@vulkano/core 1.6.0 → 1.8.0

package/bootstrap/express.js

@@ -41,7 +41,10 @@ module.exports = function getExpressConfiguration() {
     port: ENV_NODE_PORT || ENV_PORT || expressUserPort || expressSettingsPort || 8000,
     cors: {},
     cookies: {},
+    csp: {},
     jwt: {},
+    session: {},
+    permissionPolicy: {},
     sockets: {},
     redis: {},
     multer: {

package/bootstrap/server.js

@@ -15,6 +15,7 @@ const helmet = require('helmet');
 const timeout = require('connect-timeout');
 const useragent = require('express-useragent');
 const cookieParser = require('cookie-parser');
+const expressSession = require('express-session');
 const { createClient: socketRedis } = require('redis');
 const socketMongoose = require('mongoose');
 const { createAdapter: socketRedisAdapter } = require('@socket.io/redis-adapter');
@@ -86,12 +87,22 @@ module.exports = function loadServer() {
       // ---------------
       // COOKIES - File: app/config/express/cookies.js
       // ---------------
-      if (expressConfig.cookies && expressConfig.cookies.enabled) {
-        const cookiesSecretKey = COOKIES_SECRET_KEY || expressConfig.cookies.key || expressConfig.cookies.secret || '';
+      const {
+        enabled: cookiesEnabled
+      } = expressConfig.cookies || {};
+
+      let cookiesSecretKey = null;
+
+      if (cookiesEnabled) {
+
+        cookiesSecretKey = COOKIES_SECRET_KEY || expressConfig.cookies.key || expressConfig.cookies.secret || '';
+
         if (!cookiesSecretKey) {
           console.log(' \x1b[33mWARNING\x1b[0m: Set the secret key in the config/express/cookie.js file or COOKIES_SECRET_KEY in the .env file.');
         }
+
         vulkano.use(cookieParser(cookiesSecretKey));
+
       }
 
       // ---------------
@@ -232,6 +243,89 @@ module.exports = function loadServer() {
         });
       }
 
+      // ---------------
+      // Express Session  - File: app/config/express/session.js
+      // ---------------
+      const {
+        enabled: sessionEnabled
+      } = expressConfig.session || {};
+
+      if (sessionEnabled) {
+
+        if (!cookiesEnabled) {
+          console.log(' \x1b[41mERROR\x1b[0m: Can not load the Express Session because the Cookies aren\'t enabled');
+          return;
+        }
+
+        delete expressConfig.session.enabled;
+
+        vulkano.use(expressSession({ ...expressConfig.session, secret: cookiesSecretKey }));
+
+      }
+
+      // ---------------
+      // Content Security Policy  - File: app/config/express/csp.js
+      // ---------------
+      const {
+        enabled: cspEnabled,
+        report: cspReportTo,
+        rules: cspRules
+      } = expressConfig.csp || {};
+
+      if (cspEnabled) {
+
+        if (!Array.isArray(cspRules)) {
+          console.error('Vulkano Error: ', 'The Content Security Policy Rules must be an array');
+          return;
+        }
+
+        if (cspRules.length > 0) {
+
+          vulkano.use( (req, res, next) => {
+
+            if (cspReportTo) {
+              res.setHeader('Report-To', JSON.stringify(cspReportTo));
+            }
+
+            res.setHeader('Content-Security-Policy', cspRules.join('; '));
+
+            next();
+
+          });
+
+        }
+
+      }
+
+      // ---------------
+      // Permission Policy  - File: app/config/express/permissionPolicy.js
+      // ---------------
+      const {
+        enabled: ppEnabled,
+        permissions: ppPermissions
+      } = expressConfig.permissionPolicy || {};
+
+      if (ppEnabled) {
+
+        if (!Array.isArray(ppPermissions)) {
+          console.error('Vulkano Error: ', 'The Permission Policy values must be an array');
+          return;
+        }
+
+        if (ppPermissions.length > 0) {
+
+          vulkano.use( (req, res, next) => {
+
+            res.setHeader('Permissions-Policy', ppPermissions.join(', '));
+
+            next();
+
+          });
+
+        }
+
+      }
+
       // ---------------
       // VIEWS
       // ---------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vulkano/core",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "A MVC framework using Express 4",
   "license": "MIT",
   "author": "Vulkano Team",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@socket.io/mongo-adapter": "^0.3.2",
     "@socket.io/redis-adapter": "^8.3.0",
-    "axios": "^1.6.8",
+    "axios": "^1.7.2",
     "bluebird": "^3.7.2",
     "body-parser": "^1.20.2",
     "compression": "^1.7.4",
@@ -41,12 +41,13 @@
     "dotenv": "^16.4.5",
     "express": "^4.19.2",
     "express-jwt": "^8.4.1",
+    "express-session": "^1.18.0",
     "express-useragent": "^1.0.15",
     "frameguard": "^4.0.0",
     "fs": "^0.0.1-security",
     "fs-extra": "^11.2.0",
     "helmet": "^7.1.0",
-    "i18next": "^23.11.4",
+    "i18next": "^23.11.5",
     "include-all": "^4.0.3",
     "jwt-simple": "^0.5.6",
     "moment": "^2.30.1",
@@ -55,11 +56,11 @@
     "mongoose-paginate": "^5.0.3",
     "morgan": "^1.10.0",
     "multer": "^1.4.5-lts.1",
-    "nodemon": "^3.1.0",
+    "nodemon": "^3.1.3",
     "nunjucks": "^3.2.4",
     "path": "^0.12.7",
     "promise.prototype.finally": "^3.1.8",
-    "redis": "^4.6.13",
+    "redis": "^4.6.14",
     "socket.io": "^4.7.5",
     "socket.io-adapter": "^2.5.4",
     "socket.io-client": "4.7.5",
@@ -67,18 +68,18 @@
     "yargs": "^17.7.2"
   },
   "devDependencies": {
-    "@babel/core": "^7.24.5",
-    "@babel/eslint-parser": "^7.24.5",
+    "@babel/core": "^7.24.7",
+    "@babel/eslint-parser": "^7.24.7",
     "@babel/plugin-syntax-dynamic-import": "^7.8.3",
-    "@babel/plugin-syntax-jsx": "^7.24.1",
-    "@babel/preset-env": "^7.24.5",
-    "@babel/preset-react": "^7.24.1",
+    "@babel/plugin-syntax-jsx": "^7.24.7",
+    "@babel/preset-env": "^7.24.7",
+    "@babel/preset-react": "^7.24.7",
     "@babel/preset-stage-1": "^7.8.3",
     "eslint": "^8.57.0",
     "eslint-config-airbnb": "^19.0.4",
     "eslint-plugin-import": "^2.29.1",
     "eslint-plugin-jsx-a11y": "^6.8.0",
-    "eslint-plugin-react": "^7.34.1",
+    "eslint-plugin-react": "^7.34.2",
     "eslint-plugin-react-hooks": "^4.6.2"
   }
 }