hi-secure 1.0.2 → 1.0.4

package/dist/adapters/ExpressRLAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressRLAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,gBAAgB;IACzB,aAAa,CAAC,OAAO,GAAE,gBAAqB;CA6B/C"}
+{"version":3,"file":"ExpressRLAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,gBAAgB;IACzB,aAAa,CAAC,OAAO,GAAE,gBAAqB;CA6B/C"}

package/dist/adapters/ExpressRLAdapter.js

@@ -1,38 +1,9 @@
 "use strict";
-// import rateLimit from "express-rate-limit";
-// import { logger } from "../logging";
-// import { AdapterError } from "../core/errors/AdapterError";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExpressRLAdapter = void 0;
-// export class ExpressRLAdapter {
-//     /**
-//      * Create express rate-limit middleware dynamically
-//      */
-//     getMiddleware(options: {
-//         windowMs?: number;
-//         max?: number;
-//         message?: any;
-//     } = {}) {
-//         try {
-//             const limiter = rateLimit({
-//                 windowMs: options.windowMs ?? 15 * 60 * 1000, // default
-//                 max: options.max ?? 100,
-//                 message: options.message ?? { error: "Too many requests" },
-//                 standardHeaders: true,
-//                 legacyHeaders: false,
-//             });
-//             return limiter;
-//         } catch (err: any) {
-//             logger.error("❌ ExpressRLAdapter: failed to create limiter", {
-//                 error: err?.message || err
-//             });
-//             throw new AdapterError("Express rate limiter creation failed.");
-//         }
-//     }
-// }
 // src/adapters/ExpressRLAdapter.ts - IMPROVED
 const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
 const index_js_1 = require("../logging/index.js");

package/dist/adapters/ExpressRLAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressRLAdapter.js","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":";AAAA,8CAA8C;AAC9C,uCAAuC;AACvC,8DAA8D;;;;;;AAE9D,kCAAkC;AAElC,UAAU;AACV,0DAA0D;AAC1D,UAAU;AACV,+BAA+B;AAC/B,6BAA6B;AAC7B,wBAAwB;AACxB,yBAAyB;AACzB,gBAAgB;AAEhB,gBAAgB;AAChB,0CAA0C;AAC1C,2EAA2E;AAC3E,2CAA2C;AAC3C,8EAA8E;AAC9E,yCAAyC;AACzC,wCAAwC;AACxC,kBAAkB;AAElB,8BAA8B;AAE9B,+BAA+B;AAC/B,6EAA6E;AAC7E,6CAA6C;AAC7C,kBAAkB;AAClB,+EAA+E;AAC/E,YAAY;AACZ,QAAQ;AACR,IAAI;AAKJ,8CAA8C;AAC9C,4EAA2C;AAC3C,kDAA6C;AAC7C,oEAA8D;AAY9D,MAAa,gBAAgB;IACzB,aAAa,CAAC,UAA4B,EAAE;QACxC,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;gBACvC,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;gBACvC,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,KAAK;gBACpB,kBAAkB,EAAE,KAAK;aAC5B,CAAC;YAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;YAEvD,MAAM,OAAO,GAAG,IAAA,4BAAS,EAAC,YAAY,CAAC,CAAC;YAExC,iBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,GAAG,EAAE,YAAY,CAAC,GAAG;aACxB,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QAEnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,iBAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBACzD,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,uCAAuC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;CACJ;AA9BD,4CA8BC","sourcesContent":["// import rateLimit from \"express-rate-limit\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n\r\n// export class ExpressRLAdapter {\r\n\r\n//     /**\r\n//      * Create express rate-limit middleware dynamically\r\n//      */\r\n//     getMiddleware(options: {\r\n//         windowMs?: number;\r\n//         max?: number;\r\n//         message?: any;\r\n//     } = {}) {\r\n\r\n//         try {\r\n//             const limiter = rateLimit({\r\n//                 windowMs: options.windowMs ?? 15 * 60 * 1000, // default\r\n//                 max: options.max ?? 100,\r\n//                 message: options.message ?? { error: \"Too many requests\" },\r\n//                 standardHeaders: true,\r\n//                 legacyHeaders: false,\r\n//             });\r\n\r\n//             return limiter;\r\n\r\n//         } catch (err: any) {\r\n//             logger.error(\"❌ ExpressRLAdapter: failed to create limiter\", {\r\n//                 error: err?.message || err\r\n//             });\r\n//             throw new AdapterError(\"Express rate limiter creation failed.\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n// src/adapters/ExpressRLAdapter.ts - IMPROVED\r\nimport rateLimit from \"express-rate-limit\";\r\nimport { logger } from \"../logging/index.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport interface RateLimitOptions {\r\n    windowMs?: number;\r\n    max?: number;\r\n    message?: any;\r\n    skipFailedRequests?: boolean;\r\n    standardHeaders?: boolean;\r\n    legacyHeaders?: boolean;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class ExpressRLAdapter {\r\n    getMiddleware(options: RateLimitOptions = {}) {\r\n        try {\r\n            const defaultOptions = {\r\n                windowMs: 15 * 60 * 1000, // 15 minutes\r\n                max: 100,\r\n                message: { error: \"Too many requests\" },\r\n                standardHeaders: true,\r\n                legacyHeaders: false,\r\n                skipFailedRequests: false\r\n            };\r\n\r\n            const finalOptions = { ...defaultOptions, ...options };\r\n            \r\n            const limiter = rateLimit(finalOptions);\r\n            \r\n            logger.debug(\"📌 Express rate limiter configured\", {\r\n                windowMs: finalOptions.windowMs,\r\n                max: finalOptions.max\r\n            });\r\n\r\n            return limiter;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"❌ ExpressRLAdapter: failed to create limiter\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Express rate limiter creation failed.\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"ExpressRLAdapter.js","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,8CAA8C;AAC9C,4EAA2C;AAC3C,kDAA6C;AAC7C,oEAA8D;AAY9D,MAAa,gBAAgB;IACzB,aAAa,CAAC,UAA4B,EAAE;QACxC,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;gBACvC,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;gBACvC,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,KAAK;gBACpB,kBAAkB,EAAE,KAAK;aAC5B,CAAC;YAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;YAEvD,MAAM,OAAO,GAAG,IAAA,4BAAS,EAAC,YAAY,CAAC,CAAC;YAExC,iBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,GAAG,EAAE,YAAY,CAAC,GAAG;aACxB,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QAEnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,iBAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBACzD,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,uCAAuC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;CACJ;AA9BD,4CA8BC","sourcesContent":["// src/adapters/ExpressRLAdapter.ts - IMPROVED\r\nimport rateLimit from \"express-rate-limit\";\r\nimport { logger } from \"../logging/index.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport interface RateLimitOptions {\r\n    windowMs?: number;\r\n    max?: number;\r\n    message?: any;\r\n    skipFailedRequests?: boolean;\r\n    standardHeaders?: boolean;\r\n    legacyHeaders?: boolean;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class ExpressRLAdapter {\r\n    getMiddleware(options: RateLimitOptions = {}) {\r\n        try {\r\n            const defaultOptions = {\r\n                windowMs: 15 * 60 * 1000, // 15 minutes\r\n                max: 100,\r\n                message: { error: \"Too many requests\" },\r\n                standardHeaders: true,\r\n                legacyHeaders: false,\r\n                skipFailedRequests: false\r\n            };\r\n\r\n            const finalOptions = { ...defaultOptions, ...options };\r\n            \r\n            const limiter = rateLimit(finalOptions);\r\n            \r\n            logger.debug(\"📌 Express rate limiter configured\", {\r\n                windowMs: finalOptions.windowMs,\r\n                max: finalOptions.max\r\n            });\r\n\r\n            return limiter;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"❌ ExpressRLAdapter: failed to create limiter\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Express rate limiter creation failed.\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/GoogleAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":"AAoIA,MAAM,WAAW,kBAAkB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAC,CAAS;gBAEd,QAAQ,CAAC,EAAE,MAAM;IASvB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAmDpE"}
+{"version":3,"file":"GoogleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":"AAsIA,MAAM,WAAW,kBAAkB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAC,CAAS;gBAEd,QAAQ,CAAC,EAAE,MAAM;IASvB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAmDpE"}

