max-nestjs 0.0.1 → 0.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -5,4 +5,5 @@ export declare class MaxAuthGuard implements CanActivate {
5
5
  constructor(options: MaxResolvedModuleOptions);
6
6
  canActivate(context: ExecutionContext): boolean;
7
7
  private validateInitData;
8
+ private parseInitData;
8
9
  }
@@ -15,56 +15,76 @@ Object.defineProperty(exports, "__esModule", { value: true });
15
15
  exports.MaxAuthGuard = void 0;
16
16
  const common_1 = require("@nestjs/common");
17
17
  const max_constants_1 = require("./max.constants");
18
- const common_2 = require("@nestjs/common");
19
18
  const crypto_1 = require("crypto");
20
19
  const max_constants_2 = require("./max.constants");
20
+ const utils_nodejs_1 = require("@companix/utils-nodejs");
21
21
  let MaxAuthGuard = class MaxAuthGuard {
22
22
  constructor(options) {
23
23
  this.options = options;
24
24
  }
25
25
  canActivate(context) {
26
26
  const request = context.switchToHttp().getRequest();
27
- const headerValue = request.headers[this.options.headerName];
28
- if (typeof headerValue !== 'string') {
27
+ const rawInitData = request.headers[this.options.headerName];
28
+ if (!rawInitData || typeof rawInitData !== 'string') {
29
29
  throw new common_1.UnauthorizedException('MAX init data is missing');
30
30
  }
31
- const initData = this.validateInitData(headerValue);
32
- request.maxInitData = initData;
33
- request.maxUser = initData.user;
34
- return true;
31
+ try {
32
+ const { initData, entities } = this.parseInitData(rawInitData);
33
+ if (!this.validateInitData(entities, initData.hash)) {
34
+ throw new common_1.UnauthorizedException('Invalid MAX init data signature');
35
+ }
36
+ request.maxInitData = initData;
37
+ request.maxUser = initData.user;
38
+ return true;
39
+ }
40
+ catch (error) {
41
+ throw new common_1.UnauthorizedException('Failed to validate Max init data');
42
+ }
35
43
  }
36
- validateInitData(rawInitData) {
37
- const params = parseRawParams(rawInitData);
38
- const hashParam = getRequiredUniqueParam(params, 'hash');
39
- const authDateParam = getRequiredUniqueParam(params, 'auth_date');
40
- const userParam = getRequiredUniqueParam(params, 'user');
41
- const launchParams = params
42
- .filter((param) => param.key !== 'hash')
43
- .sort((left, right) => left.key.localeCompare(right.key))
44
- .map((param) => `${param.key}=${param.value}`)
44
+ validateInitData(entities, hash) {
45
+ const launchParamsString = entities
46
+ .sort((left, right) => left[0].localeCompare(right[0]))
47
+ .map((param) => `${param[0]}=${param[1]}`)
45
48
  .join('\n');
46
49
  const secretKey = (0, crypto_1.createHmac)('sha256', max_constants_2.MAX_WEB_APP_DATA_KEY).update(this.options.botToken).digest();
47
- const calculatedHash = (0, crypto_1.createHmac)('sha256', secretKey).update(launchParams).digest('hex');
48
- if (!safeEqual(calculatedHash, hashParam.value)) {
49
- throw new common_1.UnauthorizedException('Invalid MAX init data signature');
50
- }
51
- if (!/^\d+$/.test(authDateParam.value)) {
52
- throw new common_2.BadRequestException('Invalid MAX init data auth_date');
50
+ const calculatedHash = (0, crypto_1.createHmac)('sha256', secretKey).update(launchParamsString).digest('hex');
51
+ return (0, utils_nodejs_1.safeEqual)(calculatedHash, hash);
52
+ }
53
+ parseInitData(rawInitData) {
54
+ const params = new URLSearchParams(rawInitData);
55
+ const entities = Array.from(params.entries());
56
+ const initData = {};
57
+ for (const [key, value] of entities) {
58
+ switch (key) {
59
+ case 'auth_date':
60
+ initData.auth_date = parseRequiredInteger(key, value);
61
+ break;
62
+ case 'hash':
63
+ initData.hash = value;
64
+ break;
65
+ case 'ip':
66
+ initData.ip = value;
67
+ break;
68
+ case 'query_id':
69
+ initData.query_id = value;
70
+ break;
71
+ case 'start_param':
72
+ initData.start_param = value;
73
+ break;
74
+ case 'chat':
75
+ initData.chat = parseJsonValue(key, value);
76
+ break;
77
+ case 'user':
78
