altcha-lib 2.0.3 → 2.2.0

package/dist/cjs/v2/frameworks/express.js

@@ -21,7 +21,7 @@ function create(options) {
             hmacKeySignatureSecret,
             ...createChallengeParameters(),
         });
-        res.json({
+        res.set('Cache-Control', 'no-store').json({
             configuration: setCookie
                 ? {
                     setCookie,
@@ -55,8 +55,7 @@ function create(options) {
                 res.clearCookie(setCookie.name);
             }
             if (error && throwOnFailure) {
-                res.status(403).json({ error });
-                return;
+                throw Object.assign(new Error(error), { status: 403 });
             }
             next();
         });

package/dist/cjs/v2/frameworks/fastify.d.ts

@@ -14,7 +14,7 @@ export declare function create(options: AltchaOptions): {
     challengeHandler: (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
     verifyHandler: (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
     getPayloadFromRequest: (request: FastifyRequest, cookieName?: string) => Promise<string | undefined>;
-    middleware: (options?: AltchaMiddlewareOptions) => (request: FastifyRequest, reply: FastifyReply) => Promise<undefined>;
+    middleware: (options?: AltchaMiddlewareOptions) => (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
     verify: typeof verify;
 };
 declare const _default: {

package/dist/cjs/v2/frameworks/fastify.js

@@ -40,7 +40,7 @@ function create(options) {
             hmacKeySignatureSecret,
             ...createChallengeParameters(),
         });
-        return reply.send({
+        return reply.header('Cache-Control', 'no-store').send({
             configuration: setCookie
                 ? {
                     setCookie,
@@ -68,7 +68,7 @@ function create(options) {
                 deleteCookie(reply, setCookie.name, setCookie.path);
             }
             if (error && throwOnFailure) {
-                return reply.code(403).send({ error });
+                throw Object.assign(new Error(error), { statusCode: 403 });
             }
         };
     };

package/dist/cjs/v2/frameworks/h3.js

@@ -12,7 +12,8 @@ const shared_js_1 = require("./shared.js");
 Object.defineProperty(exports, "deriveHmacKeySecret", { enumerable: true, get: function () { return shared_js_1.deriveHmacKeySecret; } });
 function create(options) {
     const { createChallengeParameters, deriveKey, fieldName = 'altcha', hmacSignatureSecret, hmacKeySignatureSecret, setCookie, store, } = options;
-    const challengeHandler = (0, h3_1.defineEventHandler)(async () => {
+    const challengeHandler = (0, h3_1.defineEventHandler)(async (event) => {
+        (0, h3_1.setResponseHeader)(event, 'Cache-Control', 'no-store');
         return {
             configuration: setCookie
                 ? {

package/dist/cjs/v2/frameworks/hono.js

@@ -14,6 +14,7 @@ Object.defineProperty(exports, "deriveHmacKeySecret", { enumerable: true, get: f
 function create(options) {
     const { createChallengeParameters, deriveKey, fieldName = 'altcha', hmacSignatureSecret, hmacKeySignatureSecret, setCookie, store, } = options;
     const challengeHandler = async (c) => {
+        c.header('Cache-Control', 'no-store');
         return c.json({
             configuration: setCookie
                 ? {

package/dist/cjs/v2/frameworks/nestjs.js

@@ -116,6 +116,7 @@ let AltchaController = class AltchaController {
 exports.AltchaController = AltchaController;
 __decorate([
     (0, common_1.Get)('challenge'),
+    (0, common_1.Header)('Cache-Control', 'no-store'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)

package/dist/cjs/v2/frameworks/nextjs.js

@@ -38,7 +38,9 @@ function create(options) {
                 : undefined,
             ...challenge,
         };
-        const response = Response.json(body);
+        const response = Response.json(body, {
+            headers: { 'Cache-Control': 'no-store' },
+        });
         return response;
     }
     async function verifyHandler(req) {

package/dist/cjs/v2/frameworks/sveltekit.js

@@ -42,7 +42,7 @@ function create(options) {
                 }
                 : undefined,
             ...challenge,
-        });
+        }, { headers: { 'Cache-Control': 'no-store' } });
     }
     async function verifyHandler(event) {
         const payload = await getPayloadFromEvent(event, fieldName);

