hi-secure 1.0.7 → 1.0.10

package/dist/adapters/ArgonAdapter.js

@@ -17,7 +17,7 @@ class ArgonAdapter {
         try {
             return this.options
                 ? await argon2_1.default.hash(value, this.options)
-                : await argon2_1.default.hash(value); // avoid passing undefined
+                : await argon2_1.default.hash(value);
         }
         catch (err) {
             logging_1.logger.error("❌ Argon2 hashing failed", {

package/dist/adapters/ArgonAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ArgonAdapter.js","sourceRoot":"","sources":["../../src/adapters/ArgonAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,8DAA2D;AAC3D,wCAAoC;AAEpC,MAAa,YAAY;IAGrB,YAAY,OAAwB;QAChC,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACpB,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,OAAO;gBACf,CAAC,CAAC,MAAM,gBAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;gBACxC,CAAC,CAAC,MAAM,gBAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,0BAA0B;QAC9D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACpC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,MAAc;QACtC,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,IAAI,2BAAY,CAAC,yCAAyC,CAAC,CAAC;YACtE,CAAC;YAED,OAAO,MAAM,gBAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBACnC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;CACJ;AApCD,oCAoCC","sourcesContent":["import argon2 from \"argon2\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport class ArgonAdapter {\r\n    private options: argon2.Options | undefined;\r\n\r\n    constructor(options?: argon2.Options) {\r\n        if (options) {\r\n            this.options = options;\r\n        }\r\n    }\r\n\r\n    async hash(value: string): Promise<string> {\r\n        try {\r\n            return this.options\r\n                ? await argon2.hash(value, this.options)\r\n                : await argon2.hash(value); // avoid passing undefined\r\n        } catch (err: any) {\r\n            logger.error(\"❌ Argon2 hashing failed\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Argon2 hashing failed.\");\r\n        }\r\n    }\r\n\r\n    async verify(value: string, hashed: string): Promise<boolean> {\r\n        try {\r\n            if (!hashed || typeof hashed !== \"string\") {\r\n                throw new AdapterError(\"Invalid hash provided for verification.\");\r\n            }\r\n\r\n            return await argon2.verify(hashed, value);\r\n        } catch (err: any) {\r\n            logger.error(\"❌ Argon2 verify failed\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Argon2 verify failed.\");\r\n        }\r\n    }\r\n}\r\n"]}
+{"version":3,"file":"ArgonAdapter.js","sourceRoot":"","sources":["../../src/adapters/ArgonAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,8DAA2D;AAC3D,wCAAoC;AAEpC,MAAa,YAAY;IAGrB,YAAY,OAAwB;QAChC,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACpB,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,OAAO;gBACf,CAAC,CAAC,MAAM,gBAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;gBACxC,CAAC,CAAC,MAAM,gBAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACpC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,MAAc;QACtC,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,IAAI,2BAAY,CAAC,yCAAyC,CAAC,CAAC;YACtE,CAAC;YAED,OAAO,MAAM,gBAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBACnC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;CACJ;AApCD,oCAoCC","sourcesContent":["import argon2 from \"argon2\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport class ArgonAdapter {\r\n    private options: argon2.Options | undefined;\r\n\r\n    constructor(options?: argon2.Options) {\r\n        if (options) {\r\n            this.options = options;\r\n        }\r\n    }\r\n\r\n    async hash(value: string): Promise<string> {\r\n        try {\r\n            return this.options\r\n                ? await argon2.hash(value, this.options)\r\n                : await argon2.hash(value);\r\n        } catch (err: any) {\r\n            logger.error(\"❌ Argon2 hashing failed\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Argon2 hashing failed.\");\r\n        }\r\n    }\r\n\r\n    async verify(value: string, hashed: string): Promise<boolean> {\r\n        try {\r\n            if (!hashed || typeof hashed !== \"string\") {\r\n                throw new AdapterError(\"Invalid hash provided for verification.\");\r\n            }\r\n\r\n            return await argon2.verify(hashed, value);\r\n        } catch (err: any) {\r\n            logger.error(\"❌ Argon2 verify failed\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Argon2 verify failed.\");\r\n        }\r\n    }\r\n}\r\n"]}

package/dist/adapters/ExpressRLAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressRLAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,gBAAgB;IACzB,aAAa,CAAC,OAAO,GAAE,gBAAqB;CA6B/C"}
+{"version":3,"file":"ExpressRLAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,gBAAgB;IACzB,aAAa,CAAC,OAAO,GAAE,gBAAqB;CA6B/C"}

package/dist/adapters/ExpressRLAdapter.js

@@ -4,7 +4,6 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExpressRLAdapter = void 0;
-// src/adapters/ExpressRLAdapter.ts - IMPROVED
 const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
 const index_js_1 = require("../logging/index.js");
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
@@ -12,7 +11,7 @@ class ExpressRLAdapter {
     getMiddleware(options = {}) {
         try {
             const defaultOptions = {
-                windowMs: 15 * 60 * 1000, // 15 minutes
+                windowMs: 15 * 60 * 1000,
                 max: 100,
                 message: { error: "Too many requests" },
                 standardHeaders: true,

package/dist/adapters/ExpressRLAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressRLAdapter.js","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,8CAA8C;AAC9C,4EAA2C;AAC3C,kDAA6C;AAC7C,oEAA8D;AAY9D,MAAa,gBAAgB;IACzB,aAAa,CAAC,UAA4B,EAAE;QACxC,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;gBACvC,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;gBACvC,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,KAAK;gBACpB,kBAAkB,EAAE,KAAK;aAC5B,CAAC;YAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;YAEvD,MAAM,OAAO,GAAG,IAAA,4BAAS,EAAC,YAAY,CAAC,CAAC;YAExC,iBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,GAAG,EAAE,YAAY,CAAC,GAAG;aACxB,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QAEnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,iBAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBACzD,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,uCAAuC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;CACJ;AA9BD,4CA8BC","sourcesContent":["// src/adapters/ExpressRLAdapter.ts - IMPROVED\r\nimport rateLimit from \"express-rate-limit\";\r\nimport { logger } from \"../logging/index.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport interface RateLimitOptions {\r\n    windowMs?: number;\r\n    max?: number;\r\n    message?: any;\r\n    skipFailedRequests?: boolean;\r\n    standardHeaders?: boolean;\r\n    legacyHeaders?: boolean;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class ExpressRLAdapter {\r\n    getMiddleware(options: RateLimitOptions = {}) {\r\n        try {\r\n            const defaultOptions = {\r\n                windowMs: 15 * 60 * 1000, // 15 minutes\r\n                max: 100,\r\n                message: { error: \"Too many requests\" },\r\n                standardHeaders: true,\r\n                legacyHeaders: false,\r\n                skipFailedRequests: false\r\n            };\r\n\r\n            const finalOptions = { ...defaultOptions, ...options };\r\n            \r\n            const limiter = rateLimit(finalOptions);\r\n            \r\n            logger.debug(\"📌 Express rate limiter configured\", {\r\n                windowMs: finalOptions.windowMs,\r\n                max: finalOptions.max\r\n            });\r\n\r\n            return limiter;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"❌ ExpressRLAdapter: failed to create limiter\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Express rate limiter creation failed.\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"ExpressRLAdapter.js","sourceRoot":"","sources":["../../src/adapters/ExpressRLAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,4EAA2C;AAC3C,kDAA6C;AAC7C,oEAA8D;AAY9D,MAAa,gBAAgB;IACzB,aAAa,CAAC,UAA4B,EAAE;QACxC,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;gBACxB,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;gBACvC,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,KAAK;gBACpB,kBAAkB,EAAE,KAAK;aAC5B,CAAC;YAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;YAEvD,MAAM,OAAO,GAAG,IAAA,4BAAS,EAAC,YAAY,CAAC,CAAC;YAExC,iBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,GAAG,EAAE,YAAY,CAAC,GAAG;aACxB,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QAEnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,iBAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBACzD,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,uCAAuC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;CACJ;AA9BD,4CA8BC","sourcesContent":["import rateLimit from \"express-rate-limit\";\r\nimport { logger } from \"../logging/index.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport interface RateLimitOptions {\r\n    windowMs?: number;\r\n    max?: number;\r\n    message?: any;\r\n    skipFailedRequests?: boolean;\r\n    standardHeaders?: boolean;\r\n    legacyHeaders?: boolean;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class ExpressRLAdapter {\r\n    getMiddleware(options: RateLimitOptions = {}) {\r\n        try {\r\n            const defaultOptions = {\r\n                windowMs: 15 * 60 * 1000, \r\n                max: 100,\r\n                message: { error: \"Too many requests\" },\r\n                standardHeaders: true,\r\n                legacyHeaders: false,\r\n                skipFailedRequests: false\r\n            };\r\n\r\n            const finalOptions = { ...defaultOptions, ...options };\r\n            \r\n            const limiter = rateLimit(finalOptions);\r\n            \r\n            logger.debug(\"📌 Express rate limiter configured\", {\r\n                windowMs: finalOptions.windowMs,\r\n                max: finalOptions.max\r\n            });\r\n\r\n            return limiter;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"❌ ExpressRLAdapter: failed to create limiter\", {\r\n                error: err?.message || err\r\n            });\r\n            throw new AdapterError(\"Express rate limiter creation failed.\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/ExpressValidatorAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressValidatorAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ExpressValidatorAdapter.ts"],"names":[],"mappings":"AAyDA,qBAAa,uBAAuB;IAChC,OAAO,CAAC,YAAY,CAAC,CAAQ;gBAEjB,YAAY,CAAC,EAAE,GAAG,EAAE;IAIhC,QAAQ,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,kBAIT,GAAG,OAAO,GAAG,QAAQ,GAAG;CA8BhD"}
+{"version":3,"file":"ExpressValidatorAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ExpressValidatorAdapter.ts"],"names":[],"mappings":"AAIA,qBAAa,uBAAuB;IAChC,OAAO,CAAC,YAAY,CAAC,CAAQ;gBAEjB,YAAY,CAAC,EAAE,GAAG,EAAE;IAIhC,QAAQ,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,kBAIT,GAAG,OAAO,GAAG,QAAQ,GAAG;CA8BhD"}

