eslint-plugin-jwt-security 2.3.1 → 2.3.2

package/src/utils/index.js

@@ -1,165 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JWT_METHODS = exports.SENSITIVE_PAYLOAD_FIELDS = exports.SECURE_ALGORITHMS = exports.SYMMETRIC_ALGORITHMS = exports.INSECURE_ALGORITHMS = exports.JWT_LIBRARIES = void 0;
-exports.isJwtLibraryCall = isJwtLibraryCall;
-exports.isStringLiteral = isStringLiteral;
-exports.extractAlgorithms = extractAlgorithms;
-exports.hasOption = hasOption;
-exports.getOptionValue = getOptionValue;
-exports.isWeakSecret = isWeakSecret;
-exports.isEnvVariable = isEnvVariable;
-exports.isSignOperation = isSignOperation;
-exports.isVerifyOperation = isVerifyOperation;
-exports.isDecodeOperation = isDecodeOperation;
-exports.getOptionsArgument = getOptionsArgument;
-exports.isTestFile = isTestFile;
-exports.JWT_LIBRARIES = {
-    JSONWEBTOKEN: 'jsonwebtoken',
-    JOSE: 'jose',
-    EXPRESS_JWT: 'express-jwt',
-    NESTJS_JWT: '@nestjs/jwt',
-    JWKS_RSA: 'jwks-rsa',
-    JWT_DECODE: 'jwt-decode',
-};
-exports.INSECURE_ALGORITHMS = new Set([
-    'none',
-    'None',
-    'NONE',
-    'HS256',
-    'HS384',
-    'HS512',
-]);
-exports.SYMMETRIC_ALGORITHMS = new Set(['HS256', 'HS384', 'HS512']);
-exports.SECURE_ALGORITHMS = new Set([
-    'RS256',
-    'RS384',
-    'RS512',
-    'ES256',
-    'ES384',
-    'ES512',
-    'PS256',
-    'PS384',
-    'PS512',
-    'EdDSA',
-]);
-exports.SENSITIVE_PAYLOAD_FIELDS = new Set([
-    'password', 'passwd', 'pwd', 'pass', 'secret',
-    'apikey', 'api_key', 'api-key',
-    'apisecret', 'api_secret', 'api-secret',
-    'accesstoken', 'access_token', 'access-token',
-    'refreshtoken', 'refresh_token', 'refresh-token',
-    'bearertoken', 'bearer_token', 'bearer-token',
-    'privatekey', 'private_key', 'private-key',
-    'secretkey', 'secret_key', 'secret-key',
-    'email', 'emailaddress', 'email_address', 'email-address',
-    'phone', 'phonenumber', 'phone_number', 'phone-number',
-    'ssn', 'socialsecuritynumber', 'social_security_number',
-    'dob', 'dateofbirth', 'date_of_birth', 'birthdate',
-    'address', 'streetaddress', 'street_address',
-    'creditcard', 'credit_card', 'credit-card',
-    'cardnumber', 'card_number', 'card-number',
-    'cvv', 'cvc', 'securitycode', 'security_code',
-    'pin', 'pincode', 'pin_code',
-    'bankaccount', 'bank_account', 'bank-account',
-    'accountnumber', 'account_number', 'account-number',
-    'routingnumber', 'routing_number', 'routing-number',
-]);
-exports.JWT_METHODS = {
-    SIGN: new Set(['sign', 'signJWT', 'SignJWT']),
-    VERIFY: new Set(['verify', 'verifyJWT', 'jwtVerify']),
-    DECODE: new Set(['decode', 'jwtDecode', 'decodeJWT']),
-};
-function isJwtLibraryCall(node, targetMethods) {
-    if (node.callee.type === 'MemberExpression') {
-        const property = node.callee.property;
-        if (property.type === 'Identifier') {
-            return targetMethods.has(property.name);
-        }
-    }
-    if (node.callee.type === 'Identifier') {
-        return targetMethods.has(node.callee.name);
-    }
-    return false;
-}
-function isStringLiteral(node, value) {
-    if (node.type !== 'Literal' || typeof node.value !== 'string') {
-        return false;
-    }
-    return value === undefined || node.value === value;
-}
-function extractAlgorithms(optionsNode) {
-    const algorithms = [];
-    for (const prop of optionsNode.properties) {
-        if (prop.type !== 'Property' || prop.key.type !== 'Identifier') {
-            continue;
