@catandbox/schrodinger-web-adapter 0.1.28 → 0.1.32

package/dist/signer.d.ts

@@ -1,2 +1,29 @@
-export { signRequest, sha256Hex, buildCanonicalString } from "@catandbox/schrodinger-shopify-adapter/signer";
-export type { SignRequestInput, SignedHeaders } from "@catandbox/schrodinger-shopify-adapter/signer";
+export interface SignRequestInput {
+    appId: string;
+    keyId: string;
+    keySecret: string;
+    timestamp: number;
+    nonce: string;
+    method: string;
+    path: string;
+    queryString?: string;
+    rawBody?: string;
+}
+export interface SignedHeaders {
+    "X-Sch-AppId": string;
+    "X-Sch-KeyId": string;
+    "X-Sch-Timestamp": string;
+    "X-Sch-Nonce": string;
+    "Content-SHA256": string;
+    "X-Sch-Signature": string;
+}
+export declare function sha256Hex(rawBody: string): Promise<string>;
+export declare function buildCanonicalString(input: {
+    timestamp: number;
+    nonce: string;
+    method: string;
+    path: string;
+    queryString: string;
+    contentSha256: string;
+}): string;
+export declare function signRequest(input: SignRequestInput): Promise<SignedHeaders>;

package/dist/signer.js

@@ -1 +1,51 @@
-export { signRequest, sha256Hex, buildCanonicalString } from "@catandbox/schrodinger-shopify-adapter/signer";
+const encoder = new TextEncoder();
+function toHex(data) {
+    return Array.from(new Uint8Array(data), (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function toBase64Url(data) {
+    let binary = "";
+    for (const byte of new Uint8Array(data)) {
+        binary += String.fromCharCode(byte);
+    }
+    const base64 = btoa(binary);
+    return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+export async function sha256Hex(rawBody) {
+    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(rawBody));
+    return toHex(digest);
+}
+export function buildCanonicalString(input) {
+    return [
+        "v1",
+        String(input.timestamp),
+        input.nonce,
+        input.method.toUpperCase(),
+        input.path,
+        input.queryString,
+        input.contentSha256,
+        ""
+    ].join("\n");
+}
+export async function signRequest(input) {
+    const queryString = input.queryString ?? "";
+    const rawBody = input.rawBody ?? "";
+    const contentSha256 = await sha256Hex(rawBody);
+    const canonical = buildCanonicalString({
+        timestamp: input.timestamp,
+        nonce: input.nonce,
+        method: input.method,
+        path: input.path,
+        queryString,
+        contentSha256
+    });
+    const key = await crypto.subtle.importKey("raw", encoder.encode(input.keySecret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(canonical));
+    return {
+        "X-Sch-AppId": input.appId,
+        "X-Sch-KeyId": input.keyId,
+        "X-Sch-Timestamp": String(input.timestamp),
+        "X-Sch-Nonce": input.nonce,
+        "Content-SHA256": contentSha256,
+        "X-Sch-Signature": toBase64Url(signature)
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catandbox/schrodinger-web-adapter",
-  "version": "0.1.28",
+  "version": "0.1.32",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",
@@ -34,7 +34,6 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@catandbox/schrodinger-contracts": "^0.1.0",
-    "@catandbox/schrodinger-shopify-adapter": "^0.1.0"
+    "@catandbox/schrodinger-contracts": "^0.1.0"
   }
 }