webview.io 1.0.6 → 1.2.0

package/src/index.ts

@@ -6,6 +6,31 @@ export type PeerType = 'WEBVIEW' | 'EMBEDDED'
 export type AckFunction = ( error: boolean | string, ...args: any[] ) => void
 export type Listener = ( payload?: any, ack?: AckFunction ) => void
 
+export type CryptoAuthOptions = {
+  /**
+   * Shared secret used for HMAC-SHA256 signing.
+   *
+   * IMPORTANT: If an attacker can execute JS in either peer, they can read the secret.
+   * This is for authenticity/integrity between cooperating peers, not a sandbox boundary.
+   */
+  secret: string
+  /**
+   * If true, drop any incoming message that doesn't carry valid auth.
+   * Default: false (accept unsigned messages)
+   */
+  requireSigned?: boolean
+  /**
+   * Maximum allowed clock skew for signed messages (ms).
+   * Default: 2 minutes
+   */
+  maxSkewMs?: number
+  /**
+   * Replay window size (max number of nonces kept in memory).
+   * Default: 500
+   */
+  replayWindowSize?: number
+}
+
 export type Options = {
   type?: PeerType
   debug?: boolean
@@ -17,6 +42,22 @@ export type Options = {
   messageQueueSize?: number
   connectionPingInterval?: number
   maxConnectionAttempts?: number
+  /**
+   * Optional allowlist of incoming application-level events.
+   * Reserved internal events (ping/pong/heartbeat/handshake) are always allowed.
+   */
+  allowedIncomingEvents?: string[]
+  /**
+   * Optional custom validator for incoming messages.
+   * Return false to drop a message; an 'error' event will be emitted.
+   */
+  validateIncoming?: ( event: string, payload: any ) => boolean
+  /**
+   * Optional cryptographic message authentication (HMAC-SHA256).
+   * When enabled, use `emitSigned` / `emitAsyncSigned` to send signed messages.
+   * For EMBEDDED (WebView content) you must set the secret in injected bridge too (handled by `getInjectedJavaScript()` when configured).
+   */
+  cryptoAuth?: CryptoAuthOptions
 }
 
 export interface RegisteredEvents {
@@ -25,6 +66,7 @@ export interface RegisteredEvents {
 
 export type Peer = {
   type: PeerType
+  protocolVersion?: number
   webViewRef?: RefObject<WebView>
   origin?: string
   connected?: boolean
@@ -33,12 +75,19 @@ export type Peer = {
 }
 
 export type MessageData = {
+  v?: number // Protocol version
   _event: string
   payload: any
   cid: string | undefined
   timestamp?: number
   size?: number
   token?: string
+  auth?: {
+    alg: 'HMAC-SHA256'
+    ts: number
+    nonce: string
+    sig: string
+  }
 }
 
 export type Message = {
@@ -52,6 +101,36 @@ export type QueuedMessage = {
   timestamp: number
 }
 
+// Current protocol version
+const PROTOCOL_VERSION = 1
+
+/**
+ * The exact fields, in the exact order, that a signature covers.
+ *
+ * Kept as data rather than written out at each call site because there are
+ * three implementations of this protocol — the class signing, the class
+ * verifying, and the hand-written bridge that getInjectedJavaScript() injects
+ * into the WebView — and they did not agree. The class signed over `size`; the
+ * injected bridge left it out of both its sign and its verify. Every signed
+ * message the native side sent was therefore refused by the WebView, in
+ * silence, for as long as cryptoAuth has existed.
+ *
+ * The injected bridge now interpolates this same array, so the three cannot
+ * drift apart again without changing one line.
+ */
+const CANONICAL_FIELDS = [ 'v', '_event', 'payload', 'cid', 'timestamp', 'size', 'token' ] as const
+
+function canonicalMessage( data: Record<string, any>, ts: number, nonce: string ): string {
+  const canonical: Record<string, any> = {}
+
+  for( const field of CANONICAL_FIELDS ) canonical[ field ] = data[ field ]
+
+  canonical.ts = ts
+  canonical.nonce = nonce
+
+  return JSON.stringify( canonical )
+}
+
 function newObject( data: object ){
   return JSON.parse( JSON.stringify( data ) )
 }
@@ -72,6 +151,77 @@ function sanitizePayload( payload: any, maxSize: number ): any {
   return JSON.parse( JSON.stringify( payload ) )
 }
 
