signal-bridge 1.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.mts +28 -0
- package/dist/index.d.ts +28 -0
- package/dist/index.global.js +6784 -0
- package/dist/index.global.js.map +1 -0
- package/dist/index.js +174 -0
- package/dist/index.js.map +1 -0
- package/dist/index.mjs +132 -0
- package/dist/index.mjs.map +1 -0
- package/package.json +26 -0
- package/readme.md +1 -0
package/dist/index.js
ADDED
|
@@ -0,0 +1,174 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __create = Object.create;
|
|
3
|
+
var __defProp = Object.defineProperty;
|
|
4
|
+
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
5
|
+
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
6
|
+
var __getProtoOf = Object.getPrototypeOf;
|
|
7
|
+
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
8
|
+
var __export = (target, all) => {
|
|
9
|
+
for (var name in all)
|
|
10
|
+
__defProp(target, name, { get: all[name], enumerable: true });
|
|
11
|
+
};
|
|
12
|
+
var __copyProps = (to, from, except, desc) => {
|
|
13
|
+
if (from && typeof from === "object" || typeof from === "function") {
|
|
14
|
+
for (let key of __getOwnPropNames(from))
|
|
15
|
+
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
16
|
+
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
17
|
+
}
|
|
18
|
+
return to;
|
|
19
|
+
};
|
|
20
|
+
var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
|
|
21
|
+
// If the importer is in node compatibility mode or this is not an ESM
|
|
22
|
+
// file that has been converted to a CommonJS file using a Babel-
|
|
23
|
+
// compatible transform (i.e. "__esModule" has not been set), then set
|
|
24
|
+
// "default" to the CommonJS "module.exports" for node compatibility.
|
|
25
|
+
isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
|
|
26
|
+
mod
|
|
27
|
+
));
|
|
28
|
+
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
29
|
+
|
|
30
|
+
// src/index.ts
|
|
31
|
+
var index_exports = {};
|
|
32
|
+
__export(index_exports, {
|
|
33
|
+
base64UrlDecode: () => base64UrlDecode,
|
|
34
|
+
base64UrlEncode: () => base64UrlEncode,
|
|
35
|
+
decrypt: () => decrypt,
|
|
36
|
+
encrypt: () => encrypt,
|
|
37
|
+
generateKey: () => generateKey,
|
|
38
|
+
signalBridge: () => signalBridge
|
|
39
|
+
});
|
|
40
|
+
module.exports = __toCommonJS(index_exports);
|
|
41
|
+
|
|
42
|
+
// src/crypto.ts
|
|
43
|
+
var import_crypto_js = __toESM(require("crypto-js"));
|
|
44
|
+
function base64UrlEncode(str) {
|
|
45
|
+
return str.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
|
|
46
|
+
}
|
|
47
|
+
function base64UrlDecode(str) {
|
|
48
|
+
str = str.replace(/-/g, "+").replace(/_/g, "/");
|
|
49
|
+
while (str.length % 4) str += "=";
|
|
50
|
+
return str;
|
|
51
|
+
}
|
|
52
|
+
function encrypt(data, secretKey) {
|
|
53
|
+
const text = typeof data === "string" ? data : JSON.stringify(data);
|
|
54
|
+
const encrypted = import_crypto_js.default.AES.encrypt(text, secretKey).toString();
|
|
55
|
+
return base64UrlEncode(encrypted);
|
|
56
|
+
}
|
|
57
|
+
function decrypt(encoded, secretKey) {
|
|
58
|
+
try {
|
|
59
|
+
const b64 = base64UrlDecode(encoded);
|
|
60
|
+
const bytes = import_crypto_js.default.AES.decrypt(b64, secretKey);
|
|
61
|
+
const dec = bytes.toString(import_crypto_js.default.enc.Utf8);
|
|
62
|
+
try {
|
|
63
|
+
return JSON.parse(dec);
|
|
64
|
+
} catch (e) {
|
|
65
|
+
return dec;
|
|
66
|
+
}
|
|
67
|
+
} catch (e) {
|
|
68
|
+
return "";
|
|
69
|
+
}
|
|
70
|
+
}
|
|
71
|
+
function generateKey(length = 12) {
|
|
72
|
+
const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
|
|
73
|
+
let out = "";
|
|
74
|
+
for (let i = 0; i < length; i++) {
|
|
75
|
+
out += chars.charAt(Math.floor(Math.random() * chars.length));
|
|
76
|
+
}
|
|
77
|
+
return out;
|
|
78
|
+
}
|
|
79
|
+
|
|
80
|
+
// src/index.ts
|
|
81
|
+
var isInitialized = false;
|
|
82
|
+
function signalBridge(appId, options) {
|
|
83
|
+
const { allowedHostOrigins, cryptoKey, debug } = options;
|
|