package/dist/adapters/ExpressValidatorAdapter.js

@@ -1,46 +1,8 @@
 "use strict";
-// import { validationResult } from "express-validator";
-// import { ValidationError } from "../core/errors/ValidationError";
-// import { logger } from "../logging";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExpressValidatorAdapter = void 0;
-// export class ExpressValidatorAdapter {
-//     private globalSchema?: any[];
-//     constructor(globalSchema?: any[]) {
-//         this.globalSchema = globalSchema as any;;
-//     }
-//     /**
-//      * Dynamic schema override
-//      */
-//     validate(dynamicSchema?: any[]) {
-//         const schema = dynamicSchema || this.globalSchema;
-//         if (!schema || !Array.isArray(schema)) {
-//             return (req: any, res: any, next: any) => next();
-//         }
-//         return [
-//             ...schema,
-//             (req: any, res: any, next: any) => {
-//                 const errors = validationResult(req);
-//                 if (!errors.isEmpty()) {
-//                     const formatted = errors.array().map(err => ({
-//                         message: err.msg,
-//                     }));
-//                     logger.warn("⚠ express-validator failed", {
-//                         path: req.path,
-//                         method: req.method,
-//                         errors: formatted,
-//                         preview: JSON.stringify(req.body).slice(0, 200)
-//                     });
-//                     return next(new ValidationError("Validation failed."));
-//                 }
-//                 next();
-//             }
-//         ];
-//     }
-// }
-// src/adapters/ExpressValidatorAdapter.ts - FIXED
 const express_validator_1 = require("express-validator");
-const ValidationError_js_1 = require("../core/errors/ValidationError.js"); // ✅ Add .js
+const ValidationError_js_1 = require("../core/errors/ValidationError.js");
 const index_js_1 = require("../logging/index.js");
 class ExpressValidatorAdapter {
     constructor(globalSchema) {

