shogun-core 1.3.2 → 1.3.4

package/dist/gundb/gunInstance.js

@@ -925,6 +925,8 @@ class GunInstance {
                 sessionStorage.removeItem("gun/");
                 sessionStorage.removeItem("gun/user");
                 sessionStorage.removeItem("gun/auth");
+                sessionStorage.removeItem("gun/pair");
+                sessionStorage.removeItem("gun/session");
                 (0, logger_1.log)("Session storage cleared");
             }
             (0, logger_1.log)("Logout completed successfully");
@@ -1024,10 +1026,25 @@ class GunInstance {
                 (0, logger_1.logError)("Error encrypting hint:", encryptError);
                 return { success: false, error: "Failed to encrypt password hint" };
             }
-            // Save security questions and encrypted hint
-            await this.saveUserData("security", {
+            // Save to the public graph, readable by anyone but only decryptable with the right answers.
+            const userPub = currentUser.pub;
+            const securityPayload = {
                 questions: JSON.stringify(securityQuestions),
                 hint: encryptedHint,
+            };
+            await new Promise((resolve, reject) => {
+                this.gun.get(userPub)
+                    .get("security")
+                    .put(securityPayload, (ack) => {
+                    if (ack.err) {
+                        (0, logger_1.logError)("Error saving security data to public graph:", ack.err);
+                        reject(new Error(ack.err));
+                    }
+                    else {
+                        (0, logger_1.log)(`Security data saved to public graph for ${userPub}`);
+                        resolve();
+                    }
+                });
             });
             return { success: true };
         }
@@ -1045,16 +1062,19 @@ class GunInstance {
     async forgotPassword(username, securityAnswers) {
         (0, logger_1.log)("Attempting password recovery for:", username);
         try {
-            // Find the user's public key
-            const userPub = await this.checkUsernameExists(username);
-            if (!userPub) {
+            // Find the user's data
+            const userData = await this.checkUsernameExists(username);
+            if (!userData || !userData.pub) {
                 return { success: false, error: "User not found" };
             }
-            // Access the user's data using their public key
-            const user = this.gun.user(userPub);
-            // Retrieve security questions and encrypted hint from the user's graph
+            // Extract the public key from user data
+            const userPub = userData.pub;
+            (0, logger_1.log)(`Found user public key for password recovery: ${userPub}`);
+            // Access the user's security data directly from their public key node
+            // Security data is stored in the user's private space, so we need to access it via their public key
             const securityData = await new Promise((resolve) => {
-                user.get("security").once((data) => {
+                this.gun.get(userPub).get("security").once((data) => {
+                    (0, logger_1.log)(`Retrieved security data for user ${username}:`, data ? "found" : "not found");
                     resolve(data);
                 });
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shogun-core",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "SHOGUN SDK - Core library for Shogun SDK",
   "main": "./dist/index.js",
   "module": "./dist/index.js",