@piggly/fastify-chassis
Version:
An ESM/CommonJS toolkit to help you to do common operations in your back-end applications with Fastify and NodeJS.
139 lines • 3.86 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.CSRFTokenService = void 0;
const ddd_toolkit_1 = require("@piggly/ddd-toolkit");
const utils_1 = require("../utils/index.js");
/**
* @file CSRF token service.
* @copyright Piggly Lab 2025
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
class CSRFTokenService {
/**
* Cookie.
*
* @type {CookieBuilderService}
* @protected
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
_cookie;
/**
* Secret.
*
* @type {string}
* @protected
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
_secret;
/**
* Constructor.
*
* @param {CookieBuilderService} cookie
* @param {string} secret
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
constructor(cookie, secret) {
this._cookie = cookie;
this._secret = secret;
}
/**
* Set the CSRF token as a cookie.
*
* @param {FastifyReply} reply
* @param {string} name
* @param {CookieOptions} options
* @returns {FastifyReply}
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
asCookie(reply, name = 'csrf_token', options) {
const token = this.asRaw();
this._cookie.set(reply, name, token, options);
return reply;
}
/**
* Set the CSRF token as a header.
*
* @param {FastifyReply} reply
* @param {string} header
* @returns {FastifyReply}
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
asHeader(reply, header = 'X-Csrf-Token') {
const token = this.asRaw();
reply.header(header, token);
return reply;
}
/**
* Generate a CSRF token.
*
* It will be generated following the format:
* <token>.<signature>
*
* @returns {string}
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
asRaw() {
const token = ddd_toolkit_1.CryptoService.generateClientSecret(32);
const signature = ddd_toolkit_1.CryptoService.sign(token, this._secret);
return `${token}.${signature}`;
}
/**
* Verify a CSRF token.
*
* @param {string} token
* @returns {boolean}
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
verify(token) {
if (!token) {
return false;
}
const [_token = '', _signature = ''] = String(token).split('.');
return ddd_toolkit_1.CryptoService.verify(_token, _signature, this._secret);
}
/**
* Verify a CSRF token from a cookie.
*
* @param {FastifyRequest} request
* @param {string} cookie
* @returns {boolean}
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
verifyCookie(request, cookie = 'csrf_token') {
const token = this._cookie.get(request, cookie, '');
return this.verify(token);
}
/**
* Verify a CSRF token from a header.
*
* @param {FastifyRequest} request
* @param {string} header
* @returns {boolean}
* @memberof CSRFTokenService
* @since 7.0.0
* @author Caique Araujo <caique@piggly.com.br>
*/
verifyHeader(request, header = 'X-Csrf-Token') {
const token = (0, utils_1.getHeaderValue)(request, header);
return this.verify(token);
}
}
exports.CSRFTokenService = CSRFTokenService;
//# sourceMappingURL=CSRFTokenService.js.map