@willbooster/shared-lib-next 1.3.15 → 1.3.17

package/dist/index.cjs

@@ -1,2 +1 @@
-"use strict";var e=require("./middleware.cjs");exports.BasicAuthMiddleware=e.BasicAuthMiddleware;
-//# sourceMappingURL=index.cjs.map
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./middleware.cjs");exports.BasicAuthMiddleware=e.BasicAuthMiddleware;

package/dist/index.js

@@ -1,2 +1 @@
-export{BasicAuthMiddleware}from"./middleware.js";
-//# sourceMappingURL=index.js.map
+import{BasicAuthMiddleware as e}from"./middleware.js";export{e as BasicAuthMiddleware};

package/dist/middleware.cjs

@@ -1,2 +1,2 @@
-"use strict";var e=require("next/server.js");exports.BasicAuthMiddleware=function(r){var n,t,s;const l=null!=(n=r.username)?n:process.env.BASIC_AUTH_USERNAME,u=null!=(t=r.password)?t:process.env.BASIC_AUTH_PASSWORD,o=null!=(s=r.realm)?s:process.env.BASIC_AUTH_REALM;return l||u?r=>{var n;const t=null!=(n=r.headers.get("authorization"))?n:"",[s,a]=t.split(" "),i=Buffer.from(`${l}:${u}`),c=Buffer.from(null!=a?a:"","base64");return"basic"===(null==s?void 0:s.toLowerCase())&&0!==c.length&&i.length===c.length&&function(e,r){if(e.length!==r.length)return!1;let n=0;for(const[s,l]of e.entries()){var t;n|=l^(null!=(t=r[s])?t:0)}return 0===n}(c,i)?e.NextResponse.next():new e.NextResponse("Unauthorized",{headers:{"WWW-Authenticate":`Basic realm="${o||"Secure Area"}"`},status:401})}:()=>e.NextResponse.next()};
-//# sourceMappingURL=middleware.cjs.map
+"use strict";let e=require("next/server.js");function t(e,t){if(e.length!==t.length)return!1;let n=0;for(let[r,i]of e.entries())n|=i^(t[r]??0);return n===0}function n(n){let r=n.username??process.env.BASIC_AUTH_USERNAME,i=n.password??process.env.BASIC_AUTH_PASSWORD,a=n.realm??process.env.BASIC_AUTH_REALM;return!r&&!i?()=>e.NextResponse.next():n=>{let[o,s]=(n.headers.get(`authorization`)??``).split(` `),c=Buffer.from(`${r}:${i}`),l=Buffer.from(s??``,`base64`);return o?.toLowerCase()!==`basic`||l.length===0||c.length!==l.length||!t(l,c)?new e.NextResponse(`Unauthorized`,{headers:{"WWW-Authenticate":`Basic realm="${a||`Secure Area`}"`},status:401}):e.NextResponse.next()}}exports.BasicAuthMiddleware=n;
+//# sourceMappingURL=middleware.cjs.map

