otpauth.node.min.mjs 8.3 KB

123456789
  1. //! otpauth 9.3.1 | (c) Héctor Molinero Fernández | MIT | https://github.com/hectorm/otpauth
  2. /// <reference types="./otpauth.d.ts" />
  3. // @ts-nocheck
  4. import*as e from"node:crypto";const t=(()=>{if("object"==typeof globalThis)return globalThis;Object.defineProperty(Object.prototype,"__GLOBALTHIS__",{get(){return this},configurable:!0});try{if("undefined"!=typeof __GLOBALTHIS__)return __GLOBALTHIS__}finally{delete Object.prototype.__GLOBALTHIS__}return"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:void 0})(),r="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",i=e=>{let t=e.length;for(;"="===e[t-1];)--t;const i=(t<e.length?e.substring(0,t):e).toUpperCase(),s=new ArrayBuffer(5*i.length/8|0),n=new Uint8Array(s);let o=0,a=0,l=0;for(let e=0;e<i.length;e++){const t=r.indexOf(i[e]);if(-1===t)throw new TypeError(`Invalid character found: ${i[e]}`);a=a<<5|t,o+=5,o>=8&&(o-=8,n[l++]=a>>>o)}return n},s=e=>{let t=0,i=0,s="";for(let n=0;n<e.length;n++)for(i=i<<8|e[n],t+=8;t>=5;)s+=r[i>>>t-5&31],t-=5;return t>0&&(s+=r[i<<5-t&31]),s},n=e=>{const t=new ArrayBuffer(e.length/2),r=new Uint8Array(t);for(let t=0;t<e.length;t+=2)r[t/2]=parseInt(e.substring(t,t+2),16);return r},o=e=>{let t="";for(let r=0;r<e.length;r++){const i=e[r].toString(16);1===i.length&&(t+="0"),t+=i}return t.toUpperCase()},a=e=>{const t=new ArrayBuffer(e.length),r=new Uint8Array(t);for(let t=0;t<e.length;t++)r[t]=255&e.charCodeAt(t);return r},l=e=>{let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(e[r]);return t},u=t.TextEncoder?new t.TextEncoder:null,h=t.TextDecoder?new t.TextDecoder:null,d=e=>{if(!u)throw new Error("Encoding API not available");return u.encode(e)},f=e=>{if(!h)throw new Error("Encoding API not available");return h.decode(e)};class c{static fromLatin1(e){return new c({buffer:a(e).buffer})}static fromUTF8(e){return new c({buffer:d(e).buffer})}static fromBase32(e){return new c({buffer:i(e).buffer})}static fromHex(e){return new c({buffer:n(e).buffer})}get buffer(){return this.bytes.buffer}get latin1(){return Object.defineProperty(this,"latin1",{enumerable:!0,writable:!1,configurable:!1,value:l(this.bytes)}),this.latin1}get utf8(){
  5. return Object.defineProperty(this,"utf8",{enumerable:!0,writable:!1,configurable:!1,value:f(this.bytes)}),this.utf8}get base32(){return Object.defineProperty(this,"base32",{enumerable:!0,writable:!1,configurable:!1,value:s(this.bytes)}),this.base32}get hex(){return Object.defineProperty(this,"hex",{enumerable:!0,writable:!1,configurable:!1,value:o(this.bytes)}),this.hex}constructor({buffer:r,size:i=20}={}){this.bytes=void 0===r?(r=>{if(e?.randomBytes)return e.randomBytes(r);if(!t.crypto?.getRandomValues)throw new Error("Cryptography API not available");return t.crypto.getRandomValues(new Uint8Array(r))})(i):new Uint8Array(r),Object.defineProperty(this,"bytes",{enumerable:!0,writable:!1,configurable:!1,value:this.bytes})}}class g{static get defaults(){return{issuer:"",label:"OTPAuth",issuerInLabel:!0,algorithm:"SHA1",digits:6,counter:0,window:1}}static generate({secret:r,algorithm:i=g.defaults.algorithm,digits:s=g.defaults.digits,counter:n=g.defaults.counter}){const o=((r,i,s)=>{if(e?.createHmac){const n=e.createHmac(r,t.Buffer.from(i));return n.update(t.Buffer.from(s)),n.digest()}throw new Error("Missing HMAC function")})(i,r.bytes,(e=>{const t=new ArrayBuffer(8),r=new Uint8Array(t);let i=e;for(let e=7;e>=0&&0!==i;e--)r[e]=255&i,i-=r[e],i/=256;return r})(n)),a=15&o[o.byteLength-1];return(((127&o[a])<<24|(255&o[a+1])<<16|(255&o[a+2])<<8|255&o[a+3])%10**s).toString().padStart(s,"0")}generate({counter:e=this.counter++}={}){return g.generate({secret:this.secret,algorithm:this.algorithm,digits:this.digits,counter:e})}static validate({token:r,secret:i,algorithm:s,digits:n,counter:o=g.defaults.counter,window:a=g.defaults.window}){if(r.length!==n)return null;let l=null;const u=a=>{const u=g.generate({secret:i,algorithm:s,digits:n,counter:a});((r,i)=>{if(e?.timingSafeEqual)return e.timingSafeEqual(t.Buffer.from(r),t.Buffer.from(i));{if(r.length!==i.length)throw new TypeError("Input strings must have the same length");let e=-1,t=0;for(;++e<r.length;)t|=r.charCodeAt(e)^i.charCodeAt(e);return 0===t}})(r,u)&&(l=a-o)};u(o)
