cleanup

Author: nicknisi

src/common/crypto/seal.ts

@@ -17,9 +17,6 @@ interface UnsealOptions {
   ttl?: number;
 }
 
-/**
- * Parse an iron-session seal to extract the version
- */
 function parseSeal(seal: string): {
   sealWithoutVersion: string;
   tokenVersion: number | null;
@@ -31,15 +28,6 @@ function parseSeal(seal: string): {
   return { sealWithoutVersion, tokenVersion };
 }
 
-/**
- * Seal (encrypt) data in a format compatible with iron-session.
- *
- * @param data - The data to seal
- * @param options - Sealing options
- * @param options.password - Password for encryption (must be at least 32 characters)
- * @param options.ttl - Time to live in seconds (default: 0 = no expiration)
- * @returns The sealed string
- */
 export async function sealData(
   data: unknown,
   { password, ttl = 0 }: SealOptions,
@@ -51,30 +39,19 @@ export async function sealData(
 
   const seal = await ironSeal(data, passwordObj, {
     ...defaults,
-    ttl: ttl * 1000, // Convert seconds to milliseconds
-    encode: JSON.stringify, // Preserve v1 lenient serialization
+    ttl: ttl * 1000,
+    encode: JSON.stringify,
   });
 
-  // Add the version delimiter exactly like iron-session does
   return `${seal}${VERSION_DELIMITER}${CURRENT_MAJOR_VERSION}`;
 }
 
-/**
- * Unseal (decrypt) data that was sealed with iron-session or sealData.
- *
- * @param encryptedData - The sealed string to decrypt
- * @param options - Unsealing options
- * @param options.password - Password for decryption
- * @param options.ttl - Time to live in seconds (default: 0 = no expiration check)
- * @returns The unsealed data, or empty object if unsealing fails
- */
 export async function unsealData<T = unknown>(
   encryptedData: string,
   { password, ttl = 0 }: UnsealOptions,
 ): Promise<T> {
   const { sealWithoutVersion, tokenVersion } = parseSeal(encryptedData);
 
-  // Format password as a map like iron-session expects
   const passwordMap = { 1: password };
 
   let data: unknown;
@@ -85,7 +62,6 @@ export async function unsealData<T = unknown>(
         ttl: ttl * 1000,
       })) ?? {};
   } catch (error) {
-    // Match iron-session's behavior: return empty object for known errors
     if (
       error instanceof Error &&
       /^(Expired seal|Bad hmac value|Cannot find password|Incorrect number of sealed components)/.test(
@@ -97,11 +73,9 @@ export async function unsealData<T = unknown>(
     throw error;
   }
 
-  // Handle token version for backwards compatibility
   if (tokenVersion === 2) {
     return data as T;
   } else if (tokenVersion !== null) {
-    // For older token versions, extract the persistent property
     const record = data as Record<string, unknown>;
     return (record.persistent ?? data) as T;
   }