hi-secure 1.0.2 → 1.0.3

package/dist/middlewares/errorHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middlewares/errorHandler.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,uCAAuC;AACvC,8DAA8D;AAC9D,oEAAoE;AACpE,kEAAkE;AAClE,gEAAgE;;AAuKhE,oCA4FC;AApGD,wCAAoC;AAEpC,oEAA8D;AAC9D,0EAAoE;AACpE,wEAAkE;AAClE,sEAAgE;AAChE,gEAAyD;AAEzD,SAAgB,YAAY,CACxB,GAAQ,EACR,GAAY,EACZ,GAAa,EACb,KAAmB;IAEnB,MAAM,OAAO,GACT,OAAO,GAAG,KAAK,QAAQ;QACnB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,GAAG,EAAE,OAAO,IAAI,eAAe,CAAC;IAE1C,MAAM,KAAK,GACP,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK;QAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEpB,kBAAkB;IAClB,gBAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;QAC7B,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,cAAc;QACjC,OAAO;QACP,MAAM,EAAE,GAAG,EAAE,MAAM;QACnB,IAAI,EAAE,GAAG,EAAE,IAAI;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;QACL,GAAG,EAAE,GAAG;KACX,CAAC,CAAC;IAEH,sDAAsD;IACtD,kCAAkC;IAClC,sDAAsD;IACtD,IAAI,GAAG,YAAY,yBAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;SACpC,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uBAAuB;IACvB,sDAAsD;IACtD,IAAI,GAAG,YAAY,oCAAe,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kBAAkB;YACzB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,sBAAsB;IACtB,sDAAsD;IACtD,IAAI,GAAG,YAAY,kCAAc,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB;YACxB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,oEAAoE;IACpE,sDAAsD;IACtD,IAAI,GAAG,YAAY,8BAAY,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,eAAe;YACtB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uDAAuD;IACvD,sDAAsD;IACtD,IAAI,GAAG,YAAY,gCAAa,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gBAAgB;YACvB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,2BAA2B;IAC3B,sDAAsD;IACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACxB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,2CAA2C;KACvD,CAAC,CAAC;AACP,CAAC","sourcesContent":["// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\n\r\n// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\";\r\nimport { SanitizerError } from \"../core/errors/SanitizerError.js\";\r\nimport { SecurityError } from \"../core/errors/SecurityError.js\";\r\nimport { HttpError } from \"../core/errors/HttpErrror.js\";\r\n\r\nexport function errorHandler(\r\n    err: any,\r\n    req: Request,\r\n    res: Response,\r\n    _next: NextFunction\r\n) {\r\n    const message =\r\n        typeof err === \"string\"\r\n            ? err\r\n            : err?.message || \"Unknown error\";\r\n\r\n    const stack =\r\n        err instanceof Error && err.stack\r\n            ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n            : undefined;\r\n\r\n    // Unified logging\r\n    logger.error(\"❌ HiSecure Error\", {\r\n        type: err?.name || \"UnknownError\",\r\n        message,\r\n        status: err?.status,\r\n        code: err?.code,\r\n        path: req.path,\r\n        method: req.method,\r\n        stack,\r\n        raw: err,\r\n    });\r\n\r\n    // ---------------------------------------------------\r\n    // 1. HttpError (developer thrown)\r\n    // ---------------------------------------------------\r\n    if (err instanceof HttpError) {\r\n        return res.status(err.status).json({\r\n            success: false,\r\n            error: err.code,\r\n            message: err.message,\r\n            details: err.details || undefined,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 2. Validation Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof ValidationError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"VALIDATION_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 3. Sanitizer Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof SanitizerError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"SANITIZER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 4. Adapter Errors (hashing, rate-limit, sanitizer, validator ...)\r\n    // ---------------------------------------------------\r\n    if (err instanceof AdapterError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"ADAPTER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 5. Security Errors (internal library security logic)\r\n    // ---------------------------------------------------\r\n    if (err instanceof SecurityError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"SECURITY_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 6. Fallback → Unexpected\r\n    // ---------------------------------------------------\r\n    return res.status(500).json({\r\n        success: false,\r\n        error: \"INTERNAL_SERVER_ERROR\",\r\n        message: \"An unexpected error occurred in HiSecure.\",\r\n    });\r\n}\r\n"]}
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middlewares/errorHandler.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,uCAAuC;AACvC,8DAA8D;AAC9D,oEAAoE;AACpE,kEAAkE;AAClE,gEAAgE;;AAuKhE,oCA4FC;AApGD,wCAAoC;AAEpC,oEAA8D;AAC9D,0EAAoE;AACpE,wEAAkE;AAClE,sEAAgE;AAChE,8DAAwD;AAExD,SAAgB,YAAY,CACxB,GAAQ,EACR,GAAY,EACZ,GAAa,EACb,KAAmB;IAEnB,MAAM,OAAO,GACT,OAAO,GAAG,KAAK,QAAQ;QACnB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,GAAG,EAAE,OAAO,IAAI,eAAe,CAAC;IAE1C,MAAM,KAAK,GACP,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK;QAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEpB,kBAAkB;IAClB,gBAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;QAC7B,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,cAAc;QACjC,OAAO;QACP,MAAM,EAAE,GAAG,EAAE,MAAM;QACnB,IAAI,EAAE,GAAG,EAAE,IAAI;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;QACL,GAAG,EAAE,GAAG;KACX,CAAC,CAAC;IAEH,sDAAsD;IACtD,kCAAkC;IAClC,sDAAsD;IACtD,IAAI,GAAG,YAAY,wBAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;SACpC,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uBAAuB;IACvB,sDAAsD;IACtD,IAAI,GAAG,YAAY,oCAAe,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kBAAkB;YACzB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,sBAAsB;IACtB,sDAAsD;IACtD,IAAI,GAAG,YAAY,kCAAc,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB;YACxB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,oEAAoE;IACpE,sDAAsD;IACtD,IAAI,GAAG,YAAY,8BAAY,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,eAAe;YACtB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uDAAuD;IACvD,sDAAsD;IACtD,IAAI,GAAG,YAAY,gCAAa,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gBAAgB;YACvB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,2BAA2B;IAC3B,sDAAsD;IACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACxB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,2CAA2C;KACvD,CAAC,CAAC;AACP,CAAC","sourcesContent":["// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\n\r\n// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\";\r\nimport { SanitizerError } from \"../core/errors/SanitizerError.js\";\r\nimport { SecurityError } from \"../core/errors/SecurityError.js\";\r\nimport { HttpError } from \"../core/errors/HttpError.js\";\r\n\r\nexport function errorHandler(\r\n    err: any,\r\n    req: Request,\r\n    res: Response,\r\n    _next: NextFunction\r\n) {\r\n    const message =\r\n        typeof err === \"string\"\r\n            ? err\r\n            : err?.message || \"Unknown error\";\r\n\r\n    const stack =\r\n        err instanceof Error && err.stack\r\n            ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n            : undefined;\r\n\r\n    // Unified logging\r\n    logger.error(\"❌ HiSecure Error\", {\r\n        type: err?.name || \"UnknownError\",\r\n        message,\r\n        status: err?.status,\r\n        code: err?.code,\r\n        path: req.path,\r\n        method: req.method,\r\n        stack,\r\n        raw: err,\r\n    });\r\n\r\n    // ---------------------------------------------------\r\n    // 1. HttpError (developer thrown)\r\n    // ---------------------------------------------------\r\n    if (err instanceof HttpError) {\r\n        return res.status(err.status).json({\r\n            success: false,\r\n            error: err.code,\r\n            message: err.message,\r\n            details: err.details || undefined,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 2. Validation Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof ValidationError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"VALIDATION_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 3. Sanitizer Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof SanitizerError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"SANITIZER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 4. Adapter Errors (hashing, rate-limit, sanitizer, validator ...)\r\n    // ---------------------------------------------------\r\n    if (err instanceof AdapterError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"ADAPTER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 5. Security Errors (internal library security logic)\r\n    // ---------------------------------------------------\r\n    if (err instanceof SecurityError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"SECURITY_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 6. Fallback → Unexpected\r\n    // ---------------------------------------------------\r\n    return res.status(500).json({\r\n        success: false,\r\n        error: \"INTERNAL_SERVER_ERROR\",\r\n        message: \"An unexpected error occurred in HiSecure.\",\r\n    });\r\n}\r\n"]}

