivateKey, options = {}) {
+	return new Promise(function(resolve, reject) {
+		debug$1("sign jwt token");
+		jsonwebtoken.default.sign(payload, secretOrPrivateKey, {
+			notBefore: "1ms",
+			...options
+		}, (error, token) => {
+			if (error) {
+				debug$1("error on sign jwt token %s", error.message);
+				return reject(error);
+			}
+			debug$1("signed jwt token successfully");
+			return resolve(token);
+		});
+	});
 }
-function verifyPayload(token, secretOrPrivateKey) {
-  var options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
-  debug('verifying jwt token');
-  return _jsonwebtoken["default"].verify(token, secretOrPrivateKey, options);
+function verifyPayload(token, secretOrPrivateKey, options = {}) {
+	debug$1("verifying jwt token");
+	return jsonwebtoken.default.verify(token, secretOrPrivateKey, options);
 }
+//#endregion
+exports.signPayload = signPayload;
+exports.verifyPayload = verifyPayload;
+
 //# sourceMappingURL=jwt-token.js.map

package/build/jwt-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-token.js","names":["_debug","_interopRequireDefault","require","_jsonwebtoken","e","__esModule","_typeof","o","Symbol","iterator","constructor","prototype","_regenerator","t","r","n","toStringTag","i","c","Generator","u","Object","create","_regeneratorDefine2","f","p","y","G","v","a","d","bind","length","l","TypeError","call","done","value","GeneratorFunction","GeneratorFunctionPrototype","getPrototypeOf","setPrototypeOf","__proto__","displayName","w","m","defineProperty","_regeneratorDefine","_invoke","enumerable","configurable","writable","ownKeys","keys","getOwnPropertySymbols","filter","getOwnPropertyDescriptor","push","apply","_objectSpread","arguments","forEach","_defineProperty","getOwnPropertyDescriptors","defineProperties","_toPropertyKey","_toPrimitive","toPrimitive","String","Number","asyncGeneratorStep","Promise","resolve","then","_asyncToGenerator","_next","_throw","debug","buildDebug","signPayload","_x","_x2","_signPayload","_callee","payload","secretOrPrivateKey","options","_args","_context","undefined","reject","jwt","sign","notBefore","error","token","message","verifyPayload","verify"],"sources":["../src/jwt-token.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { SignOptions, VerifyOptions } from 'jsonwebtoken';\nimport jwt from 'jsonwebtoken';\n\nimport type { RemoteUser } from '@verdaccio/types';\n\nexport type SignOptionsSignature = SignOptions;\nexport type VerifyOptionsSignature = VerifyOptions;\n\nconst debug = buildDebug('verdaccio:auth:token:jwt');\n/**\n * Sign the payload and return JWT\n * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback\n * @param payload\n * @param secretOrPrivateKey\n * @param options\n */\nexport async function signPayload(\n  payload: RemoteUser,\n  secretOrPrivateKey: string,\n  options: SignOptionsSignature = {}\n): Promise<string> {\n  return new Promise(function (resolve, reject) {\n    debug('sign jwt token');\n    jwt.sign(\n      payload,\n      secretOrPrivateKey, // FIXME: upgrade to the latest library and types\n      {\n        // 1 === 1ms (one millisecond)\n        notBefore: '1ms', // Make sure the time will not rollback :)\n        ...options,\n      },\n      (error, token) => {\n        if (error) {\n          debug('error on sign jwt token %s', error.message);\n          return reject(error);\n        }\n        debug('signed jwt token successfully');\n        return resolve(token as string);\n      }\n    );\n  });\n}\n\nexport function verifyPayload(\n  token: string,\n  secretOrPrivateKey: string,\n  options: VerifyOptionsSignature = {}\n): RemoteUser {\n  debug('verifying jwt token');\n  return jwt.verify(token, secretOrPrivateKey, options) as RemoteUser;\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,aAAA,GAAAF,sBAAA,CAAAC,OAAA;AAA+B,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,SAAAE,QAAAC,CAAA,sCAAAD,OAAA,wBAAAE,MAAA,uBAAAA,MAAA,CAAAC,QAAA,aAAAF,CAAA,kBAAAA,CAAA,gBAAAA,CAAA,WAAAA,CAAA,yBAAAC,MAAA,IAAAD,CAAA,CAAAG,WAAA,KAAAF,MAAA,IAAAD,CAAA,KAAAC,MAAA,CAAAG,SAAA,qBAAAJ,CAAA,KAAAD,OAAA,CAAAC,CAAA;AAAA,SAAAK,aAAA,IAD/B,uKAAAR,CAAA,EAAAS,CAAA,EAAAC,CAAA,wBAAAN,MAAA,GAAAA,MAAA,OAAAO,CAAA,GAAAD,CAAA,CAAAL,QAAA,kBAAAF,CAAA,GAAAO,CAAA,CAAAE,WAAA,8BAAAC,EAAAH,CAAA,EAAAC,CAAA,EAAAR,CAAA,EAAAU,CAAA,QAAAC,CAAA,GAAAH,CAAA,IAAAA,CAAA,CAAAJ,SAAA,YAAAQ,SAAA,GAAAJ,CAAA,GAAAI,SAAA,EAAAC,CAAA,GAAAC,MAAA,CAAAC,MAAA,CAAAJ,CAAA,CAAAP,SAAA,UAAAY,mBAAA,CAAAH,CAAA,uBAAAN,CAAA,EAAAC,CAAA,EAAAR,CAAA,QAAAU,CAAA,EAAAC,CAAA,EAAAE,CAAA,EAAAI,CAAA,MAAAC,CAAA,GAAAlB,CAAA,QAAAmB,CAAA,OAAAC,CAAA,KAAAF,CAAA,KAAAV,CAAA,KAAAa,CAAA,EAAAxB,CAAA,EAAAyB,CAAA,EAAAC,CAAA,EAAAN,CAAA,EAAAM,CAAA,CAAAC,IAAA,CAAA3B,CAAA,MAAA0B,CAAA,WAAAA,EAAAjB,CAAA,EAAAC,CAAA,WAAAG,CAAA,GAAAJ,CAAA,EAAAK,CAAA,MAAAE,CAAA,GAAAhB,CAAA,EAAAuB,CAAA,CAAAZ,CAAA,GAAAD,CAAA,EAAAe,CAAA,gBAAAC,EAAAhB,CAAA,EAAAC,CAAA,SAAAG,CAAA,GAAAJ,CAAA,EAAAM,CAAA,GAAAL,CAAA,EAAAF,CAAA,OAAAa,CAAA,IAAAF,CAAA,KAAAjB,CAAA,IAAAM,CAAA,GAAAY,CAAA,CAAAO,MAAA,EAAAnB,CAAA,UAAAN,CAAA,EAAAU,CAAA,GAAAQ,CAAA,CAAAZ,CAAA,GAAAiB,CAAA,GAAAH,CAAA,CAAAF,CAAA,EAAAQ,CAAA,GAAAhB,CAAA,KAAAH,CAAA,QAAAP,CAAA,GAAA0B,CAAA,KAAAlB,CAAA,MAAAK,CAAA,GAAAH,CAAA,EAAAC,CAAA,GAAAD,CAAA,YAAAC,CAAA,WAAAD,CAAA,MAAAA,CAAA,MAAAb,CAAA,IAAAa,CAAA,OAAAa,CAAA,MAAAvB,CAAA,GAAAO,CAAA,QAAAgB,CAAA,GAAAb,CAAA,QAAAC,CAAA,MAAAS,CAAA,CAAAC,CAAA,GAAAb,CAAA,EAAAY,CAAA,CAAAZ,CAAA,GAAAE,CAAA,OAAAa,CAAA,GAAAG,CAAA,KAAA1B,CAAA,GAAAO,CAAA,QAAAG,CAAA,MAAAF,CAAA,IAAAA,CAAA,GAAAkB,CAAA,MAAAhB,CAAA,MAAAH,CAAA,EAAAG,CAAA,MAAAF,CAAA,EAAAY,CAAA,CAAAZ,CAAA,GAAAkB,CAAA,EAAAf,CAAA,cAAAX,CAAA,IAAAO,CAAA,aAAAe,CAAA,QAAAH,CAAA,OAAAX,CAAA,qBAAAR,CAAA,EAAAkB,CAAA,EAAAQ,CAAA,QAAAT,CAAA,YAAAU,SAAA,uCAAAR,CAAA,UAAAD,CAAA,IAAAK,CAAA,CAAAL,CAAA,EAAAQ,CAAA,GAAAf,CAAA,GAAAO,CAAA,EAAAL,CAAA,GAAAa,CAAA,GAAApB,CAAA,GAAAK,CAAA,OAAAd,CAAA,GAAAgB,CAAA,MAAAM,CAAA,KAAAT,CAAA,KAAAC,CAAA,GAAAA,CAAA,QAAAA,CAAA,SAAAS,CAAA,CAAAZ,CAAA,QAAAe,CAAA,CAAAZ,CAAA,EAAAE,CAAA,KAAAO,CAAA,CAAAZ,CAAA,GAAAK,CAAA,GAAAO,CAAA,CAAAC,CAAA,GAAAR,CAAA,aAAAI,CAAA,MAAAP,CAAA,QAAAC,CAAA,KAAAX,CAAA,YAAAM,CAAA,GAAAI,CAAA,CAAAV,CAAA,WAAAM,CAAA,GAAAA,CAAA,CAAAsB,IAAA,CAAAlB,CAAA,EAAAG,CAAA,UAAAc,SAAA,2CAAArB,CAAA,CAAAuB,IAAA,SAAAvB,CAAA,EAAAO,CAAA,GAAAP,CAAA,CAAAwB,KAAA,EAAAnB,CAAA,SAAAA,CAAA,oBAAAA,CAAA,KAAAL,CAAA,GAAAI,CAAA,eAAAJ,CAAA,CAAAsB,IAAA,CAAAlB,CAAA,GAAAC,CAAA,SAAAE,CAAA,GAAAc,SAAA,uCAAA3B,CAAA,gBAAAW,CAAA,OAAAD,CAAA,GAAAb,CAAA,cAAAS,CAAA,IAAAa,CAAA,GAAAC,CAAA,CAAAZ,CAAA,QAAAK,CAAA,GAAAN,CAAA,CAAAqB,IAAA,CAAApB,CAAA,EAAAY,CAAA,OAAAE,CAAA,kBAAAhB,CAAA,IAAAI,CAAA,GAAAb,CAAA,EAAAc,CAAA,MAAAE,CAAA,GAAAP,CAAA,cAAAW,CAAA,mBAAAa,KAAA,EAAAxB,CAAA,EAAAuB,IAAA,EAAAV,CAAA,SAAAZ,CAAA,EAAAP,CAAA,EAAAU,CAAA,QAAAG,CAAA,QAAAS,CAAA,gBAAAV,UAAA,cAAAmB,kBAAA,cAAAC,2BAAA,KAAA1B,CAAA,GAAAQ,MAAA,CAAAmB,cAAA,MAAAtB,CAAA,MAAAH,CAAA,IAAAF,CAAA,CAAAA,CAAA,IAAAE,CAAA,SAAAQ,mBAAA,CAAAV,CAAA,OAAAE,CAAA,iCAAAF,CAAA,