-        }
-        const keyName = prop.key.name;
-        if (keyName !== 'algorithms' && keyName !== 'algorithm' && keyName !== 'alg') {
-            continue;
-        }
-        if (prop.value.type === 'Literal' && typeof prop.value.value === 'string') {
-            algorithms.push(prop.value.value);
-        }
-        if (prop.value.type === 'ArrayExpression') {
-            for (const elem of prop.value.elements) {
-                if (elem && elem.type === 'Literal' && typeof elem.value === 'string') {
-                    algorithms.push(elem.value);
-                }
-            }
-        }
-    }
-    return algorithms;
-}
-function hasOption(optionsNode, optionName) {
-    return optionsNode.properties.some((prop) => prop.type === 'Property' &&
-        prop.key.type === 'Identifier' &&
-        prop.key.name === optionName);
-}
-function getOptionValue(optionsNode, optionName) {
-    for (const prop of optionsNode.properties) {
-        if (prop.type === 'Property' &&
-            prop.key.type === 'Identifier' &&
-            prop.key.name === optionName) {
-            return prop.value;
-        }
-    }
-    return undefined;
-}
-function isWeakSecret(node, minLength = 32) {
-    if (node.type === 'Literal' && typeof node.value === 'string') {
-        return node.value.length < minLength;
-    }
-    return false;
-}
-function isEnvVariable(node) {
-    if (node.type === 'MemberExpression' &&
-        node.object.type === 'MemberExpression' &&
-        node.object.object.type === 'Identifier' &&
-        node.object.object.name === 'process' &&
-        node.object.property.type === 'Identifier' &&
-        node.object.property.name === 'env') {
-        return true;
-    }
-    return false;
-}
-function isSignOperation(node) {
-    return isJwtLibraryCall(node, exports.JWT_METHODS.SIGN);
-}
-function isVerifyOperation(node) {
-    return isJwtLibraryCall(node, exports.JWT_METHODS.VERIFY);
-}
-function isDecodeOperation(node) {
-    return isJwtLibraryCall(node, exports.JWT_METHODS.DECODE);
-}
-function getOptionsArgument(node, optionsIndex = 2) {
-    const arg = node.arguments[optionsIndex];
-    if (arg && arg.type === 'ObjectExpression') {
-        return arg;
-    }
-    return undefined;
-}
-function isTestFile(filename) {
-    return /\.(test|spec)\.[jt]sx?$/.test(filename) ||
-        /__(tests?|mocks?)__/.test(filename) ||
-        /\/(tests?|specs?|__tests__)\//.test(filename);
-}
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.JWT_METHODS=exports.SENSITIVE_PAYLOAD_FIELDS=exports.SECURE_ALGORITHMS=exports.SYMMETRIC_ALGORITHMS=exports.INSECURE_ALGORITHMS=exports.JWT_LIBRARIES=void 0;exports.isJwtLibraryCall=isJwtLibraryCall;exports.isStringLiteral=isStringLiteral;exports.extractAlgorithms=extractAlgorithms;exports.hasOption=hasOption;exports.getOptionValue=getOptionValue;exports.isWeakSecret=isWeakSecret;exports.isEnvVariable=isEnvVariable;exports.isSignOperation=isSignOperation;exports.isVerifyOperation=isVerifyOperation;exports.isDecodeOperation=isDecodeOperation;exports.getOptionsArgument=getOptionsArgument;exports.isTestFile=isTestFile;exports.JWT_LIBRARIES={JSONWEBTOKEN:"jsonwebtoken",JOSE:"jose",EXPRESS_JWT:"express-jwt",NESTJS_JWT:"@nestjs/jwt",JWKS_RSA:"jwks-rsa",JWT_DECODE:"jwt-decode"};exports.INSECURE_ALGORITHMS=new Set(["none","None","NONE","HS256","HS384","HS512"]);exports.SYMMETRIC_ALGORITHMS=new Set(["HS256","HS384","HS512"]);exports.SECURE_ALGORITHMS=new