pow-middleware 0.1.0

package/README.md

@@ -0,0 +1,109 @@
+# POW Middleware
+
+A middleware for Node.js HTTP request and proof of work handling
+
+## Installation
+
+```bash
+npm install pow-middleware
+```
+
+## Usage
+
+```typescript
+import express from 'express'
+import powMiddleware from 'pow-middleware'
+
+const app = express()
+app.use(powMiddleware())
+```
+
+## Solving challenges in browser
+
+Here's a complete example showing how to handle PoW challenges with `fetch`:
+
+```typescript
+// Step 1: Initial request (will fail with 403)
+let response = await fetch(url)
+
+if (response.status === 403) {
+  const error = await response.json()
+  console.log('Request blocked:', error) // { error: 'pow-required' }
+
+  // Step 2: Extract challenge from response headers
+  const challengeHeader = response.headers.get('x-pow-challenge')
+  if (!challengeHeader) {
+    throw new Error('No challenge provided')
+  }
+
+  const challenge = JSON.parse(challengeHeader)
+  console.log('Challenge received:', challenge)
+
+  // Step 3: Solve the challenge
+  const { hash, solvedChallenge } = await solveChallenge(challenge)
+  console.log('Challenge solved! Nonce:', solvedChallenge.nonce)
+
+  // Step 4: Retry request with PoW headers
+  response = await fetch(url, {
+    headers: {
+      'x-pow': hash,
+      'x-pow-challenge': JSON.stringify(solvedChallenge),
+    },
+  })
+}
+```
+
+```typescript
+// Helper function to solve the challenge
+async function solveChallenge(challenge: any) {
+  let nonce = 0
+  let hash: string
+  while (true) {
+    challenge.nonce = nonce
+    hash = await computePoWHash(challenge)
+    if (checkLeadingZeroBits(hash, challenge.difficulty)) {
+      return { hash, solvedChallenge: challenge }
+    }
+    nonce++
+  }
+  throw new Error('Failed to solve challenge')
+}
+
+// SHA-256 hash function for browser
+async function sha256(data: string): Promise<string> {
+  const encoder = new TextEncoder()
+  const buffer = await crypto.subtle.digest('SHA-256', encoder.encode(data))
+  return Array.from(new Uint8Array(buffer))
+    .map((b) => b.toString(16).padStart(2, '0'))
+    .join('')
+}
+
+// Compute PoW hash
+async function computePoWHash(challenge: any): Promise<string> {
+  const seed = `${challenge.id}:${challenge.ts}:${challenge.difficulty}:${challenge.req}:${challenge.signature}:${challenge.nonce}`
+  return await sha256(seed)
+}
+
+// Check if hash has required leading zero bits
+function checkLeadingZeroBits(hex: string, zeroBitsCount: number): boolean {
+  // Convert hex string to bytes
+  const bytes = new Uint8Array(hex.length / 2)
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = parseInt(hex.substring(i * 2, i * 2 + 2), 16)
+  }
+
+  // Check if first zeroBitsCount bits are 0
+  for (let bitIndex = 0; bitIndex < zeroBitsCount; bitIndex++) {
+    const byteIndex = Math.floor(bitIndex / 8)
+    if (byteIndex >= bytes.length) return false
+
+    const bitPosition = bitIndex % 8
+    const mask = 1 << (7 - bitPosition)
+
+    if ((bytes[byteIndex] & mask) !== 0) {
+      return false
+    }
+  }
+  return true
+}
+```

