authenik8-core 0.1.0

package/dist/redis/redisService.js

@@ -0,0 +1,104 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var _a, _b;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initializeRedisClient = exports.setupRedis = void 0;
+const dotenv_1 = __importDefault(require("dotenv"));
+const connect_redis_1 = require("connect-redis");
+const ioredis_1 = __importDefault(require("ioredis"));
+dotenv_1.default.config();
+let redisClientInstance = null;
+let redisStoreInstance = null;
+const DEFAULT_REDIS_CONFIG = {
+    host: (_a = process.env.REDIS_HOST) !== null && _a !== void 0 ? _a : "redis",
+    port: Number((_b = process.env.REDIS_PORT) !== null && _b !== void 0 ? _b : "6379"),
+    maxRetriesPerRequest: 10,
+    connectTimeout: 5000
+};
+const DEFAULT_STORE_OPTIONS = {
+    prefix: "session",
+    ttl: 86400
+};
+const validateRedisConfig = (config) => {
+    if (!config.url && !config.host) {
+        throw new Error("Redis configuration requires either URL or host/port");
+    }
+    if (config.url && !config.url.startsWith("redis://") && !config.url.startsWith("rediss://")) {
+        throw new Error("Redis URL must use 'redis://' protocol");
+    }
+};
+const getRedisConfig = (options) => {
+    const port = (options === null || options === void 0 ? void 0 : options.port) ?
+        Number(options.port) :
+        process.env.REDIS_PORT ? Number(process.env.REDIS_PORT) :
+            Number(DEFAULT_REDIS_CONFIG.port);
+    const config = {
+        ...DEFAULT_REDIS_CONFIG,
+        host: (options === null || options === void 0 ? void 0 : options.host) || process.env.REDIS_HOST || DEFAULT_REDIS_CONFIG.host,
+        port: port,
+        password: (options === null || options === void 0 ? void 0 : options.password) || process.env.REDIS_PASSWORD || undefined,
+        ...options
+    };
+    validateRedisConfig(config);
+    return config;
+};
+const setupRedis = async (options) => {
+    try {
+        const config = getRedisConfig(options === null || options === void 0 ? void 0 : options.redisConfig);
+        const storeOptions = { ...DEFAULT_STORE_OPTIONS, ...options === null || options === void 0 ? void 0 : options.storeOptions };
+        const redisClient = new ioredis_1.default({
+            host: config.host,
+            port: Number(config.port),
+            connectTimeout: config.connectTimeout,
+            password: config.password,
+            retryStrategy: (times) => Math.min(times * 50, 2000),
+            maxRetriesPerRequest: config.maxRetriesPerRequest
+        });
+        await new Promise((resolve, reject) => {
+            redisClient.once("ready", async () => {
+                try {
+                    const pong = await redisClient.ping();
+                    console.log("Redis ping response:", pong);
+                    resolve();
+                }
+                catch (err) {
+                    reject(err);
+                }
+            });
+            redisClient.once("error", (err) => {
+                reject(err);
+            });
+        });
+        const redisStore = new connect_redis_1.RedisStore({
+            client: redisClient,
+            prefix: storeOptions.prefix,
+            ttl: storeOptions.ttl
+        });
+        redisClient.on("error", (err) => {
+            console.error("Redis client error:", err);
+        });
+        redisClient.on("ready", () => {
+            console.log("Redis client is ready");
+        });
+        redisClient.on("reconnecting", () => {
+            console.log("Redis client reconnecting...");
+        });
+        return { redisClient, redisStore };
+    }
+    catch (error) {
+        console.error("Redis setup failed:", error);
+        throw error;
+    }
+};
+exports.setupRedis = setupRedis;
+const initializeRedisClient = async () => {
+    if (!redisClientInstance) {
+        const { redisClient } = await setupRedis();
+        redisClientInstance = redisClient;
+    }
+    return redisClientInstance;
+};
+exports.initializeRedisClient = initializeRedisClient;
+//# sourceMappingURL=redisService.js.map