GAAAO,CAAA,GAAAmB,0BAAA,CAAA5B,SAAA,GAAAQ,SAAA,CAAAR,SAAA,GAAAU,MAAA,CAAAC,MAAA,CAAAJ,CAAA,YAAAM,EAAApB,CAAA,WAAAiB,MAAA,CAAAoB,cAAA,GAAApB,MAAA,CAAAoB,cAAA,CAAArC,CAAA,EAAAmC,0BAAA,KAAAnC,CAAA,CAAAsC,SAAA,GAAAH,0BAAA,EAAAhB,mBAAA,CAAAnB,CAAA,EAAAG,CAAA,yBAAAH,CAAA,CAAAO,SAAA,GAAAU,MAAA,CAAAC,MAAA,CAAAF,CAAA,GAAAhB,CAAA,WAAAkC,iBAAA,CAAA3B,SAAA,GAAA4B,0BAAA,EAAAhB,mBAAA,CAAAH,CAAA,iBAAAmB,0BAAA,GAAAhB,mBAAA,CAAAgB,0BAAA,iBAAAD,iBAAA,GAAAA,iBAAA,CAAAK,WAAA,wBAAApB,mBAAA,CAAAgB,0BAAA,EAAAhC,CAAA,wBAAAgB,mBAAA,CAAAH,CAAA,GAAAG,mBAAA,CAAAH,CAAA,EAAAb,CAAA,gBAAAgB,mBAAA,CAAAH,CAAA,EAAAL,CAAA,iCAAAQ,mBAAA,CAAAH,CAAA,8DAAAR,YAAA,YAAAA,aAAA,aAAAgC,CAAA,EAAA3B,CAAA,EAAA4B,CAAA,EAAArB,CAAA;AAAA,SAAAD,oBAAAnB,CAAA,EAAAU,CAAA,EAAAC,CAAA,EAAAF,CAAA,QAAAI,CAAA,GAAAI,MAAA,CAAAyB,cAAA,QAAA7B,CAAA,uBAAAb,CAAA,IAAAa,CAAA,QAAAM,mBAAA,YAAAwB,mBAAA3C,CAAA,EAAAU,CAAA,EAAAC,CAAA,EAAAF,CAAA,aAAAN,EAAAO,CAAA,EAAAC,CAAA,IAAAQ,mBAAA,CAAAnB,CAAA,EAAAU,CAAA,YAAAV,CAAA,gBAAA4C,OAAA,CAAAlC,CAAA,EAAAC,CAAA,EAAAX,CAAA,SAAAU,CAAA,GAAAG,CAAA,GAAAA,CAAA,CAAAb,CAAA,EAAAU,CAAA,IAAAuB,KAAA,EAAAtB,CAAA,EAAAkC,UAAA,GAAApC,CAAA,EAAAqC,YAAA,GAAArC,CAAA,EAAAsC,QAAA,GAAAtC,CAAA,MAAAT,CAAA,CAAAU,CAAA,IAAAC,CAAA,IAAAR,CAAA,aAAAA,CAAA,cAAAA,CAAA,mBAAAgB,mBAAA,CAAAnB,CAAA,EAAAU,CAAA,EAAAC,CAAA,EAAAF,CAAA;AAAA,SAAAuC,QAAAhD,CAAA,EAAAU,CAAA,QAAAD,CAAA,GAAAQ,MAAA,CAAAgC,IAAA,CAAAjD,CAAA,OAAAiB,MAAA,CAAAiC,qBAAA,QAAA/C,CAAA,GAAAc,MAAA,CAAAiC,qBAAA,CAAAlD,CAAA,GAAAU,CAAA,KAAAP,CAAA,GAAAA,CAAA,CAAAgD,MAAA,WAAAzC,CAAA,WAAAO,MAAA,CAAAmC,wBAAA,CAAApD,CAAA,EAAAU,CAAA,EAAAmC,UAAA,OAAApC,CAAA,CAAA4C,IAAA,CAAAC,KAAA,CAAA7C,CAAA,EAAAN,CAAA,YAAAM,CAAA;AAAA,SAAA8C,cAAAvD,CAAA,aAAAU,CAAA,MAAAA,CAAA,GAAA8C,SAAA,CAAA5B,MAAA,EAAAlB,CAAA,UAAAD,CAAA,WAAA+C,SAAA,CAAA9C,CAAA,IAAA8C,SAAA,CAAA9C,CAAA,QAAAA,CAAA,OAAAsC,OAAA,CAAA/B,MAAA,CAAAR,CAAA,OAAAgD,OAAA,WAAA/C,CAAA,IAAAgD,eAAA,CAAA1D,CAAA,EAAAU,CAAA,EAAAD,CAAA,CAAAC,CAAA,SAAAO,MAAA,CAAA0C,yBAAA,GAAA1C,MAAA,CAAA2C,gBAAA,CAAA5D,CAAA,EAAAiB,MAAA,CAAA0C,yBAAA,CAAAlD,CAAA,KAAAuC,OAAA,CAAA/B,MAAA,CAAAR,CAAA,GAAAgD,OAAA,WAAA/C,CAAA,IAAAO,MAAA,CAAAyB,cAAA,CAAA1C,CAAA,EAAAU,CAAA,EAAAO,MAAA,CAAAmC,wBAAA,CAAA3C,CAAA,EAAAC,CAAA,iBAAAV,CAAA;AAAA,SAAA0D,gBAAA1D,CAAA,EAAAU,CAAA,EAAAD,CAAA,YAAAC,CAAA,GAAAmD,cAAA,CAAAnD,CAAA,MAAAV,CAAA,GAAAiB,MAAA,CAAAyB,cAAA,CAAA1C,CAAA,EAAAU,CAAA,IAAAuB,KAAA,EAAAxB,CAAA,EAAAoC,UAAA,MAAAC,YAAA,MAAAC,QAAA,UAAA/C,CAAA,CAAAU,CAAA,IAAAD,CAAA,EAAAT,CAAA;AAAA,SAAA6D,eAAApD,CAAA,QAAAI,CAAA,GAAAiD,YAAA,CAAArD,CAAA,gCAAAP,OAAA,CAAAW,CAAA,IAAAA,CAAA,GAAAA,CAAA;AAAA,SAAAiD,aAAArD,CAAA,EAAAC,CAAA,oBAAAR,OAAA,CAAAO,CAAA,MAAAA,CAAA,SAAAA,CAAA,MAAAT,CAAA,GAAAS,CAAA,CAAAL,MAAA,CAAA2D,WAAA,kBAAA/D,CAAA,QAAAa,CAAA,GAAAb,CAAA,CAAA+B,IAAA,CAAAtB,CAAA,EAAAC,CAAA,gCAAAR,OAAA,CAAAW,CAAA,UAAAA,CAAA,YAAAiB,SAAA,yEAAApB,CAAA,GAAAsD,MAAA,GAAAC,MAAA,EAAAxD,CAAA;AAAA,SAAAyD,mBAAAvD,CAAA,EAAAF,CAAA,EAAAT,CAAA,EAAAU,CAAA,EAAAP,CAAA,EAAAsB,CAAA,EAAAX,CAAA,cAAAD,CAAA,GAAAF,CAAA,CAAAc,CAAA,EAAAX,CAAA,GAAAE,CAAA,GAAAH,CAAA,CAAAoB,KAAA,WAAAtB,CAAA,gBAAAX,CAAA,CAAAW,CAAA,KAAAE,CAAA,CAAAmB,IAAA,GAAAvB,CAAA,CAAAO,CAAA,IAAAmD,OAAA,CAAAC,OAAA,CAAApD,CAAA,EAAAqD,IAAA,CAAA3D,CAAA,EAAAP,CAAA;AAAA,SAAAmE,kBAAA3D,CAAA,6BAAAF,CAAA,SAAAT,CAAA,GAAAwD,SAAA,aAAAW,OAAA,WAAAzD,CAAA,EAAAP,CAAA,QAAAsB,CAAA,GAAAd,CAAA,CAAA2C,KAAA,CAAA7C,CAAA,EAAAT,CAAA,YAAAuE,MAAA5D,CAAA,IAAAuD,kBAAA,CAAAzC,CAAA,EAAAf,CAAA,EAAAP,CAAA,EAAAoE,KAAA,EAAAC,MAAA,UAAA7D,CAAA,cAAA6D,OAAA7D,CAAA,IAAAuD,kBAAA,CAAAzC,CAAA,EAAAf,CAAA,EAAAP,CAAA,EAAAoE,KAAA,EAAAC,MAAA,WAAA7D,CAAA,KAAA4D,KAAA;AAQA,IAAME,KAAK,GAAG,IAAAC,iBAAU,EAAC,0BAA0B,CAAC;AACpD;AACA;AACA;AACA;AACA;AACA;AACA;AANA,SAOsBC,WAAWA,CAAAC,EAAA,EAAAC,GAAA;EAAA,OAAAC,YAAA,CAAAxB,KAAA,OAAAE,SAAA;AAAA;AAAA,SAAAsB,aAAA;EAAAA,YAAA,GAAAR,iBAAA,cAAA9D,YAAA,GAAAiC,CAAA,CAA1B,SAAAsC,QACLC,OAAmB,EACnBC,kBAA0B;IAAA,IAAAC,OAAA;MAAAC,KAAA,GAAA3B,SAAA;IAAA,OAAAhD,YAAA,GAAAgC,CAAA,WAAA4C,QAAA;MAAA,kBAAAA,QAAA,CAAAzE,CAAA;QAAA;UAC1BuE,OAA6B,GAAAC,KAAA,CAAAvD,MAAA,QAAAuD,KAAA,QAAAE,SAAA,GAAAF,KAAA,MAAG,CAAC,CAAC;UAAA,OAAAC,QAAA,CAAA3D,CAAA,IAE3B,IAAI0C,OAAO,CAAC,UAAUC,OAAO,EAAEkB,MAAM,EAAE;YAC5Cb,KAAK,CAAC,gBAAgB,CAAC;YACvBc,wBAAG,CAACC,IAAI,CACNR,OAAO,EACPC,kBAAkB,EAAE;YAAA1B,aAAA;cAElB;cACAkC,SAAS,EAAE;YAAK,GACbP,OAAO,GAEZ,UAACQ,KAAK,EAAEC,KAAK,EAAK;cAChB,IAAID,KAAK,EAAE;gBACTjB,KAAK,CAAC,4BAA4B,EAAEiB,KAAK,CAACE,OAAO,CAAC;gBAClD,OAAON,MAAM,CAACI,KAAK,CAAC;cACtB;cACAjB,KAAK,CAAC,+BAA+B,CAAC;cACtC,OAAOL,OAAO,CAACuB,KAAe,CAAC;YACjC,CACF,CAAC;UACH,CAAC,CAAC;MAAA;IAAA,GAAAZ,OAAA;EAAA,CACH;EAAA,OAAAD,YAAA,CAAAxB,KAAA,OAAAE,SAAA;AAAA;AAEM,SAASqC,aAAaA,CAC3BF,KAAa,EACbV,kBAA0B,EAEd;EAAA,IADZC,OAA+B,GAAA1B,SAAA,CAAA5B,MAAA,QAAA4B,SAAA,QAAA6B,SAAA,GAAA7B,SAAA,MAAG,CAAC,CAAC;EAEpCiB,KAAK,CAAC,qBAAqB,CAAC;EAC5B,OAAOc,wBAAG,CAACO,MAAM,CAACH,KAAK,EAAEV,kBAAkB,EAAEC,OAAO,CAAC;AACvD","ignoreList":[]}
+{"version":3,"file":"jwt-token.js","names":[],"sources":["../src/jwt-token.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { SignOptions, VerifyOptions } from 'jsonwebtoken';\nimport jwt from 'jsonwebtoken';\n\nimport type { RemoteUser } from '@verdaccio/types';\n\nexport type SignOptionsSignature = SignOptions;\nexport type VerifyOptionsSignature = VerifyOptions;\n\nconst debug = buildDebug('verdaccio:auth:token:jwt');\n/**\n * Sign the payload and return JWT\n * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback\n * @param payload\n * @param secretOrPrivateKey\n * @param options\n */\nexport async function signPayload(\n  payload: RemoteUser,\n  secretOrPrivateKey: string,\n  options: SignOptionsSignature = {}\n): Promise<string> {\n  return new Promise(function (resolve, reject) {\n    debug('sign jwt token');\n    jwt.sign(\n      payload,\n      secretOrPrivateKey, // FIXME: upgrade to the latest library and types\n      {\n        // 1 === 1ms (one millisecond)\n        notBefore: '1ms', // Make sure the time will not rollback :)\n        ...options,\n      },\n      (error, token) => {\n        if (error) {\n          debug('error on sign jwt token %s', error.message);\n          return reject(error);\n        }\n        debug('signed jwt token successfully');\n        return resolve(token as string);\n      }\n    );\n  });\n}\n\nexport function verifyPayload(\n  token: string,\n  secretOrPrivateKey: string,\n  options: VerifyOptionsSignature = {}\n): RemoteUser {\n  debug('verifying jwt token');\n  return jwt.verify(token, secretOrPrivateKey, options) as RemoteUser;\n}\n"],"mappings":";;;;;;AASA,IAAM,WAAA,GAAA,MAAA,SAAmB,0BAA0B;;;;;;;;AAQnD,eAAsB,YACpB,SACA,oBACA,UAAgC,CAAC,GAChB;CACjB,OAAO,IAAI,QAAQ,SAAU,SAAS,QAAQ;EAC5C,QAAM,gBAAgB;EACtB,aAAA,QAAI,KACF,SACA,oBACA;GAEE,WAAW;GACX,GAAG;EACL,IACC,OAAO,UAAU;GAChB,IAAI,OAAO;IACT,QAAM,8BAA8B,MAAM,OAAO;IACjD,OAAO,OAAO,KAAK;GACrB;GACA,QAAM,+BAA+B;GACrC,OAAO,QAAQ,KAAe;EAChC,CACF;CACF,CAAC;AACH;AAEA,SAAgB,cACd,OACA,oBACA,UAAkC,CAAC,GACvB;CACZ,QAAM,qBAAqB;CAC3B,OAAO,aAAA,QAAI,OAAO,OAAO,oBAAoB,OAAO;AACtD"}

