@vlian/csrf 0.1.1

package/dist/index.cjs

@@ -0,0 +1,159 @@
+/**
+ * CSRF 防护工具
+ * 提供 CSRF Token 的生成、存储和验证功能
+ */ /**
+ * CSRF Token 存储接口
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get CSRFTokenManager () {
+        return CSRFTokenManager;
+    },
+    get getCSRFManager () {
+        return getCSRFManager;
+    },
+    get initCSRFManager () {
+        return initCSRFManager;
+    }
+});
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+/**
+ * 默认 Token 存储（使用 Cookie）
+ */ let CookieTokenStorage = class CookieTokenStorage {
+    getToken() {
+        if (typeof document === 'undefined') {
+            return null;
+        }
+        const cookies = document.cookie.split(';');
+        for (const cookie of cookies){
+            const [name, value] = cookie.trim().split('=');
+            if (name === this.cookieName) {
+                return decodeURIComponent(value);
+            }
+        }
+        return null;
+    }
+    setToken(token) {
+        if (typeof document === 'undefined') {
+            return;
+        }
+        // 设置 Cookie（HttpOnly 由服务端设置，这里只设置客户端可访问的）
+        document.cookie = `${this.cookieName}=${encodeURIComponent(token)}; path=/; SameSite=Strict`;
+    }
+    clearToken() {
+        if (typeof document === 'undefined') {
+            return;
+        }
+        document.cookie = `${this.cookieName}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;
+    }
+    constructor(cookieName = 'csrf-token'){
+        _define_property(this, "cookieName", void 0);
+        this.cookieName = cookieName;
+    }
+};
+/**
+ * 内存 Token 存储（用于 SSR 或测试）
+ */ let MemoryTokenStorage = class MemoryTokenStorage {
+    getToken() {
+        return this.token;
+    }
+    setToken(token) {
+        this.token = token;
+    }
+    clearToken() {
+        this.token = null;
+    }
+    constructor(){
+        _define_property(this, "token", null);
+    }
+};
+let CSRFTokenManager = class CSRFTokenManager {
+    /**
+   * 获取 CSRF Token
+   */ async getToken() {
+        if (this.getTokenFn) {
+            try {
+                return await Promise.resolve(this.getTokenFn());
+            } catch (error) {
+                console.warn('CSRF Token 获取失败:', error);
+                return null;
+            }
+        }
+        // 从存储中获取
+        return this.storage.getToken();
+    }
+    /**
+   * 设置 CSRF Token
+   */ setToken(token) {
+        this.storage.setToken(token);
+    }
+    /**
+   * 验证 CSRF Token
+   */ async validateToken(token) {
+        if (this.validateTokenFn) {
+            try {
+                return await Promise.resolve(this.validateTokenFn(token));
+            } catch (error) {
+                console.warn('CSRF Token 验证失败:', error);
+                return false;
+            }
+        }
+        // 默认验证：检查存储中的 Token 是否匹配
+        const storedToken = this.storage.getToken();
+        return storedToken !== null && storedToken === token;
+    }
+    /**
+   * 清除 CSRF Token
+   */ clearToken() {
+        this.storage.clearToken();
+    }
+    /**
+   * 获取请求头名称
+   */ getHeaderName() {
+        return this.headerName;
