insite-cookie 1.0.37

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Eugene Nesvetaev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# Cookie support for inSite
+
+## Installation
+
+```sh
+$ npm install insite-cookie
+```
+
+Or
+
+```sh
+$ yarn add insite-cookie
+```

package/lib/Middleware.js

@@ -0,0 +1,60 @@
+import { tokenMap } from "./tokenMap";
+
+
+export class CookieMiddleware {
+	constructor(options = {}) {
+		const {
+			requestRegExp = /^\/cookie\/?\?/
+		} = options;
+		
+		this.listeners = { GET: [
+			[ requestRegExp, this.handler ]
+		] };
+		
+	}
+	
+	handler = (request, response) => {
+		const token = request.url.split("?")[1];
+		
+		if (token && tokenMap.has(token))
+			response.writeHead(200, {
+				"Content-Type": "text/plain; charset=utf-8",
+				"Set-Cookie": CookieMiddleware.cookify(...tokenMap.getWithTimeout(token))
+			}).end();
+		else
+			return false;
+		
+	};
+	
+	
+	static make({ name, value, maxAge, expiresAt, domain, path = "/", secure = true, httpOnly = true, sameSite = "Strict" }) {
+		const cookie = [ `${name}=${value}` ];
+		
+		if (maxAge !== undefined)
+			cookie.push(`Max-Age=${maxAge}`);
+		else if (expiresAt)
+			cookie.push(`Max-Age=${Math.round((expiresAt.getTime() - Date.now()) / 1000)}`);
+		
+		if (domain)
+			cookie.push(`Domain=${domain}`);
+		
+		if (path)
+			cookie.push(`Path=${path}`);
+		
+		if (secure)
+			cookie.push("Secure");
+		
+		if (httpOnly)
+			cookie.push("HttpOnly");
+		
+		if (sameSite)
+			cookie.push(`SameSite=${sameSite}`);
+		
+		return cookie.join("; ");
+	}
+	
+	static cookify(object, options) {
+		return Object.entries(object).map(([ name, value ]) => this.make({ name, value, ...options }));
+	}
+	
+}

package/lib/index.js

@@ -0,0 +1,2 @@
+export * from "./Middleware";
+export * from "./parse";

package/lib/parse.js

@@ -0,0 +1,13 @@
+export function parseCookie(cookie) {
+	return cookie ? cookie.split(/;\s*/).reduce((object, keyEqValue) => {
+		const [ key, value ] = keyEqValue.split(/=/);
+		
+		try {
+			object[key] = JSON.parse(value);
+		} catch {
+			object[key] = value;
+		}
+		
+		return object;
+	}, {}) : {};
+}

package/lib/tokenMap.js

@@ -0,0 +1 @@
+export const tokenMap = new Map();

package/lib/ws/client/SetterClient.js

@@ -0,0 +1,52 @@
+import { headers } from "../common";
+
+
+export class CookieSetterClient {
+	constructor(ws, options = {}) {
+		
+		const {
+			method = "GET",
+			url = "/cookie",
+			onload,
+			onerror
+		} = options;
+		
+		this.method = method;
+		this.url = url;
+		
+		if (onload)
+			this.onload = onload;
+		
+		if (onerror)
+			this.onerror = onerror;
+		
+		ws.on(`message:${headers.set}`, this.#handleSet);
+		
+	}
+	
+	#handleSet = token => {
+		const xhr = new XMLHttpRequest();
+		
+		xhr.onload = this.onload;
+		xhr.onerror = this.onerror;
+		
+		xhr.open(this.method, `${this.url}?${token}`, true);
+		
+		xhr.send(null);
+		
+	};
+	
+	onload() {
+		
+		if (this.readyState === 4 && this.status !== 200)
+			console.error("Set cookie:", this.statusText);
+		
+	}
+	
+	onerror() {
+		
+		console.error("Set cookie:", this.statusText);
+		
+	}
+	
+}

package/lib/ws/client/index.js

@@ -0,0 +1 @@
+export * from "./SetterClient";