package/build/jwt-token.mjs

@@ -0,0 +1,35 @@
+import buildDebug from "debug";
+import jwt from "jsonwebtoken";
+//#region src/jwt-token.ts
+var debug = buildDebug("verdaccio:auth:token:jwt");
+/**
+* Sign the payload and return JWT
+* https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback
+* @param payload
+* @param secretOrPrivateKey
+* @param options
+*/
+async function signPayload(payload, secretOrPrivateKey, options = {}) {
+	return new Promise(function(resolve, reject) {
+		debug("sign jwt token");
+		jwt.sign(payload, secretOrPrivateKey, {
+			notBefore: "1ms",
+			...options
+		}, (error, token) => {
+			if (error) {
+				debug("error on sign jwt token %s", error.message);
+				return reject(error);
+			}
+			debug("signed jwt token successfully");
+			return resolve(token);
+		});
+	});
+}
+function verifyPayload(token, secretOrPrivateKey, options = {}) {
+	debug("verifying jwt token");
+	return jwt.verify(token, secretOrPrivateKey, options);
+}
+//#endregion
+export { signPayload, verifyPayload };
+
+//# sourceMappingURL=jwt-token.mjs.map

package/build/jwt-token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.mjs","names":[],"sources":["../src/jwt-token.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { SignOptions, VerifyOptions } from 'jsonwebtoken';\nimport jwt from 'jsonwebtoken';\n\nimport type { RemoteUser } from '@verdaccio/types';\n\nexport type SignOptionsSignature = SignOptions;\nexport type VerifyOptionsSignature = VerifyOptions;\n\nconst debug = buildDebug('verdaccio:auth:token:jwt');\n/**\n * Sign the payload and return JWT\n * https://github.com/auth0/node-jsonwebtoken#jwtsignpayload-secretorprivatekey-options-callback\n * @param payload\n * @param secretOrPrivateKey\n * @param options\n */\nexport async function signPayload(\n  payload: RemoteUser,\n  secretOrPrivateKey: string,\n  options: SignOptionsSignature = {}\n): Promise<string> {\n  return new Promise(function (resolve, reject) {\n    debug('sign jwt token');\n    jwt.sign(\n      payload,\n      secretOrPrivateKey, // FIXME: upgrade to the latest library and types\n      {\n        // 1 === 1ms (one millisecond)\n        notBefore: '1ms', // Make sure the time will not rollback :)\n        ...options,\n      },\n      (error, token) => {\n        if (error) {\n          debug('error on sign jwt token %s', error.message);\n          return reject(error);\n        }\n        debug('signed jwt token successfully');\n        return resolve(token as string);\n      }\n    );\n  });\n}\n\nexport function verifyPayload(\n  token: string,\n  secretOrPrivateKey: string,\n  options: VerifyOptionsSignature = {}\n): RemoteUser {\n  debug('verifying jwt token');\n  return jwt.verify(token, secretOrPrivateKey, options) as RemoteUser;\n}\n"],"mappings":";;;AASA,IAAM,QAAQ,WAAW,0BAA0B;;;;;;;;AAQnD,eAAsB,YACpB,SACA,oBACA,UAAgC,CAAC,GAChB;CACjB,OAAO,IAAI,QAAQ,SAAU,SAAS,QAAQ;EAC5C,MAAM,gBAAgB;EACtB,IAAI,KACF,SACA,oBACA;GAEE,WAAW;GACX,GAAG;EACL,IACC,OAAO,UAAU;GAChB,IAAI,OAAO;IACT,MAAM,8BAA8B,MAAM,OAAO;IACjD,OAAO,OAAO,KAAK;GACrB;GACA,MAAM,+BAA+B;GACrC,OAAO,QAAQ,KAAe;EAChC,CACF;CACF,CAAC;AACH;AAEA,SAAgB,cACd,OACA,oBACA,UAAkC,CAAC,GACvB;CACZ,MAAM,qBAAqB;CAC3B,OAAO,IAAI,OAAO,OAAO,oBAAoB,OAAO;AACtD"}

