hi-secure 1.0.0

package/dist/adapters/GoogleAdapter.js

@@ -0,0 +1,159 @@
+"use strict";
+// // import { OAuth2Client, LoginTicket } from "google-auth-library";
+// // import { AdapterError } from "../core/errors/AdapterError";
+// // import { logWarn, logError } from "../logging";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleAdapter = void 0;
+// // export class GoogleAdapter {
+// //     private client: OAuth2Client;
+// //     private clientId?: string;
+// //     constructor(clientId?: string) {
+// //         this.client = new OAuth2Client(clientId);
+// //         this.clientId = clientId as any;
+// //     }
+// //     async verifyIdToken(idToken: string) {
+// //         try {
+// //             const options: {
+// //                 idToken: string;
+// //                 audience?: string | string[];
+// //             } = { idToken };
+// //             // ADD ONLY IF DEFINED → FIXES TS ERROR
+// //             if (this.clientId !== undefined) {
+// //                 options.audience = this.clientId;
+// //             }
+// //             const ticket: LoginTicket = await this.client.verifyIdToken(options);
+// //             const payload = ticket.getPayload();
+// //             if (!payload) {
+// //                 logWarn("GoogleAdapter: Empty payload");
+// //                 throw new AdapterError("Invalid Google ID token payload.");
+// //             }
+// //             return {
+// //                 sub: payload.sub,
+// //                 email: payload.email,
+// //                 email_verified: payload.email_verified,
+// //                 name: payload.name,
+// //                 picture: payload.picture,
+// //             };
+// //         } catch (err: any) {
+// //             logError("GoogleAdapter.verifyIdToken failed", { error: err?.message });
+// //             throw new AdapterError(err?.message || "Google token verification failed");
+// //         }
+// //     }
+// // }
+// // src/adapters/GoogleAdapter.ts - IMPROVED
+// import { OAuth2Client, LoginTicket } from "google-auth-library";
+// import { AdapterError } from "../core/errors/AdapterError.js";
+// import { logWarn, logError } from "../logging/index.js";
+// export interface GoogleTokenPayload {
+//     sub: string;
+//     email: string;
+//     email_verified: boolean;
+//     name?: string;
+//     picture?: string;
+//     [key: string]: any;
+// }
+// export class GoogleAdapter {
+//     private client: OAuth2Client;
+//     private clientId?: string;
+//     constructor(clientId?: string) {
+//         if (clientId && clientId.trim().length === 0) {
+//             throw new AdapterError("Google clientId cannot be empty string");
+//         }
+//         this.client = new OAuth2Client(clientId);
+//         this.clientId = clientId;
+//     }
+//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {
+//         try {
+//             if (!idToken || typeof idToken !== 'string') {
+//                 throw new AdapterError("Invalid ID token provided");
+//             }
+//             const options: { idToken: string; audience?: string | string[] } = { 
+//                 idToken 
+//             };
+//             // Add audience only if clientId is provided and not empty
+//             if (this.clientId && this.clientId.trim().length > 0) {
+//                 options.audience = this.clientId;
+//             }
+//             const ticket: LoginTicket = await this.client.verifyIdToken(options);
+//             const payload = ticket.getPayload();
+//             if (!payload) {
+//                 logWarn("GoogleAdapter: Empty payload");
+//                 throw new AdapterError("Invalid Google ID token payload.");
+//             }
+//             return {
+//                 sub: payload.sub,
+//                 email: payload.email || '',
+//                 email_verified: payload.email_verified || false,
+//                 name: payload.name,
+//                 picture: payload.picture,
+//                 ...payload
+//             };
+//         } catch (err: any) {
+//             logError("GoogleAdapter.verifyIdToken failed", { 
+//                 error: err?.message,
+//                 hasClientId: !!this.clientId 
+//             });
+//             if (err.message?.includes('audience')) {
+//                 throw new AdapterError("Invalid Google client ID configured.");
+//             }
+//             throw new AdapterError(err?.message || "Google token verification failed");
+//         }
+//     }
+// }
+// src/adapters/GoogleAdapter.ts - FIXED
+const google_auth_library_1 = require("google-auth-library");
+const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const index_js_1 = require("../logging/index.js");
+class GoogleAdapter {
+    constructor(clientId) {
+        if (clientId && clientId.trim().length === 0) {
+            throw new AdapterError_js_1.AdapterError("Google clientId cannot be empty string");
+        }
+        this.client = new google_auth_library_1.OAuth2Client(clientId);
+        this.clientId = clientId;
+    }
+    async verifyIdToken(idToken) {
+        try {
+            if (!idToken || typeof idToken !== 'string') {
+                throw new AdapterError_js_1.AdapterError("Invalid ID token provided");
