ecrs-auth-core 1.0.62 → 1.0.63

package/dist/auth.module.js

@@ -20,6 +20,7 @@ const feature_guard_1 = require("./guards/feature.guard");
 const route_guard_1 = require("./guards/route.guard");
 const permission_guard_1 = require("./guards/permission.guard");
 const api_key_guard_1 = require("./guards/api-key.guard");
+const encryption_service_1 = require("./services/encryption.service");
 exports.AUTH_CORE_OPTIONS = 'AUTH_CORE_OPTIONS';
 // @Global()
 // @Module({})
@@ -115,6 +116,7 @@ let AuthCoreModule = AuthCoreModule_1 = class AuthCoreModule {
                     useFactory: (opts) => opts.repositories?.apiKeyRepo || null,
                     inject: [exports.AUTH_CORE_OPTIONS],
                 },
+                encryption_service_1.EncryptionService,
                 auth_service_1.AuthService,
                 jwt_strategy_1.JwtStrategy,
                 jwt_guard_1.JwtAuthGuard,
@@ -133,6 +135,7 @@ let AuthCoreModule = AuthCoreModule_1 = class AuthCoreModule {
                 'API_KEY_REPOSITORY',
                 jwt_1.JwtModule,
                 auth_service_1.AuthService,
+                encryption_service_1.EncryptionService,
                 jwt_strategy_1.JwtStrategy,
                 jwt_guard_1.JwtAuthGuard,
                 module_guard_1.ModuleGuard,

package/dist/guards/api-key.guard.d.ts

@@ -2,11 +2,13 @@ import { CanActivate, ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { Repository } from 'typeorm';
 import { ApiKeyEntity } from '../entities/api-key.entity';
+import { EncryptionService } from '../services/encryption.service';
 export declare class ApiKeyGuard implements CanActivate {
     private readonly reflector;
+    private readonly encryptionService;
     private apiKeyRepo;
     private rateLimitMap;
-    constructor(reflector: Reflector, apiKeyRepository?: Repository<ApiKeyEntity>);
+    constructor(reflector: Reflector, encryptionService: EncryptionService, apiKeyRepository?: Repository<ApiKeyEntity>);
     canActivate(context: ExecutionContext): Promise<boolean>;
     private extractApiKey;
     private validateApiKey;

package/dist/guards/api-key.guard.js

@@ -16,9 +16,11 @@ exports.ApiKeyGuard = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const typeorm_1 = require("typeorm");
+const encryption_service_1 = require("../services/encryption.service");
 let ApiKeyGuard = class ApiKeyGuard {
-    constructor(reflector, apiKeyRepository) {
+    constructor(reflector, encryptionService, apiKeyRepository) {
         this.reflector = reflector;
+        this.encryptionService = encryptionService;
         this.rateLimitMap = new Map();
         if (apiKeyRepository) {
             this.apiKeyRepo = apiKeyRepository;
@@ -70,9 +72,19 @@ let ApiKeyGuard = class ApiKeyGuard {
         if (!this.apiKeyRepo) {
             return { valid: false, message: 'API key validation not configured' };
         }
-        const record = await this.apiKeyRepo.findOne({
-            where: { key: apiKey, isActive: true },
+        // Find all active API keys and compare hashes
+        const records = await this.apiKeyRepo.find({
+            where: { isActive: true },
         });
+        let record = null;
+        // Compare incoming key with hashed keys in database
+        for (const dbRecord of records) {
+            const isMatch = await this.encryptionService.compareKey(apiKey, dbRecord.key);
+            if (isMatch) {
+                record = dbRecord;
+                break;
+            }
+        }
         if (!record) {
             return { valid: false, message: 'API key not found or inactive' };
         }
@@ -176,7 +188,8 @@ let ApiKeyGuard = class ApiKeyGuard {
 exports.ApiKeyGuard = ApiKeyGuard;
 exports.ApiKeyGuard = ApiKeyGuard = __decorate([
     (0, common_1.Injectable)(),
-    __param(1, (0, common_1.Inject)('API_KEY_REPOSITORY')),
+    __param(2, (0, common_1.Inject)('API_KEY_REPOSITORY')),
     __metadata("design:paramtypes", [core_1.Reflector,
+        encryption_service_1.EncryptionService,
         typeorm_1.Repository])
 ], ApiKeyGuard);

package/dist/index.d.ts

@@ -16,6 +16,7 @@ export * from './guards/permission.guard';
 export * from './guards/api-key.guard';
 export * from './jwt/jwt.guard';
 export * from './jwt/jwt.strategy';
+export * from './services/encryption.service';
 export * from './interfaces/auth-core-options.interface';
 export * from './entities/user.entity';
 export * from './entities/role.entity';

package/dist/index.js

@@ -37,6 +37,8 @@ __exportStar(require("./guards/api-key.guard"), exports);
 // JWT
 __exportStar(require("./jwt/jwt.guard"), exports);
 __exportStar(require("./jwt/jwt.strategy"), exports);
+// Services
+__exportStar(require("./services/encryption.service"), exports);
 // Interfaces
 __exportStar(require("./interfaces/auth-core-options.interface"), exports);
 // ✅ Entities

package/dist/services/encryption.service.d.ts

@@ -0,0 +1,16 @@
+export declare class EncryptionService {
+    private readonly saltRounds;
+    /**
+     * Hash an API key using bcrypt
+     * @param plainKey - The plain text API key
+     * @returns Hashed key
+     */
+    hashKey(plainKey: string): Promise<string>;
+    /**
+     * Compare plain key with hashed key
+     * @param plainKey - The plain text API key
+     * @param hashedKey - The hashed key from database
+     * @returns True if keys match, false otherwise
+     */
+    compareKey(plainKey: string, hashedKey: string): Promise<boolean>;
+}

package/dist/services/encryption.service.js

@@ -0,0 +1,70 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionService = void 0;
+const common_1 = require("@nestjs/common");
+const bcrypt = __importStar(require("bcrypt"));
+let EncryptionService = class EncryptionService {
+    constructor() {
+        this.saltRounds = 10;
+    }
+    /**
+     * Hash an API key using bcrypt
+     * @param plainKey - The plain text API key
+     * @returns Hashed key
+     */
+    async hashKey(plainKey) {
+        return bcrypt.hash(plainKey, this.saltRounds);
+    }
+    /**
+     * Compare plain key with hashed key
+     * @param plainKey - The plain text API key
+     * @param hashedKey - The hashed key from database
+     * @returns True if keys match, false otherwise
+     */
+    async compareKey(plainKey, hashedKey) {
+        return bcrypt.compare(plainKey, hashedKey);
+    }
+};
+exports.EncryptionService = EncryptionService;
+exports.EncryptionService = EncryptionService = __decorate([
+    (0, common_1.Injectable)()
+], EncryptionService);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ecrs-auth-core",
-  "version": "1.0.62",
+  "version": "1.0.63",
   "description": "Centralized authentication and authorization module for ECRS apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",