hi-secure 1.0.11 โ 1.0.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/adapters/ArgonAdapter.js +2 -2
- package/dist/adapters/ArgonAdapter.js.map +1 -1
- package/dist/adapters/BcryptAdapter.js +2 -2
- package/dist/adapters/BcryptAdapter.js.map +1 -1
- package/dist/adapters/ExpressRLAdapter.js +2 -2
- package/dist/adapters/ExpressRLAdapter.js.map +1 -1
- package/dist/adapters/ExpressValidatorAdapter.js +1 -1
- package/dist/adapters/ExpressValidatorAdapter.js.map +1 -1
- package/dist/adapters/GoogleAdapter.js +3 -3
- package/dist/adapters/GoogleAdapter.js.map +1 -1
- package/dist/adapters/JWTAdapter.js +2 -2
- package/dist/adapters/JWTAdapter.js.map +1 -1
- package/dist/adapters/RLFlexibleAdapter.js +2 -2
- package/dist/adapters/RLFlexibleAdapter.js.map +1 -1
- package/dist/adapters/SanitizeHtmlAdapter.js +3 -3
- package/dist/adapters/SanitizeHtmlAdapter.js.map +1 -1
- package/dist/adapters/XSSAdapter.js +3 -3
- package/dist/adapters/XSSAdapter.js.map +1 -1
- package/dist/adapters/ZodAdapter.js +1 -1
- package/dist/adapters/ZodAdapter.js.map +1 -1
- package/dist/core/HiSecure.d.ts.map +1 -1
- package/dist/core/HiSecure.js +9 -8
- package/dist/core/HiSecure.js.map +1 -1
- package/dist/core/config.d.ts.map +1 -1
- package/dist/core/config.js +0 -7
- package/dist/core/config.js.map +1 -1
- package/dist/core/constants.d.ts.map +1 -1
- package/dist/core/constants.js +0 -27
- package/dist/core/constants.js.map +1 -1
- package/dist/core/errors/AdapterError.js +1 -1
- package/dist/core/errors/AdapterError.js.map +1 -1
- package/dist/core/types/HiSecureConfig.d.ts.map +1 -1
- package/dist/core/types/HiSecureConfig.js.map +1 -1
- package/dist/core/types/SecureOptions.d.ts.map +1 -1
- package/dist/core/types/SecureOptions.js +0 -1
- package/dist/core/types/SecureOptions.js.map +1 -1
- package/dist/core/useSecure.d.ts.map +1 -1
- package/dist/core/useSecure.js +1 -1
- package/dist/core/useSecure.js.map +1 -1
- package/dist/managers/AuthManager.js +2 -2
- package/dist/managers/AuthManager.js.map +1 -1
- package/dist/managers/CorsManager.d.ts.map +1 -1
- package/dist/managers/CorsManager.js +2 -2
- package/dist/managers/CorsManager.js.map +1 -1
- package/dist/managers/HashManager.js +7 -7
- package/dist/managers/HashManager.js.map +1 -1
- package/dist/managers/JsonManager.js +4 -4
- package/dist/managers/JsonManager.js.map +1 -1
- package/dist/managers/RateLimitManager.js +5 -5
- package/dist/managers/RateLimitManager.js.map +1 -1
- package/dist/managers/SanitizerManager.js +5 -5
- package/dist/managers/SanitizerManager.js.map +1 -1
- package/dist/managers/ValidatorManager.js +2 -2
- package/dist/managers/ValidatorManager.js.map +1 -1
- package/dist/middlewares/errorHandler.js +3 -3
- package/dist/middlewares/errorHandler.js.map +1 -1
- package/package.json +1 -1
- package/readme.md +484 -113
- package/src/adapters/ArgonAdapter.ts +2 -2
- package/src/adapters/BcryptAdapter.ts +2 -2
- package/src/adapters/ExpressRLAdapter.ts +2 -2
- package/src/adapters/ExpressValidatorAdapter.ts +1 -1
- package/src/adapters/GoogleAdapter.ts +3 -3
- package/src/adapters/JWTAdapter.ts +2 -2
- package/src/adapters/RLFlexibleAdapter.ts +2 -2
- package/src/adapters/SanitizeHtmlAdapter.ts +3 -3
- package/src/adapters/XSSAdapter.ts +3 -3
- package/src/adapters/ZodAdapter.ts +1 -1
- package/src/core/HiSecure.ts +10 -8
- package/src/core/config.ts +0 -105
- package/src/core/constants.ts +0 -33
- package/src/core/errors/AdapterError.ts +1 -1