84
|
+
const isRemote = window.parent && window.parent !== window;
|
|
85
|
+
if (!isRemote) {
|
|
86
|
+
throw new Error("Signal bridge hanya boleh dijalankan di iframe (remote).");
|
|
87
|
+
}
|
|
88
|
+
const listeners = [];
|
|
89
|
+
const log = (...args) => {
|
|
90
|
+
if (debug) console.log("[\u{1F6F0}\uFE0FDEBUG-SIGNAL-BRIDGE]", ...args);
|
|
91
|
+
};
|
|
92
|
+
log("Initialized (REMOTE)");
|
|
93
|
+
const messageHandler = (event) => {
|
|
94
|
+
const data = event.data;
|
|
95
|
+
const origin = event.origin;
|
|
96
|
+
if (!data || typeof data !== "object" || !data.type) return;
|
|
97
|
+
if (!allowedHostOrigins.includes(origin)) return;
|
|
98
|
+
if (data.__source === "remote") return;
|
|
99
|
+
let payload = data.payload;
|
|
100
|
+
if (cryptoKey && typeof payload === "string" && payload) {
|
|
101
|
+
payload = decrypt(payload, cryptoKey);
|
|
102
|
+
}
|
|
103
|
+
const remoteMessage = {
|
|
104
|
+
type: data.type,
|
|
105
|
+
payload,
|
|
106
|
+
txn: data.txn,
|
|
107
|
+
__source: "host",
|
|
108
|
+
__origin: origin
|
|
109
|
+
};
|
|
110
|
+
listeners.forEach((fn) => fn(remoteMessage));
|
|
111
|
+
};
|
|
112
|
+
window.addEventListener("message", messageHandler);
|
|
113
|
+
function emitToHost(type, payload) {
|
|
114
|
+
let finalPayload = payload;
|
|
115
|
+
if (cryptoKey) {
|
|
116
|
+
finalPayload = encrypt(payload, cryptoKey);
|
|
117
|
+
}
|
|
118
|
+
const message = {
|
|
119
|
+
app_id: appId,
|
|
120
|
+
type,
|
|
121
|
+
payload: finalPayload,
|
|
122
|
+
txn: generateKey(),
|
|
123
|
+
__origin: window.location.origin,
|
|
124
|
+
__source: "remote"
|
|
125
|
+
};
|
|
126
|
+
if (window.parent && window.parent !== window) {
|
|
127
|
+
allowedHostOrigins.forEach((origin) => {
|
|
128
|
+
window.parent.postMessage(message, origin);
|
|
129
|
+
});
|
|
130
|
+
}
|
|
131
|
+
}
|
|
132
|
+
function emitReadyOnce() {
|
|
133
|
+
if (isInitialized) return;
|
|
134
|
+
isInitialized = true;
|
|
135
|
+
log("READY emitted");
|
|
136
|
+
emitToHost("ready", {
|
|
137
|
+
ok: true,
|
|
138
|
+
app_id: appId,
|
|
139
|
+
timestamp: Date.now()
|
|
140
|
+
});
|
|
141
|
+
}
|
|
142
|
+
return {
|
|
143
|
+
init() {
|
|
144
|
+
emitReadyOnce();
|
|
145
|
+
},
|
|
146
|
+
listen(handler) {
|
|
147
|
+
listeners.push(handler);
|
|
148
|
+
},
|
|
149
|
+
emit(type, payload) {
|
|
150
|
+
emitToHost(type, payload);
|
|
151
|
+
},
|
|
152
|
+
destroy() {
|
|
153
|
+
window.removeEventListener("message", messageHandler);
|
|
154
|
+
}
|
|
155
|
+
};
|
|
156
|
+
}
|
|
157
|
+
if (typeof window !== "undefined") {
|
|
158
|
+
window.SignalBridge = {
|
|
159
|
+
signalBridge,
|
|
160
|
+
encrypt,
|
|
161
|
+
decrypt,
|
|
162
|
+
generateKey
|
|
163
|
+
};
|
|
164
|
+
}
|
|
165
|
+
// Annotate the CommonJS export names for ESM import in node:
|
|
166
|
+
0 && (module.exports = {
|
|
167
|
+
base64UrlDecode,
|
|
168
|
+
base64UrlEncode,
|
|
169
|
+
decrypt,
|
|
170
|
+
encrypt,
|
|
171
|
+
generateKey,
|
|
172
|
+
signalBridge
|
|
173
|
+
});
|
|
174
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/index.ts","../src/crypto.ts"],"sourcesContent":["import { decrypt, encrypt, generateKey } from \"./crypto\";\r\n\r\ntype BridgeMessage = {\r\n type: string;\r\n payload: any;\r\n txn: string;\r\n __source: \"host\" | \"remote\";\r\n __origin?: string;\r\n};\r\n\r\ntype Listener = (message: BridgeMessage) => void;\r\n\r\ninterface BridgeOptions {\r\n allowedHostOrigins: string[];\r\n cryptoKey?: string;\r\n debug?: boolean;\r\n enableNavigationSync?: boolean; // 👈 NEW\r\n}\r\n\r\nlet isInitialized = false;\r\n\r\nexport function signalBridge(\r\n appId: string,\r\n options: BridgeOptions\r\n) {\r\n const { allowedHostOrigins, cryptoKey, debug } = options;\r\n\r\n const isRemote = window.parent && window.parent !== window;\r\n\r\n if (!isRemote) {\r\n throw new Error(\"Signal bridge hanya boleh dijalankan di iframe (remote).