@dfns/sdk-awskmssigner 0.2.2

package/index.d.ts

@@ -0,0 +1,17 @@
+import { CredentialSigner, KeyAssertion } from '@dfns/sdk';
+import { KMSClientConfig, SigningAlgorithmSpec } from '@aws-sdk/client-kms';
+export declare class AwsKmsKeySigner implements CredentialSigner<KeyAssertion> {
+    private options;
+    private client;
+    constructor(options: {
+        kmsClientConfig: KMSClientConfig;
+        kmsKeyConfig: {
+            id: string;
+            algorithm: SigningAlgorithmSpec;
+        };
+        credId: string;
+        appOrigin: string;
+        crossOrigin?: boolean;
+    });
+    sign(challenge: string): Promise<KeyAssertion>;
+}

package/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsKmsKeySigner = void 0;
+const utils_1 = require("@dfns/sdk/utils");
+const client_kms_1 = require("@aws-sdk/client-kms");
+class AwsKmsKeySigner {
+    constructor(options) {
+        this.options = options;
+        this.client = new client_kms_1.KMSClient(this.options.kmsClientConfig);
+    }
+    async sign(challenge) {
+        const clientData = Buffer.from(JSON.stringify({
+            type: 'key.get',
+            challenge,
+            origin: this.options.appOrigin,
+            crossOrigin: this.options.crossOrigin ?? false,
+        }));
+        const command = new client_kms_1.SignCommand({
+            KeyId: this.options.kmsKeyConfig.id,
+            Message: clientData,
+            MessageType: 'RAW',
+            SigningAlgorithm: this.options.kmsKeyConfig.algorithm,
+        });
+        const response = await this.client.send(command);
+        return {
+            kind: 'Key',
+            credentialAssertion: {
+                credId: this.options.credId,
+                clientData: (0, utils_1.toBase64Url)(clientData),
+                signature: (0, utils_1.toBase64Url)(Buffer.from(response.Signature)),
+            },
+        };
+    }
+}
+exports.AwsKmsKeySigner = AwsKmsKeySigner;

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@dfns/sdk-awskmssigner",
+  "version": "0.2.2",
+  "dependencies": {
+    "@aws-sdk/client-kms": "^3.485.0",
+    "buffer": "6.0.3",
+    "cross-fetch": "3.1.6",
+    "uuid": "9.0.0"
+  },
+  "peerDependencies": {
+    "@dfns/sdk": "0.2.2"
+  },
+  "main": "./index.js",
+  "type": "commonjs"
+}