package/dist/adapters/ExpressValidatorAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressValidatorAdapter.js","sourceRoot":"","sources":["../../src/adapters/ExpressValidatorAdapter.ts"],"names":[],"mappings":";AAAA,wDAAwD;AACxD,oEAAoE;AACpE,uCAAuC;;;AAEvC,yCAAyC;AACzC,oCAAoC;AAEpC,0CAA0C;AAC1C,oDAAoD;AACpD,QAAQ;AAER,UAAU;AACV,iCAAiC;AACjC,UAAU;AACV,wCAAwC;AACxC,6DAA6D;AAE7D,mDAAmD;AACnD,gEAAgE;AAChE,YAAY;AAEZ,mBAAmB;AACnB,yBAAyB;AAEzB,mDAAmD;AACnD,wDAAwD;AAExD,2CAA2C;AAC3C,qEAAqE;AACrE,4CAA4C;AAC5C,2BAA2B;AAE3B,kEAAkE;AAClE,0CAA0C;AAC1C,8CAA8C;AAC9C,6CAA6C;AAC7C,0EAA0E;AAC1E,0BAA0B;AAE1B,8EAA8E;AAC9E,oBAAoB;AAEpB,0BAA0B;AAC1B,gBAAgB;AAChB,aAAa;AACb,QAAQ;AACR,IAAI;AAMJ,kDAAkD;AAClD,yDAAqD;AACrD,0EAAoE,CAAC,YAAY;AACjF,kDAA6C;AAE7C,MAAa,uBAAuB;IAGhC,YAAY,YAAoB;QAC5B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,aAAqB;QAC1B,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;QAElD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,OAAO;YACH,GAAG,MAAM;YAET,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;gBAC9B,MAAM,MAAM,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;gBAErC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;oBACpB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACzC,OAAO,EAAE,GAAG,CAAC,GAAG;wBAChB,qBAAqB;wBACrB,yBAAyB;qBAC5B,CAAC,CAAC,CAAC;oBAEJ,iBAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;wBACtC,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,MAAM,EAAE,SAAS;wBACjB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAClD,CAAC,CAAC;oBAEH,OAAO,IAAI,CAAC,IAAI,oCAAe,CAAC,oBAAoB,EAAE,SAAgB,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBAED,IAAI,EAAE,CAAC;YACX,CAAC;SACJ,CAAC;IACN,CAAC;CACJ;AAzCD,0DAyCC","sourcesContent":["// import { validationResult } from \"express-validator\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { logger } from \"../logging\";\r\n\r\n// export class ExpressValidatorAdapter {\r\n//     private globalSchema?: any[];\r\n\r\n//     constructor(globalSchema?: any[]) {\r\n//         this.globalSchema = globalSchema as any;;\r\n//     }\r\n\r\n//     /**\r\n//      * Dynamic schema override\r\n//      */\r\n//     validate(dynamicSchema?: any[]) {\r\n//         const schema = dynamicSchema || this.globalSchema;\r\n\r\n//         if (!schema || !Array.isArray(schema)) {\r\n//             return (req: any, res: any, next: any) => next();\r\n//         }\r\n\r\n//         return [\r\n//             ...schema,\r\n\r\n//             (req: any, res: any, next: any) => {\r\n//                 const errors = validationResult(req);\r\n\r\n//                 if (!errors.isEmpty()) {\r\n//                     const formatted = errors.array().map(err => ({\r\n//                         message: err.msg,\r\n//                     }));\r\n\r\n//                     logger.warn(\"⚠ express-validator failed\", {\r\n//                         path: req.path,\r\n//                         method: req.method,\r\n//                         errors: formatted,\r\n//                         preview: JSON.stringify(req.body).slice(0, 200)\r\n//                     });\r\n\r\n//                     return next(new ValidationError(\"Validation failed.\"));\r\n//                 }\r\n\r\n//                 next();\r\n//             }\r\n//         ];\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n\r\n// src/adapters/ExpressValidatorAdapter.ts - FIXED\r\nimport { validationResult } from \"express-validator\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\"; // ✅ Add .js\r\nimport { logger } from \"../logging/index.js\";\r\n\r\nexport class ExpressValidatorAdapter {\r\n    private globalSchema?: any[];\r\n\r\n    constructor(globalSchema?: any[]) {\r\n        this.globalSchema = globalSchema;\r\n    }\r\n\r\n    validate(dynamicSchema?: any[]) {\r\n        const schema = dynamicSchema || this.globalSchema;\r\n\r\n        if (!schema || !Array.isArray(schema)) {\r\n            return (req: any, res: any, next: any) => next();\r\n        }\r\n\r\n        return [\r\n            ...schema,\r\n\r\n            (req: any, res: any, next: any) => {\r\n                const errors = validationResult(req);\r\n\r\n                if (!errors.isEmpty()) {\r\n                    const formatted = errors.array().map(err => ({\r\n                        message: err.msg,\r\n                        // param: err.param ,\r\n                        // location: err.location\r\n                    }));\r\n\r\n                    logger.warn(\"⚠ express-validator failed\", {\r\n                        path: req.path,\r\n                        method: req.method,\r\n                        errors: formatted,\r\n                        preview: JSON.stringify(req.body).slice(0, 200)\r\n                    });\r\n\r\n                    return next(new ValidationError(\"Validation failed.\", formatted as any));\r\n                }\r\n\r\n                next();\r\n            }\r\n        ];\r\n    }\r\n}"]}
+{"version":3,"file":"ExpressValidatorAdapter.js","sourceRoot":"","sources":["../../src/adapters/ExpressValidatorAdapter.ts"],"names":[],"mappings":";;;AAAA,yDAAqD;AACrD,0EAAoE;AACpE,kDAA6C;AAE7C,MAAa,uBAAuB;IAGhC,YAAY,YAAoB;QAC5B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,aAAqB;QAC1B,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;QAElD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,OAAO;YACH,GAAG,MAAM;YAET,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;gBAC9B,MAAM,MAAM,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;gBAErC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;oBACpB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACzC,OAAO,EAAE,GAAG,CAAC,GAAG;wBAChB,qBAAqB;wBACrB,yBAAyB;qBAC5B,CAAC,CAAC,CAAC;oBAEJ,iBAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;wBACtC,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,MAAM,EAAE,SAAS;wBACjB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAClD,CAAC,CAAC;oBAEH,OAAO,IAAI,CAAC,IAAI,oCAAe,CAAC,oBAAoB,EAAE,SAAgB,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBAED,IAAI,EAAE,CAAC;YACX,CAAC;SACJ,CAAC;IACN,CAAC;CACJ;AAzCD,0DAyCC","sourcesContent":["import { validationResult } from \"express-validator\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\"; \r\nimport { logger } from \"../logging/index.js\";\r\n\r\nexport class ExpressValidatorAdapter {\r\n    private globalSchema?: any[];\r\n\r\n    constructor(globalSchema?: any[]) {\r\n        this.globalSchema = globalSchema;\r\n    }\r\n\r\n    validate(dynamicSchema?: any[]) {\r\n        const schema = dynamicSchema || this.globalSchema;\r\n\r\n        if (!schema || !Array.isArray(schema)) {\r\n            return (req: any, res: any, next: any) => next();\r\n        }\r\n\r\n        return [\r\n            ...schema,\r\n\r\n            (req: any, res: any, next: any) => {\r\n                const errors = validationResult(req);\r\n\r\n                if (!errors.isEmpty()) {\r\n                    const formatted = errors.array().map(err => ({\r\n                        message: err.msg,\r\n                        // param: err.param ,\r\n                        // location: err.location\r\n                    }));\r\n\r\n                    logger.warn(\"⚠ express-validator failed\", {\r\n                        path: req.path,\r\n                        method: req.method,\r\n                        errors: formatted,\r\n                        preview: JSON.stringify(req.body).slice(0, 200)\r\n                    });\r\n\r\n                    return next(new ValidationError(\"Validation failed.\", formatted as any));\r\n                }\r\n\r\n                next();\r\n            }\r\n        ];\r\n    }\r\n}"]}

package/dist/adapters/GoogleAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":"AAsIA,MAAM,WAAW,kBAAkB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAC,CAAS;gBAEd,QAAQ,CAAC,EAAE,MAAM;IASvB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAmDpE"}
+{"version":3,"file":"GoogleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,kBAAkB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAC,CAAS;gBAEd,QAAQ,CAAC,EAAE,MAAM;IASvB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAmDpE"}

package/dist/adapters/GoogleAdapter.js

@@ -1,109 +1,8 @@
 "use strict";
-// // import { OAuth2Client, LoginTicket } from "google-auth-library";
-// // import { AdapterError } from "../core/errors/AdapterError";
-// // import { logWarn, logError } from "../logging";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GoogleAdapter = void 0;
-// // export class GoogleAdapter {
-// //     private client: OAuth2Client;
-// //     private clientId?: string;
-// //     constructor(clientId?: string) {
-// //         this.client = new OAuth2Client(clientId);
-// //         this.clientId = clientId as any;
-// //     }
-// //     async verifyIdToken(idToken: string) {
-// //         try {
-// //             const options: {
-// //                 idToken: string;
-// //                 audience?: string | string[];
-// //             } = { idToken };
-// //             // ADD ONLY IF DEFINED → FIXES TS ERROR
-// //             if (this.clientId !== undefined) {
-// //                 options.audience = this.clientId;
-// //             }
-// //             const ticket: LoginTicket = await this.client.verifyIdToken(options);
-// //             const payload = ticket.getPayload();
-// //             if (!payload) {
-// //                 logWarn("GoogleAdapter: Empty payload");
-// //                 throw new AdapterError("Invalid Google ID token payload.");
-// //             }
-// //             return {
-// //                 sub: payload.sub,
-// //                 email: payload.email,
-// //                 email_verified: payload.email_verified,
-// //                 name: payload.name,
-// //                 picture: payload.picture,
-// //             };
-// //         } catch (err: any) {
-// //             logError("GoogleAdapter.verifyIdToken failed", { error: err?.message });
-// //             throw new AdapterError(err?.message || "Google token verification failed");
-// //         }
-// //     }
-// // }
-// // src/adapters/GoogleAdapter.ts - IMPROVED
-// import { OAuth2Client, LoginTicket } from "google-auth-library";
-// import { AdapterError } from "../core/errors/AdapterError.js";
-// import { logWarn, logError } from "../logging/index.js";
-// export interface GoogleTokenPayload {
-//     sub: string;
-//     email: string;
-//     email_verified: boolean;
-//     name?: string;
-//     picture?: string;
-//     [key: string]: any;
-// }
-// export class GoogleAdapter {
-//     private client: OAuth2Client;
-//     private clientId?: string;
-//     constructor(clientId?: string) {
-//         if (clientId && clientId.trim().length === 0) {
-//             throw new AdapterError("Google clientId cannot be empty string");
-//         }
-//         this.client = new OAuth2Client(clientId);
-//         this.clientId = clientId;
-//     }
-//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {
-//         try {
-//             if (!idToken || typeof idToken !== 'string') {
-//                 throw new AdapterError("Invalid ID token provided");
-//             }
-//             const options: { idToken: string; audience?: string | string[] } = { 
-//                 idToken 
-//             };
-//             // Add audience only if clientId is provided and not empty
-//             if (this.clientId && this.clientId.trim().length > 0) {
-//                 options.audience = this.clientId;
-//             }
-//             const ticket: LoginTicket = await this.client.verifyIdToken(options);
-//             const payload = ticket.getPayload();
-//             if (!payload) {
-//                 logWarn("GoogleAdapter: Empty payload");
-//                 throw new AdapterError("Invalid Google ID token payload.");
-//             }
-//             return {
-//                 sub: payload.sub,
-//                 email: payload.email || '',
-//                 email_verified: payload.email_verified || false,
-//                 name: payload.name,
-//                 picture: payload.picture,
-//                 ...payload
-//             };
-//         } catch (err: any) {
-//             logError("GoogleAdapter.verifyIdToken failed", { 
-//                 error: err?.message,
-//                 hasClientId: !!this.clientId 
-//             });
-//             if (err.message?.includes('audience')) {
-//                 throw new AdapterError("Invalid Google client ID configured.");
-//             }
-//             throw new AdapterError(err?.message || "Google token verification failed");
-//         }
-//     }
-// }
-// src/adapters/GoogleAdapter.ts - FIXED
 const google_auth_library_1 = require("google-auth-library");
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
-// import { logWarn, logError } from "../logging/index.js";
 const logging_1 = require("../logging");
 class GoogleAdapter {
     constructor(clientId) {