+            }
+            const options = {
+                idToken
+            };
+            // Add audience only if clientId is provided and not empty
+            if (this.clientId && this.clientId.trim().length > 0) {
+                options.audience = this.clientId;
+            }
+            const ticket = await this.client.verifyIdToken(options);
+            const payload = ticket.getPayload();
+            if (!payload) {
+                (0, index_js_1.logWarn)("GoogleAdapter: Empty payload");
+                throw new AdapterError_js_1.AdapterError("Invalid Google ID token payload.");
+            }
+            // Create result object
+            const result = {
+                sub: payload.sub,
+                email: payload.email || '',
+                email_verified: payload.email_verified || false,
+                name: payload.name,
+                picture: payload.picture
+            };
+            // Add remaining properties from payload (excluding duplicates)
+            const { sub, email, email_verified, name, picture, ...rest } = payload;
+            Object.assign(result, rest);
+            return result;
+        }
+        catch (err) {
+            (0, index_js_1.logError)("GoogleAdapter.verifyIdToken failed", {
+                error: err?.message,
+                hasClientId: !!this.clientId
+            });
+            if (err.message?.includes('audience')) {
+                throw new AdapterError_js_1.AdapterError("Invalid Google client ID configured.");
+            }
+            throw new AdapterError_js_1.AdapterError(err?.message || "Google token verification failed");
+        }
+    }
+}
+exports.GoogleAdapter = GoogleAdapter;
+//# sourceMappingURL=GoogleAdapter.js.map

package/dist/adapters/GoogleAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleAdapter.js","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iEAAiE;AACjE,qDAAqD;;;AAErD,kCAAkC;AAClC,uCAAuC;AACvC,oCAAoC;AAEpC,0CAA0C;AAC1C,uDAAuD;AACvD,8CAA8C;AAC9C,WAAW;AAEX,gDAAgD;AAChD,mBAAmB;AACnB,kCAAkC;AAClC,sCAAsC;AACtC,mDAAmD;AACnD,kCAAkC;AAElC,yDAAyD;AACzD,oDAAoD;AACpD,uDAAuD;AACvD,mBAAmB;AAEnB,uFAAuF;AAEvF,sDAAsD;AACtD,iCAAiC;AACjC,8DAA8D;AAC9D,iFAAiF;AACjF,mBAAmB;AAEnB,0BAA0B;AAC1B,uCAAuC;AACvC,2CAA2C;AAC3C,6DAA6D;AAC7D,yCAAyC;AACzC,+CAA+C;AAC/C,oBAAoB;AAEpB,kCAAkC;AAClC,0FAA0F;AAC1F,6FAA6F;AAC7F,eAAe;AACf,WAAW;AACX,OAAO;AAKP,8CAA8C;AAC9C,mEAAmE;AACnE,iEAAiE;AACjE,2DAA2D;AAE3D,wCAAwC;AACxC,mBAAmB;AACnB,qBAAqB;AACrB,+BAA+B;AAC/B,qBAAqB;AACrB,wBAAwB;AACxB,0BAA0B;AAC1B,IAAI;AAEJ,+BAA+B;AAC/B,oCAAoC;AACpC,iCAAiC;AAEjC,uCAAuC;AACvC,0DAA0D;AAC1D,gFAAgF;AAChF,YAAY;AAEZ,oDAAoD;AACpD,oCAAoC;AACpC,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,6DAA6D;AAC7D,uEAAuE;AACvE,gBAAgB;AAEhB,oFAAoF;AACpF,2BAA2B;AAC3B,iBAAiB;AAEjB,yEAAyE;AACzE,sEAAsE;AACtE,oDAAoD;AACpD,gBAAgB;AAEhB,oFAAoF;AACpF,mDAAmD;AAEnD,8BAA8B;AAC9B,2DAA2D;AAC3D,8EAA8E;AAC9E,gBAAgB;AAEhB,uBAAuB;AACvB,oCAAoC;AACpC,8CAA8C;AAC9C,mEAAmE;AACnE,sCAAsC;AACtC,4CAA4C;AAC5C,6BAA6B;AAC7B,iBAAiB;AAEjB,+BAA+B;AAC/B,gEAAgE;AAChE,uCAAuC;AACvC,gDAAgD;AAChD,kBAAkB;AAElB,uDAAuD;AACvD,kFAAkF;AAClF,gBAAgB;AAEhB,0FAA0F;AAC1F,YAAY;AACZ,QAAQ;AACR,IAAI;AAIJ,wCAAwC;AACxC,6DAAgE;AAChE,oEAA8D;AAC9D,kDAAwD;AAWxD,MAAa,aAAa;IAItB,YAAY,QAAiB;QACzB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QAC/B,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,8BAAY,CAAC,2BAA2B,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAsD;gBAC/D,OAAO;aACV,CAAC;YAEF,0DAA0D;YAC1D,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrC,CAAC;YAED,MAAM,MAAM,GAAgB,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,IAAA,kBAAO,EAAC,8BAA8B,CAAC,CAAC;gBACxC,MAAM,IAAI,8BAAY,CAAC,kCAAkC,CAAC,CAAC;YAC/D,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAuB;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;gBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE5B,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,oCAAoC,EAAE;gBAC3C,KAAK,EAAE,GAAG,EAAE,OAAO;gBACnB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAY,CAAC,sCAAsC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC;QAC/E,CAAC;IACL,CAAC;CACJ;AAhED,sCAgEC","sourcesContent":["// // import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logWarn, logError } from \"../logging\";\r\n\r\n// // export class GoogleAdapter {\r\n// //     private client: OAuth2Client;\r\n// //     private clientId?: string;\r\n\r\n// //     constructor(clientId?: string) {\r\n// //         this.client = new OAuth2Client(clientId);\r\n// //         this.clientId = clientId as any;\r\n// //     }\r\n\r\n// //     async verifyIdToken(idToken: string) {\r\n// //         try {\r\n// //             const options: {\r\n// //                 idToken: string;\r\n// //                 audience?: string | string[];\r\n// //             } = { idToken };\r\n\r\n// //             // ADD ONLY IF DEFINED → FIXES TS ERROR\r\n// //             if (this.clientId !