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+import { PoWMiddleware, PoWMiddlewareOptions } from './types';
+export declare const Constants: {
+    POW_HEADER: string;
+    POW_CHALLENGE_HEADER: string;
+    DEFAULT_DIFFICULTY: number;
+    DEFAULT_TTL: number;
+    DEFAULT_TRUST_PROXY: boolean;
+    ERRORS: {
+        POW_REQUIRED: string;
+        INVALID_CHALLENGE_FORMAT: string;
+        VALIDATION_FAILED: string;
+        CHALLENGE_EXPIRED: string;
+    };
+};
+export declare const powMiddleware: (options?: PoWMiddlewareOptions) => PoWMiddleware;
+export type * from './types';
+export * from './pow';
+export default powMiddleware;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,aAAa,EACb,oBAAoB,EAErB,MAAM,SAAS,CAAA;AAEhB,eAAO,MAAM,SAAS;;;;;;;;;;;;CAYrB,CAAA;AAED,eAAO,MAAM,aAAa,GACxB,UAAU,oBAAoB,KAC7B,aAmFF,CAAA;AAGD,mBAAmB,SAAS,CAAA;AAC5B,cAAc,OAAO,CAAA;AACrB,eAAe,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,97 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.powMiddleware = exports.Constants = void 0;
+const pow_1 = require("./pow");
+exports.Constants = {
+    POW_HEADER: 'x-pow',
+    POW_CHALLENGE_HEADER: 'x-pow-challenge',
+    DEFAULT_DIFFICULTY: 4,
+    DEFAULT_TTL: 5 * 60 * 1000, // 5 minutes
+    DEFAULT_TRUST_PROXY: false,
+    ERRORS: {
+        POW_REQUIRED: 'pow-required',
+        INVALID_CHALLENGE_FORMAT: 'invalid-challenge-format',
+        VALIDATION_FAILED: 'validation-failed',
+        CHALLENGE_EXPIRED: 'challenge-expired',
+    },
+};
+const powMiddleware = (options) => {
+    let { secret } = options || {};
+    const { difficulty = exports.Constants.DEFAULT_DIFFICULTY, trustProxy = exports.Constants.DEFAULT_TRUST_PROXY, ttl = exports.Constants.DEFAULT_TTL, powHeaderName = exports.Constants.POW_HEADER, powChallengeHeaderName = exports.Constants.POW_CHALLENGE_HEADER, } = options || {};
+    if (!secret) {
+        secret = (0, pow_1.randomSha256Hex)();
+    }
+    return (req, res, next) => {
+        const powHeader = req.headers[powHeaderName];
+        const powChallengeHeader = req.headers[powChallengeHeaderName];
+        const newChallenge = (0, pow_1.generateChallenge)((0, pow_1.randomUUID)(), Date.now(), difficulty, req, ttl, secret, trustProxy);
+        if (!powHeader || !powChallengeHeader) {
+            res.statusCode = 403;
+            res.setHeader('Content-Type', 'application/json');
+            res.setHeader(powChallengeHeaderName, JSON.stringify(newChallenge));
+            return next?.(new Error(exports.Constants.ERRORS.POW_REQUIRED));
+        }
+        if (typeof powHeader !== 'string' ||
+            typeof powChallengeHeader !== 'string') {
+            res.statusCode = 403;
+            res.setHeader('Content-Type', 'application/json');
+            res.setHeader(powChallengeHeaderName, JSON.stringify(newChallenge));
+            return next?.(new Error(exports.Constants.ERRORS.INVALID_CHALLENGE_FORMAT));
+        }
+        try {
+            let pow;
+            let challenge;
+            try {
+                pow = powHeader;
+                challenge = JSON.parse(powChallengeHeader);
+            }
+            catch (parseError) {
+                res.statusCode = 403;
+                res.setHeader('Content-Type', 'application/json');
+                res.setHeader(powChallengeHeaderName, JSON.stringify(newChallenge));
+                return next?.(new Error(exports.Constants.ERRORS.INVALID_CHALLENGE_FORMAT));
+            }
+            const now = Date.now();
+            if (now > challenge.ts + challenge.ttl) {
+                res.statusCode = 403;
+                res.setHeader('Content-Type', 'application/json');
+                res.setHeader(powChallengeHeaderName, JSON.stringify(newChallenge));
+                return next?.(new Error(exports.Constants.ERRORS.CHALLENGE_EXPIRED));
+            }
+            const isValid = (0, pow_1.validatePoW)(challenge, pow, secret, req, trustProxy);