+ initData.user = parseJsonValue(key, value);
79
+ break;
80
+ }
53
81
  }
54
- const authDate = Number.parseInt(authDateParam.value, 10);
55
- const maxAgeSeconds = this.options.maxAgeSeconds ?? max_constants_2.DEFAULT_MAX_AGE_SECONDS;
56
- const nowSeconds = Math.floor(Date.now() / 1000);
57
- if (nowSeconds - authDate > maxAgeSeconds) {
58
- throw new common_1.UnauthorizedException('MAX init data expired');
82
+ if (!initData.hash || !initData.auth_date || !initData.user) {
83
+ throw new common_1.BadRequestException('Invalid init data format');
59
84
  }
60
85
  return {
61
- auth_date: authDate,
62
- hash: hashParam.value,
63
- ip: getOptionalParam(params, 'ip'),
64
- query_id: getOptionalParam(params, 'query_id'),
65
- start_param: getOptionalParam(params, 'start_param'),
66
- chat: parseOptionalJsonParam(params, 'chat'),
67
- user: parseJsonValue(userParam.key, userParam.value)
86
+ entities,
87
+ initData: initData
68
88
  };
69
89
  }
70
90
  };
@@ -74,75 +94,19 @@ exports.MaxAuthGuard = MaxAuthGuard = __decorate([
74
94
  __param(0, (0, common_1.Inject)(max_constants_1.MAX_OPTIONS_SYMBOL)),
75
95
  __metadata("design:paramtypes", [Object])
76
96
  ], MaxAuthGuard);
77
- const parseRawParams = (rawInitData) => {
78
- const parts = rawInitData.split('&');
79
- if (!parts.length) {
80
- throw new common_2.BadRequestException('MAX init data is empty');
81
- }
82
- const params = parts.map(parseRawParam);
83
- const occurrences = new Map();
84
- for (const param of params) {
85
- occurrences.set(param.key, (occurrences.get(param.key) ?? 0) + 1);
97
+ const parseRequiredInteger = (key, value) => {
98
+ const parsed = Number.parseInt(value, 10);
99
+ if (!Number.isFinite(parsed)) {
100
+ throw new common_1.BadRequestException(`Invalid MAX init data numeric value for "${key}"`);
86
101
  }
87
- for (const [key, count] of occurrences) {
88
- if (count !== 1) {
89
- throw new common_2.BadRequestException(`MAX init data contains duplicate parameter "${key}"`);
90
- }
91
- }
92
- return params;
93
- };
94
- const parseRawParam = (rawParam) => {
95
- const separatorIndex = rawParam.indexOf('=');
96
- if (separatorIndex <= 0) {
97
- throw new common_2.BadRequestException('Invalid MAX init data parameter');
98
- }
99
- const key = rawParam.slice(0, separatorIndex);
100
- const encodedValue = rawParam.slice(separatorIndex + 1);
101
- return {
102
- key,
103
- value: decodeValue(encodedValue)
104
- };
105
- };
106
- const decodeValue = (value) => {
107
- try {
108
- return decodeURIComponent(value);
109
- }
110
- catch {
111
- throw new common_2.BadRequestException('Failed to decode MAX init data parameter');
112
- }
113
- };
114
- const getRequiredUniqueParam = (params, key) => {
115
- const matches = params.filter((param) => param.key === key);
116
- if (matches.length !== 1) {
117
- throw new common_2.BadRequestException(`MAX init data must contain exactly one "${key}" parameter`);
118
- }
119
- return matches[0];
120
- };
121
- const getOptionalParam = (params, key) => {
122
- const match = params.find((param) => param.key === key);
123
- return match?.value;
124
- };
125
- const parseOptionalJsonParam = (params, key) => {
126
- const value = getOptionalParam(params, key);
127
- if (value === undefined) {
128
- return undefined;
129
- }
130
- return parseJsonValue(key, value);
102
+ return parsed;
131
103
  };
132
104
  const parseJsonValue = (key, value) => {
133
105
  try {
134
106
  return JSON.parse(value);
135
107
  }
136
108
  catch {
137
- throw new common_2.BadRequestException(`Invalid MAX init data JSON value for "${key}"`);
138
- }
139
- };
140
- const safeEqual = (left, right) => {
141
- const leftBuffer = Buffer.from(left, 'utf8');
142
- const rightBuffer = Buffer.from(right, 'utf8');
143
- if (leftBuffer.length !== rightBuffer.length) {
144
- return false;
109
+ throw new common_1.BadRequestException(`Invalid MAX init data JSON value for "${key}"`);
145
110
  }
146
- return (0, crypto_1.timingSafeEqual)(leftBuffer, rightBuffer);
