{"version":3,"sources":["../src/index.ts","../src/crypto/Hmac.ts","../src/utils/buffer.ts","../src/utils/crypto.ts","../src/utils/error.ts","../src/crypto/SessionCrypto.ts","../src/session/Session.ts","../src/store/MemoryStore.ts","../src/store/SessionStore.ts","../src/plugin.ts"],"sourcesContent":["import fastifyPlugin from \"fastify-plugin\";\nimport { plugin } from \"./plugin\";\n\nexport { HMAC, Hmac, SessionCrypto, type SecretKey } from \"./crypto\";\nexport type { FastifySessionOptions } from \"./plugin\";\nexport { Session, type SessionData } from \"./session\";\nexport { MemoryStore, SessionStore } from \"./store\";\nexport { createError, CRYPTO_SPLIT_CHAR, ErrorWithCode } from \"./utils\";\n\nexport default fastifyPlugin(plugin, {\n fastify: \">=4.x\",\n name: \"fastify-session\",\n});\n","import crypto, { type BinaryToTextEncoding } from \"crypto\";\nimport { asBuffer, createError, CRYPTO_SPLIT_CHAR } from \"../utils\";\nimport type { SecretKey, SessionCrypto } from \"./SessionCrypto\";\n\nexport class Hmac implements SessionCrypto {\n public readonly protocol = \"/hmac\";\n public readonly stateless = false;\n private readonly algorithm: string;\n private readonly encoding: BinaryToTextEncoding;\n constructor(encoding: BinaryToTextEncoding = \"base64\", algorithm = \"sha256\") {\n this.encoding = encoding;\n this.algorithm = algorithm;\n }\n public deriveSecretKeys(key?: SecretKey, secret?: Buffer | string): Buffer[] {\n if (key) {\n return sanitizeSecretKeys(key, this.encoding);\n } else if (secret) {\n return [asBuffer(secret)];\n }\n throw createError(\"SecretKeyDerivation\", \"Failed to derive keys from options\");\n }\n public sealMessage(message: Buffer, secretKey: Buffer): string {\n return (\n message.toString(this.encoding) +\n CRYPTO_SPLIT_CHAR +\n crypto.createHmac(this.algorithm, secretKey).update(message).digest(this.encoding).replace(/=+$/, \"\")\n );\n }\n public unsealMessage(message: string, secretKeys: Buffer[]): { buffer: Buffer; rotated: boolean } {\n const splitCharIndex = message.lastIndexOf(CRYPTO_SPLIT_CHAR);\n if (splitCharIndex === -1) {\n throw createError(\"MalformedMessageError\", \"The message is malformed\");\n }\n const cleartext = Buffer.from(message.slice(0, splitCharIndex), this.encoding);\n // const signature = Buffer.from(message.slice(splitCharIndex + 1), this.encoding);\n // if (signature.length !== 64) {\n // throw createError('SignatureLengthError', 'The signature does not have the required length');\n // }\n\n let rotated = false;\n // const messageBuffer = Buffer.from(message);\n const success = secretKeys.some((secretKey, index) => {\n const signedBuffer = Buffer.from(this.sealMessage(cleartext, secretKey));\n const messageBuffer = Buffer.alloc(signedBuffer.length);\n messageBuffer.write(message);\n const verified = crypto.timingSafeEqual(signedBuffer, messageBuffer);\n rotated = verified && index > 0;\n return verified;\n });\n\n if (!success) {\n throw createError(\"VerifyError\", \"Unable to verify\");\n }\n\n return { buffer: cleartext, rotated };\n }\n}\n\nexport const HMAC = new Hmac();\n\nconst sanitizeSecretKeys = (key: SecretKey, encoding: BufferEncoding = \"base64\"): Buffer[] => {\n const secretKeys: Buffer[] = Array.isArray(key)\n ? key.map((v) => asBuffer(v, encoding))\n : [asBuffer(key, encoding)];\n return secretKeys;\n};\n","export const asBuffer = (maybeBuffer: Buffer | string, encoding: BufferEncoding = \"ascii\"): Buffer =>\n Buffer.isBuffer(maybeBuffer) ? maybeBuffer : Buffer.from(maybeBuffer, encoding);\n","import { randomBytes } from \"crypto\";\n\nexport const CRYPTO_SPLIT_CHAR = \".