package/dist/adapters/GoogleAdapter.js

@@ -103,7 +103,8 @@ exports.GoogleAdapter = void 0;
 // src/adapters/GoogleAdapter.ts - FIXED
 const google_auth_library_1 = require("google-auth-library");
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
-const index_js_1 = require("../logging/index.js");
+// import { logWarn, logError } from "../logging/index.js";
+const logging_1 = require("../logging");
 class GoogleAdapter {
     constructor(clientId) {
         if (clientId && clientId.trim().length === 0) {
@@ -127,7 +128,7 @@ class GoogleAdapter {
             const ticket = await this.client.verifyIdToken(options);
             const payload = ticket.getPayload();
             if (!payload) {
-                (0, index_js_1.logWarn)("GoogleAdapter: Empty payload");
+                logging_1.logger.warn("GoogleAdapter: Empty payload");
                 throw new AdapterError_js_1.AdapterError("Invalid Google ID token payload.");
             }
             // Create result object
@@ -144,7 +145,7 @@ class GoogleAdapter {
             return result;
         }
         catch (err) {
-            (0, index_js_1.logError)("GoogleAdapter.verifyIdToken failed", {
+            logging_1.logger.error("GoogleAdapter.verifyIdToken failed", {
                 error: err?.message,
                 hasClientId: !!this.clientId
             });