- package/src/core/types/HiSecureConfig.ts +0 -1
- package/src/core/types/SecureOptions.ts +0 -27
- package/src/core/useSecure.ts +1 -3
- package/src/managers/AuthManager.ts +2 -2
- package/src/managers/CorsManager.ts +2 -2
- package/src/managers/HashManager.ts +7 -7
- package/src/managers/JsonManager.ts +4 -4
- package/src/managers/RateLimitManager.ts +5 -5
- package/src/managers/SanitizerManager.ts +5 -5
- package/src/managers/ValidatorManager.ts +2 -2
- package/src/middlewares/errorHandler.ts +3 -3
|
@@ -23,13 +23,13 @@ export class SanitizerManager {
|
|
|
23
23
|
try {
|
|
24
24
|
return this.primary.sanitize(value, options);
|
|
25
25
|
} catch (err: any) {
|
|
26
|
-
logger.warn("
|
|
26
|
+
logger.warn("Primary sanitizer failed", { error: err?.message });
|
|
27
27
|
|
|
28
28
|
if (!this.fallback) {
|
|
29
29
|
throw new SanitizerError("Primary sanitizer failed and no fallback available.");
|
|
30
30
|
}
|
|
31
31
|
|
|
32
|
-
logger.info("
|
|
32
|
+
logger.info("Using fallback sanitizer");
|
|
33
33
|
return this.fallback.sanitize(value, options);
|
|
34
34
|
}
|
|
35
35
|
}
|
|
@@ -52,7 +52,7 @@ export class SanitizerManager {
|
|
|
52
52
|
}
|
|
53
53
|
|
|
54
54
|
fallbackTriggered = true;
|
|
55
|
-
logger.warn("
|
|
55
|
+
logger.warn("Switching to fallback sanitizer for this request");
|
|
56
56
|
return this.fallback.sanitize(value, options);
|
|
57
57
|
}
|
|
58
58
|
};
|
|
@@ -81,7 +81,7 @@ export class SanitizerManager {
|
|
|
81
81
|
|
|
82
82
|
req.sanitizedBody = sanitizedBody;
|
|
83
83
|
|
|
84
|
-
logger.debug("
|
|
84
|
+
logger.debug("Request body sanitized", {
|
|
85
85
|
originalKeys: Object.keys(originalBody),
|
|
86
86
|
sanitizedKeys: Object.keys(sanitizedBody),
|
|
87
87
|
usedFallback: fallbackTriggered
|
|
@@ -90,7 +90,7 @@ export class SanitizerManager {
|
|
|
90
90
|
|
|
91
91
|
next();
|
|
92
92
|
} catch (err: any) {
|
|
93
|
-
logger.error("
|
|
93
|
+
logger.error("Sanitizer middleware failed", {
|
|
94
94
|
error: err?.message
|
|
95
95
|
});
|
|
96
96
|
next(new SanitizerError("Sanitizer middleware failure"));
|
|
@@ -27,11 +27,11 @@ export class ValidatorManager {
|
|
|
27
27
|
let middleware;
|
|
28
28
|
|
|
29
29
|
if (isZod) {
|
|
30
|
-
logger.debug("
|
|
30
|
+
logger.debug("Using Zod adapter");
|
|
31
31
|
middleware = this.zodAdapter.validate(schema);
|
|
32
32
|
}
|
|
33
33
|
else if (isExpressValidator) {
|
|
34
|
-
logger.debug("
|
|
34
|
+
logger.debug(" Using express-validator adapter");
|
|
35
35
|
middleware = this.expressAdapter.validate(schema);
|
|
36
36
|
}
|
|
37
37
|
else {
|
|
@@ -24,7 +24,7 @@ export function errorHandler(
|
|
|
24
24
|
: undefined;
|
|
25
25
|
|
|
26
26
|
|
|
27
|
-
logger.error("
|
|
27
|
+
logger.error("HiSecure Error", {
|
|
28
28
|
type: err?.name || "UnknownError",
|
|
29
29
|
message,
|
|
30
30
|
status: err?.status,
|
|
@@ -63,7 +63,7 @@ export function errorHandler(
|
|
|
63
63
|
});
|
|
64
64
|
}
|
|
65
65
|
|
|
66
|
-
// 4. Adapter Errors
|
|
66
|
+
// 4. Adapter Errors - hashing, rate-limit, sanitizer, validator
|
|
67
67
|
if (err instanceof AdapterError) {
|
|
68
68
|
return res.status(500).json({
|
|
69
69
|
success: false,
|
|
@@ -81,7 +81,7 @@ export function errorHandler(
|
|
|
81
81
|
});
|
|
82
82
|
}
|
|
83
83
|
|
|
84
|
-
// 6. Fallback
|
|
84
|
+
// 6. Fallback - Unexpected
|
|
85
85
|
return res.status(500).json({
|
|
86
86
|
success: false,
|
|
87
87
|
error: "INTERNAL_SERVER_ERROR",
|