Set(["RS256","RS384","RS512","ES256","ES384","ES512","PS256","PS384","PS512","EdDSA"]);exports.SENSITIVE_PAYLOAD_FIELDS=new Set(["password","passwd","pwd","pass","secret","apikey","api_key","api-key","apisecret","api_secret","api-secret","accesstoken","access_token","access-token","refreshtoken","refresh_token","refresh-token","bearertoken","bearer_token","bearer-token","privatekey","private_key","private-key","secretkey","secret_key","secret-key","email","emailaddress","email_address","email-address","phone","phonenumber","phone_number","phone-number","ssn","socialsecuritynumber","social_security_number","dob","dateofbirth","date_of_birth","birthdate","address","streetaddress","street_address","creditcard","credit_card","credit-card","cardnumber","card_number","card-number","cvv","cvc","securitycode","security_code","pin","pincode","pin_code","bankaccount","bank_account","bank-account","accountnumber","account_number","account-number","routingnumber","routing_number","routing-number"]);exports.JWT_METHODS={SIGN:new Set(["sign","signJWT","SignJWT"]),VERIFY:new Set(["verify","verifyJWT","jwtVerify"]),DECODE:new Set(["decode","jwtDecode","decodeJWT"])};function isJwtLibraryCall(node,targetMethods){if(node.callee.type==="MemberExpression"){const property=node.callee.property;if(property.type==="Identifier"){return targetMethods.has(property.name)}}if(node.callee.type==="Identifier"){return targetMethods.has(node.callee.name)}return false}function isStringLiteral(node,value){if(node.type!=="Literal"||typeof node.value!=="string"){return false}return value===void 0||node.value===value}function extractAlgorithms(optionsNode){const algorithms=[];for(const prop of optionsNode.properties){if(prop.type!=="Property"||prop.key.type!=="Identifier"){continue}const keyName=prop.key.name;if(keyName!=="algorithms"&&keyName!=="algorithm"&&keyName!=="alg"){continue}if(prop.value.type==="Literal"&&typeof prop.value.value==="string"){algorithms.push(prop.value.value)}if(prop.value.type==="ArrayExpression"){for(const elem of prop.value.elements){if(elem&&elem.type==="Literal"&&typeof elem.value==="string"){algorithms.push(elem.value)}}}}return algorithms}function hasOption(optionsNode,optionName){return optionsNode.properties.some(prop=>prop.type==="Property"&&prop.key.type==="Identifier"&&prop.key.name===optionName)}function getOptionValue(optionsNode,optionName){for(const prop of optionsNode.properties){if(prop.type==="Property"&&prop.key.type==="Identifier"&&prop.key.name===optionName){return prop.value}}return void 0}function isWeakSecret(node,minLength=32){if(node.type==="Literal"&&typeof node.value==="string"){return node.value.length<minLength}return false}function isEnvVariable(node){if(node.type==="MemberExpression"&&node.object.type==="MemberExpression"&&node.object.object.type==="Identifier"&&node.object.object.name==="process"&&node.object.property.type==="Identifier"&&node.object.property.name==="env"){return true}return false}function isSignOperation(node){return isJwtLibraryCall(node,exports.JWT_METHODS.SIGN)}function isVerifyOperation(node){return isJwtLibraryCall(node,exports.JWT_METHODS.VERIFY)}function isDecodeOperation(node){return isJwtLibraryCall(node,exports.JWT_METHODS.DECODE)}function getOptionsArgument(node,optionsIndex=2){const arg=node.arguments[optionsIndex];if(arg&&arg.type==="ObjectExpression"){return arg}return void 0}function isTestFile(filename){return/\.(test|spec)\.[jt]sx?$/.test(filename)||/__(tests?|mocks?)__/.test(filename)||/\/(tests?|specs?|__tests__)\//.test(filename)}