package/dist/adapters/GoogleAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleAdapter.js","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iEAAiE;AACjE,qDAAqD;;;AAErD,kCAAkC;AAClC,uCAAuC;AACvC,oCAAoC;AAEpC,0CAA0C;AAC1C,uDAAuD;AACvD,8CAA8C;AAC9C,WAAW;AAEX,gDAAgD;AAChD,mBAAmB;AACnB,kCAAkC;AAClC,sCAAsC;AACtC,mDAAmD;AACnD,kCAAkC;AAElC,yDAAyD;AACzD,oDAAoD;AACpD,uDAAuD;AACvD,mBAAmB;AAEnB,uFAAuF;AAEvF,sDAAsD;AACtD,iCAAiC;AACjC,8DAA8D;AAC9D,iFAAiF;AACjF,mBAAmB;AAEnB,0BAA0B;AAC1B,uCAAuC;AACvC,2CAA2C;AAC3C,6DAA6D;AAC7D,yCAAyC;AACzC,+CAA+C;AAC/C,oBAAoB;AAEpB,kCAAkC;AAClC,0FAA0F;AAC1F,6FAA6F;AAC7F,eAAe;AACf,WAAW;AACX,OAAO;AAKP,8CAA8C;AAC9C,mEAAmE;AACnE,iEAAiE;AACjE,2DAA2D;AAE3D,wCAAwC;AACxC,mBAAmB;AACnB,qBAAqB;AACrB,+BAA+B;AAC/B,qBAAqB;AACrB,wBAAwB;AACxB,0BAA0B;AAC1B,IAAI;AAEJ,+BAA+B;AAC/B,oCAAoC;AACpC,iCAAiC;AAEjC,uCAAuC;AACvC,0DAA0D;AAC1D,gFAAgF;AAChF,YAAY;AAEZ,oDAAoD;AACpD,oCAAoC;AACpC,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,6DAA6D;AAC7D,uEAAuE;AACvE,gBAAgB;AAEhB,oFAAoF;AACpF,2BAA2B;AAC3B,iBAAiB;AAEjB,yEAAyE;AACzE,sEAAsE;AACtE,oDAAoD;AACpD,gBAAgB;AAEhB,oFAAoF;AACpF,mDAAmD;AAEnD,8BAA8B;AAC9B,2DAA2D;AAC3D,8EAA8E;AAC9E,gBAAgB;AAEhB,uBAAuB;AACvB,oCAAoC;AACpC,8CAA8C;AAC9C,mEAAmE;AACnE,sCAAsC;AACtC,4CAA4C;AAC5C,6BAA6B;AAC7B,iBAAiB;AAEjB,+BAA+B;AAC/B,gEAAgE;AAChE,uCAAuC;AACvC,gDAAgD;AAChD,kBAAkB;AAElB,uDAAuD;AACvD,kFAAkF;AAClF,gBAAgB;AAEhB,0FAA0F;AAC1F,YAAY;AACZ,QAAQ;AACR,IAAI;AAIJ,wCAAwC;AACxC,6DAAgE;AAChE,oEAA8D;AAC9D,kDAAwD;AAWxD,MAAa,aAAa;IAItB,YAAY,QAAiB;QACzB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QAC/B,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,8BAAY,CAAC,2BAA2B,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAsD;gBAC/D,OAAO;aACV,CAAC;YAEF,0DAA0D;YAC1D,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrC,CAAC;YAED,MAAM,MAAM,GAAgB,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,IAAA,kBAAO,EAAC,8BAA8B,CAAC,CAAC;gBACxC,MAAM,IAAI,8BAAY,CAAC,kCAAkC,CAAC,CAAC;YAC/D,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAuB;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;gBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE5B,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,oCAAoC,EAAE;gBAC3C,KAAK,EAAE,GAAG,EAAE,OAAO;gBACnB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAY,CAAC,sCAAsC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC;QAC/E,CAAC;IACL,CAAC;CACJ;AAhED,sCAgEC","sourcesContent":["// // import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logWarn, logError } from \"../logging\";\r\n\r\n// // export class GoogleAdapter {\r\n// //     private client: OAuth2Client;\r\n// //     private clientId?: string;\r\n\r\n// //     constructor(clientId?: string) {\r\n// //         this.client = new OAuth2Client(clientId);\r\n// //         this.clientId = clientId as any;\r\n// //     }\r\n\r\n// //     async verifyIdToken(idToken: string) {\r\n// //         try {\r\n// //             const options: {\r\n// //                 idToken: string;\r\n// //                 audience?: string | string[];\r\n// //             } = { idToken };\r\n\r\n// //             // ADD ONLY IF DEFINED → FIXES TS ERROR\r\n// //             if (this.clientId !== undefined) {\r\n// //                 options.audience = this.clientId;\r\n// //             }\r\n\r\n// //             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n\r\n// //             const payload = ticket.getPayload();\r\n// //             if (!payload) {\r\n// //                 logWarn(\"GoogleAdapter: Empty payload\");\r\n// //                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n// //             }\r\n\r\n// //             return {\r\n// //                 sub: payload.sub,\r\n// //                 email: payload.email,\r\n// //                 email_verified: payload.email_verified,\r\n// //                 name: payload.name,\r\n// //                 picture: payload.picture,\r\n// //             };\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"GoogleAdapter.verifyIdToken failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n\r\n// // src/adapters/GoogleAdapter.ts - IMPROVED\r\n// import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logWarn, logError } from \"../logging/index.js\";\r\n\r\n// export interface GoogleTokenPayload {\r\n//     sub: string;\r\n//     email: string;\r\n//     email_verified: boolean;\r\n//     name?: string;\r\n//     picture?: string;\r\n//     [key: string]: any;\r\n// }\r\n\r\n// export class GoogleAdapter {\r\n//     private client: OAuth2Client;\r\n//     private clientId?: string;\r\n\r\n//     constructor(clientId?: string) {\r\n//         if (clientId && clientId.trim().length === 0) {\r\n//             throw new AdapterError(\"Google clientId cannot be empty string\");\r\n//         }\r\n        \r\n//         this.client = new OAuth2Client(clientId);\r\n//         this.clientId = clientId;\r\n//     }\r\n\r\n//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n//         try {\r\n//             if (!idToken || typeof idToken !== 'string') {\r\n//                 throw new AdapterError(\"Invalid ID token provided\");\r\n//             }\r\n\r\n//             const options: { idToken: string; audience?: string | string[] } = { \r\n//                 idToken \r\n//             };\r\n\r\n//             // Add audience only if clientId is provided and not empty\r\n//             if (this.clientId && this.clientId.trim().length > 0) {\r\n//                 options.audience = this.clientId;\r\n//             }\r\n\r\n//             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n//             const payload = ticket.getPayload();\r\n            \r\n//             if (!payload) {\r\n//                 logWarn(\"GoogleAdapter: Empty payload\");\r\n//                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n//             }\r\n\r\n//             return {\r\n//                 sub: payload.sub,\r\n//                 email: payload.email || '',\r\n//                 email_verified: payload.email_verified || false,\r\n//                 name: payload.name,\r\n//                 picture: payload.picture,\r\n//                 ...payload\r\n//             };\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"GoogleAdapter.verifyIdToken failed\", { \r\n//                 error: err?.message,\r\n//                 hasClientId: !!this.clientId \r\n//             });\r\n            \r\n//             if (err.message?.includes('audience')) {\r\n//                 throw new AdapterError(\"Invalid Google client ID configured.\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/adapters/GoogleAdapter.ts - FIXED\r\nimport { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logWarn, logError } from \"../logging/index.js\";\r\n\r\nexport interface GoogleTokenPayload {\r\n    sub: string;\r\n    email: string;\r\n    email_verified: boolean;\r\n    name?: string;\r\n    picture?: string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class GoogleAdapter {\r\n    private client: OAuth2Client;\r\n    private clientId?: string;\r\n\r\n    constructor(clientId?: string) {\r\n        if (clientId && clientId.trim().length === 0) {\r\n            throw new AdapterError(\"Google clientId cannot be empty string\");\r\n        }\r\n        \r\n        this.client = new OAuth2Client(clientId);\r\n        this.clientId = clientId;\r\n    }\r\n\r\n    async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n        try {\r\n            if (!idToken || typeof idToken !== 'string') {\r\n                throw new AdapterError(\"Invalid ID token provided\");\r\n            }\r\n\r\n            const options: { idToken: string; audience?: string | string[] } = { \r\n                idToken \r\n            };\r\n\r\n            // Add audience only if clientId is provided and not empty\r\n            if (this.clientId && this.clientId.trim().length > 0) {\r\n                options.audience = this.clientId;\r\n            }\r\n\r\n            const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n            const payload = ticket.getPayload();\r\n            \r\n            if (!payload) {\r\n                logWarn(\"GoogleAdapter: Empty payload\");\r\n                throw new AdapterError(\"Invalid Google ID token payload.\");\r\n            }\r\n\r\n            // Create result object\r\n            const result: GoogleTokenPayload = {\r\n                sub: payload.sub,\r\n                email: payload.email || '',\r\n                email_verified: payload.email_verified || false,\r\n                name: payload.name,\r\n                picture: payload.picture\r\n            };\r\n\r\n            // Add remaining properties from payload (excluding duplicates)\r\n            const { sub, email, email_verified, name, picture, ...rest } = payload;\r\n            Object.assign(result, rest);\r\n\r\n            return result;\r\n\r\n        } catch (err: any) {\r\n            logError(\"GoogleAdapter.verifyIdToken failed\", { \r\n                error: err?.message,\r\n                hasClientId: !!this.clientId \r\n            });\r\n            \r\n            if (err.message?.includes('audience')) {\r\n                throw new AdapterError(\"Invalid Google client ID configured.