\";\n\nexport const generateRandomKey = (): Buffer => {\n return randomBytes(32);\n};\n\nexport const generateSalt = (): Buffer => {\n return randomBytes(32);\n};\n","export class ErrorWithCode extends Error {\n code: string;\n constructor(code: string, message?: string) {\n super(`${code}: ${message}`); // 'Error' breaks prototype chain here\n Object.setPrototypeOf(this, new.target.prototype); // restore prototype chain\n this.code = code;\n }\n}\n\nexport const createError = (code: string, message?: string): ErrorWithCode =>\n new ErrorWithCode(code, message);\n","export type SecretKey = Buffer | string | (Buffer | string)[];\n\nexport abstract class SessionCrypto {\n abstract readonly protocol: string;\n abstract readonly stateless: boolean;\n abstract deriveSecretKeys(key?: SecretKey, secret?: Buffer | string, salt?: Buffer | string): Buffer[];\n // Sign or encrypt a message (eg. stringified to cookie)\n abstract sealMessage(message: Buffer, secretKey: Buffer): string;\n // Verify or decrypt a message (eg. stringified from cookie)\n abstract unsealMessage(message: string, secretKeys: Buffer[]): { buffer: Buffer; rotated: boolean };\n}\n","import type { CookieSerializeOptions } from \"@fastify/cookie\";\nimport { nanoid } from \"nanoid\";\nimport assert from \"node:assert\";\nimport { HMAC } from \"../crypto/Hmac\";\nimport type { SessionCrypto } from \"../crypto/SessionCrypto\";\nimport { MEMORY_STORE, SessionStore } from \"../store\";\nimport { createError } from \"../utils\";\nimport type { SessionData } from \"./SessionData\";\n\nexport const kSessionData = Symbol(\"kSessionData\");\nexport const kCookieOptions = Symbol(\"kCookieOptions\");\n\nexport type SessionConfiguration = {\n cookieOptions?: CookieSerializeOptions;\n crypto?: SessionCrypto;\n store?: SessionStore | undefined;\n secretKeys: Buffer[];\n};\n\nexport type SessionOptions = CookieSerializeOptions & {\n id?: string;\n};\n\n/**\n * The Session class is responsible for managing user session data.\n * It can operate in a stateful or stateless mode depending on the configuration.\n */\nexport class Session {\n // Session metadata\n public readonly id: string;\n public created = false;\n public rotated = false;\n public changed = false;\n public deleted = false;\n public saved = false;\n public skipped = false;\n\n // Private instance fields\n #sessionData: Partial;\n #cookieOptions: CookieSerializeOptions;\n #expiry: number | null = null; // expiration timestamp in ms\n\n // Private static fields\n static #secretKeys: Buffer[];\n static #sessionCrypto: SessionCrypto;\n static #sessionStore?: SessionStore;\n static #globalCookieOptions: CookieSerializeOptions;\n static #configured = false;\n\n /**\n * This method is used to setup the Session class with global options.\n */\n static configure({\n secretKeys,\n crypto = HMAC,\n store = MEMORY_STORE,\n cookieOptions = {},\n }: SessionConfiguration): void {\n Session.#secretKeys = secretKeys;\n Session.#sessionCrypto = crypto;\n Session.#sessionStore = store;\n Session.#globalCookieOptions = cookieOptions;\n Session.#configured = true;\n }\n\n /**\n * Private constructor - instances should be created via the static `create` method\n */\n private constructor(data?: Partial, options: SessionOptions = {}) {\n const { id = nanoid(), ...cookieOptions } = options;\n this.#sessionData = data ?? {};\n this.#cookieOptions = { ...Session.#globalCookieOptions, ...cookieOptions };\n this.id = id;\n this.created = !data;\n }\n\n /**\n * Create a new session instance.