package/dist/redis/redisService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisService.js","sourceRoot":"","sources":["../../src/redis/redisService.ts"],"names":[],"mappings":";;;;;;;AAAA,oDAA4B;AAC5B,iDAA0C;AAC1C,sDAAkD;AAClD,gBAAM,CAAC,MAAM,EAAE,CAAC;AAwBhB,IAAI,mBAAmB,GAAmB,IAAI,CAAA;AAC9C,IAAI,kBAAkB,GAAoB,IAAI,CAAA;AAE9C,MAAM,oBAAoB,GAAgB;IAC1C,IAAI,EAAC,MAAA,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,OAAO;IACtC,IAAI,EAAE,MAAM,CAAC,MAAA,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,MAAM,CAAC;IAC9C,oBAAoB,EAAE,EAAE;IACxB,cAAc,EAAE,IAAI;CACnB,CAAA;AAED,MAAM,qBAAqB,GAAuB;IAClD,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,KAAK;CACT,CAAA;AAED,MAAM,mBAAmB,GAAG,CAAC,MAAkB,EAAE,EAAE;IACjD,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EACxF,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;AAEH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAA6B,EAAgB,EAAE;IACtE,MAAM,IAAI,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAgB;QAC5B,GAAG,oBAAoB;QACnB,IAAI,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,KAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAG,oBAAoB,CAAC,IAAI;QACzE,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,KAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAG,SAAS;QACrE,GAAG,OAAO;KACX,CAAC;IAEF,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EAAE,OAA2B,EAAE,EAAE;IAEvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,EAAC,GAAG,qBAAqB,EAAE,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,EAAC,CAAA;QAExE,MAAM,WAAW,GAAG,IAAI,iBAAK,CAAC;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAc;YAC3B,IAAI,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACxB,cAAc,EAAC,MAAM,CAAC,cAAc;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAC,CAAC,KAAY,EAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,EAAC,IAAI,CAAC;YACxD,oBAAoB,EAAC,MAAM,CAAC,oBAAoB;SAC/C,CAAC,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAC,EAAE;YAC3C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBACrC,IAAG,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAC,IAAI,CAAC,CAAC;oBACzC,OAAO,EAAE,CAAC;gBACV,CAAC;gBAAA,OAAM,GAAG,EAAC,CAAC;oBACZ,MAAM,CAAC,GAAG,CAAC,CAAC;gBACX,CAAC;YACF,CAAC,CAAC,CAAA;YACF,WAAW,CAAC,IAAI,CAAC,OAAO,EAAC,CAAC,GAAG,EAAC,EAAE;gBAChC,MAAM,CAAC,GAAG,CAAC,CAAC;YACX,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,0BAAU,CAAC;YAClC,MAAM,EAAE,WAAW;YACnB,MAAM,EAAC,YAAY,CAAC,MAAM;YAC1B,GAAG,EAAC,YAAY,CAAC,GAAG;SACnB,CAAC,CAAC;QAGL,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAS,EAAE,EAAE;YACpC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,WAAW,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YAClC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,OAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AASM,gCAAU;AARlB,MAAM,qBAAqB,GAAE,KAAK,IAAI,EAAE;IACxC,IAAG,CAAC,mBAAmB,EAAC,CAAC;QACzB,MAAM,EAAC,WAAW,EAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QACzC,mBAAmB,GAAE,WAAW,CAAC;IACjC,CAAC;IACD,OAAO,mBAAmB,CAAA;AAC1B,CAAC,CAAC;AAEkB,sDAAqB"}

package/dist/security/ipService.d.ts

@@ -0,0 +1,36 @@
+import Redis from "ioredis";
+import type { StringValue } from "ms";
+import { RequestHandler } from "express";
+import { Request, Response, NextFunction } from "express";
+export interface SecurityOptions {
+    redisClient?: Redis;
+    jwtSecret?: string;
+    jwtExpiry?: StringValue;
+    rateLimitPoints?: number;
+    rateLimitDuration?: number;
+    rateLimitBlock?: number;
+    rateLimiterEnabled?: boolean;
+    enableWhitelist?: boolean;
+    enableRateLimiter?: boolean;
+    enableHelmet?: boolean;
+    whiteListEnabled?: boolean;
+    helmetEnabled?: boolean;
+}
+export declare class SecurityModule {
+    private redisClient;
+    private jwtSecret;
+    private jwtExpiry;
+    private rateLimiter?;
+    private whiteListEnabled;
+    private helmetEnabled;
+    private rateLimiterEnabled;
+    constructor(options?: SecurityOptions);
+    isAllowed(ip: string): Promise<boolean>;
+    addIP(ipOrCIDR: string, ttl?: number): Promise<void>;
+    removeIP(ipOrCIDR: string): Promise<void>;
+    listIPs(): Promise<string[]>;
+    whiteListMiddleware(): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+    rateLimiterMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
+    helmetMiddleware(): RequestHandler;
+}
+//# sourceMappingURL=ipService.d.ts.map

package/dist/security/ipService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipService.d.ts","sourceRoot":"","sources":["../../src/security/ipService.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,SAAS,CAAC;AAC5B,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,IAAI,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAwB1D,MAAM,WAAW,eAAe;IAC/B,WAAW,CAAC,EAAE,KAAK,CAAC;IACrB,SAAS,CAAC,EAAC,MAAM,CAAC;IAClB,SAAS,CAAC,EAAC,WAAW,CAAC;IACvB,eAAe,CAAC,EAAC,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAC,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAC,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAC,OAAO,CAAC;IAC5B,eAAe,CAAC,EAAC,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAC,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAC,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAC,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAC,OAAO,CAAC;CACtB;AAED,qBAAa,cAAc;IAC3B,OAAO,CAAC,WAAW,CAAO;IAC1B,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,WAAW,CAAC,CAAmB;IACvC,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,kBAAkB,CAAS;gBAGvB,OAAO,GAAE,eAAoB;IAoCnC,SAAS,CAAC,EAAE,EAAC,MAAM,GAAE,OAAO,CAAC,OAAO,CAAC;IA4BrC,KAAK,CAAC,QAAQ,EAAC,MAAM,EAAC,GAAG,GAAC,MAA6B;IAIvD,QAAQ,CAAC,QAAQ,EAAC,MAAM;IAIxB,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIlC,mBAAmB,KACN,KAAK,OAAO,EAAC,KAAI,QAAQ,EAAE,MAAK,YAAY;IASzD,qBAAqB,KACb,KAAI,OAAO,EAAE,KAAI,QAAQ,EAAE,MAAK,YAAY;IAOpD,gBAAgB,IAAG,cAAc;CA4BhC"}