+    }
+    constructor(config){
+        _define_property(this, "storage", void 0);
+        _define_property(this, "headerName", void 0);
+        _define_property(this, "cookieName", void 0);
+        _define_property(this, "getTokenFn", void 0);
+        _define_property(this, "validateTokenFn", void 0);
+        this.headerName = config?.headerName ?? 'X-CSRF-Token';
+        this.cookieName = config?.cookieName ?? 'csrf-token';
+        this.storage = config?.storage ?? (typeof document !== 'undefined' ? new CookieTokenStorage(this.cookieName) : new MemoryTokenStorage());
+        this.getTokenFn = config?.getToken;
+        this.validateTokenFn = config?.validateToken;
+    }
+};
+/**
+ * 全局 CSRF Token 管理器实例
+ */ let globalCSRFManager = null;
+function initCSRFManager(config) {
+    globalCSRFManager = new CSRFTokenManager(config);
+    return globalCSRFManager;
+}
+function getCSRFManager() {
+    return globalCSRFManager;
+}
+
+//# sourceMappingURL=index.js.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * CSRF 防护工具\n * 提供 CSRF Token 的生成、存储和验证功能\n */\n\n/**\n * CSRF Token 存储接口\n */\nexport interface CSRFTokenStorage {\n  /**\n   * 获取 Token\n   */\n  getToken(): string | null;\n  /**\n   * 设置 Token\n   */\n  setToken(token: string): void;\n  /**\n   * 清除 Token\n   */\n  clearToken(): void;\n}\n\n/**\n * 默认 Token 存储（使用 Cookie）\n */\nclass CookieTokenStorage implements CSRFTokenStorage {\n  private cookieName: string;\n\n  constructor(cookieName: string = 'csrf-token') {\n    this.cookieName = cookieName;\n  }\n\n  getToken(): string | null {\n    if (typeof document === 'undefined') {\n      return null;\n    }\n\n    const cookies = document.cookie.split(';');\n    for (const cookie of cookies) {\n      const [name, value] = cookie.trim().split('=');\n      if (name === this.cookieName) {\n        return decodeURIComponent(value);\n      }\n    }\n    return null;\n  }\n\n  setToken(token: string): void {\n    if (typeof document === 'undefined') {\n      return;\n    }\n\n    // 设置 Cookie（HttpOnly 由服务端设置，这里只设置客户端可访问的）\n    document.cookie = `${this.cookieName}=${encodeURIComponent(token)}; path=/; SameSite=Strict`;\n  }\n\n  clearToken(): void {\n    if (typeof document === 'undefined') {\n      return;\n    }\n\n    document.cookie = `${this.cookieName}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n  }\n}\n\n/**\n * 内存 Token 存储（用于 SSR 或测试）\n */\nclass MemoryTokenStorage implements CSRFTokenStorage {\n  private token: string | null = null;\n\n  getToken(): string | null {\n    return this.token;\n  }\n\n  setToken(token: string): void {\n    this.token = token;\n  }\n\n  clearToken(): void {\n    this.token = null;\n  }\n}\n\n/**\n * CSRF Token 管理器\n */\nexport class CSRFTokenManager {\n  private storage: CSRFTokenStorage;\n  private headerName: string;\n  private cookieName: string;\n  private getTokenFn?: () => string | Promise<string>;\n  private validateTokenFn?: (token: string) => boolean | Promise<boolean>;\n\n  constructor(config?: {\n    storage?: CSRFTokenStorage;\n    headerName?: string;\n    cookieName?: string;\n    getToken?: () => string | Promise<string>;\n    validateToken?: (token: string) => boolean | Promise<boolean>;\n  }) {\n    this.headerName = config?.headerName ?? 