package/build/signature.js

@@ -1,68 +1,48 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.aesDecrypt = aesDecrypt;
-exports.aesEncrypt = aesEncrypt;
-exports.defaultAlgorithm = void 0;
-var _debug = _interopRequireDefault(require("debug"));
-var _nodeCrypto = require("node:crypto");
-var _config = require("@verdaccio/config");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-var debug = (0, _debug["default"])('verdaccio:auth:token:legacy');
-var defaultAlgorithm = exports.defaultAlgorithm = process.env.VERDACCIO_LEGACY_ALGORITHM || 'aes-256-ctr';
-var inputEncoding = 'utf8';
-var outputEncoding = 'hex';
-// Must be 256 bits (32 characters)
-// https://stackoverflow.com/questions/50963160/invalid-key-length-in-crypto-createcipheriv#50963356
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let node_crypto = require("node:crypto");
+let _verdaccio_config = require("@verdaccio/config");
+//#region src/signature.ts
+var debug$1 = (0, debug.default)("verdaccio:auth:token:legacy");
+var defaultAlgorithm = process.env.VERDACCIO_LEGACY_ALGORITHM || "aes-256-ctr";
+var inputEncoding = "utf8";
+var outputEncoding = "hex";
 var VERDACCIO_LEGACY_ENCRYPTION_KEY = process.env.VERDACCIO_LEGACY_ENCRYPTION_KEY;
 function aesEncrypt(value, key) {
-  debug('aesEncrypt init');
-  // https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options
-  // https://www.grainger.xyz/posts/changing-from-cipher-to-cipheriv
-  debug('algorithm %o', defaultAlgorithm);
-  // IV must be a buffer of length 16
-  var iv = (0, _nodeCrypto.randomBytes)(16);
-  var secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;
-  var isKeyValid = (secretKey === null || secretKey === void 0 ? void 0 : secretKey.length) === _config.TOKEN_VALID_LENGTH;
-  if (isKeyValid === false) {
-    throw new Error('Invalid secret key length');
-  }
-  debug('length secret key %o', secretKey === null || secretKey === void 0 ? void 0 : secretKey.length);
-  debug('is valid secret %o', isKeyValid);
-  if (!value || !secretKey || !isKeyValid) {
-    return;
-  }
-  var cipher = (0, _nodeCrypto.createCipheriv)(defaultAlgorithm, secretKey, iv);
-  var encrypted = cipher.update(value, inputEncoding, outputEncoding);
-  // @ts-ignore
-  encrypted += cipher["final"](outputEncoding);
-  var token = "".concat(iv.toString('hex'), ":").concat(encrypted.toString());
-  debug('legacy token generated successfully');
-  return Buffer.from(token).toString('base64');
+	debug$1("aesEncrypt init");
+	debug$1("algorithm %o", defaultAlgorithm);
+	const iv = (0, node_crypto.randomBytes)(16);
+	const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;
+	const isKeyValid = secretKey?.length === _verdaccio_config.TOKEN_VALID_LENGTH;
+	if (isKeyValid === false) throw new Error("Invalid secret key length");
+	debug$1("length secret key %o", secretKey?.length);
+	debug$1("is valid secret %o", isKeyValid);
+	if (!value || !secretKey || !isKeyValid) return;
+	const cipher = (0, node_crypto.createCipheriv)(defaultAlgorithm, secretKey, iv);
+	let encrypted = cipher.update(value, inputEncoding, outputEncoding);
+	encrypted += cipher.final(outputEncoding);
+	const token = `${iv.toString("hex")}:${encrypted.toString()}`;
+	debug$1("legacy token generated successfully");
+	return Buffer.from(token).toString("base64");
 }
 function aesDecrypt(value, key) {
-  try {
-    debug('aesDecrypt init');
-    var buff = Buffer.from(value, 'base64');
-    var textParts = buff.toString().split(':');
-
-    // extract the IV from the first half of the value
-    // @ts-ignore
-    var IV = Buffer.from(textParts.shift(), outputEncoding);
-    // extract the encrypted text without the IV
-    var encryptedText = Buffer.from(textParts.join(':'), outputEncoding);
-    var secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;
-    // decipher the string
-    var decipher = (0, _nodeCrypto.createDecipheriv)(defaultAlgorithm, secretKey, IV);
-    // FIXME: fix type here should allow Buffer
-    var decrypted = decipher.update(encryptedText, outputEncoding, inputEncoding);
-    decrypted += decipher["final"](inputEncoding);
-    debug('legacy token payload decrypted successfully');
-    return decrypted.toString();
-  } catch (_unused) {
-    return;
-  }
+	try {
+		debug$1("aesDecrypt init");
+		const textParts = Buffer.from(value, "base64").toString().split(":");
+		const IV = Buffer.from(textParts.shift(), outputEncoding);
+		const encryptedText = Buffer.from(textParts.join(":"), outputEncoding);
+		const decipher = (0, node_crypto.createDecipheriv)(defaultAlgorithm, VERDACCIO_LEGACY_ENCRYPTION_KEY || key, IV);
+		let decrypted = decipher.update(encryptedText, outputEncoding, inputEncoding);
+		decrypted += decipher.final(inputEncoding);
+		debug$1("legacy token payload decrypted successfully");
+		return decrypted.toString();
+	} catch {
+		return;
+	}
 }
+//#endregion
+exports.aesDecrypt = aesDecrypt;
+exports.aesEncrypt = aesEncrypt;
+
 //# sourceMappingURL=signature.js.map

package/build/signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature.js","names":["_debug","_interopRequireDefault","require","_nodeCrypto","_config","e","__esModule","debug","buildDebug","defaultAlgorithm","exports","process","env","VERDACCIO_LEGACY_ALGORITHM","inputEncoding","outputEncoding","VERDACCIO_LEGACY_ENCRYPTION_KEY","aesEncrypt","value","key","iv","randomBytes","secretKey","isKeyValid","length","TOKEN_VALID_LENGTH","Error","cipher","createCipheriv","encrypted","update","token","concat","toString","Buffer","from","aesDecrypt","buff","textParts","split","IV","shift","encryptedText","join","decipher","createDecipheriv","decrypted","_unused"],"sources":["../src/signature.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { BinaryToTextEncoding, CharacterEncoding } from 'node:crypto';\nimport { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\n\nimport { TOKEN_VALID_LENGTH } from '@verdaccio/config';\n\nconst debug = buildDebug('verdaccio:auth:token:legacy');\n\nexport const defaultAlgorithm = process.env.VERDACCIO_LEGACY_ALGORITHM || 'aes-256-ctr';\nconst inputEncoding: CharacterEncoding = 'utf8';\nconst outputEncoding: BinaryToTextEncoding = 'hex';\n// Must be 256 bits (32 characters)\n// https://stackoverflow.com/questions/50963160/invalid-key-length-in-crypto-createcipheriv#50963356\nconst VERDACCIO_LEGACY_ENCRYPTION_KEY = process.env.VERDACCIO_LEGACY_ENCRYPTION_KEY;\n\nexport function aesEncrypt(value: string, key: string): string | void {\n  debug('aesEncrypt init');\n  // https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options\n  // https://www.grainger.xyz/posts/changing-from-cipher-to-cipheriv\n  debug('algorithm %o', defaultAlgorithm);\n  // IV must be a buffer of length 16\n  const iv = randomBytes(16);\n  const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;\n\n  const isKeyValid = secretKey?.length === TOKEN_VALID_LENGTH;\n  if (isKeyValid === false) {\n    throw new Error('Invalid secret key length');\n  }\n  debug('length secret key %o', secretKey?.length);\n  debug('is valid secret %o', isKeyValid);\n  if (!value || !secretKey || !isKeyValid) {\n    return;\n  }\n\n  const cipher = createCipheriv(defaultAlgorithm, secretKey, iv);\n  let encrypted = cipher.update(value, inputEncoding, outputEncoding);\n  // @ts-ignore\n  encrypted += cipher.final(outputEncoding);\n  const token = `${iv.toString('hex')}:${encrypted.toString()}`;\n  debug('legacy token generated successfully');\n  return Buffer.from(token).toString('base64');\n}\n\nexport function aesDecrypt(value: string, key: string): string | void {\n  try {\n    debug('aesDecrypt init');\n    const buff = Buffer.from(value, 'base64');\n    const textParts = buff.toString().split(':');\n\n    // extract the IV from the first half of the value\n    // @ts-ignore\n    const IV = Buffer.from(textParts.shift(), outputEncoding);\n    // extract the encrypted text without the IV\n    const encryptedText = Buffer.from(textParts.join(':'), outputEncoding);\n    const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;\n    // decipher the string\n    const decipher = createDecipheriv(defaultAlgorithm, secretKey, IV);\n    // FIXME: fix type here should allow Buffer\n    let decrypted = decipher.update(encryptedText as any, outputEncoding, inputEncoding);\n    decrypted += decipher.final(inputEncoding);\n    debug('legacy token payload decrypted successfully');\n    return decrypted.toString();\n  } catch {\n    return;\n  }\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,WAAA,GAAAD,OAAA;AAEA,IAAAE,OAAA,GAAAF,OAAA;AAAuD,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAEvD,IAAME,KAAK,GAAG,IAAAC,iBAAU,EAAC,6BAA6B,CAAC;AAEhD,IAAMC,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAGE,OAAO,CAACC,GAAG,CAACC,0BAA0B,IAAI,aAAa;AACvF,IAAMC,aAAgC,GAAG,MAAM;AAC/C,IAAMC,cAAoC,GAAG,KAAK;AAClD;AACA;AACA,IAAMC,+BAA+B,GAAGL,OAAO,CAACC,GAAG,CAACI,+BAA+B;AAE5E,SAASC,UAAUA,CAACC,KAAa,EAAEC,GAAW,EAAiB;EACpEZ,KAAK,CAAC,iBAAiB,CAAC;EACxB;EACA;EACAA,KAAK,CAAC,cAAc,EAAEE,gBAAgB,CAAC;EACvC;EACA,IAAMW,EAAE,GAAG,IAAAC,uBAAW,EAAC,EAAE,CAAC;EAC1B,IAAMC,SAAS,GAAGN,+BAA+B,IAAIG,GAAG;EAExD,IAAMI,UAAU,GAAG,CAAAD,SAAS,aAATA,SAAS,uBAATA,SAAS,CAAEE,MAAM,MAAKC,0BAAkB;EAC3D,IAAIF,UAAU,KAAK,KAAK,EAAE;IACxB,MAAM,IAAIG,KAAK,CAAC,2BAA2B,CAAC;EAC9C;EACAnB,KAAK,CAAC,sBAAsB,EAAEe,SAAS,aAATA,SAAS,uBAATA,SAAS,CAAEE,MAAM,CAAC;EAChDjB,KAAK,CAAC,oBAAoB,EAAEgB,UAAU,CAAC;EACvC,IAAI,CAACL,KAAK,IAAI,CAACI,SAAS,IAAI,CAACC,UAAU,EAAE;IACvC;EACF;EAEA,IAAMI,MAAM,GAAG,IAAAC,0BAAc,EAACnB,gBAAgB,EAAEa,SAAS,EAAEF,EAAE,CAAC;EAC9D,IAAIS,SAAS,GAAGF,MAAM,CAACG,MAAM,CAACZ,KAAK,EAAEJ,aAAa,EAAEC,cAAc,CAAC;EACnE;EACAc,SAAS,IAAIF,MAAM,SAAM,CAACZ,cAAc,CAAC;EACzC,IAAMgB,KAAK,MAAAC,MAAA,CAAMZ,EAAE,CAACa,QAAQ,CAAC,KAAK,CAAC,OAAAD,MAAA,CAAIH,SAAS,CAACI,QAAQ,CAAC,CAAC,CAAE;EAC7D1B,KAAK,CAAC,qCAAqC,CAAC;EAC5C,OAAO2B,MAAM,CAACC,IAAI,CAACJ,KAAK,CAAC,CAACE,QAAQ,CAAC,QAAQ,CAAC;AAC9C;AAEO,SAASG,UAAUA,CAAClB,KAAa,EAAEC,GAAW,EAAiB;EACpE,IAAI;IACFZ,KAAK,CAAC,iBAAiB,CAAC;IACxB,IAAM8B,IAAI,GAAGH,MAAM,CAACC,IAAI,CAACjB,KAAK,EAAE,QAAQ,CAAC;IACzC,IAAMoB,SAAS,GAAGD,IAAI,CAACJ,QAAQ,CAAC,CAAC,CAACM,KAAK,CAAC,GAAG,CAAC;;IAE5C;IACA;IACA,IAAMC,EAAE,GAAGN,MAAM,CAACC,IAAI,CAACG,SAAS,CAACG,KAAK,CAAC,CAAC,EAAE1B,cAAc,CAAC;IACzD;IACA,IAAM2B,aAAa,GAAGR,MAAM,CAACC,IAAI,CAACG,SAAS,CAACK,IAAI,CAAC,GAAG,CAAC,EAAE5B,cAAc,CAAC;IACtE,IAAMO,SAAS,GAAGN,+BAA+B,IAAIG,GAAG;IACxD;IACA,IAAMyB,QAAQ,GAAG,IAAAC,4BAAgB,EAACpC,gBAAgB,EAAEa,SAAS,EAAEkB,EAAE,CAAC;IAClE;IACA,IAAIM,SAAS,GAAGF,QAAQ,CAACd,MAAM,CAACY,aAAa,EAAS3B,cAAc,EAAED,aAAa,CAAC;IACpFgC,SAAS,IAAIF,QAAQ,SAAM,CAAC9B,aAAa,CAAC;IAC1CP,KAAK,CAAC,6CAA6C,CAAC;IACpD,OAAOuC,SAAS,CAACb,QAAQ,CAAC,CAAC;EAC7B,CAAC,CAAC,OAAAc,OAAA,EAAM;IACN;EACF;AACF","ignoreList":[]}
+{"version":3,"file":"signature.js","names":[],"sources":["../src/signature.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { BinaryToTextEncoding, CharacterEncoding } from 'node:crypto';\nimport { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\n\nimport { TOKEN_VALID_LENGTH } from '@verdaccio/config';\n\nconst debug = buildDebug('verdaccio:auth:token:legacy');\n\nexport const defaultAlgorithm = process.env.VERDACCIO_LEGACY_ALGORITHM || 'aes-256-ctr';\nconst inputEncoding: CharacterEncoding = 'utf8';\nconst outputEncoding: BinaryToTextEncoding = 'hex';\n// Must be 256 bits (32 characters)\n// https://stackoverflow.com/questions/50963160/invalid-key-length-in-crypto-createcipheriv#50963356\nconst VERDACCIO_LEGACY_ENCRYPTION_KEY = process.env.VERDACCIO_LEGACY_ENCRYPTION_KEY;\n\nexport function aesEncrypt(value: string, key: string): string | void {\n  debug('aesEncrypt init');\n  // https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options\n  // https://www.grainger.xyz/posts/changing-from-cipher-to-cipheriv\n  debug('algorithm %o', defaultAlgorithm);\n  // IV must be a buffer of length 16\n  const iv = randomBytes(16);\n  const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;\n\n  const isKeyValid = secretKey?.length === TOKEN_VALID_LENGTH;\n  if (isKeyValid === false) {\n    throw new Error('Invalid secret key length');\n  }\n  debug('length secret key %o', secretKey?.length);\n  debug('is valid secret %o', isKeyValid);\n  if (!value || !secretKey || !isKeyValid) {\n    return;\n  }\n\n  const cipher = createCipheriv(defaultAlgorithm, secretKey, iv);\n  let encrypted = cipher.update(value, inputEncoding, outputEncoding);\n  // @ts-ignore\n  encrypted += cipher.final(outputEncoding);\n  const token = `${iv.toString('hex')}:${encrypted.toString()}`;\n  debug('legacy token generated successfully');\n  return Buffer.from(token).toString('base64');\n}\n\nexport function aesDecrypt(value: string, key: string): string | void {\n  try {\n    debug('aesDecrypt init');\n    const buff = Buffer.from(value, 'base64');\n    const textParts = buff.toString().split(':');\n\n    // extract the IV from the first half of the value\n    // @ts-ignore\n    const IV = Buffer.from(textParts.shift(), outputEncoding);\n    // extract the encrypted text without the IV\n    const encryptedText = Buffer.from(textParts.join(':'), outputEncoding);\n    const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;\n    // decipher the string\n    const decipher = createDecipheriv(defaultAlgorithm, secretKey, IV);\n    // FIXME: fix type here should allow Buffer\n    let decrypted = decipher.update(encryptedText as any, outputEncoding, inputEncoding);\n    decrypted += decipher.final(inputEncoding);\n    debug('legacy token payload decrypted successfully');\n    return decrypted.toString();\n  } catch {\n    return;\n  }\n}\n"],"mappings":";;;;;;AAMA,IAAM,WAAA,GAAA,MAAA,SAAmB,6BAA6B;AAEtD,IAAa,mBAAmB,QAAQ,IAAI,8BAA8B;AAC1E,IAAM,gBAAmC;AACzC,IAAM,iBAAuC;AAG7C,IAAM,kCAAkC,QAAQ,IAAI;AAEpD,SAAgB,WAAW,OAAe,KAA4B;CACpE,QAAM,iBAAiB;CAGvB,QAAM,gBAAgB,gBAAgB;CAEtC,MAAM,MAAA,GAAA,YAAA,aAAiB,EAAE;CACzB,MAAM,YAAY,mCAAmC;CAErD,MAAM,aAAa,WAAW,WAAW,kBAAA;CACzC,IAAI,eAAe,OACjB,MAAM,IAAI,MAAM,2BAA2B;CAE7C,QAAM,wBAAwB,WAAW,MAAM;CAC/C,QAAM,sBAAsB,UAAU;CACtC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,YAC3B;CAGF,MAAM,UAAA,GAAA,YAAA,gBAAwB,kBAAkB,WAAW,EAAE;CAC7D,IAAI,YAAY,OAAO,OAAO,OAAO,eAAe,cAAc;CAElE,aAAa,OAAO,MAAM,cAAc;CACxC,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,EAAE,GAAG,UAAU,SAAS;CAC1D,QAAM,qCAAqC;CAC3C,OAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ;AAC7C;AAEA,SAAgB,WAAW,OAAe,KAA4B;CACpE,IAAI;EACF,QAAM,iBAAiB;EAEvB,MAAM,YADO,OAAO,KAAK,OAAO,QACd,EAAK,SAAS,EAAE,MAAM,GAAG;EAI3C,MAAM,KAAK,OAAO,KAAK,UAAU,MAAM,GAAG,cAAc;EAExD,MAAM,gBAAgB,OAAO,KAAK,UAAU,KAAK,GAAG,GAAG,cAAc;EAGrE,MAAM,YAAA,GAAA,YAAA,kBAA4B,kBAFhB,mCAAmC,KAEU,EAAE;EAEjE,IAAI,YAAY,SAAS,OAAO,eAAsB,gBAAgB,aAAa;EACnF,aAAa,SAAS,MAAM,aAAa;EACzC,QAAM,6CAA6C;EACnD,OAAO,UAAU,SAAS;CAC5B,QAAQ;EACN;CACF;AACF"}