package/dist/utils/normalizeOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalizeOptions.d.ts","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":"AAqHA,OAAO,EACH,aAAa,EACO,aAAa;AACjC,gBAAgB,EAAI,eAAe;AACnC,eAAe,EAClB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzF,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IAC1D,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChE,WAAW,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,iBAAiB,CA6CjF;AAqDD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAgCvF"}
+{"version":3,"file":"normalizeOptions.d.ts","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":"AAqHA,OAAO,EACH,aAAa,EACO,aAAa;AACjC,gBAAgB,EAAI,eAAe;AACnC,eAAe,EAClB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzF,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IAC1D,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChE,WAAW,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,iBAAiB,CAmDjF;AA8DD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAgCvF"}

package/dist/utils/normalizeOptions.js

@@ -26,9 +26,13 @@ function normalizeOptions(input) {
             enabled: opts.sanitize === undefined ? true : opts.sanitize !== false,
             options: typeof opts.sanitize === "object" ? opts.sanitize : undefined
         },
+        // validate: {
+        //     enabled: !!opts.validate,
+        //     schema: opts.validate || undefined
+        // },
         validate: {
-            enabled: !!opts.validate,
-            schema: opts.validate || undefined
+            enabled: opts.validate !== undefined,
+            schema: opts.validate
         },
         json: {
             enabled: opts.json === undefined ? true : opts.json !== false,
@@ -70,10 +74,16 @@ function normalizeRateLimit(value) {
     return { enabled: true };
 }
 function normalizeAuth(value) {
-    if (value === false) {
+    // if (value === false) {
+    //     return { enabled: false, required: false };
+    // }
+    // if (value === true || value === undefined) {
+    //     return { enabled: true, required: true };
+    // }
+    if (value === undefined) {
         return { enabled: false, required: false };
     }
-    if (value === true || value === undefined) {
+    if (value === true) {
         return { enabled: true, required: true };
     }
     const authOptions = value;