package/dist/adapters/GoogleAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleAdapter.js","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iEAAiE;AACjE,qDAAqD;;;AAErD,kCAAkC;AAClC,uCAAuC;AACvC,oCAAoC;AAEpC,0CAA0C;AAC1C,uDAAuD;AACvD,8CAA8C;AAC9C,WAAW;AAEX,gDAAgD;AAChD,mBAAmB;AACnB,kCAAkC;AAClC,sCAAsC;AACtC,mDAAmD;AACnD,kCAAkC;AAElC,yDAAyD;AACzD,oDAAoD;AACpD,uDAAuD;AACvD,mBAAmB;AAEnB,uFAAuF;AAEvF,sDAAsD;AACtD,iCAAiC;AACjC,8DAA8D;AAC9D,iFAAiF;AACjF,mBAAmB;AAEnB,0BAA0B;AAC1B,uCAAuC;AACvC,2CAA2C;AAC3C,6DAA6D;AAC7D,yCAAyC;AACzC,+CAA+C;AAC/C,oBAAoB;AAEpB,kCAAkC;AAClC,0FAA0F;AAC1F,6FAA6F;AAC7F,eAAe;AACf,WAAW;AACX,OAAO;AAKP,8CAA8C;AAC9C,mEAAmE;AACnE,iEAAiE;AACjE,2DAA2D;AAE3D,wCAAwC;AACxC,mBAAmB;AACnB,qBAAqB;AACrB,+BAA+B;AAC/B,qBAAqB;AACrB,wBAAwB;AACxB,0BAA0B;AAC1B,IAAI;AAEJ,+BAA+B;AAC/B,oCAAoC;AACpC,iCAAiC;AAEjC,uCAAuC;AACvC,0DAA0D;AAC1D,gFAAgF;AAChF,YAAY;AAEZ,oDAAoD;AACpD,oCAAoC;AACpC,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,6DAA6D;AAC7D,uEAAuE;AACvE,gBAAgB;AAEhB,oFAAoF;AACpF,2BAA2B;AAC3B,iBAAiB;AAEjB,yEAAyE;AACzE,sEAAsE;AACtE,oDAAoD;AACpD,gBAAgB;AAEhB,oFAAoF;AACpF,mDAAmD;AAEnD,8BAA8B;AAC9B,2DAA2D;AAC3D,8EAA8E;AAC9E,gBAAgB;AAEhB,uBAAuB;AACvB,oCAAoC;AACpC,8CAA8C;AAC9C,mEAAmE;AACnE,sCAAsC;AACtC,4CAA4C;AAC5C,6BAA6B;AAC7B,iBAAiB;AAEjB,+BAA+B;AAC/B,gEAAgE;AAChE,uCAAuC;AACvC,gDAAgD;AAChD,kBAAkB;AAElB,uDAAuD;AACvD,kFAAkF;AAClF,gBAAgB;AAEhB,0FAA0F;AAC1F,YAAY;AACZ,QAAQ;AACR,IAAI;AAIJ,wCAAwC;AACxC,6DAAgE;AAChE,oEAA8D;AAC9D,2DAA2D;AAE3D,wCAAkC;AAWlC,MAAa,aAAa;IAItB,YAAY,QAAiB;QACzB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QAC/B,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,8BAAY,CAAC,2BAA2B,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAsD;gBAC/D,OAAO;aACV,CAAC;YAEF,0DAA0D;YAC1D,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrC,CAAC;YAED,MAAM,MAAM,GAAgB,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,gBAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,MAAM,IAAI,8BAAY,CAAC,kCAAkC,CAAC,CAAC;YAC/D,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAuB;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;gBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE5B,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,KAAK,EAAE,GAAG,EAAE,OAAO;gBACnB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAY,CAAC,sCAAsC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC;QAC/E,CAAC;IACL,CAAC;CACJ;AAhED,sCAgEC","sourcesContent":["// // import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logWarn, logError } from \"../logging\";\r\n\r\n// // export class GoogleAdapter {\r\n// //     private client: OAuth2Client;\r\n// //     private clientId?: string;\r\n\r\n// //     constructor(clientId?: string) {\r\n// //         this.client = new OAuth2Client(clientId);\r\n// //         this.clientId = clientId as any;\r\n// //     }\r\n\r\n// //     async verifyIdToken(idToken: string) {\r\n// //         try {\r\n// //             const options: {\r\n// //                 idToken: string;\r\n// //                 audience?: string | string[];\r\n// //             } = { idToken };\r\n\r\n// //             // ADD ONLY IF DEFINED → FIXES TS ERROR\r\n// //             if (this.clientId !== undefined) {\r\n// //                 options.audience = this.clientId;\r\n// //             }\r\n\r\n// //             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n\r\n// //             const payload = ticket.getPayload();\r\n// //             if (!payload) {\r\n// //                 logWarn(\"GoogleAdapter: Empty payload\");\r\n// //                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n// //             }\r\n\r\n// //             return {\r\n// //                 sub: payload.sub,\r\n// //                 email: payload.email,\r\n// //                 email_verified: payload.email_verified,\r\n// //                 name: payload.name,\r\n// //                 picture: payload.picture,\r\n// //             };\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"GoogleAdapter.verifyIdToken failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n\r\n// // src/adapters/GoogleAdapter.ts - IMPROVED\r\n// import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logWarn, logError } from \"../logging/index.js\";\r\n\r\n// export interface GoogleTokenPayload {\r\n//     sub: string;\r\n//     email: string;\r\n//     email_verified: boolean;\r\n//     name?: string;\r\n//     picture?: string;\r\n//     [key: string]: any;\r\n// }\r\n\r\n// export class GoogleAdapter {\r\n//     private client: OAuth2Client;\r\n//     private clientId?: string;\r\n\r\n//     constructor(clientId?: string) {\r\n//         if (clientId && clientId.trim().length === 0) {\r\n//             throw new AdapterError(\"Google clientId cannot be empty string\");\r\n//         }\r\n        \r\n//         this.client = new OAuth2Client(clientId);\r\n//         this.clientId = clientId;\r\n//     }\r\n\r\n//     async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n//         try {\r\n//             if (!idToken || typeof idToken !== 'string') {\r\n//                 throw new AdapterError(\"Invalid ID token provided\");\r\n//             }\r\n\r\n//             const options: { idToken: string; audience?: string | string[] } = { \r\n//                 idToken \r\n//             };\r\n\r\n//             // Add audience only if clientId is provided and not empty\r\n//             if (this.clientId && this.clientId.trim().length > 0) {\r\n//                 options.audience = this.clientId;\r\n//             }\r\n\r\n//             const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n//             const payload = ticket.getPayload();\r\n            \r\n//             if (!payload) {\r\n//                 logWarn(\"GoogleAdapter: Empty payload\");\r\n//                 throw new AdapterError(\"Invalid Google ID token payload.\");\r\n//             }\r\n\r\n//             return {\r\n//                 sub: payload.sub,\r\n//                 email: payload.email || '',\r\n//                 email_verified: payload.email_verified || false,\r\n//                 name: payload.name,\r\n//                 picture: payload.picture,\r\n//                 ...payload\r\n//             };\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"GoogleAdapter.verifyIdToken failed\", { \r\n//                 error: err?.message,\r\n//                 hasClientId: !!this.clientId \r\n//             });\r\n            \r\n//             if (err.message?.includes('audience')) {\r\n//                 throw new AdapterError(\"Invalid Google client ID configured.