'X-CSRF-Token';\n    this.cookieName = config?.cookieName ?? 'csrf-token';\n    this.storage = config?.storage ?? (typeof document !== 'undefined' \n      ? new CookieTokenStorage(this.cookieName)\n      : new MemoryTokenStorage());\n    this.getTokenFn = config?.getToken;\n    this.validateTokenFn = config?.validateToken;\n  }\n\n  /**\n   * 获取 CSRF Token\n   */\n  async getToken(): Promise<string | null> {\n    if (this.getTokenFn) {\n      try {\n        return await Promise.resolve(this.getTokenFn());\n      } catch (error) {\n        console.warn('CSRF Token 获取失败:', error);\n        return null;\n      }\n    }\n\n    // 从存储中获取\n    return this.storage.getToken();\n  }\n\n  /**\n   * 设置 CSRF Token\n   */\n  setToken(token: string): void {\n    this.storage.setToken(token);\n  }\n\n  /**\n   * 验证 CSRF Token\n   */\n  async validateToken(token: string): Promise<boolean> {\n    if (this.validateTokenFn) {\n      try {\n        return await Promise.resolve(this.validateTokenFn(token));\n      } catch (error) {\n        console.warn('CSRF Token 验证失败:', error);\n        return false;\n      }\n    }\n\n    // 默认验证：检查存储中的 Token 是否匹配\n    const storedToken = this.storage.getToken();\n    return storedToken !== null && storedToken === token;\n  }\n\n  /**\n   * 清除 CSRF Token\n   */\n  clearToken(): void {\n    this.storage.clearToken();\n  }\n\n  /**\n   * 获取请求头名称\n   */\n  getHeaderName(): string {\n    return this.headerName;\n  }\n}\n\n/**\n * 全局 CSRF Token 管理器实例\n */\nlet globalCSRFManager: CSRFTokenManager | null = null;\n\n/**\n * 初始化 CSRF Token 管理器\n */\nexport function initCSRFManager(config?: {\n  storage?: CSRFTokenStorage;\n  headerName?: string;\n  cookieName?: string;\n  getToken?: () => string | Promise<string>;\n  validateToken?: (token: string) => boolean | Promise<boolean>;\n}): CSRFTokenManager {\n  globalCSRFManager = new CSRFTokenManager(config);\n  return globalCSRFManager;\n}\n\n/**\n * 获取全局 CSRF Token 管理器\n */\nexport function getCSRFManager(): CSRFTokenManager | null {\n  return globalCSRFManager;\n}\n"],"names":["CSRFTokenManager","getCSRFManager","initCSRFManager","CookieTokenStorage","getToken","document","cookies","cookie","split","name","value","trim","cookieName","decodeURIComponent","setToken","token","encodeURIComponent","clearToken","MemoryTokenStorage","getTokenFn","Promise","resolve","error","console","warn","storage","validateToken","validateTokenFn","storedToken","getHeaderName","headerName","config","globalCSRFManager"],"mappings":"AAAA;;;CAGC,GAED;;CAEC;;;;;;;;;;;QAiFYA;eAAAA;;QAsGGC;eAAAA;;QAdAC;eAAAA;;;;;;;;;;;;;;;;AAzJhB;;CAEC,GACD,IAAA,AAAMC,qBAAN,MAAMA;IAOJC,WAA0B;QACxB,IAAI,OAAOC,aAAa,aAAa;YACnC,OAAO;QACT;QAEA,MAAMC,UAAUD,SAASE,MAAM,CAACC,KAAK,CAAC;QACtC,KAAK,MAAMD,UAAUD,QAAS;YAC5B,MAAM,CAACG,MAAMC,MAAM,GAAGH,OAAOI,IAAI,GAAGH,KAAK,CAAC;YAC1C,IAAIC,SAAS,IAAI,CAACG,UAAU,EAAE;gBAC5B,OAAOC,mBAAmBH;YAC5B;QACF;QACA,OAAO;IACT;IAEAI,SAASC,KAAa,EAAQ;QAC5B,IAAI,OAAOV