@cedarjs/api 6.0.0-canary.2789 → 6.0.0-canary.2792
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bins/cedar.js +14 -0
- package/dist/bins/cfw.js +14 -0
- package/dist/bins/redwood.js +14 -0
- package/dist/bins/tsc.js +8 -0
- package/dist/index.js +3 -3
- package/package.json +15 -39
- package/dist/cjs/auth/index.d.ts +0 -64
- package/dist/cjs/auth/index.d.ts.map +0 -1
- package/dist/cjs/auth/index.js +0 -143
- package/dist/cjs/auth/parseJWT.d.ts +0 -6
- package/dist/cjs/auth/parseJWT.d.ts.map +0 -1
- package/dist/cjs/auth/parseJWT.js +0 -57
- package/dist/cjs/auth/verifiers/base64Sha1Verifier.d.ts +0 -18
- package/dist/cjs/auth/verifiers/base64Sha1Verifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/base64Sha1Verifier.js +0 -77
- package/dist/cjs/auth/verifiers/base64Sha256Verifier.d.ts +0 -18
- package/dist/cjs/auth/verifiers/base64Sha256Verifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/base64Sha256Verifier.js +0 -77
- package/dist/cjs/auth/verifiers/common.d.ts +0 -112
- package/dist/cjs/auth/verifiers/common.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/common.js +0 -89
- package/dist/cjs/auth/verifiers/index.d.ts +0 -8
- package/dist/cjs/auth/verifiers/index.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/index.js +0 -39
- package/dist/cjs/auth/verifiers/jwtVerifier.d.ts +0 -18
- package/dist/cjs/auth/verifiers/jwtVerifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/jwtVerifier.js +0 -84
- package/dist/cjs/auth/verifiers/secretKeyVerifier.d.ts +0 -11
- package/dist/cjs/auth/verifiers/secretKeyVerifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/secretKeyVerifier.js +0 -43
- package/dist/cjs/auth/verifiers/sha1Verifier.d.ts +0 -17
- package/dist/cjs/auth/verifiers/sha1Verifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/sha1Verifier.js +0 -85
- package/dist/cjs/auth/verifiers/sha256Verifier.d.ts +0 -17
- package/dist/cjs/auth/verifiers/sha256Verifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/sha256Verifier.js +0 -85
- package/dist/cjs/auth/verifiers/skipVerifier.d.ts +0 -11
- package/dist/cjs/auth/verifiers/skipVerifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/skipVerifier.js +0 -40
- package/dist/cjs/auth/verifiers/timestampSchemeVerifier.d.ts +0 -14
- package/dist/cjs/auth/verifiers/timestampSchemeVerifier.d.ts.map +0 -1
- package/dist/cjs/auth/verifiers/timestampSchemeVerifier.js +0 -86
- package/dist/cjs/bins/cedar.d.ts +0 -9
- package/dist/cjs/bins/cedar.d.ts.map +0 -1
- package/dist/cjs/bins/cedar.js +0 -36
- package/dist/cjs/bins/cfw.d.ts +0 -3
- package/dist/cjs/bins/cfw.d.ts.map +0 -1
- package/dist/cjs/bins/cfw.js +0 -36
- package/dist/cjs/bins/redwood.d.ts +0 -9
- package/dist/cjs/bins/redwood.d.ts.map +0 -1
- package/dist/cjs/bins/redwood.js +0 -36
- package/dist/cjs/bins/tsc.d.ts +0 -3
- package/dist/cjs/bins/tsc.d.ts.map +0 -1
- package/dist/cjs/bins/tsc.js +0 -30
- package/dist/cjs/cache/clients/BaseClient.d.ts +0 -11
- package/dist/cjs/cache/clients/BaseClient.d.ts.map +0 -1
- package/dist/cjs/cache/clients/BaseClient.js +0 -31
- package/dist/cjs/cache/clients/InMemoryClient.d.ts +0 -31
- package/dist/cjs/cache/clients/InMemoryClient.d.ts.map +0 -1
- package/dist/cjs/cache/clients/InMemoryClient.js +0 -94
- package/dist/cjs/cache/clients/MemcachedClient.d.ts +0 -16
- package/dist/cjs/cache/clients/MemcachedClient.d.ts.map +0 -1
- package/dist/cjs/cache/clients/MemcachedClient.js +0 -79
- package/dist/cjs/cache/clients/RedisClient.d.ts +0 -20
- package/dist/cjs/cache/clients/RedisClient.d.ts.map +0 -1
- package/dist/cjs/cache/clients/RedisClient.js +0 -83
- package/dist/cjs/cache/errors.d.ts +0 -4
- package/dist/cjs/cache/errors.d.ts.map +0 -1
- package/dist/cjs/cache/errors.js +0 -33
- package/dist/cjs/cache/index.d.ts +0 -35
- package/dist/cjs/cache/index.d.ts.map +0 -1
- package/dist/cjs/cache/index.js +0 -165
- package/dist/cjs/cors.d.ts +0 -16
- package/dist/cjs/cors.d.ts.map +0 -1
- package/dist/cjs/cors.js +0 -93
- package/dist/cjs/errors.d.ts +0 -5
- package/dist/cjs/errors.d.ts.map +0 -1
- package/dist/cjs/errors.js +0 -38
- package/dist/cjs/event.d.ts +0 -3
- package/dist/cjs/event.d.ts.map +0 -1
- package/dist/cjs/event.js +0 -34
- package/dist/cjs/functions/fixtures/apiGatewayProxyEvent.fixture.d.ts +0 -4
- package/dist/cjs/functions/fixtures/apiGatewayProxyEvent.fixture.d.ts.map +0 -1
