nuxt-security-module 4.3.1 → 4.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (136) hide show
  1. package/README.md +23 -8
  2. package/package.json +9 -20
  3. package/dist/index.d.ts +0 -17
  4. package/dist/index.js +0 -105
  5. package/dist/models/AllowedMethodsRestricterOptions.d.ts +0 -5
  6. package/dist/models/BasicAuthOptions.d.ts +0 -9
  7. package/dist/models/ContentSecurityPolicy.d.ts +0 -3
  8. package/dist/models/CorsHandlerOptions.d.ts +0 -13
  9. package/dist/models/CrossOriginEmbedderPolicy.d.ts +0 -8
  10. package/dist/models/CrossOriginEmbedderPolicy.js +0 -8
  11. package/dist/models/CsrfOptions.d.ts +0 -6
  12. package/dist/models/ModuleOptions.d.ts +0 -27
  13. package/dist/models/PermissionsPolicy.d.ts +0 -3
  14. package/dist/models/RateLimitWindow.d.ts +0 -6
  15. package/dist/models/RateLimiterOptions.d.ts +0 -6
  16. package/dist/models/RateLimiterStore.d.ts +0 -6
  17. package/dist/models/RequestSizeLimiterOptions.d.ts +0 -6
  18. package/dist/models/SecurityHeaders.d.ts +0 -22
  19. package/dist/models/SecurityRouteRules.d.ts +0 -4
  20. package/dist/models/SecurityRules.d.ts +0 -4
  21. package/dist/models/SsgOptions.d.ts +0 -9
  22. package/dist/models/StrictTransportSecurity.d.ts +0 -7
  23. package/dist/models/XFrameOptions.d.ts +0 -7
  24. package/dist/models/XFrameOptions.js +0 -7
  25. package/dist/runtime/constants.d.ts +0 -24
  26. package/dist/runtime/constants.js +0 -52
  27. package/dist/runtime/nitro/plugins/hidePoweredBy.d.ts +0 -5
  28. package/dist/runtime/nitro/plugins/hidePoweredBy.js +0 -13
  29. package/dist/runtime/nitro/plugins/nonce.d.ts +0 -5
  30. package/dist/runtime/nitro/plugins/nonce.js +0 -27
  31. package/dist/runtime/nitro/plugins/routeRules.d.ts +0 -5
  32. package/dist/runtime/nitro/plugins/routeRules.js +0 -17
  33. package/dist/runtime/nitro/plugins/securityHeaders.d.ts +0 -5
  34. package/dist/runtime/nitro/plugins/securityHeaders.js +0 -25
  35. package/dist/runtime/nitro/plugins/ssgHashes.d.ts +0 -5
  36. package/dist/runtime/nitro/plugins/ssgHashes.js +0 -27
  37. package/dist/runtime/nitro/plugins/subresourceIntegrity.d.ts +0 -4
  38. package/dist/runtime/nitro/plugins/subresourceIntegrity.js +0 -19
  39. package/dist/runtime/server/middleware/allowedMethodsRestricter.d.ts +0 -5
  40. package/dist/runtime/server/middleware/allowedMethodsRestricter.js +0 -15
  41. package/dist/runtime/server/middleware/basicAuth.d.ts +0 -5
  42. package/dist/runtime/server/middleware/basicAuth.js +0 -23
  43. package/dist/runtime/server/middleware/corsHandler.d.ts +0 -5
  44. package/dist/runtime/server/middleware/corsHandler.js +0 -20
  45. package/dist/runtime/server/middleware/csrf.d.ts +0 -5
  46. package/dist/runtime/server/middleware/csrf.js +0 -28
  47. package/dist/runtime/server/middleware/rateLimiter.d.ts +0 -5
  48. package/dist/runtime/server/middleware/rateLimiter.js +0 -22
  49. package/dist/runtime/server/middleware/requestSizeLimiter.d.ts +0 -5
  50. package/dist/runtime/server/middleware/requestSizeLimiter.js +0 -17
  51. package/dist/runtime/services/checkIsBasicAuthorized.d.ts +0 -4
  52. package/dist/runtime/services/checkIsBasicAuthorized.js +0 -12
  53. package/dist/runtime/services/checkIsChallenged.d.ts +0 -4
  54. package/dist/runtime/services/checkIsChallenged.js +0 -8
  55. package/dist/runtime/services/checkIsCsrfTokenValid.d.ts +0 -3
  56. package/dist/runtime/services/checkIsCsrfTokenValid.js +0 -8
  57. package/dist/runtime/services/checkIsEqualInConstantTime.d.ts +0 -3
  58. package/dist/runtime/services/checkIsEqualInConstantTime.js +0 -11
  59. package/dist/runtime/services/checkIsMethodAllowed.d.ts +0 -3
  60. package/dist/runtime/services/checkIsMethodAllowed.js +0 -4
  61. package/dist/runtime/services/checkIsRecord.d.ts +0 -3
  62. package/dist/runtime/services/checkIsRecord.js +0 -4
  63. package/dist/runtime/services/checkIsRequestTooLarge.d.ts +0 -4
  64. package/dist/runtime/services/checkIsRequestTooLarge.js +0 -9