\");\r\n }\r\n\r\n const listeners: Listener[] = [];\r\n\r\n const log = (...args: any[]) => {\r\n if (debug) console.log(\"[🛰️DEBUG-SIGNAL-BRIDGE]\", ...args);\r\n };\r\n\r\n log(\"Initialized (REMOTE)\");\r\n\r\n // =====================================================\r\n // RECEIVE MESSAGE FROM HOST\r\n // =====================================================\r\n const messageHandler = (event: MessageEvent) => {\r\n const data = event.data;\r\n const origin = event.origin;\r\n\r\n if (!data || typeof data !== \"object\" || !data.type) return;\r\n if (!allowedHostOrigins.includes(origin)) return;\r\n if (data.__source === \"remote\") return; // anti loop\r\n\r\n let payload = data.payload;\r\n\r\n if (cryptoKey && typeof payload === \"string\" && payload) {\r\n payload = decrypt(payload, cryptoKey);\r\n }\r\n\r\n const remoteMessage: BridgeMessage = {\r\n type: data.type,\r\n payload,\r\n txn: data.txn,\r\n __source: \"host\",\r\n __origin: origin,\r\n };\r\n\r\n listeners.forEach((fn) => fn(remoteMessage));\r\n };\r\n\r\n window.addEventListener(\"message\", messageHandler);\r\n\r\n // =====================================================\r\n // SEND MESSAGE TO HOST\r\n // =====================================================\r\n function emitToHost(type: string, payload: any) {\r\n let finalPayload = payload;\r\n\r\n if (cryptoKey) {\r\n finalPayload = encrypt(payload, cryptoKey);\r\n }\r\n\r\n const message = {\r\n app_id: appId,\r\n type,\r\n payload: finalPayload,\r\n txn: generateKey(),\r\n __origin: window.location.origin,\r\n __source: \"remote\",\r\n };\r\n\r\n if (window.parent && window.parent !== window) {\r\n allowedHostOrigins.forEach((origin) => {\r\n window.parent!.postMessage(message, origin);\r\n });\r\n }\r\n }\r\n\r\n // =====================================================\r\n // NAVIGATION SYNC (SPA SAFE)\r\n // =====================================================\r\n\r\n\r\n // initial sync\r\n function emitReadyOnce() {\r\n if (isInitialized) return;\r\n\r\n isInitialized = true;\r\n log(\"READY emitted\");\r\n\r\n emitToHost(\"ready\", {\r\n ok: true,\r\n app_id: appId,\r\n timestamp: Date.now()\r\n });\r\n }\r\n\r\n // let originalPushState = history.pushState;\r\n // let originalReplaceState = history.replaceState;\r\n\r\n // let navigationEnabled = false;\r\n\r\n\r\n\r\n // function setupNavigationSync() {\r\n // if (!options.enableNavigationSync) return;\r\n\r\n // navigationEnabled = true;\r\n\r\n // const emitCurrentPath = () => {\r\n // let path = location.hash.startsWith(\"#/\")\r\n // ? location.hash.slice(1)\r\n // : location.pathname;\r\n\r\n // path = path.split(\"?\")[0].split(\"#\")[0];\r\n // if (!path.startsWith(\"/\")) path = \"/\" + path;\r\n\r\n // log(\"NAVIGATE\", path);\r\n\r\n // emitToHost(\"navigate\", { path });\r\n // };\r\n\r\n // history.pushState = function (...args) {\r\n // originalPushState.apply(history, args as any);\r\n // emitCurrentPath();\r\n // };\r\n\r\n // history.replaceState = function (...args) {\r\n // originalReplaceState.apply(history, args as any);\r\n // emitCurrentPath();\r\n // };\r\n\r\n // window.addEventListener(\"popstate\", emitCurrentPath);\r\n // window.addEventListener(\"hashchange\", emitCurrentPath);\r\n\r\n // // fallback SPA\r\n // function waitForSPAPath(maxAttempts = 20, interval = 50) {\r\n // let attempts = 0;\r\n\r\n // const checkPath = () => {\r\n // const path = location.hash.startsWith(\"#/\")\r\n // ? location.hash.slice(1)\r\n // : location.pathname;\r\n\r\n // if (path !== \"/\" || attempts >= maxAttempts) {\r\n // emitToHost(\"navigate\", { path });\r\n // } else {\r\n // attempts++;\r\n // setTimeout(checkPath, interval);\r\n // }\r\n // };\r\n\r\n // checkPath();\r\n // }\r\n\r\n // window.addEventListener(\"load\", () => {\r\n // waitForSPAPath();\r\n // });\r\n // }\r\n\r\n\r\n\r\n // =====================================================\r\n // PUBLIC API\r\n // =====================================================\r\n return {\r\n\r\n init() {\r\n emitReadyOnce();\r\n },\r\n\r\n listen(handler: Listener) {\r\n listeners.push(handler);\r\n },\r\n\r\n emit(type: string, payload: any) {\r\n emitToHost(type, payload);\r\n },\r\n\r\n destroy() {\r\n window.removeEventListener(\"message\", messageHandler);\r\n },\r\n };\r\n}\r\n\r\nexport * from \"./crypto\";\r\n\r\n// 👇 UMD / browser global support\r\nif (typeof window !