,aAAa,aAAa;YACnC;QACF;QAEA,0CAA0C;QAC1CA,SAASE,MAAM,GAAG,GAAG,IAAI,CAACK,UAAU,CAAC,CAAC,EAAEI,mBAAmBD,OAAO,yBAAyB,CAAC;IAC9F;IAEAE,aAAmB;QACjB,IAAI,OAAOZ,aAAa,aAAa;YACnC;QACF;QAEAA,SAASE,MAAM,GAAG,GAAG,IAAI,CAACK,UAAU,CAAC,gDAAgD,CAAC;IACxF;IAlCA,YAAYA,aAAqB,YAAY,CAAE;QAF/C,uBAAQA,cAAR,KAAA;QAGE,IAAI,CAACA,UAAU,GAAGA;IACpB;AAiCF;AAEA;;CAEC,GACD,IAAA,AAAMM,qBAAN,MAAMA;IAGJd,WAA0B;QACxB,OAAO,IAAI,CAACW,KAAK;IACnB;IAEAD,SAASC,KAAa,EAAQ;QAC5B,IAAI,CAACA,KAAK,GAAGA;IACf;IAEAE,aAAmB;QACjB,IAAI,CAACF,KAAK,GAAG;IACf;;QAZA,uBAAQA,SAAuB;;AAajC;AAKO,IAAA,AAAMf,mBAAN,MAAMA;IAuBX;;GAEC,GACD,MAAMI,WAAmC;QACvC,IAAI,IAAI,CAACe,UAAU,EAAE;YACnB,IAAI;gBACF,OAAO,MAAMC,QAAQC,OAAO,CAAC,IAAI,CAACF,UAAU;YAC9C,EAAE,OAAOG,OAAO;gBACdC,QAAQC,IAAI,CAAC,oBAAoBF;gBACjC,OAAO;YACT;QACF;QAEA,SAAS;QACT,OAAO,IAAI,CAACG,OAAO,CAACrB,QAAQ;IAC9B;IAEA;;GAEC,GACDU,SAASC,KAAa,EAAQ;QAC5B,IAAI,CAACU,OAAO,CAACX,QAAQ,CAACC;IACxB;IAEA;;GAEC,GACD,MAAMW,cAAcX,KAAa,EAAoB;QACnD,IAAI,IAAI,CAACY,eAAe,EAAE;YACxB,IAAI;gBACF,OAAO,MAAMP,QAAQC,OAAO,CAAC,IAAI,CAACM,eAAe,CAACZ;YACpD,EAAE,OAAOO,OAAO;gBACdC,QAAQC,IAAI,CAAC,oBAAoBF;gBACjC,OAAO;YACT;QACF;QAEA,yBAAyB;QACzB,MAAMM,cAAc,IAAI,CAACH,OAAO,CAACrB,QAAQ;QACzC,OAAOwB,gBAAgB,QAAQA,gBAAgBb;IACjD;IAEA;;GAEC,GACDE,aAAmB;QACjB,IAAI,CAACQ,OAAO,CAACR,UAAU;IACzB;IAEA;;GAEC,GACDY,gBAAwB;QACtB,OAAO,IAAI,CAACC,UAAU;IACxB;IAtEA,YAAYC,MAMX,CAAE;QAZH,uBAAQN,WAAR,KAAA;QACA,uBAAQK,cAAR,KAAA;QACA,uBAAQlB,cAAR,KAAA;QACA,uBAAQO,cAAR,KAAA;QACA,uBAAQQ,mBAAR,KAAA;QASE,IAAI,CAACG,UAAU,GAAGC,QAAQD,cAAc;QACxC,IAAI,CAAClB,UAAU,GAAGmB,QAAQnB,cAAc;QACxC,IAAI,CAACa,OAAO,GAAGM,QAAQN,WAAY,CAAA,OAAOpB,aAAa,cACnD,IAAIF,mBAAmB,IAAI,CAACS,UAAU,IACtC,IAAIM,oBAAmB;QAC3B,IAAI,CAACC,UAAU,GAAGY,QAAQ3B;QAC1B,IAAI,CAACuB,eAAe,GAAGI,QAAQL;IACjC;AAyDF;AAEA;;CAEC,GACD,IAAIM,oBAA6C;AAK1C,SAAS9B,gBAAgB6B,MAM/B;IACCC,oBAAoB,IAAIhC,iBAAiB+B;IACzC,OAAOC;AACT;AAKO,SAAS/B;IACd,OAAO+B;AACT"}

package/dist/index.d.ts

@@ -0,0 +1,72 @@
+/**
+ * CSRF 防护工具
+ * 提供 CSRF Token 的生成、存储和验证功能
+ */
+/**
+ * CSRF Token 存储接口
+ */
+export interface CSRFTokenStorage {
+    /**
+     * 获取 Token
+     */
+    getToken(): string | null;
+    /**
+     * 设置 Token
+     */
+    setToken(token: string): void;
+    /**
+     * 清除 Token
+     */
+    clearToken(): void;
+}
+/**
+ * CSRF Token 管理器
+ */
+export declare class CSRFTokenManager {
+    private storage;
+    private headerName;
+    private cookieName;
+    private getTokenFn?;
+    private validateTokenFn?;
+    constructor(config?: {
+        storage?: CSRFTokenStorage;
+        headerName?: string;
+        cookieName?: string;
+        getToken?: () => string | Promise<string>;
+        validateToken?: (token: string) => boolean | Promise<boolean>;
+    });
+    /**
+     * 获取 CSRF Token
+     */
+    getToken(): Promise<string | null>;
+    /**
+     * 设置 CSRF Token
+     */
+    setToken(token: string): void;
+    /**
+     * 验证 CSRF Token
+     */
+    validateToken(token: string): Promise<boolean>;
+    /**
+     * 清除 CSRF Token
+     */
+    clearToken(): void;
+    /**
+     * 获取请求头名称
+     */
+    getHeaderName(): string;
+}
+/**
+ * 初始化 CSRF Token 管理器
+ */
