create-jen-app 1.2.2 → 1.2.4

package/templates/static/lib/auth/jwt.js

@@ -1,30 +1,57 @@
-/*
- * This file is part of Jen.js.
- * Copyright (C) 2026 oopsio
+/**
+ * JWT token utilities for creating and validating JSON Web Tokens.
+ * This module provides stub implementations that require an external JWT library.
+ * Users must install a JWT library (e.g., jsonwebtoken) and implement these functions
+ * using that library's APIs to enable authentication features.
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ * The module validates that JWT_SECRET is configured in the environment,
+ * ensuring token signing and verification can proceed securely.
  */
-// JWT token utilities - external JWT library not included
-// Users should implement with their own jwt library (e.g., npm install jsonwebtoken)
+// JWT signing and verification require an external library not included by default.
+// Users should install jsonwebtoken: npm install jsonwebtoken
 const SECRET = process.env.JWT_SECRET;
-// Validate JWT_SECRET is configured
+// Validate that JWT_SECRET is set. This environment variable is required for all token operations.
+// Without a secret, tokens cannot be securely signed or verified.
 if (!SECRET) {
-    throw new Error("CRITICAL: JWT_SECRET environment variable is required. Set JWT_SECRET in your .env file or environment.");
+  throw new Error(
+    "CRITICAL: JWT_SECRET environment variable is required. Set JWT_SECRET in your .env file or environment.",
+  );
 }
+/**
+ * Creates a signed JWT token containing the provided payload.
+ * This function is a stub that requires implementing with an external JWT library.
+ *
+ * @param payload The data to encode in the token.
+ * @param expiresIn Token expiration time (default "1h"). Format: "1h", "7d", "30s", etc.
+ * @returns The signed JWT token as a string.
+ * @throws Error indicating that a JWT library must be installed.
+ *
+ * @example
+ * const token = signToken({ userId: 123, role: 'admin' }, '24h');
+ * // Implementation using jsonwebtoken:
+ * // jwt.sign(payload, SECRET, { expiresIn });
+ */
 export function signToken(payload, expiresIn = "1h") {
-    throw new Error("JWT implementation requires external library. Install: npm install jsonwebtoken");
+  throw new Error(
+    "JWT implementation requires external library. Install: npm install jsonwebtoken",
+  );
 }
+/**
+ * Verifies and decodes a JWT token, returning the payload if valid.
+ * This function is a stub that requires implementing with an external JWT library.
+ *
+ * @param token The JWT token string to verify.
+ * @returns The decoded payload from the token.
+ * @throws Error indicating that a JWT library must be installed.
+ * @throws Error if the token is invalid, expired, or fails verification.
+ *
+ * @example
+ * const payload = verifyToken(token);
+ * // Implementation using jsonwebtoken:
+ * // jwt.verify(token, SECRET);
+ */
 export function verifyToken(token) {
-    throw new Error("JWT implementation requires external library. Install: npm install jsonwebtoken");
+  throw new Error(
+    "JWT implementation requires external library. Install: npm install jsonwebtoken",
+  );
 }