== undefined) {\r\n// //                 options.audience = this.clientId;\r\n// //             }\r\n\r\n// //             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n\r\n// //             const payload = ticket.getPayload();\r\n// //             if (!payload) {\r\n// //                 logWarn(\"GoogleAdapter: Empty payload\");\r\n// //                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n// //             }\r\n\r\n// //             return {\r\n// //                 sub: payload.sub,\r\n// //                 email: payload.email,\r\n// //                 email_verified: payload.email_verified,\r\n// //                 name: payload.name,\r\n// //                 picture: payload.picture,\r\n// //             };\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"GoogleAdapter.verifyIdToken failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n\r\n// // src/adapters/GoogleAdapter.ts - IMPROVED\r\n// import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logWarn, logError } from \"../logging/index.js\";\r\n\r\n// export interface GoogleTokenPayload {\r\n//     sub: string;\r\n//     email: string;\r\n//     email_verified: boolean;\r\n//     name?: string;\r\n//     picture?: string;\r\n//     [key: string]: any;\r\n// }\r\n\r\n// export class GoogleAdapter {\r\n//     private client: OAuth2Client;\r\n//     private clientId?: string;\r\n\r\n//     constructor(clientId?: string) {\r\n//         if (clientId && clientId.trim().length === 0) {\r\n//             throw new AdapterError(\"Google clientId cannot be empty string\");\r\n//         }\r\n        \r\n//         this.client = new OAuth2Client(clientId);\r\n//         this.clientId = clientId;\r\n//     }\r\n\r\n//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n//         try {\r\n//             if (!idToken || typeof idToken !== 'string') {\r\n//                 throw new AdapterError(\"Invalid ID token provided\");\r\n//             }\r\n\r\n//             const options: { idToken: string; audience?: string | string[] } = { \r\n//                 idToken \r\n//             };\r\n\r\n//             // Add audience only if clientId is provided and not empty\r\n//             if (this.clientId && this.clientId.trim().length > 0) {\r\n//                 options.audience = this.clientId;\r\n//             }\r\n\r\n//             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n//             const payload = ticket.getPayload();\r\n            \r\n//             if (!payload) {\r\n//                 logWarn(\"GoogleAdapter: Empty payload\");\r\n//                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n//             }\r\n\r\n//             return {\r\n//                 sub: payload.sub,\r\n//                 email: payload.email || '',\r\n//                 email_verified: payload.email_verified || false,\r\n//                 name: payload.name,\r\n//                 picture: payload.picture,\r\n//                 ...payload\r\n//             };\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"GoogleAdapter.verifyIdToken failed\", { \r\n//                 error: err?.message,\r\n//                 hasClientId: !!this.clientId \r\n//             });\r\n            \r\n//             if (err.message?.includes('audience')) {\r\n//                 throw new AdapterError(\"Invalid Google client ID configured.\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/adapters/GoogleAdapter.ts - FIXED\r\nimport { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logWarn, logError } from \"../logging/index.js\";\r\n\r\nexport interface GoogleTokenPayload {\r\n    sub: string;\r\n    email: string;\r\n    email_verified: boolean;\r\n    name?: string;\r\n    picture?: string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class GoogleAdapter {\r\n    private client: OAuth2Client;\r\n    private clientId?: string;\r\n\r\n    constructor(clientId?: string) {\r\n        if (clientId && clientId.trim().length === 0) {\r\n            throw new AdapterError(\"Google clientId cannot be empty string\");\r\n        }\r\n        \r\n        this.client = new OAuth2Client(clientId);\r\n        this.clientId = clientId;\r\n    }\r\n\r\n    async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n        try {\r\n            if (!idToken || typeof idToken !== 'string') {\r\n                throw new AdapterError(\"Invalid ID token provided\");\r\n            }\r\n\r\n            const options: { idToken: string; audience?: string | string[] } = { \r\n                idToken \r\n            };\r\n\r\n            // Add audience only if clientId is provided and not empty\r\n            if (this.clientId && this.clientId.trim().length > 0) {\r\n                options.audience = this.clientId;\r\n            }\r\n\r\n            const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n            const payload = ticket.getPayload();\r\n            \r\n            if (!payload) {\r\n                logWarn(\"GoogleAdapter: Empty payload\");\r\n                throw new AdapterError(\"Invalid Google ID token payload.\");\r\n            }\r\n\r\n            // Create result object\r\n            const result: GoogleTokenPayload = {\r\n                sub: payload.sub,\r\n                email: payload.email || '',\r\n                email_verified: payload.email_verified || false,\r\n                name: payload.name,\r\n                picture: payload.picture\r\n            };\r\n\r\n            // Add remaining properties from payload (excluding duplicates)\r\n            const { sub, email, email_verified, name, picture, ...rest } = payload;\r\n            Object.assign(result, rest);\r\n\r\n            return result;\r\n\r\n        } catch (err: any) {\r\n            logError(\"GoogleAdapter.verifyIdToken failed\", { \r\n                error: err?.message,\r\n                hasClientId: !!this.clientId \r\n            });\r\n            \r\n            if (err.message?.includes('audience')) {\r\n                throw new AdapterError(\"Invalid Google client ID configured.\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"Google token verification failed\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/JWTAdapter.d.ts