+export declare function initCSRFManager(config?: {
+    storage?: CSRFTokenStorage;
+    headerName?: string;
+    cookieName?: string;
+    getToken?: () => string | Promise<string>;
+    validateToken?: (token: string) => boolean | Promise<boolean>;
+}): CSRFTokenManager;
+/**
+ * 获取全局 CSRF Token 管理器
+ */
+export declare function getCSRFManager(): CSRFTokenManager | null;

package/dist/index.js

@@ -0,0 +1,144 @@
+/**
+ * CSRF 防护工具
+ * 提供 CSRF Token 的生成、存储和验证功能
+ */ /**
+ * CSRF Token 存储接口
+ */ function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+/**
+ * 默认 Token 存储（使用 Cookie）
+ */ let CookieTokenStorage = class CookieTokenStorage {
+    getToken() {
+        if (typeof document === 'undefined') {
+            return null;
+        }
+        const cookies = document.cookie.split(';');
+        for (const cookie of cookies){
+            const [name, value] = cookie.trim().split('=');
+            if (name === this.cookieName) {
+                return decodeURIComponent(value);
+            }
+        }
+        return null;
+    }
+    setToken(token) {
+        if (typeof document === 'undefined') {
+            return;
+        }
+        // 设置 Cookie（HttpOnly 由服务端设置，这里只设置客户端可访问的）
+        document.cookie = `${this.cookieName}=${encodeURIComponent(token)}; path=/; SameSite=Strict`;
+    }
+    clearToken() {
+        if (typeof document === 'undefined') {
+            return;
+        }
+        document.cookie = `${this.cookieName}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;
+    }
+    constructor(cookieName = 'csrf-token'){
+        _define_property(this, "cookieName", void 0);
+        this.cookieName = cookieName;
+    }
+};
+/**
+ * 内存 Token 存储（用于 SSR 或测试）
+ */ let MemoryTokenStorage = class MemoryTokenStorage {
+    getToken() {
+        return this.token;
+    }
+    setToken(token) {
+        this.token = token;
+    }
+    clearToken() {
+        this.token = null;
+    }
+    constructor(){
+        _define_property(this, "token", null);
+    }
+};
+/**
+ * CSRF Token 管理器
+ */ export class CSRFTokenManager {
+    /**
+   * 获取 CSRF Token
+   */ async getToken() {
+        if (this.getTokenFn) {
+            try {
+                return await Promise.resolve(this.getTokenFn());
+            } catch (error) {
+                console.warn('CSRF Token 获取失败:', error);
+                return null;
+            }
+        }
+        // 从存储中获取
+        return this.storage.getToken();
+    }
+    /**
+   * 设置 CSRF Token
+   */ setToken(token) {
+        this.storage.setToken(token);
+    }
+    /**
+   * 验证 CSRF Token
+   */ async validateToken(token) {
+        if (this.validateTokenFn) {
+            try {
+                return await Promise.resolve(this.validateTokenFn(token));
+            } catch (error) {
+                console.warn('CSRF Token 验证失败:', error);
+                return false;
+            }
+        }
+        // 默认验证：检查存储中的 Token 是否匹配
+        const storedToken = this.storage.getToken();
+        return storedToken !== null && storedToken === token;
+    }
+    /**
+   * 清除 CSRF Token
+   */ clearToken() {