package/build/signature.mjs

@@ -0,0 +1,45 @@
+import buildDebug from "debug";
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { TOKEN_VALID_LENGTH } from "@verdaccio/config";
+//#region src/signature.ts
+var debug = buildDebug("verdaccio:auth:token:legacy");
+var defaultAlgorithm = process.env.VERDACCIO_LEGACY_ALGORITHM || "aes-256-ctr";
+var inputEncoding = "utf8";
+var outputEncoding = "hex";
+var VERDACCIO_LEGACY_ENCRYPTION_KEY = process.env.VERDACCIO_LEGACY_ENCRYPTION_KEY;
+function aesEncrypt(value, key) {
+	debug("aesEncrypt init");
+	debug("algorithm %o", defaultAlgorithm);
+	const iv = randomBytes(16);
+	const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;
+	const isKeyValid = secretKey?.length === TOKEN_VALID_LENGTH;
+	if (isKeyValid === false) throw new Error("Invalid secret key length");
+	debug("length secret key %o", secretKey?.length);
+	debug("is valid secret %o", isKeyValid);
+	if (!value || !secretKey || !isKeyValid) return;
+	const cipher = createCipheriv(defaultAlgorithm, secretKey, iv);
+	let encrypted = cipher.update(value, inputEncoding, outputEncoding);
+	encrypted += cipher.final(outputEncoding);
+	const token = `${iv.toString("hex")}:${encrypted.toString()}`;
+	debug("legacy token generated successfully");
+	return Buffer.from(token).toString("base64");
+}
+function aesDecrypt(value, key) {
+	try {
+		debug("aesDecrypt init");
+		const textParts = Buffer.from(value, "base64").toString().split(":");
+		const IV = Buffer.from(textParts.shift(), outputEncoding);
+		const encryptedText = Buffer.from(textParts.join(":"), outputEncoding);
+		const decipher = createDecipheriv(defaultAlgorithm, VERDACCIO_LEGACY_ENCRYPTION_KEY || key, IV);
+		let decrypted = decipher.update(encryptedText, outputEncoding, inputEncoding);
+		decrypted += decipher.final(inputEncoding);
+		debug("legacy token payload decrypted successfully");
+		return decrypted.toString();
+	} catch {
+		return;
+	}
+}
+//#endregion
+export { aesDecrypt, aesEncrypt };
+
+//# sourceMappingURL=signature.mjs.map

