altcha-lib 2.1.0 → 2.3.0

package/dist/esm/v2/index.d.ts

@@ -1,10 +1,11 @@
 import { createChallenge, solveChallenge, solveChallengeWorkers, verifySolution } from './pow.js';
 import { verifyFieldsHash, verifyServerSignature } from './server-signature.js';
+import { verifyServer } from './verify-server.js';
 import { CappedMap } from './capped-map.js';
 import { randomInt } from './helpers.js';
 import { HmacAlgorithm } from './types.js';
 export type * from './types.js';
-export { CappedMap, HmacAlgorithm, createChallenge, randomInt, solveChallenge, solveChallengeWorkers, verifyFieldsHash, verifyServerSignature, verifySolution, };
+export { CappedMap, HmacAlgorithm, createChallenge, randomInt, solveChallenge, solveChallengeWorkers, verifyFieldsHash, verifyServer, verifyServerSignature, verifySolution, };
 declare const _default: {
     CappedMap: typeof CappedMap;
     HmacAlgorithm: typeof HmacAlgorithm;
@@ -13,6 +14,7 @@ declare const _default: {
     solveChallenge: typeof solveChallenge;
     solveChallengeWorkers: typeof solveChallengeWorkers;
     verifyFieldsHash: typeof verifyFieldsHash;
+    verifyServer: typeof verifyServer;
     verifyServerSignature: typeof verifyServerSignature;
     verifySolution: typeof verifySolution;
 };

package/dist/esm/v2/index.js

@@ -1,9 +1,10 @@
 import { createChallenge, solveChallenge, solveChallengeWorkers, verifySolution, } from './pow.js';
 import { verifyFieldsHash, verifyServerSignature } from './server-signature.js';
+import { verifyServer } from './verify-server.js';
 import { CappedMap } from './capped-map.js';
 import { randomInt } from './helpers.js';
 import { HmacAlgorithm } from './types.js';
-export { CappedMap, HmacAlgorithm, createChallenge, randomInt, solveChallenge, solveChallengeWorkers, verifyFieldsHash, verifyServerSignature, verifySolution, };
+export { CappedMap, HmacAlgorithm, createChallenge, randomInt, solveChallenge, solveChallengeWorkers, verifyFieldsHash, verifyServer, verifyServerSignature, verifySolution, };
 export default {
     CappedMap,
     HmacAlgorithm,
@@ -12,6 +13,7 @@ export default {
     solveChallenge,
     solveChallengeWorkers,
     verifyFieldsHash,
+    verifyServer,
     verifyServerSignature,
     verifySolution,
 };

package/dist/esm/v2/types.d.ts

@@ -233,6 +233,60 @@ export interface VerifyResult {
 export interface VerifyServerSignatureResult extends VerifySolutionResult {
     verificationData?: ServerSignatureVerificationData | null;
 }
+export interface VerifyServerOptions {
+    /**
+     * The payload to verify, as received from `POST /v1/verify`
+     * (either the raw string or the decoded object).
+     */
+    payload: string | ServerSignaturePayload | Record<string, unknown>;
+    /**
+     * Full URL of the Sentinel `/v1/verify/signature` endpoint.
+     */
+    url: string;
+    /**
+     * API key secret. If provided, Sentinel checks that it matches the
+     * API key associated with the payload.
+     */
+    secret?: string;
+    /**
+     * Custom fetch implementation. Defaults to the global `fetch`.
+     */
+    fetch?: typeof fetch;
+    /**
+     * Additional headers to send with the request.
+     */
+    headers?: Record<string, string>;
+    /**
+     * AbortController for cancelling the verification request.
+     */
+    controller?: AbortController;
+    /**
+     * Per-attempt request timeout in milliseconds.
+     * Defaults to `10_000` (10 seconds).
+     */
+    timeout?: number;
+    /**
+     * Number of retry attempts after the first try.
+     * Defaults to `0` (no retries).
+     */
+    retries?: number;
+    /**
+     * Base delay in milliseconds between retry attempts.
+     * Defaults to `300`.
+     */
+    retryDelay?: number;
+    /**
+     * Backoff strategy applied to `retryDelay` between retries.
+     * Defaults to `'exponential'`.
+     */
+    retryBackoff?: 'fixed' | 'exponential';
+}
+export interface VerifyServerResult {
+    apiKey?: string | null;
+    reason?: string;
+    verificationData?: ServerSignatureVerificationData | null;
+    verified: boolean;
+}
 export interface VerifySolutionOptions {
     /**
      * Challenge object to verify against, either decoded from the client payload