147
111
  };
148
112
  //# sourceMappingURL=max-auth.guard.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"max-auth.guard.js","sourceRoot":"","sources":["../src/max-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMuB;AACvB,mDAAoD;AAGpD,2CAAoD;AACpD,mCAAoD;AACpD,mDAA+E;AASxE,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YAEmB,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;IACjD,CAAC;IAEG,WAAW,CAAC,OAAyB;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAc,CAAA;QAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAE5D,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;QAEnD,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAA;QAC9B,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAA;QAE/B,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,gBAAgB,CAAC,WAAmB;QAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACjE,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAExD,MAAM,YAAY,GAAG,MAAM;aACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC;aACvC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,oCAAoB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAA;QACnG,MAAM,cAAc,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAEzF,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAA;QACpE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAA;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAEzD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,uCAAuB,CAAA;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAEhD,IAAI,UAAU,GAAG,QAAQ,GAAG,aAAa,EAAE,CAAC;YAC1C,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAA;QAC1D,CAAC;QAED,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,SAAS,CAAC,KAAK;YACrB,EAAE,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;YAClC,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC;YAC9C,WAAW,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC;YACpD,IAAI,EAAE,sBAAsB,CAAsB,MAAM,EAAE,MAAM,CAAC;YACjE,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;SACrD,CAAA;IACH,CAAC;CACF,CAAA;AAhEY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,kCAAkB,CAAC,CAAA;;GAFlB,YAAY,CAgExB;AAED,MAAM,cAAc,GAAG,CAAC,WAAmB,EAAc,EAAE;IACzD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAA;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;QACvC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,4BAAmB,CAAC,+CAA+C,GAAG,GAAG,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAY,EAAE;IACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAE5C,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAA;IAEvD,OAAO;QACL,GAAG;QACH,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC;KACjC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE;IAC5C,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAC,MAAkB,EAAE,GAAW,EAAY,EAAE;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAE3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,GAAG,aAAa,CAAC,CAAA;IAC5F,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,MAAkB,EAAE,GAAW,EAAsB,EAAE;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAEvD,OAAO,KAAK,EAAE,KAAK,CAAA;AACrB,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAI,MAAkB,EAAE,GAAW,EAAiB,EAAE;IACnF,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAE3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;AACnC,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAI,GAAW,EAAE,KAAa,EAAK,EAAE;IAC1D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAmB,CAAC,yCAAyC,GAAG,GAAG,CAAC,CAAA;IAChF,CAAC;AACH,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAE9C,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,IAAA,wBAAe,EAAC,UAAU,EAAE,WAAW,CAAC,CAAA;AACjD,CAAC,CAAA"}
1