package/dist/middleware.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.cjs","sources":["../src/middleware.ts"],"sourcesContent":["import { NextResponse } from 'next/server.js';\nimport type { NextRequest } from 'next/server.js';\n\ninterface BasicAuthMiddlewareOptions {\n  username?: string;\n  password?: string;\n  realm?: string;\n}\n\n/**\n * Timing-safe comparison of two buffers to prevent timing attacks.\n * This implementation works in all JavaScript environments (Node.js, Edge, Browser).\n */\nfunction timingSafeEqual(a: Buffer, b: Buffer): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (const [i, element] of a.entries()) {\n    result |= element ^ (b[i] ?? 0);\n  }\n  return result === 0;\n}\n\nexport function BasicAuthMiddleware(options: BasicAuthMiddlewareOptions): (request: NextRequest) => NextResponse {\n  const username = options.username ?? process.env.BASIC_AUTH_USERNAME;\n  const password = options.password ?? process.env.BASIC_AUTH_PASSWORD;\n  const realm = options.realm ?? process.env.BASIC_AUTH_REALM;\n\n  if (!username && !password) return () => NextResponse.next();\n\n  return (request) => {\n    const authorizationHeader = request.headers.get('authorization') ?? '';\n    const [type, encodedCredentials] = authorizationHeader.split(' ');\n    const expected = Buffer.from(`${username}:${password}`);\n    const provided = Buffer.from(encodedCredentials ?? '', 'base64');\n\n    if (\n      type?.toLowerCase() !== 'basic' ||\n      provided.length === 0 ||\n      expected.length !== provided.length ||\n      !timingSafeEqual(provided, expected)\n    ) {\n      return new NextResponse('Unauthorized', {\n        headers: { 'WWW-Authenticate': `Basic realm=\"${realm || 'Secure Area'}\"` },\n        status: 401,\n      });\n    }\n\n    return NextResponse.next();\n  };\n}\n"],"names":["options","_options$username","_options$password","_options$realm","username","process","env","BASIC_AUTH_USERNAME","password","BASIC_AUTH_PASSWORD","realm","BASIC_AUTH_REALM","request","_request$headers$get","authorizationHeader","headers","get","type","encodedCredentials","split","expected","Buffer","from","provided","toLowerCase","length","a","b","result","i","element","entries","_b$i","timingSafeEqual","NextResponse","next","status"],"mappings":"yEAyBO,SAA6BA,GAA6E,IAAAC,EAAAC,EAAAC,EAC/G,MAAMC,EAA2B,OAAnBH,EAAGD,EAAQI,UAAQH,EAAII,QAAQC,IAAIC,oBAC3CC,EAA2B,OAAnBN,EAAGF,EAAQQ,UAAQN,EAAIG,QAAQC,IAAIG,oBAC3CC,EAAqB,OAAhBP,EAAGH,EAAQU,OAAKP,EAAIE,QAAQC,IAAIK,iBAE3C,OAAKP,GAAaI,EAEVI,IAAY,IAAAC,EAClB,MAAMC,EAA0D,OAAvCD,EAAGD,EAAQG,QAAQC,IAAI,kBAAgBH,EAAI,IAC7DI,EAAMC,GAAsBJ,EAAoBK,MAAM,KACvDC,EAAWC,OAAOC,KAAK,GAAGlB,KAAYI,KACtCe,EAAWF,OAAOC,KAAuB,MAAlBJ,EAAAA,EAAsB,GAAI,UAEvD,MAC0B,WAApB,MAAJD,OAAI,EAAJA,EAAMO,gBACc,IAApBD,EAASE,QACTL,EAASK,SAAWF,EAASE,QA5BnC,SAAyBC,EAAWC,GAClC,GAAID,EAAED,SAAWE,EAAEF,OACjB,OAAO,EAGT,IAAIG,EAAS,EACb,IAAK,MAAOC,EAAGC,KAAYJ,EAAEK,UAAW,CAAA,IAAAC,EACtCJ,GAAUE,GAAe,OAARE,EAAIL,EAAEE,IAAEG,EAAI,EAC/B,CACA,OAAkB,IAAXJ,CACT,CAmBOK,CAAgBV,EAAUH,GAQtBc,EAAAA,aAAaC,OANX,IAAID,EAAAA,aAAa,eAAgB,CACtCnB,QAAS,CAAE,mBAAoB,gBAAgBL,GAAS,kBACxD0B,OAAQ,OAhBqB,IAAMF,EAAAA,aAAaC,MAsBxD"}