\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"Google token verification failed\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"GoogleAdapter.js","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iEAAiE;AACjE,qDAAqD;;;AAErD,kCAAkC;AAClC,uCAAuC;AACvC,oCAAoC;AAEpC,0CAA0C;AAC1C,uDAAuD;AACvD,8CAA8C;AAC9C,WAAW;AAEX,gDAAgD;AAChD,mBAAmB;AACnB,kCAAkC;AAClC,sCAAsC;AACtC,mDAAmD;AACnD,kCAAkC;AAElC,yDAAyD;AACzD,oDAAoD;AACpD,uDAAuD;AACvD,mBAAmB;AAEnB,uFAAuF;AAEvF,sDAAsD;AACtD,iCAAiC;AACjC,8DAA8D;AAC9D,iFAAiF;AACjF,mBAAmB;AAEnB,0BAA0B;AAC1B,uCAAuC;AACvC,2CAA2C;AAC3C,6DAA6D;AAC7D,yCAAyC;AACzC,+CAA+C;AAC/C,oBAAoB;AAEpB,kCAAkC;AAClC,0FAA0F;AAC1F,6FAA6F;AAC7F,eAAe;AACf,WAAW;AACX,OAAO;AAKP,8CAA8C;AAC9C,mEAAmE;AACnE,iEAAiE;AACjE,2DAA2D;AAE3D,wCAAwC;AACxC,mBAAmB;AACnB,qBAAqB;AACrB,+BAA+B;AAC/B,qBAAqB;AACrB,wBAAwB;AACxB,0BAA0B;AAC1B,IAAI;AAEJ,+BAA+B;AAC/B,oCAAoC;AACpC,iCAAiC;AAEjC,uCAAuC;AACvC,0DAA0D;AAC1D,gFAAgF;AAChF,YAAY;AAEZ,oDAAoD;AACpD,oCAAoC;AACpC,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,6DAA6D;AAC7D,uEAAuE;AACvE,gBAAgB;AAEhB,oFAAoF;AACpF,2BAA2B;AAC3B,iBAAiB;AAEjB,yEAAyE;AACzE,sEAAsE;AACtE,oDAAoD;AACpD,gBAAgB;AAEhB,oFAAoF;AACpF,mDAAmD;AAEnD,8BAA8B;AAC9B,2DAA2D;AAC3D,8EAA8E;AAC9E,gBAAgB;AAEhB,uBAAuB;AACvB,oCAAoC;AACpC,8CAA8C;AAC9C,mEAAmE;AACnE,sCAAsC;AACtC,4CAA4C;AAC5C,6BAA6B;AAC7B,iBAAiB;AAEjB,+BAA+B;AAC/B,gEAAgE;AAChE,uCAAuC;AACvC,gDAAgD;AAChD,kBAAkB;AAElB,uDAAuD;AACvD,kFAAkF;AAClF,gBAAgB;AAEhB,0FAA0F;AAC1F,YAAY;AACZ,QAAQ;AACR,IAAI;AAIJ,wCAAwC;AACxC,6DAAgE;AAChE,oEAA8D;AAC9D,2DAA2D;AAE3D,wCAAkC;AAWlC,MAAa,aAAa;IAItB,YAAY,QAAiB;QACzB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QAC/B,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,8BAAY,CAAC,2BAA2B,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAsD;gBAC/D,OAAO;aACV,CAAC;YAEF,0DAA0D;YAC1D,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrC,CAAC;YAED,MAAM,MAAM,GAAgB,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,gBAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,MAAM,IAAI,8BAAY,CAAC,kCAAkC,CAAC,CAAC;YAC/D,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAuB;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;gBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE5B,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,KAAK,EAAE,GAAG,EAAE,OAAO;gBACnB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAY,CAAC,sCAAsC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC;QAC/E,CAAC;IACL,CAAC;CACJ;AAhED,sCAgEC","sourcesContent":["// // import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logWarn, logError } from \"../logging\";\r\n\r\n// // export class GoogleAdapter {\r\n// //     private client: OAuth2Client;\r\n// //     private clientId?: string;\r\n\r\n// //     constructor(clientId?: string) {\r\n// //         this.client = new OAuth2Client(clientId);\r\n// //         this.clientId = clientId as any;\r\n// //     }\r\n\r\n// //     async verifyIdToken(idToken: string) {\r\n// //         try {\r\n// //             const options: {\r\n// //                 idToken: string;\r\n// //                 audience?: string | string[];\r\n// //             } = { idToken };\r\n\r\n// //             // ADD ONLY IF DEFINED → FIXES TS ERROR\r\n// //             if (this.clientId !== undefined) {\r\n// //                 options.audience = this.clientId;\r\n// //             }\r\n\r\n// //             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n\r\n// //             const payload = ticket.getPayload();\r\n// //             if (!payload) {\r\n// //                 logWarn(\"GoogleAdapter: Empty payload\");\r\n// //                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n// //             }\r\n\r\n// //             return {\r\n// //                 sub: payload.sub,\r\n// //                 email: payload.email,\r\n// //                 email_verified: payload.email_verified,\r\n// //                 name: payload.name,\r\n// //                 picture: payload.picture,\r\n// //             };\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"GoogleAdapter.verifyIdToken failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n\r\n// // src/adapters/GoogleAdapter.ts - IMPROVED\r\n// import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logWarn, logError } from \"../logging/index.js\";\r\n\r\n// export interface GoogleTokenPayload {\r\n//     sub: string;\r\n//     email: string;\r\n//     email_verified: boolean;\r\n//     name?: string;\r\n//     picture?: string;\r\n//     [key: string]: any;\r\n// }\r\n\r\n// export class GoogleAdapter {\r\n//     private client: OAuth2Client;\r\n//     private clientId?: string;\r\n\r\n//     constructor(clientId?: string) {\r\n//         if (clientId && clientId.trim().length === 0) {\r\n//             throw new AdapterError(\"Google clientId cannot be empty string\");\r\n//         }\r\n        \r\n//         this.client = new OAuth2Client(clientId);\r\n//         this.clientId = clientId;\r\n//     }\r\n\r\n//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n//         try {\r\n//             if (!idToken || typeof idToken !== 'string') {\r\n//                 throw new AdapterError(\"Invalid ID token provided\");\r\n//             }\r\n\r\n//             const options: { idToken: string; audience?: string | string[] } = { \r\n//                 idToken \r\n//             };\r\n\r\n//             // Add audience only if clientId is provided and not empty\r\n//             if (this.clientId && this.clientId.trim().length > 0) {\r\n//                 options.audience = this.clientId;\r\n//             }\r\n\r\n//             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n//             const payload = ticket.getPayload();\r\n            \r\n//             if (!payload) {\r\n//                 logWarn(\"GoogleAdapter: Empty payload\");\r\n//                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n//             }\r\n\r\n//             return {\r\n//                 sub: payload.sub,\r\n//                 email: payload.email || '',\r\n//                 email_verified: payload.email_verified || false,\r\n//                 name: payload.name,\r\n//                 picture: payload.picture,\r\n//                 ...payload\r\n//             };\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"GoogleAdapter.verifyIdToken failed\", { \r\n//                 error: err?.message,\r\n//                 hasClientId: !!this.clientId \r\n//             });\r\n            \r\n//             if (err.message?.includes('audience')) {\r\n//                 throw new AdapterError(\"Invalid Google client ID configured.\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/adapters/GoogleAdapter.ts - FIXED\r\nimport { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logWarn, logError } from \"../logging/index.js\";\r\n\r\nimport {logger} from '../logging';\r\n\r\nexport interface GoogleTokenPayload {\r\n    sub: string;\r\n    email: string;\r\n    email_verified: boolean;\r\n    name?: string;\r\n    picture?: string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class GoogleAdapter {\r\n    private client: OAuth2Client;\r\n    private clientId?: string;\r\n\r\n    constructor(clientId?: string) {\r\n        if (clientId && clientId.trim().length === 0) {\r\n            throw new AdapterError(\"Google clientId cannot be empty string\");\r\n        }\r\n        \r\n        this.client = new OAuth2Client(clientId);\r\n        this.clientId = clientId;\r\n    }\r\n\r\n    async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n        try {\r\n            if (!idToken || typeof idToken !== 'string') {\r\n                throw new AdapterError(\"Invalid ID token provided\");\r\n            }\r\n\r\n            const options: { idToken: string; audience?: string | string[] } = { \r\n                idToken \r\n            };\r\n\r\n            // Add audience only if clientId is provided and not empty\r\n            if (this.clientId && this.clientId.trim().length > 0) {\r\n                options.audience = this.clientId;\r\n            }\r\n\r\n            const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n            const payload = ticket.getPayload();\r\n            \r\n            if (!payload) {\r\n                logger.warn(\"GoogleAdapter: Empty payload\");\r\n                throw new AdapterError(\"Invalid Google ID token payload.\");\r\n            }\r\n\r\n            // Create result object\r\n            const result: GoogleTokenPayload = {\r\n                sub: payload.sub,\r\n                email: payload.email || '',\r\n                email_verified: payload.email_verified || false,\r\n                name: payload.name,\r\n                picture: payload.picture\r\n            };\r\n\r\n            // Add remaining properties from payload (excluding duplicates)\r\n            const { sub, email, email_verified, name, picture, ...rest } = payload;\r\n            Object.assign(result, rest);\r\n\r\n            return result;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"GoogleAdapter.verifyIdToken failed\", { \r\n                error: err?.message,\r\n                hasClientId: !!this.clientId \r\n            });\r\n            \r\n            if (err.message?.includes('audience')) {\r\n                throw new AdapterError(\"Invalid Google client ID configured.\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"Google token verification failed\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/JWTAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AA8PA,OAAO,GAAG,MAAM,cAAc,CAAC;AAK/B,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAgBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAwB3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CAuBnE"}
+{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AA8PA,OAAO,GAAG,MAAM,cAAc,CAAC;AAM/B,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAiBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAwB3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CAuBnE"}