package/dist/cjs/v2/helpers.d.ts

@@ -17,8 +17,6 @@ export declare function delay(ms: number): Promise<void>;
 export declare function hash(algorithm: string, data: ArrayBuffer | string): Promise<Uint8Array>;
 /** Computes an HMAC signature using the Web Crypto API. */
 export declare function hmac(algorithm: HmacAlgorithm, data: string | Uint8Array, keyStr: string): Promise<Uint8Array>;
-/** Inject CSS tag into the document */
-export declare function injectCss(css: string, id?: string): void;
 /** Generates a random integer between the specified minimum and maximum values (inclusive). */
 export declare function randomInt(max: number, min?: number): number;
 /** Recursively sorts object keys alphabetically for deterministic serialization. */

package/dist/cjs/v2/helpers.js

@@ -9,7 +9,6 @@ exports.constantTimeEqual = constantTimeEqual;
 exports.delay = delay;
 exports.hash = hash;
 exports.hmac = hmac;
-exports.injectCss = injectCss;
 exports.randomInt = randomInt;
 exports.sortKeys = sortKeys;
 exports.timeDuration = timeDuration;
@@ -88,17 +87,6 @@ async function hmac(algorithm, data, keyStr) {
         : data);
     return new Uint8Array(signature);
 }
-/** Inject CSS tag into the document */
-function injectCss(css, id = 'altcha-css') {
-    if (typeof document !== 'undefined' &&
-        document &&
-        !document.getElementById(id)) {
-        const style = document.createElement('style');
-        style.id = id;
-        style.textContent = css;
-        document.head.appendChild(style);
-    }
-}
 /** Generates a random integer between the specified minimum and maximum values (inclusive). */
 function randomInt(max, min = 1) {
     const ab = new Uint32Array(1);

package/dist/esm/v2/frameworks/express.js

@@ -15,7 +15,7 @@ export function create(options) {
             hmacKeySignatureSecret,
             ...createChallengeParameters(),
         });
-        res.json({
+        res.set('Cache-Control', 'no-store').json({
             configuration: setCookie
                 ? {
                     setCookie,
@@ -49,8 +49,7 @@ export function create(options) {
                 res.clearCookie(setCookie.name);
             }
             if (error && throwOnFailure) {
-                res.status(403).json({ error });
-                return;
+                throw Object.assign(new Error(error), { status: 403 });
             }
             next();
         });

package/dist/esm/v2/frameworks/fastify.d.ts

@@ -14,7 +14,7 @@ export declare function create(options: AltchaOptions): {
     challengeHandler: (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
     verifyHandler: (request: FastifyRequest, reply: FastifyReply) => Promise<never>;
     getPayloadFromRequest: (request: FastifyRequest, cookieName?: string) => Promise<string | undefined>;
-    middleware: (options?: AltchaMiddlewareOptions) => (request: FastifyRequest, reply: FastifyReply) => Promise<undefined>;
+    middleware: (options?: AltchaMiddlewareOptions) => (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
     verify: typeof verify;
 };
 declare const _default: {

package/dist/esm/v2/frameworks/fastify.js

@@ -34,7 +34,7 @@ export function create(options) {
             hmacKeySignatureSecret,
             ...createChallengeParameters(),
         });
-        return reply.send({
+        return reply.header('Cache-Control', 'no-store').send({
             configuration: setCookie
                 ? {
                     setCookie,
@@ -62,7 +62,7 @@ export function create(options) {
                 deleteCookie(reply, setCookie.name, setCookie.path);
             }
             if (error && throwOnFailure) {
-                return reply.code(403).send({ error });
+                throw Object.assign(new Error(error), { statusCode: 403 });
             }
         };
     };