+{"version":3,"file":"middleware.cjs","names":["NextResponse"],"sources":["../src/middleware.ts"],"sourcesContent":["import { NextResponse } from 'next/server.js';\nimport type { NextRequest } from 'next/server.js';\n\ninterface BasicAuthMiddlewareOptions {\n  username?: string;\n  password?: string;\n  realm?: string;\n}\n\n/**\n * Timing-safe comparison of two buffers to prevent timing attacks.\n * This implementation works in all JavaScript environments (Node.js, Edge, Browser).\n */\nfunction timingSafeEqual(a: Buffer, b: Buffer): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (const [i, element] of a.entries()) {\n    result |= element ^ (b[i] ?? 0);\n  }\n  return result === 0;\n}\n\nexport function BasicAuthMiddleware(options: BasicAuthMiddlewareOptions): (request: NextRequest) => NextResponse {\n  const username = options.username ?? process.env.BASIC_AUTH_USERNAME;\n  const password = options.password ?? process.env.BASIC_AUTH_PASSWORD;\n  const realm = options.realm ?? process.env.BASIC_AUTH_REALM;\n\n  if (!username && !password) return () => NextResponse.next();\n\n  return (request) => {\n    const authorizationHeader = request.headers.get('authorization') ?? '';\n    const [type, encodedCredentials] = authorizationHeader.split(' ');\n    const expected = Buffer.from(`${username}:${password}`);\n    const provided = Buffer.from(encodedCredentials ?? '', 'base64');\n\n    if (\n      type?.toLowerCase() !== 'basic' ||\n      provided.length === 0 ||\n      expected.length !== provided.length ||\n      !timingSafeEqual(provided, expected)\n    ) {\n      return new NextResponse('Unauthorized', {\n        headers: { 'WWW-Authenticate': `Basic realm=\"${realm || 'Secure Area'}\"` },\n        status: 401,\n      });\n    }\n\n    return NextResponse.next();\n  };\n}\n"],"mappings":"6CAaA,SAAS,EAAgB,EAAW,EAAoB,CACtD,GAAI,EAAE,SAAW,EAAE,OACjB,MAAO,GAGT,IAAI,EAAS,EACb,IAAK,GAAM,CAAC,EAAG,KAAY,EAAE,QAAQ,EACnC,GAAU,GAAW,EAAE,IAAM,GAE/B,OAAO,IAAW,CACpB,CAEA,SAAgB,EAAoB,EAA6E,CAC/G,IAAM,EAAW,EAAQ,UAAY,QAAQ,IAAI,oBAC3C,EAAW,EAAQ,UAAY,QAAQ,IAAI,oBAC3C,EAAQ,EAAQ,OAAS,QAAQ,IAAI,iBAI3C,MAFI,CAAC,GAAY,CAAC,MAAuBA,EAAAA,aAAa,KAAK,EAEnD,GAAY,CAElB,GAAM,CAAC,EAAM,IADe,EAAQ,QAAQ,IAAI,eAAe,GAAK,GAAA,CACb,MAAM,GAAG,EAC1D,EAAW,OAAO,KAAK,GAAG,EAAS,GAAG,GAAU,EAChD,EAAW,OAAO,KAAK,GAAsB,GAAI,QAAQ,EAc/D,OAXE,GAAM,YAAY,IAAM,SACxB,EAAS,SAAW,GACpB,EAAS,SAAW,EAAS,QAC7B,CAAC,EAAgB,EAAU,CAAQ,EAE5B,IAAIA,EAAAA,aAAa,eAAgB,CACtC,QAAS,CAAE,mBAAoB,gBAAgB,GAAS,cAAc,EAAG,EACzE,OAAQ,GACV,CAAC,EAGIA,EAAAA,aAAa,KAAK,CAC3B,CACF"}