package/dist/utils/normalizeOptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"normalizeOptions.js","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":";AACA,kEAAkE;;AAqIlE,4CA6CC;AAqDD,4CAgCC;AAlID,SAAgB,gBAAgB,CAAC,KAA6B;IAC1D,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAClC,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IAEzB,OAAO;QACH,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE7C,QAAQ,EAAE;YACN,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK;YACrE,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACzE;QAED,QAAQ,EAAE;YACN,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;SACrC;QAED,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAE9B,WAAW,EAAE;YACT,OAAO,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK;YAC3E,OAAO,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC/E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiC;IACzD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE/C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvC,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;SACzC,CAAC;IACN,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAyB,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAClE,OAAO;SACV,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAA4B;IAC/C,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAG,KAAoB,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC;IAE/C,OAAO;QACH,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC;AACN,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAmC;IAChE,MAAM,OAAO,GAAG;QACZ,GAAG,EAAE;YACD,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAkB,EAAE;YACtD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE;YAC/E,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAiB,EAAE;YACrD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;KACJ,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;AAC1C,CAAC","sourcesContent":["\r\n// import { SecureOptions } from \"../core/types/SecureOptions.js\";\r\n\r\n// export interface NormalizedOptions {\r\n//     cors: { enabled: boolean; options?: any };\r\n//     rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\" | undefined; options?: any };\r\n//     sanitize: { enabled: boolean };\r\n//     validate: { enabled: boolean; schema?: any };\r\n//     json: { enabled: boolean; options?: any };\r\n\r\n//     /** NEW */\r\n//     auth: { enabled: boolean; required: boolean };\r\n// }\r\n\r\n// export function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n//     if (input === false) {\r\n//         return {\r\n//             cors: { enabled: false },\r\n//             rateLimit: { enabled: false, mode: undefined, options: undefined },\r\n//             sanitize: { enabled: false },\r\n//             validate: { enabled: false },\r\n//             json: { enabled: false },\r\n//             auth: { enabled: false, required: true }\r\n//         };\r\n//     }\r\n\r\n//     const opts = input || {};\r\n\r\n//     return {\r\n//         cors: {\r\n//             enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n//             options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n//         },\r\n\r\n//         rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n//         sanitize: {\r\n//             enabled: opts.sanitize === undefined ? true : opts.sanitize !== false\r\n//         },\r\n\r\n//         validate: {\r\n//             enabled: !!opts.validate,\r\n//             schema: opts.validate || undefined\r\n//         },\r\n\r\n//         json: {\r\n//             enabled: opts.json === undefined ? true : opts.json !== false,\r\n//             options: typeof opts.json === \"object\" ? opts.json : undefined\r\n//         },\r\n\r\n//         auth: normalizeAuth(opts.auth)\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // RATE LIMIT — EXACT TYPES, NO TS ERROR\r\n// // ---------------------------------------------------------------\r\n// function normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): {\r\n//     enabled: boolean;\r\n//     mode?: \"strict\" | \"relaxed\" | undefined;\r\n//     options?: any;\r\n// } {\r\n//     if (value === false) {\r\n//         return { enabled: false, mode: undefined, options: undefined };\r\n//     }\r\n\r\n//     if (value === \"strict\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"strict\",\r\n//             options: { max: 5, windowMs: 10000 }\r\n//         };\r\n//     }\r\n\r\n//     if (value === \"relaxed\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"relaxed\",\r\n//             options: { max: 100, windowMs: 60000 }\r\n//         };\r\n//     }\r\n\r\n//     if (typeof value === \"object\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: undefined,   // VERY IMPORTANT!\r\n//             options: value\r\n//         };\r\n//     }\r\n\r\n//     // Default → enabled and optional fields omitted\r\n//     return {\r\n//         enabled: true,\r\n//         mode: undefined,\r\n//         options: undefined\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // AUTH NORMALIZER — EXACT FOR useSecure\r\n// // ---------------------------------------------------------------\r\n// function normalizeAuth(value: SecureOptions[\"auth\"]) {\r\n//     if (value === false) return { enabled: false, required: true };\r\n\r\n//     if (value === true || value === undefined)\r\n//         return { enabled: true, required: true };\r\n\r\n//     return {\r\n//         enabled: true,\r\n//         required: value.required !