  65. package/dist/runtime/services/collectSsgHashes.d.ts +0 -5
  66. package/dist/runtime/services/collectSsgHashes.js +0 -41
  67. package/dist/runtime/services/createInMemoryRateLimiterStore.d.ts +0 -4
  68. package/dist/runtime/services/createInMemoryRateLimiterStore.js +0 -22
  69. package/dist/runtime/services/generateHash.d.ts +0 -3
  70. package/dist/runtime/services/generateHash.js +0 -9
  71. package/dist/runtime/services/generateNonce.d.ts +0 -3
  72. package/dist/runtime/services/generateNonce.js +0 -6
  73. package/dist/runtime/services/generateRandomToken.d.ts +0 -3
  74. package/dist/runtime/services/generateRandomToken.js +0 -8
  75. package/dist/runtime/services/getBasicAuthCredentials.d.ts +0 -6
  76. package/dist/runtime/services/getBasicAuthCredentials.js +0 -19
  77. package/dist/runtime/services/getBasicAuthOptions.d.ts +0 -4
  78. package/dist/runtime/services/getBasicAuthOptions.js +0 -17
  79. package/dist/runtime/services/getRetryAfterSeconds.d.ts +0 -5
  80. package/dist/runtime/services/getRetryAfterSeconds.js +0 -9
  81. package/dist/runtime/services/getSecurityRules.d.ts +0 -5
  82. package/dist/runtime/services/getSecurityRules.js +0 -15
  83. package/dist/runtime/services/getSecurityState.d.ts +0 -11
  84. package/dist/runtime/services/getSecurityState.js +0 -14
  85. package/dist/runtime/services/injectNonce.d.ts +0 -3
  86. package/dist/runtime/services/injectNonce.js +0 -7
  87. package/dist/runtime/services/injectSubresourceIntegrity.d.ts +0 -3
  88. package/dist/runtime/services/injectSubresourceIntegrity.js +0 -22
  89. package/dist/runtime/services/insertContentSecurityPolicyMeta.d.ts +0 -4
  90. package/dist/runtime/services/insertContentSecurityPolicyMeta.js +0 -17
  91. package/dist/runtime/services/mergeSecurityRules.d.ts +0 -4
  92. package/dist/runtime/services/mergeSecurityRules.js +0 -11
  93. package/dist/runtime/services/readHtmlTagAttribute.d.ts +0 -3
  94. package/dist/runtime/services/readHtmlTagAttribute.js +0 -8
  95. package/dist/runtime/services/rewriteHtmlTags.d.ts +0 -3
  96. package/dist/runtime/services/rewriteHtmlTags.js +0 -9
  97. package/dist/runtime/services/securityRouteMatcher.d.ts +0 -5
  98. package/dist/runtime/services/securityRouteMatcher.js +0 -11
  99. package/dist/runtime/services/serializeBasicAuthChallenge.d.ts +0 -3
  100. package/dist/runtime/services/serializeBasicAuthChallenge.js +0 -4
  101. package/dist/runtime/services/serializeContentSecurityPolicy.d.ts +0 -4
  102. package/dist/runtime/services/serializeContentSecurityPolicy.js +0 -7
  103. package/dist/runtime/services/serializePermissionsPolicy.d.ts +0 -4
  104. package/dist/runtime/services/serializePermissionsPolicy.js +0 -4
  105. package/dist/runtime/services/serializeSecurityHeaders.d.ts +0 -4
  106. package/dist/runtime/services/serializeSecurityHeaders.js +0 -19
  107. package/dist/runtime/services/serializeStrictTransportSecurity.d.ts +0 -4
  108. package/dist/runtime/services/serializeStrictTransportSecurity.js +0 -8
  109. package/dist/runtime/services/stripHtmlTagAttribute.d.ts +0 -3
  110. package/dist/runtime/services/stripHtmlTagAttribute.js +0 -5
  111. package/dist/runtime/services/updateContentSecurityPolicy.d.ts +0 -5
  112. package/dist/runtime/services/updateContentSecurityPolicy.js +0 -15
  113. package/dist/schemas/allowedMethodsRestricterOptionsSchema.js +0 -5
  114. package/dist/schemas/basicAuthOptionsSchema.js +0 -12
  115. package/dist/schemas/contentSecurityPolicySchema.js +0 -5
  116. package/dist/schemas/corsHandlerOptionsSchema.js +0 -14
  117. package/dist/schemas/csrfOptionsSchema.js +0 -9
  118. package/dist/schemas/moduleOptionsSchema.js +0 -29
  119. package/dist/schemas/permissionsPolicySchema.js +0 -5
  120. package/dist/schemas/rateLimiterOptionsSchema.js +0 -8
  121. package/dist/schemas/requestSizeLimiterOptionsSchema.js +0 -8
  122. package/dist/schemas/securityHeadersSchema.js +0 -25
  123. package/dist/schemas/ssgOptionsSchema.js +0 -11