+            if (isValid) {
+                next?.();
+            }
+            else {
+                res.statusCode = 403;
+                res.setHeader('Content-Type', 'application/json');
+                res.setHeader(powChallengeHeaderName, JSON.stringify(newChallenge));
+                return next?.(new Error(exports.Constants.ERRORS.VALIDATION_FAILED));
+            }
+        }
+        catch (error) {
+            res.statusCode = 403;
+            res.setHeader('Content-Type', 'application/json');
+            res.setHeader(powChallengeHeaderName, JSON.stringify(newChallenge));
+            return next?.(new Error(exports.Constants.ERRORS.VALIDATION_FAILED));
+        }
+    };
+};
+exports.powMiddleware = powMiddleware;
+__exportStar(require("./pow"), exports);
+exports.default = exports.powMiddleware;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+BAKc;AAUD,QAAA,SAAS,GAAG;IACvB,UAAU,EAAE,OAAO;IACnB,oBAAoB,EAAE,iBAAiB;IACvC,kBAAkB,EAAE,CAAC;IACrB,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;IACxC,mBAAmB,EAAE,KAAK;IAC1B,MAAM,EAAE;QACN,YAAY,EAAE,cAAc;QAC5B,wBAAwB,EAAE,0BAA0B;QACpD,iBAAiB,EAAE,mBAAmB;QACtC,iBAAiB,EAAE,mBAAmB;KACvC;CACF,CAAA;AAEM,MAAM,aAAa,GAAG,CAC3B,OAA8B,EACf,EAAE;IACjB,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAA;IAC9B,MAAM,EACJ,UAAU,GAAG,iBAAS,CAAC,kBAAkB,EACzC,UAAU,GAAG,iBAAS,CAAC,mBAAmB,EAC1C,GAAG,GAAG,iBAAS,CAAC,WAAW,EAC3B,aAAa,GAAG,iBAAS,CAAC,UAAU,EACpC,sBAAsB,GAAG,iBAAS,CAAC,oBAAoB,GACxD,GAAG,OAAO,IAAI,EAAE,CAAA;IAEjB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,IAAA,qBAAe,GAAE,CAAA;IAC5B,CAAC;IAED,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAmB,EAAE,EAAE;QACxE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAC5C,MAAM,kBAAkB,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;QAE9D,MAAM,YAAY,GAAG,IAAA,uBAAiB,EACpC,IAAA,gBAAU,GAAE,EACZ,IAAI,CAAC,GAAG,EAAE,EACV,UAAU,EACV,GAAG,EACH,GAAG,EACH,MAAM,EACN,UAAU,CACX,CAAA;QAED,IAAI,CAAC,SAAS,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;YACjD,GAAG,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;YACnE,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;QACzD,CAAC;QAED,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,OAAO,kBAAkB,KAAK,QAAQ,EACtC,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;YACjD,GAAG,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;YACnE,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAS,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAA;QACrE,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAW,CAAA;YACf,IAAI,SAAoB,CAAA;YACxB,IAAI,CAAC;gBACH,GAAG,GAAG,SAAS,CAAA;gBACf,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;YAC5C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;gBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;gBACjD,GAAG,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;gBACnE,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAS,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IAAI,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC;gBACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;gBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;gBACjD,GAAG,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;gBACnE,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAA;YAC9D,CAAC;YAED,MAAM,OAAO,GAAG,IAAA,iBAAW,EAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;YAEpE,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,EAAE,EAAE,CAAA;YACV,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;gBACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;gBACjD,GAAG,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;gBACnE,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;YACjD,GAAG,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;YACnE,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC,CAAA;AACH,CAAC,CAAA;AArFY,QAAA,aAAa,iBAqFzB;AAID,wCAAqB;AACrB,kBAAe,qBAAa,CAAA"}