+ {"version":3,"file":"max-auth.guard.js","sourceRoot":"","sources":["../src/max-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOuB;AACvB,mDAAoD;AAGpD,mCAAmC;AACnC,mDAAsD;AAEtD,yDAAkD;AAG3C,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YAEmB,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;IACjD,CAAC;IAEG,WAAW,CAAC,OAAyB;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAc,CAAA;QAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAE5D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAA;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;YAE9D,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAA;YACpE,CAAC;YAED,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAA;YAC9B,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAA;YAE/B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,QAA4B,EAAE,IAAY;QACjE,MAAM,kBAAkB,GAAG,QAAQ;aAChC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACzC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEb,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,oCAAoB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAA;QACnG,MAAM,cAAc,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE/F,OAAO,IAAA,wBAAS,EAAC,cAAc,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC;IAEO,aAAa,CAAC,WAAmB;QACvC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAyB,EAAE,CAAA;QAEzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACpC,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,WAAW;oBACd,QAAQ,CAAC,SAAS,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;oBACrD,MAAK;gBACP,KAAK,MAAM;oBACT,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAA;oBACrB,MAAK;gBACP,KAAK,IAAI;oBACP,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAA;oBACnB,MAAK;gBACP,KAAK,UAAU;oBACb,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAA;oBACzB,MAAK;gBACP,KAAK,aAAa;oBAChB,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAA;oBAC5B,MAAK;gBACP,KAAK,MAAM;oBACT,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;oBAC1C,MAAK;gBACP,KAAK,MAAM;oBACT,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;oBAC1C,MAAK;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO;YACL,QAAQ;YACR,QAAQ,EAAE,QAAuB;SAClC,CAAA;IACH,CAAC;CACF,CAAA;AAlFY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,kCAAkB,CAAC,CAAA;;GAFlB,YAAY,CAkFxB;AAED,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAE,KAAa,EAAU,EAAE;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAEzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,4BAAmB,CAAC,4CAA4C,GAAG,GAAG,CAAC,CAAA;IACnF,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAI,GAAW,EAAE,KAAa,EAAK,EAAE;IAC1D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAmB,CAAC,yCAAyC,GAAG,GAAG,CAAC,CAAA;IAChF,CAAC;AACH,CAAC,CAAA"}
@@ -1,4 +1,3 @@
1
1
  export declare const MAX_OPTIONS_SYMBOL: unique symbol;
2
2
  export declare const MAX_WEB_APP_DATA_KEY = "WebAppData";
3
3
  export declare const DEFAULT_MAX_INIT_DATA_HEADER = "x-max-init-data";
4
- export declare const DEFAULT_MAX_AGE_SECONDS: number;
@@ -1,8 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.DEFAULT_MAX_AGE_SECONDS = exports.DEFAULT_MAX_INIT_DATA_HEADER = exports.MAX_WEB_APP_DATA_KEY = exports.MAX_OPTIONS_SYMBOL = void 0;
3
+ exports.DEFAULT_MAX_INIT_DATA_HEADER = exports.MAX_WEB_APP_DATA_KEY = exports.MAX_OPTIONS_SYMBOL = void 0;
4
4
  exports.MAX_OPTIONS_SYMBOL = Symbol('MaxOptionsSymbol');
5
5
  exports.MAX_WEB_APP_DATA_KEY = 'WebAppData';
6
6
  exports.DEFAULT_MAX_INIT_DATA_HEADER = 'x-max-init-data';
7
- exports.DEFAULT_MAX_AGE_SECONDS = 60 * 60;
8
7
  //# sourceMappingURL=max.constants.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"max.constants.js","sourceRoot":"","sources":["../src/max.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAA;AAE/C,QAAA,oBAAoB,GAAG,YAAY,CAAA;AACnC,QAAA,4BAA4B,GAAG,iBAAiB,CAAA;AAChD,QAAA,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAA"}
1
+ {"version":3,"file":"max.constants.js","sourceRoot":"","sources":["../src/max.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAA;AAE/C,QAAA,oBAAoB,GAAG,YAAY,CAAA;AACnC,QAAA,4BAA4B,GAAG,iBAAiB,CAAA"}
@@ -9,15 +9,9 @@ export type MaxModuleOptions = {
9
9
  * По умолчанию: `x-max-init-data`.
10
10
  */
11
11
  headerName?: string;
12
- /**
13
- * Максимальный возраст init data в секундах.
14
- * По умолчанию: 3600.