- package/dist/cjs/functions/fixtures/apiGatewayProxyEvent.fixture.js +0 -72
- package/dist/cjs/index.d.ts +0 -15
- package/dist/cjs/index.d.ts.map +0 -1
- package/dist/cjs/index.js +0 -54
- package/dist/cjs/logger/index.d.ts +0 -179
- package/dist/cjs/logger/index.d.ts.map +0 -1
- package/dist/cjs/logger/index.js +0 -185
- package/dist/cjs/package.json +0 -1
- package/dist/cjs/runtime.d.ts +0 -42
- package/dist/cjs/runtime.d.ts.map +0 -1
- package/dist/cjs/runtime.js +0 -191
- package/dist/cjs/transforms.d.ts +0 -36
- package/dist/cjs/transforms.d.ts.map +0 -1
- package/dist/cjs/transforms.js +0 -176
- package/dist/cjs/types.d.ts +0 -25
- package/dist/cjs/types.d.ts.map +0 -1
- package/dist/cjs/types.js +0 -16
- package/dist/cjs/validations/errors.d.ts +0 -101
- package/dist/cjs/validations/errors.d.ts.map +0 -1
- package/dist/cjs/validations/errors.js +0 -298
- package/dist/cjs/validations/validations.d.ts +0 -235
- package/dist/cjs/validations/validations.d.ts.map +0 -1
- package/dist/cjs/validations/validations.js +0 -353
- package/dist/cjs/webhooks/index.d.ts +0 -77
- package/dist/cjs/webhooks/index.d.ts.map +0 -1
- package/dist/cjs/webhooks/index.js +0 -102
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import { createRequire } from "node:module";
|
|
3
|
+
import { pathToFileURL } from "node:url";
|
|
4
|
+
const require2 = createRequire(import.meta.url);
|
|
5
|
+
const cliPackageJsonFileUrl = pathToFileURL(
|
|
6
|
+
require2.resolve("@cedarjs/cli/package.json")
|
|
7
|
+
);
|
|
8
|
+
const requireFromCli = createRequire(cliPackageJsonFileUrl);
|
|
9
|
+
const bins = requireFromCli("./package.json")["bin"];
|
|
10
|
+
const cliEntryPointUrl = new URL(bins["cedar"], cliPackageJsonFileUrl);
|
|
11
|
+
if (process.env.PROJECT_CWD) {
|
|
12
|
+
process.chdir(process.env.PROJECT_CWD);
|
|
13
|
+
}
|
|
14
|
+
import(cliEntryPointUrl.toString());
|
package/dist/bins/cfw.js
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import { createRequire } from "node:module";
|
|
3
|
+
import { pathToFileURL } from "node:url";
|
|
4
|
+
const require2 = createRequire(import.meta.url);
|
|
5
|
+
const cliPackageJsonFileUrl = pathToFileURL(
|
|
6
|
+
require2.resolve("@cedarjs/cli/package.json")
|
|
7
|
+
);
|
|
8
|
+
const requireFromCli = createRequire(cliPackageJsonFileUrl);
|
|
9
|
+
const bins = requireFromCli("./package.json")["bin"];
|
|
10
|
+
const cliEntryPointUrl = new URL(bins["cfw"], cliPackageJsonFileUrl);
|
|
11
|
+
if (process.env.PROJECT_CWD) {
|
|
12
|
+
process.chdir(process.env.PROJECT_CWD);
|
|
13
|
+
}
|
|
14
|
+
import(cliEntryPointUrl.toString());
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import { createRequire } from "node:module";
|
|
3
|
+
import { pathToFileURL } from "node:url";
|
|
4
|
+
const require2 = createRequire(import.meta.url);
|
|
5
|
+
const cliPackageJsonFileUrl = pathToFileURL(
|
|
6
|
+
require2.resolve("@cedarjs/cli/package.json")
|
|
7
|
+
);
|
|
8
|
+
const requireFromCli = createRequire(cliPackageJsonFileUrl);
|
|
9
|
+
const bins = requireFromCli("./package.json")["bin"];
|
|
10
|
+
const cliEntryPointUrl = new URL(bins["redwood"], cliPackageJsonFileUrl);
|
|
11
|
+
if (process.env.PROJECT_CWD) {
|
|
12
|
+
process.chdir(process.env.PROJECT_CWD);
|
|
13
|
+
}
|
|
14
|
+
import(cliEntryPointUrl.toString());
|
package/dist/bins/tsc.js
ADDED
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import { createRequire } from "node:module";
|
|
3
|
+
const require2 = createRequire(import.meta.url);
|
|
4
|
+
const requireFromTypeScript = createRequire(
|
|
5
|
+
require2.resolve("typescript/package.json")
|
|
6
|
+
);
|
|
7
|
+
const bins = requireFromTypeScript("./package.json")["bin"];
|
|
8
|
+
requireFromTypeScript(bins["tsc"]);
|
package/dist/index.js
CHANGED
|
@@ -7,9 +7,9 @@ export * from "./transforms.js";
|
|
|
7
7
|
export * from "./cors.js";
|
|
8
8
|
export * from "./event.js";
|
|
9
9
|
const prismaVersion = "7.8.0";
|
|
10
|
-
const redwoodVersion = "6.0.0-canary.
|
|
11
|
-
const cedarjsVersion = "6.0.0-canary.
|
|
12
|
-
const cedarVersion = "6.0.0-canary.
|
|
10
|
+
const redwoodVersion = "6.0.0-canary.2792";
|
|
11
|
+
const cedarjsVersion = "6.0.0-canary.2792";
|
|
12
|
+
const cedarVersion = "6.0.0-canary.2792";
|
|
13
13
|
export {
|
|
14
14
|
cedarVersion,
|
|
15
15
|
cedarjsVersion,
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cedarjs/api",
|
|
3
|
-
"version": "6.0.0-canary.