+function constantTimeEqual( a: string, b: string ): boolean {
+  if( a.length !== b.length ) return false
+  let out = 0
+  for( let i = 0; i < a.length; i++ ) out |= a.charCodeAt( i ) ^ b.charCodeAt( i )
+  return out === 0
+}
+
+function getGlobalCrypto(){
+  return (typeof crypto !== 'undefined'
+    ? crypto
+    : (typeof window !== 'undefined' && (window as any).crypto)
+      || (typeof globalThis !== 'undefined' && (globalThis as any).crypto))
+}
+
+function randomHex( bytes: number ): string {
+  try {
+    const globalCrypto = getGlobalCrypto()
+    if( globalCrypto && typeof globalCrypto.getRandomValues === 'function' ){
+      const buf = new Uint8Array( bytes )
+      globalCrypto.getRandomValues( buf )
+      return Array.from( buf ).map( b => b.toString( 16 ).padStart( 2, '0' ) ).join('')
+    }
+  }
+  catch{}
+
+  // Fallback (NOT cryptographically strong)
+  return Array.from({ length: bytes }, () => Math.floor( Math.random() * 256 ).toString( 16 ).padStart( 2, '0' ) ).join('')
+}
+
+async function hmacSha256Base64Url( secret: string, message: string ): Promise<string> {
+  // Browser/WebCrypto (useful for EMBEDDED web content)
+  try {
+    const globalCrypto = getGlobalCrypto() as any
+    const subtle = globalCrypto?.subtle
+    if( subtle && typeof subtle.importKey === 'function' ){
+      const enc = new TextEncoder()
+      const key = await subtle.importKey(
+        'raw',
+        enc.encode( secret ),
+        { name: 'HMAC', hash: 'SHA-256' },
+        false,
+        ['sign']
+      )
+      const sig = await subtle.sign( 'HMAC', key, enc.encode( message ) )
+      const bytes = new Uint8Array( sig )
+      let bin = ''
+      for( let i = 0; i < bytes.length; i++ ) bin += String.fromCharCode( bytes[i] )
+      const b64 = btoa( bin )
+      return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '')
+    }
+  }
+  catch{
+    // fallthrough to Node implementation
+  }
+
+  // Node.js (commonjs) - optional (React Native metro can provide crypto polyfills in some setups)
+  try {
+    const nodeCrypto = (globalThis as any).__wio_node_crypto
+      || ((globalThis as any).__wio_node_crypto = (typeof (globalThis as any).require === 'function'
+        ? (globalThis as any).require('crypto')
+        : undefined))
+
+    if( !nodeCrypto ) throw new Error('node crypto unavailable')
+
+    const b64 = nodeCrypto.createHmac('sha256', secret).update( message ).digest('base64')
+    return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '')
+  }
+  catch{
+    throw new Error('No crypto implementation available for HMAC-SHA256')
+  }
+}
 const ackId = () => {
   const
   rmin = 100000,
@@ -83,7 +233,26 @@ const ackId = () => {
 }
 