package/dist/security/ipService.js

@@ -0,0 +1,160 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityModule = void 0;
+const helmet_1 = __importDefault(require("helmet"));
+const ioredis_1 = __importDefault(require("ioredis"));
+const rate_limiter_flexible_1 = require("rate-limiter-flexible");
+const WHITELIST_KEY = "whitelist:ips";
+const IP_EXPIRATION_SECONDS = 7 * 24 * 60 * 60;
+const DEFAULT_JWT_EXPIRY = "1h";
+const JWT_SECRET = process.env.JWT_SECRET || "Boo";
+const EXPIRY = "1h";
+class SecurityModule {
+    constructor(options = {}) {
+        var _a, _b, _c;
+        this.jwtSecret = options.jwtSecret || process.env.JWT_SECRET || "Boo";
+        this.jwtExpiry = options.jwtExpiry || DEFAULT_JWT_EXPIRY;
+        this.whiteListEnabled = (_a = options.whiteListEnabled) !== null && _a !== void 0 ? _a : true;
+        this.helmetEnabled = (_b = options.helmetEnabled) !== null && _b !== void 0 ? _b : true;
+        this.rateLimiterEnabled = (_c = options.rateLimiterEnabled) !== null && _c !== void 0 ? _c : true;
+        this.redisClient = options.redisClient || new ioredis_1.default({
+            host: process.env.REDIS_HOST || "127.0.0.1",
+            port: Number(process.env.REDIS_PORT || 6379),
+            enableOfflineQueue: false,
+            retryStrategy: (times) => Math.min(times * 50, 2000),
+            maxRetriesPerRequest: 10,
+        });
+        if (this.rateLimiterEnabled) {
+            this.rateLimiter = new rate_limiter_flexible_1.RateLimiterRedis({
+                storeClient: this.redisClient,
+                keyPrefix: "rate_limit",
+                points: options.rateLimitPoints || 100,
+                duration: options.rateLimitDuration || 60,
+                blockDuration: options.rateLimitBlock || 300,
+            });
+        }
+        this.redisClient.on("error", (err) => console.error("Security Redis error:", err));
+        this.redisClient.on("connect", () => {
+            console.log("SecurityRedis  Connected to:", this.redisClient.options.host);
+        });
+    }
+    async isAllowed(ip) {
+        if (!this.whiteListEnabled)
+            return true;
+        try {
+            const exists = await this.redisClient.sismember(WHITELIST_KEY, ip);
+            if (exists === 1)
+                return true;
+            if (ip === "::1" || ip === "127.0.0.1")
+                return true;
+            const entries = await this.redisClient.smembers(WHITELIST_KEY);
+            for (const entry of entries) {
+                if (entry.includes("/")) {
+                    const CIDR = (await Promise.resolve().then(() => __importStar(require("ip-cidr")))).default;
+                    if (new CIDR(entry).contains(ip))
+                        return true;
+                }
+            }
+            return false;
+        }
+        catch (err) {
+            console.error("whitelist check error:", err);
+            return false;
+        }
+    }
+    async addIP(ipOrCIDR, ttl = IP_EXPIRATION_SECONDS) {
+        await this.redisClient.sadd(WHITELIST_KEY, ipOrCIDR);
+        await this.redisClient.expire(WHITELIST_KEY, ttl);
+    }
+    async removeIP(ipOrCIDR) {
+        await this.redisClient.srem(WHITELIST_KEY, ipOrCIDR);
+    }
+    async listIPs() {
+        return await this.redisClient.smembers(WHITELIST_KEY);
+    }
+    whiteListMiddleware() {
+        return async (req, res, next) => {
+            var _a, _b;
+            if (!this.whiteListEnabled)
+                return next();
+            const clientIP = ((_b = (_a = req.headers["x-forwarded-for"]) === null || _a === void 0 ? void 0 : _a.toString().split(",")[0]) === null || _b === void 0 ? void 0 : _b.trim()) || req.ip;
+            if (await this.isAllowed(clientIP))
+                return next();
+            res.status(403).json({ error: "Access denied" });
+        };
+    }
+    rateLimiterMiddleware() {
+        return (req, res, next) => {
+            if (!this.rateLimiter || !this.rateLimiterEnabled)
+                return next();
+            const ip = req.ip || req.socket.remoteAddress || "unknown";
+            this.rateLimiter.consume(ip).then(() => next()).catch(() => res.status(429).send("Too many Requests"));
+        };
+    }
+    helmetMiddleware() {
+        if (!this.helmetEnabled) {
+            return (req, res, next) => next();
+        }
+        const helmetDirectives = {
+            defaultSrc: ["'self'"],
+            scriptSrc: ["'self'", "'unsafe-inline'", "trusted-cdn.com"],
+            styleSrc: ["'self'"],
+            imgSrc: ["'self'", "data:", "trusted-cdn.com"],
+            fontSrc: ["'self'", "trusted-cdn.com"],
+            connectSrc: ["'self'", "api.trusted-domain.com"],
+            frameSrc: ["'none'"],
+            objectSrc: ["'none'"],
+            upgradeInsecureRequests: [],
+            reportUri: "/csp-violation-report",
+        };
+        return (0, helmet_1.default)({
+            contentSecurityPolicy: {
+                directives: helmetDirectives, reportOnly: process.env.NODE_ENV !== "production"
+            },
+            hsts: { maxAge: 315366000,
+                includeSubDomains: true, preload: true },
+            xxsFilter: true,
+            noSniff: true,
+            frameguard: { action: "deny" },
+            referrerPolicy: { policy: "same-origin" },
+        });
+    }
+}
+exports.SecurityModule = SecurityModule;
+//# sourceMappingURL=ipService.js.map