== false\r\n//     };\r\n// }\r\n\r\n\r\n\r\n\r\n// src/utils/normalizeOptions.ts\r\nimport { \r\n    SecureOptions,\r\n    AuthOptions,        // ✅ ADD THIS\r\n    RateLimitOptions,   // ✅ ADD THIS  \r\n    SanitizeOptions     // ✅ ADD THIS\r\n} from \"../core/types/SecureOptions.js\";\r\n\r\nexport interface NormalizedOptions {\r\n    cors: { enabled: boolean; options?: object };\r\n    rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\"; options?: RateLimitOptions };\r\n    sanitize: { enabled: boolean; options?: SanitizeOptions };\r\n    validate: { enabled: boolean; schema?: any };\r\n    json: { enabled: boolean; options?: object };\r\n    auth: { enabled: boolean; required: boolean; roles?: string[] };\r\n    compression: { enabled: boolean; options?: object };\r\n}\r\n\r\nexport function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n    if (input === false) {\r\n        return {\r\n            cors: { enabled: false },\r\n            rateLimit: { enabled: false },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: false },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: false }\r\n        };\r\n    }\r\n\r\n    const opts = input || {};\r\n\r\n    return {\r\n        cors: {\r\n            enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n            options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n        },\r\n\r\n        rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n        sanitize: {\r\n            enabled: opts.sanitize === undefined ? true : opts.sanitize !== false,\r\n            options: typeof opts.sanitize === \"object\" ? opts.sanitize : undefined\r\n        },\r\n\r\n        validate: {\r\n            enabled: !!opts.validate,\r\n            schema: opts.validate || undefined\r\n        },\r\n\r\n        json: {\r\n            enabled: opts.json === undefined ? true : opts.json !== false,\r\n            options: typeof opts.json === \"object\" ? opts.json : undefined\r\n        },\r\n\r\n        auth: normalizeAuth(opts.auth),\r\n\r\n        compression: {\r\n            enabled: opts.compression === undefined ? true : opts.compression !== false,\r\n            options: typeof opts.compression === \"object\" ? opts.compression : undefined\r\n        }\r\n    };\r\n}\r\n\r\nfunction normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): NormalizedOptions[\"rateLimit\"] {\r\n    if (value === false) return { enabled: false };\r\n    \r\n    if (value === \"strict\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"strict\",\r\n            options: { max: 5, windowMs: 10000 }\r\n        };\r\n    }\r\n    \r\n    if (value === \"relaxed\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"relaxed\",\r\n            options: { max: 100, windowMs: 60000 }\r\n        };\r\n    }\r\n    \r\n    if (typeof value === \"object\") {\r\n        const val = value as RateLimitOptions;\r\n        const { mode, ...options } = val;\r\n        return {\r\n            enabled: true,\r\n            mode: (mode === \"strict\" || mode === \"relaxed\") ? mode : undefined,\r\n            options\r\n        };\r\n    }\r\n    \r\n    return { enabled: true };\r\n}\r\n\r\nfunction normalizeAuth(value: SecureOptions[\"auth\"]): NormalizedOptions[\"auth\"] {\r\n    if (value === false) {\r\n        return { enabled: false, required: false };\r\n    }\r\n    \r\n    if (value === true || value === undefined) {\r\n        return { enabled: true, required: true };\r\n    }\r\n    \r\n    const authOptions = value as AuthOptions;\r\n    const enabled = authOptions.required !== false;\r\n    \r\n    return {\r\n        enabled,\r\n        required: enabled,\r\n        roles: authOptions.roles\r\n    };\r\n}\r\n\r\nexport function getPresetOptions(preset: 'api' | 'strict' | 'public'): NormalizedOptions {\r\n    const presets = {\r\n        api: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true, mode: 'relaxed' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        },\r\n        strict: {\r\n            cors: { enabled: true, options: { origin: process.env.ALLOWED_ORIGIN || '*' } },\r\n            rateLimit: { enabled: true, mode: 'strict' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: true },\r\n            json: { enabled: true },\r\n            auth: { enabled: true, required: true },\r\n            compression: { enabled: true }\r\n        },\r\n        public: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        }\r\n    };\r\n    \r\n    return presets[preset] || presets.api;\r\n}"]}