 const generateToken = () => {
-  return `${Date.now()}_${Math.random().toString(36).substring(2, 15)}`
+  // Prefer cryptographically strong randomness when available
+  try {
+    const globalCrypto = (typeof crypto !== 'undefined'
+      ? crypto
+      : (typeof window !== 'undefined' && (window as any).crypto)
+        || (typeof globalThis !== 'undefined' && (globalThis as any).crypto))
+
+    if( globalCrypto && typeof globalCrypto.getRandomValues === 'function' ){
+      const buffer = new Uint32Array(4)
+      globalCrypto.getRandomValues( buffer )
+
+      const randomPart = Array.from( buffer ).map( n => n.toString( 16 ) ).join('')
+      return `${Date.now()}_${randomPart}`
+    }
+  }
+  catch{
+    // Fall back to Math.random-based implementation below
+  }
+
+  return `${Date.now()}_${Math.random().toString( 36 ).substring( 2, 15 )}`
 }
 
 const RESERVED_EVENTS = [
@@ -111,6 +280,7 @@ export default class WIO {
   private maxReconnectAttempts: number = 5
   private connectionToken?: string
   private connectionAttempts: number = 0
+  private seenNonces: Map<string, number> = new Map()
 
   constructor( options: Options = {} ){
     if( options && typeof options !== 'object' )
@@ -134,6 +304,89 @@ export default class WIO {
     if( options.type ) this.peer.type = options.type
   }
 
+  private cryptoCfg(){
+    if( !this.options.cryptoAuth ) return undefined
+    return {
+      secret: this.options.cryptoAuth.secret,
+      requireSigned: !!this.options.cryptoAuth.requireSigned,
+      maxSkewMs: this.options.cryptoAuth.maxSkewMs ?? 2 * 60 * 1000,
+      replayWindowSize: this.options.cryptoAuth.replayWindowSize ?? 500
+    }
+  }
+
+  /**
+   * Forget nonces that can no longer be replayed, and only then cap the map.
+   *
+   * Age is what decides replayability: a captured message is refused once its
+   * `ts` falls outside maxSkewMs, so a nonce is only worth keeping that long.
+   * Pruning purely by count made the two defaults contradict each other — 500
+   * remembered nonces at the default 100 messages a second is five seconds of
+   * history guarding a two-minute acceptance window.
+   */
+  private pruneNonces( maxSize: number ){
+    const
+    cutoff = Date.now() - ( this.cryptoCfg()?.maxSkewMs ?? 2 * 60 * 1000 ),
+    stale: string[] = []
+
+    this.seenNonces.forEach( ( ts, nonce ) => { ts < cutoff && stale.push( nonce ) })
+    stale.forEach( nonce => this.seenNonces.delete( nonce ) )
+
+    if( this.seenNonces.size <= maxSize ) return
+
+    this.fire('error', {
+      type: 'REPLAY_WINDOW_EXCEEDED',
+      remembered: this.seenNonces.size,
+      maxSize
+    })
+
+    const
+    toRemove = this.seenNonces.size - maxSize,
+    keys = Array.from( this.seenNonces.keys() )
+
+    for( let k = 0; k < toRemove && k < keys.length; k++ )
+      this.seenNonces.delete( keys[k] )
+  }
+
+  private async signOutgoing( messageData: Omit<MessageData, 'auth'> ): Promise<MessageData['auth']> {
+    const cfg = this.cryptoCfg()
+    if( !cfg ) return undefined
+
+    const
+    ts = Date.now(),
+    nonce = randomHex( 16 ),
+    sig = await hmacSha256Base64Url( cfg.secret, canonicalMessage( messageData, ts, nonce ) )
+
+    return { alg: 'HMAC-SHA256', ts, nonce, sig }
+  }
+
+  private async verifyIncomingAuth( data: MessageData ): Promise<boolean> {
+    const cfg = this.cryptoCfg()
+    if( !cfg ) return true
+
+    if( !data.auth ){
+      return !cfg.requireSigned
+    }
+
+    const { alg, ts, nonce, sig } = data.auth
+    if( alg !== 'HMAC-SHA256' ) return false
+    if( typeof ts !== 'number' || typeof nonce !== 'string' || typeof sig !== 'string' ) return false
+
+    const now = Date.now()
+    if( Math.abs( now - ts ) > cfg.maxSkewMs ) return false
+
+    // The nonce is recorded only once the signature is known good: burning it
+    // here let an unsigned or badly signed message consume the nonce of a
+    // legitimate one still in flight.
+    if( this.seenNonces.has( nonce ) ) return false
+
+    const expected = await hmacSha256Base64Url( cfg.secret, canonicalMessage( data, ts, nonce ) )
+    if( !constantTimeEqual( expected, sig ) ) return false
+
+    this.seenNonces.set( nonce, ts )
+    this.pruneNonces( cfg.replayWindowSize )
+
+    return true
+  }
   debug( ...args: any[] ){
     this.options.debug && console.debug( ...args )
   }
@@ -431,7 +684,25 @@ export default class WIO {
       if( typeof data !== 'object' || !data.hasOwnProperty('_event') )
         return
 