== \"undefined\") {\r\n (window as any).SignalBridge = {\r\n signalBridge,\r\n encrypt,\r\n decrypt,\r\n generateKey\r\n };\r\n}","import CryptoJS from \"crypto-js\";\r\n\r\n// =====================================================\r\n// BASE64 URL\r\n// =====================================================\r\nexport function base64UrlEncode(str: string): string {\r\n return str.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\r\n}\r\n\r\nexport function base64UrlDecode(str: string): string {\r\n str = str.replace(/-/g, \"+\").replace(/_/g, \"/\");\r\n while (str.length % 4) str += \"=\";\r\n return str;\r\n}\r\n\r\n// =====================================================\r\n// CRYPTO\r\n// =====================================================\r\nexport function encrypt(data: any, secretKey: string): string {\r\n const text = typeof data === \"string\" ? data : JSON.stringify(data);\r\n const encrypted = CryptoJS.AES.encrypt(text, secretKey).toString();\r\n return base64UrlEncode(encrypted);\r\n}\r\n\r\nexport function decrypt(encoded: string, secretKey: string): any {\r\n try {\r\n const b64 = base64UrlDecode(encoded);\r\n const bytes = CryptoJS.AES.decrypt(b64, secretKey);\r\n const dec = bytes.toString(CryptoJS.enc.Utf8);\r\n\r\n try {\r\n return JSON.parse(dec);\r\n } catch {\r\n return dec;\r\n }\r\n } catch {\r\n return \"\";\r\n }\r\n}\r\n\r\nexport function generateKey(length = 12): string {\r\n const chars = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\r\n let out = \"\";\r\n\r\n for (let i = 0; i < length; i++) {\r\n out += chars.charAt(Math.floor(Math.random() * chars.length));\r\n }\r\n\r\n return out;\r\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,uBAAqB;AAKd,SAAS,gBAAgB,KAAqB;AACjD,SAAO,IAAI,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACxE;AAEO,SAAS,gBAAgB,KAAqB;AACjD,QAAM,IAAI,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC9C,SAAO,IAAI,SAAS,EAAG,QAAO;AAC9B,SAAO;AACX;AAKO,SAAS,QAAQ,MAAW,WAA2B;AAC1D,QAAM,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,IAAI;AAClE,QAAM,YAAY,iBAAAA,QAAS,IAAI,QAAQ,MAAM,SAAS,EAAE,SAAS;AACjE,SAAO,gBAAgB,SAAS;AACpC;AAEO,SAAS,QAAQ,SAAiB,WAAwB;AAC7D,MAAI;AACA,UAAM,MAAM,gBAAgB,OAAO;AACnC,UAAM,QAAQ,iBAAAA,QAAS,IAAI,QAAQ,KAAK,SAAS;AACjD,UAAM,MAAM,MAAM,SAAS,iBAAAA,QAAS,IAAI,IAAI;AAE5C,QAAI;AACA,aAAO,KAAK,MAAM,GAAG;AAAA,IACzB,SAAQ;AACJ,aAAO;AAAA,IACX;AAAA,EACJ,SAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAEO,SAAS,YAAY,SAAS,IAAY;AAC7C,QAAM,QAAQ;AACd,MAAI,MAAM;AAEV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC7B,WAAO,MAAM,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,MAAM,MAAM,CAAC;AAAA,EAChE;AAEA,SAAO;AACX;;;AD9BA,IAAI,gBAAgB;AAEb,SAAS,aACd,OACA,SACA;AACA,QAAM,EAAE,oBAAoB,WAAW,MAAM,IAAI;AAEjD,QAAM,WAAW,OAAO,UAAU,OAAO,WAAW;AAEpD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAEA,QAAM,YAAwB,CAAC;AAE/B,QAAM,MAAM,IAAI,SAAgB;AAC9B,QAAI,MAAO,SAAQ,IAAI,wCAA4B,GAAG,IAAI;AAAA,EAC5D;AAEA,MAAI,sBAAsB;AAK1B,QAAM,iBAAiB,CAAC,UAAwB;AAC9C,UAAM,OAAO,MAAM;AACnB,UAAM,SAAS,MAAM;AAErB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,KAAK,KAAM;AACrD,QAAI,CAAC,mBAAmB,SAAS,MAAM,EAAG;AAC1C,QAAI,KAAK,aAAa,SAAU;AAEhC,QAAI,UAAU,KAAK;AAEnB,QAAI,aAAa,OAAO,YAAY,YAAY,SAAS;AACvD,gBAAU,QAAQ,SAAS,SAAS;AAAA,IACtC;AAEA,UAAM,gBAA+B;AAAA,MACnC,MAAM,KAAK;AAAA,MACX;AAAA,MACA,KAAK,KAAK;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAEA,cAAU,QAAQ,CAAC,OAAO,GAAG,aAAa,CAAC;AAAA,EAC7C;AAEA,SAAO,iBAAiB,WAAW,cAAc;AAKjD,WAAS,WAAW,MAAc,SAAc;AAC9C,QAAI,eAAe;AAEnB,QAAI,WAAW;AACb,qBAAe,QAAQ,SAAS,SAAS;AAAA,IAC3C;AAEA,UAAM,UAAU;AAAA,MACd,QAAQ;AAAA,MACR;AAAA,MACA,SAAS;AAAA,MACT,KAAK,YAAY;AAAA,MACjB,UAAU,OAAO,SAAS;AAAA,MAC1B,UAAU;AAAA,IACZ;AAEA,QAAI,OAAO,UAAU,OAAO,WAAW,QAAQ;AAC7C,yBAAmB,QAAQ,CAAC,WAAW;AACrC,eAAO,OAAQ,YAAY,SAAS,MAAM;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AAQA,WAAS,gBAAgB;AACvB,QAAI,cAAe;AAEnB,oBAAgB;AAChB,QAAI,eAAe;AAEnB,eAAW,SAAS;AAAA,MAClB,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,WAAW,KAAK,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAsEA,SAAO;AAAA,IAEL,OAAO;AACL,oBAAc;AAAA,IAChB;AAAA,IAEA,OAAO,SAAmB;AACxB,gBAAU,KAAK,OAAO;AAAA,IACxB;AAAA,IAEA,KAAK,MAAc,SAAc;AAC/B,iBAAW,MAAM,OAAO;AAAA,IAC1B;AAAA,IAEA,UAAU;AACR,aAAO,oBAAoB,WAAW,cAAc;AAAA,IACtD;AAAA,EACF;AACF;AAKA,IAAI,OAAO,WAAW,aAAa;AACjC,EAAC,OAAe,eAAe;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["CryptoJS"]}
|
package/dist/index.mjs
ADDED
|
@@ -0,0 +1,132 @@
|
|
|
1
|
+
// src/crypto.ts
|
|
2
|
+
import CryptoJS from "crypto-js";
|
|
3
|
+
function base64UrlEncode(str) {
|
|
4
|
+
return str.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
|
|
5
|
+
}
|
|
6
|
+
function base64UrlDecode(str) {
|
|
7
|
+
str = str.replace(/-/g, "+").replace(/_/g, "/");
|
|
8
|
+
while (str.length % 4) str += "=";
|
|
9
|
+
return str;
|
|
10
|
+
}
|
|
11
|
+
function encrypt(data, secretKey) {
|
|
12
|
+
const text = typeof data === "string" ? data : JSON.stringify(data);
|
|
13
|
+
const encrypted = CryptoJS.AES.encrypt(text, secretKey).toString();
|
|
14
|
+
return base64UrlEncode(encrypted);
|
|
15
|
+
}
|
|
16
|
+
function decrypt(encoded, secretKey) {
|
|
17
|
+
try {
|
|
18
|
+
const b64 = base64UrlDecode(encoded);
|
|
19
|
+
const bytes = CryptoJS.AES.decrypt(b64, secretKey);
|
|
20
|
+
const dec = bytes.toString(CryptoJS.enc.Utf8);
|
|
21
|
+
try {
|
|
22
|
+
return JSON.parse(dec);
|
|
23
|
+
} catch (e) {
|
|
24
|
+
return dec;
|
|
25
|
+
}
|
|
26
|
+
} catch (e) {
|
|
27
|
+
return "";
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
function generateKey(length = 12) {
|
|
31
|
+
const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
|
|
32
|
+
let out = "";
|
|
33
|
+
for (let i = 0; i < length; i++) {
|
|
34
|
+
out += chars.charAt(Math.floor(Math.random() * chars.length));
|
|
35
|
+
}
|
|
36
|
+
return out;
|
|
37
|
+
}
|
|
38
|
+
|
|
39
|
+
// src/index.ts
|
|
40
|
+
var isInitialized = false;
|
|
41
|
+
function signalBridge(appId, options) {
|
|
42
|
+
const { allowedHostOrigins, cryptoKey, debug } = options;
|
|
43
|
+
const isRemote = window.parent && window.parent !== window;
|
|
44
|
+
if (!isRemote) {
|
|
45
|
+
throw new Error("Signal bridge hanya boleh dijalankan di iframe (remote).");
|
|
46
|
+
}
|
|
47
|
+
const listeners = [];
|
|
48
|
+
const log = (...args) => {
|
|
49
|
+
if (debug) console.log("[\u{1F6F0}\uFE0FDEBUG-SIGNAL-BRIDGE]", ...args);
|
|
50
|
+
};
|
|
51
|
+
log("Initialized (REMOTE)");
|
|
52
|
+
const messageHandler = (event) => {
|
|
53
|
+
const data = event.data;
|
|
54
|
+
const origin = event.origin;
|
|
55
|
+
if (!data || typeof data !== "object" || !data.type) return;
|
|
56
|
+
if (!allowedHostOrigins.includes(origin)) return;
|
|
57
|
+
if (data.__source === "remote") return;
|
|
58
|
+
let payload = data.payload;
|
|
59
|
+
if (cryptoKey && typeof payload === "string" && payload) {
|
|
60
|
+
payload = decrypt(payload, cryptoKey);
|
|
61
|
+
}
|
|
62
|
+
const remoteMessage = {
|
|
63
|
+
type: data.type,
|
|
64
|
+
payload,
|
|
65
|
+
txn: data.txn,
|
|
66
|
+
__source: "host",
|
|
67
|
+
__origin: origin
|
|
68
|
+
};
|
|
69
|
+
listeners.forEach((fn) => fn(remoteMessage));
|
|
70
|
+
};
|
|
71
|
+
window.addEventListener("message", messageHandler);
|
|
72
|
+
function emitToHost(type, payload) {
|
|
73
|
+
let finalPayload = payload;
|
|
74
|
+
if (cryptoKey) {
|
|
75
|
+
finalPayload = encrypt(payload, cryptoKey);
|
|
76
|
+
}
|
|
77
|
+
const message = {
|
|
78
|
+
app_id: appId,
|
|
79
|
+
type,
|
|
80
|
+
payload: finalPayload,
|
|
81
|
+
txn: generateKey(),
|
|
82
|
+
__origin: window.location.origin,
|
|
83
|
+