\n * Checks if the class is configured before creating a session.\n */\n static async create(\n data?: Partial,\n options: SessionOptions = {},\n ): Promise {\n if (!Session.#configured) {\n throw createError(\n \"MissingConfiguration\",\n \"Session is not configured. Please call Session.configure before creating a Session instance.\",\n );\n }\n const session = new Session(data, options);\n await session.touch();\n return session;\n }\n\n /**\n * Decoding\n */\n\n /**\n * Create a Session from a serialized cookie.\n * Determines the type of the session (stateful/stateless) and delegates to the appropriate method.\n */\n static async fromCookie(cookie: string): Promise {\n const { buffer: cleartext, rotated } = Session.#sessionCrypto.unsealMessage(cookie, Session.#secretKeys);\n\n if (Session.#sessionCrypto.stateless) {\n return await Session.fromStatelessCookie(cleartext.toString(), rotated);\n }\n return await Session.fromStatefulCookie(cleartext.toString(), rotated);\n }\n\n /**\n * Create a Session from a stateless cookie. The session data is all stored in the cookie.\n */\n private static async fromStatelessCookie(payload: string, rotated: boolean): Promise {\n let data;\n try {\n data = JSON.parse(payload) as SessionData;\n } catch (error) {\n throw createError(\n \"InvalidData\",\n `Failed to parse session data from cookie. Original error: ${String(error)}`,\n );\n }\n const session = await Session.create(data, { id: data.id });\n session.rotated = rotated;\n return session;\n }\n\n /**\n * Create a Session from a stateful cookie. The cookie only contains the session id.\n * The rest of the session data is retrieved from the session store.\n */\n private static async fromStatefulCookie(sessionId: string, rotated: boolean): Promise {\n assert(Session.#sessionStore);\n const result = await Session.#sessionStore.get(sessionId);\n if (!result) {\n throw createError(\"SessionNotFound\", \"did not found a matching session in the store\");\n }\n const [data, expiry] = result;\n if (expiry && expiry <= Date.now()) {\n throw createError(\"ExpiredSession\", \"the store returned an expired session\");\n }\n const session = await Session.create(data, {\n id: sessionId,\n expires: expiry ? new Date(expiry) : undefined,\n });\n session.rotated = rotated;\n return session;\n }\n\n /**\n * Encoding\n */\n\n /**\n * Serialize the Session into a cookie.\n * The format of the cookie depends on whether the session is stateful or stateless.\n */\n // eslint-disable-next-line @typescript-eslint/require-await\n async toCookie(): Promise {\n const buffer = Buffer.from(\n Session.#sessionCrypto.stateless ? JSON.stringify({ ...this.#sessionData, id: this.id }) : this.id,\n );\n if (!Session.#secretKeys[0]) {\n throw createError(\"MissingSecretKey\", \"Missing secret key for session encryption\");\n }\n return Session.#sessionCrypto.sealMessage(buffer, Session.#secretKeys[0]);\n }\n\n /**\n * Refresh the expiration time of the session. Only applicable for stateful sessions.\n */\n async touch(): Promise {\n if (Session.#sessionCrypto.stateless) {\n return;\n }\n const { maxAge = Session.#globalCookieOptions.maxAge, expires = Session.#globalCookieOptions.expires } =\n this.#cookieOptions;\n if (maxAge) {\n const expiry = Date.now() + maxAge * 1000;\n // Get the longest lifespan between \"expires\" and \"maxAge\"\n this.#expiry = expires ? Math.max(expires.getTime(), expiry) : expiry;\n } else if (expires) {\n this.#expiry = expires.getTime();\n }\n assert(Session.