+{"version":3,"file":"normalizeOptions.js","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":";AACA,kEAAkE;;AAqIlE,4CAmDC;AA8DD,4CAgCC;AAjJD,SAAgB,gBAAgB,CAAC,KAA6B;IAC1D,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAClC,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IAEzB,OAAO;QACH,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE7C,QAAQ,EAAE;YACN,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK;YACrE,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACzE;QAED,cAAc;QACd,gCAAgC;QAChC,yCAAyC;QACzC,KAAK;QAEL,QAAQ,EAAE;YACd,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS;YACpC,MAAM,EAAE,IAAI,CAAC,QAAQ;SACxB;QAGO,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAE9B,WAAW,EAAE;YACT,OAAO,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK;YAC3E,OAAO,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC/E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiC;IACzD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE/C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvC,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;SACzC,CAAC;IACN,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAyB,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAClE,OAAO;SACV,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAA4B;IAC/C,yBAAyB;IACzB,kDAAkD;IAClD,IAAI;IAEJ,+CAA+C;IAC/C,gDAAgD;IAChD,IAAI;IAGJ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAGG,MAAM,WAAW,GAAG,KAAoB,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC;IAE/C,OAAO;QACH,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC;AACN,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAmC;IAChE,MAAM,OAAO,GAAG;QACZ,GAAG,EAAE;YACD,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAkB,EAAE;YACtD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE;YAC/E,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAiB,EAAE;YACrD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;KACJ,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;AAC1C,CAAC","sourcesContent":["\r\n// import { SecureOptions } from \"../core/types/SecureOptions.js\";\r\n\r\n// export interface NormalizedOptions {\r\n//     cors: { enabled: boolean; options?: any };\r\n//     rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\" | undefined; options?: any };\r\n//     sanitize: { enabled: boolean };\r\n//     validate: { enabled: boolean; schema?: any };\r\n//     json: { enabled: boolean; options?: any };\r\n\r\n//     /** NEW */\r\n//     auth: { enabled: boolean; required: boolean };\r\n// }\r\n\r\n// export function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n//     if (input === false) {\r\n//         return {\r\n//             cors: { enabled: false },\r\n//             rateLimit: { enabled: false, mode: undefined, options: undefined },\r\n//             sanitize: { enabled: false },\r\n//             validate: { enabled: false },\r\n//             json: { enabled: false },\r\n//             auth: { enabled: false, required: true }\r\n//         };\r\n//     }\r\n\r\n//     const opts = input || {};\r\n\r\n//     return {\r\n//         cors: {\r\n//             enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n//             options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n//         },\r\n\r\n//         rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n//         sanitize: {\r\n//             enabled: opts.sanitize === undefined ? true : opts.sanitize !== false\r\n//         },\r\n\r\n//         validate: {\r\n//             enabled: !!opts.validate,\r\n//             schema: opts.validate || undefined\r\n//         },\r\n\r\n//         json: {\r\n//             enabled: opts.json === undefined ? true : opts.json !== false,\r\n//             options: typeof opts.json === \"object\" ? opts.json : undefined\r\n//         },\r\n\r\n//         auth: normalizeAuth(opts.auth)\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // RATE LIMIT — EXACT TYPES, NO TS ERROR\r\n// // ---------------------------------------------------------------\r\n// function normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): {\r\n//     enabled: boolean;\r\n//     mode?: \"strict\" | \"relaxed\" | undefined;\r\n//     options?: any;\r\n// } {\r\n//     if (value === false) {\r\n//         return { enabled: false, mode: undefined, options: undefined };\r\n//     }\r\n\r\n//     if (value === \"strict\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"strict\",\r\n//             options: { max: 5, windowMs: 10000 }\r\n//         };\r\n//     }\r\n\r\n//     if (value === \"relaxed\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"relaxed\",\r\n//             options: { max: 100, windowMs: 60000 }\r\n//         };\r\n//     }\r\n\r\n//     if (typeof value === \"object\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: undefined,   // VERY IMPORTANT!\r\n//             options: value\r\n//         };\r\n//     }\r\n\r\n//     // Default → enabled and optional fields omitted\r\n//     return {\r\n//         enabled: true,\r\n//         mode: undefined,\r\n//         options: undefined\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // AUTH NORMALIZER — EXACT FOR useSecure\r\n// // ---------------------------------------------------------------\r\n// function normalizeAuth(value: SecureOptions[\"auth\"]) {\r\n//     if (value === false) return { enabled: false, required: true };\r\n\r\n//     if (value === true || value === undefined)\r\n//         return { enabled: true, required: true };\r\n\r\n//     return {\r\n//         enabled: true,\r\n//         required: value.required !