-      const { _event, payload, cid, timestamp, token } = data as MessageData
+      const { v, _event, payload, cid, timestamp, token } = data as MessageData
+
+      /**
+       * A peer that predates versioning sends no `v`, so absence reads as 1
+       * rather than as a refusal. Only a peer speaking a NEWER protocol than
+       * this build understands is turned away.
+       */
+      const messageVersion = v || 1
+      if( messageVersion > PROTOCOL_VERSION ){
+        this.fire('error', {
+          type: 'UNSUPPORTED_VERSION',
+          received: messageVersion,
+          supported: PROTOCOL_VERSION
+        })
+        return
+      }
+
+      if( !this.peer.protocolVersion || this.peer.protocolVersion < messageVersion )
+        this.peer.protocolVersion = messageVersion
 
       // Validate origin if specified
       if( this.peer.origin && event.nativeEvent && 'origin' in event.nativeEvent ){
@@ -544,6 +815,67 @@ export default class WIO {
         return
       }
 
+      // Cryptographic authentication (optional)
+      if( this.options.cryptoAuth ){
+        this.verifyIncomingAuth( data as MessageData )
+          .then( ok => {
+            if( !ok ){
+              this.fire('error', { type: 'AUTH_FAILED', event: _event })
+              return
+            }
+
+            // Optional application-level incoming validation (non-reserved events only)
+            if( !RESERVED_EVENTS.includes( _event ) ){
+              if( this.options.allowedIncomingEvents
+                  && !this.options.allowedIncomingEvents.includes( _event ) ){
+                this.fire('error', {
+                  type: 'DISALLOWED_EVENT',
+                  direction: 'incoming',
+                  event: _event
+                })
+                return
+              }
+
+              if( this.options.validateIncoming
+                  && !this.options.validateIncoming( _event, payload ) ){
+                this.fire('error', {
+                  type: 'INVALID_MESSAGE',
+                  direction: 'incoming',
+                  event: _event
+                })
+                return
+              }
+            }
+
+            this.fire( _event, payload, cid )
+          })
+          .catch( error => this.fire('error', { type: 'AUTH_ERROR', event: _event, error: String(error) }) )
+        return
+      }
+
+      // Optional application-level incoming validation (non-reserved events only)
+      if( !RESERVED_EVENTS.includes( _event ) ){
+        if( this.options.allowedIncomingEvents
+            && !this.options.allowedIncomingEvents.includes( _event ) ){
+          this.fire('error', {
+            type: 'DISALLOWED_EVENT',
+            direction: 'incoming',
+            event: _event
+          })
+          return
+        }
+
+        if( this.options.validateIncoming
+            && !this.options.validateIncoming( _event, payload ) ){
+          this.fire('error', {
+            type: 'INVALID_MESSAGE',
+            direction: 'incoming',
+            event: _event
+          })
+          return
+        }
+      }
+
       // Fire available event listeners
       this.fire( _event, payload, cid )
     }
@@ -633,6 +965,7 @@ export default class WIO {
       }
 
       const messageData: MessageData = {
+        v: PROTOCOL_VERSION,
         _event,
         payload: sanitizedPayload,
         cid,
@@ -659,6 +992,91 @@ export default class WIO {
     return this
   }
 