package/dist/adapters/JWTAdapter.js

@@ -214,13 +214,15 @@ const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const crypto_1 = require("crypto"); // Built-in Node.js
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
 const index_js_1 = require("../logging/index.js");
+const logging_1 = require("../logging");
 class JWTAdapter {
     constructor(options) {
         if (!options.secret) {
             throw new AdapterError_js_1.AdapterError("JWT secret is required");
         }
         if (options.secret.length < 32) {
-            (0, index_js_1.logError)("⚠ JWT secret is too short (minimum 32 characters recommended)");
+            logging_1.logger.warn("🚨 JWT secret shorter than 32 chars. Consider using stronger secret.");
+            // logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
         }
         this.secret = options.secret;
         this.expiresIn = options.expiresIn;

package/dist/adapters/JWTAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";AAAA,qCAAqC;AACrC,iEAAiE;AACjE,4CAA4C;;;;;;AAE5C,0CAA0C;AAC1C,yBAAyB;AACzB,kDAAkD;AAClD,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAE9C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,2CAA2C;AAE3C,oCAAoC;AACpC,oDAAoD;AACpD,wEAAwE;AACxE,eAAe;AACf,WAAW;AAEX,eAAe;AACf,8BAA8B;AAC9B,uDAAuD;AACvD,aAAa;AACb,mBAAmB;AACnB,sCAAsC;AACtC,2DAA2D;AAE3D,yDAAyD;AAEzD,mDAAmD;AACnD,mEAAmE;AACnE,0EAA0E;AAC1E,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,iCAAiC;AACjC,mBAAmB;AACnB,wDAAwD;AACxD,kCAAkC;AAClC,gFAAgF;AAChF,8EAA8E;AAC9E,eAAe;AACf,WAAW;AACX,OAAO;AAIP,gEAAgE;AAChE,qCAAqC;AACrC,0CAA0C;AAC1C,oEAAoE;AACpE,qDAAqD;AAErD,0CAA0C;AAC1C,yBAAyB;AACzB,sCAAsC;AACtC,oCAAoC;AACpC,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,oCAAoC;AACpC,sCAAsC;AACtC,sDAAsD;AACtD,2BAA2B;AAC3B,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAC9C,2CAA2C;AAC3C,kCAAkC;AAClC,+CAA+C;AAE/C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,+CAA+C;AAC/C,4FAA4F;AAC5F,eAAe;AAEf,2CAA2C;AAC3C,iDAAiD;AACjD,oFAAoF;AACpF,2CAA2C;AAC3C,+CAA+C;AAC/C,WAAW;AAEX,wDAAwD;AACxD,mBAAmB;AACnB,uDAAuD;AACvD,gDAAgD;AAChD,6DAA6D;AAC7D,mEAAmE;AACnE,yEAAyE;AACzE,+CAA+C;AAC/C,oBAAoB;AAEpB,yDAAyD;AACzD,yEAAyE;AACzE,4DAA4D;AAC5D,sEAAsE;AACtE,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,6EAA6E;AAC7E,mBAAmB;AACnB,4DAA4D;AAC5D,mDAAmD;AACnD,0CAA0C;AAC1C,sFAAsF;AACtF,oBAAoB;AAEpB,uEAAuE;AACvE,kCAAkC;AAClC,gFAAgF;AAEhF,kDAAkD;AAClD,yDAAyD;AACzD,sEAAsE;AACtE,mBAAmB;AACnB,yDAAyD;AACzD,kEAAkE;AAClE,mBAAmB;AAEnB,oFAAoF;AACpF,eAAe;AACf,WAAW;AACX,OAAO;AAGP,6DAA6D;AAC7D,kCAAkC;AAClC,oEAAoE;AACpE,iEAAiE;AACjE,kDAAkD;AAElD,uCAAuC;AACvC,sBAAsB;AACtB,mCAAmC;AACnC,iCAAiC;AACjC,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,iCAAiC;AACjC,mCAAmC;AACnC,mDAAmD;AACnD,wBAAwB;AACxB,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,4BAA4B;AAC5B,8BAA8B;AAC9B,2CAA2C;AAC3C,wCAAwC;AACxC,+BAA+B;AAC/B,4CAA4C;AAE5C,gDAAgD;AAChD,iCAAiC;AACjC,gEAAgE;AAChE,YAAY;AAEZ,4CAA4C;AAC5C,yFAAyF;AACzF,YAAY;AAEZ,wCAAwC;AACxC,8CAA8C;AAC9C,iFAAiF;AACjF,wCAAwC;AACxC,4CAA4C;AAC5C,QAAQ;AAER,qDAAqD;AACrD,gBAAgB;AAChB,oDAAoD;AACpD,6CAA6C;AAC7C,0DAA0D;AAC1D,gEAAgE;AAChE,qFAAqF;AACrF,4CAA4C;AAC5C,iBAAiB;AAEjB,sDAAsD;AACtD,sEAAsE;AACtE,yDAAyD;AACzD,mEAAmE;AACnE,gBAAgB;AAEhB,iEAAiE;AAEjE,+BAA+B;AAC/B,2EAA2E;AAC3E,yEAAyE;AACzE,YAAY;AACZ,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,yDAAyD;AACzD,gDAAgD;AAChD,uCAAuC;AACvC,mFAAmF;AACnF,iBAAiB;AAEjB,oEAAoE;AACpE,+BAA+B;AAC/B,6EAA6E;AAE7E,+CAA+C;AAC/C,sDAAsD;AACtD,mEAAmE;AACnE,gBAAgB;AAChB,sDAAsD;AACtD,+DAA+D;AAC/D,gBAAgB;AAEhB,iFAAiF;AACjF,YAAY;AACZ,QAAQ;AACR,IAAI;AAKJ,iEAAiE;AACjE,gEAA+B;AAC/B,mCAAoC,CAAE,mBAAmB;AACzD,oEAA8D;AAC9D,kDAA+C;AAkB/C,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,IAAA,mBAAQ,EAAC,+DAA+D,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,uBAAuB;QACtE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE,EAAG,8BAA8B;gBACpE,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YACpD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,OAAO,EAAE,QAAkB,IAAI,IAAI,CAAC,QAAkB;aACnE,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9D,gCAAgC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;CACJ;AAtED,gCAsEC","sourcesContent":["// // import jwt from \"jsonwebtoken\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logError } from \"../logging\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number | undefined;\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n\r\n// //         // Normalize expiresIn\r\n// //         if (options.expiresIn !== undefined) {\r\n// //             this.expiresIn = options.expiresIn as string | number;\r\n// //         }\r\n// //     }\r\n\r\n// //     sign(\r\n// //         payload: object,\r\n// //         options?: { expiresIn?: string | number }\r\n// //     ) {\r\n// //         try {\r\n// //             const finalExpires =\r\n// //                 options?.expiresIn ?? this.expiresIn;\r\n\r\n// //             const jwtOptions: jwt.SignOptions = {};\r\n\r\n// //             if (finalExpires !== undefined) {\r\n// //                 // Force safe cast → matches SignOptions type\r\n// //                 jwtOptions.expiresIn = finalExpires as number | any;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string) {\r\n// //         try {\r\n// //             return jwt.verify(token, this.secret);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT verify failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// // // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// // import jwt from \"jsonwebtoken\";\r\n// // import { v4 as uuidv4 } from \"uuid\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// // import { logError } from \"../logging/index.js\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number;\r\n// //     algorithm?: jwt.Algorithm;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export interface SignOptions {\r\n// //     expiresIn?: string | number;\r\n// //     jti?: string; // JWT ID for token revocation\r\n// //     subject?: string;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n// //     private algorithm: jwt.Algorithm;\r\n// //     private issuer?: string;\r\n// //     private audience?: string | string[];\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         if (options.secret.length < 32) {\r\n// //             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n// //         this.expiresIn = options.expiresIn;\r\n// //         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n// //         this.issuer = options.issuer;\r\n// //         this.audience = options.audience;\r\n// //     }\r\n\r\n// //     sign(payload: object, options?: SignOptions) {\r\n// //         try {\r\n// //             const jwtOptions: jwt.SignOptions = {\r\n// //                 algorithm: this.algorithm,\r\n// //                 issuer: options?.issuer || this.issuer,\r\n// //                 audience: options?.audience || this.audience,\r\n// //                 jwtid: options?.jti || uuidv4(), // Unique token ID\r\n// //                 subject: options?.subject\r\n// //             };\r\n\r\n// //             if (options?.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = options.expiresIn as number;\r\n// //             } else if (this.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = this.expiresIn as number;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string, options?: { audience?: string | string[] }) {\r\n// //         try {\r\n// //             const verifyOptions: jwt.VerifyOptions = {\r\n// //                 algorithms: [this.algorithm],\r\n// //                 issuer: this.issuer,\r\n// //                 audience: options?.audience as string || this.audience as string\r\n// //             };\r\n\r\n// //             return jwt.verify(token, this.secret, verifyOptions);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n// //             // Provide better error messages\r\n// //             if (err.name === 'TokenExpiredError') {\r\n// //                 throw new AdapterError(\"JWT token has expired\");\r\n// //             }\r\n// //             if (err.name === 'JsonWebTokenError') {\r\n// //                 throw new AdapterError(\"Invalid JWT token\");\r\n// //             }\r\n            \r\n// //             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n// // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// import jwt from \"jsonwebtoken\";\r\n// import { nanoid } from \"nanoid\";  // CHANGED: from uuid to nanoid\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logError } from \"../logging/index.js\";\r\n\r\n// export interface JWTAdapterOptions {\r\n//     secret: string;\r\n//     expiresIn?: string | number;\r\n//     algorithm?: jwt.Algorithm;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export interface SignOptions {\r\n//     expiresIn?: string | number;\r\n//     jti?: string; // JWT ID for token revocation\r\n//     subject?: string;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export class JWTAdapter {\r\n//     private secret: string;\r\n//     private expiresIn?: string | number;\r\n//     private algorithm: jwt.Algorithm;\r\n//     private issuer?: string;\r\n//     private audience?: string | string[];\r\n\r\n//     constructor(options: JWTAdapterOptions) {\r\n//         if (!options.secret) {\r\n//             throw new AdapterError(\"JWT secret is required\");\r\n//         }\r\n\r\n//         if (options.secret.length < 32) {\r\n//             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n//         }\r\n\r\n//         this.secret = options.secret;\r\n//         this.expiresIn = options.expiresIn;\r\n//         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n//         this.issuer = options.issuer;\r\n//         this.audience = options.audience;\r\n//     }\r\n\r\n//     sign(payload: object, options?: SignOptions) {\r\n//         try {\r\n//             const jwtOptions: jwt.SignOptions = {\r\n//                 algorithm: this.algorithm,\r\n//                 issuer: options?.issuer || this.issuer,\r\n//                 audience: options?.audience || this.audience,\r\n//                 jwtid: options?.jti || nanoid(),  // CHANGED: uuidv4() to nanoid()\r\n//                 subject: options?.subject\r\n//             };\r\n\r\n//             if (options?.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = options.expiresIn as number;\r\n//             } else if (this.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = this.expiresIn as number;\r\n//             }\r\n\r\n//             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n//             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n//         }\r\n//     }\r\n\r\n//     verify(token: string, options?: { audience?: string | string[] }) {\r\n//         try {\r\n//             const verifyOptions: jwt.VerifyOptions = {\r\n//                 algorithms: [this.algorithm],\r\n//                 issuer: this.issuer,\r\n//                 audience: options?.audience as string || this.audience as string\r\n//             };\r\n\r\n//             return jwt.verify(token, this.secret, verifyOptions);\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n//             // Provide better error messages\r\n//             if (err.name === 'TokenExpiredError') {\r\n//                 throw new AdapterError(\"JWT token has expired\");\r\n//             }\r\n//             if (err.name === 'JsonWebTokenError') {\r\n//                 throw new AdapterError(\"Invalid JWT token\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n// src/adapters/JWTAdapter.ts - FIXED (Using crypto.randomUUID())\r\nimport jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";  // Built-in Node.js\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logError } from \"../logging/index.js\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string; // JWT ID for token revocation\r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(),  // ✅ Using crypto.randomUUID()\r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as number;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as number;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n            throw new AdapterError(err?.message || \"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: options?.audience