== false\r\n//     };\r\n// }\r\n\r\n\r\n\r\n\r\n// src/utils/normalizeOptions.ts\r\nimport { \r\n    SecureOptions,\r\n    AuthOptions,        // ✅ ADD THIS\r\n    RateLimitOptions,   // ✅ ADD THIS  \r\n    SanitizeOptions     // ✅ ADD THIS\r\n} from \"../core/types/SecureOptions.js\";\r\n\r\nexport interface NormalizedOptions {\r\n    cors: { enabled: boolean; options?: object };\r\n    rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\"; options?: RateLimitOptions };\r\n    sanitize: { enabled: boolean; options?: SanitizeOptions };\r\n    validate: { enabled: boolean; schema?: any };\r\n    json: { enabled: boolean; options?: object };\r\n    auth: { enabled: boolean; required: boolean; roles?: string[] };\r\n    compression: { enabled: boolean; options?: object };\r\n}\r\n\r\nexport function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n    if (input === false) {\r\n        return {\r\n            cors: { enabled: false },\r\n            rateLimit: { enabled: false },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: false },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: false }\r\n        };\r\n    }\r\n\r\n    const opts = input || {};\r\n\r\n    return {\r\n        cors: {\r\n            enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n            options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n        },\r\n\r\n        rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n        sanitize: {\r\n            enabled: opts.sanitize === undefined ? true : opts.sanitize !== false,\r\n            options: typeof opts.sanitize === \"object\" ? opts.sanitize : undefined\r\n        },\r\n\r\n        // validate: {\r\n        //     enabled: !!opts.validate,\r\n        //     schema: opts.validate || undefined\r\n        // },\r\n\r\n        validate: {\r\n    enabled: opts.validate !== undefined,\r\n    schema: opts.validate\r\n},\r\n\r\n\r\n        json: {\r\n            enabled: opts.json === undefined ? true : opts.json !== false,\r\n            options: typeof opts.json === \"object\" ? opts.json : undefined\r\n        },\r\n\r\n        auth: normalizeAuth(opts.auth),\r\n\r\n        compression: {\r\n            enabled: opts.compression === undefined ? true : opts.compression !== false,\r\n            options: typeof opts.compression === \"object\" ? opts.compression : undefined\r\n        }\r\n    };\r\n}\r\n\r\nfunction normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): NormalizedOptions[\"rateLimit\"] {\r\n    if (value === false) return { enabled: false };\r\n    \r\n    if (value === \"strict\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"strict\",\r\n            options: { max: 5, windowMs: 10000 }\r\n        };\r\n    }\r\n    \r\n    if (value === \"relaxed\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"relaxed\",\r\n            options: { max: 100, windowMs: 60000 }\r\n        };\r\n    }\r\n    \r\n    if (typeof value === \"object\") {\r\n        const val = value as RateLimitOptions;\r\n        const { mode, ...options } = val;\r\n        return {\r\n            enabled: true,\r\n            mode: (mode === \"strict\" || mode === \"relaxed\") ? mode : undefined,\r\n            options\r\n        };\r\n    }\r\n    \r\n    return { enabled: true };\r\n}\r\n\r\nfunction normalizeAuth(value: SecureOptions[\"auth\"]): NormalizedOptions[\"auth\"] {\r\n    // if (value === false) {\r\n    //     return { enabled: false, required: false };\r\n    // }\r\n    \r\n    // if (value === true || value === undefined) {\r\n    //     return { enabled: true, required: true };\r\n    // }\r\n\r\n\r\n    if (value === undefined) {\r\n    return { enabled: false, required: false };\r\n}\r\nif (value === true) {\r\n    return { enabled: true, required: true };\r\n}\r\n\r\n    \r\n    const authOptions = value as AuthOptions;\r\n    const enabled = authOptions.required !== false;\r\n    \r\n    return {\r\n        enabled,\r\n        required: enabled,\r\n        roles: authOptions.roles\r\n    };\r\n}\r\n\r\nexport function getPresetOptions(preset: 'api' | 'strict' | 'public'): NormalizedOptions {\r\n    const presets = {\r\n        api: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true, mode: 'relaxed' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        },\r\n        strict: {\r\n            cors: { enabled: true, options: { origin: process.env.ALLOWED_ORIGIN || '*' } },\r\n            rateLimit: { enabled: true, mode: 'strict' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: true },\r\n            json: { enabled: true },\r\n            auth: { enabled: true, required: true },\r\n            compression: { enabled: true }\r\n        },\r\n        public: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        }\r\n    };\r\n    \r\n    return presets[preset] || presets.api;\r\n}"]}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "hi-secure",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
     "scripts": {

