hi-secure 1.0.16 → 1.0.18

package/src/adapters/ArgonAdapter.ts

@@ -1,48 +1,3 @@
-// import argon2 from "argon2";
-// import { AdapterError } from "../core/errors/AdapterError";
-// import { logger } from "../logging";
-
-// export class ArgonAdapter {
-//     private options: argon2.Options | undefined;
-
-//     constructor(options?: argon2.Options) {
-//         if (options) {
-//             this.options = options;
-//         }
-//     }
-
-//     async hash(value: string): Promise<string> {
-//         try {
-//             return this.options
-//                 ? await argon2.hash(value, this.options)
-//                 : await argon2.hash(value);
-//         } catch (err: any) {
-//             logger.error("Argon2 hashing failed", {
-//                 error: err?.message || err
-//             });
-//             throw new AdapterError("Argon2 hashing failed.");
-//         }
-//     }
-
-//     async verify(value: string, hashed: string): Promise<boolean> {
-//         try {
-//             if (!hashed || typeof hashed !== "string") {
-//                 throw new AdapterError("Invalid hash provided for verification.");
-//             }
-
-//             return await argon2.verify(hashed, value);
-//         } catch (err: any) {
-//             logger.error("Argon2 verify failed", {
-//                 error: err?.message || err
-//             });
-//             throw new AdapterError("Argon2 verify failed.");
-//         }
-//     }
-// }
-
-
-
-
 import argon2 from "argon2";
 import { AdapterError } from "../core/errors/AdapterError";
 import { logger } from "../logging";

package/src/adapters/BcryptAdapter.ts

@@ -1,52 +1,3 @@
-// import bcrypt from "bcryptjs";
-// import { AdapterError } from "../core/errors/AdapterError";
-// import { logger } from "../logging";
-
-// export class BcryptAdapter {
-//     constructor(private saltRounds: number = 10) {}
-
-//     async hash(value: string): Promise<string> {
-//         try {
-//             if (typeof value !== "string") {
-//                 throw new AdapterError("Value to hash must be a string.");
-//             }
-
-//             return await bcrypt.hash(value, this.saltRounds);
-//         } catch (err: any) {
-//             logger.error("Bcrypt hashing failed", {
-//                 error: err?.message || err,
-//                 saltRounds: this.saltRounds
-//             });
-
-//             throw new AdapterError("Bcrypt hashing failed.");
-//         }
-//     }
-
-//     async verify(value: string, hashed: string): Promise<boolean> {
-//         try {
-//             if (typeof value !== "string") {
-//                 throw new AdapterError("Value to verify must be a string.");
-//             }
-
-//             if (!hashed || typeof hashed !== "string") {
-//                 throw new AdapterError("Invalid hashed string provided.");
-//             }
-
-//             return await bcrypt.compare(value, hashed);
-//         } catch (err: any) {
-//             logger.error("Bcrypt verify failed", {
-//                 error: err?.message || err
-//             });
-
-//             throw new AdapterError("Bcrypt verify failed.");
-//         }
-//     }
-// }
-
-
-
-
-
 import bcrypt from "bcryptjs";
 import { AdapterError } from "../core/errors/AdapterError";
 import { logger } from "../logging";

package/src/adapters/ExpressRLAdapter.ts

@@ -1,51 +1,3 @@
-// import rateLimit from "express-rate-limit";
-// import { logger } from "../logging/index.js";
-// import { AdapterError } from "../core/errors/AdapterError.js";
-
-// export interface RateLimitOptions {
-//     windowMs?: number;
-//     max?: number;
-//     message?: any;
-//     skipFailedRequests?: boolean;
-//     standardHeaders?: boolean;
-//     legacyHeaders?: boolean;
-//     [key: string]: any;
-// }
-
-// export class ExpressRLAdapter {
-//     getMiddleware(options: RateLimitOptions = {}) {
-//         try {
-//             const defaultOptions = {
-//                 windowMs: 15 * 60 * 1000, 
-//                 max: 100,
-//                 message: { error: "Too many requests" },
-//                 standardHeaders: true,
-//                 legacyHeaders: false,
-//                 skipFailedRequests: false
-//             };
-
-//             const finalOptions = { ...defaultOptions, ...options };
-            
-//             const limiter = rateLimit(finalOptions);
-            
-//             logger.debug("Express rate limiter configured", {
-//                 windowMs: finalOptions.windowMs,
-//                 max: finalOptions.max
-//             });
-
-//             return limiter;
-
-//         } catch (err: any) {
-//             logger.error("ExpressRLAdapter: failed to create limiter", {
-//                 error: err?.message || err
-//             });
-//             throw new AdapterError("Express rate limiter creation failed.");
-//         }
-//     }
-// }
-
-
-
 import rateLimit from "express-rate-limit";
 import { logger } from "../logging";
 import { AdapterError } from "../core/errors/AdapterError";

