meo-forkcy-utils/lib/cryptography.js

A handy utils package with time, random, string helpers, etc...

const crypto = require("crypto");

/**
 * Decode a JSON Web Token (JWT) into its header, payload, and signature parts.
 *
 * @param {string} jwt - The JWT string in the format "header.payload.signature".
 * @returns {{ header: object, payload: object, signatureB64: string }}
 */
function decodeJWT(jwt) {
  const [headerB64, payloadB64, signatureB64] = jwt.split(".");

  const header = JSON.parse(Buffer.from(headerB64, "base64").toString("utf-8"));
  const payload = JSON.parse(
    Buffer.from(payloadB64, "base64").toString("utf-8")
  );

  return { header, payload, signatureB64 };
}

/**
 * Encode string to Base64
 * @param {string} str
 * @returns {string}
 */
function btoa(str) {
  return Buffer.from(str, "utf-8").toString("base64");
}

/**
 * Decode Base64 to string
 * @param {string} b64
 * @returns {string}
 */
function atob(b64) {
  return Buffer.from(b64, "base64").toString("utf-8");
}

/**
 * Convert Buffer or string to hex string
 * @param {Buffer|string} data
 * @returns {string}
 */
function toHex(data) {
  return Buffer.from(data).toString("hex");
}

/**
 * Generate UUID v4 (random)
 * @returns {string}
 */
function uuidv4() {
  const rnd = crypto.randomBytes(16);
  rnd[6] = (rnd[6] & 0x0f) | 0x40; // version 4
  rnd[8] = (rnd[8] & 0x3f) | 0x80; // variant 10
  return [...rnd]
    .map((b, i) =>
      [4, 6, 8, 10].includes(i)
        ? "-" + b.toString(16).padStart(2, "0")
        : b.toString(16).padStart(2, "0")
    )
    .join("");
}

/**
 * Generate UUID v3 (MD5-based)
 * @param {string} name
 * @param {string} namespace - UUID string
 * @returns {string}
 */
function uuidv3(name, namespace) {
  const nsBytes = uuidToBytes(namespace);
  const hash = crypto
    .createHash("md5")
    .update(Buffer.concat([nsBytes, Buffer.from(name)]))
    .digest();
  hash[6] = (hash[6] & 0x0f) | 0x30; // version 3
  hash[8] = (hash[8] & 0x3f) | 0x80; // variant 10
  return bytesToUUID(hash);
}

/**
 * Generate UUID v5 (SHA1-based)
 * @param {string} name
 * @param {string} namespace - UUID string
 * @returns {string}
 */
function uuidv5(name, namespace) {
  const nsBytes = uuidToBytes(namespace);
  const hash = crypto
    .createHash("sha1")
    .update(Buffer.concat([nsBytes, Buffer.from(name)]))
    .digest()
    .slice(0, 16);
  hash[6] = (hash[6] & 0x0f) | 0x50; // version 5
  hash[8] = (hash[8] & 0x3f) | 0x80; // variant 10
  return bytesToUUID(hash);
}

/**
 * Convert UUID string to bytes
 * @param {string} uuid
 * @returns {Buffer}
 */
function uuidToBytes(uuid) {
  return Buffer.from(uuid.replace(/-/g, ""), "hex");
}

/**
 * Convert 16-byte buffer to UUID string
 * @param {Buffer} buf
 * @returns {string}
 */
function bytesToUUID(buf) {
  return [...buf]
    .map((b, i) =>
      [4, 6, 8, 10].includes(i)
        ? "-" + b.toString(16).padStart(2, "0")
        : b.toString(16).padStart(2, "0")
    )
    .join("");
}

module.exports = {
  decodeJWT,
  btoa,
  atob,
  toHex,
  uuidv4,
  uuidv3,
  uuidv5,
};