oidc-provider/lib/helpers/certificate_thumbprint.js

OAuth 2.0 Authorization Server implementation for Node.js with OpenID Connect

import * as crypto from 'node:crypto';

import * as base64url from './base64url.js';

export default function certThumbprint(cert) {
  let digest;
  if (cert instanceof crypto.X509Certificate) {
    digest = crypto.createHash('sha256').update(cert.raw).digest();
  } else {
    digest = crypto.createHash('sha256')
      .update(
        Buffer.from(
          cert.replace(/(?:-----(?:BEGIN|END) CERTIFICATE-----|\s|=)/g, ''),
          'base64',
        ),
      )
      .digest();
  }

  return base64url.encodeBuffer(digest);
}