@forklaunch/core 0.14.7 → 0.14.8

package/lib/http/index.mjs

@@ -83,9 +83,27 @@ function isTypedHandler(maybeTypedHandler) {
 import { isNever } from "@forklaunch/common";
 
 // src/http/discriminateAuthMethod.ts
-import { createHmac } from "crypto";
 import { jwtVerify } from "jose";
 
+// src/http/createHmacToken.ts
+import { createHmac } from "crypto";
+function createHmacToken({
+  method,
+  path,
+  body,
+  timestamp,
+  nonce,
+  secretKey
+}) {
+  const hmac = createHmac("sha256", secretKey);
+  hmac.update(`${method}
+${path}
+${body}
+${timestamp}
+${nonce}`);
+  return hmac.digest("base64");
+}
+
 // src/http/guards/isBasicAuthMethod.ts
 function isBasicAuthMethod(maybeBasicAuthMethod) {
   return typeof maybeBasicAuthMethod === "object" && maybeBasicAuthMethod !== null && "basic" in maybeBasicAuthMethod && maybeBasicAuthMethod.basic != null;
@@ -155,14 +173,14 @@ async function discriminateAuthMethod(auth) {
       auth: {
         secretKeys: auth.hmac.secretKeys,
         verificationFunction: async (method, path, body, timestamp, nonce, signature, secretKey) => {
-          const hmac = createHmac("sha256", secretKey);
-          hmac.update(`${method}
-${path}
-${body}
-${timestamp}
-${nonce}`);
-          const digest = hmac.digest("base64");
-          return digest === signature;
+          return createHmacToken({
+            method,
+            path,
+            body,
+            timestamp,
+            nonce,
+            secretKey
+          }) === signature;
         }
       }
     };
@@ -3926,6 +3944,7 @@ export {
   HTTPStatuses,
   OPENAPI_DEFAULT_VERSION,
   OpenTelemetryCollector,
+  createHmacToken,
   delete_,
   discriminateBody,
   discriminateResponseBodies,