package/dist/esm/v2/frameworks/h3.js

@@ -1,4 +1,4 @@
-import { HTTPError, defineEventHandler, getCookie, deleteCookie, readBody, } from 'h3';
+import { HTTPError, defineEventHandler, getCookie, deleteCookie, readBody, setResponseHeader, } from 'h3';
 import { createChallenge } from '../pow.js';
 import { randomInt } from '../helpers.js';
 import { CappedMap } from '../capped-map.js';
@@ -6,7 +6,8 @@ import { deriveHmacKeySecret, verify } from './shared.js';
 export { CappedMap, deriveHmacKeySecret, randomInt };
 export function create(options) {
     const { createChallengeParameters, deriveKey, fieldName = 'altcha', hmacSignatureSecret, hmacKeySignatureSecret, setCookie, store, } = options;
-    const challengeHandler = defineEventHandler(async () => {
+    const challengeHandler = defineEventHandler(async (event) => {
+        setResponseHeader(event, 'Cache-Control', 'no-store');
         return {
             configuration: setCookie
                 ? {

package/dist/esm/v2/frameworks/hono.js

@@ -8,6 +8,7 @@ export { CappedMap, deriveHmacKeySecret, randomInt };
 export function create(options) {
     const { createChallengeParameters, deriveKey, fieldName = 'altcha', hmacSignatureSecret, hmacKeySignatureSecret, setCookie, store, } = options;
     const challengeHandler = async (c) => {
+        c.header('Cache-Control', 'no-store');
         return c.json({
             configuration: setCookie
                 ? {

package/dist/esm/v2/frameworks/nestjs.js

@@ -11,7 +11,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 var AltchaModule_1;
-import { Module, Controller, Get, Post, Req, Injectable, Inject, HttpException, HttpStatus, createParamDecorator, } from '@nestjs/common';
+import { Module, Controller, Get, Post, Req, Header, Injectable, Inject, HttpException, HttpStatus, createParamDecorator, } from '@nestjs/common';
 import { randomInt } from '../helpers.js';
 import { createChallenge } from '../pow.js';
 import { deriveHmacKeySecret, verify } from './shared.js';
@@ -118,6 +118,7 @@ let AltchaController = class AltchaController {
 };
 __decorate([
     Get('challenge'),
+    Header('Cache-Control', 'no-store'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)

package/dist/esm/v2/frameworks/nextjs.js

@@ -32,7 +32,9 @@ export function create(options) {
                 : undefined,
             ...challenge,
         };
-        const response = Response.json(body);
+        const response = Response.json(body, {
+            headers: { 'Cache-Control': 'no-store' },
+        });
         return response;
     }
     async function verifyHandler(req) {

package/dist/esm/v2/frameworks/sveltekit.js

@@ -36,7 +36,7 @@ export function create(options) {
                 }
                 : undefined,
             ...challenge,
-        });
+        }, { headers: { 'Cache-Control': 'no-store' } });
     }
     async function verifyHandler(event) {
         const payload = await getPayloadFromEvent(event, fieldName);

package/dist/esm/v2/helpers.d.ts

@@ -17,8 +17,6 @@ export declare function delay(ms: number): Promise<void>;
 export declare function hash(algorithm: string, data: ArrayBuffer | string): Promise<Uint8Array>;
 /** Computes an HMAC signature using the Web Crypto API. */
 export declare function hmac(algorithm: HmacAlgorithm, data: string | Uint8Array, keyStr: string): Promise<Uint8Array>;
-/** Inject CSS tag into the document */
-export declare function injectCss(css: string, id?: string): void;
 /** Generates a random integer between the specified minimum and maximum values (inclusive). */
 export declare function randomInt(max: number, min?: number): number;
 /** Recursively sorts object keys alphabetically for deterministic serialization. */

package/dist/esm/v2/helpers.js

@@ -73,17 +73,6 @@ export async function hmac(algorithm, data, keyStr) {
         : data);
     return new Uint8Array(signature);
 }
-/** Inject CSS tag into the document */
-export function injectCss(css, id = 'altcha-css') {
-    if (typeof document !== 'undefined' &&
-        document &&
-        !document.getElementById(id)) {
-        const style = document.createElement('style');
-        style.id = id;
-        style.textContent = css;
-        document.head.appendChild(style);
-    }
-}
 /** Generates a random integer between the specified minimum and maximum values (inclusive). */
 export function randomInt(max, min = 1) {
     const ab = new Uint32Array(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "altcha-lib",
-  "version": "2.0.3",
+  "version": "2.2.0",
   "description": "A lightweight library for creating and verifying ALTCHA challenges on the server.",
   "author": {
     "name": "Daniel Regeci",