#sessionStore);\n // Only relay touch to the store for existing sessions to propagate expiry changes\n if (!this.created && Session.#sessionStore.touch) {\n await Session.#sessionStore.touch(this.id, this.#expiry);\n }\n }\n\n /**\n * Delete the session.\n */\n async destroy(): Promise {\n this.deleted = true;\n if (Session.#sessionCrypto.stateless) {\n return;\n }\n // Only relay destroy to the store for existing sessions that have not been saved\n if (this.created && !this.saved) {\n return;\n }\n assert(Session.#sessionStore);\n await Session.#sessionStore.destroy(this.id);\n }\n\n /**\n * Save the session data to the session store. Only applicable for stateful sessions.\n */\n async save(): Promise {\n if (Session.#sessionCrypto.stateless) {\n return;\n }\n this.saved = true;\n // Save session to store with store-handled expiry\n assert(Session.#sessionStore);\n await Session.#sessionStore.set(this.id, this.#sessionData, this.#expiry);\n }\n\n get data(): SessionData {\n return this.#sessionData;\n }\n\n get expiry(): number | null {\n return this.#expiry;\n }\n\n /**\n * Get a value from the session data.\n */\n get(key: K): T[K] | undefined {\n return this.#sessionData[key];\n }\n\n set(key: K, value: T[K]): void {\n this.#sessionData[key] = value;\n this.changed = true;\n }\n\n get options(): CookieSerializeOptions {\n return this.#cookieOptions;\n }\n\n /**\n * Update the session cookie options.\n */\n setOptions(options: CookieSerializeOptions): void {\n Object.assign(this.#cookieOptions, options);\n }\n\n /**\n * Check if the session data is empty.\n */\n isEmpty(): boolean {\n return Object.keys(this.#sessionData).length === 0;\n }\n}\n","/* eslint-disable @typescript-eslint/require-await */\n\nimport { EventEmitter } from \"events\";\nimport type { SessionData, SessionStore } from \"./SessionStore\";\n\ntype StoredData = [T, number | null]; // [session data, expiry time in ms]\nexport type MemoryStoreOptions = { store?: Map>; prefix?: string };\n\nexport class MemoryStore extends EventEmitter implements SessionStore {\n private store: Map>;\n private readonly prefix: string;\n\n constructor({ store = new Map(), prefix = \"sess:\" }: MemoryStoreOptions = {}) {\n super();\n this.store = store;\n this.prefix = prefix;\n }\n\n private getKey(sessionId: string) {\n return `${this.prefix}${sessionId}`;\n }\n\n async set(sessionId: string, session: T, expiry: number | null = null): Promise {\n this.store.set(this.getKey(sessionId), [session, expiry]);\n }\n\n async get(sessionId: string): Promise<[T, number | null] | null> {\n const result = this.store.get(this.getKey(sessionId)) ?? null;\n if (!result) {\n return null;\n }\n const [session, expiry] = result;\n if (expiry && expiry <= Date.now()) {\n return null;\n }\n return [session, expiry];\n }\n\n async destroy(sessionId: string): Promise {\n this.store.delete(this.getKey(sessionId));\n }\n\n async touch(sessionId: string, expiry: number | null = null): Promise {\n const sessionData = await this.get(sessionId);\n if (!sessionData) {\n return;\n }\n const [session] = sessionData;\n await this.set(sessionId, session, expiry);\n }\n\n async all(): Promise> {\n return [...this.store.entries()].reduce>((soFar, [k, v]) => {\n soFar[k] = v[0];\n return soFar;\n }, {});\n }\n}\n\nexport const MEMORY_STORE = new MemoryStore();\n","import type { SessionData } from \"../session/SessionData\";\nexport type { SessionData };\n\nexport abstract class SessionStore {\n // Gets the session from the store given a session ID.\n abstract get(sid: string): Promise<[SessionData, number | null] | null>;\n\n // Upsert a session in the store given a session ID and `SessionData`.