|
|
3
|
+
"version": "6.0.0-canary.2792",
|
|
4
4
|
"repository": {
|
|
5
5
|
"type": "git",
|
|
6
6
|
"url": "git+https://github.com/cedarjs/cedar.git",
|
|
@@ -10,76 +10,52 @@
|
|
|
10
10
|
"type": "module",
|
|
11
11
|
"exports": {
|
|
12
12
|
".": {
|
|
13
|
-
"
|
|
13
|
+
"default": {
|
|
14
14
|
"types": "./dist/index.d.ts",
|
|
15
15
|
"default": "./dist/index.js"
|
|
16
|
-
},
|
|
17
|
-
"require": {
|
|
18
|
-
"types": "./dist/cjs/index.d.ts",
|
|
19
|
-
"default": "./dist/cjs/index.js"
|
|
20
16
|
}
|
|
21
17
|
},
|
|
22
18
|
"./package.json": "./package.json",
|
|
23
19
|
"./runtime": {
|
|
24
|
-
"
|
|
20
|
+
"default": {
|
|
25
21
|
"types": "./dist/runtime.d.ts",
|
|
26
22
|
"default": "./dist/runtime.js"
|
|
27
|
-
},
|
|
28
|
-
"require": {
|
|
29
|
-
"types": "./dist/cjs/runtime.d.ts",
|
|
30
|
-
"default": "./dist/cjs/runtime.js"
|
|
31
23
|
}
|
|
32
24
|
},
|
|
33
25
|
"./auth": {
|
|
34
|
-
"
|
|
26
|
+
"default": {
|
|
35
27
|
"types": "./dist/auth/index.d.ts",
|
|
36
28
|
"default": "./dist/auth/index.js"
|
|
37
|
-
},
|
|
38
|
-
"require": {
|
|
39
|
-
"types": "./dist/cjs/auth/index.d.ts",
|
|
40
|
-
"default": "./dist/cjs/auth/index.js"
|
|
41
29
|
}
|
|
42
30
|
},
|
|
43
31
|
"./cache": {
|
|
44
|
-
"
|
|
32
|
+
"default": {
|
|
45
33
|
"types": "./dist/cache/index.d.ts",
|
|
46
34
|
"default": "./dist/cache/index.js"
|
|
47
|
-
},
|
|
48
|
-
"require": {
|
|
49
|
-
"types": "./dist/cjs/cache/index.d.ts",
|
|
50
|
-
"default": "./dist/cjs/cache/index.js"
|
|
51
35
|
}
|
|
52
36
|
},
|
|
53
37
|
"./logger": {
|
|
54
|
-
"
|
|
38
|
+
"default": {
|
|
55
39
|
"types": "./dist/logger/index.d.ts",
|
|
56
40
|
"default": "./dist/logger/index.js"
|
|
57
|
-
},
|
|
58
|
-
"require": {
|
|
59
|
-
"types": "./dist/cjs/logger/index.d.ts",
|
|
60
|
-
"default": "./dist/cjs/logger/index.js"
|
|
61
41
|
}
|
|
62
42
|
},
|
|
63
43
|
"./webhooks": {
|
|
64
|
-
"
|
|
44
|
+
"default": {
|
|
65
45
|
"types": "./dist/webhooks/index.d.ts",
|
|
66
46
|
"default": "./dist/webhooks/index.js"
|
|
67
|
-
},
|
|
68
|
-
"require": {
|
|
69
|
-
"types": "./dist/cjs/webhooks/index.d.ts",
|
|
70
|
-
"default": "./dist/cjs/webhooks/index.js"
|
|
71
47
|
}
|
|
72
48
|
}
|
|
73
49
|
},
|
|
74
50
|
"main": "./dist/index.js",
|
|
75
51
|
"types": "./dist/index.d.ts",
|
|
76
52
|
"bin": {
|
|
77
|
-
"cedar": "./dist/
|
|
78
|
-
"cedarjs": "./dist/
|
|
79
|
-
"cfw": "./dist/
|
|
80
|
-
"redwood": "./dist/
|
|
81
|
-
"rw": "./dist/
|
|
82
|
-
"tsc": "./dist/
|
|
53
|
+
"cedar": "./dist/bins/cedar.js",
|
|
54
|
+
"cedarjs": "./dist/bins/cedar.js",
|
|
55
|
+
"cfw": "./dist/bins/cfw.js",
|
|
56
|
+
"redwood": "./dist/bins/redwood.js",
|
|
57
|
+
"rw": "./dist/bins/redwood.js",
|
|
58
|
+
"tsc": "./dist/bins/tsc.js"
|
|
83
59
|
},
|
|
84
60
|
"files": [
|
|
85
61
|
"dist/",
|
|
@@ -88,7 +64,7 @@
|
|
|
88
64
|
"scripts": {
|
|
89
65
|
"build": "node ./build.mts && yarn build:types",
|
|
90
66
|
"build:pack": "yarn pack -o cedarjs-api.tgz",
|
|
91
|
-
"build:types": "tsc --build --verbose ./tsconfig.build.json
|
|
67
|
+
"build:types": "tsc --build --verbose ./tsconfig.build.json",
|
|
92
68
|
"build:watch": "nodemon --watch src --ext \"js,jsx,ts,tsx\" --ignore dist --exec \"yarn build\"",
|
|
93
69
|
"check:attw": "yarn cedar-fwtools-attw",
|
|
94
70
|
"check:package": "concurrently npm:check:attw yarn:publint",
|
|
@@ -108,7 +84,7 @@
|
|
|
108
84
|
"title-case": "3.0.3"
|
|
109
85
|
},
|
|
110
86
|
"devDependencies": {
|
|
111
|
-
"@cedarjs/framework-tools": "6.0.0-canary.