+        this.storage.clearToken();
+    }
+    /**
+   * 获取请求头名称
+   */ getHeaderName() {
+        return this.headerName;
+    }
+    constructor(config){
+        _define_property(this, "storage", void 0);
+        _define_property(this, "headerName", void 0);
+        _define_property(this, "cookieName", void 0);
+        _define_property(this, "getTokenFn", void 0);
+        _define_property(this, "validateTokenFn", void 0);
+        this.headerName = config?.headerName ?? 'X-CSRF-Token';
+        this.cookieName = config?.cookieName ?? 'csrf-token';
+        this.storage = config?.storage ?? (typeof document !== 'undefined' ? new CookieTokenStorage(this.cookieName) : new MemoryTokenStorage());
+        this.getTokenFn = config?.getToken;
+        this.validateTokenFn = config?.validateToken;
+    }
+}
+/**
+ * 全局 CSRF Token 管理器实例
+ */ let globalCSRFManager = null;
+/**
+ * 初始化 CSRF Token 管理器
+ */ export function initCSRFManager(config) {
+    globalCSRFManager = new CSRFTokenManager(config);
+    return globalCSRFManager;
+}
+/**
+ * 获取全局 CSRF Token 管理器
+ */ export function getCSRFManager() {
+    return globalCSRFManager;
+}
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * CSRF 防护工具\n * 提供 CSRF Token 的生成、存储和验证功能\n */\n\n/**\n * CSRF Token 存储接口\n */\nexport interface CSRFTokenStorage {\n  /**\n   * 获取 Token\n   */\n  getToken(): string | null;\n  /**\n   * 设置 Token\n   */\n  setToken(token: string): void;\n  /**\n   * 清除 Token\n   */\n  clearToken(): void;\n}\n\n/**\n * 默认 Token 存储（使用 Cookie）\n */\nclass CookieTokenStorage implements CSRFTokenStorage {\n  private cookieName: string;\n\n  constructor(cookieName: string = 'csrf-token') {\n    this.cookieName = cookieName;\n  }\n\n  getToken(): string | null {\n    if (typeof document === 'undefined') {\n      return null;\n    }\n\n    const cookies = document.cookie.split(';');\n    for (const cookie of cookies) {\n      const [name, value] = cookie.trim().split('=');\n      if (name === this.cookieName) {\n        return decodeURIComponent(value);\n      }\n    }\n    return null;\n  }\n\n  setToken(token: string): void {\n    if (typeof document === 'undefined') {\n      return;\n    }\n\n    // 设置 Cookie（HttpOnly 由服务端设置，这里只设置客户端可访问的）\n    document.cookie = `${this.cookieName}=${encodeURIComponent(token)}; path=/; SameSite=Strict`;\n  }\n\n  clearToken(): void {\n    if (typeof document === 'undefined') {\n      return;\n    }\n\n    document.cookie = `${this.cookieName}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n  }\n}\n\n/**\n * 内存 Token 存储（用于 SSR 或测试）\n */\nclass MemoryTokenStorage implements CSRFTokenStorage {\n  private token: string | null = null;\n\n  getToken(): string | null {\n    return this.token;\n  }\n\n  setToken(token: string): void {\n    this.token = token;\n  }\n\n  clearToken(): void {\n    this.token = null;\n  }\n}\n\n/**\n * CSRF Token 管理器\n */\nexport class CSRFTokenManager {\n  private storage: CSRFTokenStorage;\n  private headerName: string;\n  private cookieName: string;\n  private getTokenFn?: () => string | Promise<string>;\n  private validateTokenFn?: (token: string) => boolean | Promise<boolean>;\n\n  constructor(config?: {\n    storage?: CSRFTokenStorage;\n    headerName?: string;\n    cookieName?: string;\n    getToken?: () => string | Promise<string>;\n    validateToken?: (token: string) => boolean | Promise<boolean>;\n  }) {\n    this.headerName = config?.headerName ?? 