\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"Google token verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/adapters/GoogleAdapter.ts - FIXED\r\nimport { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logWarn, logError } from \"../logging/index.js\";\r\n\r\nimport {logger} from '../logging';\r\n\r\nexport interface GoogleTokenPayload {\r\n    sub: string;\r\n    email: string;\r\n    email_verified: boolean;\r\n    name?: string;\r\n    picture?: string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class GoogleAdapter {\r\n    private client: OAuth2Client;\r\n    private clientId?: string;\r\n\r\n    constructor(clientId?: string) {\r\n        if (clientId && clientId.trim().length === 0) {\r\n            throw new AdapterError(\"Google clientId cannot be empty string\");\r\n        }\r\n        \r\n        this.client = new OAuth2Client(clientId);\r\n        this.clientId = clientId;\r\n    }\r\n\r\n    async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n        try {\r\n            if (!idToken || typeof idToken !== 'string') {\r\n                throw new AdapterError(\"Invalid ID token provided\");\r\n            }\r\n\r\n            const options: { idToken: string; audience?: string | string[] } = { \r\n                idToken \r\n            };\r\n\r\n            // Add audience only if clientId is provided and not empty\r\n            if (this.clientId && this.clientId.trim().length > 0) {\r\n                options.audience = this.clientId;\r\n            }\r\n\r\n            const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n            const payload = ticket.getPayload();\r\n            \r\n            if (!payload) {\r\n                logger.warn(\"GoogleAdapter: Empty payload\");\r\n                throw new AdapterError(\"Invalid Google ID token payload.\");\r\n            }\r\n\r\n            // Create result object\r\n            const result: GoogleTokenPayload = {\r\n                sub: payload.sub,\r\n                email: payload.email || '',\r\n                email_verified: payload.email_verified || false,\r\n                name: payload.name,\r\n                picture: payload.picture\r\n            };\r\n\r\n            // Add remaining properties from payload (excluding duplicates)\r\n            const { sub, email, email_verified, name, picture, ...rest } = payload;\r\n            Object.assign(result, rest);\r\n\r\n            return result;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"GoogleAdapter.verifyIdToken failed\", { \r\n                error: err?.message,\r\n                hasClientId: !!this.clientId \r\n            });\r\n            \r\n            if (err.message?.includes('audience')) {\r\n                throw new AdapterError(\"Invalid Google client ID configured.\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"Google token verification failed\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"GoogleAdapter.js","sourceRoot":"","sources":["../../src/adapters/GoogleAdapter.ts"],"names":[],"mappings":";;;AAAA,6DAAgE;AAChE,oEAA8D;AAE9D,wCAAkC;AAWlC,MAAa,aAAa;IAItB,YAAY,QAAiB;QACzB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QAC/B,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,8BAAY,CAAC,2BAA2B,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAsD;gBAC/D,OAAO;aACV,CAAC;YAEF,0DAA0D;YAC1D,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrC,CAAC;YAED,MAAM,MAAM,GAAgB,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,gBAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,MAAM,IAAI,8BAAY,CAAC,kCAAkC,CAAC,CAAC;YAC/D,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAuB;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;gBAC/C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE5B,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBAC/C,KAAK,EAAE,GAAG,EAAE,OAAO;gBACnB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAAY,CAAC,sCAAsC,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC;QAC/E,CAAC;IACL,CAAC;CACJ;AAhED,sCAgEC","sourcesContent":["import { OAuth2Client, LoginTicket } from \"google-auth-library\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nimport {logger} from '../logging';\r\n\r\nexport interface GoogleTokenPayload {\r\n    sub: string;\r\n    email: string;\r\n    email_verified: boolean;\r\n    name?: string;\r\n    picture?: string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class GoogleAdapter {\r\n    private client: OAuth2Client;\r\n    private clientId?: string;\r\n\r\n    constructor(clientId?: string) {\r\n        if (clientId && clientId.trim().length === 0) {\r\n            throw new AdapterError(\"Google clientId cannot be empty string\");\r\n        }\r\n        \r\n        this.client = new OAuth2Client(clientId);\r\n        this.clientId = clientId;\r\n    }\r\n\r\n    async verifyIdToken(idToken: string): Promise<GoogleTokenPayload> {\r\n        try {\r\n            if (!idToken || typeof idToken !== 'string') {\r\n                throw new AdapterError(\"Invalid ID token provided\");\r\n            }\r\n\r\n            const options: { idToken: string; audience?: string | string[] } = { \r\n                idToken \r\n            };\r\n\r\n            // Add audience only if clientId is provided and not empty\r\n            if (this.clientId && this.clientId.trim().length > 0) {\r\n                options.audience = this.clientId;\r\n            }\r\n\r\n            const ticket: LoginTicket = await this.client.verifyIdToken(options);\r\n            const payload = ticket.getPayload();\r\n            \r\n            if (!payload) {\r\n                logger.warn(\"GoogleAdapter: Empty payload\");\r\n                throw new AdapterError(\"Invalid Google ID token payload.\");\r\n            }\r\n\r\n            // Create result object\r\n            const result: GoogleTokenPayload = {\r\n                sub: payload.sub,\r\n                email: payload.email || '',\r\n                email_verified: payload.email_verified || false,\r\n                name: payload.name,\r\n                picture: payload.picture\r\n            };\r\n\r\n            // Add remaining properties from payload (excluding duplicates)\r\n            const { sub, email, email_verified, name, picture, ...rest } = payload;\r\n            Object.assign(result, rest);\r\n\r\n            return result;\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"GoogleAdapter.verifyIdToken failed\", { \r\n                error: err?.message,\r\n                hasClientId: !!this.clientId \r\n            });\r\n            \r\n            if (err.message?.includes('audience')) {\r\n                throw new AdapterError(\"Invalid Google client ID configured.\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"Google token verification failed\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/JWTAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AA8PA,OAAO,GAAG,MAAM,cAAc,CAAC;AAM/B,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAiBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAwB3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CAuBnE"}
+{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAM/B,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,qBAAa,UAAU;IACnB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAkB;IACpC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAiBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAwB3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CAuBnE"}