\n abstract set(sid: string, session: SessionData, expiry?: number | null): Promise;\n\n // Destroys the session with the given session ID.\n abstract destroy(sid: string): Promise;\n\n // Returns all sessions in the store\n async all?(): Promise | null>;\n\n // Returns the amount of sessions in the store.\n async length?(): Promise;\n\n // Delete all sessions from the store.\n async clear?(): Promise;\n\n // \"Touches\" a given session, resetting the idle timer.\n async touch?(sid: string, expiry?: number | null): Promise;\n}\n","/* eslint-disable @typescript-eslint/require-await */\nimport type { CookieSerializeOptions } from \"@fastify/cookie\";\nimport type { FastifyPluginAsync, FastifyRequest } from \"fastify\";\nimport { HMAC, SessionCrypto, type SecretKey } from \"./crypto\";\nimport { Session } from \"./session\";\nimport type { SessionStore } from \"./store\";\n\nexport const DEFAULT_COOKIE_NAME = \"Session\";\nexport const DEFAULT_COOKIE_PATH = \"/\";\n\nexport type FastifySessionOptions = {\n salt?: Buffer | string;\n secret?: Buffer | string;\n key?: SecretKey;\n cookieName?: string;\n cookie?: CookieSerializeOptions;\n store?: SessionStore;\n crypto?: SessionCrypto;\n saveUninitialized?: boolean;\n logBindings?: Record;\n};\n\nexport const plugin: FastifyPluginAsync = async (\n fastify,\n options = {},\n): Promise => {\n const {\n key,\n secret,\n salt,\n cookieName = DEFAULT_COOKIE_NAME,\n cookie: cookieOptions = {},\n store,\n crypto = HMAC as SessionCrypto,\n saveUninitialized = true,\n logBindings = { plugin: \"fastify-session\" },\n } = options;\n\n if (!key && !secret) {\n throw new Error(\"key or secret must specified\");\n }\n if (!crypto) {\n throw new Error(\"invalid crypto specified\");\n }\n\n if (!cookieOptions.path) {\n cookieOptions.path = DEFAULT_COOKIE_PATH;\n }\n const secretKeys: Buffer[] = crypto.deriveSecretKeys(key, secret, salt);\n Session.configure({ cookieOptions, secretKeys, store, crypto });\n\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n fastify.decorateRequest(\"session\", null!);\n async function destroySession(this: FastifyRequest) {\n if (!this.session) {\n return;\n }\n await this.session.destroy();\n }\n fastify.decorateRequest(\"destroySession\", destroySession);\n\n // decode/create a session for every request\n fastify.addHook(\"onRequest\", async (request) => {\n const { cookies, log } = request;\n const bindings = { ...logBindings, hook: \"onRequest\" };\n\n const cookie = cookies[cookieName];\n if (!cookie) {\n request.session = await Session.create();\n log.debug(\n { ...bindings, sessionId: request.session.id },\n \"There was no cookie, created an empty session\",\n );\n return;\n }\n\n try {\n log.debug(bindings, \"Found an existing cookie, attempting to decode session ...\");\n request.session = await Session.fromCookie(cookie);\n log.debug({ ...bindings, sessionId: request.session.id }, \"Session successfully decoded\");\n return;\n } catch (err) {\n request.session = await Session.create();\n log.warn(\n { ...bindings, err, sessionId: request.session.id },\n `Failed to decode existing cookie, created an empty session`,\n );\n return;\n }\n });\n\n // encode a cookie\n fastify.addHook(\"onSend\", async (request, reply) => {\n const { session, log } = request;\n const bindings = { ...logBindings, hook: \"onSend\" };\n\n if (!session) {\n log.debug(bindings, \"There was no session, leaving it as is\");\n return;\n } else if (session.deleted) {\n reply.setCookie(cookieName, \"\", {\n ...session.options,\n expires: new Date(0),\n maxAge: 0,\n });\n log.debug(\n { ...bindings, sessionId: session.id },\n `Deleted ${session.created ? \"newly created\" : \"existing\"} session`,\n );\n return;\n } else if (!saveUninitialized && session.isEmpty()) {\n log.debug(\n { ...bindings, sessionId: session.id },\n \"Created session is empty and won't be saved, leaving it as is\",\n );\n return;\n } else if (!session.changed && !session.created && !session.rotated) {\n log.debug(\n { ...bindings, sessionId: session.id },\n \"The existing session was not changed, leaving it as is\",\n );\n return;\n } else if (session.skipped) {\n log.debug({ ...bindings, sessionId: session.id }, \"Skipped session\");\n return;\n }\n\n if (session.created || session.changed) {\n log.debug(\n { ...bindings, sessionId: session.id },\n `About to save a ${session.created ? \"created\" : \"changed\"} session, saving ...`,\n );\n await session.save();\n log.debug(\n { ...bindings, sessionId: session.id },\n `${session.created ? \"Created\" : \"Changed\"} session successfully saved`,\n );\n }\n reply.setCookie(cookieName, await session.toCookie(), session.options);\n });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAA0B;;;ACA1B,oBAAkD;;;ACA3C,IAAM,WAAW,CAAC,aAA8B,WAA2B,YAChF,OAAO,SAAS,WAAW,IAAI,cAAc,OAAO,KAAK,aAAa,QAAQ;;;ACCzE,IAAM,oBAAoB;;;ACF1B,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC;AAAA,EACA,YAAY,MAAc,SAAkB;AAC1C,UAAM,GAAG,IAAI,KAAK,OAAO,EAAE;AAC3B,WAAO,eAAe,MAAM,WAAW,SAAS;AAChD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,cAAc,CAAC,MAAc,YACxC,IAAI,cAAc,MAAM,OAAO;;;AHN1B,IAAM,OAAN,MAAoC;AAAA,EACzB,WAAW;AAAA,EACX,YAAY;AAAA,EACX;AAAA,EACA;AAAA,EACjB,YAAY,WAAiC,UAAU,YAAY,UAAU;AAC3E,SAAK,WAAW;AAChB,SAAK,YAAY;AAAA,EACnB;AAAA,EACO,iBAAiB,KAAiB,QAAoC;AAC3E,QAAI,KAAK;AACP,aAAO,mBAAmB,KAAK,KAAK,QAAQ;AAAA,IAC9C,WAAW,QAAQ;AACjB,aAAO,CAAC,SAAS,MAAM,CAAC;AAAA,IAC1B;AACA,UAAM,YAAY,uBAAuB,oCAAoC;AAAA,EAC/E;AAAA,EACO,YAAY,SAAiB,WAA2B;AAC7D,WACE,QAAQ,SAAS,KAAK,QAAQ,IAC9B,oBACA,cAAAA,QAAO,WAAW,KAAK,WAAW,SAAS,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,QAAQ,EAAE,QAAQ,OAAO,EAAE;AAAA,EAExG;AAAA,EACO,cAAc,SAAiB,YAA4D;AAChG,UAAM,iBAAiB,QAAQ,YAAY,iBAAiB;AAC5D,QAAI,mBAAmB,IAAI;AACzB,YAAM,YAAY,yBAAyB,0BAA0B;AAAA,IACvE;AACA,UAAM,YAAY,OAAO,KAAK,QAAQ,MAAM,GAAG,cAAc,GAAG,KAAK,QAAQ;AAM7E,QAAI,UAAU;AAEd,UAAM,UAAU,WAAW,KAAK,CAAC,WAAW,UAAU;AACpD,YAAM,eAAe,OAAO,KAAK,KAAK,YAAY,WAAW,SAAS,CAAC;AACvE,YAAM,gBAAgB,OAAO,MAAM,aAAa,MAAM;AACtD,oBAAc,MAAM,OAAO;AAC3B,YAAM,WAAW,cAAAA,QAAO,gBAAgB,cAAc,aAAa;AACnE,gBAAU,YAAY,QAAQ;AAC9B,aAAO;AAAA,IACT,CAAC;AAED,QAAI,CAAC,SAAS;AACZ,YAAM,YAAY,eAAe,kBAAkB;AAAA,IACrD;AAEA,WAAO,EAAE,QAAQ,WAAW,QAAQ;AAAA,EACtC;AACF;AAEO,IAAM,OAAO,IAAI,KAAK;AAE7B,IAAM,qBAAqB,CAAC,KAAgB,WAA2B,aAAuB;AAC5F,QAAM,aAAuB,MAAM,QAAQ,GAAG,IAC1C,IAAI,IAAI,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,IACpC,CAAC,SAAS,KAAK,QAAQ,CAAC;AAC5B,SAAO;AACT;;;AI/DO,IAAe,gBAAf,MAA6B;AAQpC;;;ACTA,oBAAuB;AACvB,yBAAmB;;;ACAnB,oBAA6B;AAMtB,IAAM,cAAN,cAA+D,2BAAqC;AAAA,EACjG;AAAA,EACS;AAAA,EAEjB,YAAY,EAAE,QAAQ,oBAAI,IAAI,GAAG,SAAS,QAAQ,IAA2B,CAAC,GAAG;AAC/E,UAAM;AACN,SAAK,QAAQ;AACb,SAAK,SAAS;AAAA,EAChB;AAAA,EAEQ,OAAO,WAAmB;AAChC,WAAO,GAAG,KAAK,MAAM,GAAG,SAAS;AAAA,EACnC;AAAA,EAEA,MAAM,IAAI,WAAmB,SAAY,SAAwB,MAAqB;AACpF,SAAK,MAAM,IAAI,KAAK,OAAO,SAAS,GAAG,CAAC,SAAS,MAAM,CAAC;AAAA,EAC1D;AAAA,EAEA,MAAM,IAAI,WAAuD;AAC/D,UAAM,SAAS,KAAK,MAAM,IAAI,KAAK,OAAO,SAAS,CAAC,KAAK;AACzD,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AACA,UAAM,CAAC,SAAS,MAAM,IAAI;AAC1B,QAAI,UAAU,UAAU,KAAK,IAAI,GAAG;AAClC,aAAO;AAAA,IACT;AACA,WAAO