'X-CSRF-Token';\n    this.cookieName = config?.cookieName ?? 'csrf-token';\n    this.storage = config?.storage ?? (typeof document !== 'undefined' \n      ? new CookieTokenStorage(this.cookieName)\n      : new MemoryTokenStorage());\n    this.getTokenFn = config?.getToken;\n    this.validateTokenFn = config?.validateToken;\n  }\n\n  /**\n   * 获取 CSRF Token\n   */\n  async getToken(): Promise<string | null> {\n    if (this.getTokenFn) {\n      try {\n        return await Promise.resolve(this.getTokenFn());\n      } catch (error) {\n        console.warn('CSRF Token 获取失败:', error);\n        return null;\n      }\n    }\n\n    // 从存储中获取\n    return this.storage.getToken();\n  }\n\n  /**\n   * 设置 CSRF Token\n   */\n  setToken(token: string): void {\n    this.storage.setToken(token);\n  }\n\n  /**\n   * 验证 CSRF Token\n   */\n  async validateToken(token: string): Promise<boolean> {\n    if (this.validateTokenFn) {\n      try {\n        return await Promise.resolve(this.validateTokenFn(token));\n      } catch (error) {\n        console.warn('CSRF Token 验证失败:', error);\n        return false;\n      }\n    }\n\n    // 默认验证：检查存储中的 Token 是否匹配\n    const storedToken = this.storage.getToken();\n    return storedToken !== null && storedToken === token;\n  }\n\n  /**\n   * 清除 CSRF Token\n   */\n  clearToken(): void {\n    this.storage.clearToken();\n  }\n\n  /**\n   * 获取请求头名称\n   */\n  getHeaderName(): string {\n    return this.headerName;\n  }\n}\n\n/**\n * 全局 CSRF Token 管理器实例\n */\nlet globalCSRFManager: CSRFTokenManager | null = null;\n\n/**\n * 初始化 CSRF Token 管理器\n */\nexport function initCSRFManager(config?: {\n  storage?: CSRFTokenStorage;\n  headerName?: string;\n  cookieName?: string;\n  getToken?: () => string | Promise<string>;\n  validateToken?: (token: string) => boolean | Promise<boolean>;\n}): CSRFTokenManager {\n  globalCSRFManager = new CSRFTokenManager(config);\n  return globalCSRFManager;\n}\n\n/**\n * 获取全局 CSRF Token 管理器\n */\nexport function getCSRFManager(): CSRFTokenManager | null {\n  return globalCSRFManager;\n}\n"],"names":["CookieTokenStorage","getToken","document","cookies","cookie","split","name","value","trim","cookieName","decodeURIComponent","setToken","token","encodeURIComponent","clearToken","MemoryTokenStorage","CSRFTokenManager","getTokenFn","Promise","resolve","error","console","warn","storage","validateToken","validateTokenFn","storedToken","getHeaderName","headerName","config","globalCSRFManager","initCSRFManager","getCSRFManager"],"mappings":"AAAA;;;CAGC,GAED;;CAEC;;;;;;;;;;;;;AAgBD;;CAEC,GACD,IAAA,AAAMA,qBAAN,MAAMA;IAOJC,WAA0B;QACxB,IAAI,OAAOC,aAAa,aAAa;YACnC,OAAO;QACT;QAEA,MAAMC,UAAUD,SAASE,MAAM,CAACC,KAAK,CAAC;QACtC,KAAK,MAAMD,UAAUD,QAAS;YAC5B,MAAM,CAACG,MAAMC,MAAM,GAAGH,OAAOI,IAAI,GAAGH,KAAK,CAAC;YAC1C,IAAIC,SAAS,IAAI,CAACG