as string || this.audience as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n            // Provide better error messages\r\n            if (err.name === 'TokenExpiredError') {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n            if (err.name === 'JsonWebTokenError') {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"JWT verification failed\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";AAAA,qCAAqC;AACrC,iEAAiE;AACjE,4CAA4C;;;;;;AAE5C,0CAA0C;AAC1C,yBAAyB;AACzB,kDAAkD;AAClD,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAE9C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,2CAA2C;AAE3C,oCAAoC;AACpC,oDAAoD;AACpD,wEAAwE;AACxE,eAAe;AACf,WAAW;AAEX,eAAe;AACf,8BAA8B;AAC9B,uDAAuD;AACvD,aAAa;AACb,mBAAmB;AACnB,sCAAsC;AACtC,2DAA2D;AAE3D,yDAAyD;AAEzD,mDAAmD;AACnD,mEAAmE;AACnE,0EAA0E;AAC1E,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,iCAAiC;AACjC,mBAAmB;AACnB,wDAAwD;AACxD,kCAAkC;AAClC,gFAAgF;AAChF,8EAA8E;AAC9E,eAAe;AACf,WAAW;AACX,OAAO;AAIP,gEAAgE;AAChE,qCAAqC;AACrC,0CAA0C;AAC1C,oEAAoE;AACpE,qDAAqD;AAErD,0CAA0C;AAC1C,yBAAyB;AACzB,sCAAsC;AACtC,oCAAoC;AACpC,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,oCAAoC;AACpC,sCAAsC;AACtC,sDAAsD;AACtD,2BAA2B;AAC3B,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAC9C,2CAA2C;AAC3C,kCAAkC;AAClC,+CAA+C;AAE/C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,+CAA+C;AAC/C,4FAA4F;AAC5F,eAAe;AAEf,2CAA2C;AAC3C,iDAAiD;AACjD,oFAAoF;AACpF,2CAA2C;AAC3C,+CAA+C;AAC/C,WAAW;AAEX,wDAAwD;AACxD,mBAAmB;AACnB,uDAAuD;AACvD,gDAAgD;AAChD,6DAA6D;AAC7D,mEAAmE;AACnE,yEAAyE;AACzE,+CAA+C;AAC/C,oBAAoB;AAEpB,yDAAyD;AACzD,yEAAyE;AACzE,4DAA4D;AAC5D,sEAAsE;AACtE,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,6EAA6E;AAC7E,mBAAmB;AACnB,4DAA4D;AAC5D,mDAAmD;AACnD,0CAA0C;AAC1C,sFAAsF;AACtF,oBAAoB;AAEpB,uEAAuE;AACvE,kCAAkC;AAClC,gFAAgF;AAEhF,kDAAkD;AAClD,yDAAyD;AACzD,sEAAsE;AACtE,mBAAmB;AACnB,yDAAyD;AACzD,kEAAkE;AAClE,mBAAmB;AAEnB,oFAAoF;AACpF,eAAe;AACf,WAAW;AACX,OAAO;AAGP,6DAA6D;AAC7D,kCAAkC;AAClC,oEAAoE;AACpE,iEAAiE;AACjE,kDAAkD;AAElD,uCAAuC;AACvC,sBAAsB;AACtB,mCAAmC;AACnC,iCAAiC;AACjC,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,iCAAiC;AACjC,mCAAmC;AACnC,mDAAmD;AACnD,wBAAwB;AACxB,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,4BAA4B;AAC5B,8BAA8B;AAC9B,2CAA2C;AAC3C,wCAAwC;AACxC,+BAA+B;AAC/B,4CAA4C;AAE5C,gDAAgD;AAChD,iCAAiC;AACjC,gEAAgE;AAChE,YAAY;AAEZ,4CAA4C;AAC5C,yFAAyF;AACzF,YAAY;AAEZ,wCAAwC;AACxC,8CAA8C;AAC9C,iFAAiF;AACjF,wCAAwC;AACxC,4CAA4C;AAC5C,QAAQ;AAER,qDAAqD;AACrD,gBAAgB;AAChB,oDAAoD;AACpD,6CAA6C;AAC7C,0DAA0D;AAC1D,gEAAgE;AAChE,qFAAqF;AACrF,4CAA4C;AAC5C,iBAAiB;AAEjB,sDAAsD;AACtD,sEAAsE;AACtE,yDAAyD;AACzD,mEAAmE;AACnE,gBAAgB;AAEhB,iEAAiE;AAEjE,+BAA+B;AAC/B,2EAA2E;AAC3E,yEAAyE;AACzE,YAAY;AACZ,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,yDAAyD;AACzD,gDAAgD;AAChD,uCAAuC;AACvC,mFAAmF;AACnF,iBAAiB;AAEjB,oEAAoE;AACpE,+BAA+B;AAC/B,6EAA6E;AAE7E,+CAA+C;AAC/C,sDAAsD;AACtD,mEAAmE;AACnE,gBAAgB;AAChB,sDAAsD;AACtD,+DAA+D;AAC/D,gBAAgB;AAEhB,iFAAiF;AACjF,YAAY;AACZ,QAAQ;AACR,IAAI;AAKJ,iEAAiE;AACjE,gEAA+B;AAC/B,mCAAoC,CAAE,mBAAmB;AACzD,oEAA8D;AAC9D,kDAA+C;AAC/C,wCAAoC;AAkBpC,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACpF,6EAA6E;QACjF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,uBAAuB;QACtE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE,EAAG,8BAA8B;gBACpE,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YACpD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,OAAO,EAAE,QAAkB,IAAI,IAAI,CAAC,QAAkB;aACnE,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9D,gCAAgC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;CACJ;AAvED,gCAuEC","sourcesContent":["// // import jwt from \"jsonwebtoken\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logError } from \"../logging\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number | undefined;\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n\r\n// //         // Normalize expiresIn\r\n// //         if (options.expiresIn !== undefined) {\r\n// //             this.expiresIn = options.expiresIn as string | number;\r\n// //         }\r\n// //     }\r\n\r\n// //     sign(\r\n// //         payload: object,\r\n// //         options?: { expiresIn?: string | number }\r\n// //     ) {\r\n// //         try {\r\n// //             const finalExpires =\r\n// //                 options?.expiresIn ?? this.expiresIn;\r\n\r\n// //             const jwtOptions: jwt.SignOptions = {};\r\n\r\n// //             if (finalExpires !== undefined) {\r\n// //                 // Force safe cast → matches SignOptions type\r\n// //                 jwtOptions.expiresIn = finalExpires as number | any;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string) {\r\n// //         try {\r\n// //             return jwt.verify(token, this.secret);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT verify failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// // // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// // import jwt from \"jsonwebtoken\";\r\n// // import { v4 as uuidv4 } from \"uuid\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// // import { logError } from \"../logging/index.js\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number;\r\n// //     algorithm?: jwt.Algorithm;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export interface SignOptions {\r\n// //     expiresIn?: string | number;\r\n// //     jti?: string; // JWT ID for token revocation\r\n// //     subject?: string;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n// //     private algorithm: jwt.Algorithm;\r\n// //     private issuer?: string;\r\n// //     private audience?: string | string[];\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         if (options.secret.length < 32) {\r\n// //             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n// //         this.expiresIn = options.expiresIn;\r\n// //         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n// //         this.issuer = options.issuer;\r\n// //         this.audience = options.audience;\r\n// //     }\r\n\r\n// //     sign(payload: object, options?: SignOptions) {\r\n// //         try {\r\n// //             const jwtOptions: jwt.SignOptions = {\r\n// //                 algorithm: this.algorithm,\r\n// //                 issuer: options?.issuer || this.issuer,\r\n// //                 audience: options?.audience || this.audience,\r\n// //                 jwtid: options?.jti || uuidv4(), // Unique token ID\r\n// //                 subject: options?.subject\r\n// //             };\r\n\r\n// //             if (options?.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = options.expiresIn as number;\r\n// //             } else if (this.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = this.expiresIn as number;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string, options?: { audience?: string | string[] }) {\r\n// //         try {\r\n// //             const verifyOptions: jwt.VerifyOptions = {\r\n// //                 algorithms: [this.algorithm],\r\n// //                 issuer: this.issuer,\r\n// //                 audience: options?.audience as string || this.audience as string\r\n// //             };\r\n\r\n// //             return jwt.verify(token, this.secret, verifyOptions);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n// //             // Provide better error messages\r\n// //             if (err.name === 'TokenExpiredError') {\r\n// //                 throw new AdapterError(\"JWT token has expired\");\r\n// //             }\r\n// //             if (err.name === 'JsonWebTokenError') {\r\n// //                 throw new AdapterError(\"Invalid JWT token\");\r\n// //             }\r\n            \r\n// //             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n// // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// import jwt from \"jsonwebtoken\";\r\n// import { nanoid } from \"nanoid\";  // CHANGED: from uuid to nanoid\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logError } from \"../logging/index.js\";\r\n\r\n// export interface JWTAdapterOptions {\r\n//     secret: string;\r\n//     expiresIn?: string | number;\r\n//     algorithm?: jwt.Algorithm;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export interface SignOptions {\r\n//     expiresIn?: string | number;\r\n//     jti?: string; // JWT ID for token revocation\r\n//     subject?: string;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export class JWTAdapter {\r\n//     private secret: string;\r\n//     private expiresIn?: string | number;\r\n//     private algorithm: jwt.Algorithm;\r\n//     private issuer?: string;\r\n//     private audience?: string | string[];\r\n\r\n//     constructor(options: JWTAdapterOptions) {\r\n//         if (!options.secret) {\r\n//             throw new AdapterError(\"JWT secret is required\");\r\n//         }\r\n\r\n//         if (options.secret.length < 32) {\r\n//             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n//         }\r\n\r\n//         this.secret = options.secret;\r\n//         this.expiresIn = options.expiresIn;\r\n//         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n//         this.issuer = options.issuer;\r\n//         this.audience = options.audience;\r\n//     }\r\n\r\n//     sign(payload: object, options?: SignOptions) {\r\n//         try {\r\n//             const jwtOptions: jwt.SignOptions = {\r\n//                 algorithm: this.algorithm,\r\n//                 issuer: options?.issuer || this.issuer,\r\n//                 audience: options?.audience || this.audience,\r\n//                 jwtid: options?.jti || nanoid(),  // CHANGED: uuidv4() to nanoid()\r\n//                 subject: options?.subject\r\n//             };\r\n\r\n//             if (options?.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = options.expiresIn as number;\r\n//             } else if (this.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = this.expiresIn as number;\r\n//             }\r\n\r\n//             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n//             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n//         }\r\n//     }\r\n\r\n//     verify(token: string, options?: { audience?: string | string[] }) {\r\n//         try {\r\n//             const verifyOptions: jwt.VerifyOptions = {\r\n//                 algorithms: [this.algorithm],\r\n//                 issuer: this.issuer,\r\n//                 audience: options?.audience as string || this.audience as string\r\n//             };\r\n\r\n//             return jwt.verify(token, this.secret, verifyOptions);\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n//             // Provide better error messages\r\n//             if (err.name === 'TokenExpiredError') {\r\n//                 throw new AdapterError(\"JWT token has expired\");\r\n//             }\r\n//             if (err.name === 'JsonWebTokenError') {\r\n//                 throw new AdapterError(\"Invalid JWT token\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n// src/adapters/JWTAdapter.ts - FIXED (Using crypto.randomUUID())\r\nimport jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";  // Built-in Node.js\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logError } from \"../logging/index.js\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string; // JWT ID for token revocation\r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logger.warn(\"🚨 JWT secret shorter than 32 chars. Consider using stronger secret.\");\r\n            // logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(),  // ✅ Using crypto.randomUUID()\r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as number;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as number;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n            throw new AdapterError(err?.message || \"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: options?.audience as string || this.audience as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n            // Provide better error messages\r\n            if (err.name === 'TokenExpiredError') {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n            if (err.name === 'JsonWebTokenError') {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"JWT verification failed\");\r\n        }\r\n    }\r\n}"]}