package/build/signature.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.mjs","names":[],"sources":["../src/signature.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { BinaryToTextEncoding, CharacterEncoding } from 'node:crypto';\nimport { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\n\nimport { TOKEN_VALID_LENGTH } from '@verdaccio/config';\n\nconst debug = buildDebug('verdaccio:auth:token:legacy');\n\nexport const defaultAlgorithm = process.env.VERDACCIO_LEGACY_ALGORITHM || 'aes-256-ctr';\nconst inputEncoding: CharacterEncoding = 'utf8';\nconst outputEncoding: BinaryToTextEncoding = 'hex';\n// Must be 256 bits (32 characters)\n// https://stackoverflow.com/questions/50963160/invalid-key-length-in-crypto-createcipheriv#50963356\nconst VERDACCIO_LEGACY_ENCRYPTION_KEY = process.env.VERDACCIO_LEGACY_ENCRYPTION_KEY;\n\nexport function aesEncrypt(value: string, key: string): string | void {\n  debug('aesEncrypt init');\n  // https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options\n  // https://www.grainger.xyz/posts/changing-from-cipher-to-cipheriv\n  debug('algorithm %o', defaultAlgorithm);\n  // IV must be a buffer of length 16\n  const iv = randomBytes(16);\n  const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;\n\n  const isKeyValid = secretKey?.length === TOKEN_VALID_LENGTH;\n  if (isKeyValid === false) {\n    throw new Error('Invalid secret key length');\n  }\n  debug('length secret key %o', secretKey?.length);\n  debug('is valid secret %o', isKeyValid);\n  if (!value || !secretKey || !isKeyValid) {\n    return;\n  }\n\n  const cipher = createCipheriv(defaultAlgorithm, secretKey, iv);\n  let encrypted = cipher.update(value, inputEncoding, outputEncoding);\n  // @ts-ignore\n  encrypted += cipher.final(outputEncoding);\n  const token = `${iv.toString('hex')}:${encrypted.toString()}`;\n  debug('legacy token generated successfully');\n  return Buffer.from(token).toString('base64');\n}\n\nexport function aesDecrypt(value: string, key: string): string | void {\n  try {\n    debug('aesDecrypt init');\n    const buff = Buffer.from(value, 'base64');\n    const textParts = buff.toString().split(':');\n\n    // extract the IV from the first half of the value\n    // @ts-ignore\n    const IV = Buffer.from(textParts.shift(), outputEncoding);\n    // extract the encrypted text without the IV\n    const encryptedText = Buffer.from(textParts.join(':'), outputEncoding);\n    const secretKey = VERDACCIO_LEGACY_ENCRYPTION_KEY || key;\n    // decipher the string\n    const decipher = createDecipheriv(defaultAlgorithm, secretKey, IV);\n    // FIXME: fix type here should allow Buffer\n    let decrypted = decipher.update(encryptedText as any, outputEncoding, inputEncoding);\n    decrypted += decipher.final(inputEncoding);\n    debug('legacy token payload decrypted successfully');\n    return decrypted.toString();\n  } catch {\n    return;\n  }\n}\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,6BAA6B;AAEtD,IAAa,mBAAmB,QAAQ,IAAI,8BAA8B;AAC1E,IAAM,gBAAmC;AACzC,IAAM,iBAAuC;AAG7C,IAAM,kCAAkC,QAAQ,IAAI;AAEpD,SAAgB,WAAW,OAAe,KAA4B;CACpE,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAAgB;CAEtC,MAAM,KAAK,YAAY,EAAE;CACzB,MAAM,YAAY,mCAAmC;CAErD,MAAM,aAAa,WAAW,WAAW;CACzC,IAAI,eAAe,OACjB,MAAM,IAAI,MAAM,2BAA2B;CAE7C,MAAM,wBAAwB,WAAW,MAAM;CAC/C,MAAM,sBAAsB,UAAU;CACtC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,YAC3B;CAGF,MAAM,SAAS,eAAe,kBAAkB,WAAW,EAAE;CAC7D,IAAI,YAAY,OAAO,OAAO,OAAO,eAAe,cAAc;CAElE,aAAa,OAAO,MAAM,cAAc;CACxC,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,EAAE,GAAG,UAAU,SAAS;CAC1D,MAAM,qCAAqC;CAC3C,OAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ;AAC7C;AAEA,SAAgB,WAAW,OAAe,KAA4B;CACpE,IAAI;EACF,MAAM,iBAAiB;EAEvB,MAAM,YADO,OAAO,KAAK,OAAO,QACd,EAAK,SAAS,EAAE,MAAM,GAAG;EAI3C,MAAM,KAAK,OAAO,KAAK,UAAU,MAAM,GAAG,cAAc;EAExD,MAAM,gBAAgB,OAAO,KAAK,UAAU,KAAK,GAAG,GAAG,cAAc;EAGrE,MAAM,WAAW,iBAAiB,kBAFhB,mCAAmC,KAEU,EAAE;EAEjE,IAAI,YAAY,SAAS,OAAO,eAAsB,gBAAgB,aAAa;EACnF,aAAa,SAAS,MAAM,aAAa;EACzC,MAAM,6CAA6C;EACnD,OAAO,UAAU,SAAS;CAC5B,QAAQ;EACN;CACF;AACF"}

package/build/token.js

@@ -1,38 +1,26 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.parseBasicPayload = parseBasicPayload;
+//#region src/token.ts
 /**
- *
- * @param credentials
- * @returns
- */
+*
+* @param credentials
+* @returns
+*/
 function parseBasicPayload(credentials) {
-  if (credentials.startsWith('{')) {
-    try {
-      var parsed = JSON.parse(credentials);
-      if (typeof parsed.user === 'string' && typeof parsed.password === 'string') {
-        return {
-          user: parsed.user,
-          password: parsed.password,
-          tokenKey: typeof parsed.tokenKey === 'string' ? parsed.tokenKey : undefined
-        };
-      }
-    } catch (_unused) {
-      // not a JSON payload, fall through to the legacy "user:password" parsing
-    }
-  }
-  var index = credentials.indexOf(':');
-  if (index < 0) {
-    return;
-  }
-  var user = credentials.slice(0, index);
-  var password = credentials.slice(index + 1);
-  return {
-    user: user,
-    password: password
-  };
+	if (credentials.startsWith("{")) try {
+		const parsed = JSON.parse(credentials);
+		if (typeof parsed.user === "string" && typeof parsed.password === "string") return {
+			user: parsed.user,
+			password: parsed.password,
+			tokenKey: typeof parsed.tokenKey === "string" ? parsed.tokenKey : void 0
+		};
+	} catch {}
+	const index = credentials.indexOf(":");
+	if (index < 0) return;
+	return {
+		user: credentials.slice(0, index),
+		password: credentials.slice(index + 1)
+	};
 }
+//#endregion
+exports.parseBasicPayload = parseBasicPayload;
+
 //# sourceMappingURL=token.js.map

package/build/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","names":["parseBasicPayload","credentials","startsWith","parsed","JSON","parse","user","password","tokenKey","undefined","_unused","index","indexOf","slice"],"sources":["../src/token.ts"],"sourcesContent":["import type { BasicPayload } from './types';\n\n/**\n *\n * @param credentials\n * @returns\n */\nexport function parseBasicPayload(credentials: string): BasicPayload {\n  if (credentials.startsWith('{')) {\n    try {\n      const parsed = JSON.parse(credentials);\n\n      if (typeof parsed.user === 'string' && typeof parsed.password === 'string') {\n        return {\n          user: parsed.user,\n          password: parsed.password,\n          tokenKey: typeof parsed.tokenKey === 'string' ? parsed.tokenKey : undefined,\n        };\n      }\n    } catch {\n      // not a JSON payload, fall through to the legacy \"user:password\" parsing\n    }\n  }\n\n  const index = credentials.indexOf(':');\n  if (index < 0) {\n    return;\n  }\n\n  const user: string = credentials.slice(0, index);\n  const password: string = credentials.slice(index + 1);\n\n  return { user, password };\n}\n"],"mappings":";;;;;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASA,iBAAiBA,CAACC,WAAmB,EAAgB;EACnE,IAAIA,WAAW,CAACC,UAAU,CAAC,GAAG,CAAC,EAAE;IAC/B,IAAI;MACF,IAAMC,MAAM,GAAGC,IAAI,CAACC,KAAK,CAACJ,WAAW,CAAC;MAEtC,IAAI,OAAOE,MAAM,CAACG,IAAI,KAAK,QAAQ,IAAI,OAAOH,MAAM,CAACI,QAAQ,KAAK,QAAQ,EAAE;QAC1E,OAAO;UACLD,IAAI,EAAEH,MAAM,CAACG,IAAI;UACjBC,QAAQ,EAAEJ,MAAM,CAACI,QAAQ;UACzBC,QAAQ,EAAE,OAAOL,MAAM,CAACK,QAAQ,KAAK,QAAQ,GAAGL,MAAM,CAACK,QAAQ,GAAGC;QACpE,CAAC;MACH;IACF,CAAC,CAAC,OAAAC,OAAA,EAAM;MACN;IAAA;EAEJ;EAEA,IAAMC,KAAK,GAAGV,WAAW,CAACW,OAAO,CAAC,GAAG,CAAC;EACtC,IAAID,KAAK,GAAG,CAAC,EAAE;IACb;EACF;EAEA,IAAML,IAAY,GAAGL,WAAW,CAACY,KAAK,CAAC,CAAC,EAAEF,KAAK,CAAC;EAChD,IAAMJ,QAAgB,GAAGN,WAAW,CAACY,KAAK,CAACF,KAAK,GAAG,CAAC,CAAC;EAErD,OAAO;IAAEL,IAAI,EAAJA,IAAI;IAAEC,QAAQ,EAARA;EAAS,CAAC;AAC3B","ignoreList":[]}
+{"version":3,"file":"token.js","names":[],"sources":["../src/token.ts"],"sourcesContent":["import type { BasicPayload } from './types';\n\n/**\n *\n * @param credentials\n * @returns\n */\nexport function parseBasicPayload(credentials: string): BasicPayload {\n  if (credentials.startsWith('{')) {\n    try {\n      const parsed = JSON.parse(credentials);\n\n      if (typeof parsed.user === 'string' && typeof parsed.password === 'string') {\n        return {\n          user: parsed.user,\n          password: parsed.password,\n          tokenKey: typeof parsed.tokenKey === 'string' ? parsed.tokenKey : undefined,\n        };\n      }\n    } catch {\n      // not a JSON payload, fall through to the legacy \"user:password\" parsing\n    }\n  }\n\n  const index = credentials.indexOf(':');\n  if (index < 0) {\n    return;\n  }\n\n  const user: string = credentials.slice(0, index);\n  const password: string = credentials.slice(index + 1);\n\n  return { user, password };\n}\n"],"mappings":";;;;;;AAOA,SAAgB,kBAAkB,aAAmC;CACnE,IAAI,YAAY,WAAW,GAAG,GAC5B,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,WAAW;EAErC,IAAI,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,UAChE,OAAO;GACL,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,UAAU,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,KAAA;EACpE;CAEJ,QAAQ,CAER;CAGF,MAAM,QAAQ,YAAY,QAAQ,GAAG;CACrC,IAAI,QAAQ,GACV;CAMF,OAAO;EAAE,MAHY,YAAY,MAAM,GAAG,KAGjC;EAAM,UAFU,YAAY,MAAM,QAAQ,CAEpC;CAAS;AAC1B"}

package/build/token.mjs

@@ -0,0 +1,26 @@
+//#region src/token.ts
+/**
+*
+* @param credentials
+* @returns
+*/
+function parseBasicPayload(credentials) {
+	if (credentials.startsWith("{")) try {
+		const parsed = JSON.parse(credentials);
+		if (typeof parsed.user === "string" && typeof parsed.password === "string") return {
+			user: parsed.user,
+			password: parsed.password,
+			tokenKey: typeof parsed.tokenKey === "string" ? parsed.tokenKey : void 0
+		};
+	} catch {}
+	const index = credentials.indexOf(":");
+	if (index < 0) return;
+	return {
+		user: credentials.slice(0, index),
+		password: credentials.slice(index + 1)
+	};
+}
+//#endregion
+export { parseBasicPayload };
+
+//# sourceMappingURL=token.mjs.map