|
|
87
|
+
"@cedarjs/framework-tools": "6.0.0-canary.2792",
|
|
112
88
|
"@types/aws-lambda": "8.10.162",
|
|
113
89
|
"@types/jsonwebtoken": "9.0.10",
|
|
114
90
|
"@types/memjs": "1",
|
package/dist/cjs/auth/index.d.ts
DELETED
|
@@ -1,64 +0,0 @@
|
|
|
1
|
-
export * from './parseJWT.js';
|
|
2
|
-
import type { APIGatewayProxyEvent, Context as LambdaContext } from 'aws-lambda';
|
|
3
|
-
import type { Decoded } from './parseJWT.js';
|
|
4
|
-
export type { Decoded };
|
|
5
|
-
export declare const AUTH_PROVIDER_HEADER = "auth-provider";
|
|
6
|
-
export declare const getAuthProviderHeader: (event: APIGatewayProxyEvent | Request) => string | undefined;
|
|
7
|
-
export interface AuthorizationHeader {
|
|
8
|
-
schema: 'Bearer' | 'Basic' | string;
|
|
9
|
-
token: string;
|
|
10
|
-
}
|
|
11
|
-
export type AuthorizationCookies = {
|
|
12
|
-
parsedCookie: Record<string, string | undefined>;
|
|
13
|
-
rawCookie: string;
|
|
14
|
-
type: string | undefined;
|
|
15
|
-
} | null;
|
|
16
|
-
export declare const parseAuthorizationCookie: (event: APIGatewayProxyEvent | Request) => AuthorizationCookies;
|
|
17
|
-
/**
|
|
18
|
-
* Split the `Authorization` header into a schema and token part.
|
|
19
|
-
*/
|
|
20
|
-
export declare const parseAuthorizationHeader: (event: APIGatewayProxyEvent | Request) => AuthorizationHeader;
|
|
21
|
-
/** @MARK Note that we do not send LambdaContext when making fetch requests
|
|
22
|
-
*
|
|
23
|
-
* This part is incomplete, as we need to decide how we will make the breaking change to
|
|
24
|
-
* 1. getCurrentUser
|
|
25
|
-
* 2. authDecoders
|
|
26
|
-
|
|
27
|
-
*/
|
|
28
|
-
export type AuthContextPayload = [
|
|
29
|
-
Decoded,
|
|
30
|
-
{
|
|
31
|
-
type: string;
|
|
32
|
-
} & AuthorizationHeader,
|
|
33
|
-
{
|
|
34
|
-
/**
|
|
35
|
-
* The Lambda-style event. On serverless deploys this is the canonical
|
|
36
|
-
* request object; on fetch-native paths a synthetic one is provided for
|
|
37
|
-
* backwards compatibility with existing `event.headers['key']` access.
|
|
38
|
-
*/
|
|
39
|
-
event: APIGatewayProxyEvent | Request;
|
|
40
|
-
/**
|
|
41
|
-
* The native fetch `Request`, available on fetch-native paths. Prefer
|
|
42
|
-
* this when available.
|
|
43
|
-
* Do `request.headers.get('key')` to access headers
|
|
44
|
-
*/
|
|
45
|
-
request?: Request;
|
|
46
|
-
context?: LambdaContext;
|
|
47
|
-
}
|
|
48
|
-
];
|
|
49
|
-
export type Decoder = (token: string, type: string, req: {
|
|
50
|
-
/** The Lambda-style request event */
|
|
51
|
-
event: APIGatewayProxyEvent | Request;
|
|
52
|
-
request?: Request;
|
|
53
|
-
context?: LambdaContext;
|
|
54
|
-
}) => Promise<Decoded>;
|
|
55
|
-
/**
|
|
56
|
-
* Get the authorization information from the request headers and request context.
|
|
57
|
-
* @returns [decoded, { type, schema, token }, { event, context }]
|
|
58
|
-
**/
|
|
59
|
-
export declare const getAuthenticationContext: ({ authDecoder, event, context, }: {
|
|
60
|
-
authDecoder?: Decoder | Decoder[];
|
|
61
|
-
event: APIGatewayProxyEvent | Request;
|
|
62
|
-
context?: LambdaContext;
|
|
63
|
-
}) => Promise<undefined | AuthContextPayload>;
|
|
64
|
-
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAE7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,YAAY,CAAA;AAMhF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,OAAO,EAAE,CAAA;AAGvB,eAAO,MAAM,oBAAoB,kBAAkB,CAAA;AAEnD,eAAO,MAAM,qBAAqB,GAChC,OAAO,oBAAoB,GAAG,OAAO,uBAoBtC,CAAA;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;IACnC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAChD,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CACzB,GAAG,IAAI,CAAA;AAER,eAAO,MAAM,wBAAwB,GACnC,OAAO,oBAAoB,GAAG,OAAO,KACpC,oBAiBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,oBAAoB,GAAG,OAAO,KACpC,mBAUF,CAAA;AAED;;;;;;GAMG;AAEH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO;IACP;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,mBAAmB;IAEtC;QACE;;;;WAIG;QACH,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAA;QACrC;;;;WAIG;QACH,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,OAAO,CAAC,EAAE,aAAa,CAAA;KACxB;CACF,CAAA;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE;IACH,qCAAqC;IACrC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAA;IACrC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB,KACE,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;;IAGI;AACJ,eAAO,MAAM,wBAAwB,GAAU,kCAI5C;IACD,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IACjC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAA;IACrC,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB,KAAG,OAAO,CAAC,SAAS,GAAG,kBAAkB,CA0EzC,CAAA"}
|
package/dist/cjs/auth/index.js
DELETED
|
@@ -1,143 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __create = Object.create;
|
|
3
|
-
var __defProp = Object.defineProperty;
|
|
4
|
-
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
5
|
-
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
6
|
-
var __getProtoOf = Object.getPrototypeOf;
|
|
7
|
-
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
8
|
-
var __export = (target, all) => {
|
|
9
|
-
for (var name in all)
|
|
10
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
11
|
-
};
|
|
12
|
-
var __copyProps = (to, from, except, desc) => {
|
|
13
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
14
|
-
for (let key of __getOwnPropNames(from))
|
|
15
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
16
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
17
|
-
}
|
|
18
|
-
return to;
|
|
19
|
-
};
|
|
20
|
-
var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
|
|
21
|
-
var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
|
|
22
|
-
// If the importer is in node compatibility mode or this is not an ESM
|
|
23
|
-
// file that has been converted to a CommonJS file using a Babel-
|
|
24
|
-
// compatible transform (i.e. "__esModule" has not been set), then set
|
|
25
|
-
// "default" to the CommonJS "module.exports" for node compatibility.