package/dist/security/ipService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipService.js","sourceRoot":"","sources":["../../src/security/ipService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,oDAA6B;AAC7B,sDAA4B;AAG5B,iEAAuD;AAKvD,MAAM,aAAa,GAAE,eAAe,CAAC;AACrC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAe/B,MAAM,UAAU,GAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC;AAClD,MAAM,MAAM,GAAG,IAAI,CAAC;AAiBpB,MAAa,cAAc;IAU3B,YAAY,UAA2B,EAAE;;QAEzC,IAAI,CAAC,SAAS,GAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAK,KAAK,CAAE;QACtE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAK,kBAAkB,CAAC;QAC1D,IAAI,CAAC,gBAAgB,GAAG,MAAA,OAAO,CAAC,gBAAgB,mCAAI,IAAI,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,MAAA,OAAO,CAAC,aAAa,mCAAI,IAAI,CAAC;QACnD,IAAI,CAAC,kBAAkB,GAAG,MAAA,OAAO,CAAC,kBAAkB,mCAAI,IAAI,CAAC;QAE7D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,iBAAK,CAAC;YACpD,IAAI,EAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;YAC1C,IAAI,EAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;YAC3C,kBAAkB,EAAE,KAAK;YACzB,aAAa,EAAC,CAAC,KAAK,EAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,EAAG,IAAI,CAAC;YACnD,oBAAoB,EAAC,EAAE;SACtB,CAAC,CAAA;QAEF,IAAG,IAAI,CAAC,kBAAkB,EAAC,CAAC;YAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,wCAAgB,CAAC;gBACxC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAC,YAAY;gBACtB,MAAM,EAAC,OAAO,CAAC,eAAe,IAAI,GAAG;gBACrC,QAAQ,EAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE;gBACxC,aAAa,EAAE,OAAO,CAAC,cAAc,IAAI,GAAG;aAE3C,CAAC,CAAA;QACF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAC,CAAC,GAAG,EAAC,EAAE,CAClC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAC,GAAG,CAAC,CACzC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAC,GAAG,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1E,CAAC,CAAC,CAAA;IACF,CAAC;IAGD,KAAK,CAAC,SAAS,CAAC,EAAS;QACzB,IAAG,CAAC,IAAI,CAAC,gBAAgB;YACzB,OAAO,IAAI,CAAC;QAEZ,IAAG,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,EAAC,EAAE,CAAC,CAAC;YACjE,IAAI,MAAM,KAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAG9B,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,WAAW;gBACtC,OAAO,IAAI,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;YAE9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAC,CAAC;gBAC7B,IAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrB,CAAC;oBACD,MAAM,IAAI,GAAG,CAAC,wDAAa,SAAS,GAAC,CAAC,CAAC,OAAO,CAAC;oBAC/C,IAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAC7C,CAAC;YACF,CAAC;YACD,OAAO,KAAK,CAAC;QAEb,CAAC;QAAA,OAAM,GAAG,EAAC,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,KAAK,CAAC;QACb,CAAC;IACD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAe,EAAC,MAAY,qBAAqB;QAC7D,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,EAAC,GAAG,CAAC,CAAA;IAChD,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,QAAe;QAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,OAAO;QACb,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;IAED,mBAAmB;QACnB,OAAO,KAAK,EAAC,GAAY,EAAC,GAAY,EAAE,IAAiB,EAAC,EAAE;;YAC3D,IAAG,CAAC,IAAI,CAAC,gBAAgB;gBAAE,OAAO,IAAI,EAAE,CAAC;YAE1C,MAAM,QAAQ,GAAG,CAAA,MAAA,MAAA,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,0CAAE,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,0CAAE,IAAI,EAAE,KAAI,GAAG,CAAC,EAAG,CAAC;YAE7F,IAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAS,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAC,KAAK,EAAC,eAAe,EAAC,CAAC,CAAC;QAC9C,CAAC,CAAA;IACH,CAAC;IACD,qBAAqB;QACrB,OAAO,CAAC,GAAW,EAAE,GAAY,EAAE,IAAiB,EAAC,EAAE;YACvD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAAC,OAAO,IAAI,EAAE,CAAC;YAChE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;YAC3D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACrG,CAAC,CAAC;IACF,CAAC;IAED,gBAAgB;QAChB,IAAG,CAAC,IAAI,CAAC,aAAa,EAAC,CAAC;YACxB,OAAM,CAAC,GAAY,EAAG,GAAY,EAAE,IAAiB,EAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAAA,CAAC;QAEjE,MAAM,gBAAgB,GAAC;YACvB,UAAU,EAAC,CAAC,QAAQ,CAAC;YACrB,SAAS,EAAC,CAAC,QAAQ,EAAC,iBAAiB,EAAC,iBAAiB,CAAC;YACxD,QAAQ,EAAC,CAAC,QAAQ,CAAC;YACnB,MAAM,EAAC,CAAC,QAAQ,EAAC,OAAO,EAAC,iBAAiB,CAAC;YAC3C,OAAO,EAAC,CAAC,QAAQ,EAAC,iBAAiB,CAAC;YACpC,UAAU,EAAC,CAAC,QAAQ,EAAC,wBAAwB,CAAC;YAC9C,QAAQ,EAAC,CAAC,QAAQ,CAAC;YACnB,SAAS,EAAC,CAAC,QAAQ,CAAC;YACpB,uBAAuB,EAAE,EAAE;YAC3B,SAAS,EAAE,uBAAuB;SACjC,CAAC;QAEF,OAAO,IAAA,gBAAM,EAAC;YACd,qBAAqB,EAAC;gBACtB,UAAU,EAAC,gBAAgB,EAAE,UAAU,EAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;aAAC;YAC9E,IAAI,EAAC,EAAC,MAAM,EAAC,SAAS;gBACtB,iBAAiB,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,EAAC;YACpC,SAAS,EAAC,IAAI;YACd,OAAO,EAAC,IAAI;YACZ,UAAU,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC;YAC1B,cAAc,EAAC,EAAC,MAAM,EAAC,aAAa,EAAC;SACpB,CAAC,CAAC;IACnB,CAAC;CACA;AApID,wCAoIC"}

