hi-secure 1.0.25 → 1.0.27

package/dist/index.js

@@ -1,6 +1,18 @@
 "use strict";
+// import { HiSecure } from "./core/HiSecure.js";
+// import { useSecure, secureRoute } from "./core/useSecure.js";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.secureRoute = exports.useSecure = exports.hiSecure = exports.HiSecure = exports.header = exports.param = exports.query = exports.body = exports.z = void 0;
+exports.secureRoute = exports.useSecure = exports.HiSecure = exports.header = exports.param = exports.query = exports.body = exports.z = void 0;
+// export { z } from "zod";
+// export { body, query, param, header } from "express-validator";
+// const hiSecure = HiSecure.getInstance();
+// export { 
+//     HiSecure,        
+//     hiSecure,        
+//     useSecure,       
+//     secureRoute      
+// };
+// export default hiSecure;
 const HiSecure_js_1 = require("./core/HiSecure.js");
 Object.defineProperty(exports, "HiSecure", { enumerable: true, get: function () { return HiSecure_js_1.HiSecure; } });
 const useSecure_js_1 = require("./core/useSecure.js");
@@ -13,7 +25,4 @@ Object.defineProperty(exports, "body", { enumerable: true, get: function () { re
 Object.defineProperty(exports, "query", { enumerable: true, get: function () { return express_validator_1.query; } });
 Object.defineProperty(exports, "param", { enumerable: true, get: function () { return express_validator_1.param; } });
 Object.defineProperty(exports, "header", { enumerable: true, get: function () { return express_validator_1.header; } });
-const hiSecure = HiSecure_js_1.HiSecure.getInstance();
-exports.hiSecure = hiSecure;
-exports.default = hiSecure;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,oDAA8C;AAU1C,yFAVK,sBAAQ,OAUL;AATZ,sDAA6D;AAWzD,0FAXK,wBAAS,OAWL;AACT,4FAZgB,0BAAW,OAYhB;AATf,2BAAwB;AAAf,wFAAA,CAAC,OAAA;AACV,uDAA+D;AAAtD,yGAAA,IAAI,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,2GAAA,MAAM,OAAA;AAEnC,MAAM,QAAQ,GAAG,sBAAQ,CAAC,WAAW,EAAE,CAAC;AAIpC,4BAAQ;AAKZ,kBAAe,QAAQ,CAAC","sourcesContent":["import { HiSecure } from \"./core/HiSecure.js\";\r\nimport { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\n\r\nexport { z } from \"zod\";\r\nexport { body, query, param, header } from \"express-validator\";\r\n\r\nconst hiSecure = HiSecure.getInstance();\r\n\r\nexport { \r\n    HiSecure,        \r\n    hiSecure,        \r\n    useSecure,       \r\n    secureRoute      \r\n};\r\n\r\nexport default hiSecure;\r\n\r\n\r\n\r\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,gEAAgE;;;AAGhE,2BAA2B;AAC3B,kEAAkE;AAElE,2CAA2C;AAE3C,YAAY;AACZ,wBAAwB;AACxB,wBAAwB;AACxB,wBAAwB;AACxB,wBAAwB;AACxB,KAAK;AAEL,2BAA2B;AAK3B,oDAA8C;AAQ5C,yFARO,sBAAQ,OAQP;AAPV,sDAA6D;AAQ3D,0FARO,wBAAS,OAQP;AACT,4FATkB,0BAAW,OASlB;AAPb,2BAAwB;AAAf,wFAAA,CAAC,OAAA;AACV,uDAA+D;AAAtD,yGAAA,IAAI,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,2GAAA,MAAM,OAAA","sourcesContent":["// import { HiSecure } from \"./core/HiSecure.js\";\r\n// import { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\n\r\n// export { z } from \"zod\";\r\n// export { body, query, param, header } from \"express-validator\";\r\n\r\n// const hiSecure = HiSecure.getInstance();\r\n\r\n// export { \r\n//     HiSecure,        \r\n//     hiSecure,        \r\n//     useSecure,       \r\n//     secureRoute      \r\n// };\r\n\r\n// export default hiSecure;\r\n\r\n\r\n\r\n\r\nimport { HiSecure } from \"./core/HiSecure.js\";\r\nimport { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\nexport { z } from \"zod\";\r\nexport { body, query, param, header } from \"express-validator\";\r\n\r\n\r\nexport {\r\n  HiSecure,\r\n  useSecure,\r\n  secureRoute\r\n};\r\n\r\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "hi-secure",
-    "version": "1.0.25",
+    "version": "1.0.27",
     "description": "Unified security layer for Express.js: authentication, validation, sanitization, rate limiting and CORS",
     "license": "MIT",
     "main": "dist/index.js",