@@ -0,0 +1,28 @@
+import jwt from "jsonwebtoken";
+export interface JWTAdapterOptions {
+    secret: string;
+    expiresIn?: string | number;
+    algorithm?: jwt.Algorithm;
+    issuer?: string;
+    audience?: string | string[];
+}
+export interface SignOptions {
+    expiresIn?: string | number;
+    jti?: string;
+    subject?: string;
+    issuer?: string;
+    audience?: string | string[];
+}
+export declare class JWTAdapter {
+    private secret;
+    private expiresIn?;
+    private algorithm;
+    private issuer?;
+    private audience?;
+    constructor(options: JWTAdapterOptions);
+    sign(payload: object, options?: SignOptions): string;
+    verify(token: string, options?: {
+        audience?: string | string[];
+    }): string | jwt.Jwt | jwt.JwtPayload;
+}
+//# sourceMappingURL=JWTAdapter.d.ts.map

package/dist/adapters/JWTAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AA8PA,OAAO,GAAG,MAAM,cAAc,CAAC;AAK/B,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAgBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAwB3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CAuBnE"}

package/dist/adapters/JWTAdapter.js

@@ -0,0 +1,276 @@
+"use strict";
+// // import jwt from "jsonwebtoken";
+// // import { AdapterError } from "../core/errors/AdapterError";
+// // import { logError } from "../logging";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTAdapter = void 0;
+// // export interface JWTAdapterOptions {
+// //     secret: string;
+// //     expiresIn?: string | number | undefined;
+// // }
+// // export class JWTAdapter {
+// //     private secret: string;
+// //     private expiresIn?: string | number;
+// //     constructor(options: JWTAdapterOptions) {
+// //         if (!options.secret) {
+// //             throw new AdapterError("JWT secret is required");
+// //         }
+// //         this.secret = options.secret;
+// //         // Normalize expiresIn
+// //         if (options.expiresIn !== undefined) {
+// //             this.expiresIn = options.expiresIn as string | number;
+// //         }
+// //     }
+// //     sign(
+// //         payload: object,
+// //         options?: { expiresIn?: string | number }
+// //     ) {
+// //         try {
+// //             const finalExpires =
+// //                 options?.expiresIn ?? this.expiresIn;
+// //             const jwtOptions: jwt.SignOptions = {};
+// //             if (finalExpires !== undefined) {
+// //                 // Force safe cast → matches SignOptions type
+// //                 jwtOptions.expiresIn = finalExpires as number | any;
+// //             }
+// //             return jwt.sign(payload, this.secret, jwtOptions);
+// //         } catch (err: any) {
+// //             logError("JWTAdapter.sign failed", { error: err?.message });
+// //             throw new AdapterError(err?.message || "JWT sign failed");
+// //         }
+// //     }
+// //     verify(token: string) {
+// //         try {
+// //             return jwt.verify(token, this.secret);
+// //         } catch (err: any) {
+// //             logError("JWTAdapter.verify failed", { error: err?.message });
+// //             throw new AdapterError(err?.message || "JWT verify failed");
+// //         }
+// //     }
+// // }
+// // // src/adapters/JWTAdapter.ts - FIXED (Security hardening)
+// // import jwt from "jsonwebtoken";
+// // import { v4 as uuidv4 } from "uuid";
+// // import { AdapterError } from "../core/errors/AdapterError.js";
+// // import { logError } from "../logging/index.js";
+// // export interface JWTAdapterOptions {
+// //     secret: string;
+// //     expiresIn?: string | number;
+// //     algorithm?: jwt.Algorithm;
+// //     issuer?: string;
+// //     audience?: string | string[];
+// // }
+// // export interface SignOptions {
+// //     expiresIn?: string | number;
+// //     jti?: string; // JWT ID for token revocation
+// //     subject?: string;
+// //     issuer?: string;
+// //     audience?: string | string[];
+// // }
+// // export class JWTAdapter {
+// //     private secret: string;
+// //     private expiresIn?: string | number;
+// //     private algorithm: jwt.Algorithm;
+// //     private issuer?: string;
+// //     private audience?: string | string[];
+// //     constructor(options: JWTAdapterOptions) {
+// //         if (!options.secret) {
+// //             throw new AdapterError("JWT secret is required");
+// //         }
+// //         if (options.secret.length < 32) {
+// //             logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
+// //         }
+// //         this.secret = options.secret;
+// //         this.expiresIn = options.expiresIn;