package/dist/security/limiter.d.ts

@@ -0,0 +1,5 @@
+import { Request, Response, NextFunction } from "express";
+export declare const initializeRateLimiter: () => Promise<void>;
+export declare const OTPLimiterMiddleware: (req: Request, res: Response, next: NextFunction) => Promise<void>;
+export declare const LoginLimiterMiddleware: () => (req: Request, res: Response, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=limiter.d.ts.map

package/dist/security/limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limiter.d.ts","sourceRoot":"","sources":["../../src/security/limiter.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAC,MAAM,SAAS,CAAA;AAoDvD,eAAO,MAAM,qBAAqB,qBAGjC,CAAC;AAwDF,eAAO,MAAM,oBAAoB,QAlDhB,OAAO,OAAM,QAAQ,QAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAkDI,CAAC;AAC7E,eAAO,MAAM,sBAAsB,cAnDlB,OAAO,OAAM,QAAQ,QAAO,YAAY,KAAG,OAAO,CAAC,IAAI,CAmDe,CAAC"}

package/dist/security/limiter.js

@@ -0,0 +1,93 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginLimiterMiddleware = exports.OTPLimiterMiddleware = exports.initializeRateLimiter = void 0;
+const dotenv_1 = __importDefault(require("dotenv"));
+const redisService_1 = require("../redis/redisService");
+dotenv_1.default.config();
+class TokenBucket {
+    constructor(redisClient) {
+        this.redis = redisClient;
+    }
+    async consume(key, capacity, refillRate) {
+        var _a, _b;
+        const now = Date.now();
+        const results = await this.redis
+            .pipeline()
+            .hgetall(`rate_limit:${key}`)
+            .exec();
+        const data = (_b = (_a = results === null || results === void 0 ? void 0 : results[0]) === null || _a === void 0 ? void 0 : _a[1]) !== null && _b !== void 0 ? _b : {};
+        const bucket = data
+            || {};
+        const currentToken = parseFloat(bucket.tokens || capacity.toString());
+        const lastRefill = parseFloat(bucket.lastRefill || now.toString());
+        const timeElapsed = (now - lastRefill) / 1000;
+        const newToken = Math.min(capacity, currentToken + (timeElapsed * refillRate));
+        if (newToken < 1) {
+            return {
+                allowed: false,
+                remaining: Math.floor(newToken),
+                retryAfter: Math.ceil((1 - newToken) / refillRate)
+            };
+        }
+        await this.redis.hset(`rate_limit:${key}`, {
+            tokens: (newToken - 1).toString(),
+            lastRefill: now.toString()
+        });
+        this.redis.expire(`rate_limit:${key}`, 3600);
+        return { allowed: true, remaining: Math.floor(newToken - 1) };
+    }
+}
+let tokenBucket;
+const initializeRateLimiter = async () => {
+    const redisClient = (await (0, redisService_1.setupRedis)()).redisClient;
+    tokenBucket = new TokenBucket(redisClient);
+};
+exports.initializeRateLimiter = initializeRateLimiter;
+const createRatelimiter = (config) => {
+    return async (req, res, next) => {
+        const key = config.keyGenerator(req);
+        const { allowed, remaining, retryAfter } = await tokenBucket.consume(key, config.capacity, config.refillRate);
+        res.set({
+            "X-RateLimit-Limit": config.capacity.toString(),
+            "X-RateLimit-Remaining": remaining.toString(),
+            ...(!allowed && { "Retry-After": (retryAfter === null || retryAfter === void 0 ? void 0 : retryAfter.toString()) || "1" })
+        });
+        if (allowed) {
+            return next();
+        }
+        else {
+            res.status(429).json({
+                error: `Too many requests`
+            });
+        }
+    };
+};
+const RATE_LIMIT_CONFIGS = {
+    OTP: {
+        keyPrefix: "otp_limiter",
+        refillRate: 0.1,
+        capacity: 3,
+        keyGenerator: (req) => {
+            var _a;
+            const email = (_a = req.body) === null || _a === void 0 ? void 0 : _a.email;
+            return email || req.ip || "unknown";