package/readme.md

@@ -485,7 +485,7 @@ It covers signup, JWT login, Google login, role-based access control, and proper
 <ul>
   <li>Signup using email and password</li>
   <li>Login using email and password (JWT-based)</li>
-  <li>Login with Google (ID token verification)</li>
+  <li>Login with Google (ID token verification) - Added Soon in Docs </li>
   <li>Role-based protected routes</li>
   <li>Optional authentication support</li>
   <li>Correct HiSecure bootstrap with reset rules</li>
@@ -511,7 +511,7 @@ HiSecure.getInstance({
     enabled: true,
     jwtSecret: process.env.JWT_SECRET || "supersecret_32_chars_minimum",
     jwtExpiresIn: "1d",
-    googleClientId: process.env.GOOGLE_CLIENT_ID
+    googleClientId: process.env.GOOGLE_CLIENT_ID   // this only added if need googleLogin as well
   }
 });
 
@@ -560,128 +560,190 @@ export default router;
 
 <h4>Signup (Email and Password)</h4>
 
-<pre><code>import { HiSecure } from "hi-secure";
+<pre><code>
+import { HiSecure } from "hi-secure";
 import { HttpError } from "../core/errors/HttpError.js";
 import User from "../models/User.js";
 
-export const signup = async (req, res, next) => {
-  try {
-    const { email, password, name } = req.body;
-
-    if (!email || !password) {
-      throw HttpError.BadRequest("Email and password required");
-    }
-
-    const existing = await User.findOne({ email });
-    if (existing) {
-      throw HttpError.Conflict("User already exists");
-    }
-
-    const passwordHash = await HiSecure.hash(password);
 
-    const user = await User.create({
-      email,
-      name,
-      passwordHash,
-      roles: ["user"],
-      provider: "local"
-    });
+const JWT_OPTIONS = {
+    issuer: 'hi-secure-backend',
+    audience: ['web-app', 'mobile-app'],
+    expiresIn: '7d',
+    subject: 'user-authentication'
+};
 
-    const token = HiSecure.jwt.sign({
-      userId: user.id,
-      roles: user.roles
-    });
 
-    res.status(201).json({ token, user });
-  } catch (err) {
-    next(err);
-  }
+exports.registerUser = async(req, res) => {
+    try {
+        const { name, email, password } = req.body;
+
+        const existingUser = await User.findOne({ email });
+        if (existingUser) {
+            return res.status(400).json({
+                error: 'User already exists'
+            });
+        }
+
+        const hashedPassword = await HiSecure.hash(password);
+
+        const user = await User.create({
+            name,
+            email,
+            password: hashedPassword
+        });
+
+        const token = HiSecure.jwt.sign({
+                userId: user._id.toString(),
+                email: user.email,
+                name: user.name,
+                role: 'user'
+            },
+            JWT_OPTIONS
+        );
+
+        res.status(201).json({
+            message: 'User registered successfully',
+            token,
+            user: {
+                id: user._id,
+                name: user.name,
+                email: user.email
+            }
+        });
+
+    } catch (error) {
+        console.error('Registration error:', error);
+        res.status(500).json({
+            error: 'Registration failed',
+            details: error.message
+        });
+    }
 };
+
 </code></pre>
 