+// //         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm
+// //         this.issuer = options.issuer;
+// //         this.audience = options.audience;
+// //     }
+// //     sign(payload: object, options?: SignOptions) {
+// //         try {
+// //             const jwtOptions: jwt.SignOptions = {
+// //                 algorithm: this.algorithm,
+// //                 issuer: options?.issuer || this.issuer,
+// //                 audience: options?.audience || this.audience,
+// //                 jwtid: options?.jti || uuidv4(), // Unique token ID
+// //                 subject: options?.subject
+// //             };
+// //             if (options?.expiresIn !== undefined) {
+// //                 jwtOptions.expiresIn = options.expiresIn as number;
+// //             } else if (this.expiresIn !== undefined) {
+// //                 jwtOptions.expiresIn = this.expiresIn as number;
+// //             }
+// //             return jwt.sign(payload, this.secret, jwtOptions);
+// //         } catch (err: any) {
+// //             logError("JWTAdapter.sign failed", { error: err?.message });
+// //             throw new AdapterError(err?.message || "JWT sign failed");
+// //         }
+// //     }
+// //     verify(token: string, options?: { audience?: string | string[] }) {
+// //         try {
+// //             const verifyOptions: jwt.VerifyOptions = {
+// //                 algorithms: [this.algorithm],
+// //                 issuer: this.issuer,
+// //                 audience: options?.audience as string || this.audience as string
+// //             };
+// //             return jwt.verify(token, this.secret, verifyOptions);
+// //         } catch (err: any) {
+// //             logError("JWTAdapter.verify failed", { error: err?.message });
+// //             // Provide better error messages
+// //             if (err.name === 'TokenExpiredError') {
+// //                 throw new AdapterError("JWT token has expired");
+// //             }
+// //             if (err.name === 'JsonWebTokenError') {
+// //                 throw new AdapterError("Invalid JWT token");
+// //             }
+// //             throw new AdapterError(err?.message || "JWT verification failed");
+// //         }
+// //     }
+// // }
+// // src/adapters/JWTAdapter.ts - FIXED (Security hardening)
+// import jwt from "jsonwebtoken";
+// import { nanoid } from "nanoid";  // CHANGED: from uuid to nanoid
+// import { AdapterError } from "../core/errors/AdapterError.js";
+// import { logError } from "../logging/index.js";
+// export interface JWTAdapterOptions {
+//     secret: string;
+//     expiresIn?: string | number;
+//     algorithm?: jwt.Algorithm;
+//     issuer?: string;
+//     audience?: string | string[];
+// }
+// export interface SignOptions {
+//     expiresIn?: string | number;
+//     jti?: string; // JWT ID for token revocation
+//     subject?: string;
+//     issuer?: string;
+//     audience?: string | string[];
+// }
+// export class JWTAdapter {
+//     private secret: string;
+//     private expiresIn?: string | number;
+//     private algorithm: jwt.Algorithm;
+//     private issuer?: string;
+//     private audience?: string | string[];
+//     constructor(options: JWTAdapterOptions) {
+//         if (!options.secret) {
+//             throw new AdapterError("JWT secret is required");
+//         }
+//         if (options.secret.length < 32) {
+//             logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
+//         }
+//         this.secret = options.secret;
+//         this.expiresIn = options.expiresIn;
+//         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm
+//         this.issuer = options.issuer;
+//         this.audience = options.audience;
+//     }
+//     sign(payload: object, options?: SignOptions) {
+//         try {
+//             const jwtOptions: jwt.SignOptions = {
+//                 algorithm: this.algorithm,
+//                 issuer: options?.issuer || this.issuer,
+//                 audience: options?.audience || this.audience,
+//                 jwtid: options?.jti || nanoid(),  // CHANGED: uuidv4() to nanoid()
+//                 subject: options?.subject
+//             };
+//             if (options?.expiresIn !== undefined) {
+//                 jwtOptions.expiresIn = options.expiresIn as number;
+//             } else if (this.expiresIn !== undefined) {
+//                 jwtOptions.expiresIn = this.expiresIn as number;
+//             }
+//             return jwt.sign(payload, this.secret, jwtOptions);
+//         } catch (err: any) {
+//             logError("JWTAdapter.sign failed", { error: err?.message });
+//             throw new AdapterError(err?.message || "JWT sign failed");
+//         }
+//     }
+//     verify(token: string, options?: { audience?: string | string[] }) {
+//         try {
+//             const verifyOptions: jwt.VerifyOptions = {
+//                 algorithms: [this.algorithm],
+//                 issuer: this.issuer,
+//                 audience: options?.audience as string || this.audience as string
+//             };
+//             return jwt.verify(token, this.secret, verifyOptions);
+//         } catch (err: any) {
+//             logError("JWTAdapter.verify failed", { error: err?.message });