__source: "remote"
|
|
84
|
+
};
|
|
85
|
+
if (window.parent && window.parent !== window) {
|
|
86
|
+
allowedHostOrigins.forEach((origin) => {
|
|
87
|
+
window.parent.postMessage(message, origin);
|
|
88
|
+
});
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
function emitReadyOnce() {
|
|
92
|
+
if (isInitialized) return;
|
|
93
|
+
isInitialized = true;
|
|
94
|
+
log("READY emitted");
|
|
95
|
+
emitToHost("ready", {
|
|
96
|
+
ok: true,
|
|
97
|
+
app_id: appId,
|
|
98
|
+
timestamp: Date.now()
|
|
99
|
+
});
|
|
100
|
+
}
|
|
101
|
+
return {
|
|
102
|
+
init() {
|
|
103
|
+
emitReadyOnce();
|
|
104
|
+
},
|
|
105
|
+
listen(handler) {
|
|
106
|
+
listeners.push(handler);
|
|
107
|
+
},
|
|
108
|
+
emit(type, payload) {
|
|
109
|
+
emitToHost(type, payload);
|
|
110
|
+
},
|
|
111
|
+
destroy() {
|
|
112
|
+
window.removeEventListener("message", messageHandler);
|
|
113
|
+
}
|
|
114
|
+
};
|
|
115
|
+
}
|
|
116
|
+
if (typeof window !== "undefined") {
|
|
117
|
+
window.SignalBridge = {
|
|
118
|
+
signalBridge,
|
|
119
|
+
encrypt,
|
|
120
|
+
decrypt,
|
|
121
|
+
generateKey
|
|
122
|
+
};
|
|
123
|
+
}
|
|
124
|
+
export {
|
|
125
|
+
base64UrlDecode,
|
|
126
|
+
base64UrlEncode,
|
|
127
|
+
decrypt,
|
|
128
|
+
encrypt,
|
|
129
|
+
generateKey,
|
|
130
|
+
signalBridge
|
|
131
|
+
};
|
|
132
|
+
//# sourceMappingURL=index.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/crypto.ts","../src/index.ts"],"sourcesContent":["import CryptoJS from \"crypto-js\";\r\n\r\n// =====================================================\r\n// BASE64 URL\r\n// =====================================================\r\nexport function base64UrlEncode(str: string): string {\r\n return str.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\r\n}\r\n\r\nexport function base64UrlDecode(str: string): string {\r\n str = str.replace(/-/g, \"+\").replace(/_/g, \"/\");\r\n while (str.length % 4) str += \"=\";\r\n return str;\r\n}\r\n\r\n// =====================================================\r\n// CRYPTO\r\n// =====================================================\r\nexport function encrypt(data: any, secretKey: string): string {\r\n const text = typeof data === \"string\" ? data : JSON.stringify(data);\r\n const encrypted = CryptoJS.AES.encrypt(text, secretKey).toString();\r\n return base64UrlEncode(encrypted);\r\n}\r\n\r\nexport function decrypt(encoded: string, secretKey: string): any {\r\n try {\r\n const b64 = base64UrlDecode(encoded);\r\n const bytes = CryptoJS.AES.decrypt(b64, secretKey);\r\n const dec = bytes.toString(CryptoJS.enc.Utf8);\r\n\r\n try {\r\n return JSON.parse(dec);\r\n } catch {\r\n return dec;\r\n }\r\n } catch {\r\n return \"\";\r\n }\r\n}\r\n\r\nexport function generateKey(length = 12): string {\r\n const chars = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\r\n let out = \"\";\r\n\r\n for (let i = 0; i < length; i++) {\r\n out += chars.charAt(Math.floor(Math.random() * chars.length));\r\n }\r\n\r\n return out;\r\n}","import { decrypt, encrypt, generateKey } from \"./crypto\";\r\n\r\ntype BridgeMessage = {\r\n type: string;\r\n payload: any;\r\n txn: string;\r\n __source: \"host\" | \"remote\";\r\n __origin?: string;\r\n};\r\n\r\ntype Listener = (message: BridgeMessage) => void;\r\n\r\ninterface BridgeOptions {\r\n allowedHostOrigins: string[];\r\n cryptoKey?: string;\r\n debug?: boolean;\r\n enableNavigationSync?: boolean; // 👈 NEW\r\n}\r\n\r\nlet isInitialized = false;\r\n\r\nexport function signalBridge(\r\n appId: string,\r\n options: BridgeOptions\r\n) {\r\n const { allowedHostOrigins, cryptoKey, debug } = options;\r\n\r\n const isRemote = window.parent && window.parent !== window;\r\n\r\n if (!isRemote) {\r\n throw new Error(\"Signal bridge hanya boleh dijalankan di iframe (remote).