|
|
26
|
-
isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
|
|
27
|
-
mod
|
|
28
|
-
));
|
|
29
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
30
|
-
var auth_exports = {};
|
|
31
|
-
__export(auth_exports, {
|
|
32
|
-
AUTH_PROVIDER_HEADER: () => AUTH_PROVIDER_HEADER,
|
|
33
|
-
getAuthProviderHeader: () => getAuthProviderHeader,
|
|
34
|
-
getAuthenticationContext: () => getAuthenticationContext,
|
|
35
|
-
parseAuthorizationCookie: () => parseAuthorizationCookie,
|
|
36
|
-
parseAuthorizationHeader: () => parseAuthorizationHeader
|
|
37
|
-
});
|
|
38
|
-
module.exports = __toCommonJS(auth_exports);
|
|
39
|
-
__reExport(auth_exports, require("./parseJWT.js"), module.exports);
|
|
40
|
-
var cookie = __toESM(require("cookie"), 1);
|
|
41
|
-
var import_event = require("../event.js");
|
|
42
|
-
var import_transforms = require("../transforms.js");
|
|
43
|
-
const AUTH_PROVIDER_HEADER = "auth-provider";
|
|
44
|
-
const getAuthProviderHeader = (event) => {
|
|
45
|
-
if ((0, import_transforms.isFetchApiRequest)(event)) {
|
|
46
|
-
return event.headers.get(AUTH_PROVIDER_HEADER) ?? void 0;
|
|
47
|
-
}
|
|
48
|
-
const authProviderKey = Object.keys(event.headers ?? {}).find(
|
|
49
|
-
(key) => key.toLowerCase() === AUTH_PROVIDER_HEADER
|
|
50
|
-
);
|
|
51
|
-
if (authProviderKey) {
|
|
52
|
-
return event.headers[authProviderKey];
|
|
53
|
-
}
|
|
54
|
-
return void 0;
|
|
55
|
-
};
|
|
56
|
-
const parseAuthorizationCookie = (event) => {
|
|
57
|
-
const cookieHeader = (0, import_event.getEventHeader)(event, "Cookie");
|
|
58
|
-
if (!cookieHeader) {
|
|
59
|
-
return null;
|
|
60
|
-
}
|
|
61
|
-
const parsedCookie = cookie.parse(cookieHeader);
|
|
62
|
-
return {
|
|
63
|
-
parsedCookie,
|
|
64
|
-
rawCookie: cookieHeader,
|
|
65
|
-
// When not unauthenticated, this will be null/undefined
|
|
66
|
-
// Remember that the cookie header could contain other (unrelated) values!
|
|
67
|
-
type: parsedCookie[AUTH_PROVIDER_HEADER]
|
|
68
|
-
};
|
|
69
|
-
};
|
|
70
|
-
const parseAuthorizationHeader = (event) => {
|
|
71
|
-
const parts = (0, import_event.getEventHeader)(event, "Authorization")?.split(" ");
|
|
72
|
-
if (parts?.length !== 2) {
|
|
73
|
-
throw new Error("The `Authorization` header is not valid.");
|
|
74
|
-
}
|
|
75
|
-
const [schema, token] = parts;
|
|
76
|
-
if (!schema.length || !token.length) {
|
|
77
|
-
throw new Error("The `Authorization` header is not valid.");
|
|
78
|
-
}
|
|
79
|
-
return { schema, token };
|
|
80
|
-
};
|
|
81
|
-
const getAuthenticationContext = async ({
|
|
82
|
-
authDecoder,
|
|
83
|
-
event,
|
|
84
|
-
context
|
|
85
|
-
}) => {
|
|
86
|
-
const cookieHeader = parseAuthorizationCookie(event);
|
|
87
|
-
const typeFromHeader = getAuthProviderHeader(event);
|
|
88
|
-
if (!typeFromHeader && !cookieHeader) {
|
|
89
|
-
return void 0;
|
|
90
|
-
}
|
|
91
|
-
let token;
|
|
92
|
-
let type;
|
|
93
|
-
let schema;
|
|
94
|
-
if (cookieHeader?.type) {
|
|
95
|
-
token = cookieHeader.rawCookie;
|
|
96
|
-
type = cookieHeader.type;
|
|
97
|
-
schema = "cookie";
|
|
98
|
-
} else if (typeFromHeader) {
|
|
99
|
-
const parsedAuthHeader = parseAuthorizationHeader(event);
|
|
100
|
-
token = parsedAuthHeader.token;
|
|
101
|
-
type = typeFromHeader;
|
|
102
|
-
schema = parsedAuthHeader.schema;
|
|
103
|
-
}
|
|
104
|
-
if (!token || !type || !schema) {
|
|
105
|
-
return void 0;
|
|
106
|
-
}
|
|
107
|
-
let authDecoders = [];
|
|
108
|
-
if (Array.isArray(authDecoder)) {
|
|
109
|
-
authDecoders = authDecoder;
|
|
110
|
-
} else if (authDecoder) {
|
|
111
|
-
authDecoders = [authDecoder];
|
|
112
|
-
}
|
|
113
|
-
let decoded = null;
|
|
114
|
-
const normalizedEvent = (0, import_transforms.isFetchApiRequest)(event) ? await (0, import_transforms.requestToBaseEvent)(event) : event;
|
|
115
|
-
const underlyingRequest = (0, import_transforms.isFetchApiRequest)(event) ? event : void 0;
|
|
116
|
-
let i = 0;
|
|
117
|
-
while (!decoded && i < authDecoders.length) {
|
|
118
|
-
decoded = await authDecoders[i](token, type, {
|
|
119
|
-
event: normalizedEvent,
|
|
120
|
-
request: underlyingRequest,
|
|
121
|
-
context
|
|
122
|
-
});
|
|
123
|
-
i++;
|
|
124
|
-
}
|
|
125
|
-
return [
|
|
126
|
-
decoded,