 <hr/>
 
 <h4>Login (Email and Password)</h4>
 
-<pre><code>export const loginWithJwt = async (req, res, next) => {
-  try {
-    const { email, password } = req.body;
-
-    const user = await User.findOne({ email });
-    if (!user || !user.passwordHash) {
-      throw HttpError.Unauthorized("Invalid credentials");
+<pre><code>
+
+exports.loginUser = async(req, res) => {
+    try {
+        const { email, password } = req.body;
+
+        const user = await User.findOne({ email });
+        if (!user) {
+            return res.status(401).json({
+                error: 'Invalid credentials'
+            });
+        }
+
+        const isValid = await HiSecure.verify(password, user.password);
+        if (!isValid) {
+            return res.status(401).json({
+                error: 'Invalid credentials'
+            });
+        }
+
+        const token = HiSecure.jwt.sign({
+                userId: user._id.toString(),
+                email: user.email,
+                name: user.name,
+                role: 'user'
+            },
+            JWT_OPTIONS
+        );
+
+        res.json({
+            message: 'Login successful',
+            token,
+            user: {
+                id: user._id,
+                name: user.name,
+                email: user.email
+            }
+        });
+
+    } catch (error) {
+        console.error('Login error:', error);
+        res.status(500).json({
+            error: 'Login failed',
+            details: error.message
+        });
     }
+};
 
-    const isValid = await HiSecure.verify(password, user.passwordHash);
-    if (!isValid) {
-      throw HttpError.Unauthorized("Invalid credentials");
-    }
+</code></pre>
+
+<hr/>
 
-    const token = HiSecure.jwt.sign({
-      userId: user.id,
-      roles: user.roles
-    });
+<h3>Role-Based Protected Routes</h3>
 
-    res.json({ token, user });
-  } catch (err) {
-    next(err);
+<pre><code>app.get(
+  "/admin",
+  HiSecure.auth({ roles: ["admin"] }),
+  (req, res) => {
+    res.json({ message: "Welcome Admin" });
   }
-};
+);
 </code></pre>
 
-<hr/>
 
-<h4>Login with Google</h4>
+<pre>
+<code>
+const router = express.Router();
+    router.post(
+        '/register',
 
-<pre><code>export const loginWithGoogle = async (req, res, next) => {
-  try {
-    const { idToken } = req.body;
-    if (!idToken) {
-      throw HttpError.BadRequest("Google idToken required");
-    }
+        HiSecure.validate([
+            body("name")
+            .notEmpty().withMessage("Name is required")
+            .isLength({ min: 3 }).withMessage("Name must be at least 3 characters"),
 
-    const googleUser = await HiSecure.jwt.google.verifyIdToken(idToken);
+            body("email")
+            .notEmpty().withMessage("Email is required")
+            .isEmail().withMessage("Invalid email format"),
 
-    if (!googleUser.email_verified) {
-      throw HttpError.Unauthorized("Google email not verified");
-    }
+            body("password")
+            .notEmpty().withMessage("Password is required")
+            .isLength({ min: 6 }).withMessage("Password must be at least 6 characters"),
+        ]),
 
-    let user = await User.findOne({ email: googleUser.email });
+        registerUser
+    );
 
-    if (!user) {
-      user = await User.create({
-        email: googleUser.email,
-        name: googleUser.name,
-        provider: "google",
-        providerId: googleUser.sub,
-        roles: ["user"]
-      });
-    }
+    router.post(
+        '/login',
 
-    const token = HiSecure.jwt.sign({
-      userId: user.id,
-      roles: user.roles
-    });
+        HiSecure.validate([
+            body("email")
+            .notEmpty().withMessage("Email is required")
+            .isEmail().withMessage("Invalid email format"),
 
-    res.json({ token, user });
-  } catch (err) {
-    next(err);
-  }
-};
-</code></pre>
+            body("password")
+            .notEmpty().withMessage("Password is required")
+        ]),
 
-<hr/>
+        HiSecure.rateLimit({ max: 5, windowMs: 15 * 60 * 1000 }),
 
-<h3>Role-Based Protected Routes</h3>
+        loginUser
+    );
 
-<pre><code>app.get(
-  "/admin",
-  HiSecure.auth({ roles: ["admin"] }),
-  (req, res) => {
-    res.json({ message: "Welcome Admin" });
-  }
-);
-</code></pre>
+    router.get(
+        '/profile',
+        HiSecure.auth({ required: true }),
+        getProfile
+    );
+
+    <!-- U can also add validator [Either zod Or express-validator] -->
+    router.post('/create', HiSecure.auth({ required: true }), createTask)
+    router.get('/get', HiSecure.auth({ required: true }), getTask)
+    router.put('/:id', HiSecure.auth({ required: true }), updateTask)
+    router.psot('/health',heatlh);
+</code>
+</pre>
 
 <hr/>