package/readme.md

@@ -88,137 +88,102 @@ app.use(
 app.listen(3000, () => console.log("Server running"));
 ```
 
-
-</div> <br/> <!-- 🔑 JWT SECTION --> <div style="border-left:5px solid #3B82F6; padding:20px; border-radius:8px; background:#fafafa;"> 
-<h2>🔑 JWT Authentication Setup</h2> <h3 style="color:#3B82F6;">🟦 Initialize JWT</h3>
+<h3 style="color:#A855F7;">✔ Using inside secureRoute()</h3>
 
 ```bash
 
-require("dotenv").config();
-import { HiSecure } from "hi-secure";
-
-HiSecure.getInstance({
-  auth: {
-    enabled: true,
-    jwtSecret: process.env.JWT_SECRET || "dev_secret_12345",
-    jwtExpiresIn: "7d",
-    jwtIssuer: "hi-secure-backend",
-    jwtAudience: "hi-secure-users",
-  },
-});
-
-
-import express from "express";
-import userRoutes from "./routes/UserRoutes.js";
-
-const app = express();
-const PORT = 3000;
-
-app.use(HiSecure.middleware("api"));
-
-app.use(
-  HiSecure.middleware({
-    compression: true,
-    json: true,
+router.post(
+  "/feedback",
+  ...secureRoute({
     sanitize: true,
-    validate: true,
-    headers: true,
-  })
+    validate: z.object({
+      message: z.string().min(5),
+      rating: z.number().min(1).max(5)
+    }),
+  }),
+  handleFeedback
 );
 
-app.use("/api/auth", userRoutes);
-
-app.listen(PORT, () => console.log(`Running on http://localhost:${PORT}`));
-
 ```
 
 
-</div> <br/> <!-- 🧩 FULL AUTH SECTION --> <div style="border-left:5px solid #F43F5E; padding:20px; border-radius:8px; background:#fafafa;">
-  
-  <h2>🧩 Full Authentication Example</h2>
-  
-  <h3 style="color:#F43F5E;">🔐 Register User</h3>
-
-  ```bash
+</div> <br/> <!-- 🧩 FULL AUTH SECTION --> <div style="border-left:5px solid #F43F5E; padding:20px; border-radius:8px; background:#fafafa;"> <h2>🧩 Full Authentication Example</h2> <h3 style="color:#F43F5E;">🔐 Register User</h3>
 
-  import { HiSecure } from "hi-secure";
-import User from "../models/User.js";
 
+```bash
 export const registerUser = async (req, res) => {
   const { name, email, password } = req.body;
 
-  const exists = await User.findOne({ email });
-  if (exists) return res.status(400).json({ error: "User exists" });
-
   const hashed = await HiSecure.hash(password);
 
   const user = await User.create({ name, email, password: hashed });
 
-  const token = HiSecure.jwt.sign({ userId: user._id }, { expiresIn: "7d" });
+  const token = HiSecure.jwt.sign({ userId: user._id });
 
   res.json({ message: "Registered", token });
 };
 
 ```
 
+
 <h3 style="color:#F43F5E;">🔐 Login User</h3>
 