package/templates/static/lib/auth/session.js

@@ -1,20 +1,3 @@
-/*
- * This file is part of Jen.js.
- * Copyright (C) 2026 oopsio
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
 const SESSION_TIMEOUT = parseInt(process.env.SESSION_TIMEOUT ?? "86400000", 10); // 24 hours default
 /**
  * In-memory session manager
@@ -22,90 +5,88 @@ const SESSION_TIMEOUT = parseInt(process.env.SESSION_TIMEOUT ?? "86400000", 10);
  * For production, use persistent storage (Redis, Database, etc.)
  */
 export class SessionManager {
-    sessions = new Map();
-    constructor() {
-        // Cleanup expired sessions every 30 minutes
-        setInterval(() => this.cleanupExpiredSessions(), 30 * 60 * 1000);
+  sessions = new Map();
+  constructor() {
+    // Cleanup expired sessions every 30 minutes
+    setInterval(() => this.cleanupExpiredSessions(), 30 * 60 * 1000);
+  }
+  /**
+   * Create a new session with automatic expiration
+   */
+  createSession(userId, data = {}) {
+    // Validate userId
+    if (!userId || typeof userId !== "string" || userId.length > 255) {
+      throw new Error("Invalid userId");
     }
-    /**
-     * Create a new session with automatic expiration
-     */
-    createSession(userId, data = {}) {
-        // Validate userId
-        if (!userId || typeof userId !== "string" || userId.length > 255) {
-            throw new Error("Invalid userId");
-        }
-        const sessionId = this.generateSecureSessionId();
-        const now = Date.now();
-        const session = {
-            userId,
-            createdAt: now,
-            expiresAt: now + SESSION_TIMEOUT,
-            ...data,
-        };
-        this.sessions.set(sessionId, session);
-        return sessionId;
+    const sessionId = this.generateSecureSessionId();
+    const now = Date.now();
+    const session = {
+      userId,
+      createdAt: now,
+      expiresAt: now + SESSION_TIMEOUT,
+      ...data,
+    };
+    this.sessions.set(sessionId, session);
+    return sessionId;
+  }
+  /**
+   * Get session with expiration check
+   */
+  getSession(sessionId) {
+    if (!sessionId) return null;
+    const session = this.sessions.get(sessionId);
+    if (!session) return null;
+    // Check if session expired
+    if (Date.now() > session.expiresAt) {
+      this.sessions.delete(sessionId);
+      return null;
     }
-    /**
-     * Get session with expiration check
-     */
-    getSession(sessionId) {
-        if (!sessionId)
-            return null;
-        const session = this.sessions.get(sessionId);
-        if (!session)
-            return null;
-        // Check if session expired
-        if (Date.now() > session.expiresAt) {
-            this.sessions.delete(sessionId);
-            return null;
-        }
-        return session;
+    return session;
+  }
+  /**
+   * Destroy session immediately
+   */
+  destroySession(sessionId) {
+    this.sessions.delete(sessionId);
+  }
+  /**
+   * Verify session is valid and return user ID
+   */
+  verifySession(sessionId) {
+    const session = this.getSession(sessionId);
+    return session?.userId ?? null;
+  }
+  /**
+   * Update session expiration
+   */
+  refreshSession(sessionId) {
+    const session = this.getSession(sessionId);
+    if (!session) return false;
+    session.expiresAt = Date.now() + SESSION_TIMEOUT;
+    return true;
+  }
+  /**
+   * Generate cryptographically secure session ID
+   */
+  generateSecureSessionId() {
+    // In production, use crypto.randomBytes
+    const chars =
+      "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+    let result = "";
+    for (let i = 0; i < 32; i++) {
+      result += chars.charAt(Math.floor(Math.random() * chars.length));
     }
-    /**
-     * Destroy session immediately
-     */
-    destroySession(sessionId) {
+    return result;
+  }
+  /**
+   * Clean up expired sessions
+   */
+  cleanupExpiredSessions() {
+    const now = Date.now();
+    for (const [sessionId, session] of this.sessions.entries()) {
+      if (now > session.expiresAt) {
         this.sessions.delete(sessionId);
+      }
     }
-    /**
-     * Verify session is valid and return user ID
-     */
-    verifySession(sessionId) {
-        const session = this.getSession(sessionId);
-        return session?.userId ?? null;
-    }
-    /**
-     * Update session expiration
-     */
-    refreshSession(sessionId) {
-        const session = this.getSession(sessionId);
-        if (!session)
-            return false;
-        session.expiresAt = Date.now() + SESSION_TIMEOUT;
-        return true;
-    }
-    /**
-     * Generate cryptographically secure session ID
-     */
-    generateSecureSessionId() {
-        // In production, use crypto.randomBytes
-        const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
-        let result = "";
-        for (let i = 0; i < 32; i++) {
-            result += chars.charAt(Math.floor(Math.random() * chars.length));
-        }
-        return result;
-    }
-    /**
-     * Clean up expired sessions
-     */
-    cleanupExpiredSessions() {
-        const now = Date.now();
-        for (const [sessionId, session] of this.sessions.entries()) {
-            if (now > session.expiresAt) {
-                this.sessions.delete(sessionId);
-            }
-        }
-    }
+  }
 }