|
|
127
|
-
{ type, schema, token },
|
|
128
|
-
{
|
|
129
|
-
event: normalizedEvent,
|
|
130
|
-
request: underlyingRequest,
|
|
131
|
-
context
|
|
132
|
-
}
|
|
133
|
-
];
|
|
134
|
-
};
|
|
135
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
136
|
-
0 && (module.exports = {
|
|
137
|
-
AUTH_PROVIDER_HEADER,
|
|
138
|
-
getAuthProviderHeader,
|
|
139
|
-
getAuthenticationContext,
|
|
140
|
-
parseAuthorizationCookie,
|
|
141
|
-
parseAuthorizationHeader,
|
|
142
|
-
...require("./parseJWT.js")
|
|
143
|
-
});
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"parseJWT.d.ts","sourceRoot":"","sources":["../../../src/auth/parseJWT.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;AA8DpD,eAAO,MAAM,QAAQ,GAAI,OAAO;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,KAAG,GAKH,CAAA"}
|
|
@@ -1,57 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __defProp = Object.defineProperty;
|
|
3
|
-
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
4
|
-
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
5
|
-
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
6
|
-
var __export = (target, all) => {
|
|
7
|
-
for (var name in all)
|
|
8
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
9
|
-
};
|
|
10
|
-
var __copyProps = (to, from, except, desc) => {
|
|
11
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
12
|
-
for (let key of __getOwnPropNames(from))
|
|
13
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
14
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
15
|
-
}
|
|
16
|
-
return to;
|
|
17
|
-
};
|
|
18
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
19
|
-
var parseJWT_exports = {};
|
|
20
|
-
__export(parseJWT_exports, {
|
|
21
|
-
parseJWT: () => parseJWT
|
|
22
|
-
});
|
|
23
|
-
module.exports = __toCommonJS(parseJWT_exports);
|
|
24
|
-
function isTokenWithRoles(token) {
|
|
25
|
-
return !!token.decoded?.roles;
|
|
26
|
-
}
|
|
27
|
-
function isTokenWithMetadata(token) {
|
|
28
|
-
const claim = token.namespace ? `${token.namespace}/app_metadata` : "app_metadata";
|
|
29
|
-
return !!token.decoded?.[claim];
|
|
30
|
-
}
|
|
31
|
-
const appMetadata = (token) => {
|
|
32
|
-
if (typeof token.decoded === "string") {
|
|
33
|
-
return {};
|
|
34
|
-
}
|
|
35
|
-
if (isTokenWithMetadata(token)) {
|
|
36
|
-
const claim = token.namespace ? `${token.namespace}/app_metadata` : "app_metadata";
|
|
37
|
-
return token.decoded?.[claim];
|
|
38
|
-
}
|
|
39
|
-
return {};
|
|
40
|
-
};
|
|
41
|
-
const roles = (token) => {
|
|
42
|
-
if (isTokenWithRoles(token)) {
|
|
43
|
-
return token.decoded.roles;
|
|
44
|
-
}
|
|
45
|
-
const metadata = appMetadata(token);
|
|
46
|
-
return metadata?.roles || metadata.authorization?.roles || [];
|
|
47
|
-
};
|
|
48
|
-
const parseJWT = (token) => {
|
|
49
|
-
return {
|
|
50
|
-
appMetadata: appMetadata(token),
|
|
51
|
-
roles: roles(token)
|
|
52
|
-
};
|
|
53
|
-
};
|
|
54
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
55
|
-
0 && (module.exports = {
|
|
56
|
-
parseJWT
|
|
57
|
-
});
|
|
@@ -1,18 +0,0 @@
|
|
|
1
|
-
import type { WebhookVerifier, VerifyOptions } from './common.js';
|
|
2
|
-
export interface Base64Sha1Verifier extends WebhookVerifier {
|
|
3
|
-
type: 'base64Sha1Verifier';
|
|
4
|
-
}
|
|
5
|
-
export declare const verifySignature: ({ payload, secret, signature, }: {
|
|
6
|
-
payload: string | Record<string, unknown>;
|
|
7
|
-
secret: string;
|
|
8
|
-
signature: string;
|
|
9
|
-
}) => boolean;
|
|
10
|
-
/**
|
|
11
|
-
* Base64 SHA1 HMAC Payload Verifier
|
|
12
|
-
*
|
|
13
|
-
* Based on Svix's webhook payload verification, but using SHA1 instead
|
|
14
|
-
* @see https://docs.svix.com/receiving/verifying-payloads/how-manual
|
|
15
|
-
* @see https://github.com/svix/svix-webhooks/blob/main/javascript/src/index.ts
|
|
16
|
-
*/
|
|
17
|
-
export declare function base64Sha1Verifier(_options?: VerifyOptions): Base64Sha1Verifier;
|
|
18
|
-
//# sourceMappingURL=base64Sha1Verifier.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"base64Sha1Verifier.d.ts","sourceRoot":"","sources":["../../../../src/auth/verifiers/base64Sha1Verifier.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEjE,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,IAAI,EAAE,oBAAoB,CAAA;CAC3B;AA0BD,eAAO,MAAM,eAAe,GAAI,iCAI7B;IACD,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,KAAG,OA0BH,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,aAAa,GACvB,kBAAkB,CAUpB"}
