nuxt-security-module 4.3.1 → 4.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -8
- package/package.json +9 -20
- package/dist/index.d.ts +0 -17
- package/dist/index.js +0 -105
- package/dist/models/AllowedMethodsRestricterOptions.d.ts +0 -5
- package/dist/models/BasicAuthOptions.d.ts +0 -9
- package/dist/models/ContentSecurityPolicy.d.ts +0 -3
- package/dist/models/CorsHandlerOptions.d.ts +0 -13
- package/dist/models/CrossOriginEmbedderPolicy.d.ts +0 -8
- package/dist/models/CrossOriginEmbedderPolicy.js +0 -8
- package/dist/models/CsrfOptions.d.ts +0 -6
- package/dist/models/ModuleOptions.d.ts +0 -27
- package/dist/models/PermissionsPolicy.d.ts +0 -3
- package/dist/models/RateLimitWindow.d.ts +0 -6
- package/dist/models/RateLimiterOptions.d.ts +0 -6
- package/dist/models/RateLimiterStore.d.ts +0 -6
- package/dist/models/RequestSizeLimiterOptions.d.ts +0 -6
- package/dist/models/SecurityHeaders.d.ts +0 -22
- package/dist/models/SecurityRouteRules.d.ts +0 -4
- package/dist/models/SecurityRules.d.ts +0 -4
- package/dist/models/SsgOptions.d.ts +0 -9
- package/dist/models/StrictTransportSecurity.d.ts +0 -7
- package/dist/models/XFrameOptions.d.ts +0 -7
- package/dist/models/XFrameOptions.js +0 -7
- package/dist/runtime/constants.d.ts +0 -24
- package/dist/runtime/constants.js +0 -52
- package/dist/runtime/nitro/plugins/hidePoweredBy.d.ts +0 -5
- package/dist/runtime/nitro/plugins/hidePoweredBy.js +0 -13
- package/dist/runtime/nitro/plugins/nonce.d.ts +0 -5
- package/dist/runtime/nitro/plugins/nonce.js +0 -27
- package/dist/runtime/nitro/plugins/routeRules.d.ts +0 -5
- package/dist/runtime/nitro/plugins/routeRules.js +0 -17
- package/dist/runtime/nitro/plugins/securityHeaders.d.ts +0 -5
- package/dist/runtime/nitro/plugins/securityHeaders.js +0 -25
- package/dist/runtime/nitro/plugins/ssgHashes.d.ts +0 -5
- package/dist/runtime/nitro/plugins/ssgHashes.js +0 -27
- package/dist/runtime/nitro/plugins/subresourceIntegrity.d.ts +0 -4
- package/dist/runtime/nitro/plugins/subresourceIntegrity.js +0 -19
- package/dist/runtime/server/middleware/allowedMethodsRestricter.d.ts +0 -5
- package/dist/runtime/server/middleware/allowedMethodsRestricter.js +0 -15
- package/dist/runtime/server/middleware/basicAuth.d.ts +0 -5
- package/dist/runtime/server/middleware/basicAuth.js +0 -23
- package/dist/runtime/server/middleware/corsHandler.d.ts +0 -5
- package/dist/runtime/server/middleware/corsHandler.js +0 -20
- package/dist/runtime/server/middleware/csrf.d.ts +0 -5
- package/dist/runtime/server/middleware/csrf.js +0 -28
- package/dist/runtime/server/middleware/rateLimiter.d.ts +0 -5
- package/dist/runtime/server/middleware/rateLimiter.js +0 -22
- package/dist/runtime/server/middleware/requestSizeLimiter.d.ts +0 -5
- package/dist/runtime/server/middleware/requestSizeLimiter.js +0 -17
- package/dist/runtime/services/checkIsBasicAuthorized.d.ts +0 -4
- package/dist/runtime/services/checkIsBasicAuthorized.js +0 -12
- package/dist/runtime/services/checkIsChallenged.d.ts +0 -4
- package/dist/runtime/services/checkIsChallenged.js +0 -8
- package/dist/runtime/services/checkIsCsrfTokenValid.d.ts +0 -3
- package/dist/runtime/services/checkIsCsrfTokenValid.js +0 -8
- package/dist/runtime/services/checkIsEqualInConstantTime.d.ts +0 -3
- package/dist/runtime/services/checkIsEqualInConstantTime.js +0 -11
- package/dist/runtime/services/checkIsMethodAllowed.d.ts +0 -3
- package/dist/runtime/services/checkIsMethodAllowed.js +0 -4
- package/dist/runtime/services/checkIsRecord.d.ts +0 -3
- package/dist/runtime/services/checkIsRecord.js +0 -4
- package/dist/runtime/services/checkIsRequestTooLarge.d.ts +0 -4
- package/dist/runtime/services/checkIsRequestTooLarge.js +0 -9
- package/dist/runtime/services/collectSsgHashes.d.ts +0 -5
- package/dist/runtime/services/collectSsgHashes.js +0 -41
- package/dist/runtime/services/createInMemoryRateLimiterStore.d.ts +0 -4
- package/dist/runtime/services/createInMemoryRateLimiterStore.js +0 -22