+        }
+    },
+    LOGIN: {
+        keyPrefix: "login_limiter",
+        capacity: 10,
+        refillRate: 2,
+        keyGenerator: (req) => req.ip || "unknown"
+    }
+};
+(0, exports.initializeRateLimiter)().catch((err) => {
+    console.error("Failed to initialize rate limiters:", err);
+    process.exit(1);
+});
+exports.OTPLimiterMiddleware = createRatelimiter(RATE_LIMIT_CONFIGS.OTP);
+const LoginLimiterMiddleware = () => createRatelimiter(RATE_LIMIT_CONFIGS.LOGIN);
+exports.LoginLimiterMiddleware = LoginLimiterMiddleware;
+//# sourceMappingURL=limiter.js.map

package/dist/security/limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limiter.js","sourceRoot":"","sources":["../../src/security/limiter.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAE5B,wDAAgD;AAEhD,gBAAM,CAAC,MAAM,EAAE,CAAA;AAGf,MAAM,WAAW;IAIjB,YAAY,WAAuB;QACnC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAU,EAAE,QAAe,EAAE,UAAiB;;QAK5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK;aAC/B,QAAQ,EAAE;aACV,OAAO,CAAC,cAAc,GAAG,EAAE,CAAC;aAC5B,IAAI,EAAE,CAAC;QACR,MAAM,IAAI,GAAE,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAG,CAAC,CAAC,0CAAG,CAAC,CAAC,mCAAI,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,IAA6C;eACzD,EAAE,CAAE;QACP,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAG,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;QAClE,MAAM,WAAW,GAAE,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC;QAC7C,MAAM,QAAQ,GAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAG,YAAY,GAAG,CAAC,WAAW,GAAG,UAAU,CAAC,CAAC,CAAA;QAEhF,IAAI,QAAQ,GAAG,CAAC,EAAC,CAAC;YAClB,OAAM;gBACN,OAAO,EAAC,KAAK;gBACb,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9B,UAAU,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC;aAChD,CAAA;QACD,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,EAAC;YAC1C,MAAM,EAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE;YAChC,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE;SACzB,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;QAI5C,OAAO,EAAC,OAAO,EAAC,IAAI,EAAE,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAC,CAAC;IACzD,CAAC;CACD;AAED,IAAI,WAAwB,CAAC;AAGtB,MAAM,qBAAqB,GAAG,KAAK,IAAI,EAAE;IAChD,MAAM,WAAW,GAAG,CAAC,MAAM,IAAA,yBAAU,GAAE,CAAC,CAAC,WAAW,CAAC;IACrD,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;AAC3C,CAAC,CAAC;AAHW,QAAA,qBAAqB,yBAGhC;AACF,MAAM,iBAAiB,GAAG,CAAC,MAI1B,EAAC,EAAE;IACJ,OAAO,KAAK,EAAC,GAAW,EAAE,GAAY,EAAE,IAAiB,EAAiB,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,EAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAC,GAAE,MAAM,WAAW,CAAC,OAAO,CACjE,GAAG,EACH,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,UAAU,CAChB,CAAA;QACD,GAAG,CAAC,GAAG,CAAC;YACR,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE;YAC/C,uBAAuB,EAAC,SAAS,CAAC,QAAQ,EAAE;YAC5C,GAAG,CAAC,CAAC,OAAO,IAAI,EAAC,aAAa,EAAE,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,QAAQ,EAAE,KAAI,GAAG,EAAC,CAAC;SAC9D,CAAC,CAAA;QACF,IAAG,OAAO,EAAC,CAAC;YAEZ,OAAO,IAAI,EAAE,CAAC;QACd,CAAC;aAAI,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAC,mBAAmB;aACvB,CAAC,CAAA;QACH,CAAC;IACA,CAAC,CAAA;AACF,CAAC,CAAA;AAGD,MAAM,kBAAkB,GAAE;IACzB,GAAG,EAAC;QACJ,SAAS,EAAC,aAAa;QACvB,UAAU,EAAE,GAAG;QACf,QAAQ,EAAC,CAAC;QACV,YAAY,EAAE,CAAC,GAAW,EAAC,EAAE;;YAC5B,MAAM,KAAK,GAAE,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,CAAC;YAC7B,OAAO,KAAK,IAAI,GAAG,CAAC,EAAE,IAAK,SAAS,CAAA;QACtC,CAAC;KACC;IAGD,KAAK,EAAC;QACN,SAAS,EAAC,eAAe;QAClB,QAAQ,EAAC,EAAE;QACX,UAAU,EAAC,CAAC;QACnB,YAAY,EAAC,CAAC,GAAY,EAAU,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,SAAS;KACzD;CACD,CAAC;AAEF,IAAA,6BAAqB,GAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACpC,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAA;AAGW,QAAA,oBAAoB,GAAE,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACtE,MAAM,sBAAsB,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAA3E,QAAA,sBAAsB,0BAAqD"}