|
|
@@ -1,77 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __defProp = Object.defineProperty;
|
|
3
|
-
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
4
|
-
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
5
|
-
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
6
|
-
var __export = (target, all) => {
|
|
7
|
-
for (var name in all)
|
|
8
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
9
|
-
};
|
|
10
|
-
var __copyProps = (to, from, except, desc) => {
|
|
11
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
12
|
-
for (let key of __getOwnPropNames(from))
|
|
13
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
14
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
15
|
-
}
|
|
16
|
-
return to;
|
|
17
|
-
};
|
|
18
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
19
|
-
var base64Sha1Verifier_exports = {};
|
|
20
|
-
__export(base64Sha1Verifier_exports, {
|
|
21
|
-
base64Sha1Verifier: () => base64Sha1Verifier,
|
|
22
|
-
verifySignature: () => verifySignature
|
|
23
|
-
});
|
|
24
|
-
module.exports = __toCommonJS(base64Sha1Verifier_exports);
|
|
25
|
-
var import_crypto = require("crypto");
|
|
26
|
-
var import_common = require("./common.js");
|
|
27
|
-
function toNormalizedJsonString(payload) {
|
|
28
|
-
return JSON.stringify(payload).replace(/[^\\]\\u[\da-f]{4}/g, (s) => {
|
|
29
|
-
return s.slice(0, 3) + s.slice(3).toUpperCase();
|
|
30
|
-
});
|
|
31
|
-
}
|
|
32
|
-
const createSignature = ({
|
|
33
|
-
payload,
|
|
34
|
-
secret = import_common.DEFAULT_WEBHOOK_SECRET
|
|
35
|
-
}) => {
|
|
36
|
-
const algorithm = "sha1";
|
|
37
|
-
const hmac = (0, import_crypto.createHmac)(algorithm, Buffer.from(secret, "base64"));
|
|
38
|
-
payload = typeof payload === "string" ? payload : toNormalizedJsonString(payload);
|
|
39
|
-
const digest = hmac.update(payload).digest();
|
|
40
|
-
return digest.toString("base64");
|
|
41
|
-
};
|
|
42
|
-
const verifySignature = ({
|
|
43
|
-
payload,
|
|
44
|
-
secret = import_common.DEFAULT_WEBHOOK_SECRET,
|
|
45
|
-
signature
|
|
46
|
-
}) => {
|
|
47
|
-
try {
|
|
48
|
-
const webhookSignature = Buffer.from(signature || "", "base64");
|
|
49
|
-
const hmac = (0, import_crypto.createHmac)("sha1", Buffer.from(secret, "base64"));
|
|
50
|
-
payload = typeof payload === "string" ? payload : toNormalizedJsonString(payload);
|
|
51
|
-
const digest = hmac.update(payload).digest();
|
|
52
|
-
if (webhookSignature.length === digest.length && (0, import_crypto.timingSafeEqual)(digest, webhookSignature)) {
|
|
53
|
-
return true;
|
|
54
|
-
}
|
|
55
|
-
throw new import_common.WebhookVerificationError();
|
|
56
|
-
} catch (error) {
|
|
57
|
-
throw new import_common.WebhookVerificationError(
|
|
58
|
-
`${import_common.VERIFICATION_ERROR_MESSAGE}: ${error.message}`
|
|
59
|
-
);
|
|
60
|
-
}
|
|
61
|
-
};
|
|
62
|
-
function base64Sha1Verifier(_options) {
|
|
63
|
-
return {
|
|
64
|
-
sign: ({ payload, secret }) => {
|
|
65
|
-
return createSignature({ payload, secret });
|
|
66
|
-
},
|
|
67
|
-
verify: ({ payload, secret, signature }) => {
|
|
68
|
-
return verifySignature({ payload, secret, signature });
|
|
69
|
-
},
|
|
70
|
-
type: "base64Sha1Verifier"
|
|
71
|
-
};
|
|
72
|
-
}
|
|
73
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
74
|
-
0 && (module.exports = {
|
|
75
|
-
base64Sha1Verifier,
|
|
76
|
-
verifySignature
|
|
77
|
-
});
|
|
@@ -1,18 +0,0 @@
|
|
|
1
|
-
import type { WebhookVerifier, VerifyOptions } from './common.js';
|
|
2
|
-
export interface Base64Sha256Verifier extends WebhookVerifier {
|
|
3
|
-
type: 'base64Sha256Verifier';
|
|
4
|
-
}
|
|
5
|
-
export declare const verifySignature: ({ payload, secret, signature, }: {
|
|
6
|
-
payload: string | Record<string, unknown>;
|
|
7
|
-
secret: string;
|
|
8
|
-
signature: string;
|
|
9
|
-
}) => boolean;
|
|
10
|
-
/**
|
|
11
|
-
* Base64 SHA256 HMAC Payload Verifier
|
|
12
|
-
*
|
|
13
|
-
* Based on Svix's webhook payload verification
|
|
14
|
-
* @see https://docs.svix.com/receiving/verifying-payloads/how-manual