package/dist/middleware.js

@@ -1,2 +1,2 @@
-import{NextResponse as e}from"next/server.js";function r(r){var n,t,s;const l=null!=(n=r.username)?n:process.env.BASIC_AUTH_USERNAME,o=null!=(t=r.password)?t:process.env.BASIC_AUTH_PASSWORD,u=null!=(s=r.realm)?s:process.env.BASIC_AUTH_REALM;return l||o?r=>{var n;const t=null!=(n=r.headers.get("authorization"))?n:"",[s,a]=t.split(" "),i=Buffer.from(`${l}:${o}`),c=Buffer.from(null!=a?a:"","base64");return"basic"===(null==s?void 0:s.toLowerCase())&&0!==c.length&&i.length===c.length&&function(e,r){if(e.length!==r.length)return!1;let n=0;for(const[s,l]of e.entries()){var t;n|=l^(null!=(t=r[s])?t:0)}return 0===n}(c,i)?e.next():new e("Unauthorized",{headers:{"WWW-Authenticate":`Basic realm="${u||"Secure Area"}"`},status:401})}:()=>e.next()}export{r as BasicAuthMiddleware};
-//# sourceMappingURL=middleware.js.map
+import{NextResponse as e}from"next/server.js";function t(e,t){if(e.length!==t.length)return!1;let n=0;for(let[r,i]of e.entries())n|=i^(t[r]??0);return n===0}function n(n){let r=n.username??process.env.BASIC_AUTH_USERNAME,i=n.password??process.env.BASIC_AUTH_PASSWORD,a=n.realm??process.env.BASIC_AUTH_REALM;return!r&&!i?()=>e.next():n=>{let[o,s]=(n.headers.get(`authorization`)??``).split(` `),c=Buffer.from(`${r}:${i}`),l=Buffer.from(s??``,`base64`);return o?.toLowerCase()!==`basic`||l.length===0||c.length!==l.length||!t(l,c)?new e(`Unauthorized`,{headers:{"WWW-Authenticate":`Basic realm="${a||`Secure Area`}"`},status:401}):e.next()}}export{n as BasicAuthMiddleware};
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sources":["../src/middleware.ts"],"sourcesContent":["import { NextResponse } from 'next/server.js';\nimport type { NextRequest } from 'next/server.js';\n\ninterface BasicAuthMiddlewareOptions {\n  username?: string;\n  password?: string;\n  realm?: string;\n}\n\n/**\n * Timing-safe comparison of two buffers to prevent timing attacks.\n * This implementation works in all JavaScript environments (Node.js, Edge, Browser).\n */\nfunction timingSafeEqual(a: Buffer, b: Buffer): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (const [i, element] of a.entries()) {\n    result |= element ^ (b[i] ?? 0);\n  }\n  return result === 0;\n}\n\nexport function BasicAuthMiddleware(options: BasicAuthMiddlewareOptions): (request: NextRequest) => NextResponse {\n  const username = options.username ?? process.env.BASIC_AUTH_USERNAME;\n  const password = options.password ?? process.env.BASIC_AUTH_PASSWORD;\n  const realm = options.realm ?? process.env.BASIC_AUTH_REALM;\n\n  if (!username && !password) return () => NextResponse.next();\n\n  return (request) => {\n    const authorizationHeader = request.headers.get('authorization') ?? '';\n    const [type, encodedCredentials] = authorizationHeader.split(' ');\n    const expected = Buffer.from(`${username}:${password}`);\n    const provided = Buffer.from(encodedCredentials ?? '', 'base64');\n\n    if (\n      type?.toLowerCase() !== 'basic' ||\n      provided.length === 0 ||\n      expected.length !== provided.length ||\n      !timingSafeEqual(provided, expected)\n    ) {\n      return new NextResponse('Unauthorized', {\n        headers: { 'WWW-Authenticate': `Basic realm=\"${realm || 'Secure Area'}\"` },\n        status: 401,\n      });\n    }\n\n    return NextResponse.next();\n  };\n}\n"],"names":["BasicAuthMiddleware","options","_options$username","_options$password","_options$realm","username","process","env","BASIC_AUTH_USERNAME","password","BASIC_AUTH_PASSWORD","realm","BASIC_AUTH_REALM","request","_request$headers$get","authorizationHeader","headers","get","type","encodedCredentials","split","expected","Buffer","from","provided","toLowerCase","length","a","b","result","i","element","entries","_b$i","timingSafeEqual","NextResponse","next","status"],"mappings":"8CAyBO,SAASA,EAAoBC,GAA6E,IAAAC,EAAAC,EAAAC,EAC/G,MAAMC,EAA2B,OAAnBH,EAAGD,EAAQI,UAAQH,EAAII,QAAQC,IAAIC,oBAC3CC,EAA2B,OAAnBN,EAAGF,EAAQQ,UAAQN,EAAIG,QAAQC,IAAIG,oBAC3CC,EAAqB,OAAhBP,EAAGH,EAAQU,OAAKP,EAAIE,QAAQC,IAAIK,iBAE3C,OAAKP,GAAaI,EAEVI,IAAY,IAAAC,EAClB,MAAMC,EAA0D,OAAvCD,EAAGD,EAAQG,QAAQC,IAAI,kBAAgBH,EAAI,IAC7DI,EAAMC,GAAsBJ,EAAoBK,MAAM,KACvDC,EAAWC,OAAOC,KAAK,GAAGlB,KAAYI,KACtCe,EAAWF,OAAOC,KAAuB,MAAlBJ,EAAAA,EAAsB,GAAI,UAEvD,MAC0B,WAApB,MAAJD,OAAI,EAAJA,EAAMO,gBACc,IAApBD,EAASE,QACTL,EAASK,SAAWF,EAASE,QA5BnC,SAAyBC,EAAWC,GAClC,GAAID,EAAED,SAAWE,EAAEF,OACjB,OAAO,EAGT,IAAIG,EAAS,EACb,IAAK,MAAOC,EAAGC,KAAYJ,EAAEK,UAAW,CAAA,IAAAC,EACtCJ,GAAUE,GAAe,OAARE,EAAIL,EAAEE,IAAEG,EAAI,EAC/B,CACA,OAAkB,IAAXJ,CACT,CAmBOK,CAAgBV,EAAUH,GAQtBc,EAAaC,OANX,IAAID,EAAa,eAAgB,CACtCnB,QAAS,CAAE,mBAAoB,gBAAgBL,GAAS,kBACxD0B,OAAQ,OAhBqB,IAAMF,EAAaC,MAsBxD"}
+{"version":3,"file":"middleware.js","names":[],"sources":["../src/middleware.ts"],"sourcesContent":["import { NextResponse } from 'next/server.js';\nimport type { NextRequest } from 'next/server.js';\n\ninterface BasicAuthMiddlewareOptions {\n  username?: string;\n  password?: string;\n  realm?: string;\n}\n\n/**\n * Timing-safe comparison of two buffers to prevent timing attacks.\n * This implementation works in all JavaScript environments (Node.js, Edge, Browser).\n */\nfunction timingSafeEqual(a: Buffer, b: Buffer): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (const [i, element] of a.entries()) {\n    result |= element ^ (b[i] ?? 0);\n  }\n  return result === 0;\n}\n\nexport function BasicAuthMiddleware(options: BasicAuthMiddlewareOptions): (request: NextRequest) => NextResponse {\n  const username = options.username ?? process.env.BASIC_AUTH_USERNAME;\n  const password = options.password ?? process.env.BASIC_AUTH_PASSWORD;\n  const realm = options.realm ?? process.env.BASIC_AUTH_REALM;\n\n  if (!username && !password) return () => NextResponse.next();\n\n  return (request) => {\n    const authorizationHeader = request.headers.get('authorization') ?? '';\n    const [type, encodedCredentials] = authorizationHeader.split(' ');\n    const expected = Buffer.from(`${username}:${password}`);\n    const provided = Buffer.from(encodedCredentials ?? '', 'base64');\n\n    if (\n      type?.toLowerCase() !== 'basic' ||\n      provided.length === 0 ||\n      expected.length !== provided.length ||\n      !timingSafeEqual(provided, expected)\n    ) {\n      return new NextResponse('Unauthorized', {\n        headers: { 'WWW-Authenticate': `Basic realm=\"${realm || 'Secure Area'}\"` },\n        status: 401,\n      });\n    }\n\n    return NextResponse.next();\n  };\n}\n"],"mappings":"8CAaA,SAAS,EAAgB,EAAW,EAAoB,CACtD,GAAI,EAAE,SAAW,EAAE,OACjB,MAAO,GAGT,IAAI,EAAS,EACb,IAAK,GAAM,CAAC,EAAG,KAAY,EAAE,QAAQ,EACnC,GAAU,GAAW,EAAE,IAAM,GAE/B,OAAO,IAAW,CACpB,CAEA,SAAgB,EAAoB,EAA6E,CAC/G,IAAM,EAAW,EAAQ,UAAY,QAAQ,IAAI,oBAC3C,EAAW,EAAQ,UAAY,QAAQ,IAAI,oBAC3C,EAAQ,EAAQ,OAAS,QAAQ,IAAI,iBAI3C,MAFI,CAAC,GAAY,CAAC,MAAuB,EAAa,KAAK,EAEnD,GAAY,CAElB,GAAM,CAAC,EAAM,IADe,EAAQ,QAAQ,IAAI,eAAe,GAAK,GAAA,CACb,MAAM,GAAG,EAC1D,EAAW,OAAO,KAAK,GAAG,EAAS,GAAG,GAAU,EAChD,EAAW,OAAO,KAAK,GAAsB,GAAI,QAAQ,EAc/D,OAXE,GAAM,YAAY,IAAM,SACxB,EAAS,SAAW,GACpB,EAAS,SAAW,EAAS,QAC7B,CAAC,EAAgB,EAAU,CAAQ,EAE5B,IAAI,EAAa,eAAgB,CACtC,QAAS,CAAE,mBAAoB,gBAAgB,GAAS,cAAc,EAAG,EACzE,OAAQ,GACV,CAAC,EAGI,EAAa,KAAK,CAC3B,CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@willbooster/shared-lib-next",
-  "version": "1.3.15",
+  "version": "1.3.17",
   "description": "Shared library for WillBooster Next.js projects",
   "repository": {
     "type": "git",
@@ -49,12 +49,12 @@
     "@typescript/native-preview": "7.0.0-dev.20260504.1",
     "@willbooster/oxfmt-config": "1.2.2",
     "@willbooster/oxlint-config": "1.4.8",
-    "@willbooster/wb": "13.22.14",
-    "build-ts": "17.1.24",
+    "@willbooster/wb": "13.23.1",
+    "build-ts": "17.1.31",
     "next": "16.2.6",
-    "oxfmt": "0.55.0",
-    "oxlint": "1.70.0",
-    "oxlint-tsgolint": "0.23.0",
+    "oxfmt": "0.58.0",
+    "oxlint": "1.73.0",
+    "oxlint-tsgolint": "0.24.0",
     "sort-package-json": "4.0.0",
     "vitest": "4.1.5"
   },

package/dist/index.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}