@nordicsemiconductor/asset-tracker-cloud-aws
Version:
A reference implementation of a serverless backend for an IoT product developed using AWS CDK in TypeScript.
318 lines (317 loc) • 14.2 kB
JavaScript
function _array_like_to_array(arr, len) {
if (len == null || len > arr.length) len = arr.length;
for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
return arr2;
}
function _array_without_holes(arr) {
if (Array.isArray(arr)) return _array_like_to_array(arr);
}
function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
try {
var info = gen[key](arg);
var value = info.value;
} catch (error) {
reject(error);
return;
}
if (info.done) {
resolve(value);
} else {
Promise.resolve(value).then(_next, _throw);
}
}
function _async_to_generator(fn) {
return function() {
var self = this, args = arguments;
return new Promise(function(resolve, reject) {
var gen = fn.apply(self, args);
function _next(value) {
asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
}
function _throw(err) {
asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
}
_next(undefined);
});
};
}
function _iterable_to_array(iter) {
if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
}
function _non_iterable_spread() {
throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
}
function _to_consumable_array(arr) {
return _array_without_holes(arr) || _iterable_to_array(arr) || _unsupported_iterable_to_array(arr) || _non_iterable_spread();
}
function _unsupported_iterable_to_array(o, minLen) {
if (!o) return;
if (typeof o === "string") return _array_like_to_array(o, minLen);
var n = Object.prototype.toString.call(o).slice(8, -1);
if (n === "Object" && o.constructor) n = o.constructor.name;
if (n === "Map" || n === "Set") return Array.from(n);
if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
}
function _ts_generator(thisArg, body) {
var f, y, t, g, _ = {
label: 0,
sent: function() {
if (t[0] & 1) throw t[1];
return t[1];
},
trys: [],
ops: []
};
return g = {
next: verb(0),
"throw": verb(1),
"return": verb(2)
}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
return this;
}), g;
function verb(n) {
return function(v) {
return step([
n,
v
]);
};
}
function step(op) {
if (f) throw new TypeError("Generator is already executing.");
while(_)try {
if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
if (y = 0, t) op = [
op[0] & 2,
t.value
];
switch(op[0]){
case 0:
case 1:
t = op;
break;
case 4:
_.label++;
return {
value: op[1],
done: false
};
case 5:
_.label++;
y = op[1];
op = [
0
];
continue;
case 7:
op = _.ops.pop();
_.trys.pop();
continue;
default:
if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
_ = 0;
continue;
}
if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
_.label = op[1];
break;
}
if (op[0] === 6 && _.label < t[1]) {
_.label = t[1];
t = op;
break;
}
if (t && _.label < t[2]) {
_.label = t[2];
_.ops.push(op);
break;
}
if (t[2]) _.ops.pop();
_.trys.pop();
continue;
}
op = body.call(thisArg, _);
} catch (e) {
op = [
6,
e
];
y = 0;
} finally{
f = t = 0;
}
if (op[0] & 5) throw op[1];
return {
value: op[0] ? op[1] : void 0,
done: true
};
}
}
import { randomWords } from '@nordicsemiconductor/random-words';
import chalk from 'chalk';
import { promises as fs } from 'fs';
import path from 'path';
import { createDeviceCertificate, defaultDeviceCertificateValidityInDays } from '../jitp/createDeviceCertificate.js';
import { createSimulatorKeyAndCSR } from '../jitp/createSimulatorKeyAndCSR.js';
import { getCurrentCA } from '../jitp/currentCA.js';
import { deviceFileLocations } from '../jitp/deviceFileLocations.js';
export var defaultSecTag = 42;
export var createSimulatorCertCommand = function(param) {
var mqttEndpoint = param.mqttEndpoint, certsDir = param.certsDir;
return {
command: 'create-simulator-cert',
options: [
{
flags: '-d, --deviceId <deviceId>',
description: 'Device ID, if left blank a random ID will be generated'
},
{
flags: '-e, --expires <expires>',
description: "Validity of device certificate in days. Defaults to ".concat(defaultDeviceCertificateValidityInDays, " days.")
},
{
flags: '-c, --ca <caId>',
description: "ID of the CA certificate to use. Defaults to the last created one."