,CAAC,SAAS,MAAM;AAAA,EACzB;AAAA,EAEA,MAAM,QAAQ,WAAkC;AAC9C,SAAK,MAAM,OAAO,KAAK,OAAO,SAAS,CAAC;AAAA,EAC1C;AAAA,EAEA,MAAM,MAAM,WAAmB,SAAwB,MAAqB;AAC1E,UAAM,cAAc,MAAM,KAAK,IAAI,SAAS;AAC5C,QAAI,CAAC,aAAa;AAChB;AAAA,IACF;AACA,UAAM,CAAC,OAAO,IAAI;AAClB,UAAM,KAAK,IAAI,WAAW,SAAS,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAM,MAA4C;AAChD,WAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,EAAE,OAAoC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM;AACtF,YAAM,CAAC,IAAI,EAAE,CAAC;AACd,aAAO;AAAA,IACT,GAAG,CAAC,CAAC;AAAA,EACP;AACF;AAEO,IAAM,eAAe,IAAI,YAAY;;;ACxDrC,IAAe,eAAf,MAA4B;AAqBnC;;;AFfO,IAAM,eAAe,OAAO,cAAc;AAC1C,IAAM,iBAAiB,OAAO,gBAAgB;AAiB9C,IAAM,UAAN,MAAM,SAA6C;AAAA;AAAA,EAExC;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,UAAU;AAAA;AAAA,EAGjB;AAAA,EACA;AAAA,EACA,UAAyB;AAAA;AAAA;AAAA,EAGzB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,OAAO;AAAA,EACP,OAAO;AAAA,EACP,OAAO,cAAc;AAAA;AAAA;AAAA;AAAA,EAKrB,OAAO,UAAU;AAAA,IACf;AAAA,IACA,QAAAC,UAAS;AAAA,IACT,QAAQ;AAAA,IACR,gBAAgB,CAAC;AAAA,EACnB,GAA+B;AAC7B,aAAQ,cAAc;AACtB,aAAQ,iBAAiBA;AACzB,aAAQ,gBAAgB;AACxB,aAAQ,uBAAuB;AAC/B,aAAQ,cAAc;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,MAAmB,UAA0B,CAAC,GAAG;AACnE,UAAM,EAAE,SAAK,sBAAO,GAAG,GAAG,cAAc,IAAI;AAC5C,SAAK,eAAe,QAAQ,CAAC;AAC7B,SAAK,iBAAiB,EAAE,GAAG,SAAQ,sBAAsB,GAAG,cAAc;AAC1E,SAAK,KAAK;AACV,SAAK,UAAU,CAAC;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAa,OACX,MACA,UAA0B,CAAC,GACT;AAClB,QAAI,CAAC,SAAQ,aAAa;AACxB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,IAAI,SAAQ,MAAM,OAAO;AACzC,UAAM,QAAQ,MAAM;AACpB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAa,WAAW,QAAkC;AACxD,UAAM,EAAE,QAAQ,WAAW,QAAQ,IAAI,SAAQ,eAAe,cAAc,QAAQ,SAAQ,WAAW;AAEvG,QAAI,SAAQ,eAAe,WAAW;AACpC,aAAO,MAAM,SAAQ,oBAAoB,UAAU,SAAS,GAAG,OAAO;AAAA,IACxE;AACA,WAAO,MAAM,SAAQ,mBAAmB,UAAU,SAAS,GAAG,OAAO;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA,EAKA,aAAqB,oBAAoB,SAAiB,SAAoC;AAC5F,QAAI;AACJ,QAAI;AACF,aAAO,KAAK,MAAM,OAAO;AAAA,IAC3B,SAAS,OAAO;AACd,YAAM;AAAA,QACJ;AAAA,QACA,6DAA6D,OAAO,KAAK,CAAC;AAAA,MAC5E;AAAA,IACF;AACA,UAAM,UAAU,MAAM,SAAQ,OAAO,MAAM,EAAE,IAAI,KAAK,GAAG,CAAC;AAC1D,YAAQ,UAAU;AAClB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAqB,mBAAmB,WAAmB,SAAoC;AAC7F,2BAAAC,SAAO,SAAQ,aAAa;AAC5B,UAAM,SAAS,MAAM,SAAQ,cAAc,IAAI,SAAS;AACxD,QAAI,CAAC,QAAQ;AACX,YAAM,YAAY,mBAAmB,+CAA+C;AAAA,IACtF;AACA,UAAM,CAAC,MAAM,MAAM,IAAI;AACvB,QAAI,UAAU,UAAU,KAAK,IAAI,GAAG;AAClC,YAAM,YAAY,kBAAkB,uCAAuC;AAAA,IAC7E;AACA,UAAM,UAAU,MAAM,SAAQ,OAAO,MAAM;AAAA,MACzC,IAAI;AAAA,MACJ,SAAS,SAAS,IAAI,KAAK,MAAM,IAAI;AAAA,IACvC,CAAC;AACD,YAAQ,UAAU;AAClB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,WAA4B;AAChC,UAAM,SAAS,OAAO;AAAA,MACpB,SAAQ,eAAe,YAAY,KAAK,UAAU,EAAE,GAAG,KAAK,cAAc,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK;AAAA,IAClG;AACA,QAAI,CAAC,SAAQ,YAAY,CAAC,GAAG;AAC3B,YAAM,YAAY,oBAAoB,2CAA2C;AAAA,IACnF;AACA,WAAO,SAAQ,eAAe,YAAY,QAAQ,SAAQ,YAAY,CAAC,CAAC;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAuB;AAC3B,QAAI,SAAQ,eAAe,WAAW;AACpC;AAAA,IACF;AACA,UAAM,EAAE,SAAS,SAAQ,qBAAqB,QAAQ,UAAU,SAAQ,qBAAqB,QAAQ,IACnG,KAAK;AACP,QAAI,QAAQ;AACV,YAAM,SAAS,KAAK,IAAI,IAAI,SAAS;AAErC,WAAK,UAAU,UAAU,KAAK,IAAI,QAAQ,QAAQ,GAAG,MAAM,IAAI;AAAA,IACjE,WAAW,SAAS;AAClB,WAAK,UAAU,QAAQ,QAAQ;AAAA,IACjC;AACA,2BAAAA,SAAO,SAAQ,aAAa;AAE5B,QAAI,CAAC,KAAK,WAAW,SAAQ,cAAc,OAAO;AAChD,YAAM,SAAQ,cAAc,MAAM,KAAK,IAAI,KAAK,OAAO;AAAA,IACzD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAyB;AAC7B,SAAK,UAAU;AACf,QAAI,SAAQ,eAAe,WAAW;AACpC;AAAA,IACF;AAEA,QAAI,KAAK,WAAW,CAAC,KAAK,OAAO;AAC/B;AAAA,IACF;AACA,2BAAAA,SAAO,SAAQ,aAAa;AAC5B,UAAM,SAAQ,cAAc,QAAQ,KAAK,EAAE;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAsB;AAC1B,QAAI,SAAQ,eAAe,WAAW;AACpC;AAAA,IACF;AACA,SAAK,QAAQ;AAEb,2BAAAA,SAAO,SAAQ,aAAa;AAC5B,UAAM,SAAQ,cAAc,IAAI,KAAK,IAAI,KAAK,cAAc,KAAK,OAAO;AAAA,EAC1E;AAAA,EAEA,IAAI,OAAoB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,SAAwB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,IAAiC,KAA0B;AACzD,WAAO,KAAK,aAAa,GAAG;AAAA,EAC9B;AAAA,EAEA,IAAiC,KAAQ,OAAmB;AAC1D,SAAK,aAAa,GAAG,IAAI;AACzB,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,IAAI,UAAkC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,WAAW,SAAuC;AAChD,WAAO,OAAO,KAAK,gBAAgB,OAAO;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,UAAmB;AACjB,WAAO,OAAO,KAAK,KAAK,YAAY,EAAE,WAAW;AAAA,EACnD;AACF;;;AG7PO,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAc5B,IAAM,SAAoD,OAC/D,SACA,UAAU,CAAC,MACO;AAClB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,QAAQ,gBAAgB,CAAC;AAAA,IACzB;AAAA,IACA,QAAAC,UAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,cAAc,EAAE,QAAQ,kBAAkB;AAAA,EAC5C,IAAI;AAEJ,MAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,UAAM,IAAI,MAAM,8BAA8B;AAAA,EAChD;AACA,MAAI,CAACA,SAAQ;AACX,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC5C;AAEA,MAAI,CAAC,cAAc,MAAM;AACvB,kBAAc,OAAO;AAAA,EACvB;AACA,QAAM,aAAuBA,QAAO,iBAAiB,KAAK,QAAQ,IAAI;AACtE,UAAQ,UAAU,EAAE,eAAe,YAAY,OAAO,QAAAA,QAAO,CAAC;AAG9D,UAAQ,gBAAgB,WAAW,IAAK;AACxC,iBAAe,iBAAqC;AAClD,QAAI,CAAC,KAAK,SAAS;AACjB;AAAA,IACF;AACA,UAAM,KAAK,QAAQ,QAAQ;AAAA,EAC7B;AACA,UAAQ,gBAAgB,kBAAkB,cAAc;AAGxD,UAAQ,QAAQ,aAAa,OAAO,YAAY;AAC9C,UAAM,EAAE,SAAS,IAAI,IAAI;AACzB,UAAM,WAAW,EAAE,GAAG,aAAa,MAAM,YAAY;AAErD,UAAM,SAAS,QAAQ,UAAU;AACjC,QAAI,CAAC,QAAQ;AACX,cAAQ,UAAU,MAAM,QAAQ,OAAO;AACvC,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,WAAW,QAAQ,QAAQ,GAAG;AAAA,QAC7C;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI;AACF,UAAI,MAAM,UAAU,4DAA4D;AAChF,cAAQ,UAAU,MAAM,QAAQ,WAAW,MAAM;AACjD,UAAI,MAAM,EAAE,GAAG,UAAU,WAAW,QAAQ,QAAQ,GAAG,GAAG,8BAA8B;AACxF;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,UAAU,MAAM,QAAQ,OAAO;AACvC,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,KAAK,WAAW,QAAQ,QAAQ,GAAG;AAAA,QAClD;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF,CAAC;AAGD,UAAQ,QAAQ,UAAU,OAAO,SAAS,UAAU;AAClD,UAAM,EAAE,SAAS,IAAI,IAAI;AACzB,UAAM,WAAW,EAAE,GAAG,aAAa,MAAM,SAAS;AAElD,QAAI,CAAC,SAAS;AACZ,UAAI,MAAM,UAAU,wCAAwC;AAC5D;AAAA,IACF,WAAW,QAAQ,SAAS;AAC1B,YAAM,UAAU,YAAY,IAAI;AAAA,QAC9B,GAAG,QAAQ;AAAA,QACX,SAAS,oBAAI,KAAK,CAAC;AAAA,QACnB,QAAQ;AAAA,MACV,CAAC;AACD,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,WAAW,QAAQ,GAAG;AAAA,QACrC,WAAW,QAAQ,UAAU,kBAAkB,UAAU;AAAA,MAC3D;AACA;AAAA,IACF,WAAW,CAAC,qBAAqB,QAAQ,QAAQ,GAAG;AAClD,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,WAAW,QAAQ,GAAG;AAAA,QACrC;AAAA,MACF;AACA;AAAA,IACF,WAAW,CAAC,QAAQ,WAAW,CAAC,QAAQ,WAAW,CAAC,QAAQ,SAAS;AACnE,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,WAAW,QAAQ,GAAG;AAAA,QACrC;AAAA,MACF;AACA;AAAA,IACF,WAAW,QAAQ,SAAS;AAC1B,UAAI,MAAM,EAAE,GAAG,UAAU,WAAW,QAAQ,GAAG,GAAG,iBAAiB;AACnE;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW,QAAQ,SAAS;AACtC,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,WAAW,QAAQ,GAAG;AAAA,QACrC,mBAAmB,QAAQ,UAAU,YAAY,SAAS;AAAA,MAC5D;AACA,YAAM,QAAQ,KAAK;AACnB,UAAI;AAAA,QACF,EAAE,GAAG,UAAU,WAAW,QAAQ,GAAG;AAAA,QACrC,GAAG,QAAQ,UAAU,YAAY,SAAS;AAAA,MAC5C;AAAA,IACF;AACA,UAAM,UAAU,YAAY,MAAM,QAAQ,SAAS,GAAG,QAAQ,OAAO;AAAA,EACvE,CAAC;AACH;;;ATnIA,IAAO,kBAAQ,sBAAAC,SAAc,QAAQ;AAAA,EACnC,SAAS;AAAA,EACT,MAAM;AACR,CAAC;","names":["crypto","crypto","assert","crypto","fastifyPlugin"]}