+  /**
+   * Send a signed message (HMAC-SHA256) when `options.cryptoAuth` is configured.
+   * This is async because WebCrypto signing is async.
+   */
+  async emitSigned<T = any>( _event: string, payload?: T | AckFunction, fn?: AckFunction ): Promise<this> {
+    if( !this.checkRateLimit() ) return this
+
+    if( !this.options.cryptoAuth ){
+      this.emit( _event as any, payload as any, fn )
+      return this
+    }
+
+    if( !this.isConnected() && !RESERVED_EVENTS.includes(_event) ){
+      this.queueMessage( _event, payload, fn )
+      return this
+    }
+
+    if( !this.peer.webViewRef ){
+      this.fire('error', { type: 'NO_CONNECTION', event: _event })
+      return this
+    }
+
+    if( typeof payload == 'function' ){
+      fn = payload as AckFunction
+      payload = undefined
+    }
+
+    try {
+      const sanitizedPayload = payload
+        ? sanitizePayload( payload, this.options.maxMessageSize! )
+        : payload
+
+      let cid: string | undefined
+      if( typeof fn === 'function' ){
+        const ackFunction = fn
+        cid = ackId()
+        this.once(`${_event}--${cid}--@ack`, ({ error, args }) => ackFunction( error, ...args ))
+      }
+
+      const unsigned: Omit<MessageData, 'auth'> = {
+        v: PROTOCOL_VERSION,
+        _event,
+        payload: sanitizedPayload,
+        cid,
+        timestamp: Date.now(),
+        size: getMessageSize( sanitizedPayload ),
+        token: RESERVED_EVENTS.includes(_event) ? this.connectionToken : undefined
+      }
+
+      const auth = await this.signOutgoing( unsigned )
+      const messageData: MessageData = { ...unsigned, auth }
+
+      this.peer.webViewRef.current?.postMessage( JSON.stringify( newObject( messageData ) ) )
+    }
+    catch( error ){
+      this.debug(`[${this.peer.type}] EmitSigned error:`, error)
+      this.fire('error', {
+        type: 'EMIT_ERROR',
+        event: _event,
+        error: error instanceof Error ? error.message : String(error)
+      })
+
+      typeof fn === 'function'
+      && fn( error instanceof Error ? error.message : String(error) )
+    }
+
+    return this
+  }
+
+  async emitAsyncSigned<T = any, R = any>( _event: string, payload?: T, timeout: number = 5000 ): Promise<R> {
+    return new Promise(( resolve, reject ) => {
+      const timeoutId = setTimeout(() => reject( new Error(`Event '${_event}' acknowledgment timeout after ${timeout}ms`) ), timeout )
+
+      this.emitSigned( _event, payload as any, ( error, ...args ) => {
+        clearTimeout( timeoutId )
+        error
+          ? reject( new Error( typeof error === 'string' ? error : 'Ack error' ) )
+          : resolve( args.length === 0 ? undefined : args.length === 1 ? args[0] : args as any )
+      }).catch( err => {
+        clearTimeout( timeoutId )
+        reject( err )
+      })
+    })
+  }
+
   on( _event: string, fn: Listener ){
     // Add Event listener
     if( !this.Events[_event] ) this.Events[_event] = []
@@ -818,10 +1236,11 @@ export default class WIO {
    * NOTE: Does not auto-initialize - page must call window._wio.listen()
    */
   getInjectedJavaScript(): string {
+    const authSecret = this.options.cryptoAuth?.secret
     return `
       (function() {
         try {
-          console.log('[EMBEDDED] Initializing WIO bridge...')
+          console.debug('[EMBEDDED] Initializing WIO bridge...')
           