package/dist/adapters/JWTAdapter.js

@@ -1,217 +1,11 @@
 "use strict";
-// // import jwt from "jsonwebtoken";
-// // import { AdapterError } from "../core/errors/AdapterError";
-// // import { logError } from "../logging";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.JWTAdapter = void 0;
-// // export interface JWTAdapterOptions {
-// //     secret: string;
-// //     expiresIn?: string | number | undefined;
-// // }
-// // export class JWTAdapter {
-// //     private secret: string;
-// //     private expiresIn?: string | number;
-// //     constructor(options: JWTAdapterOptions) {
-// //         if (!options.secret) {
-// //             throw new AdapterError("JWT secret is required");
-// //         }
-// //         this.secret = options.secret;
-// //         // Normalize expiresIn
-// //         if (options.expiresIn !== undefined) {
-// //             this.expiresIn = options.expiresIn as string | number;
-// //         }
-// //     }
-// //     sign(
-// //         payload: object,
-// //         options?: { expiresIn?: string | number }
-// //     ) {
-// //         try {
-// //             const finalExpires =
-// //                 options?.expiresIn ?? this.expiresIn;
-// //             const jwtOptions: jwt.SignOptions = {};
-// //             if (finalExpires !== undefined) {
-// //                 // Force safe cast → matches SignOptions type
-// //                 jwtOptions.expiresIn = finalExpires as number | any;
-// //             }
-// //             return jwt.sign(payload, this.secret, jwtOptions);
-// //         } catch (err: any) {
-// //             logError("JWTAdapter.sign failed", { error: err?.message });
-// //             throw new AdapterError(err?.message || "JWT sign failed");
-// //         }
-// //     }
-// //     verify(token: string) {
-// //         try {
-// //             return jwt.verify(token, this.secret);
-// //         } catch (err: any) {
-// //             logError("JWTAdapter.verify failed", { error: err?.message });
-// //             throw new AdapterError(err?.message || "JWT verify failed");
-// //         }
-// //     }
-// // }
-// // // src/adapters/JWTAdapter.ts - FIXED (Security hardening)
-// // import jwt from "jsonwebtoken";
-// // import { v4 as uuidv4 } from "uuid";
-// // import { AdapterError } from "../core/errors/AdapterError.js";
-// // import { logError } from "../logging/index.js";
-// // export interface JWTAdapterOptions {
-// //     secret: string;
-// //     expiresIn?: string | number;
-// //     algorithm?: jwt.Algorithm;
-// //     issuer?: string;
-// //     audience?: string | string[];
-// // }
-// // export interface SignOptions {
-// //     expiresIn?: string | number;
-// //     jti?: string; // JWT ID for token revocation
-// //     subject?: string;
-// //     issuer?: string;
-// //     audience?: string | string[];
-// // }
-// // export class JWTAdapter {
-// //     private secret: string;
-// //     private expiresIn?: string | number;
-// //     private algorithm: jwt.Algorithm;
-// //     private issuer?: string;
-// //     private audience?: string | string[];
-// //     constructor(options: JWTAdapterOptions) {
-// //         if (!options.secret) {
-// //             throw new AdapterError("JWT secret is required");
-// //         }
-// //         if (options.secret.length < 32) {
-// //             logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
-// //         }
-// //         this.secret = options.secret;
-// //         this.expiresIn = options.expiresIn;
-// //         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm
-// //         this.issuer = options.issuer;
-// //         this.audience = options.audience;
-// //     }
-// //     sign(payload: object, options?: SignOptions) {
-// //         try {
-// //             const jwtOptions: jwt.SignOptions = {
-// //                 algorithm: this.algorithm,
-// //                 issuer: options?.issuer || this.issuer,
-// //                 audience: options?.audience || this.audience,
-// //                 jwtid: options?.jti || uuidv4(), // Unique token ID
-// //                 subject: options?.subject
-// //             };
-// //             if (options?.expiresIn !== undefined) {
-// //                 jwtOptions.expiresIn = options.expiresIn as number;
-// //             } else if (this.expiresIn !== undefined) {
-// //                 jwtOptions.expiresIn = this.expiresIn as number;
-// //             }
-// //             return jwt.sign(payload, this.secret, jwtOptions);
-// //         } catch (err: any) {
-// //             logError("JWTAdapter.sign failed", { error: err?.message });
-// //             throw new AdapterError(err?.message || "JWT sign failed");
-// //         }
-// //     }
-// //     verify(token: string, options?: { audience?: string | string[] }) {
-// //         try {
-// //             const verifyOptions: jwt.VerifyOptions = {
-// //                 algorithms: [this.algorithm],
-// //                 issuer: this.issuer,
-// //                 audience: options?.audience as string || this.audience as string
-// //             };
-// //             return jwt.verify(token, this.secret, verifyOptions);
-// //         } catch (err: any) {
-// //             logError("JWTAdapter.verify failed", { error: err?.message });
-// //             // Provide better error messages
-// //             if (err.name === 'TokenExpiredError') {
-// //                 throw new AdapterError("JWT token has expired");
-// //             }
-// //             if (err.name === 'JsonWebTokenError') {
-// //                 throw new AdapterError("Invalid JWT token");
-// //             }
-// //             throw new AdapterError(err?.message || "JWT verification failed");
-// //         }
-// //     }
-// // }
-// // src/adapters/JWTAdapter.ts - FIXED (Security hardening)
-// import jwt from "jsonwebtoken";
-// import { nanoid } from "nanoid";  // CHANGED: from uuid to nanoid
-// import { AdapterError } from "../core/errors/AdapterError.js";
-// import { logError } from "../logging/index.js";
-// export interface JWTAdapterOptions {
-//     secret: string;
-//     expiresIn?: string | number;
-//     algorithm?: jwt.Algorithm;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-// export interface SignOptions {
-//     expiresIn?: string | number;
-//     jti?: string; // JWT ID for token revocation
-//     subject?: string;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-// export class JWTAdapter {
-//     private secret: string;
-//     private expiresIn?: string | number;
-//     private algorithm: jwt.Algorithm;
-//     private issuer?: string;
-//     private audience?: string | string[];
-//     constructor(options: JWTAdapterOptions) {
-//         if (!options.secret) {
-//             throw new AdapterError("JWT secret is required");
-//         }
-//         if (options.secret.length < 32) {
-//             logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
-//         }
-//         this.secret = options.secret;
-//         this.expiresIn = options.expiresIn;
-//         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm
-//         this.issuer = options.issuer;
-//         this.audience = options.audience;
-//     }
-//     sign(payload: object, options?: SignOptions) {
-//         try {
-//             const jwtOptions: jwt.SignOptions = {
-//                 algorithm: this.algorithm,
-//                 issuer: options?.issuer || this.issuer,
-//                 audience: options?.audience || this.audience,
-//                 jwtid: options?.jti || nanoid(),  // CHANGED: uuidv4() to nanoid()
-//                 subject: options?.subject
-//             };
-//             if (options?.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = options.expiresIn as number;
-//             } else if (this.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = this.expiresIn as number;
-//             }
-//             return jwt.sign(payload, this.secret, jwtOptions);
-//         } catch (err: any) {
-//             logError("JWTAdapter.sign failed", { error: err?.message });
-//             throw new AdapterError(err?.message || "JWT sign failed");
-//         }
-//     }
-//     verify(token: string, options?: { audience?: string | string[] }) {
-//         try {
-//             const verifyOptions: jwt.VerifyOptions = {
-//                 algorithms: [this.algorithm],
-//                 issuer: this.issuer,
-//                 audience: options?.audience as string || this.audience as string
-//             };
-//             return jwt.verify(token, this.secret, verifyOptions);
-//         } catch (err: any) {
-//             logError("JWTAdapter.verify failed", { error: err?.message });
-//             // Provide better error messages
-//             if (err.name === 'TokenExpiredError') {
-//                 throw new AdapterError("JWT token has expired");
-//             }
-//             if (err.name === 'JsonWebTokenError') {
-//                 throw new AdapterError("Invalid JWT token");
-//             }
-//             throw new AdapterError(err?.message || "JWT verification failed");
-//         }
-//     }
-// }
-// src/adapters/JWTAdapter.ts - FIXED (Using crypto.randomUUID())
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const crypto_1 = require("crypto"); // Built-in Node.js
+const crypto_1 = require("crypto");
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
 const index_js_1 = require("../logging/index.js");
 const logging_1 = require("../logging");
@@ -226,7 +20,7 @@ class JWTAdapter {
         }
         this.secret = options.secret;
         this.expiresIn = options.expiresIn;
-        this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm
+        this.algorithm = options.algorithm || 'HS256'; // Default algorithm 
         this.issuer = options.issuer;
         this.audience = options.audience;
     }
@@ -236,7 +30,7 @@ class JWTAdapter {
                 algorithm: this.algorithm,
                 issuer: options?.issuer || this.issuer,
                 audience: options?.audience || this.audience,
-                jwtid: options?.jti || (0, crypto_1.randomUUID)(), // ✅ Using crypto.randomUUID()
+                jwtid: options?.jti || (0, crypto_1.randomUUID)(),
                 subject: options?.subject
             };
             if (options?.expiresIn !== undefined) {
@@ -263,7 +57,6 @@ class JWTAdapter {
         }
         catch (err) {
             (0, index_js_1.logError)("JWTAdapter.verify failed", { error: err?.message });
-            // Provide better error messages
             if (err.name === 'TokenExpiredError') {
                 throw new AdapterError_js_1.AdapterError("JWT token has expired");
             }