+
 ```bash
+
 export const loginUser = async (req, res) => {
   const { email, password } = req.body;
 
   const user = await User.findOne({ email });
-  if (!user) return res.status(401).json({ error: "Invalid credentials" });
 
   const valid = await HiSecure.verify(password, user.password);
   if (!valid) return res.status(401).json({ error: "Invalid credentials" });
 
-  const token = HiSecure.jwt.sign({ userId: user._id }, { expiresIn: "7d" });
+  const token = HiSecure.jwt.sign({ userId: user._id });
 
-  res.json({ message: "Login successful", token });
+  res.json({ token });
 };
+
+
 ```
 
-<h3 style="color:#F43F5E;">👤 Protected Profile Route</h3>
+<h3 style="color:#F43F5E;">👤 Protected Route</h3>
 
 ```bash
-export const getProfile = async (req, res) => {
-  const user = await User.findById(req.user.userId).select("-password");
-  if (!user) return res.status(404).json({ error: "Not found" });
 
-  res.json({ user });
-};
+router.get("/profile", HiSecure.auth({ required: true }), getProfile);
+
 ```
 
-</div> <br/> <!-- ROUTES --> <div style="border-left:5px solid #F59E0B; padding:20px; border-radius:8px; background:#fafafa;"> 
-<h2>📌 Routes Example</h2>
 
-```bash
 
-import express from "express";
-import { HiSecure } from "hi-secure";
-import {
-  registerUser,
-  loginUser,
-  getProfile,
-} from "../controllers/UserControllers.js";
+</div> <br/> <!-- ROUTES --> <div style="border-left:5px solid #F59E0B; padding:20px; border-radius:8px; background:#fafafa;"> <h2>📌 Routes Example</h2>
 
-const router = express.Router();
 
-router.post("/register", registerUser);
+```bash
+
+router.post("/register", 
+  HiSecure.validate(registerSchema), 
+  registerUser
+);
 
 router.post(
   "/login",
-  HiSecure.rateLimit({ max: 5, windowMs: 15 * 60 * 1000 }),
+  HiSecure.rateLimit("strict"),
+  HiSecure.validate(loginSchema),
   loginUser
 );
 
-router.get("/profile", HiSecure.auth({ required: true }), getProfile);
+router.get(
+  "/profile",
+  HiSecure.auth({ required: true }),
+  getProfile
+);
 
-export default router;
 
 ```
 
+
 </div> <br/> <h2 align="center">🛠️ More features & docs coming soon…</h2>
 <h3 align="center">Made with 🔒 for secure Node.js apps</h3> 
 

package/src/adapters/GoogleAdapter.ts

@@ -128,7 +128,9 @@
 // src/adapters/GoogleAdapter.ts - FIXED
 import { OAuth2Client, LoginTicket } from "google-auth-library";
 import { AdapterError } from "../core/errors/AdapterError.js";
-import { logWarn, logError } from "../logging/index.js";
+// import { logWarn, logError } from "../logging/index.js";
+
+import {logger} from '../logging';
 
 export interface GoogleTokenPayload {
     sub: string;
@@ -171,7 +173,7 @@ export class GoogleAdapter {
             const payload = ticket.getPayload();
             
             if (!payload) {
-                logWarn("GoogleAdapter: Empty payload");
+                logger.warn("GoogleAdapter: Empty payload");
                 throw new AdapterError("Invalid Google ID token payload.");
             }
 
@@ -191,7 +193,7 @@ export class GoogleAdapter {
             return result;
 
         } catch (err: any) {
-            logError("GoogleAdapter.verifyIdToken failed", { 
+            logger.error("GoogleAdapter.verifyIdToken failed", { 
                 error: err?.message,
                 hasClientId: !!this.clientId 
             });

package/src/adapters/JWTAdapter.ts

@@ -256,6 +256,7 @@ import jwt from "jsonwebtoken";
 import { randomUUID } from "crypto";  // Built-in Node.js
 import { AdapterError } from "../core/errors/AdapterError.js";
 import { logError } from "../logging/index.js";
+import { logger } from "../logging";
 
 export interface JWTAdapterOptions {
     secret: string;
@@ -286,7 +287,8 @@ export class JWTAdapter {
         }
 
         if (options.secret.length < 32) {
-            logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
+            logger.warn("🚨 JWT secret shorter than 32 chars. Consider using stronger secret.");
+            // logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
         }
 
         this.secret = options.secret;