           const RESERVED_EVENTS = [
             'ping',
@@ -840,7 +1259,11 @@ export default class WIO {
             Events: {},
             messageQueue: [],
             connectionToken: null,
+            authSecret: ${authSecret ? JSON.stringify(authSecret) : 'null'},
             setupComplete: false,
+            seenNonces: new Map(),
+            maxSkewMs: ${(this.options.cryptoAuth?.maxSkewMs ?? 2 * 60 * 1000)},
+            replayWindowSize: ${(this.options.cryptoAuth?.replayWindowSize ?? 500)},
 
             listen: function(){
               if( this.setupComplete ){
@@ -848,7 +1271,7 @@ export default class WIO {
                 return this
               }
 
-              console.log('[EMBEDDED] Setting up message listeners...')
+              console.debug('[EMBEDDED] Setting up message listeners...')
 
               // Listen to messages from React Native
               window.addEventListener('message', function( event ){
@@ -871,7 +1294,7 @@ export default class WIO {
               }
 
               this.setupComplete = true
-              console.log('[EMBEDDED] Setup complete, starting ready announcements')
+              console.debug('[EMBEDDED] Setup complete, starting ready announcements')
 
               // Start announcing readiness
               this.announceReady()
@@ -891,7 +1314,7 @@ export default class WIO {
             
             fire: function( _event, payload, cid ){
               if( !window._wio.Events[_event] && !window._wio.Events[_event + '--@once'] ){
-                console.log('[EMBEDDED] No listener for:', _event)
+                console.debug('[EMBEDDED] No listener for:', _event)
                 return
               }
               
@@ -922,7 +1345,7 @@ export default class WIO {
               
               if( !window._wio.connected && !RESERVED_EVENTS.includes(_event) ){
                 window._wio.messageQueue.push({ _event, payload, fn, timestamp: Date.now() })
-                console.log('[EMBEDDED] Queued message:', _event)
+                console.debug('[EMBEDDED] Queued message:', _event)
                 return
               }
               
@@ -950,6 +1373,48 @@ export default class WIO {
                 typeof fn === 'function' && fn( String(error) )
               }
             },
+
+            emitSigned: async function( _event, payload, fn ){
+              if( typeof payload === 'function' ){
+                fn = payload
+                payload = undefined
+              }
+
+              if( !window._wio.connected && !RESERVED_EVENTS.includes(_event) ){
+                window._wio.messageQueue.push({ _event, payload, fn, timestamp: Date.now(), signed: true })
+                console.debug('[EMBEDDED] Queued signed message:', _event)
+                return
+              }
+
+              try {
+                let cid
+                if( typeof fn === 'function' ){
+                  cid = window._wio.ackId()
+                  window._wio.once( _event + '--' + cid + '--@ack', ({ error, args }) => fn( error, ...args ) )
+                }
+
+                const unsigned = {
+                  v: ${PROTOCOL_VERSION},
+                  _event,
+                  payload,
+                  cid,
+                  timestamp: Date.now(),
+                  size: (function(){ try { return JSON.stringify( payload ).length } catch(e){ return 0 } })(),
+                  token: RESERVED_EVENTS.includes(_event) ? window._wio.connectionToken : undefined
+                }
+
+                const auth = await window._wio.sign(unsigned)
+                const messageData = { ...unsigned, auth }
+
+                if( typeof window.ReactNativeWebView !== 'undefined' )
+                  window.ReactNativeWebView.postMessage( JSON.stringify( messageData ) )
+                else console.error('[EMBEDDED] ReactNativeWebView not available')
+              }
+              catch( error ){
+                console.error('[EMBEDDED] EmitSigned error:', error )
+                typeof fn === 'function' && fn( String(error) )
+              }
+            },
             
             on: function( _event, fn ){
               if( !window._wio.Events[_event] ) window._wio.Events[_event] = []
@@ -983,22 +1448,120 @@ export default class WIO {
             processMessageQueue: function(){
               if( !window._wio.connected || window._wio.messageQueue.length === 0 ) return
               
