@addtodoist/twitter-autohook/dist/oauth/index.js

Automatically setup and serve webhooks for the Twitter Account Activity API

import { URL } from 'url';
import qs from 'querystring';
import crypto from 'crypto';
const encode = (str) => encodeURIComponent(str)
    .replace(/!/ug, '%21')
    .replace(/\*/ug, '%2A')
    .replace(/\(/ug, '%28')
    .replace(/\)/ug, '%29')
    .replace(/'/ug, '%27');
const oAuthFunctions = {
    nonceFn: () => crypto.randomBytes(16).toString('base64'),
    timestampFn: () => Math.floor(Date.now() / 1000).toString(),
};
const setNonceFn = (fn) => {
    if (typeof fn !== 'function') {
        throw new TypeError('OAuth: setNonceFn expects a function');
    }
    oAuthFunctions.nonceFn = fn;
};
const setTimestampFn = (fn) => {
    if (typeof fn !== 'function') {
        throw new TypeError('OAuth: setTimestampFn expects a function');
    }
    oAuthFunctions.timestampFn = fn;
};
const parameters = (url, auth, body = {}) => {
    let params = {};
    const urlObject = new URL(url);
    for (const key of urlObject.searchParams.keys()) {
        params[key] = urlObject.searchParams.get(key);
    }
    if (typeof body === 'string') {
        body = qs.parse(body);
    }
    // eslint-disable-next-line prefer-reflect
    if (Object.prototype.toString.call(body) !== '[object Object]') {
        throw new TypeError('OAuth: body parameters must be string or object');
    }
    params = Object.assign(params, body);
    params.oauth_consumer_key = auth.consumer_key;
    params.oauth_token = auth.token;
    params.oauth_nonce = oAuthFunctions.nonceFn();
    params.oauth_timestamp = oAuthFunctions.timestampFn();
    params.oauth_signature_method = 'HMAC-SHA1';
    params.oauth_version = '1.0';
    return params;
};
const parameterString = (url, auth, params) => {
    const sortedKeys = Object.keys(params).sort();
    const sortedParams = [];
    for (const key of sortedKeys) {
        sortedParams.push(`${key}=${encode(params[key])}`);
    }
    return sortedParams.join('&');
};
const hmacSha1Signature = (baseString, signingKey) => crypto
    .createHmac('sha1', signingKey)
    .update(baseString)
    .digest('base64');
const signatureBaseString = (url, method, paramString) => {
    const urlObject = new URL(url);
    const baseURL = urlObject.origin + urlObject.pathname;
    return `${method.toUpperCase()}&${encode(baseURL)}&${encode(paramString)}`;
};
const createSigningKey = ({ consumer_secret, token_secret }) => `${encode(consumer_secret)}&${encode(token_secret)}`;
const header = (url, auth, signature, params) => {
    params.oauth_signature = signature;
    const sortedKeys = Object.keys(params).sort();
    const sortedParams = [];
    for (const key of sortedKeys) {
        if (key.indexOf('oauth_') !== 0) {
            // eslint-disable-next-line no-continue
            continue;
        }
        sortedParams.push(`${key}="${encode(params[key])}"`);
    }
    return `OAuth ${sortedParams.join(', ')}`;
};
const oauth = (url, method, { oauth }, body) => {
    const params = parameters(url, oauth, body);
    const paramString = parameterString(url, oauth, params);
    const baseString = signatureBaseString(url, method, paramString);
    const signingKey = createSigningKey(oauth);
    const signature = hmacSha1Signature(baseString, signingKey);
    const signatureHeader = header(url, oauth, signature, params);
    return signatureHeader;
};
export { oauth, setNonceFn, setTimestampFn };