package/build/token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.mjs","names":[],"sources":["../src/token.ts"],"sourcesContent":["import type { BasicPayload } from './types';\n\n/**\n *\n * @param credentials\n * @returns\n */\nexport function parseBasicPayload(credentials: string): BasicPayload {\n  if (credentials.startsWith('{')) {\n    try {\n      const parsed = JSON.parse(credentials);\n\n      if (typeof parsed.user === 'string' && typeof parsed.password === 'string') {\n        return {\n          user: parsed.user,\n          password: parsed.password,\n          tokenKey: typeof parsed.tokenKey === 'string' ? parsed.tokenKey : undefined,\n        };\n      }\n    } catch {\n      // not a JSON payload, fall through to the legacy \"user:password\" parsing\n    }\n  }\n\n  const index = credentials.indexOf(':');\n  if (index < 0) {\n    return;\n  }\n\n  const user: string = credentials.slice(0, index);\n  const password: string = credentials.slice(index + 1);\n\n  return { user, password };\n}\n"],"mappings":";;;;;;AAOA,SAAgB,kBAAkB,aAAmC;CACnE,IAAI,YAAY,WAAW,GAAG,GAC5B,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,WAAW;EAErC,IAAI,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,aAAa,UAChE,OAAO;GACL,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,UAAU,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,KAAA;EACpE;CAEJ,QAAQ,CAER;CAGF,MAAM,QAAQ,YAAY,QAAQ,GAAG;CACrC,IAAI,QAAQ,GACV;CAMF,OAAO;EAAE,MAHY,YAAY,MAAM,GAAG,KAGjC;EAAM,UAFU,YAAY,MAAM,QAAQ,CAEpC;CAAS;AAC1B"}

package/build/types.js

@@ -1,6 +1,11 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
+//#region src/types.ts
+var types_exports = /* @__PURE__ */ require("./_virtual/_rolldown/runtime.js").__exportAll({});
+//#endregion
+Object.defineProperty(exports, "types_exports", {
+	enumerable: true,
+	get: function() {
+		return types_exports;
+	}
 });
+
 //# sourceMappingURL=types.js.map

package/build/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["export interface AESPayload {\n  user: string;\n  password: string;\n  tokenKey?: string;\n}\n\nexport type BasicPayload = AESPayload | void;\n"],"mappings":"","ignoreList":[]}
+{"version":3,"file":"types.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["export interface AESPayload {\n  user: string;\n  password: string;\n  tokenKey?: string;\n}\n\nexport type BasicPayload = AESPayload | void;\n"],"mappings":""}

package/build/types.mjs

@@ -0,0 +1,7 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+//#region src/types.ts
+var types_exports = /* @__PURE__ */ __exportAll({});
+//#endregion
+export { types_exports };
+
+//# sourceMappingURL=types.mjs.map

package/build/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","names":[],"sources":["../src/types.ts"],"sourcesContent":["export interface AESPayload {\n  user: string;\n  password: string;\n  tokenKey?: string;\n}\n\nexport type BasicPayload = AESPayload | void;\n"],"mappings":""}

package/build/utils.js

@@ -1,32 +1,25 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "TOKEN_VALID_LENGTH", {
-  enumerable: true,
-  get: function get() {
-    return _config.TOKEN_VALID_LENGTH;
-  }
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let _verdaccio_config = require("@verdaccio/config");
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/utils.ts
+var utils_exports = /* @__PURE__ */ require_runtime.__exportAll({
+	TOKEN_VALID_LENGTH: () => _verdaccio_config.TOKEN_VALID_LENGTH,
+	createTarballHash: () => createTarballHash,
+	defaultTarballHashAlgorithm: () => defaultTarballHashAlgorithm,
+	generateRandomHexString: () => generateRandomHexString,
+	generateRandomSecretKey: () => _verdaccio_config.generateRandomSecretKey,
+	stringToMD5: () => stringToMD5
 });
-exports.generateRandomHexString = exports.defaultTarballHashAlgorithm = exports.createTarballHash = void 0;
-Object.defineProperty(exports, "generateRandomSecretKey", {
-  enumerable: true,
-  get: function get() {
-    return _config.generateRandomSecretKey;
-  }
+var defaultTarballHashAlgorithm = _verdaccio_core.cryptoUtils.defaultTarballHashAlgorithm;
+var stringToMD5 = _verdaccio_core.cryptoUtils.stringToMD5;
+var createTarballHash = _verdaccio_core.cryptoUtils.createTarballHash;
+var generateRandomHexString = _verdaccio_core.cryptoUtils.generateRandomHexString;
+//#endregion
+Object.defineProperty(exports, "utils_exports", {
+	enumerable: true,
+	get: function() {
+		return utils_exports;
+	}
 });
-exports.stringToMD5 = void 0;
-var _config = require("@verdaccio/config");
-var _core = require("@verdaccio/core");
-// @deprecated use @verdaccio/core.cryptoUtils instead
-var defaultTarballHashAlgorithm = exports.defaultTarballHashAlgorithm = _core.cryptoUtils.defaultTarballHashAlgorithm;
-// @deprecated use @verdaccio/core.cryptoUtils instead
-var stringToMD5 = exports.stringToMD5 = _core.cryptoUtils.stringToMD5;
-// @deprecated use @verdaccio/core.cryptoUtils instead
-var createTarballHash = exports.createTarballHash = _core.cryptoUtils.createTarballHash;
-// @deprecated use @verdaccio/core.cryptoUtils instead
-var generateRandomHexString = exports.generateRandomHexString = _core.cryptoUtils.generateRandomHexString;
 
-// @deprecated use @verdaccio/config instead
 //# sourceMappingURL=utils.js.map

package/build/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":["_config","require","_core","defaultTarballHashAlgorithm","exports","cryptoUtils","stringToMD5","createTarballHash","generateRandomHexString"],"sources":["../src/utils.ts"],"sourcesContent":["import { TOKEN_VALID_LENGTH, generateRandomSecretKey } from '@verdaccio/config';\nimport { cryptoUtils } from '@verdaccio/core';\n\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const defaultTarballHashAlgorithm = cryptoUtils.defaultTarballHashAlgorithm;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const stringToMD5 = cryptoUtils.stringToMD5;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const createTarballHash = cryptoUtils.createTarballHash;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const generateRandomHexString = cryptoUtils.generateRandomHexString;\n\n// @deprecated use @verdaccio/config instead\nexport { TOKEN_VALID_LENGTH, generateRandomSecretKey };\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AAEA;AACO,IAAME,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAGE,iBAAW,CAACF,2BAA2B;AAClF;AACO,IAAMG,WAAW,GAAAF,OAAA,CAAAE,WAAA,GAAGD,iBAAW,CAACC,WAAW;AAClD;AACO,IAAMC,iBAAiB,GAAAH,OAAA,CAAAG,iBAAA,GAAGF,iBAAW,CAACE,iBAAiB;AAC9D;AACO,IAAMC,uBAAuB,GAAAJ,OAAA,CAAAI,uBAAA,GAAGH,iBAAW,CAACG,uBAAuB;;AAE1E","ignoreList":[]}
+{"version":3,"file":"utils.js","names":[],"sources":["../src/utils.ts"],"sourcesContent":["import { TOKEN_VALID_LENGTH, generateRandomSecretKey } from '@verdaccio/config';\nimport { cryptoUtils } from '@verdaccio/core';\n\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const defaultTarballHashAlgorithm = cryptoUtils.defaultTarballHashAlgorithm;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const stringToMD5 = cryptoUtils.stringToMD5;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const createTarballHash = cryptoUtils.createTarballHash;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const generateRandomHexString = cryptoUtils.generateRandomHexString;\n\n// @deprecated use @verdaccio/config instead\nexport { TOKEN_VALID_LENGTH, generateRandomSecretKey };\n"],"mappings":";;;;;;;;;;;;AAIA,IAAa,8BAA8B,gBAAA,YAAY;AAEvD,IAAa,cAAc,gBAAA,YAAY;AAEvC,IAAa,oBAAoB,gBAAA,YAAY;AAE7C,IAAa,0BAA0B,gBAAA,YAAY"}

package/build/utils.mjs

@@ -0,0 +1,20 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+import { TOKEN_VALID_LENGTH as TOKEN_VALID_LENGTH$1, generateRandomSecretKey } from "@verdaccio/config";
+import { cryptoUtils } from "@verdaccio/core";
+//#region src/utils.ts
+var utils_exports = /* @__PURE__ */ __exportAll({
+	TOKEN_VALID_LENGTH: () => TOKEN_VALID_LENGTH$1,
+	createTarballHash: () => createTarballHash,
+	defaultTarballHashAlgorithm: () => defaultTarballHashAlgorithm,
+	generateRandomHexString: () => generateRandomHexString,
+	generateRandomSecretKey: () => generateRandomSecretKey,
+	stringToMD5: () => stringToMD5
+});
+var defaultTarballHashAlgorithm = cryptoUtils.defaultTarballHashAlgorithm;
+var stringToMD5 = cryptoUtils.stringToMD5;
+var createTarballHash = cryptoUtils.createTarballHash;
+var generateRandomHexString = cryptoUtils.generateRandomHexString;
+//#endregion
+export { utils_exports };
+
+//# sourceMappingURL=utils.mjs.map

package/build/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","names":[],"sources":["../src/utils.ts"],"sourcesContent":["import { TOKEN_VALID_LENGTH, generateRandomSecretKey } from '@verdaccio/config';\nimport { cryptoUtils } from '@verdaccio/core';\n\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const defaultTarballHashAlgorithm = cryptoUtils.defaultTarballHashAlgorithm;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const stringToMD5 = cryptoUtils.stringToMD5;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const createTarballHash = cryptoUtils.createTarballHash;\n// @deprecated use @verdaccio/core.cryptoUtils instead\nexport const generateRandomHexString = cryptoUtils.generateRandomHexString;\n\n// @deprecated use @verdaccio/config instead\nexport { TOKEN_VALID_LENGTH, generateRandomSecretKey };\n"],"mappings":";;;;;;;;;;;;AAIA,IAAa,8BAA8B,YAAY;AAEvD,IAAa,cAAc,YAAY;AAEvC,IAAa,oBAAoB,YAAY;AAE7C,IAAa,0BAA0B,YAAY"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/signature",
-  "version": "8.0.5",
+  "version": "8.1.0",
   "description": "Verdaccio Signature Utilities",
   "keywords": [
     "enterprise",
@@ -32,27 +32,40 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "main": "./build/index.js",
-  "types": "build/index.d.ts",
+  "module": "./build/index.mjs",
+  "types": "./build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./build/index.d.ts",
+        "default": "./build/index.mjs"
+      },
+      "require": {
+        "types": "./build/index.d.ts",
+        "default": "./build/index.js"
+      }
+    },
+    "./build/*": "./build/*"
+  },
   "dependencies": {
-    "@verdaccio/config": "8.1.4",
-    "@verdaccio/core": "8.1.4",
+    "@verdaccio/config": "8.2.0",
+    "@verdaccio/core": "8.2.0",
     "debug": "4.4.3",
     "jsonwebtoken": "9.0.3"
   },
   "devDependencies": {
     "@verdaccio/types": "13.0.5",
+    "vite": "8.0.16",
     "vitest": "4.1.2"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "scripts": {
     "clean": "rimraf ./build",
     "test": "vitest run",
     "type-check": "tsc --noEmit -p tsconfig.build.json",
-    "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
-    "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
-    "watch": "pnpm build:js -- --watch",
-    "build": "pnpm run build:js && pnpm run build:types"
+    "watch": "vite build --watch",
+    "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.build.json"
   }
 }