package/dist/esm/v2/verify-server.d.ts

@@ -0,0 +1,3 @@
+import type { VerifyServerOptions, VerifyServerResult } from './types.js';
+/** Verifies a payload remotely via the ALTCHA Sentinel `/v1/verify/signature` API. */
+export declare function verifyServer(options: VerifyServerOptions): Promise<VerifyServerResult>;

package/dist/esm/v2/verify-server.js

@@ -0,0 +1,54 @@
+import { delay } from './helpers.js';
+/** Verifies a payload remotely via the ALTCHA Sentinel `/v1/verify/signature` API. */
+export async function verifyServer(options) {
+    const { controller, fetch: fetchImpl = fetch, headers, payload, retries = 0, retryBackoff = 'exponential', retryDelay = 300, secret, timeout = 10_000, url, } = options;
+    const body = JSON.stringify({ payload, secret });
+    for (let attempt = 0; attempt <= retries; attempt++) {
+        if (controller?.signal.aborted) {
+            return { verified: false, reason: 'ABORTED' };
+        }
+        const attemptController = new AbortController();
+        const onAbort = () => attemptController.abort();
+        controller?.signal.addEventListener('abort', onAbort);
+        const timer = setTimeout(() => attemptController.abort(), timeout);
+        try {
+            const response = await fetchImpl(url, {
+                body,
+                headers: {
+                    'Content-Type': 'application/json',
+                    ...headers,
+                },
+                method: 'POST',
+                signal: attemptController.signal,
+            });
+            if (response.status === 400) {
+                const data = await response
+                    .json()
+                    .catch(() => null);
+                return {
+                    verified: false,
+                    reason: data?.error ?? `HTTP_${response.status}`,
+                };
+            }
+            if (!response.ok) {
+                throw new Error(`HTTP_${response.status}`);
+            }
+            return (await response.json());
+        }
+        catch (err) {
+            if (attempt >= retries) {
+                return {
+                    verified: false,
+                    reason: err instanceof Error ? err.message : 'NETWORK_ERROR',
+                };
+            }
+            const backoffDelay = retryBackoff === 'fixed' ? retryDelay : retryDelay * 2 ** attempt;
+            await delay(backoffDelay);
+        }
+        finally {
+            clearTimeout(timer);
+            controller?.signal.removeEventListener('abort', onAbort);
+        }
+    }
+    return { verified: false, reason: 'NETWORK_ERROR' };
+}

package/dist/tsconfig.build.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/v1/helpers.ts","../src/v1/index.ts","../src/v1/types.ts","../src/v1/worker.ts","../src/v2/capped-map.ts","../src/v2/helpers.ts","../src/v2/index.ts","../src/v2/obfuscation.ts","../src/v2/pow.ts","../src/v2/server-signature.ts","../src/v2/types.ts","../src/v2/algorithms/argon2id.ts","../src/v2/algorithms/pbkdf2.ts","../src/v2/algorithms/scrypt.ts","../src/v2/algorithms/sha.ts","../src/v2/algorithms/web/pbkdf2.ts","../src/v2/algorithms/web/sha.ts","../src/v2/frameworks/express.ts","../src/v2/frameworks/fastify.ts","../src/v2/frameworks/h3.ts","../src/v2/frameworks/hono.ts","../src/v2/frameworks/nestjs.ts","../src/v2/frameworks/nextjs.ts","../src/v2/frameworks/shared.ts","../src/v2/frameworks/sveltekit.ts","../src/v2/frameworks/types.ts","../src/v2/workers/argon2id.ts","../src/v2/workers/pbkdf2.ts","../src/v2/workers/scrypt.ts","../src/v2/workers/sha.ts","../src/v2/workers/shared.ts"],"version":"5.9.3"}
+{"root":["../src/v1/helpers.ts","../src/v1/index.ts","../src/v1/types.ts","../src/v1/worker.ts","../src/v2/capped-map.ts","../src/v2/helpers.ts","../src/v2/index.ts","../src/v2/obfuscation.ts","../src/v2/pow.ts","../src/v2/server-signature.ts","../src/v2/types.ts","../src/v2/verify-server.ts","../src/v2/algorithms/argon2id.ts","../src/v2/algorithms/pbkdf2.ts","../src/v2/algorithms/scrypt.ts","../src/v2/algorithms/sha.ts","../src/v2/algorithms/web/pbkdf2.ts","../src/v2/algorithms/web/sha.ts","../src/v2/frameworks/express.ts","../src/v2/frameworks/fastify.ts","../src/v2/frameworks/h3.ts","../src/v2/frameworks/hono.ts","../src/v2/frameworks/nestjs.ts","../src/v2/frameworks/nextjs.ts","../src/v2/frameworks/shared.ts","../src/v2/frameworks/sveltekit.ts","../src/v2/frameworks/types.ts","../src/v2/workers/argon2id.ts","../src/v2/workers/pbkdf2.ts","../src/v2/workers/scrypt.ts","../src/v2/workers/sha.ts","../src/v2/workers/shared.ts"],"version":"5.9.3"}