\");\r\n }\r\n\r\n const listeners: Listener[] = [];\r\n\r\n const log = (...args: any[]) => {\r\n if (debug) console.log(\"[🛰️DEBUG-SIGNAL-BRIDGE]\", ...args);\r\n };\r\n\r\n log(\"Initialized (REMOTE)\");\r\n\r\n // =====================================================\r\n // RECEIVE MESSAGE FROM HOST\r\n // =====================================================\r\n const messageHandler = (event: MessageEvent) => {\r\n const data = event.data;\r\n const origin = event.origin;\r\n\r\n if (!data || typeof data !== \"object\" || !data.type) return;\r\n if (!allowedHostOrigins.includes(origin)) return;\r\n if (data.__source === \"remote\") return; // anti loop\r\n\r\n let payload = data.payload;\r\n\r\n if (cryptoKey && typeof payload === \"string\" && payload) {\r\n payload = decrypt(payload, cryptoKey);\r\n }\r\n\r\n const remoteMessage: BridgeMessage = {\r\n type: data.type,\r\n payload,\r\n txn: data.txn,\r\n __source: \"host\",\r\n __origin: origin,\r\n };\r\n\r\n listeners.forEach((fn) => fn(remoteMessage));\r\n };\r\n\r\n window.addEventListener(\"message\", messageHandler);\r\n\r\n // =====================================================\r\n // SEND MESSAGE TO HOST\r\n // =====================================================\r\n function emitToHost(type: string, payload: any) {\r\n let finalPayload = payload;\r\n\r\n if (cryptoKey) {\r\n finalPayload = encrypt(payload, cryptoKey);\r\n }\r\n\r\n const message = {\r\n app_id: appId,\r\n type,\r\n payload: finalPayload,\r\n txn: generateKey(),\r\n __origin: window.location.origin,\r\n __source: \"remote\",\r\n };\r\n\r\n if (window.parent && window.parent !== window) {\r\n allowedHostOrigins.forEach((origin) => {\r\n window.parent!.postMessage(message, origin);\r\n });\r\n }\r\n }\r\n\r\n // =====================================================\r\n // NAVIGATION SYNC (SPA SAFE)\r\n // =====================================================\r\n\r\n\r\n // initial sync\r\n function emitReadyOnce() {\r\n if (isInitialized) return;\r\n\r\n isInitialized = true;\r\n log(\"READY emitted\");\r\n\r\n emitToHost(\"ready\", {\r\n ok: true,\r\n app_id: appId,\r\n timestamp: Date.now()\r\n });\r\n }\r\n\r\n // let originalPushState = history.pushState;\r\n // let originalReplaceState = history.replaceState;\r\n\r\n // let navigationEnabled = false;\r\n\r\n\r\n\r\n // function setupNavigationSync() {\r\n // if (!options.enableNavigationSync) return;\r\n\r\n // navigationEnabled = true;\r\n\r\n // const emitCurrentPath = () => {\r\n // let path = location.hash.startsWith(\"#/\")\r\n // ? location.hash.slice(1)\r\n // : location.pathname;\r\n\r\n // path = path.split(\"?\")[0].split(\"#\")[0];\r\n // if (!path.startsWith(\"/\")) path = \"/\" + path;\r\n\r\n // log(\"NAVIGATE\", path);\r\n\r\n // emitToHost(\"navigate\", { path });\r\n // };\r\n\r\n // history.pushState = function (...args) {\r\n // originalPushState.apply(history, args as any);\r\n // emitCurrentPath();\r\n // };\r\n\r\n // history.replaceState = function (...args) {\r\n // originalReplaceState.apply(history, args as any);\r\n // emitCurrentPath();\r\n // };\r\n\r\n // window.addEventListener(\"popstate\", emitCurrentPath);\r\n // window.addEventListener(\"hashchange\", emitCurrentPath);\r\n\r\n // // fallback SPA\r\n // function waitForSPAPath(maxAttempts = 20, interval = 50) {\r\n // let attempts = 0;\r\n\r\n // const checkPath = () => {\r\n // const path = location.hash.startsWith(\"#/\")\r\n // ? location.hash.slice(1)\r\n // : location.pathname;\r\n\r\n // if (path !== \"/\" || attempts >= maxAttempts) {\r\n // emitToHost(\"navigate\", { path });\r\n // } else {\r\n // attempts++;\r\n // setTimeout(checkPath, interval);\r\n // }\r\n // };\r\n\r\n // checkPath();\r\n // }\r\n\r\n // window.addEventListener(\"load\", () => {\r\n // waitForSPAPath();\r\n // });\r\n // }\r\n\r\n\r\n\r\n // =====================================================\r\n // PUBLIC API\r\n // =====================================================\r\n return {\r\n\r\n init() {\r\n emitReadyOnce();\r\n },\r\n\r\n listen(handler: Listener) {\r\n listeners.push(handler);\r\n },\r\n\r\n emit(type: string, payload: any) {\r\n emitToHost(type, payload);\r\n },\r\n\r\n destroy() {\r\n window.removeEventListener(\"message\", messageHandler);\r\n },\r\n };\r\n}\r\n\r\nexport * from \"./crypto\";\r\n\r\n// 👇 UMD / browser global support\r\nif (typeof window !