,UAAU,EAAE;gBAC5B,OAAOC,mBAAmBH;YAC5B;QACF;QACA,OAAO;IACT;IAEAI,SAASC,KAAa,EAAQ;QAC5B,IAAI,OAAOV,aAAa,aAAa;YACnC;QACF;QAEA,0CAA0C;QAC1CA,SAASE,MAAM,GAAG,GAAG,IAAI,CAACK,UAAU,CAAC,CAAC,EAAEI,mBAAmBD,OAAO,yBAAyB,CAAC;IAC9F;IAEAE,aAAmB;QACjB,IAAI,OAAOZ,aAAa,aAAa;YACnC;QACF;QAEAA,SAASE,MAAM,GAAG,GAAG,IAAI,CAACK,UAAU,CAAC,gDAAgD,CAAC;IACxF;IAlCA,YAAYA,aAAqB,YAAY,CAAE;QAF/C,uBAAQA,cAAR,KAAA;QAGE,IAAI,CAACA,UAAU,GAAGA;IACpB;AAiCF;AAEA;;CAEC,GACD,IAAA,AAAMM,qBAAN,MAAMA;IAGJd,WAA0B;QACxB,OAAO,IAAI,CAACW,KAAK;IACnB;IAEAD,SAASC,KAAa,EAAQ;QAC5B,IAAI,CAACA,KAAK,GAAGA;IACf;IAEAE,aAAmB;QACjB,IAAI,CAACF,KAAK,GAAG;IACf;;QAZA,uBAAQA,SAAuB;;AAajC;AAEA;;CAEC,GACD,OAAO,MAAMI;IAuBX;;GAEC,GACD,MAAMf,WAAmC;QACvC,IAAI,IAAI,CAACgB,UAAU,EAAE;YACnB,IAAI;gBACF,OAAO,MAAMC,QAAQC,OAAO,CAAC,IAAI,CAACF,UAAU;YAC9C,EAAE,OAAOG,OAAO;gBACdC,QAAQC,IAAI,CAAC,oBAAoBF;gBACjC,OAAO;YACT;QACF;QAEA,SAAS;QACT,OAAO,IAAI,CAACG,OAAO,CAACtB,QAAQ;IAC9B;IAEA;;GAEC,GACDU,SAASC,KAAa,EAAQ;QAC5B,IAAI,CAACW,OAAO,CAACZ,QAAQ,CAACC;IACxB;IAEA;;GAEC,GACD,MAAMY,cAAcZ,KAAa,EAAoB;QACnD,IAAI,IAAI,CAACa,eAAe,EAAE;YACxB,IAAI;gBACF,OAAO,MAAMP,QAAQC,OAAO,CAAC,IAAI,CAACM,eAAe,CAACb;YACpD,EAAE,OAAOQ,OAAO;gBACdC,QAAQC,IAAI,CAAC,oBAAoBF;gBACjC,OAAO;YACT;QACF;QAEA,yBAAyB;QACzB,MAAMM,cAAc,IAAI,CAACH,OAAO,CAACtB,QAAQ;QACzC,OAAOyB,gBAAgB,QAAQA,gBAAgBd;IACjD;IAEA;;GAEC,GACDE,aAAmB;QACjB,IAAI,CAACS,OAAO,CAACT,UAAU;IACzB;IAEA;;GAEC,GACDa,gBAAwB;QACtB,OAAO,IAAI,CAACC,UAAU;IACxB;IAtEA,YAAYC,MAMX,CAAE;QAZH,uBAAQN,WAAR,KAAA;QACA,uBAAQK,cAAR,KAAA;QACA,uBAAQnB,cAAR,KAAA;QACA,uBAAQQ,cAAR,KAAA;QACA,uBAAQQ,mBAAR,KAAA;QASE,IAAI,CAACG,UAAU,GAAGC,QAAQD,cAAc;QACxC,IAAI,CAACnB,UAAU,GAAGoB,QAAQpB,cAAc;QACxC,IAAI,CAACc,OAAO,GAAGM,QAAQN,WAAY,CAAA,OAAOrB,aAAa,cACnD,IAAIF,mBAAmB,IAAI,CAACS,UAAU,IACtC,IAAIM,oBAAmB;QAC3B,IAAI,CAACE,UAAU,GAAGY,QAAQ5B;QAC1B,IAAI,CAACwB,eAAe,GAAGI,QAAQL;IACjC;AAyDF;AAEA;;CAEC,GACD,IAAIM,oBAA6C;AAEjD;;CAEC,GACD,OAAO,SAASC,gBAAgBF,MAM/B;IACCC,oBAAoB,IAAId,iBAAiBa;IACzC,OAAOC;AACT;AAEA;;CAEC,GACD,OAAO,SAASE;IACd,OAAOF;AACT"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@vlian/csrf",
+  "version": "0.1.1",
+  "description": "CSRF token manager for vlian ecosystem",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "*": [
+        "dist/*.d.ts"
+      ]
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "npm run clean && npm run build:types && npm run build:esm && npm run build:cjs",
+    "build:types": "tsc --emitDeclarationOnly --declarationMap false --sourceMap false",
+    "build:esm": "swc src -d dist --strip-leading-paths --config-file .swcrc",
+    "build:cjs": "swc src -d dist-temp --strip-leading-paths --config-file .swcrc.cjs && node scripts/rename-cjs.js && rm -rf dist-temp",
+    "clean": "rm -rf dist dist-temp",
+    "prepublishOnly": "npm run build && npm version patch --no-git-tag-version"
+  },
+  "author": "Secra Framework Contributors",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "devDependencies": {
+    "@swc/cli": "^0.8.0",
+    "@swc/core": "^1.15.18",
+    "@types/node": "^20.0.0",
+    "typescript": "^5.9.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "packageManager": "pnpm@10.27.0"
+}