mitigator 1.0.0 → 1.0.1

package/README.md

@@ -1,5 +1,9 @@
 # Mitigator 🛡️
 
+[![npm version](https://img.shields.io/npm/v/mitigator.svg)](https://www.npmjs.com/package/mitigator)
+[![npm downloads](https://img.shields.io/npm/dm/mitigator.svg)](https://www.npmjs.com/package/mitigator)
+[![License: ISC](https://img.shields.io/badge/License-ISC-blue.svg)](https://opensource.org/licenses/ISC)
+
 **Mitigator** is a production-grade, security-first TypeScript library designed to eliminate common vulnerabilities and implement advanced defense-in-depth patterns in Node.js applications.
 
 Unlike generic utility libraries, Mitigator is built with a "Zero-Trust" philosophy, providing tools specifically hardened against XSS, Prototype Pollution, Path Traversal, SQL Injection, and more.

package/dist/index.cjs

@@ -393,7 +393,11 @@ var isJwtValid = (token, secretOrPublicKey, algorithm = "HS256") => {
     if (!header.alg || header.alg.toLowerCase() === "none" || header.alg !== algorithm)
       return false;
     const payload = JSON.parse(import_node_buffer.Buffer.from(payloadB64, "base64url").toString("utf8"));
-    if (payload.exp && Date.now() >= payload.exp * 1e3) return false;
+    const nowSec = Math.floor(Date.now() / 1e3);
+    const clockToleranceSec = 60;
+    if (payload.exp && nowSec >= payload.exp) return false;
+    if (payload.nbf && nowSec + clockToleranceSec < payload.nbf) return false;
+    if (payload.iat && nowSec + clockToleranceSec < payload.iat) return false;
     const dataToSign = `${headerB64}.${payloadB64}`;
     const signatureBuffer = import_node_buffer.Buffer.from(signatureB64, "base64url");
     if (algorithm.startsWith("HS")) {
@@ -1099,28 +1103,20 @@ var TokenBucket = class {
   buckets = /* @__PURE__ */ new Map();
   async consume(id, tokens = 1) {
     const now = Date.now();
-    const bucket = this.buckets.get(id);
+    let bucket = this.buckets.get(id);
     if (bucket) {
       const delta = (now - bucket.lastRefill) / 1e3;
       const refill = delta * this.refillRatePerSecond;
       bucket.tokens = Math.min(this.capacity, bucket.tokens + refill);
       bucket.lastRefill = now;
     } else {
-      const newBucket = { tokens: this.capacity, lastRefill: now };
-      if (newBucket.tokens >= tokens) {
-        newBucket.tokens -= tokens;
-        this.buckets.set(id, newBucket);
-        return true;
-      }
-      this.buckets.set(id, newBucket);
-      return false;
+      bucket = { tokens: this.capacity, lastRefill: now };
+      this.buckets.set(id, bucket);
     }
     if (bucket.tokens >= tokens) {
       bucket.tokens -= tokens;
-      this.buckets.set(id, bucket);
       return true;
     }
-    this.buckets.set(id, bucket);
     return false;
   }
 };