|
|
15
|
-
* @see https://github.com/svix/svix-webhooks/blob/main/javascript/src/index.ts
|
|
16
|
-
*/
|
|
17
|
-
export declare function base64Sha256Verifier(_options?: VerifyOptions): Base64Sha256Verifier;
|
|
18
|
-
//# sourceMappingURL=base64Sha256Verifier.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"base64Sha256Verifier.d.ts","sourceRoot":"","sources":["../../../../src/auth/verifiers/base64Sha256Verifier.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEjE,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,IAAI,EAAE,sBAAsB,CAAA;CAC7B;AA0BD,eAAO,MAAM,eAAe,GAAI,iCAI7B;IACD,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,KAAG,OA0BH,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,aAAa,GACvB,oBAAoB,CAUtB"}
|
|
@@ -1,77 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __defProp = Object.defineProperty;
|
|
3
|
-
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
4
|
-
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
5
|
-
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
6
|
-
var __export = (target, all) => {
|
|
7
|
-
for (var name in all)
|
|
8
|
-
__defProp(target, name, { get: all[name], enumerable: true });
|
|
9
|
-
};
|
|
10
|
-
var __copyProps = (to, from, except, desc) => {
|
|
11
|
-
if (from && typeof from === "object" || typeof from === "function") {
|
|
12
|
-
for (let key of __getOwnPropNames(from))
|
|
13
|
-
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
14
|
-
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
15
|
-
}
|
|
16
|
-
return to;
|
|
17
|
-
};
|
|
18
|
-
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
19
|
-
var base64Sha256Verifier_exports = {};
|
|
20
|
-
__export(base64Sha256Verifier_exports, {
|
|
21
|
-
base64Sha256Verifier: () => base64Sha256Verifier,
|
|
22
|
-
verifySignature: () => verifySignature
|
|
23
|
-
});
|
|
24
|
-
module.exports = __toCommonJS(base64Sha256Verifier_exports);
|
|
25
|
-
var import_crypto = require("crypto");
|
|
26
|
-
var import_common = require("./common.js");
|
|
27
|
-
function toNormalizedJsonString(payload) {
|
|
28
|
-
return JSON.stringify(payload).replace(/[^\\]\\u[\da-f]{4}/g, (s) => {
|
|
29
|
-
return s.slice(0, 3) + s.slice(3).toUpperCase();
|
|
30
|
-
});
|
|
31
|
-
}
|
|
32
|
-
const createSignature = ({
|
|
33
|
-
payload,
|
|
34
|
-
secret = import_common.DEFAULT_WEBHOOK_SECRET
|
|
35
|
-
}) => {
|
|
36
|
-
const algorithm = "sha256";
|
|
37
|
-
const hmac = (0, import_crypto.createHmac)(algorithm, Buffer.from(secret, "base64"));
|
|
38
|
-
payload = typeof payload === "string" ? payload : toNormalizedJsonString(payload);
|
|
39
|
-
const digest = hmac.update(payload).digest();
|
|
40
|
-
return digest.toString("base64");
|
|
41
|
-
};
|
|
42
|
-
const verifySignature = ({
|
|
43
|
-
payload,
|
|
44
|
-
secret = import_common.DEFAULT_WEBHOOK_SECRET,
|
|
45
|
-
signature
|
|
46
|
-
}) => {
|
|
47
|
-
try {
|
|
48
|
-
const webhookSignature = Buffer.from(signature || "", "base64");
|
|
49
|
-
const hmac = (0, import_crypto.createHmac)("sha256", Buffer.from(secret, "base64"));
|
|
50
|
-
payload = typeof payload === "string" ? payload : toNormalizedJsonString(payload);
|
|
51
|
-
const digest = hmac.update(payload).digest();
|
|
52
|
-
if (webhookSignature.length === digest.length && (0, import_crypto.timingSafeEqual)(digest, webhookSignature)) {
|
|
53
|
-
return true;
|
|
54
|
-
}
|
|
55
|
-
throw new import_common.WebhookVerificationError();
|
|
56
|
-
} catch (error) {
|
|
57
|
-
throw new import_common.WebhookVerificationError(
|
|
58
|
-
`${import_common.VERIFICATION_ERROR_MESSAGE}: ${error.message}`
|
|
59
|
-
);
|
|
60
|
-
}
|
|
61
|
-
};
|
|
62
|
-
function base64Sha256Verifier(_options) {
|
|
63
|
-
return {
|
|
64
|
-
sign: ({ payload, secret }) => {
|
|
65
|
-
return createSignature({ payload, secret });
|
|
66
|
-
},
|
|
67
|
-
verify: ({ payload, secret, signature }) => {
|
|
68
|
-
return verifySignature({ payload, secret, signature });
|
|
69
|
-
},
|
|
70
|
-
type: "base64Sha256Verifier"
|
|
71
|
-
};
|
|
72
|
-
}
|
|
73
|
-
// Annotate the CommonJS export names for ESM import in node:
|
|
74
|
-
0 && (module.exports = {
|
|
75
|
-
base64Sha256Verifier,
|
|
76
|
-
verifySignature
|
|
77
|
-
});
|