},
{
flags: '-s, --sec-tag <secTag>',
description: "Use this secTag, defaults to ".concat(defaultSecTag)
},
{
flags: '-m, --mqtt-endpoint <mqttEndpoint>',
description: "Use this MQTT endpoint, defaults to ".concat(mqttEndpoint)
}
],
action: function() {
var _ref = _async_to_generator(function(param) {
var deviceId, expires, caId, secTag, customEndpoint, id, effectiveSecTag, effectiveMqttEndpoint, awsIotRootCA, deviceFiles, _, _tmp, _1, _tmp1, certJSON;
return _ts_generator(this, function(_state) {
switch(_state.label){
case 0:
deviceId = param.deviceId, expires = param.expires, caId = param.caId, secTag = param.secTag, customEndpoint = param.mqttEndpoint;
id = deviceId !== null && deviceId !== void 0 ? deviceId : randomWords({
numWords: 3
}).join('-');
effectiveSecTag = secTag !== null && secTag !== void 0 ? secTag : defaultSecTag;
effectiveMqttEndpoint = customEndpoint !== null && customEndpoint !== void 0 ? customEndpoint : mqttEndpoint;
return [
4,
createSimulatorKeyAndCSR({
deviceId: id,
certsDir: certsDir,
log: function() {
for(var _len = arguments.length, message = new Array(_len), _key = 0; _key < _len; _key++){
message[_key] = arguments[_key];
}
var _console;
(_console = console).log.apply(_console, _to_consumable_array(message.map(function(m) {
return chalk.magenta(m);
})));
},
debug: function() {
for(var _len = arguments.length, message = new Array(_len), _key = 0; _key < _len; _key++){
message[_key] = arguments[_key];
}
var _console;
(_console = console).log.apply(_console, _to_consumable_array(message.map(function(m) {
return chalk.cyan(m);
})));
}
})
];
case 1:
_state.sent();
return [
4,
fs.readFile(path.resolve(process.cwd(), 'data', 'AmazonRootCA1.pem'), 'utf-8')
];
case 2:
awsIotRootCA = _state.sent();
return [
4,
createDeviceCertificate({
deviceId: id,
certsDir: certsDir,
caId: caId !== null && caId !== void 0 ? caId : getCurrentCA({
certsDir: certsDir
}),
log: function() {
for(var _len = arguments.length, message = new Array(_len), _key = 0; _key < _len; _key++){
message[_key] = arguments[_key];
}
var _console;
(_console = console).log.apply(_console, _to_consumable_array(message.map(function(m) {
return chalk.magenta(m);
})));
},
debug: function() {
for(var _len = arguments.length, message = new Array(_len), _key = 0; _key < _len; _key++){
message[_key] = arguments[_key];
}
var _console;
(_console = console).log.apply(_console, _to_consumable_array(message.map(function(m) {
return chalk.cyan(m);
})));
},
daysValid: expires !== undefined ? parseInt(expires, 10) : undefined
})
];
case 3:
_state.sent();
// Writes the JSON file which works with the Certificate Manager of the LTA Link Monitor
deviceFiles = deviceFileLocations({
certsDir: certsDir,
deviceId: id
});
_ = fs.writeFile;
_tmp = [
deviceFiles.simulatorJSON
];
_1 = JSON.stringify;
_tmp1 = {
caCert: awsIotRootCA
};
return [
4,
fs.readFile(deviceFiles.certWithCA, 'utf-8')
];
case 4:
_tmp1.clientCert = _state.sent();
return [
4,
fs.readFile(deviceFiles.key, 'utf-8')
];
case 5:
return [
4,
_.apply(fs, _tmp.concat([
_1.apply(JSON, [
(_tmp1.privateKey = _state.sent(), _tmp1.clientId = id, _tmp1.brokerHostname = effectiveMqttEndpoint, _tmp1.secTag = effectiveSecTag, _tmp1),
null,
2
]),
'utf-8'
]))
];
case 6:
_state.sent();
console.log(chalk.green("Certificate for simulator ".concat(chalk.yellow(id), " generated.")));
certJSON = deviceFileLocations({
certsDir: certsDir,
deviceId: id
}).simulatorJSON;
console.log();
console.log(chalk.green('You can now connect to the broker:'), chalk.greenBright('npm exec -- @nordicsemiconductor/asset-tracker-cloud-device-simulator-aws'), chalk.blueBright(certJSON));
return [
2
];
}
});
});
return function(_) {
return _ref.apply(this, arguments);
};
}(),
help: 'Generate a certificate for a device, signed with the CA.'
};
};