zerohelper-security 11.0.0

package/README.md

@@ -0,0 +1,70 @@
+# zerohelper-security
+
+Security utilities for ZeroHelper.
+
+## Installation
+
+```bash
+npm install zerohelper-security
+npm install bcrypt jsonwebtoken
+```
+
+## Usage
+
+```typescript
+import { 
+  hashPassword, verifyPassword,
+  generateJWT, verifyJWT,
+  encryptText, decryptText,
+  validateUUID, isPasswordStrong,
+  checkRateLimit
+} from 'zerohelper-security';
+
+// Password hashing
+const hash = hashPassword('myPassword');
+const valid = verifyPassword('myPassword', hash);
+
+// JWT tokens
+const token = generateJWT({ userId: 123 }, 'secret', '1h');
+const payload = verifyJWT(token, 'secret');
+
+// Encryption
+const { encryptedText, iv } = encryptText('secret', 'myKey');
+const decrypted = decryptText(encryptedText, 'myKey', iv);
+
+// Validation
+const isValid = validateUUID('550e8400-e29b-41d4-a716-446655440000');
+const isStrong = isPasswordStrong('Test@123');
+
+// Rate limiting
+const result = await checkRateLimit('user:123', {
+  limit: 10,
+  window: 60000,
+  storage: 'memory'
+});
+```
+
+## Functions
+
+### Password
+- `hashPassword(password)` - Hash with bcrypt
+- `verifyPassword(password, hash)` - Verify bcrypt hash
+
+### JWT
+- `generateJWT(payload, secret, expiresIn)` - Generate JWT
+- `verifyJWT(token, secret)` - Verify JWT
+
+### Encryption
+- `encryptText(text, secret)` - AES-256 encryption
+- `decryptText(encryptedText, secret, iv)` - AES-256 decryption
+
+### Validation
+- `validateUUID(uuid)` - Validate UUID v1-5
+- `isPasswordStrong(password)` - Check password strength
+
+### Rate Limiting
+- `checkRateLimit(key, options)` - Rate limit check
+
+## License
+
+ISC

package/dist/index.d.ts

@@ -0,0 +1,39 @@
+export declare function hashPassword(password: string): string;
+export declare function verifyPassword(password: string, hash: string): boolean;
+export declare function generateJWT(payload: object, secret: string, expiresIn?: string): string;
+export declare function verifyJWT(token: string, secret: string): any;
+export declare function generateSalt(): string;
+export declare function encryptText(text: string, secret: string): {
+    encryptedText: string;
+    iv: string;
+};
+export declare function decryptText(encryptedText: string, secret: string, ivHex: string): string;
+export declare function validateUUID(uuid: string): boolean;
+export declare function isPasswordStrong(password: string): boolean;
+interface RateLimitResult {
+    allowed: boolean;
+    remaining: number;
+    resetAt: number;
+}
+export declare function checkRateLimit(key: string, opts: {
+    limit: number;
+    window: number;
+    storage: 'memory' | 'redis';
+    redisClient?: any;
+}): Promise<RateLimitResult>;
+export declare const crypto_module: {
+    encryptText: typeof encryptText;
+    decryptText: typeof decryptText;
+    hashPassword: typeof hashPassword;
+    verifyPassword: typeof verifyPassword;
+    generateJWT: typeof generateJWT;
+    verifyJWT: typeof verifyJWT;
+    generateSalt: typeof generateSalt;
+    validateUUID: typeof validateUUID;
+    isPasswordStrong: typeof isPasswordStrong;
+};
+export declare const security_module: {
+    checkRateLimit: typeof checkRateLimit;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,MAAa,GAAG,MAAM,CAE7F;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAM5D;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAO/F;AAED,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,GAAG,CAAA;CAAE,GACtF,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,eAAO,MAAM,aAAa;;;;;;;;;;CAUzB,CAAC;AAEF,eAAO,MAAM,eAAe;;CAE3B,CAAC"}