+//             // Provide better error messages
+//             if (err.name === 'TokenExpiredError') {
+//                 throw new AdapterError("JWT token has expired");
+//             }
+//             if (err.name === 'JsonWebTokenError') {
+//                 throw new AdapterError("Invalid JWT token");
+//             }
+//             throw new AdapterError(err?.message || "JWT verification failed");
+//         }
+//     }
+// }
+// src/adapters/JWTAdapter.ts - FIXED (Using crypto.randomUUID())
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const crypto_1 = require("crypto"); // Built-in Node.js
+const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const index_js_1 = require("../logging/index.js");
+class JWTAdapter {
+    constructor(options) {
+        if (!options.secret) {
+            throw new AdapterError_js_1.AdapterError("JWT secret is required");
+        }
+        if (options.secret.length < 32) {
+            (0, index_js_1.logError)("⚠ JWT secret is too short (minimum 32 characters recommended)");
+        }
+        this.secret = options.secret;
+        this.expiresIn = options.expiresIn;
+        this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm
+        this.issuer = options.issuer;
+        this.audience = options.audience;
+    }
+    sign(payload, options) {
+        try {
+            const jwtOptions = {
+                algorithm: this.algorithm,
+                issuer: options?.issuer || this.issuer,
+                audience: options?.audience || this.audience,
+                jwtid: options?.jti || (0, crypto_1.randomUUID)(), // ✅ Using crypto.randomUUID()
+                subject: options?.subject
+            };
+            if (options?.expiresIn !== undefined) {
+                jwtOptions.expiresIn = options.expiresIn;
+            }
+            else if (this.expiresIn !== undefined) {
+                jwtOptions.expiresIn = this.expiresIn;
+            }
+            return jsonwebtoken_1.default.sign(payload, this.secret, jwtOptions);
+        }
+        catch (err) {
+            (0, index_js_1.logError)("JWTAdapter.sign failed", { error: err?.message });
+            throw new AdapterError_js_1.AdapterError(err?.message || "JWT sign failed");
+        }
+    }
+    verify(token, options) {
+        try {
+            const verifyOptions = {
+                algorithms: [this.algorithm],
+                issuer: this.issuer,
+                audience: options?.audience || this.audience
+            };
+            return jsonwebtoken_1.default.verify(token, this.secret, verifyOptions);
+        }
+        catch (err) {
+            (0, index_js_1.logError)("JWTAdapter.verify failed", { error: err?.message });
+            // Provide better error messages
+            if (err.name === 'TokenExpiredError') {
+                throw new AdapterError_js_1.AdapterError("JWT token has expired");
+            }
+            if (err.name === 'JsonWebTokenError') {
+                throw new AdapterError_js_1.AdapterError("Invalid JWT token");
+            }
+            throw new AdapterError_js_1.AdapterError(err?.message || "JWT verification failed");
+        }
+    }
+}
+exports.JWTAdapter = JWTAdapter;
+//# sourceMappingURL=JWTAdapter.js.map

package/dist/adapters/JWTAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";AAAA,qCAAqC;AACrC,iEAAiE;AACjE,4CAA4C;;;;;;AAE5C,0CAA0C;AAC1C,yBAAyB;AACzB,kDAAkD;AAClD,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAE9C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,2CAA2C;AAE3C,oCAAoC;AACpC,oDAAoD;AACpD,wEAAwE;AACxE,eAAe;AACf,WAAW;AAEX,eAAe;AACf,8BAA8B;AAC9B,uDAAuD;AACvD,aAAa;AACb,mBAAmB;AACnB,sCAAsC;AACtC,2DAA2D;AAE3D,yDAAyD;AAEzD,mDAAmD;AACnD,mEAAmE;AACnE,0EAA0E;AAC1E,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,iCAAiC;AACjC,mBAAmB;AACnB,wDAAwD;AACxD,kCAAkC;AAClC,gFAAgF;AAChF,8EAA8E;AAC9E,eAAe;AACf,WAAW;AACX,OAAO;AAIP,gEAAgE;AAChE,qCAAqC;AACrC,0CAA0C;AAC1C,oEAAoE;AACpE,qDAAqD;AAErD,0CAA0C;AAC1C,yBAAyB;AACzB,sCAAsC;AACtC,oCAAoC;AACpC,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,oCAAoC;AACpC,sCAAsC;AACtC,sDAAsD;AACtD,2BAA2B;AAC3B,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAC9C,2CAA2C;AAC3C,kCAAkC;AAClC,+CAA+C;AAE/C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,+CAA+C;AAC/C,4FAA4F;AAC5F,eAAe;AAEf,2CAA2C;AAC3C,iDAAiD;AACjD,oFAAoF;AACpF,2CAA2C;AAC3C,+CAA+C;AAC/C,WAAW;AAEX,wDAAwD;AACxD,mBAAmB;AACnB,uDAAuD;AACvD,gDAAgD;AAChD,6DAA6D;AAC7D,mEAAmE;AACnE,yEAAyE;AACzE,+CAA+C;AAC/C,oBAAoB;AAEpB,yDAAyD;AACzD,yEAAyE;AACzE,4DAA4D;AAC5D,sEAAsE;AACtE,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,6EAA6E;AAC7E,mBAAmB;AACnB,4DAA4D;AAC5D,mDAAmD;AACnD,0CAA0C;AAC1C,sFAAsF;AACtF,oBAAoB;AAEpB,uEAAuE;AACvE,kCAAkC;AAClC,gFAAgF;AAEhF,kDAAkD;AAClD,yDAAyD;AACzD,sEAAsE;AACtE,mBAAmB;AACnB,yDAAyD;AACzD,kEAAkE;AAClE,mBAAmB;AAEnB,oFAAoF;AACpF,eAAe;AACf,WAAW;AACX,OAAO;AAGP,6DAA6D;AAC7D,kCAAkC;AAClC,oEAAoE;AACpE,iEAAiE;AACjE,kDAAkD;AAElD,uCAAuC;AACvC,sBAAsB;AACtB,mCAAmC;AACnC,iCAAiC;AACjC,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,iCAAiC;AACjC,mCAAmC;AACnC,mDAAmD;AACnD,wBAAwB;AACxB,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,4BAA4B;AAC5B,8BAA8B;AAC9B,2CAA2C;AAC3C,wCAAwC;AACxC,+BAA+B;AAC/B,4CAA4C;AAE5C,gDAAgD;AAChD,iCAAiC;AACjC