package/src/adapters/ExpressValidatorAdapter.ts

@@ -1,53 +1,3 @@
-// import { validationResult } from "express-validator";
-// import { ValidationError } from "../core/errors/ValidationError.js"; 
-// import { logger } from "../logging/index.js";
-
-// export class ExpressValidatorAdapter {
-//     private globalSchema?: any[];
-
-//     constructor(globalSchema?: any[]) {
-//         this.globalSchema = globalSchema;
-//     }
-
-//     validate(dynamicSchema?: any[]) {
-//         const schema = dynamicSchema || this.globalSchema;
-
-//         if (!schema || !Array.isArray(schema)) {
-//             return (req: any, res: any, next: any) => next();
-//         }
-
-//         return [
-//             ...schema,
-
-//             (req: any, res: any, next: any) => {
-//                 const errors = validationResult(req);
-
-//                 if (!errors.isEmpty()) {
-//                     const formatted = errors.array().map(err => ({
-//                         message: err.msg,
-//                         // param: err.param ,
-//                         // location: err.location
-//                     }));
-
-//                     logger.warn("express-validator failed", {
-//                         path: req.path,
-//                         method: req.method,
-//                         errors: formatted,
-//                         preview: JSON.stringify(req.body).slice(0, 200)
-//                     });
-
-//                     return next(new ValidationError("Validation failed.", formatted as any));
-//                 }
-
-//                 next();
-//             }
-//         ];
-//     }
-// }
-
-
-
-
 import { validationResult } from "express-validator";
 import { ValidationError } from "../core/errors/ValidationError";
 import { logger } from "../logging";

package/src/adapters/GoogleAdapter.ts

@@ -1,85 +1,3 @@
-// import { OAuth2Client, LoginTicket } from "google-auth-library";
-// import { AdapterError } from "../core/errors/AdapterError.js";
-
-// import {logger} from '../logging';
-
-// export interface GoogleTokenPayload {
-//     sub: string;
-//     email: string;
-//     email_verified: boolean;
-//     name?: string;
-//     picture?: string;
-//     [key: string]: any;
-// }
-
-// export class GoogleAdapter {
-//     private client: OAuth2Client;
-//     private clientId?: string;
-
-//     constructor(clientId?: string) {
-//         if (clientId && clientId.trim().length === 0) {
-//             throw new AdapterError("Google clientId cannot be empty string");
-//         }
-        
-//         this.client = new OAuth2Client(clientId);
-//         this.clientId = clientId;
-//     }
-
-//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {
-//         try {
-//             if (!idToken || typeof idToken !== 'string') {
-//                 throw new AdapterError("Invalid ID token provided");
-//             }
-
-//             const options: { idToken: string; audience?: string | string[] } = { 
-//                 idToken 
-//             };
-
-//             // audience only if clientId is provided and not empty
-//             if (this.clientId && this.clientId.trim().length > 0) {
-//                 options.audience = this.clientId;
-//             }
-
-//             const ticket: LoginTicket = await this.client.verifyIdToken(options);
-//             const payload = ticket.getPayload();
-            
-//             if (!payload) {
-//                 logger.warn("GoogleAdapter: Empty payload");
-//                 throw new AdapterError("Invalid Google ID token payload.");
-//             }
-
-//             // result object
-//             const result: GoogleTokenPayload = {
-//                 sub: payload.sub,
-//                 email: payload.email || '',
-//                 email_verified: payload.email_verified || false,
-//                 name: payload.name,
-//                 picture: payload.picture
-//             };
-
-//             // remaining properties from payload 
-//             const { sub, email, email_verified, name, picture, ...rest } = payload;
-//             Object.assign(result, rest);
-
-//             return result;
-
-//         } catch (err: any) {
-//             logger.error("GoogleAdapter.verifyIdToken failed", { 
-//                 error: err?.message,
-//                 hasClientId: !!this.clientId 
-//             });
-            
-//             if (err.message?.includes('audience')) {
-//                 throw new AdapterError("Invalid Google client ID configured.");
-//             }
-            
-//             throw new AdapterError(err?.message || "Google token verification failed");
-//         }
-//     }
-// }
-
-
-
 import { OAuth2Client, LoginTicket } from "google-auth-library";
 import { AdapterError } from "../core/errors/AdapterError";
 import { logger } from "../logging";

