@edgenets/utils 0.0.25 → 0.0.26

package/dist/utils/signature.util.d.ts

@@ -0,0 +1,12 @@
+export declare class SignatureManager {
+    static generateSignature(data: Record<string, unknown>, secretKey: string): string;
+    static validateSignature(data: Record<string, unknown>, receivedSignature: string, secretKey: string): boolean;
+    private static safeCompare;
+    private static sortObjectKeys;
+    static signWithTimestampAndNonce(data: Record<string, unknown>, secretKey: string, timestamp?: number, nonce?: string): {
+        signature: string;
+        timestamp: number;
+        nonce: string;
+    };
+}
+//# sourceMappingURL=signature.util.d.ts.map

package/dist/utils/signature.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.util.d.ts","sourceRoot":"","sources":["../../src/utils/signature.util.ts"],"names":[],"mappings":"AAEA,qBAAa,gBAAgB;WAEb,iBAAiB,CAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,GAChB,MAAM;WAqBK,iBAAiB,CAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,GAChB,OAAO;IAMV,OAAO,CAAC,MAAM,CAAC,WAAW;IAU1B,OAAO,CAAC,MAAM,CAAC,cAAc;WAmBf,yBAAyB,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,MAAmB,EAC9B,KAAK,GAAE,MAAoD,GAC1D;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CAK3D"}

package/dist/utils/signature.util.js

@@ -0,0 +1,56 @@
+import { createHmac } from "crypto";
+export class SignatureManager {
+    // 生成签名的方法
+    static generateSignature(data, secretKey) {
+        const sortedData = Object.keys(data)
+            .sort() // 按字母顺序排序字段
+            .map((key) => {
+            const value = data[key];
+            if (value && typeof value === "object" && !Array.isArray(value)) {
+                const serializedValue = JSON.stringify(this.sortObjectKeys(value));
+                return `${key}=${serializedValue}`;
+            }
+            else {
+                const serializedValue = JSON.stringify(value); // 确保值被正确序列化
+                return `${key}=${serializedValue}`;
+            }
+        })
+            .join("&");
+        return createHmac("sha256", secretKey).update(sortedData).digest("hex");
+    }
+    // 验证签名的方法
+    static validateSignature(data, receivedSignature, secretKey) {
+        const calculatedSignature = this.generateSignature(data, secretKey);
+        return this.safeCompare(calculatedSignature, receivedSignature);
+    }
+    // 安全比较函数，防止时间攻击
+    static safeCompare(a, b) {
+        if (a.length !== b.length)
+            return false;
+        let result = 0;
+        for (let i = 0; i < a.length; i++) {
+            result |= a.charCodeAt(i) ^ b.charCodeAt(i);
+        }
+        return result === 0;
+    }
+    // 对对象的键进行递归排序
+    static sortObjectKeys(obj) {
+        return Object.keys(obj)
+            .sort()
+            .reduce((acc, key) => {
+            const value = obj[key];
+            acc[key] =
+                value && typeof value === "object" && !Array.isArray(value)
+                    ? this.sortObjectKeys(value)
+                    : value;
+            return acc;
+        }, {});
+    }
+    // 增加时间戳和 nonce 并生成签名
+    static signWithTimestampAndNonce(data, secretKey, timestamp = Date.now(), nonce = Math.random().toString(36).substring(2, 15)) {
+        const extendedData = { ...data, timestamp, nonce };
+        const signature = this.generateSignature(extendedData, secretKey);
+        return { signature, timestamp, nonce };
+    }
+}
+//# sourceMappingURL=signature.util.js.map

package/dist/utils/signature.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.util.js","sourceRoot":"","sources":["../../src/utils/signature.util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,OAAO,gBAAgB;IAC3B,UAAU;IACH,MAAM,CAAC,iBAAiB,CAC7B,IAA6B,EAC7B,SAAiB;QAEjB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACjC,IAAI,EAAE,CAAC,YAAY;aACnB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CACpC,IAAI,CAAC,cAAc,CAAC,KAAgC,CAAC,CACtD,CAAC;gBACF,OAAO,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC3D,OAAO,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEb,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,UAAU;IACH,MAAM,CAAC,iBAAiB,CAC7B,IAA6B,EAC7B,iBAAyB,EACzB,SAAiB;QAEjB,MAAM,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;IAClE,CAAC;IAED,gBAAgB;IACR,MAAM,CAAC,WAAW,CAAC,CAAS,EAAE,CAAS;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,cAAc;IACN,MAAM,CAAC,cAAc,CAC3B,GAA4B;QAE5B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACpB,IAAI,EAAE;aACN,MAAM,CACL,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACX,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC;gBACN,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACzD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAgC,CAAC;oBACvD,CAAC,CAAC,KAAK,CAAC;YACZ,OAAO,GAAG,CAAC;QACb,CAAC,EACD,EAA6B,CAC9B,CAAC;IACN,CAAC;IAED,qBAAqB;IACd,MAAM,CAAC,yBAAyB,CACrC,IAA6B,EAC7B,SAAiB,EACjB,YAAoB,IAAI,CAAC,GAAG,EAAE,EAC9B,QAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;QAE3D,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edgenets/utils",
-  "version": "0.0.25",
+  "version": "0.0.26",
   "description": "Edgenets utilities package containing common types and utilities.",
   "type": "module",
   "main": "dist/index.js",
@@ -16,5 +16,8 @@
     "build": "eslint --fix && tsc -p tsconfig.json",
     "test": "echo 'Skip Tests'",
     "public": "pnpm build && npm version patch && npm publish --access public"
+  },
+  "devDependencies": {
+    "@types/node": "~20.16.15"
   }
 }