fix: verifyHandler incorrect implementation with verifyServer

Author: ovx

README.md

@@ -98,6 +98,12 @@ bun run --port 3000 examples/hono-example.ts
 deno serve --allow-net --sloppy-imports --port 3000 examples/hono-example.ts
 ```
 
+**Hono + Sentinel remote verification example (Bun):**
+
+```sh
+bun run --port 3000 examples/hono-sentinel-example.ts
+```
+
 ## Breaking Changes (v2)
 
 Version 2 introduces a new proof-of-work mechanism and challenge format. See the [PoW documentation](https://playground.altcha.org/#/about) for details.

dist/cjs/v2/frameworks/express.js

@@ -35,7 +35,7 @@ function create(options) {
     });
     const verifyHandler = asyncHandler(async (req, res) => {
         const payload = await getPayloadFromRequest(req);
-        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions);
+        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store);
         res.json(result);
     });
     const getPayloadFromRequest = async (req, cookieName) => {

dist/cjs/v2/frameworks/fastify.js

@@ -54,7 +54,7 @@ function create(options) {
     };
     const verifyHandler = async (request, reply) => {
         const payload = await getPayloadFromRequest(request);
-        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions);
+        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store);
         return reply.send(result);
     };
     const middleware = (options = {}) => {

dist/cjs/v2/frameworks/h3.js

@@ -35,7 +35,7 @@ function create(options) {
         };
     });
     const verifyHandler = (0, h3_1.defineEventHandler)(async (event) => {
-        return await (0, shared_js_1.verify)(await getPayloadFromEvent(event), deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions);
+        return await (0, shared_js_1.verify)(await getPayloadFromEvent(event), deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store);
     });
     const getPayloadFromEvent = async (event, cookieName) => {
         let payload = undefined;

dist/cjs/v2/frameworks/hono.js

@@ -35,7 +35,7 @@ function create(options) {
         });
     };
     const verifyHandler = async (c) => {
-        return c.json(await (0, shared_js_1.verify)(await getPayloadFromContext(c), deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions));
+        return c.json(await (0, shared_js_1.verify)(await getPayloadFromContext(c), deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store));
     };
     const getPayloadFromContext = async (c, cookieName) => {
         let payload = undefined;

dist/cjs/v2/frameworks/nestjs.d.ts

@@ -41,7 +41,9 @@ export declare class AltchaService {
         } | undefined;
     }>;
     getPayloadFromRequest(req: Request, cookieName?: string): string | undefined;
-    verify(payload: string | undefined): Promise<{
+    verify(payload: string | undefined, options?: {
+        allowRemote?: boolean;
+    }): Promise<{
         error: string | null;
         payload: import("../types.js").Payload | import("../types.js").ServerSignaturePayload | null;
         verification: import("../types.js").VerifySolutionResult | import("../types.js").VerifyServerResult | null;

dist/cjs/v2/frameworks/nestjs.js

@@ -36,7 +36,7 @@ function createAltchaMiddleware(options = {}) {
         }
         async use(req, res, next) {
             const payload = this.altchaService.getPayloadFromRequest(req);
-            const { error, payload: resultPayload, verification, } = await this.altchaService.verify(payload);
+            const { error, payload: resultPayload, verification, } = await this.altchaService.verify(payload, { allowRemote: true });
             req.altcha = {
                 error,
                 payload: resultPayload,
@@ -96,8 +96,8 @@ let AltchaService = class AltchaService {
         }
         return req.body?.[this.fieldName];
     }
-    async verify(payload) {
-        return (0, shared_js_1.verify)(payload, this.deriveKey, this.hmacSignatureSecret, this.hmacKeySignatureSecret, this.store, this.verifyServerOptions);
+    async verify(payload, options = {}) {
+        return (0, shared_js_1.verify)(payload, this.deriveKey, this.hmacSignatureSecret, this.hmacKeySignatureSecret, this.store, options.allowRemote ? this.verifyServerOptions : undefined);
     }
 };
 exports.AltchaService = AltchaService;
@@ -143,7 +143,7 @@ let AltchaMiddleware = class AltchaMiddleware {
     }
     async use(req, res, next) {
         const payload = this.altchaService.getPayloadFromRequest(req, this.altchaService.setCookie?.name);
-        const { error, payload: resultPayload, verification, } = await this.altchaService.verify(payload);
+        const { error, payload: resultPayload, verification, } = await this.altchaService.verify(payload, { allowRemote: true });
         req.altcha = {
             error,
             payload: resultPayload,

dist/cjs/v2/frameworks/nextjs.js

@@ -48,7 +48,7 @@ function create(options) {
     }
     async function verifyHandler(req) {
         const payload = await getPayloadFromRequest(req);
-        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions);
+        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store);
         return Response.json(result);
     }
     async function getPayloadFromRequest(req, cookieName) {

dist/cjs/v2/frameworks/sveltekit.js

@@ -49,7 +49,7 @@ function create(options) {
     }
     async function verifyHandler(event) {
         const payload = await getPayloadFromEvent(event, fieldName);
-        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions);
+        const result = await (0, shared_js_1.verify)(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store);
         return (0, kit_1.json)(result);
     }
     function createHandle(middlewareOptions = {}) {

dist/esm/v2/frameworks/express.js

@@ -29,7 +29,7 @@ export function create(options) {
     });
     const verifyHandler = asyncHandler(async (req, res) => {
         const payload = await getPayloadFromRequest(req);
-        const result = await verify(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store, verifyServerOptions);
+        const result = await verify(payload, deriveKey, hmacSignatureSecret, hmacKeySignatureSecret, store);
         res.json(result);
     });
     const getPayloadFromRequest = async (req, cookieName) => {