- package/dist/runtime/services/generateHash.d.ts +0 -3
- package/dist/runtime/services/generateHash.js +0 -9
- package/dist/runtime/services/generateNonce.d.ts +0 -3
- package/dist/runtime/services/generateNonce.js +0 -6
- package/dist/runtime/services/generateRandomToken.d.ts +0 -3
- package/dist/runtime/services/generateRandomToken.js +0 -8
- package/dist/runtime/services/getBasicAuthCredentials.d.ts +0 -6
- package/dist/runtime/services/getBasicAuthCredentials.js +0 -19
- package/dist/runtime/services/getBasicAuthOptions.d.ts +0 -4
- package/dist/runtime/services/getBasicAuthOptions.js +0 -17
- package/dist/runtime/services/getRetryAfterSeconds.d.ts +0 -5
- package/dist/runtime/services/getRetryAfterSeconds.js +0 -9
- package/dist/runtime/services/getSecurityRules.d.ts +0 -5
- package/dist/runtime/services/getSecurityRules.js +0 -15
- package/dist/runtime/services/getSecurityState.d.ts +0 -11
- package/dist/runtime/services/getSecurityState.js +0 -14
- package/dist/runtime/services/injectNonce.d.ts +0 -3
- package/dist/runtime/services/injectNonce.js +0 -7
- package/dist/runtime/services/injectSubresourceIntegrity.d.ts +0 -3
- package/dist/runtime/services/injectSubresourceIntegrity.js +0 -22
- package/dist/runtime/services/insertContentSecurityPolicyMeta.d.ts +0 -4
- package/dist/runtime/services/insertContentSecurityPolicyMeta.js +0 -17
- package/dist/runtime/services/mergeSecurityRules.d.ts +0 -4
- package/dist/runtime/services/mergeSecurityRules.js +0 -11
- package/dist/runtime/services/readHtmlTagAttribute.d.ts +0 -3
- package/dist/runtime/services/readHtmlTagAttribute.js +0 -8
- package/dist/runtime/services/rewriteHtmlTags.d.ts +0 -3
- package/dist/runtime/services/rewriteHtmlTags.js +0 -9
- package/dist/runtime/services/securityRouteMatcher.d.ts +0 -5
- package/dist/runtime/services/securityRouteMatcher.js +0 -11
- package/dist/runtime/services/serializeBasicAuthChallenge.d.ts +0 -3
- package/dist/runtime/services/serializeBasicAuthChallenge.js +0 -4
- package/dist/runtime/services/serializeContentSecurityPolicy.d.ts +0 -4
- package/dist/runtime/services/serializeContentSecurityPolicy.js +0 -7
- package/dist/runtime/services/serializePermissionsPolicy.d.ts +0 -4
- package/dist/runtime/services/serializePermissionsPolicy.js +0 -4
- package/dist/runtime/services/serializeSecurityHeaders.d.ts +0 -4
- package/dist/runtime/services/serializeSecurityHeaders.js +0 -19
- package/dist/runtime/services/serializeStrictTransportSecurity.d.ts +0 -4
- package/dist/runtime/services/serializeStrictTransportSecurity.js +0 -8
- package/dist/runtime/services/stripHtmlTagAttribute.d.ts +0 -3
- package/dist/runtime/services/stripHtmlTagAttribute.js +0 -5
- package/dist/runtime/services/updateContentSecurityPolicy.d.ts +0 -5
- package/dist/runtime/services/updateContentSecurityPolicy.js +0 -15
- package/dist/schemas/allowedMethodsRestricterOptionsSchema.js +0 -5
- package/dist/schemas/basicAuthOptionsSchema.js +0 -12
- package/dist/schemas/contentSecurityPolicySchema.js +0 -5
- package/dist/schemas/corsHandlerOptionsSchema.js +0 -14
- package/dist/schemas/csrfOptionsSchema.js +0 -9
- package/dist/schemas/moduleOptionsSchema.js +0 -29
- package/dist/schemas/permissionsPolicySchema.js +0 -5
- package/dist/schemas/rateLimiterOptionsSchema.js +0 -8
- package/dist/schemas/requestSizeLimiterOptionsSchema.js +0 -8
- package/dist/schemas/securityHeadersSchema.js +0 -25
- package/dist/schemas/ssgOptionsSchema.js +0 -11
- package/dist/schemas/strictTransportSecurityOptionsSchema.js +0 -9
- package/dist/services/computeSubresourceIntegrityHashes.js +0 -29
- package/dist/services/formatZodIssues.js +0 -16
- package/dist/services/getDefaultModuleOptions.js +0 -41
- package/dist/services/getDefaultSecurityHeaders.js +0 -85
- package/dist/services/getPluginTemplate.js +0 -10
- package/dist/services/getRemoveLoggersViteConfig.js +0 -4
- package/dist/services/getRouteRulesTemplate.js +0 -4