package/dist/storage/RedisTokenStore.d.ts

@@ -0,0 +1,21 @@
+import { Redis } from "ioredis";
+export declare class RedisTokenStore {
+    private redis;
+    private debug;
+    private prefix;
+    constructor(redis: Redis, debug?: boolean);
+    private key;
+    private log;
+    storeRefreshToken(token: string, userId: string, ttl: number): Promise<void>;
+    getRefreshToken(token: string): Promise<string | null>;
+    deleteRefreshToken(token: string): Promise<void>;
+    blacklistToken(token: string, ttl: number): Promise<void>;
+    isBlacklisted(token: string): Promise<boolean>;
+    incrementRateLimit(ip: string, ttl: number): Promise<number>;
+    addToWhitelist(ip: string): Promise<void>;
+    removeFromWhitelist(ip: string): Promise<void>;
+    isWhitelisted(ip: string): Promise<boolean>;
+    set(key: string, value: string, expiry?: number): Promise<void>;
+    get(key: string): Promise<string | null>;
+}
+//# sourceMappingURL=RedisTokenStore.d.ts.map

package/dist/storage/RedisTokenStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedisTokenStore.d.ts","sourceRoot":"","sources":["../../src/storage/RedisTokenStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,qBAAa,eAAe;IAGd,OAAO,CAAC,KAAK;IAAQ,OAAO,CAAC,KAAK;IAF/C,OAAO,CAAC,MAAM,CAAa;gBAEN,KAAK,EAAE,KAAK,EAAS,KAAK,UAAQ;IAGtD,OAAO,CAAC,GAAG;IAIb,OAAO,CAAC,GAAG;IAKJ,iBAAiB,CAAC,KAAK,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM;IAOxD,eAAe,CAAC,KAAK,EAAC,MAAM;IAO5B,kBAAkB,CAAC,KAAK,EAAC,MAAM;IAO/B,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAMvC,aAAa,CAAC,KAAK,EAAE,MAAM;IAQ3B,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;IAa1C,cAAc,CAAC,EAAE,EAAE,MAAM;IAMzB,mBAAmB,CAAC,EAAE,EAAE,MAAM;IAM9B,aAAa,CAAC,EAAE,EAAE,MAAM;IAM1B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAG/C"}