== \"undefined\") {\r\n (window as any).SignalBridge = {\r\n signalBridge,\r\n encrypt,\r\n decrypt,\r\n generateKey\r\n };\r\n}"],"mappings":";AAAA,OAAO,cAAc;AAKd,SAAS,gBAAgB,KAAqB;AACjD,SAAO,IAAI,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACxE;AAEO,SAAS,gBAAgB,KAAqB;AACjD,QAAM,IAAI,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC9C,SAAO,IAAI,SAAS,EAAG,QAAO;AAC9B,SAAO;AACX;AAKO,SAAS,QAAQ,MAAW,WAA2B;AAC1D,QAAM,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,IAAI;AAClE,QAAM,YAAY,SAAS,IAAI,QAAQ,MAAM,SAAS,EAAE,SAAS;AACjE,SAAO,gBAAgB,SAAS;AACpC;AAEO,SAAS,QAAQ,SAAiB,WAAwB;AAC7D,MAAI;AACA,UAAM,MAAM,gBAAgB,OAAO;AACnC,UAAM,QAAQ,SAAS,IAAI,QAAQ,KAAK,SAAS;AACjD,UAAM,MAAM,MAAM,SAAS,SAAS,IAAI,IAAI;AAE5C,QAAI;AACA,aAAO,KAAK,MAAM,GAAG;AAAA,IACzB,SAAQ;AACJ,aAAO;AAAA,IACX;AAAA,EACJ,SAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAEO,SAAS,YAAY,SAAS,IAAY;AAC7C,QAAM,QAAQ;AACd,MAAI,MAAM;AAEV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC7B,WAAO,MAAM,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,MAAM,MAAM,CAAC;AAAA,EAChE;AAEA,SAAO;AACX;;;AC9BA,IAAI,gBAAgB;AAEb,SAAS,aACd,OACA,SACA;AACA,QAAM,EAAE,oBAAoB,WAAW,MAAM,IAAI;AAEjD,QAAM,WAAW,OAAO,UAAU,OAAO,WAAW;AAEpD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAEA,QAAM,YAAwB,CAAC;AAE/B,QAAM,MAAM,IAAI,SAAgB;AAC9B,QAAI,MAAO,SAAQ,IAAI,wCAA4B,GAAG,IAAI;AAAA,EAC5D;AAEA,MAAI,sBAAsB;AAK1B,QAAM,iBAAiB,CAAC,UAAwB;AAC9C,UAAM,OAAO,MAAM;AACnB,UAAM,SAAS,MAAM;AAErB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,KAAK,KAAM;AACrD,QAAI,CAAC,mBAAmB,SAAS,MAAM,EAAG;AAC1C,QAAI,KAAK,aAAa,SAAU;AAEhC,QAAI,UAAU,KAAK;AAEnB,QAAI,aAAa,OAAO,YAAY,YAAY,SAAS;AACvD,gBAAU,QAAQ,SAAS,SAAS;AAAA,IACtC;AAEA,UAAM,gBAA+B;AAAA,MACnC,MAAM,KAAK;AAAA,MACX;AAAA,MACA,KAAK,KAAK;AAAA,MACV,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAEA,cAAU,QAAQ,CAAC,OAAO,GAAG,aAAa,CAAC;AAAA,EAC7C;AAEA,SAAO,iBAAiB,WAAW,cAAc;AAKjD,WAAS,WAAW,MAAc,SAAc;AAC9C,QAAI,eAAe;AAEnB,QAAI,WAAW;AACb,qBAAe,QAAQ,SAAS,SAAS;AAAA,IAC3C;AAEA,UAAM,UAAU;AAAA,MACd,QAAQ;AAAA,MACR;AAAA,MACA,SAAS;AAAA,MACT,KAAK,YAAY;AAAA,MACjB,UAAU,OAAO,SAAS;AAAA,MAC1B,UAAU;AAAA,IACZ;AAEA,QAAI,OAAO,UAAU,OAAO,WAAW,QAAQ;AAC7C,yBAAmB,QAAQ,CAAC,WAAW;AACrC,eAAO,OAAQ,YAAY,SAAS,MAAM;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AAQA,WAAS,gBAAgB;AACvB,QAAI,cAAe;AAEnB,oBAAgB;AAChB,QAAI,eAAe;AAEnB,eAAW,SAAS;AAAA,MAClB,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,WAAW,KAAK,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAsEA,SAAO;AAAA,IAEL,OAAO;AACL,oBAAc;AAAA,IAChB;AAAA,IAEA,OAAO,SAAmB;AACxB,gBAAU,KAAK,OAAO;AAAA,IACxB;AAAA,IAEA,KAAK,MAAc,SAAc;AAC/B,iBAAW,MAAM,OAAO;AAAA,IAC1B;AAAA,IAEA,UAAU;AACR,aAAO,oBAAoB,WAAW,cAAc;AAAA,IACtD;AAAA,EACF;AACF;AAKA,IAAI,OAAO,WAAW,aAAa;AACjC,EAAC,OAAe,eAAe;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}
|
package/package.json
ADDED
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "signal-bridge",
|
|
3
|
+
"version": "1.0.3",
|
|
4
|
+
"description": "Secure iframe communication bridge",
|
|
5
|
+
"author": "Ekahersada <ekahersada@gmail.com>",
|
|
6
|
+
"main": "dist/index.cjs",
|
|
7
|
+
"module": "dist/index.js",
|
|
8
|
+
"unpkg": "dist/index.umd.js",
|
|
9
|
+
"types": "dist/index.d.ts",
|
|
10
|
+
"scripts": {
|
|
11
|
+
"build": "tsup",
|
|
12
|
+
"dev": "tsup --watch",
|
|
13
|
+
"deploy": "npm version patch && npm run build && npm publish --access public"
|
|
14
|
+
},
|
|
15
|
+
"files": [
|
|
16
|
+
"dist"
|
|
17
|
+
],
|
|
18
|
+
"dependencies": {
|
|
19
|
+
"crypto-js": "^4.1.1"
|
|
20
|
+
},
|
|
21
|
+
"devDependencies": {
|
|
22
|
+
"@types/crypto-js": "^4.2.2",
|
|
23
|
+
"tsup": "^8.5.1",
|
|
24
|
+
"typescript": "^6.0.3"
|
|
25
|
+
}
|
|
26
|
+
}
|
package/readme.md
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
Test
|