package/dist/core/HiSecure.d.ts

@@ -6,7 +6,7 @@ import { SanitizerManager } from "../managers/SanitizerManager.js";
 import { JsonManager } from "../managers/JsonManager.js";
 import { CorsManager } from "../managers/CorsManager.js";
 import { AuthManager } from "../managers/AuthManager.js";
-import { SecureOptions, ValidationSchema } from "./types/SecureOptions.js";
+import { ValidationSchema } from "./types/SecureOptions.js";
 export declare class HiSecure {
     private static instance;
     private config;
@@ -22,38 +22,23 @@ export declare class HiSecure {
     private hashingFallback;
     private rateLimiterPrimary;
     private rateLimiterFallback;
-    private validatorPrimary;
-    private validatorFallback;
-    private sanitizerPrimary;
-    private sanitizerFallback;
     private constructor();
     static getInstance(config?: Partial<HiSecureConfig>): HiSecure;
     static resetInstance(): void;
     init(): void;
-    isInitialized(): boolean;
     static auth(options?: {
         required?: boolean;
         roles?: string[];
     }): (req: import("express").Request, res: import("express").Response, next: import("express").NextFunction) => void;
-    static validate(schema: ValidationSchema): (req: any, res: any, next: any) => void;
+    static validate(schema: ValidationSchema): (req: any, res: any, next: any) => any;
     static sanitize(options?: any): (req: any, _res: any, next: any) => void;
-    static rateLimit(preset: "strict" | "relaxed" | "api" | object): any;
     static cors(options?: any): (req: import("cors").CorsRequest, res: {
         statusCode?: number | undefined;
         setHeader(key: string, value: string): any;
         end(): any;
     }, next: (err?: any) => any) => void;
+    static rateLimit(preset: "strict" | "relaxed" | "api" | object): any;
     static json(options?: any): import("connect").NextHandleFunction[];
-    static hash(password: string): Promise<string>;
-    static verify(password: string, hash: string): Promise<boolean>;
-    static jwt: {
-        sign: (payload: object, options?: any) => string;
-        verify: (token: string) => string | import("jsonwebtoken").Jwt | import("jsonwebtoken").JwtPayload;
-        google: {
-            verifyIdToken: (idToken: string) => Promise<import("../adapters/GoogleAdapter.js").GoogleTokenPayload>;
-        };
-    };
-    static middleware(options?: SecureOptions | "api" | "strict" | "public"): any[];
     private setupAdapters;
     private setupManagers;
     private setupDynamicManagers;

package/dist/core/HiSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAslBA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkB3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASzD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAoB,MAAM,0BAA0B,CAAC;AAE7F,qBAAa,QAAQ;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAChD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;IAGrB,WAAW,EAAG,WAAW,CAAC;IAC1B,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAGjC,OAAO,CAAC,cAAc,CAAM;IAC5B,OAAO,CAAC,eAAe,CAAM;IAC7B,OAAO,CAAC,kBAAkB,CAAM;IAChC,OAAO,CAAC,mBAAmB,CAAM;IACjC,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,iBAAiB,CAAM;IAC/B,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,iBAAiB,CAAM;IAG/B,OAAO;IAQP,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAQ9D,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,IAAI,IAAI,IAAI;IA0BZ,aAAa,IAAI,OAAO;IAQxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAQ9D,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAe9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBA7sBsB,CAAC;;;iBAGjB,CAAC;IA8sBhC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAYZ,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;WAMvC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrE,MAAM,CAAC,GAAG;wBACU,MAAM,YAAY,GAAG;wBAQrB,MAAM;;qCASO,MAAM;;MAQrC;IAMF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ;IAwBvE,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,qBAAqB;CAmDhC"}
+{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAo8BA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkB3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASzD,OAAO,EAAiB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE3E,qBAAa,QAAQ;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAChD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;IAGrB,WAAW,EAAG,WAAW,CAAC;IAC1B,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAGjC,OAAO,CAAC,cAAc,CAAM;IAC5B,OAAO,CAAC,eAAe,CAAM;IAC7B,OAAO,CAAC,kBAAkB,CAAM;IAChC,OAAO,CAAC,mBAAmB,CAAM;IAEjC,OAAO;IAOP,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAQ9D,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,IAAI,IAAI,IAAI;IAqBZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAI9D,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBArhCsB,CAAC;;;iBAGjB,CAAC;IAshChC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAc9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;IAYzB,OAAO,CAAC,aAAa;IAoBrB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,qBAAqB;CAmChC"}