-              console.log('[EMBEDDED] Processing', window._wio.messageQueue.length, 'queued messages')
+              console.debug('[EMBEDDED] Processing', window._wio.messageQueue.length, 'queued messages')
               const queue = [ ...window._wio.messageQueue ]
               window._wio.messageQueue = []
               
               queue.forEach( msg => {
-                try { window._wio.emit( msg._event, msg.payload, msg.fn ) }
+                try {
+                  msg.signed
+                    ? window._wio.emitSigned( msg._event, msg.payload, msg.fn )
+                    : window._wio.emit( msg._event, msg.payload, msg.fn )
+                }
                 catch( error ){ console.error('[EMBEDDED] Queue process error:', error ) }
               })
             },
+
+            canonicalFields: ${JSON.stringify( CANONICAL_FIELDS )},
+
+            // Must produce byte-identical output to canonicalMessage() on the
+            // native side — hence the shared field list above.
+            canonical: function( data, ts, nonce ){
+              const out = {}
+              window._wio.canonicalFields.forEach(function( field ){ out[field] = data[field] })
+              out.ts = ts
+              out.nonce = nonce
+              return JSON.stringify( out )
+            },
+
+            pruneNonces: function(){
+              const cutoff = Date.now() - window._wio.maxSkewMs
+              const stale = []
+              window._wio.seenNonces.forEach(function( ts, nonce ){ if( ts < cutoff ) stale.push( nonce ) })
+              stale.forEach(function( nonce ){ window._wio.seenNonces.delete( nonce ) })
+
+              if( window._wio.seenNonces.size <= window._wio.replayWindowSize ) return
+
+              const toRemove = window._wio.seenNonces.size - window._wio.replayWindowSize
+              const keys = Array.from( window._wio.seenNonces.keys() )
+              for( let k = 0; k < toRemove && k < keys.length; k++ )
+                window._wio.seenNonces.delete( keys[k] )
+            },
+
+            constantTimeEqual: function(a, b){
+              if( a.length !== b.length ) return false
+              let out = 0
+              for( let i = 0; i < a.length; i++ ) out |= a.charCodeAt(i) ^ b.charCodeAt(i)
+              return out === 0
+            },
+
+            hmacSha256Base64Url: async function(secret, message){
+              if( !secret ) throw new Error('Missing auth secret')
+              if( !window.crypto || !window.crypto.subtle ) throw new Error('WebCrypto unavailable')
+
+              const enc = new TextEncoder()
+              const key = await window.crypto.subtle.importKey(
+                'raw',
+                enc.encode(secret),
+                { name: 'HMAC', hash: 'SHA-256' },
+                false,
+                ['sign']
+              )
+              const sig = await window.crypto.subtle.sign('HMAC', key, enc.encode(message))
+              const bytes = new Uint8Array(sig)
+              let bin = ''
+              for( let i = 0; i < bytes.length; i++ ) bin += String.fromCharCode(bytes[i])
+              const b64 = btoa(bin).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/g, '')
+              return b64
+            },
+
+            sign: async function(unsigned){
+              if( !window._wio.authSecret ) return null
+              const ts = Date.now()
+              const nonce = (function(){
+                try {
+                  if( window.crypto && window.crypto.getRandomValues ){
+                    const buf = new Uint8Array(16)
+                    window.crypto.getRandomValues(buf)
+                    let out = ''
+                    for( let i = 0; i < buf.length; i++ ){
+                      out += ('0' + buf[i].toString(16)).slice(-2)
+                    }
+                    return out
+                  }
+                } catch(e){}
+                return (Math.random().toString(16).slice(2) + Math.random().toString(16).slice(2)).slice(0, 32)
+              })()
+              const sig = await window._wio.hmacSha256Base64Url(window._wio.authSecret, window._wio.canonical(unsigned, ts, nonce))
+              return { alg: 'HMAC-SHA256', ts, nonce, sig }
+            },
+
+            verify: async function(data){
+              if( !window._wio.authSecret ) return true
+              if( !data.auth ) return false
+              const { alg, ts, nonce, sig } = data.auth
+              if( alg !== 'HMAC-SHA256' ) return false
+
+              const now = Date.now()
+              if( Math.abs(now - ts) > window._wio.maxSkewMs ) return false
+
+              if( window._wio.seenNonces.has(nonce) ) return false
+
+              const expected = await window._wio.hmacSha256Base64Url(window._wio.authSecret, window._wio.canonical(data, ts, nonce))
+              if( !window._wio.constantTimeEqual(expected, sig) ) return false
+
+              window._wio.seenNonces.set(nonce, ts)
+              window._wio.pruneNonces()
+
+              return true
+            },
             