package/dist/pow.d.ts

@@ -0,0 +1,14 @@
+import { randomUUID } from 'crypto';
+import { IncomingMessage } from 'http';
+import { Challenge } from './types';
+export { randomUUID };
+export declare const randomSha256Hex: () => string;
+export declare const hashmac: (data: string, key: string) => string;
+export declare const sha256: (data: string) => string;
+export declare function checkLeadingZeroBits(hex: string, zeroBitsCount: number): boolean;
+export declare const hashRequest: (req: IncomingMessage, trustProxy: boolean) => string;
+export declare const generateSignature: (id: string, ts: number, difficulty: number, reqHash: string, ttl: number, secret: string) => string;
+export declare const generateChallenge: (id: string, ts: number, difficulty: number, req: IncomingMessage, ttl: number, secret: string, trustProxy: boolean) => Challenge;
+export declare const computePoWHash: (challenge: Challenge) => string;
+export declare const validatePoW: (challenge: Challenge, powHash: string, secret: string, req: IncomingMessage, trustProxy: boolean) => boolean;
+//# sourceMappingURL=pow.d.ts.map

package/dist/pow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pow.d.ts","sourceRoot":"","sources":["../src/pow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,MAAM,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,CAAA;AAErB,eAAO,MAAM,eAAe,QAAO,MAElC,CAAA;AAED,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,KAAG,MAEnD,CAAA;AAED,eAAO,MAAM,MAAM,GAAI,MAAM,MAAM,KAAG,MAErC,CAAA;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACpB,OAAO,CAgBT;AAED,eAAO,MAAM,WAAW,GACtB,KAAK,eAAe,EACpB,YAAY,OAAO,KAClB,MAgBF,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,MAAM,EACV,IAAI,MAAM,EACV,YAAY,MAAM,EAClB,SAAS,MAAM,EACf,KAAK,MAAM,EACX,QAAQ,MAAM,KACb,MAGF,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC5B,IAAI,MAAM,EACV,IAAI,MAAM,EACV,YAAY,MAAM,EAClB,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,QAAQ,MAAM,EACd,YAAY,OAAO,KAClB,SAYF,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,WAAW,SAAS,KAAG,MAGrD,CAAA;AAED,eAAO,MAAM,WAAW,GACtB,WAAW,SAAS,EACpB,SAAS,MAAM,EACf,QAAQ,MAAM,EACd,KAAK,eAAe,EACpB,YAAY,OAAO,KAClB,OAqCF,CAAA"}