- package/dist/services/getRouteSecurityRules.js +0 -17
- package/dist/services/getStaticResourceHeaders.js +0 -12
- package/dist/services/getTypeTemplate.js +0 -25
- package/dist/services/mergeModuleOptions.js +0 -39
- package/dist/services/parseModuleOptions.js +0 -10
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import { MODULE_NAME, ROUTE_RULES_HOOK } from "../runtime/constants.js";
|
|
2
|
-
//#region src/services/getTypeTemplate.ts
|
|
3
|
-
const getTypeTemplate = () => `// Generated by ${MODULE_NAME}
|
|
4
|
-
import type { ModuleOptions } from '${MODULE_NAME}'
|
|
5
|
-
|
|
6
|
-
declare module '#${MODULE_NAME}/route-rules.mjs' {
|
|
7
|
-
const routeRules: Record<string, Partial<ModuleOptions>>
|
|
8
|
-
export default routeRules
|
|
9
|
-
}
|
|
10
|
-
|
|
11
|
-
declare module '#${MODULE_NAME}/sri-hashes.mjs' {
|
|
12
|
-
const sriHashes: Record<string, string>
|
|
13
|
-
export default sriHashes
|
|
14
|
-
}
|
|
15
|
-
|
|
16
|
-
declare module 'nitro/types' {
|
|
17
|
-
interface NitroRuntimeHooks {
|
|
18
|
-
'${ROUTE_RULES_HOOK}': (routeRules: Record<string, Partial<ModuleOptions>>) => void | Promise<void>
|
|
19
|
-
}
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
export {}
|
|
23
|
-
`;
|
|
24
|
-
//#endregion
|
|
25
|
-
export { getTypeTemplate };
|
|
@@ -1,39 +0,0 @@
|
|
|
1
|
-
//#region src/services/mergeModuleOptions.ts
|
|
2
|
-
const mergeModuleOptions = (defaults, overrides) => ({
|
|
3
|
-
...defaults,
|
|
4
|
-
...overrides,
|
|
5
|
-
headers: mergeHeaders(defaults.headers, overrides.headers),
|
|
6
|
-
ssg: overrides.ssg === false ? false : {
|
|
7
|
-
...defaults.ssg,
|
|
8
|
-
...overrides.ssg
|
|
9
|
-
}
|
|
10
|
-
});
|
|
11
|
-
const mergeHeaders = (defaults, overrides) => {
|
|
12
|
-
if (overrides === false || defaults === false) return overrides ?? defaults;
|
|
13
|
-
if (overrides === void 0) return defaults;
|
|
14
|
-
return {
|
|
15
|
-
...defaults,
|
|
16
|
-
...overrides,
|
|
17
|
-
contentSecurityPolicy: mergeDirectives(defaults.contentSecurityPolicy, overrides.contentSecurityPolicy),
|
|
18
|
-
permissionsPolicy: mergeFeatures(defaults.permissionsPolicy, overrides.permissionsPolicy)
|
|
19
|
-
};
|
|
20
|
-
};
|
|
21
|
-
const mergeDirectives = (defaults, overrides) => {
|
|
22
|
-
if (overrides === false || defaults === false) return overrides ?? defaults;
|
|
23
|
-
if (overrides === void 0) return defaults;
|
|
24
|
-
const merged = { ...defaults };
|
|
25
|
-
for (const [directive, value] of Object.entries(overrides)) if (value === false) delete merged[directive];
|
|
26
|
-
else if (Array.isArray(value)) merged[directive] = [.../* @__PURE__ */ new Set([...Array.isArray(merged[directive]) ? merged[directive] : [], ...value])];
|
|
27
|
-
else merged[directive] = value;
|
|
28
|
-
return merged;
|
|
29
|
-
};
|
|
30
|
-
const mergeFeatures = (defaults, overrides) => {
|
|
31
|
-
if (overrides === false || defaults === false) return overrides ?? defaults;
|
|
32
|
-
if (overrides === void 0) return defaults;
|
|
33
|
-
const merged = { ...defaults };
|
|
34
|
-
for (const [feature, sources] of Object.entries(overrides)) if (sources === false) delete merged[feature];
|
|
35
|
-
else merged[feature] = [.../* @__PURE__ */ new Set([...merged[feature] || [], ...sources || []])];
|
|
36
|
-
return merged;
|
|
37
|
-
};
|
|
38
|
-
//#endregion
|
|
39
|
-
export { mergeModuleOptions };
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
import { moduleOptionsSchema } from "../schemas/moduleOptionsSchema.js";
|
|
2
|
-
import { formatZodIssues } from "./formatZodIssues.js";
|
|
3
|
-
//#region src/services/parseModuleOptions.ts
|
|
4
|
-
const parseModuleOptions = (options) => {
|
|
5
|
-
const result = moduleOptionsSchema.safeParse(options);
|
|
6
|
-
if (!result.success) throw new TypeError(`nuxt-security-module: ${formatZodIssues(result.error.issues)}`);
|
|
7
|
-
return result.data;
|
|
8
|
-
};
|
|
9
|
-
//#endregion
|
|
10
|
-
export { parseModuleOptions };
|