fiberx-backend-toolkit 0.0.47 → 0.0.49

package/dist/middle_ware/authentication_middle_ware.d.ts

@@ -1,20 +1,20 @@
 import { Model } from "sequelize";
 import { Request, Response, NextFunction, RequestHandler } from "express";
 import { AuthenticatorOptions, DefaultRequestInfo, DefaultAccessTokenPayload, DefaultRefreshTokenPayload } from "../types/middle_ware_type";
-declare class AuthenicationMiddleWare {
+declare class AuthenicationMiddleWare<TRequestInfo extends DefaultRequestInfo = DefaultRequestInfo, TAccessPayload extends DefaultAccessTokenPayload = DefaultAccessTokenPayload, TRefreshPayload extends DefaultRefreshTokenPayload = DefaultRefreshTokenPayload, TSessionModel extends Model = Model, TLoginChallengeModel extends Model = Model, TActorModel extends Model = Model> {
     private name;
     private logger;
     private readonly options;
-    constructor(options: AuthenticatorOptions);
+    constructor(options: AuthenticatorOptions<TRequestInfo, TAccessPayload, TRefreshPayload, TSessionModel, TLoginChallengeModel, TActorModel>);
     /** Extract tokens + device info from request */
-    protected extractRequestInfo(req: Request): Promise<DefaultRequestInfo | null>;
-    protected validateAccessToken(access_token: string, request_info?: DefaultRequestInfo): Promise<DefaultAccessTokenPayload | null>;
-    protected validateRefreshToken(refresh_token: string, request_info?: DefaultRequestInfo): Promise<DefaultRefreshTokenPayload | null>;
-    protected LoadActor(actor_type: string, actor_id: number | string, request_info?: DefaultRequestInfo): Promise<Model | null>;
-    protected loadMemberSession(member_id: number | string, session_id: number | string, request_info?: DefaultRequestInfo, is_2fa_validated?: boolean): Promise<Model | null>;
-    protected loadMemberLoginChallenge(member_id: number | string, challenge_id: number | string, request_info?: DefaultRequestInfo, is_2fa_validated?: boolean): Promise<Model | null>;
+    protected extractRequestInfo(req: Request): Promise<TRequestInfo | null>;
+    protected validateAccessToken(access_token: string, request_info?: TRequestInfo): Promise<DefaultAccessTokenPayload | null>;
+    protected validateRefreshToken(refresh_token: string, request_info?: TRequestInfo): Promise<DefaultRefreshTokenPayload | null>;
+    protected LoadActor(actor_type: string, actor_id: number | string, request_info?: TRequestInfo): Promise<Model | null>;
+    protected loadMemberSession(member_id: number | string, session_id: number | string, request_info?: TRequestInfo, is_2fa_validated?: boolean): Promise<Model | null>;
+    protected loadMemberLoginChallenge(member_id: number | string, challenge_id: number | string, request_info?: TRequestInfo, is_2fa_validated?: boolean): Promise<Model | null>;
     protected getActorPermissions(actor_id: number | string, role_ids: (number | string)[]): Promise<string[]>;
-    protected validateHasPermission(request_info: DefaultRequestInfo): Promise<boolean>;
+    protected validateHasPermission(request_info: TRequestInfo): Promise<boolean>;
     setPermissionName(permission_name: string): RequestHandler;
     requireNoAuth(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
     requirePartialAuth(req: Request, res: Response, next: NextFunction): Promise<void | Response>;

package/dist/utils/input_validator_util.d.ts

@@ -49,5 +49,6 @@ declare class InputValidatorUtil {
     /** ✅ Validate ReCaptcha */
     static isValidReCaptcha(recpatcha_token: string): Promise<any>;
     static dirExists(directory: string, create_directory?: boolean, return_dir_path?: boolean): boolean | string;
+    static isSafeHashCompare(a: string, b: string): boolean;
 }
 export default InputValidatorUtil;

package/dist/utils/input_validator_util.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const fs_1 = __importDefault(require("fs"));
+const crypto_1 = __importDefault(require("crypto"));
 const dayjs_1 = __importDefault(require("dayjs"));
 const isSameOrAfter_1 = __importDefault(require("dayjs/plugin/isSameOrAfter"));
 const bcrypt_1 = __importDefault(require("bcrypt"));
@@ -117,5 +118,13 @@ class InputValidatorUtil {
         }
         return return_dir_path ? directory : true;
     }
+    static isSafeHashCompare(a, b) {
+        const buf1 = Buffer.from(a);
+        const buf2 = Buffer.from(b);
+        if (buf1.length !== buf2.length) {
+            return false;
+        }
+        return crypto_1.default.timingSafeEqual(buf1, buf2);
+    }
 }
 exports.default = InputValidatorUtil;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "fiberx-backend-toolkit",
-    "version": "0.0.47",
+    "version": "0.0.49",
     "description": "A TypeScript backend toolkit providing shared domain logic, infrastructure helpers, and utilities for FiberX server-side applications and services.",
     "type": "commonjs",
     "main": "./dist/index.js",