package/dist/pow.js

@@ -0,0 +1,105 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePoW = exports.computePoWHash = exports.generateChallenge = exports.generateSignature = exports.hashRequest = exports.sha256 = exports.hashmac = exports.randomSha256Hex = exports.randomUUID = void 0;
+exports.checkLeadingZeroBits = checkLeadingZeroBits;
+const crypto_1 = __importDefault(require("crypto"));
+const crypto_2 = require("crypto");
+Object.defineProperty(exports, "randomUUID", { enumerable: true, get: function () { return crypto_2.randomUUID; } });
+const randomSha256Hex = () => {
+    return crypto_1.default.randomBytes(32).toString('hex');
+};
+exports.randomSha256Hex = randomSha256Hex;
+const hashmac = (data, key) => {
+    return crypto_1.default.createHmac('sha256', key).update(data).digest('hex');
+};
+exports.hashmac = hashmac;
+const sha256 = (data) => {
+    return crypto_1.default.createHash('sha256').update(data).digest('hex');
+};
+exports.sha256 = sha256;
+function checkLeadingZeroBits(hex, zeroBitsCount) {
+    const buf = Buffer.from(hex, 'hex');
+    // Check if first zeroBitsCount bits are 0
+    for (let bitIndex = 0; bitIndex < zeroBitsCount; bitIndex++) {
+        const byteIndex = Math.floor(bitIndex / 8);
+        if (byteIndex >= buf.length)
+            return false;
+        const bitPosition = bitIndex % 8;
+        const mask = 1 << (7 - bitPosition);
+        if ((buf[byteIndex] & mask) !== 0) {
+            return false;
+        }
+    }
+    return true;
+}
+const hashRequest = (req, trustProxy) => {
+    const method = req.method || 'GET';
+    const url = req.url || '/';
+    // Get the client IP address
+    let ip = '';
+    if (trustProxy && req.headers['x-forwarded-for']) {
+        const forwardedFor = req.headers['x-forwarded-for'];
+        ip = Array.isArray(forwardedFor)
+            ? forwardedFor[0]
+            : forwardedFor.split(',')[0].trim();
+    }
+    else {
+        ip = req.socket.remoteAddress || '';
+    }
+    return (0, exports.sha256)(`${ip}:${method}:${url}`);
+};
+exports.hashRequest = hashRequest;
+const generateSignature = (id, ts, difficulty, reqHash, ttl, secret) => {
+    const signatureData = `${id}:${ts}:${difficulty}:${reqHash}:${ttl}`;
+    return (0, exports.hashmac)(signatureData, secret);
+};
+exports.generateSignature = generateSignature;
+const generateChallenge = (id, ts, difficulty, req, ttl, secret, trustProxy) => {
+    const reqHash = (0, exports.hashRequest)(req, trustProxy);
+    const signature = (0, exports.generateSignature)(id, ts, difficulty, reqHash, ttl, secret);
+    return {
+        id,
+        difficulty,
+        req: reqHash,
+        ts,
+        ttl,
+        signature,
+        nonce: null,
+    };
+};
+exports.generateChallenge = generateChallenge;
+const computePoWHash = (challenge) => {
+    const seed = `${challenge.id}:${challenge.ts}:${challenge.difficulty}:${challenge.req}:${challenge.signature}:${challenge.nonce}`;
+    return (0, exports.sha256)(seed);
+};
+exports.computePoWHash = computePoWHash;
+const validatePoW = (challenge, powHash, secret, req, trustProxy) => {
+    if (challenge.nonce === null || challenge.nonce === undefined) {
+        return false;
+    }
+    const expectedReqHash = (0, exports.hashRequest)(req, trustProxy);
+    if (challenge.req !== expectedReqHash) {
+        return false;
+    }
+    const expectedSignature = (0, exports.generateSignature)(challenge.id, challenge.ts, challenge.difficulty, challenge.req, challenge.ttl, secret);
+    if (challenge.signature !== expectedSignature) {
+        return false;
+    }
+    const now = Date.now();
+    if (Math.abs(now - challenge.ts) >= challenge.ttl) {
+        return false;
+    }
+    const expectedHash = (0, exports.computePoWHash)(challenge);
+    if (powHash !== expectedHash) {
+        return false;
+    }
+    if (!checkLeadingZeroBits(powHash, challenge.difficulty)) {
+        return false;
+    }
+    return true;
+};
+exports.validatePoW = validatePoW;
+//# sourceMappingURL=pow.js.map