package/dist/core/HiSecure.js

@@ -33,13 +33,12 @@ const hpp_1 = __importDefault(require("hpp"));
 const compression_1 = __importDefault(require("compression"));
 const errorHandler_js_1 = require("../middlewares/errorHandler.js");
 class HiSecure {
-    // Private constructor for singleton
     constructor(userConfig = {}) {
         this.initialized = false;
         this.config = (0, deepMerge_js_1.deepMerge)(config_js_1.defaultConfig, userConfig);
     }
     // =====================================================
-    // SINGLETON & INITIALIZATION
+    // SINGLETON
     // =====================================================
     static getInstance(config) {
         if (!HiSecure.instance) {
@@ -52,39 +51,23 @@ class HiSecure {
         HiSecure.instance = null;
     }
     init() {
-        if (this.initialized) {
-            index_js_1.logger.warn("⚠ HiSecure already initialized");
+        if (this.initialized)
             return;
-        }
         index_js_1.logger.info(`🔐 ${constants_js_1.LIB_NAME} v${constants_js_1.LIB_VERSION} initializing...`);
         this.setupAdapters();
         this.setupManagers();
         this.setupDynamicManagers();
-        // Make everything immutable
+        // ❌ DO NOT FREEZE MANAGERS
+        // ✔ Only freeze config
         (0, deepFreeze_js_1.deepFreeze)(this.config);
-        (0, deepFreeze_js_1.deepFreeze)(this.hashManager);
-        (0, deepFreeze_js_1.deepFreeze)(this.rateLimitManager);
-        (0, deepFreeze_js_1.deepFreeze)(this.validatorManager);
-        (0, deepFreeze_js_1.deepFreeze)(this.sanitizerManager);
-        (0, deepFreeze_js_1.deepFreeze)(this.jsonManager);
-        (0, deepFreeze_js_1.deepFreeze)(this.corsManager);
-        if (this.authManager)
-            (0, deepFreeze_js_1.deepFreeze)(this.authManager);
         this.initialized = true;
         index_js_1.logger.info("✅ HiSecure initialized successfully");
     }
-    isInitialized() {
-        return this.initialized;
-    }
     // =====================================================
-    // FLUENT API METHODS (Route-level security)
+    // FLUENT API (Route-level)
     // =====================================================
     static auth(options) {
-        const instance = this.getInstance();
-        if (!instance.authManager) {
-            throw new Error("Auth not enabled. Set auth.enabled=true in config.");
-        }
-        return instance.authManager.protect(options);
+        return this.getInstance().authManager.protect(options);
     }
     static validate(schema) {
         return this.getInstance().validatorManager.validate(schema);
@@ -92,6 +75,9 @@ class HiSecure {
     static sanitize(options) {
         return this.getInstance().sanitizerManager.middleware(options);
     }
+    static cors(options) {
+        return this.getInstance().corsManager.middleware(options);
+    }
     static rateLimit(preset) {
         const instance = this.getInstance();
         if (typeof preset === "string") {
@@ -104,170 +90,81 @@ class HiSecure {
         }
         return instance.rateLimitManager.middleware({ options: preset });
     }
-    static cors(options) {
-        return this.getInstance().corsManager.middleware(options);
-    }
     static json(options) {
         const instance = this.getInstance();
-        const chain = [];
-        chain.push(instance.jsonManager.middleware(options));
-        chain.push(instance.jsonManager.urlencoded());
-        return chain;
-    }
-    // =====================================================
-    // UTILITY METHODS (Direct usage)
-    // =====================================================
-    static async hash(password) {
-        const instance = this.getInstance();
-        const result = await instance.hashManager.hash(password, { allowFallback: true });
-        return result.hash;
-    }
-    static async verify(password, hash) {
-        return this.getInstance().hashManager.verify(password, hash);
-    }
-    // =====================================================
-    // GLOBAL MIDDLEWARE (app.use())
-    // =====================================================
-    static middleware(options) {
-        const instance = this.getInstance();
-        // Handle preset strings
-        if (typeof options === "string") {
-            const presets = {
-                api: { cors: true, rateLimit: "relaxed", sanitize: true },
-                strict: { cors: true, rateLimit: "strict", sanitize: true, auth: true },
-                public: { cors: true, rateLimit: true, sanitize: false }
-            };
-            const presetOptions = presets[options];
-            if (presetOptions) {
-                return instance.createMiddlewareChain(presetOptions);
-            }
-            return instance.createMiddlewareChain({});
-        }
-        return instance.createMiddlewareChain(options || {});
+        return [
+            instance.jsonManager.middleware(options),
+            instance.jsonManager.urlencoded()
+        ];
     }
     // =====================================================
-    // INTERNAL METHODS
+    // INTERNAL SETUP
     // =====================================================
     setupAdapters() {
         index_js_1.logger.info("🧩 Setting up adapters...");
-        // Hashing
         this.hashingPrimary = this.config.hashing.primary === "argon2"
             ? new ArgonAdapter_js_1.ArgonAdapter()
             : new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds);
         this.hashingFallback = this.config.hashing.fallback === "bcrypt"
             ? new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds)
             : null;
-        // Rate limiting
         this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode
             ? new RLFlexibleAdapter_js_1.RLFlexibleAdapter()
             : new ExpressRLAdapter_js_1.ExpressRLAdapter();
         this.rateLimiterFallback = new ExpressRLAdapter_js_1.ExpressRLAdapter();
-        // Validation
-        this.validatorPrimary = this.config.validation.mode === "zod"
-            ? new ZodAdapter_js_1.ZodAdapter()
-            : new ExpressValidatorAdapter_js_1.ExpressValidatorAdapter();
-        this.validatorFallback = this.config.validation.fallback === "express-validator"
-            ? new ExpressValidatorAdapter_js_1.ExpressValidatorAdapter()
-            : null;
-        // Sanitization
-        this.sanitizerPrimary = new SanitizeHtmlAdapter_js_1.SanitizeHtmlAdapter(this.config.sanitizer);
-        this.sanitizerFallback = new XSSAdapter_js_1.XSSAdapter(this.config.sanitizer);
         index_js_1.logger.info("✅ Adapters ready");
     }
     setupManagers() {
         this.hashManager = new HashManager_js_1.HashManager(this.config.hashing, this.hashingPrimary, this.hashingFallback);
         this.rateLimitManager = new RateLimitManager_js_1.RateLimitManager(this.config.rateLimiter, this.rateLimiterPrimary, this.rateLimiterFallback);
-        this.validatorManager = new ValidatorManager_js_1.ValidatorManager(this.config.validation, this.validatorPrimary, this.validatorFallback);
-        this.sanitizerManager = new SanitizerManager_js_1.SanitizerManager(this.sanitizerPrimary, this.sanitizerFallback);
+        // ✔ AUTO-DETECT VALIDATION (ZOD + EXPRESS-VALIDATOR)
+        this.validatorManager = new ValidatorManager_js_1.ValidatorManager(new ZodAdapter_js_1.ZodAdapter(), new ExpressValidatorAdapter_js_1.ExpressValidatorAdapter());
+        this.sanitizerManager = new SanitizerManager_js_1.SanitizerManager(new SanitizeHtmlAdapter_js_1.SanitizeHtmlAdapter(this.config.sanitizer), new XSSAdapter_js_1.XSSAdapter(this.config.sanitizer));
     }
     setupDynamicManagers() {
         this.jsonManager = new JsonManager_js_1.JsonManager();
         this.corsManager = new CorsManager_js_1.CorsManager();
-        // Auth manager (only if enabled)
         if (this.config.auth.enabled) {
             const jwtSecret = process.env.JWT_SECRET || this.config.auth.jwtSecret;
-            if (!jwtSecret) {
-                throw new Error("JWT_SECRET environment variable or jwtSecret in config is required when auth.enabled=true");
-            }
+            if (!jwtSecret)
+                throw new Error("JWT_SECRET is required when auth.enabled=true");
             this.authManager = new AuthManager_js_1.AuthManager({
                 jwtSecret,
                 jwtExpiresIn: this.config.auth.jwtExpiresIn,
-                googleClientId: process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId
-                // Removed algorithm - handled in AuthManager
+                googleClientId: this.config.auth.googleClientId
             });
         }
     }
     createMiddlewareChain(options) {
         const chain = [];
-        // JSON parsing
         chain.push(this.jsonManager.middleware(this.config.json));
         chain.push(this.jsonManager.urlencoded(this.config.urlencoded));
-        // Security headers
         if (this.config.enableHelmet)
             chain.push((0, helmet_1.default)());
         if (this.config.enableHPP)
             chain.push((0, hpp_1.default)());
-        // Compression (check if compression config exists)
-        if (this.config.enableCompression && this.config.compression) {
+        if (this.config.enableCompression)
             chain.push((0, compression_1.default)(this.config.compression));
-        }
-        else if (this.config.enableCompression) {
-            chain.push((0, compression_1.default)()); // Use defaults
-        }
-        // CORS
         if (this.config.enableCORS || options.cors) {
-            const corsOptions = options.cors === true ? this.config.cors :
-                (typeof options.cors === 'object' ? options.cors : this.config.cors);
-            chain.push(this.corsManager.middleware(corsOptions));
+            const opts = typeof options.cors === "object" ? options.cors : this.config.cors;
+            chain.push(this.corsManager.middleware(opts));
         }
-        // Sanitization
         if (this.config.enableSanitizer || options.sanitize) {
-            const sanitizeOptions = options.sanitize === true ? undefined :
-                (typeof options.sanitize === 'object' ? options.sanitize : undefined);
-            chain.push(this.sanitizerManager.middleware(sanitizeOptions));
+            const opts = typeof options.sanitize === "object" ? options.sanitize : undefined;
+            chain.push(this.sanitizerManager.middleware(opts));
         }
-        // Rate limiting
         if (this.config.enableRateLimiter || options.rateLimit) {
-            const rateLimitOpts = typeof options.rateLimit === 'object' ?
-                { options: options.rateLimit } : {};
-            chain.push(this.rateLimitManager.middleware(rateLimitOpts));
+            const opts = typeof options.rateLimit === "object" ? { options: options.rateLimit } : {};
+            chain.push(this.rateLimitManager.middleware(opts));
         }
-        // Authentication
         if (options.auth && this.authManager) {
-            const authOpts = options.auth === true ? undefined :
-                (typeof options.auth === 'object' ? options.auth : undefined);
-            chain.push(this.authManager.protect(authOpts));
+            const opts = typeof options.auth === "object" ? options.auth : undefined;
+            chain.push(this.authManager.protect(opts));
         }
-        // Error handler (always last)
         chain.push(errorHandler_js_1.errorHandler);
         return chain;
     }
 }
 exports.HiSecure = HiSecure;
 HiSecure.instance = null;
-HiSecure.jwt = {
-    sign: (payload, options) => {
-        const instance = HiSecure.getInstance();
-        if (!instance.authManager) {
-            throw new Error("Auth not enabled");
-        }
-        return instance.authManager.sign(payload, options);
-    },
-    verify: (token) => {
-        const instance = HiSecure.getInstance();
-        if (!instance.authManager) {
-            throw new Error("Auth not enabled");
-        }
-        return instance.authManager.verify(token);
-    },
-    google: {
-        verifyIdToken: (idToken) => {
-            const instance = HiSecure.getInstance();
-            if (!instance.authManager) {
-                throw new Error("Auth not enabled");
-            }
-            return instance.authManager.verifyGoogleIdToken(idToken);
-        }
-    }
-};
 //# sourceMappingURL=HiSecure.js.map