package/lib/ws/common.js

@@ -0,0 +1,3 @@
+export const headers = {
+	set: "~setcookie"
+};

package/lib/ws/server/SetterServer.js

@@ -0,0 +1,80 @@
+import crypto from "node:crypto";
+import { parseCookie } from "../../parse";
+import { tokenMap } from "../../tokenMap";
+import { headers } from "../common";
+
+
+const cookieTokenTimeout = 2000;
+const cookieSessionIdSymbol = Symbol("cookieSessionId");
+
+
+export class CookieSetterServer {
+	constructor(wss, { users, domain, maxAge }) {
+		wss.cookieSetter = this;
+		
+		this.domain = domain ?? process.env.HOST;
+		this.maxAge = maxAge ?? users?.sessions.collection.expireAfterSeconds;
+		
+		wss.options.WebSocket.prototype.setCookie = CookieSetterServer.set;
+		wss.options.WebSocket.prototype.unsetCookie = CookieSetterServer.unset;
+		
+		if (users) {
+			this.users = users;
+			
+			wss.on("client-connect", CookieSetterServer.handleClientConnect);
+			wss.on("client-session", CookieSetterServer.handleClientSession);
+		}
+		
+	}
+	
+	
+	static set(cookie, options) {
+		
+		const token = `${Math.round(performance.now() * Number.MAX_SAFE_INTEGER).toString(36)}$${crypto.randomBytes(Math.randomInt(4, 8)).toString("hex")}`;
+		
+		tokenMap.setWithTimeout(token, [ cookie, options ], cookieTokenTimeout);
+		
+		this.sendMessage(headers.set, token);
+		
+	}
+	
+	static unset(names) {
+		this.setCookie(names.reduce((cookie, name) => {
+			cookie[name] = "";
+			
+			return cookie;
+		}, {}), { maxAge: 0 });
+		
+	}
+	
+	static parse = parseCookie;
+	
+	
+	static handleClientConnect(ws, request) {
+		ws[cookieSessionIdSymbol] = null;
+		
+		if (request.headers.cookie) {
+			const { sessionId = null } = parseCookie(request.headers.cookie);
+			
+			ws[cookieSessionIdSymbol] = sessionId;
+			
+			if (sessionId)
+				ws.setSession(sessionId, true);
+		}
+		
+	}
+	
+	static handleClientSession(ws) {
+		if (ws[cookieSessionIdSymbol] !== ws.session?._id) {
+			ws[cookieSessionIdSymbol] = ws.session?._id;
+			
+			if (ws.isOpen && ws.session) {
+				const { domain, maxAge } = this.cookieSetter;
+				ws.setCookie({ sessionId: ws.session._id }, { domain, maxAge });
+			} else
+				ws.unsetCookie([ "sessionId" ]);
+		}
+		
+	}
+	
+}

package/lib/ws/server/index.js

@@ -0,0 +1 @@
+export * from "./SetterServer";

package/package.json

@@ -0,0 +1,36 @@
+{
+	"name": "insite-cookie",
+	"version": "1.0.37",
+	"description": "Cookie support for inSite",
+	"type": "module",
+	"main": "./lib/index.js",
+	"module": "./lib/index.js",
+	"exports": {
+		".": "./lib/index.js",
+		"./ws/server": "./lib/ws/server/index.js",
+		"./ws/client": "./lib/ws/client/index.js",
+		"./parse": "./lib/parse.js"
+	},
+	"packageManager": "yarn@1.22.22",
+	"scripts": {
+		"test": "echo \"Error: no test specified\" && exit 1"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/nesvet/insite-cookie.git"
+	},
+	"keywords": [
+		"insite",
+		"cookie",
+		"client",
+		"server"
+	],
+	"author": "Eugene Nesvetaev <dev@nesvet.dev> (https://nesvet.dev/)",
+	"license": "MIT",
+	"dependencies": {
+		"insite-ws": "^1"
+	},
+	"devDependencies": {
+		"@nesvet/eslint-config": "^1"
+	}
+}