package/dist/storage/RedisTokenStore.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisTokenStore = void 0;
+class RedisTokenStore {
+    constructor(redis, debug = false) {
+        this.redis = redis;
+        this.debug = debug;
+        this.prefix = "auth:v1";
+    }
+    key(...parts) {
+        return `${this.prefix}:${parts.join(":")}`;
+    }
+    log(action, key, value) {
+        if (this.debug) {
+            console.log(`[Redis ${action}]`, { key, value });
+        }
+    }
+    async storeRefreshToken(token, userId, ttl) {
+        const key = this.key("refresh", token);
+        await this.redis.set(key, userId, "EX", ttl);
+        this.log("SET", key, userId);
+    }
+    async getRefreshToken(token) {
+        const key = this.key("refresh", token);
+        const value = await this.redis.get(key);
+        this.log("GET", key, value);
+        return value;
+    }
+    async deleteRefreshToken(token) {
+        const key = this.key("refresh", token);
+        await this.redis.del(key);
+        this.log("DEL", key);
+    }
+    async blacklistToken(token, ttl) {
+        const key = this.key("blacklist", token);
+        await this.redis.set(key, "1", "EX", ttl);
+        this.log("SET", key, "blacklisted");
+    }
+    async isBlacklisted(token) {
+        const key = this.key("blacklist", token);
+        const exists = await this.redis.exists(key);
+        this.log("CHECK", key, exists);
+        return exists === 1;
+    }
+    // Rate Limiting
+    async incrementRateLimit(ip, ttl) {
+        const key = this.key("rate", ip);
+        const count = await this.redis.incr(key);
+        if (count === 1) {
+            await this.redis.expire(key, ttl);
+        }
+        this.log("INCR", key, count);
+        return count;
+    }
+    // IP Whitelist
+    async addToWhitelist(ip) {
+        const key = this.key("whitelist", ip);
+        await this.redis.set(key, "1");
+        this.log("SET", key, "whitelisted");
+    }
+    async removeFromWhitelist(ip) {
+        const key = this.key("whitelist", ip);
+        await this.redis.del(key);
+        this.log("DEL", key);
+    }
+    async isWhitelisted(ip) {
+        const key = this.key("whitelist", ip);
+        const exists = await this.redis.exists(key);
+        this.log("CHECK", key, exists);
+        return exists === 1;
+    }
+    async set(key, value, expiry) {
+        console.log("REDIS SET:", key, value);
+        if (expiry) {
+            await this.redis.set(key, value, "EX", expiry);
+        }
+        else {
+            await this.redis.set(key, value);
+        }
+    }
+    async get(key) {
+        return this.redis.get(key);
+    }
+}
+exports.RedisTokenStore = RedisTokenStore;
+//# sourceMappingURL=RedisTokenStore.js.map

package/dist/storage/RedisTokenStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedisTokenStore.js","sourceRoot":"","sources":["../../src/storage/RedisTokenStore.ts"],"names":[],"mappings":";;;AAGA,MAAa,eAAe;IAG1B,YAAoB,KAAY,EAAS,QAAQ,KAAK;QAAlC,UAAK,GAAL,KAAK,CAAO;QAAS,UAAK,GAAL,KAAK,CAAQ;QAF/C,WAAM,GAAG,SAAS,CAAC;IAE+B,CAAC;IAGlD,GAAG,CAAC,GAAG,KAAc;QAC7B,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,CAAC;IAEK,GAAG,CAAC,MAAa,EAAC,GAAU,EAAE,KAAU;QAChD,IAAI,IAAI,CAAC,KAAK,EAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,GAAG,EAAC,EAAC,GAAG,EAAE,KAAK,EAAC,CAAC,CAAA;QAC5C,CAAC;IACF,CAAC;IACA,KAAK,CAAC,iBAAiB,CAAC,KAAY,EAAC,MAAa,EAAC,GAAU;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAC,MAAM,EAAE,IAAI,EAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAE7B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAY;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAG,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACb,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAY;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,CAAC,CAAC;IAEpB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,GAAW;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,kBAAkB,CAAC,EAAU,EAAE,GAAW;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,eAAe;IACf,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,EAAU;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,MAAe;QACnD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAEtC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAGC,KAAK,CAAC,GAAG,CAAC,GAAW;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AA/FD,0CA+FC"}

package/dist/storage/userStorage.d.ts

@@ -0,0 +1,7 @@
+import { UserStore } from "../types/storage";
+export declare class Store {
+    private userStore;
+    constructor(userStore: UserStore);
+    register(email: string, password: string): Promise<void>;
+}
+//# sourceMappingURL=userStorage.d.ts.map

package/dist/storage/userStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userStorage.d.ts","sourceRoot":"","sources":["../../src/storage/userStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,kBAAkB,CAAA;AAE1C,qBAAa,KAAK;IACN,OAAO,CAAC,SAAS;gBAAT,SAAS,EAAC,SAAS;IAEjC,QAAQ,CAAC,KAAK,EAAC,MAAM,EAAE,QAAQ,EAAC,MAAM;CAU3C"}

package/dist/storage/userStorage.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Store = void 0;
+class Store {
+    constructor(userStore) {
+        this.userStore = userStore;
+    }
+    async register(email, password) {
+        const exists = await this.userStore.findByEmail(email);
+        if (exists) {
+            throw new Error("If a record of user exists an email will be sent");
+        }
+        return;
+        this.userStore.create({ email, password });
+    }
+}
+exports.Store = Store;
+//# sourceMappingURL=userStorage.js.map

package/dist/storage/userStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userStorage.js","sourceRoot":"","sources":["../../src/storage/userStorage.ts"],"names":[],"mappings":";;;AAEA,MAAa,KAAK;IAClB,YAAoB,SAAmB;QAAnB,cAAS,GAAT,SAAS,CAAU;IAAE,CAAC;IAE1C,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,QAAe;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAEtD,IAAI,MAAM,EAAC,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACpE,CAAC;QACD,OAAM;QACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,QAAQ,EAAC,CAAC,CAAC;IACxC,CAAC;CAEA;AAbD,sBAaC"}

package/dist/tests/full.intergration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=full.intergration.test.d.ts.map

package/dist/tests/full.intergration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"full.intergration.test.d.ts","sourceRoot":"","sources":["../../src/tests/full.intergration.test.ts"],"names":[],"mappings":""}