15
- */
16
- maxAgeSeconds?: number;
17
12
  };
18
13
  export type MaxResolvedModuleOptions = {
19
14
  botToken: string;
20
15
  headerName: string;
21
- maxAgeSeconds: number;
22
16
  };
23
17
  export type MaxModuleAsyncOptions = Pick<ModuleMetadata, 'imports'> & Pick<FactoryProvider<MaxModuleOptions>, 'useFactory' | 'inject'>;
@@ -38,14 +38,9 @@ const normalizeOptions = (options) => {
38
38
  throw new Error('MAX bot token is required');
39
39
  }
40
40
  const headerName = options.headerName?.trim() || max_constants_1.DEFAULT_MAX_INIT_DATA_HEADER;
41
- const maxAgeSeconds = options.maxAgeSeconds ?? max_constants_1.DEFAULT_MAX_AGE_SECONDS;
42
- if (!Number.isInteger(maxAgeSeconds) || maxAgeSeconds < 0) {
43
- throw new Error('MAX maxAgeSeconds must be a non-negative integer');
44
- }
45
41
  return {
46
42
  botToken,
47
- headerName,
48
- maxAgeSeconds
43
+ headerName
49
44
  };
50
45
  };
51
46
  //# sourceMappingURL=max.module.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"max.module.js","sourceRoot":"","sources":["../src/max.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAmE;AACnE,mDAIwB;AAExB,qDAA+C;AAIxC,IAAM,SAAS,iBAAf,MAAM,SAAS;IACb,MAAM,CAAC,OAAO,CAAC,OAAyB;QAC7C,OAAO;YACL,MAAM,EAAE,WAAS;YACjB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,kCAAkB;oBAC3B,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC;iBACpC;gBACD,6BAAY;aACb;YACD,OAAO,EAAE,CAAC,kCAAkB,EAAE,6BAAY,CAAC;YAC3C,MAAM,EAAE,IAAI;SACb,CAAA;IACH,CAAC;CACF,CAAA;AAfY,8BAAS;oBAAT,SAAS;IAFrB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,SAAS,CAerB;AAED,MAAM,gBAAgB,GAAG,CAAC,OAAyB,EAA4B,EAAE;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IAExC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,4CAA4B,CAAA;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uCAAuB,CAAA;IAEtE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,CAAC;IAED,OAAO;QACL,QAAQ;QACR,UAAU;QACV,aAAa;KACd,CAAA;AACH,CAAC,CAAA"}
1
+ {"version":3,"file":"max.module.js","sourceRoot":"","sources":["../src/max.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAmE;AACnE,mDAAkF;AAElF,qDAA+C;AAIxC,IAAM,SAAS,iBAAf,MAAM,SAAS;IACb,MAAM,CAAC,OAAO,CAAC,OAAyB;QAC7C,OAAO;YACL,MAAM,EAAE,WAAS;YACjB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,kCAAkB;oBAC3B,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC;iBACpC;gBACD,6BAAY;aACb;YACD,OAAO,EAAE,CAAC,kCAAkB,EAAE,6BAAY,CAAC;YAC3C,MAAM,EAAE,IAAI;SACb,CAAA;IACH,CAAC;CACF,CAAA;AAfY,8BAAS;oBAAT,SAAS;IAFrB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,SAAS,CAerB;AAED,MAAM,gBAAgB,GAAG,CAAC,OAAyB,EAA4B,EAAE;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IAExC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,4CAA4B,CAAA;IAE7E,OAAO;QACL,QAAQ;QACR,UAAU;KACX,CAAA;AACH,CAAC,CAAA"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "max-nestjs",
3
- "version": "0.0.1",
3
+ "version": "0.0.3",
4
4
  "description": "NestJS helpers for validating MAX Mini App init data.",
5
5
  "files": [
6
6
  "dist",
@@ -22,7 +22,8 @@
22
22
  "build": "rm -rf dist && tsc -p tsconfig.json"
23
23
  },
24
24
  "dependencies": {
25
- "max-bridge": "*"
25
+ "max-bridge": "*",
26
+ "@companix/utils-nodejs": "*"
26
27
  },
27
28
  "devDependencies": {
28
29
  "@nestjs/common": "^11.1.17",