,gEAAgE;AAChE,YAAY;AAEZ,4CAA4C;AAC5C,yFAAyF;AACzF,YAAY;AAEZ,wCAAwC;AACxC,8CAA8C;AAC9C,iFAAiF;AACjF,wCAAwC;AACxC,4CAA4C;AAC5C,QAAQ;AAER,qDAAqD;AACrD,gBAAgB;AAChB,oDAAoD;AACpD,6CAA6C;AAC7C,0DAA0D;AAC1D,gEAAgE;AAChE,qFAAqF;AACrF,4CAA4C;AAC5C,iBAAiB;AAEjB,sDAAsD;AACtD,sEAAsE;AACtE,yDAAyD;AACzD,mEAAmE;AACnE,gBAAgB;AAEhB,iEAAiE;AAEjE,+BAA+B;AAC/B,2EAA2E;AAC3E,yEAAyE;AACzE,YAAY;AACZ,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,yDAAyD;AACzD,gDAAgD;AAChD,uCAAuC;AACvC,mFAAmF;AACnF,iBAAiB;AAEjB,oEAAoE;AACpE,+BAA+B;AAC/B,6EAA6E;AAE7E,+CAA+C;AAC/C,sDAAsD;AACtD,mEAAmE;AACnE,gBAAgB;AAChB,sDAAsD;AACtD,+DAA+D;AAC/D,gBAAgB;AAEhB,iFAAiF;AACjF,YAAY;AACZ,QAAQ;AACR,IAAI;AAKJ,iEAAiE;AACjE,gEAA+B;AAC/B,mCAAoC,CAAE,mBAAmB;AACzD,oEAA8D;AAC9D,kDAA+C;AAkB/C,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,IAAA,mBAAQ,EAAC,+DAA+D,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,uBAAuB;QACtE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE,EAAG,8BAA8B;gBACpE,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YACpD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,OAAO,EAAE,QAAkB,IAAI,IAAI,CAAC,QAAkB;aACnE,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9D,gCAAgC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;CACJ;AAtED,gCAsEC","sourcesContent":["// // import jwt from \"jsonwebtoken\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logError } from \"../logging\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number | undefined;\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n\r\n// //         // Normalize expiresIn\r\n// //         if (options.expiresIn !== undefined) {\r\n// //             this.expiresIn = options.expiresIn as string | number;\r\n// //         }\r\n// //     }\r\n\r\n// //     sign(\r\n// //         payload: object,\r\n// //         options?: { expiresIn?: string | number }\r\n// //     ) {\r\n// //         try {\r\n// //             const finalExpires =\r\n// //                 options?.expiresIn ?? this.expiresIn;\r\n\r\n// //             const jwtOptions: jwt.SignOptions = {};\r\n\r\n// //             if (finalExpires !== undefined) {\r\n// //                 // Force safe cast → matches SignOptions type\r\n// //                 jwtOptions.expiresIn = finalExpires as number | any;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string) {\r\n// //         try {\r\n// //             return jwt.verify(token, this.secret);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT verify failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// // // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// // import jwt from \"jsonwebtoken\";\r\n// // import { v4 as uuidv4 } from \"uuid\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// // import { logError } from \"../logging/index.js\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number;\r\n// //     algorithm?: jwt.Algorithm;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export interface SignOptions {\r\n// //     expiresIn?: string | number;\r\n// //     jti?: string; // JWT ID for token revocation\r\n// //     subject?: string;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n// //     private algorithm: jwt.Algorithm;\r\n// //     private issuer?: string;\r\n// //     private audience?: string | string[];\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         if (options.secret.length < 32) {\r\n// //             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n// //         this.expiresIn = options.expiresIn;\r\n// //         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n// //         this.issuer = options.issuer;\r\n// //         this.audience = options.audience;\r\n// //     }\r\n\r\n// //     sign(payload: object, options?: SignOptions) {\r\n// //         try {\r\n// //             const jwtOptions: jwt.SignOptions = {\r\n// //                 algorithm: this.algorithm,\r\n// //                 issuer: options?.issuer || this.issuer,\r\n// //                 audience: options?.audience || this.audience,\r\n// //                 jwtid: options?.jti || uuidv4(), // Unique token ID\r\n// //                 subject: options?.subject\r\n// //             };\r\n\r\n// //             if (options?.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = options.expiresIn as number;\r\n// //             } else if (this.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = this.expiresIn as number;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string, options?: { audience?: string | string[] }) {\r\n// //         try {\r\n// //             const verifyOptions: jwt.VerifyOptions = {\r\n// //                 algorithms: [this.algorithm],\r\n// //                 issuer: this.issuer,\r\n// //                 audience: options?.audience as string || this.audience as string\r\n// //             };\r\n\r\n// //             return jwt.verify(token, this.secret, verifyOptions);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n// //             // Provide better error messages\r\n// //             if (err.name === 'TokenExpiredError') {\r\n// //                 throw new AdapterError(\"JWT token has expired\");\r\n// //             }\r\n// //             if (err.name === 'JsonWebTokenError') {\r\n// //                 throw new AdapterError(\"Invalid