package/dist/pow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pow.js","sourceRoot":"","sources":["../src/pow.ts"],"names":[],"mappings":";;;;;;AAmBA,oDAmBC;AAtCD,oDAA2B;AAC3B,mCAAmC;AAI1B,2FAJA,mBAAU,OAIA;AAEZ,MAAM,eAAe,GAAG,GAAW,EAAE;IAC1C,OAAO,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC/C,CAAC,CAAA;AAFY,QAAA,eAAe,mBAE3B;AAEM,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE;IAC3D,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpE,CAAC,CAAA;AAFY,QAAA,OAAO,WAEnB;AAEM,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;IAC7C,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC,CAAA;AAFY,QAAA,MAAM,UAElB;AAED,SAAgB,oBAAoB,CAClC,GAAW,EACX,aAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAEnC,0CAA0C;IAC1C,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;QAC1C,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzC,MAAM,WAAW,GAAG,QAAQ,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,CAAA;QAEnC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAEM,MAAM,WAAW,GAAG,CACzB,GAAoB,EACpB,UAAmB,EACX,EAAE;IACV,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAA;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA;IAE1B,4BAA4B;IAC5B,IAAI,EAAE,GAAG,EAAE,CAAA;IACX,IAAI,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACnD,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAC9B,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACjB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,OAAO,IAAA,cAAM,EAAC,GAAG,EAAE,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;AACzC,CAAC,CAAA;AAnBY,QAAA,WAAW,eAmBvB;AAEM,MAAM,iBAAiB,GAAG,CAC/B,EAAU,EACV,EAAU,EACV,UAAkB,EAClB,OAAe,EACf,GAAW,EACX,MAAc,EACN,EAAE;IACV,MAAM,aAAa,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,UAAU,IAAI,OAAO,IAAI,GAAG,EAAE,CAAA;IACnE,OAAO,IAAA,eAAO,EAAC,aAAa,EAAE,MAAM,CAAC,CAAA;AACvC,CAAC,CAAA;AAVY,QAAA,iBAAiB,qBAU7B;AAEM,MAAM,iBAAiB,GAAG,CAC/B,EAAU,EACV,EAAU,EACV,UAAkB,EAClB,GAAoB,EACpB,GAAW,EACX,MAAc,EACd,UAAmB,EACR,EAAE;IACb,MAAM,OAAO,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,IAAA,yBAAiB,EAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAC7E,OAAO;QACL,EAAE;QACF,UAAU;QACV,GAAG,EAAE,OAAO;QACZ,EAAE;QACF,GAAG;QACH,SAAS;QACT,KAAK,EAAE,IAAI;KACZ,CAAA;AACH,CAAC,CAAA;AApBY,QAAA,iBAAiB,qBAoB7B;AAEM,MAAM,cAAc,GAAG,CAAC,SAAoB,EAAU,EAAE;IAC7D,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,EAAE,CAAA;IACjI,OAAO,IAAA,cAAM,EAAC,IAAI,CAAC,CAAA;AACrB,CAAC,CAAA;AAHY,QAAA,cAAc,kBAG1B;AAEM,MAAM,WAAW,GAAG,CACzB,SAAoB,EACpB,OAAe,EACf,MAAc,EACd,GAAoB,EACpB,UAAmB,EACV,EAAE;IACX,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACpD,IAAI,SAAS,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAA,yBAAiB,EACzC,SAAS,CAAC,EAAE,EACZ,SAAS,CAAC,EAAE,EACZ,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,GAAG,EACb,SAAS,CAAC,GAAG,EACb,MAAM,CACP,CAAA;IACD,IAAI,SAAS,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,sBAAc,EAAC,SAAS,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AA3CY,QAAA,WAAW,eA2CvB"}

package/dist/types.d.ts

@@ -0,0 +1,24 @@
+import { IncomingMessage, ServerResponse } from 'http';
+export interface PoWMiddlewareOptions {
+    secret: string;
+    difficulty?: number;
+    ttl?: number;
+    trustProxy?: boolean;
+    powHeaderName?: string;
+    powChallengeHeaderName?: string;
+}
+export type NextFunction = (err?: any) => void;
+export interface PoWMiddleware {
+    (req: IncomingMessage, res: ServerResponse, next?: NextFunction): void;
+}
+export interface Challenge {
+    id: string;
+    difficulty: number;
+    req: string;
+    ts: number;
+    ttl: number;
+    signature: string;
+    nonce?: number | null;
+}
+export { IncomingMessage, ServerResponse };
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAA;AAEtD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,IAAI,CAAA;AAC9C,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;CACvE;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAA"}

package/dist/types.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerResponse = exports.IncomingMessage = void 0;
+const http_1 = require("http");
+Object.defineProperty(exports, "IncomingMessage", { enumerable: true, get: function () { return http_1.IncomingMessage; } });
+Object.defineProperty(exports, "ServerResponse", { enumerable: true, get: function () { return http_1.ServerResponse; } });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;AAAA,+BAAsD;AA0B7C,gGA1BA,sBAAe,OA0BA;AAAE,+FA1BA,qBAAc,OA0BA"}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "pow-middleware",
+  "version": "0.1.0",
+  "description": "A middleware for Node.js HTTP request and proof of work handling",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "test": "jest",
+    "test:coverage": "jest --coverage"
+  },
+  "keywords": [
+    "middleware",
+    "http",
+    "nodejs"
+  ],
+  "author": "",
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Dexon95/pow-middleware.git"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.6",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^20.11.0",
+    "@types/supertest": "^6.0.3",
+    "express": "^5.2.1",
+    "jest": "^30.2.0",
+    "supertest": "^7.2.2",
+    "ts-jest": "^29.4.6",
+    "typescript": "^5.3.3"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=14.0.0"
+  }
+}