             handleMessage: function( data ){
               if( !data || !data._event ) return
               
               const { _event, payload, cid, token } = data
               
-              console.log('[EMBEDDED] Received:', _event )
+              console.debug('[EMBEDDED] Received:', _event )
               
               // Handle heartbeat response
               if( _event === '__heartbeat_response' )
@@ -1012,13 +1575,13 @@ export default class WIO {
               
               // Handle webview ready signal
               if( _event === '__webview_ready' ){
-                console.log('[EMBEDDED] WebView ready signal received')
+                console.debug('[EMBEDDED] WebView ready signal received')
                 return
               }
               
               // Handle ping from WEBVIEW
               if( _event === 'ping' ){
-                console.log('[EMBEDDED] Received ping, sending pong')
+                console.debug('[EMBEDDED] Received ping, sending pong')
                 window._wio.connectionToken = token
 
                 window._wio.emit('pong', { token: window._wio.connectionToken })
@@ -1032,7 +1595,7 @@ export default class WIO {
                   return
                 }
                 
-                console.log('[EMBEDDED] Connection established (received ack)')
+                console.debug('[EMBEDDED] Connection established (received ack)')
 
                 window._wio.connected = true
                 window._wio.processMessageQueue()
@@ -1040,6 +1603,18 @@ export default class WIO {
 
                 return
               }
+
+              // Auth verification (optional, if authSecret is set)
+              if( window._wio.authSecret ){
+                window._wio.verify(data).then(ok => {
+                  if( !ok ){
+                    console.error('[EMBEDDED] Auth verification failed for', _event)
+                    return
+                  }
+                  window._wio.fire( _event, payload, cid )
+                }).catch(err => console.error('[EMBEDDED] Auth error:', err))
+                return
+              }
               
               // Fire event listeners
               window._wio.fire( _event, payload, cid )
@@ -1050,21 +1625,21 @@ export default class WIO {
               const maxAttempts = 10
               const interval = 1000
               
-              console.log('[EMBEDDED] Starting ready announcements')
+              console.debug('[EMBEDDED] Starting ready announcements')
               
               const announce = () => {
                 if( window._wio.connected ){
-                  console.log('[EMBEDDED] Connected, stopping announcements')
+                  console.debug('[EMBEDDED] Connected, stopping announcements')
                   return
                 }
                 
                 attempts++
                 if( attempts > maxAttempts ){
-                  console.log('[EMBEDDED] Max announcement attempts reached')
+                  console.debug('[EMBEDDED] Max announcement attempts reached')
                   return
                 }
                 
-                console.log('[EMBEDDED] Announcing ready (attempt', attempts + '/' + maxAttempts + ')')
+                console.debug('[EMBEDDED] Announcing ready (attempt', attempts + '/' + maxAttempts + ')')
                 window._wio.emit('__embedded_ready')
                 
                 setTimeout( announce, interval )
@@ -1074,7 +1649,7 @@ export default class WIO {
             }
           }
 
-          console.log('[EMBEDDED] WIO bridge ready. Call window._wio.listen() to connect.')
+          console.debug('[EMBEDDED] WIO bridge ready. Call window._wio.listen() to connect.')
         }
         catch( error ){
           console.error('[EMBEDDED] Setup failed:', error )