JWT token\");\r\n// //             }\r\n            \r\n// //             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n// // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// import jwt from \"jsonwebtoken\";\r\n// import { nanoid } from \"nanoid\";  // CHANGED: from uuid to nanoid\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logError } from \"../logging/index.js\";\r\n\r\n// export interface JWTAdapterOptions {\r\n//     secret: string;\r\n//     expiresIn?: string | number;\r\n//     algorithm?: jwt.Algorithm;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export interface SignOptions {\r\n//     expiresIn?: string | number;\r\n//     jti?: string; // JWT ID for token revocation\r\n//     subject?: string;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export class JWTAdapter {\r\n//     private secret: string;\r\n//     private expiresIn?: string | number;\r\n//     private algorithm: jwt.Algorithm;\r\n//     private issuer?: string;\r\n//     private audience?: string | string[];\r\n\r\n//     constructor(options: JWTAdapterOptions) {\r\n//         if (!options.secret) {\r\n//             throw new AdapterError(\"JWT secret is required\");\r\n//         }\r\n\r\n//         if (options.secret.length < 32) {\r\n//             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n//         }\r\n\r\n//         this.secret = options.secret;\r\n//         this.expiresIn = options.expiresIn;\r\n//         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n//         this.issuer = options.issuer;\r\n//         this.audience = options.audience;\r\n//     }\r\n\r\n//     sign(payload: object, options?: SignOptions) {\r\n//         try {\r\n//             const jwtOptions: jwt.SignOptions = {\r\n//                 algorithm: this.algorithm,\r\n//                 issuer: options?.issuer || this.issuer,\r\n//                 audience: options?.audience || this.audience,\r\n//                 jwtid: options?.jti || nanoid(),  // CHANGED: uuidv4() to nanoid()\r\n//                 subject: options?.subject\r\n//             };\r\n\r\n//             if (options?.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = options.expiresIn as number;\r\n//             } else if (this.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = this.expiresIn as number;\r\n//             }\r\n\r\n//             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n//             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n//         }\r\n//     }\r\n\r\n//     verify(token: string, options?: { audience?: string | string[] }) {\r\n//         try {\r\n//             const verifyOptions: jwt.VerifyOptions = {\r\n//                 algorithms: [this.algorithm],\r\n//                 issuer: this.issuer,\r\n//                 audience: options?.audience as string || this.audience as string\r\n//             };\r\n\r\n//             return jwt.verify(token, this.secret, verifyOptions);\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n//             // Provide better error messages\r\n//             if (err.name === 'TokenExpiredError') {\r\n//                 throw new AdapterError(\"JWT token has expired\");\r\n//             }\r\n//             if (err.name === 'JsonWebTokenError') {\r\n//                 throw new AdapterError(\"Invalid JWT token\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n// src/adapters/JWTAdapter.ts - FIXED (Using crypto.randomUUID())\r\nimport jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";  // Built-in Node.js\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logError } from \"../logging/index.js\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string; // JWT ID for token revocation\r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(),  // ✅ Using crypto.randomUUID()\r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as number;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as number;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n            throw new AdapterError(err?.message || \"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: options?.audience as string || this.audience as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n            // Provide better error messages\r\n            if (err.name === 'TokenExpiredError') {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n            if (err.name === 'JsonWebTokenError') {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"JWT verification failed\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/RLFlexibleAdapter.d.ts

@@ -0,0 +1,11 @@
+export interface RLOptions {
+    points?: number;
+    duration?: number;
+    message?: any;
+    blockDuration?: number;
+}
+export declare class RLFlexibleAdapter {
+    getMiddleware(options?: RLOptions): (req: any, res: any, next: any) => Promise<any>;
+    private extractIP;
+}
+//# sourceMappingURL=RLFlexibleAdapter.d.ts.map

package/dist/adapters/RLFlexibleAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RLFlexibleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/RLFlexibleAdapter.ts"],"names":[],"mappings":"AAkEA,MAAM,WAAW,SAAS;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAC1B,aAAa,CAAC,OAAO,GAAE,SAAc,SAiBV,GAAG,OAAO,GAAG,QAAQ,GAAG;IAoCnD,OAAO,CAAC,SAAS;CAWpB"}