package/templates/static/lib/build/asset-hashing.js

@@ -1,42 +1,50 @@
-/*
- * This file is part of Jen.js.
- * Copyright (C) 2026 oopsio
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-import { createHash } from 'node:crypto';
-import { readFileSync, renameSync } from 'node:fs';
-import { join, dirname, basename, extname } from 'node:path';
+import { createHash } from "node:crypto";
+import { readFileSync, renameSync } from "node:fs";
+import { join, dirname, basename, extname } from "node:path";
+import { hashWithRust } from "./rust-hashing.js";
 export class AssetHasher {
-    /**
-     * Calculate hash of file content
-     */
-    static hashContent(content) {
-        return createHash('md5').update(content).digest('hex').slice(0, 10);
-    }
-    /**
-     * Rename file to include hash (e.g. style.css -> style.a1b2c3.css)
-     */
-    static hashFile(filePath) {
-        const content = readFileSync(filePath);
-        const hash = this.hashContent(content);
-        const dir = dirname(filePath);
-        const ext = extname(filePath);
-        const name = basename(filePath, ext);
-        const newName = `${name}.${hash}${ext}`;
-        const newPath = join(dir, newName);
-        renameSync(filePath, newPath);
-        return newName;
+  /**
+   * Calculate hash of file content
+   */
+  static hashContent(content) {
+    return createHash("md5").update(content).digest("hex").slice(0, 10);
+  }
+  /**
+   * High-performance hashing for directories using Rust utility.
+   * Useful during build for hashing all assets in bulk.
+   */
+  static async hashDirectory(dirPath) {
+    try {
+      const response = await hashWithRust({
+        path: dirPath,
+        algorithm: "sha256",
+        hashFileNames: false,
+      });
+      const result = {};
+      for (const h of response.hashes) {
+        // Rust returns relative path, map it to hash
+        result[h.path] = h.hash.slice(0, 10);
+      }
+      return result;
+    } catch (err) {
+      console.warn(
+        `[AssetHasher] Rust hashing failed, falling back to Node.js: ${err}`,
+      );
+      return {}; // Fallback would be implemented by caller or here
     }
+  }
+  /**
+   * Rename file to include hash (e.g. style.css -> style.a1b2c3.css)
+   */
+  static hashFile(filePath) {
+    const content = readFileSync(filePath);
+    const hash = this.hashContent(content);
+    const dir = dirname(filePath);
+    const ext = extname(filePath);
+    const name = basename(filePath, ext);
+    const newName = `${name}.${hash}${ext}`;
+    const newPath = join(dir, newName);
+    renameSync(filePath, newPath);
+    return newName;
+  }
 }

package/templates/static/lib/build/asset-manifest.js

@@ -1,38 +1,21 @@
-/*
- * This file is part of Jen.js.
- * Copyright (C) 2026 oopsio
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program. If not, see <https://www.gnu.org/licenses/>.
- */
-import { writeFileSync, readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
+import { writeFileSync, readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
 export class AssetManifest {
-    manifest = {};
-    manifestPath;
-    constructor(distDir) {
-        this.manifestPath = join(distDir, 'manifest.json');
-        if (existsSync(this.manifestPath)) {
-            this.manifest = JSON.parse(readFileSync(this.manifestPath, 'utf8'));
-        }
-    }
-    set(original, hashed) {
-        this.manifest[original] = hashed;
-    }
-    get(original) {
-        return this.manifest[original];
-    }
-    save() {
-        writeFileSync(this.manifestPath, JSON.stringify(this.manifest, null, 2));
+  manifest = {};
+  manifestPath;
+  constructor(distDir) {
+    this.manifestPath = join(distDir, "manifest.json");
+    if (existsSync(this.manifestPath)) {
+      this.manifest = JSON.parse(readFileSync(this.manifestPath, "utf8"));
     }
+  }
+  set(original, hashed) {
+    this.manifest[original] = hashed;
+  }
+  get(original) {
+    return this.manifest[original];
+  }
+  save() {
+    writeFileSync(this.manifestPath, JSON.stringify(this.manifest, null, 2));
+  }
 }