package/dist/adapters/JWTAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";AAAA,qCAAqC;AACrC,iEAAiE;AACjE,4CAA4C;;;;;;AAE5C,0CAA0C;AAC1C,yBAAyB;AACzB,kDAAkD;AAClD,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAE9C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,2CAA2C;AAE3C,oCAAoC;AACpC,oDAAoD;AACpD,wEAAwE;AACxE,eAAe;AACf,WAAW;AAEX,eAAe;AACf,8BAA8B;AAC9B,uDAAuD;AACvD,aAAa;AACb,mBAAmB;AACnB,sCAAsC;AACtC,2DAA2D;AAE3D,yDAAyD;AAEzD,mDAAmD;AACnD,mEAAmE;AACnE,0EAA0E;AAC1E,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,iCAAiC;AACjC,mBAAmB;AACnB,wDAAwD;AACxD,kCAAkC;AAClC,gFAAgF;AAChF,8EAA8E;AAC9E,eAAe;AACf,WAAW;AACX,OAAO;AAIP,gEAAgE;AAChE,qCAAqC;AACrC,0CAA0C;AAC1C,oEAAoE;AACpE,qDAAqD;AAErD,0CAA0C;AAC1C,yBAAyB;AACzB,sCAAsC;AACtC,oCAAoC;AACpC,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,oCAAoC;AACpC,sCAAsC;AACtC,sDAAsD;AACtD,2BAA2B;AAC3B,0BAA0B;AAC1B,uCAAuC;AACvC,OAAO;AAEP,+BAA+B;AAC/B,iCAAiC;AACjC,8CAA8C;AAC9C,2CAA2C;AAC3C,kCAAkC;AAClC,+CAA+C;AAE/C,mDAAmD;AACnD,oCAAoC;AACpC,mEAAmE;AACnE,eAAe;AAEf,+CAA+C;AAC/C,4FAA4F;AAC5F,eAAe;AAEf,2CAA2C;AAC3C,iDAAiD;AACjD,oFAAoF;AACpF,2CAA2C;AAC3C,+CAA+C;AAC/C,WAAW;AAEX,wDAAwD;AACxD,mBAAmB;AACnB,uDAAuD;AACvD,gDAAgD;AAChD,6DAA6D;AAC7D,mEAAmE;AACnE,yEAAyE;AACzE,+CAA+C;AAC/C,oBAAoB;AAEpB,yDAAyD;AACzD,yEAAyE;AACzE,4DAA4D;AAC5D,sEAAsE;AACtE,mBAAmB;AAEnB,oEAAoE;AAEpE,kCAAkC;AAClC,8EAA8E;AAC9E,4EAA4E;AAC5E,eAAe;AACf,WAAW;AAEX,6EAA6E;AAC7E,mBAAmB;AACnB,4DAA4D;AAC5D,mDAAmD;AACnD,0CAA0C;AAC1C,sFAAsF;AACtF,oBAAoB;AAEpB,uEAAuE;AACvE,kCAAkC;AAClC,gFAAgF;AAEhF,kDAAkD;AAClD,yDAAyD;AACzD,sEAAsE;AACtE,mBAAmB;AACnB,yDAAyD;AACzD,kEAAkE;AAClE,mBAAmB;AAEnB,oFAAoF;AACpF,eAAe;AACf,WAAW;AACX,OAAO;AAGP,6DAA6D;AAC7D,kCAAkC;AAClC,oEAAoE;AACpE,iEAAiE;AACjE,kDAAkD;AAElD,uCAAuC;AACvC,sBAAsB;AACtB,mCAAmC;AACnC,iCAAiC;AACjC,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,iCAAiC;AACjC,mCAAmC;AACnC,mDAAmD;AACnD,wBAAwB;AACxB,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,4BAA4B;AAC5B,8BAA8B;AAC9B,2CAA2C;AAC3C,wCAAwC;AACxC,+BAA+B;AAC/B,4CAA4C;AAE5C,gDAAgD;AAChD,iCAAiC;AACjC,gEAAgE;AAChE,YAAY;AAEZ,4CAA4C;AAC5C,yFAAyF;AACzF,YAAY;AAEZ,wCAAwC;AACxC,8CAA8C;AAC9C,iFAAiF;AACjF,wCAAwC;AACxC,4CAA4C;AAC5C,QAAQ;AAER,qDAAqD;AACrD,gBAAgB;AAChB,oDAAoD;AACpD,6CAA6C;AAC7C,0DAA0D;AAC1D,gEAAgE;AAChE,qFAAqF;AACrF,4CAA4C;AAC5C,iBAAiB;AAEjB,sDAAsD;AACtD,sEAAsE;AACtE,yDAAyD;AACzD,mEAAmE;AACnE,gBAAgB;AAEhB,iEAAiE;AAEjE,+BAA+B;AAC/B,2EAA2E;AAC3E,yEAAyE;AACzE,YAAY;AACZ,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,yDAAyD;AACzD,gDAAgD;AAChD,uCAAuC;AACvC,mFAAmF;AACnF,iBAAiB;AAEjB,oEAAoE;AACpE,+BAA+B;AAC/B,6EAA6E;AAE7E,+CAA+C;AAC/C,sDAAsD;AACtD,mEAAmE;AACnE,gBAAgB;AAChB,sDAAsD;AACtD,+DAA+D;AAC/D,gBAAgB;AAEhB,iFAAiF;AACjF,YAAY;AACZ,QAAQ;AACR,IAAI;AAKJ,iEAAiE;AACjE,gEAA+B;AAC/B,mCAAoC,CAAE,mBAAmB;AACzD,oEAA8D;AAC9D,kDAA+C;AAC/C,wCAAoC;AAkBpC,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACpF,6EAA6E;QACjF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,uBAAuB;QACtE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE,EAAG,8BAA8B;gBACpE,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YACpD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,OAAO,EAAE,QAAkB,IAAI,IAAI,CAAC,QAAkB;aACnE,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9D,gCAAgC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;CACJ;AAvED,gCAuEC","sourcesContent":["// // import jwt from \"jsonwebtoken\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // import { logError } from \"../logging\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number | undefined;\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n\r\n// //         // Normalize expiresIn\r\n// //         if (options.expiresIn !== undefined) {\r\n// //             this.expiresIn = options.expiresIn as string | number;\r\n// //         }\r\n// //     }\r\n\r\n// //     sign(\r\n// //         payload: object,\r\n// //         options?: { expiresIn?: string | number }\r\n// //     ) {\r\n// //         try {\r\n// //             const finalExpires =\r\n// //                 options?.expiresIn ?? this.expiresIn;\r\n\r\n// //             const jwtOptions: jwt.SignOptions = {};\r\n\r\n// //             if (finalExpires !== undefined) {\r\n// //                 // Force safe cast → matches SignOptions type\r\n// //                 jwtOptions.expiresIn = finalExpires as number | any;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string) {\r\n// //         try {\r\n// //             return jwt.verify(token, this.secret);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT verify failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// // // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// // import jwt from \"jsonwebtoken\";\r\n// // import { v4 as uuidv4 } from \"uuid\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// // import { logError } from \"../logging/index.js\";\r\n\r\n// // export interface JWTAdapterOptions {\r\n// //     secret: string;\r\n// //     expiresIn?: string | number;\r\n// //     algorithm?: jwt.Algorithm;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export interface SignOptions {\r\n// //     expiresIn?: string | number;\r\n// //     jti?: string; // JWT ID for token revocation\r\n// //     subject?: string;\r\n// //     issuer?: string;\r\n// //     audience?: string | string[];\r\n// // }\r\n\r\n// // export class JWTAdapter {\r\n// //     private secret: string;\r\n// //     private expiresIn?: string | number;\r\n// //     private algorithm: jwt.Algorithm;\r\n// //     private issuer?: string;\r\n// //     private audience?: string | string[];\r\n\r\n// //     constructor(options: JWTAdapterOptions) {\r\n// //         if (!options.secret) {\r\n// //             throw new AdapterError(\"JWT secret is required\");\r\n// //         }\r\n\r\n// //         if (options.secret.length < 32) {\r\n// //             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n// //         }\r\n\r\n// //         this.secret = options.secret;\r\n// //         this.expiresIn = options.expiresIn;\r\n// //         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n// //         this.issuer = options.issuer;\r\n// //         this.audience = options.audience;\r\n// //     }\r\n\r\n// //     sign(payload: object, options?: SignOptions) {\r\n// //         try {\r\n// //             const jwtOptions: jwt.SignOptions = {\r\n// //                 algorithm: this.algorithm,\r\n// //                 issuer: options?.issuer || this.issuer,\r\n// //                 audience: options?.audience || this.audience,\r\n// //                 jwtid: options?.jti || uuidv4(), // Unique token ID\r\n// //                 subject: options?.subject\r\n// //             };\r\n\r\n// //             if (options?.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = options.expiresIn as number;\r\n// //             } else if (this.expiresIn !