@phnq/message/sign.js

Asynchronous, incremental messaging client and server

"use strict";
var __rest = (this && this.__rest) || function (s, e) {
    var t = {};
    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
        t[p] = s[p];
    if (s != null && typeof Object.getOwnPropertySymbols === "function")
        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
                t[p[i]] = s[p[i]];
        }
    return t;
};
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.verifyMessage = exports.signMessage = void 0;
const log_1 = require("@phnq/log");
const object_hash_1 = __importDefault(require("object-hash"));
const uuid_1 = require("uuid");
const log = (0, log_1.createLogger)('sign');
/**
 * JSON.stringify changes values sometime (i.e. removes keys with undefined value) which
 * affects the hash value. JSON.stringify(payload) has the effect of
 * normalizing the payload.
 */
const hashMessage = (message, u, salt) => (0, object_hash_1.default)({ m: { t: message.t, c: message.c, s: message.s, p: JSON.stringify(message.p), u }, salt });
const signMessage = (message, salt) => {
    const u = (0, uuid_1.v4)().replace(/-/g, '');
    return Object.assign(Object.assign({}, message), { z: [u, hashMessage(message, u, salt)].join(':') });
};
exports.signMessage = signMessage;
const verifyMessage = (message, salt) => {
    const { z } = message, zLess = __rest(message, ["z"]);
    const [u, h] = z ? z.split(':') : [];
    const verifiedZ = hashMessage(zLess, u, salt);
    if (h !== verifiedZ) {
        log.error('Failed to verify message: ', verifiedZ, message);
        throw new Error('Failed to verify message');
    }
    return message;
};
exports.verifyMessage = verifyMessage;