  124. package/dist/schemas/strictTransportSecurityOptionsSchema.js +0 -9
  125. package/dist/services/computeSubresourceIntegrityHashes.js +0 -29
  126. package/dist/services/formatZodIssues.js +0 -16
  127. package/dist/services/getDefaultModuleOptions.js +0 -41
  128. package/dist/services/getDefaultSecurityHeaders.js +0 -85
  129. package/dist/services/getPluginTemplate.js +0 -10
  130. package/dist/services/getRemoveLoggersViteConfig.js +0 -4
  131. package/dist/services/getRouteRulesTemplate.js +0 -4
  132. package/dist/services/getRouteSecurityRules.js +0 -17
  133. package/dist/services/getStaticResourceHeaders.js +0 -12
  134. package/dist/services/getTypeTemplate.js +0 -25
  135. package/dist/services/mergeModuleOptions.js +0 -39
  136. package/dist/services/parseModuleOptions.js +0 -10
@@ -1,25 +0,0 @@
1
- import { MODULE_NAME, ROUTE_RULES_HOOK } from "../runtime/constants.js";
2
- //#region src/services/getTypeTemplate.ts
3
- const getTypeTemplate = () => `// Generated by ${MODULE_NAME}
4
- import type { ModuleOptions } from '${MODULE_NAME}'
5
-
6
- declare module '#${MODULE_NAME}/route-rules.mjs' {
7
- const routeRules: Record<string, Partial<ModuleOptions>>
8
- export default routeRules
9
- }
10
-
11
- declare module '#${MODULE_NAME}/sri-hashes.mjs' {
12
- const sriHashes: Record<string, string>
13
- export default sriHashes
14
- }
15
-
16
- declare module 'nitro/types' {
17
- interface NitroRuntimeHooks {
18
- '${ROUTE_RULES_HOOK}': (routeRules: Record<string, Partial<ModuleOptions>>) => void | Promise<void>
19
- }
20
- }
21
-
22
- export {}
23
- `;
24
- //#endregion
25
- export { getTypeTemplate };
@@ -1,39 +0,0 @@
1
- //#region src/services/mergeModuleOptions.ts
2
- const mergeModuleOptions = (defaults, overrides) => ({
3
- ...defaults,
4
- ...overrides,
5
- headers: mergeHeaders(defaults.headers, overrides.headers),
6
- ssg: overrides.ssg === false ? false : {
7
- ...defaults.ssg,
8
- ...overrides.ssg
9
- }
10
- });
11
- const mergeHeaders = (defaults, overrides) => {
12
- if (overrides === false || defaults === false) return overrides ?? defaults;
13
- if (overrides === void 0) return defaults;
14
- return {
15
- ...defaults,
16
- ...overrides,
17
- contentSecurityPolicy: mergeDirectives(defaults.contentSecurityPolicy, overrides.contentSecurityPolicy),
18
- permissionsPolicy: mergeFeatures(defaults.permissionsPolicy, overrides.permissionsPolicy)
19
- };
20
- };
21
- const mergeDirectives = (defaults, overrides) => {
22
- if (overrides === false || defaults === false) return overrides ?? defaults;
23
- if (overrides === void 0) return defaults;
24
- const merged = { ...defaults };
25
- for (const [directive, value] of Object.entries(overrides)) if (value === false) delete merged[directive];
26
- else if (Array.isArray(value)) merged[directive] = [.../* @__PURE__ */ new Set([...Array.isArray(merged[directive]) ? merged[directive] : [], ...value])];
27
- else merged[directive] = value;
28
- return merged;
29
- };
30
- const mergeFeatures = (defaults, overrides) => {
31
- if (overrides === false || defaults === false) return overrides ?? defaults;
32
- if (overrides === void 0) return defaults;
33
- const merged = { ...defaults };
34
- for (const [feature, sources] of Object.entries(overrides)) if (sources === false) delete merged[feature];
35
- else merged[feature] = [.../* @__PURE__ */ new Set([...merged[feature] || [], ...sources || []])];
36
- return merged;
37
- };
38
- //#endregion
39
- export { mergeModuleOptions };
@@ -1,10 +0,0 @@
1
- import { moduleOptionsSchema } from "../schemas/moduleOptionsSchema.js";
2
- import { formatZodIssues } from "./formatZodIssues.js";
3
- //#region src/services/parseModuleOptions.ts
4
- const parseModuleOptions = (options) => {
5
- const result = moduleOptionsSchema.safeParse(options);
6
- if (!result.success) throw new TypeError(`nuxt-security-module: ${formatZodIssues(result.error.issues)}`);
7
- return result.data;
8
- };
9
- //#endregion
10
- export { parseModuleOptions };