package/src/adapters/JWTAdapter.ts

@@ -1,99 +1,3 @@
-// import jwt from "jsonwebtoken";
-// import { randomUUID } from "crypto"; 
-// import { AdapterError } from "../core/errors/AdapterError.js";
-// import { logError } from "../logging/index.js";
-// import { logger } from "../logging";
-
-// export interface JWTAdapterOptions {
-//     secret: string;
-//     expiresIn?: string | number;
-//     algorithm?: jwt.Algorithm;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-
-// export interface SignOptions {
-//     expiresIn?: string | number;
-//     jti?: string; 
-//     subject?: string;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-
-// export class JWTAdapter {
-//     private secret: string;
-//     private expiresIn?: string | number;
-//     private algorithm: jwt.Algorithm;
-//     private issuer?: string;
-//     private audience?: string | string[];
-
-//     constructor(options: JWTAdapterOptions) {
-//         if (!options.secret) {
-//             throw new AdapterError("JWT secret is required");
-//         }
-
-//         if (options.secret.length < 32) {
-//             logger.warn("JWT secret shorter than 32 chars. Consider using stronger secret.");
-//             // logError("JWT secret is too short (minimum 32 characters recommended)");
-//         }
-
-//         this.secret = options.secret;
-//         this.expiresIn = options.expiresIn;
-//         this.algorithm = options.algorithm || 'HS256'; // Default algorithm 
-//         this.issuer = options.issuer;
-//         this.audience = options.audience;
-//     }
-
-//     sign(payload: object, options?: SignOptions) {
-//         try {
-//             const jwtOptions: jwt.SignOptions = {
-//                 algorithm: this.algorithm,
-//                 issuer: options?.issuer || this.issuer,
-//                 audience: options?.audience || this.audience,
-//                 jwtid: options?.jti || randomUUID(), 
-//                 subject: options?.subject
-//             };
-
-//             if (options?.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = options.expiresIn as number;
-//             } else if (this.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = this.expiresIn as number;
-//             }
-
-//             return jwt.sign(payload, this.secret, jwtOptions);
-
-//         } catch (err: any) {
-//             logError("JWTAdapter.sign failed", { error: err?.message });
-//             throw new AdapterError(err?.message || "JWT sign failed");
-//         }
-//     }
-
-//     verify(token: string, options?: { audience?: string | string[] }) {
-//         try {
-//             const verifyOptions: jwt.VerifyOptions = {
-//                 algorithms: [this.algorithm],
-//                 issuer: this.issuer,
-//                 audience: options?.audience as string || this.audience as string
-//             };
-
-//             return jwt.verify(token, this.secret, verifyOptions);
-//         } catch (err: any) {
-//             logError("JWTAdapter.verify failed", { error: err?.message });
-            
-           
-//             if (err.name === 'TokenExpiredError') {
-//                 throw new AdapterError("JWT token has expired");
-//             }
-//             if (err.name === 'JsonWebTokenError') {
-//                 throw new AdapterError("Invalid JWT token");
-//             }
-            
-//             throw new AdapterError(err?.message || "JWT verification failed");
-//         }
-//     }
-// }
-
-
 import jwt from "jsonwebtoken";
 import { randomUUID } from "crypto";
 import { AdapterError } from "../core/errors/AdapterError";

