feat: release OTP and Passkey Tools 0.1.0

2026-08-19 12:19:35 +02:00
commit f1cb2d7151
67 changed files with 12802 additions and 0 deletions
@@ -0,0 +1,74 @@
+import { createServer } from "node:http";
+import { readFile, stat } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "..",
+  "dist",
+);
+const nestedPrefix = "/deep/nested/auth/";
+const mediaTypes = new Map([
+  [".css", "text/css; charset=utf-8"],
+  [".html", "text/html; charset=utf-8"],
+  [".js", "text/javascript; charset=utf-8"],
+  [".json", "application/json; charset=utf-8"],
+  [".svg", "image/svg+xml"],
+  [".md", "text/markdown; charset=utf-8"],
+  [".txt", "text/plain; charset=utf-8"],
+]);
+const headers = {
+  "Content-Security-Policy":
+    "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'",
+  "Cross-Origin-Opener-Policy": "same-origin",
+  "Cross-Origin-Resource-Policy": "same-origin",
+  "Permissions-Policy": "camera=(), microphone=(), geolocation=(), usb=()",
+  "Referrer-Policy": "no-referrer",
+  "X-Content-Type-Options": "nosniff",
+};
+
+function safeFile(requestPath) {
+  const decoded = decodeURIComponent(requestPath);
+  const relative = decoded.startsWith(nestedPrefix)
+    ? decoded.slice(nestedPrefix.length)
+    : decoded.replace(/^\/+/, "");
+  const normalized = path.posix.normalize(relative || "index.html");
+  if (
+    normalized === ".." ||
+    normalized.startsWith("../") ||
+    path.isAbsolute(normalized)
+  )
+    return null;
+  return path.join(root, normalized);
+}
+
+const server = createServer(async (request, response) => {
+  try {
+    const url = new URL(request.url ?? "/", "http://127.0.0.1");
+    let file = safeFile(url.pathname);
+    if (!file) {
+      response.writeHead(400).end("Bad request");
+      return;
+    }
+    if ((await stat(file).catch(() => null))?.isDirectory())
+      file = path.join(file, "index.html");
+    const content = await readFile(file);
+    response.writeHead(200, {
+      "Content-Type":
+        mediaTypes.get(path.extname(file)) ?? "application/octet-stream",
+      "Cache-Control": "no-cache",
+      ...headers,
+    });
+    response.end(content);
+  } catch {
+    response.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
+    response.end("Not found");
+  }
+});
+
+server.listen(4173, "127.0.0.1", () =>
+  console.log(
+    "Authentication Tools test server listening on http://127.0.0.1:4173",
+  ),
+);