package/dist/index.js

@@ -0,0 +1,105 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.security_module = exports.crypto_module = void 0;
+exports.hashPassword = hashPassword;
+exports.verifyPassword = verifyPassword;
+exports.generateJWT = generateJWT;
+exports.verifyJWT = verifyJWT;
+exports.generateSalt = generateSalt;
+exports.encryptText = encryptText;
+exports.decryptText = decryptText;
+exports.validateUUID = validateUUID;
+exports.isPasswordStrong = isPasswordStrong;
+exports.checkRateLimit = checkRateLimit;
+const crypto_1 = __importDefault(require("crypto"));
+const bcrypt_1 = __importDefault(require("bcrypt"));
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+function hashPassword(password) {
+    return bcrypt_1.default.hashSync(password, 10);
+}
+function verifyPassword(password, hash) {
+    return bcrypt_1.default.compareSync(password, hash);
+}
+function generateJWT(payload, secret, expiresIn = "1h") {
+    return jsonwebtoken_1.default.sign(payload, secret, { expiresIn: expiresIn });
+}
+function verifyJWT(token, secret) {
+    try {
+        return jsonwebtoken_1.default.verify(token, secret);
+    }
+    catch {
+        return null;
+    }
+}
+function generateSalt() {
+    return crypto_1.default.randomBytes(16).toString("hex");
+}
+function encryptText(text, secret) {
+    const key = crypto_1.default.pbkdf2Sync(secret, generateSalt(), 100000, 32, 'sha512');
+    const iv = crypto_1.default.randomBytes(16);
+    const cipher = crypto_1.default.createCipheriv("aes-256-cbc", key, iv);
+    let encrypted = cipher.update(text, "utf8", "hex");
+    encrypted += cipher.final("hex");
+    return { encryptedText: encrypted, iv: iv.toString('hex') };
+}
+function decryptText(encryptedText, secret, ivHex) {
+    const key = crypto_1.default.pbkdf2Sync(secret, generateSalt(), 100000, 32, 'sha512');
+    const iv = Buffer.from(ivHex, 'hex');
+    const decipher = crypto_1.default.createDecipheriv("aes-256-cbc", key, iv);
+    let decrypted = decipher.update(encryptedText, "hex", "utf8");
+    decrypted += decipher.final("utf8");
+    return decrypted;
+}
+function validateUUID(uuid) {
+    const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+    return uuidRegex.test(uuid);
+}
+function isPasswordStrong(password) {
+    const strongPasswordRegex = /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/;
+    return strongPasswordRegex.test(password);
+}
+const memoryStore = new Map();
+async function checkRateLimit(key, opts) {
+    const limit = opts.limit;
+    const windowMs = opts.window;
+    const storage = opts.storage;
+    const redisClient = opts.redisClient;
+    const now = Date.now();
+    const resetAt = now + windowMs;
+    if (storage === 'redis' && redisClient) {
+        try {
+            const current = await redisClient.incr(`ratelimit:${key}`);
+            if (current === 1) {
+                await redisClient.expire(`ratelimit:${key}`, Math.ceil(windowMs / 1000));
+            }
+            return { allowed: current <= limit, remaining: Math.max(0, limit - current), resetAt };
+        }
+        catch { }
+    }
+    const current = memoryStore.get(key) || { count: 0, resetAt: 0 };
+    if (now > current.resetAt) {
+        current.count = 0;
+        current.resetAt = resetAt;
+    }
+    current.count++;
+    memoryStore.set(key, current);
+    return { allowed: current.count <= limit, remaining: Math.max(0, limit - current.count), resetAt };
+}
+exports.crypto_module = {
+    encryptText,
+    decryptText,
+    hashPassword,
+    verifyPassword,
+    generateJWT,
+    verifyJWT,
+    generateSalt,
+    validateUUID,
+    isPasswordStrong,
+};
+exports.security_module = {
+    checkRateLimit,
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AAIA,oCAEC;AAED,wCAEC;AAED,kCAEC;AAED,8BAMC;AAED,oCAEC;AAED,kCAOC;AAED,kCAOC;AAED,oCAGC;AAED,4CAGC;AAUD,wCA6BC;AA7FD,oDAA4B;AAC5B,oDAA4B;AAC5B,gEAA+B;AAE/B,SAAgB,YAAY,CAAC,QAAgB;IAC3C,OAAO,gBAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,cAAc,CAAC,QAAgB,EAAE,IAAY;IAC3D,OAAO,gBAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,WAAW,CAAC,OAAe,EAAE,MAAc,EAAE,YAAoB,IAAI;IACnF,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAgB,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,SAAS,CAAC,KAAa,EAAE,MAAc;IACrD,IAAI,CAAC;QACH,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY,EAAE,MAAc;IACtD,MAAM,GAAG,GAAG,gBAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5E,MAAM,EAAE,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAgB,WAAW,CAAC,aAAqB,EAAE,MAAc,EAAE,KAAa;IAC9E,MAAM,GAAG,GAAG,gBAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,SAAS,GAAG,4EAA4E,CAAC;IAC/F,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,mBAAmB,GAAG,sEAAsE,CAAC;IACnG,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAQD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEnE,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,IAAuF;IAEvF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,GAAG,QAAQ,CAAC;IAE/B,IAAI,OAAO,KAAK,OAAO,IAAI,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC3D,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,MAAM,WAAW,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAClB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACrG,CAAC;AAEY,QAAA,aAAa,GAAG;IAC3B,WAAW;IACX,WAAW;IACX,YAAY;IACZ,cAAc;IACd,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,gBAAgB;CACjB,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,cAAc;CACf,CAAC"}

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "zerohelper-security",
+  "version": "11.0.0",
+  "description": "Security utilities for ZeroHelper",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": { "build": "tsc", "clean": "rm -rf dist" },
+  "keywords": ["zerohelper", "security", "crypto", "bcrypt", "jwt"],
+  "author": "Onure9e",
+  "license": "ISC",
+  "dependencies": { "bcrypt": "^5.1.1", "jsonwebtoken": "^9.0.2" },
+  "devDependencies": { "@types/bcrypt": "^5.0.2", "@types/jsonwebtoken": "^9.0.7", "@types/node": "^22.10.2", "typescript": "^5.7.2" },
+  "files": ["dist", "README.md"],
+  "publishConfig": { "access": "public" }
+}