  6. ;for(let e=1;e<=a&&null===l&&(u(o-e),null===l)&&(u(o+e),null===l);++e);return l}validate({token:e,counter:t=this.counter,window:r}){return g.validate({token:e,secret:this.secret,algorithm:this.algorithm,digits:this.digits,counter:t,window:r})}toString(){const e=encodeURIComponent;return"otpauth://hotp/"+(this.issuer.length>0?this.issuerInLabel?`${e(this.issuer)}:${e(this.label)}?issuer=${e(this.issuer)}&`:`${e(this.label)}?issuer=${e(this.issuer)}&`:`${e(this.label)}?`)+`secret=${e(this.secret.base32)}&`+`algorithm=${e(this.algorithm)}&`+`digits=${e(this.digits)}&`+`counter=${e(this.counter)}`}constructor({issuer:e=g.defaults.issuer,label:t=g.defaults.label,issuerInLabel:r=g.defaults.issuerInLabel,secret:i=new c,algorithm:s=g.defaults.algorithm,digits:n=g.defaults.digits,counter:o=g.defaults.counter}={}){this.issuer=e,this.label=t,this.issuerInLabel=r,this.secret="string"==typeof i?c.fromBase32(i):i,this.algorithm=s.toUpperCase(),this.digits=n,this.counter=o}}class p{static get defaults(){return{issuer:"",label:"OTPAuth",issuerInLabel:!0,algorithm:"SHA1",digits:6,period:30,window:1}}static generate({secret:e,algorithm:t,digits:r,period:i=p.defaults.period,timestamp:s=Date.now()}){return g.generate({secret:e,algorithm:t,digits:r,counter:Math.floor(s/1e3/i)})}generate({timestamp:e=Date.now()}={}){return p.generate({secret:this.secret,algorithm:this.algorithm,digits:this.digits,period:this.period,timestamp:e})}static validate({token:e,secret:t,algorithm:r,digits:i,period:s=p.defaults.period,timestamp:n=Date.now(),window:o}){return g.validate({token:e,secret:t,algorithm:r,digits:i,counter:Math.floor(n/1e3/s),window:o})}validate({token:e,timestamp:t,window:r}){return p.validate({token:e,secret:this.secret,algorithm:this.algorithm,digits:this.digits,period:this.period,timestamp:t,window:r})}toString(){const e=encodeURIComponent
  7. ;return"otpauth://totp/"+(this.issuer.length>0?this.issuerInLabel?`${e(this.issuer)}:${e(this.label)}?issuer=${e(this.issuer)}&`:`${e(this.label)}?issuer=${e(this.issuer)}&`:`${e(this.label)}?`)+`secret=${e(this.secret.base32)}&`+`algorithm=${e(this.algorithm)}&`+`digits=${e(this.digits)}&`+`period=${e(this.period)}`}constructor({issuer:e=p.defaults.issuer,label:t=p.defaults.label,issuerInLabel:r=p.defaults.issuerInLabel,secret:i=new c,algorithm:s=p.defaults.algorithm,digits:n=p.defaults.digits,period:o=p.defaults.period}={}){this.issuer=e,this.label=t,this.issuerInLabel=r,this.secret="string"==typeof i?c.fromBase32(i):i,this.algorithm=s.toUpperCase(),this.digits=n,this.period=o}}const b=/^otpauth:\/\/([ht]otp)\/(.+)\?([A-Z0-9.~_-]+=[^?&]*(?:&[A-Z0-9.~_-]+=[^?&]*)*)$/i,m=/^[2-7A-Z]+=*$/i,w=/^SHA(?:1|224|256|384|512|3-224|3-256|3-384|3-512)$/i,y=/^[+-]?\d+$/,I=/^\+?[1-9]\d*$/;class v{static parse(e){let t;try{t=e.match(b)}catch(e){}if(!Array.isArray(t))throw new URIError("Invalid URI format");const r=t[1].toLowerCase(),i=t[2].split(/(?::|%3A) *(.+)/i,2).map(decodeURIComponent),s=t[3].split("&").reduce(((e,t)=>{const r=t.split(/=(.*)/,2).map(decodeURIComponent),i=r[0].toLowerCase(),s=r[1],n=e;return n[i]=s,n}),{});let n;const o={};if("hotp"===r){if(n=g,void 0===s.counter||!y.test(s.counter))throw new TypeError("Missing or invalid 'counter' parameter");o.counter=parseInt(s.counter,10)}else{if("totp"!==r)throw new TypeError("Unknown OTP type");if(n=p,void 0!==s.period){if(!I.test(s.period))throw new TypeError("Invalid 'period' parameter");o.period=parseInt(s.period,10)}}if(void 0!==s.issuer&&(o.issuer=s.issuer),2===i.length?(o.label=i[1],void 0===o.issuer||""===o.issuer?o.issuer=i[0]:""===i[0]&&(o.issuerInLabel=!1)):(o.label=i[0],void 0!==o.issuer&&""!==o.issuer&&(o.issuerInLabel=!1)),void 0===s.secret||!m.test(s.secret))throw new TypeError("Missing or invalid 'secret' parameter");if(o.secret=s.secret,void 0!==s.algorithm){if(!w.test(s.algorithm))throw new TypeError("Invalid 'algorithm' parameter")
  8. ;o.algorithm=s.algorithm}if(void 0!==s.digits){if(!I.test(s.digits))throw new TypeError("Invalid 'digits' parameter");o.digits=parseInt(s.digits,10)}return new n(o)}static stringify(e){if(e instanceof g||e instanceof p)return e.toString();throw new TypeError("Invalid 'HOTP/TOTP' object")}}const A="9.3.1";export{g as HOTP,c as Secret,p as TOTP,v as URI,A as version};
  9. //# sourceMappingURL=otpauth.node.min.mjs.map