package/dist/tsconfig.cjs.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/v1/helpers.ts","../src/v1/index.ts","../src/v1/types.ts","../src/v1/worker.ts","../src/v2/capped-map.ts","../src/v2/helpers.ts","../src/v2/index.ts","../src/v2/obfuscation.ts","../src/v2/pow.ts","../src/v2/server-signature.ts","../src/v2/types.ts","../src/v2/algorithms/argon2id.ts","../src/v2/algorithms/pbkdf2.ts","../src/v2/algorithms/scrypt.ts","../src/v2/algorithms/sha.ts","../src/v2/algorithms/web/pbkdf2.ts","../src/v2/algorithms/web/sha.ts","../src/v2/frameworks/express.ts","../src/v2/frameworks/fastify.ts","../src/v2/frameworks/h3.ts","../src/v2/frameworks/hono.ts","../src/v2/frameworks/nestjs.ts","../src/v2/frameworks/nextjs.ts","../src/v2/frameworks/shared.ts","../src/v2/frameworks/sveltekit.ts","../src/v2/frameworks/types.ts","../src/v2/workers/argon2id.ts","../src/v2/workers/pbkdf2.ts","../src/v2/workers/scrypt.ts","../src/v2/workers/sha.ts","../src/v2/workers/shared.ts"],"version":"5.9.3"}
+{"root":["../src/v1/helpers.ts","../src/v1/index.ts","../src/v1/types.ts","../src/v1/worker.ts","../src/v2/capped-map.ts","../src/v2/helpers.ts","../src/v2/index.ts","../src/v2/obfuscation.ts","../src/v2/pow.ts","../src/v2/server-signature.ts","../src/v2/types.ts","../src/v2/verify-server.ts","../src/v2/algorithms/argon2id.ts","../src/v2/algorithms/pbkdf2.ts","../src/v2/algorithms/scrypt.ts","../src/v2/algorithms/sha.ts","../src/v2/algorithms/web/pbkdf2.ts","../src/v2/algorithms/web/sha.ts","../src/v2/frameworks/express.ts","../src/v2/frameworks/fastify.ts","../src/v2/frameworks/h3.ts","../src/v2/frameworks/hono.ts","../src/v2/frameworks/nestjs.ts","../src/v2/frameworks/nextjs.ts","../src/v2/frameworks/shared.ts","../src/v2/frameworks/sveltekit.ts","../src/v2/frameworks/types.ts","../src/v2/workers/argon2id.ts","../src/v2/workers/pbkdf2.ts","../src/v2/workers/scrypt.ts","../src/v2/workers/sha.ts","../src/v2/workers/shared.ts"],"version":"5.9.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "altcha-lib",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "description": "A lightweight library for creating and verifying ALTCHA challenges on the server.",
   "author": {
     "name": "Daniel Regeci",
@@ -184,6 +184,8 @@
   },
   "overrides": {
     "cookie": "^1.1.1",
-    "file-type": "^21.3.1"
+		"esbuild": "^0.28.1",
+    "file-type": "^21.3.1",
+    "multer": "^2.2.0"
   }
 }