package/build/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["_legacySignature","require","_signature","_jwtToken","_utils","_interopRequireWildcard","exports","utils","_types","types","_token","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","_typeof","has","get","set","_t","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor"],"sources":["../src/index.ts"],"sourcesContent":["export {\n  aesDecryptDeprecated,\n  aesEncryptDeprecated,\n  generateRandomSecretKeyDeprecated,\n} from './legacy-signature';\n\nexport { aesDecrypt, aesEncrypt } from './signature';\nexport {\n  signPayload,\n  verifyPayload,\n  SignOptionsSignature,\n  VerifyOptionsSignature,\n} from './jwt-token';\nexport * as utils from './utils';\nexport * as types from './types';\nexport { parseBasicPayload } from './token';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,gBAAA,GAAAC,OAAA;AAMA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAKqB,IAAAG,MAAA,GAAAC,uBAAA,CAAAJ,OAAA;AAAAK,OAAA,CAAAC,KAAA,GAAAH,MAAA;AAAA,IAAAI,MAAA,GAAAH,uBAAA,CAAAJ,OAAA;AAAAK,OAAA,CAAAG,KAAA,GAAAD,MAAA;AAGrB,IAAAE,MAAA,GAAAT,OAAA;AAA4C,SAAAI,wBAAAM,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAR,uBAAA,YAAAA,wBAAAM,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,mBAAAT,CAAA,iBAAAA,CAAA,gBAAAU,OAAA,CAAAV,CAAA,0BAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,cAAAM,EAAA,IAAAd,CAAA,gBAAAc,EAAA,OAAAC,cAAA,CAAAC,IAAA,CAAAhB,CAAA,EAAAc,EAAA,OAAAP,CAAA,IAAAD,CAAA,GAAAW,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAnB,CAAA,EAAAc,EAAA,OAAAP,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAM,EAAA,EAAAP,CAAA,IAAAC,CAAA,CAAAM,EAAA,IAAAd,CAAA,CAAAc,EAAA,WAAAN,CAAA,KAAAR,CAAA,EAAAC,CAAA","ignoreList":[]}

package/build/legacy-signature/index.d.ts

@@ -1,21 +0,0 @@
-/// <reference types="node" />
-export declare const defaultAlgorithm = "aes192";
-/**
- *
- * @param buf
- * @param secret
- * @returns
- */
-export declare function aesEncryptDeprecated(buf: Buffer, secret: string): Buffer;
-/**
- *
- * @param buf
- * @param secret
- * @returns
- */
-export declare function aesDecryptDeprecated(buf: Buffer, secret: string): Buffer;
-export declare const TOKEN_VALID_LENGTH_DEPRECATED = 64;
-/**
- * Generate a secret key of 64 characters.
- */
-export declare function generateRandomSecretKeyDeprecated(): string;

package/build/legacy-signature/index.js

@@ -1,65 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.TOKEN_VALID_LENGTH_DEPRECATED = void 0;
-exports.aesDecryptDeprecated = aesDecryptDeprecated;
-exports.aesEncryptDeprecated = aesEncryptDeprecated;
-exports.defaultAlgorithm = void 0;
-exports.generateRandomSecretKeyDeprecated = generateRandomSecretKeyDeprecated;
-var _debug = _interopRequireDefault(require("debug"));
-var _nodeCrypto = require("node:crypto");
-var _core = require("@verdaccio/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-var defaultAlgorithm = exports.defaultAlgorithm = 'aes192';
-var debug = (0, _debug["default"])('verdaccio:auth:token:legacy:deprecated');
-
-/**
- *
- * @param buf
- * @param secret
- * @returns
- */
-function aesEncryptDeprecated(buf, secret) {
-  debug('aesEncryptDeprecated init');
-  debug('algorithm %o', defaultAlgorithm);
-  // deprecated (it will be removed in Verdaccio 6), it is a breaking change
-  // https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options
-  // https://www.grainger.xyz/changing-from-cipher-to-cipheriv/
-  var c = (0, _nodeCrypto.createCipher)(defaultAlgorithm, secret);
-  var b1 = c.update(buf);
-  var b2 = c["final"]();
-  debug('deprecated legacy token generated successfully');
-  return Buffer.concat([b1, b2]);
-}
-
-/**
- *
- * @param buf
- * @param secret
- * @returns
- */
-function aesDecryptDeprecated(buf, secret) {
-  try {
-    debug('aesDecryptDeprecated init');
-    // https://nodejs.org/api/crypto.html#crypto_crypto_createdecipher_algorithm_password_options
-    // https://www.grainger.xyz/changing-from-cipher-to-cipheriv/
-    var c = (0, _nodeCrypto.createDecipher)(defaultAlgorithm, secret);
-    var b1 = c.update(buf);
-    var b2 = c["final"]();
-    debug('deprecated legacy token payload decrypted successfully');
-    return Buffer.concat([b1, b2]);
-  } catch (_unused) {
-    return Buffer.alloc(0);
-  }
-}
-var TOKEN_VALID_LENGTH_DEPRECATED = exports.TOKEN_VALID_LENGTH_DEPRECATED = 64;
-
-/**
- * Generate a secret key of 64 characters.
- */
-function generateRandomSecretKeyDeprecated() {
-  return _core.cryptoUtils.generateRandomHexString(6);
-}
-//# sourceMappingURL=index.js.map

package/build/legacy-signature/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["_debug","_interopRequireDefault","require","_nodeCrypto","_core","e","__esModule","defaultAlgorithm","exports","debug","buildDebug","aesEncryptDeprecated","buf","secret","c","createCipher","b1","update","b2","Buffer","concat","aesDecryptDeprecated","createDecipher","_unused","alloc","TOKEN_VALID_LENGTH_DEPRECATED","generateRandomSecretKeyDeprecated","cryptoUtils","generateRandomHexString"],"sources":["../../src/legacy-signature/index.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { createCipher, createDecipher } from 'node:crypto';\n\nimport { cryptoUtils } from '@verdaccio/core';\n\nexport const defaultAlgorithm = 'aes192';\n\nconst debug = buildDebug('verdaccio:auth:token:legacy:deprecated');\n\n/**\n *\n * @param buf\n * @param secret\n * @returns\n */\nexport function aesEncryptDeprecated(buf: Buffer, secret: string): Buffer {\n  debug('aesEncryptDeprecated init');\n  debug('algorithm %o', defaultAlgorithm);\n  // deprecated (it will be removed in Verdaccio 6), it is a breaking change\n  // https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options\n  // https://www.grainger.xyz/changing-from-cipher-to-cipheriv/\n  const c = createCipher(defaultAlgorithm, secret);\n  const b1 = c.update(buf);\n  const b2 = c.final();\n  debug('deprecated legacy token generated successfully');\n  return Buffer.concat([b1, b2]);\n}\n\n/**\n *\n * @param buf\n * @param secret\n * @returns\n */\nexport function aesDecryptDeprecated(buf: Buffer, secret: string): Buffer {\n  try {\n    debug('aesDecryptDeprecated init');\n    // https://nodejs.org/api/crypto.html#crypto_crypto_createdecipher_algorithm_password_options\n    // https://www.grainger.xyz/changing-from-cipher-to-cipheriv/\n    const c = createDecipher(defaultAlgorithm, secret);\n    const b1 = c.update(buf);\n    const b2 = c.final();\n    debug('deprecated legacy token payload decrypted successfully');\n    return Buffer.concat([b1, b2]);\n  } catch {\n    return Buffer.alloc(0);\n  }\n}\n\nexport const TOKEN_VALID_LENGTH_DEPRECATED = 64;\n\n/**\n * Generate a secret key of 64 characters.\n */\nexport function generateRandomSecretKeyDeprecated(): string {\n  return cryptoUtils.generateRandomHexString(6);\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAA8C,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAEvC,IAAME,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,QAAQ;AAExC,IAAME,KAAK,GAAG,IAAAC,iBAAU,EAAC,wCAAwC,CAAC;;AAElE;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,oBAAoBA,CAACC,GAAW,EAAEC,MAAc,EAAU;EACxEJ,KAAK,CAAC,2BAA2B,CAAC;EAClCA,KAAK,CAAC,cAAc,EAAEF,gBAAgB,CAAC;EACvC;EACA;EACA;EACA,IAAMO,CAAC,GAAG,IAAAC,wBAAY,EAACR,gBAAgB,EAAEM,MAAM,CAAC;EAChD,IAAMG,EAAE,GAAGF,CAAC,CAACG,MAAM,CAACL,GAAG,CAAC;EACxB,IAAMM,EAAE,GAAGJ,CAAC,SAAM,CAAC,CAAC;EACpBL,KAAK,CAAC,gDAAgD,CAAC;EACvD,OAAOU,MAAM,CAACC,MAAM,CAAC,CAACJ,EAAE,EAAEE,EAAE,CAAC,CAAC;AAChC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,oBAAoBA,CAACT,GAAW,EAAEC,MAAc,EAAU;EACxE,IAAI;IACFJ,KAAK,CAAC,2BAA2B,CAAC;IAClC;IACA;IACA,IAAMK,CAAC,GAAG,IAAAQ,0BAAc,EAACf,gBAAgB,EAAEM,MAAM,CAAC;IAClD,IAAMG,EAAE,GAAGF,CAAC,CAACG,MAAM,CAACL,GAAG,CAAC;IACxB,IAAMM,EAAE,GAAGJ,CAAC,SAAM,CAAC,CAAC;IACpBL,KAAK,CAAC,wDAAwD,CAAC;IAC/D,OAAOU,MAAM,CAACC,MAAM,CAAC,CAACJ,EAAE,EAAEE,EAAE,CAAC,CAAC;EAChC,CAAC,CAAC,OAAAK,OAAA,EAAM;IACN,OAAOJ,MAAM,CAACK,KAAK,CAAC,CAAC,CAAC;EACxB;AACF;AAEO,IAAMC,6BAA6B,GAAAjB,OAAA,CAAAiB,6BAAA,GAAG,EAAE;;AAE/C;AACA;AACA;AACO,SAASC,iCAAiCA,CAAA,EAAW;EAC1D,OAAOC,iBAAW,CAACC,uBAAuB,CAAC,CAAC,CAAC;AAC/C","ignoreList":[]}