package/src/adapters/RLFlexibleAdapter.ts

@@ -1,85 +1,3 @@
-// import { RateLimiterMemory, RateLimiterRes } from "rate-limiter-flexible";
-// import { logger } from "../logging/index.js";
-// import { AdapterError } from "../core/errors/AdapterError.js";
-
-// export interface RLOptions {
-//     points?: number;
-//     duration?: number; 
-//     message?: any;
-//     blockDuration?: number;
-// }
-
-// export class RLFlexibleAdapter {
-//     getMiddleware(options: RLOptions = {}) {
-//         try {
-//             const defaultOptions = {
-//                 points: 100,
-//                 duration: 60,
-//                 message: "Too many requests, slow down.",
-//                 blockDuration: 0
-//             };
-
-//             const finalOptions = { ...defaultOptions, ...options };
-
-//             const limiter = new RateLimiterMemory({
-//                 points: finalOptions.points,
-//                 duration: finalOptions.duration,
-//                 blockDuration: finalOptions.blockDuration
-//             });
-
-//             return async (req: any, res: any, next: any) => {
-               
-//                 const ip = this.extractIP(req);
-
-//                 try {
-//                     await limiter.consume(ip);
-//                     next();
-//                 } catch (err: any) {
-//                     const rlErr = err as RateLimiterRes;
-
-//                     logger.warn("RLFlexibleAdapter: rate limit exceeded", {
-//                         ip,
-//                         path: req.path,
-//                         method: req.method,
-//                         retryAfter: rlErr.msBeforeNext
-//                     });
-
-//                     res.setHeader('Retry-After', Math.ceil(rlErr.msBeforeNext / 1000));
-                    
-//                     return res.status(429).json({
-//                         success: false,
-//                         error: "RATE_LIMIT_EXCEEDED",
-//                         retryAfter: Math.ceil(rlErr.msBeforeNext / 1000),
-//                         message: finalOptions.message
-//                     });
-//                 }
-//             };
-
-//         } catch (err: any) {
-//             logger.error("RLFlexibleAdapter: failed to initialize limiter", {
-//                 error: err?.message || err
-//             });
-//             throw new AdapterError("RateLimiterFlexible creation failed.");
-//         }
-//     }
-
-//     private extractIP(req: any): string {
-//         return (
-//             req.headers['x-real-ip'] ||
-//             req.headers['x-forwarded-for']?.split(',')[0]?.trim() ||
-//             req.ip ||
-//             req.connection?.remoteAddress ||
-//             req.socket?.remoteAddress ||
-//             'unknown'
-//         );
-//     }
-// }
-
-
-
-
-
-
 import { RateLimiterMemory, RateLimiterRes } from "rate-limiter-flexible";
 import { logger } from "../logging";
 import { AdapterError } from "../core/errors/AdapterError";

package/src/adapters/SanitizeHtmlAdapter.ts

@@ -1,86 +1,3 @@
-// import sanitizeHtml from "sanitize-html";
-// import { AdapterError } from "../core/errors/AdapterError.js";
-// import { logger } from "../logging/index.js";
-
-// export class SanitizeHtmlAdapter {
-//     private globalOptions: sanitizeHtml.IOptions;
-
-//     constructor(options: sanitizeHtml.IOptions = {}) {
-//         this.globalOptions = options;
-//     }
-
-//     sanitize(input: string, dynamicOptions?: any): string {
-//         try {
-//             const opts = { ...this.globalOptions, ...(dynamicOptions || {}) };
-
-//             const clean = sanitizeHtml(input, opts);
-//             return typeof clean === "string" ? clean : String(clean);
-
-//         } catch (err: any) {
-//             logger.error("sanitize-html failed", {
-//                 error: err?.message || err,
-//                 preview: typeof input === "string" ? input.slice(0, 100) : undefined
-//             });
-
-//             throw new AdapterError("sanitize-html adapter failed.");
-//         }
-//     }
-
-//     // Deep Sanitization - Recursively 
-//     private deepSanitize(obj: any, dynamicOptions?: any, visited = new WeakSet()): any {
-        
-//         if (obj && typeof obj === "object") {
-//             if (visited.has(obj)) {
-//                 return obj; 
-//             }
-//             visited.add(obj);
-//         }
-
-//         if (typeof obj === "string") {
-//             return this.sanitize(obj, dynamicOptions);
-//         }
-
-//         if (Array.isArray(obj)) {
-//             return obj.map((item) => this.deepSanitize(item, dynamicOptions, visited));
-//         }
-
-//         if (obj && typeof obj === "object") {
-//             const result: any = {};
-//             for (const key of Object.keys(obj)) {
-//                 result[key] = this.deepSanitize(obj[key], dynamicOptions, visited);
-//             }
-//             return result;
-//         }
-
-//         return obj;
-//     }
-
-//     middleware(dynamicOptions?: any) {
-//         return (req: any, _res: any, next: any) => {
-//             try {
-//                 if (req.body) {
-//                     req.body = this.deepSanitize(req.body, dynamicOptions);
-
-//                     logger.debug("sanitize-html applied", {
-//                         keys: Object.keys(req.body)
-//                     });
-//                 }
-//                 next();
-
-//             } catch (err: any) {
-//                 logger.error("sanitize-html middleware failed", {
-//                     error: err?.message || err
-//                 });
-//                 next(err);
-//             }
-//         };
-//     }
-// }
-
-
-
-
-
 import sanitizeHtml from "sanitize-html";
 import { AdapterError } from "../core/errors/AdapterError";
 import { logger } from "../logging";
@@ -148,7 +65,7 @@ export class SanitizeHtmlAdapter {
                 if (req.body) {
                     req.body = this.deepSanitize(req.body, dynamicOptions);
 
-                    // ✅ visible + safe info log
+                    
                     logger.info("HTML sanitization applied", {
                         adapter: "sanitize-html",
                         operation: "middleware",