@iann29/rastro 0.1.0-alpha.0 → 0.1.0-alpha.10

package/src/component/identity.ts

@@ -0,0 +1,74 @@
+import { v } from "convex/values";
+import { DAY_MS } from "./constants.js";
+import { internalMutation, internalQuery } from "./_generated/server.js";
+
+/**
+ * Anonymous visitors (no host-supplied id) are counted through a salted hash of
+ * the request IP and User-Agent that rotates every UTC day. The hash is derived
+ * in the HTTP action, so the raw IP never reaches a mutation or a table, and the
+ * salt is a per-deployment secret, so nobody holding a key can walk the IPv4
+ * space back to an address. Same device and network on the same day count once;
+ * the next day they are a new visitor by design.
+ */
+const KEY_HEX_LENGTH = 24;
+const SECRET_PATTERN = /^[0-9a-f]{64}$/;
+
+export const secret = internalQuery({
+  args: {},
+  returns: v.union(v.string(), v.null()),
+  handler: async (ctx) => {
+    const row = await ctx.db
+      .query("visitorSecrets")
+      .withIndex("by_key", (range) => range.eq("key", "current"))
+      .unique();
+    return row?.value ?? null;
+  },
+});
+
+export const ensureSecret = internalMutation({
+  args: { candidate: v.string() },
+  returns: v.string(),
+  handler: async (ctx, args) => {
+    const existing = await ctx.db
+      .query("visitorSecrets")
+      .withIndex("by_key", (range) => range.eq("key", "current"))
+      .unique();
+    if (existing) return existing.value;
+    if (!SECRET_PATTERN.test(args.candidate)) {
+      throw new Error("visitor secret candidate must be 64 hex characters");
+    }
+    await ctx.db.insert("visitorSecrets", {
+      key: "current",
+      value: args.candidate,
+      createdAt: Date.now(),
+    });
+    return args.candidate;
+  },
+});
+
+export function randomSecret(): string {
+  return hex(crypto.getRandomValues(new Uint8Array(32)));
+}
+
+export async function deriveVisitorKey(input: {
+  secret: string;
+  now: number;
+  siteId: string;
+  ip: string;
+  userAgent: string;
+}): Promise<string> {
+  const dayStart = Math.floor(input.now / DAY_MS) * DAY_MS;
+  const material = new TextEncoder().encode(
+    [input.secret, dayStart, input.siteId, input.ip, input.userAgent].join(" "),
+  );
+  const digest = new Uint8Array(
+    await crypto.subtle.digest("SHA-256", material),
+  );
+  return hex(digest).slice(0, KEY_HEX_LENGTH);
+}
+
+function hex(bytes: Uint8Array): string {
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join(
+    "",
+  );
+}