== undefined) {\r\n// //                 jwtOptions.expiresIn = this.expiresIn as number;\r\n// //             }\r\n\r\n// //             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n// //             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n// //         }\r\n// //     }\r\n\r\n// //     verify(token: string, options?: { audience?: string | string[] }) {\r\n// //         try {\r\n// //             const verifyOptions: jwt.VerifyOptions = {\r\n// //                 algorithms: [this.algorithm],\r\n// //                 issuer: this.issuer,\r\n// //                 audience: options?.audience as string || this.audience as string\r\n// //             };\r\n\r\n// //             return jwt.verify(token, this.secret, verifyOptions);\r\n// //         } catch (err: any) {\r\n// //             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n// //             // Provide better error messages\r\n// //             if (err.name === 'TokenExpiredError') {\r\n// //                 throw new AdapterError(\"JWT token has expired\");\r\n// //             }\r\n// //             if (err.name === 'JsonWebTokenError') {\r\n// //                 throw new AdapterError(\"Invalid JWT token\");\r\n// //             }\r\n            \r\n// //             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n// // src/adapters/JWTAdapter.ts - FIXED (Security hardening)\r\n// import jwt from \"jsonwebtoken\";\r\n// import { nanoid } from \"nanoid\";  // CHANGED: from uuid to nanoid\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logError } from \"../logging/index.js\";\r\n\r\n// export interface JWTAdapterOptions {\r\n//     secret: string;\r\n//     expiresIn?: string | number;\r\n//     algorithm?: jwt.Algorithm;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export interface SignOptions {\r\n//     expiresIn?: string | number;\r\n//     jti?: string; // JWT ID for token revocation\r\n//     subject?: string;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export class JWTAdapter {\r\n//     private secret: string;\r\n//     private expiresIn?: string | number;\r\n//     private algorithm: jwt.Algorithm;\r\n//     private issuer?: string;\r\n//     private audience?: string | string[];\r\n\r\n//     constructor(options: JWTAdapterOptions) {\r\n//         if (!options.secret) {\r\n//             throw new AdapterError(\"JWT secret is required\");\r\n//         }\r\n\r\n//         if (options.secret.length < 32) {\r\n//             logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n//         }\r\n\r\n//         this.secret = options.secret;\r\n//         this.expiresIn = options.expiresIn;\r\n//         this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n//         this.issuer = options.issuer;\r\n//         this.audience = options.audience;\r\n//     }\r\n\r\n//     sign(payload: object, options?: SignOptions) {\r\n//         try {\r\n//             const jwtOptions: jwt.SignOptions = {\r\n//                 algorithm: this.algorithm,\r\n//                 issuer: options?.issuer || this.issuer,\r\n//                 audience: options?.audience || this.audience,\r\n//                 jwtid: options?.jti || nanoid(),  // CHANGED: uuidv4() to nanoid()\r\n//                 subject: options?.subject\r\n//             };\r\n\r\n//             if (options?.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = options.expiresIn as number;\r\n//             } else if (this.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = this.expiresIn as number;\r\n//             }\r\n\r\n//             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n//             throw new AdapterError(err?.message || \"JWT sign failed\");\r\n//         }\r\n//     }\r\n\r\n//     verify(token: string, options?: { audience?: string | string[] }) {\r\n//         try {\r\n//             const verifyOptions: jwt.VerifyOptions = {\r\n//                 algorithms: [this.algorithm],\r\n//                 issuer: this.issuer,\r\n//                 audience: options?.audience as string || this.audience as string\r\n//             };\r\n\r\n//             return jwt.verify(token, this.secret, verifyOptions);\r\n//         } catch (err: any) {\r\n//             logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n//             // Provide better error messages\r\n//             if (err.name === 'TokenExpiredError') {\r\n//                 throw new AdapterError(\"JWT token has expired\");\r\n//             }\r\n//             if (err.name === 'JsonWebTokenError') {\r\n//                 throw new AdapterError(\"Invalid JWT token\");\r\n//             }\r\n            \r\n//             throw new AdapterError(err?.message || \"JWT verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n// src/adapters/JWTAdapter.ts - FIXED (Using crypto.randomUUID())\r\nimport jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";  // Built-in Node.js\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logError } from \"../logging/index.js\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string; // JWT ID for token revocation\r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logger.warn(\"🚨 JWT secret shorter than 32 chars. Consider using stronger secret.\");\r\n            // logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || 'HS256'; // ⚠️ Default algorithm\r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(),  // ✅ Using crypto.randomUUID()\r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as number;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as number;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n            throw new AdapterError(err?.message || \"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: options?.audience as string || this.audience as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n            // Provide better error messages\r\n            if (err.name === 'TokenExpiredError') {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n            if (err.name === 'JsonWebTokenError') {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"JWT verification failed\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,gEAA+B;AAC/B,mCAAoC;AACpC,oEAA8D;AAC9D,kDAA+C;AAC/C,wCAAoC;AAkBpC,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACpF,6EAA6E;QACjF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,qBAAqB;QACpE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE;gBACnC,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YACpD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,OAAO,EAAE,QAAkB,IAAI,IAAI,CAAC,QAAkB;aACnE,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAA,mBAAQ,EAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAG9D,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,8BAAY,CAAC,GAAG,EAAE,OAAO,IAAI,yBAAyB,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;CACJ;AAvED,gCAuEC","sourcesContent":["import jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\"; \r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logError } from \"../logging/index.js\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string; \r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logger.warn(\"🚨 JWT secret shorter than 32 chars. Consider using stronger secret.\");\r\n            // logError(\"⚠ JWT secret is too short (minimum 32 characters recommended)\");\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || 'HS256'; // Default algorithm \r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(), \r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as number;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as number;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.sign failed\", { error: err?.message });\r\n            throw new AdapterError(err?.message || \"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: options?.audience as string || this.audience as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n        } catch (err: any) {\r\n            logError(\"JWTAdapter.verify failed\", { error: err?.message });\r\n            \r\n           \r\n            if (err.name === 'TokenExpiredError') {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n            if (err.name === 'JsonWebTokenError') {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n            \r\n            throw new AdapterError(err?.message || \"JWT verification failed\");\r\n        }\r\n    }\r\n}"]}

package/dist/adapters/RLFlexibleAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RLFlexibleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/RLFlexibleAdapter.ts"],"names":[],"mappings":"AAkEA,MAAM,WAAW,SAAS;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAC1B,aAAa,CAAC,OAAO,GAAE,SAAc,SAiBV,GAAG,OAAO,GAAG,QAAQ,GAAG;IAoCnD,OAAO,CAAC,SAAS;CAWpB"}
+{"version":3,"file":"RLFlexibleAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/RLFlexibleAdapter.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAC1B,aAAa,CAAC,OAAO,GAAE,SAAc,SAiBV,GAAG,OAAO,GAAG,QAAQ,GAAG;IAoCnD,OAAO,CAAC,SAAS;CAUpB"}