@lowdefy/node-utils 4.0.0-rc.9 → 4.0.1

package/dist/cleanDirectory.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/copyFileOrDirectory.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/getFileExtension.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/getSecretsFromEnv.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/index.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -16,7 +16,8 @@
 import copyFileOrDirectory from './copyFileOrDirectory.js';
 import getFileExtension, { getFileSubExtension } from './getFileExtension.js';
 import getSecretsFromEnv from './getSecretsFromEnv.js';
+import keygenValidateLicense from './keygenValidateLicense.js';
 import spawnProcess from './spawnProcess.js';
 import readFile from './readFile.js';
 import writeFile from './writeFile.js';
-export { cleanDirectory, copyFileOrDirectory, getFileExtension, getFileSubExtension, getSecretsFromEnv, spawnProcess, readFile, writeFile };
+export { cleanDirectory, copyFileOrDirectory, getFileExtension, getFileSubExtension, getSecretsFromEnv, keygenValidateLicense, spawnProcess, readFile, writeFile };

package/dist/keygenValidateLicense.js

@@ -0,0 +1,107 @@
+/*
+  Copyright 2020-2024 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import crypto from 'crypto';
+import keygenValidateLicenseOffline from './keygenValidateLicenseOffline.js';
+import keygenVerifyApiSignature from './keygenVerifyApiSignature.js';
+async function keygenValidateLicense({ config }) {
+    const licenseKey = process.env.LOWDEFY_LICENSE_KEY;
+    let entitlements = [];
+    if (!config) {
+        throw new Error('License server config is not defined.');
+    }
+    // TODO: Return this or undefined/null?
+    if (!licenseKey) {
+        return {
+            id: 'NO_LICENSE',
+            code: 'NO_LICENSE',
+            entitlements,
+            metadata: {},
+            timestamp: new Date()
+        };
+    }
+    if (licenseKey.startsWith('key/')) {
+        const offlineLicense = await keygenValidateLicenseOffline({
+            config,
+            licenseKey
+        });
+        if (offlineLicense.entitlements.includes('OFFLINE')) {
+            return offlineLicense;
+        }
+    }
+    const nonce = crypto.randomInt(1000000000000);
+    const res = await fetch(`https://api.keygen.sh/v1/accounts/${config.accountId}/licenses/actions/validate-key`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/vnd.api+json',
+            Accept: 'application/vnd.api+json'
+        },
+        body: JSON.stringify({
+            meta: {
+                key: licenseKey,
+                nonce,
+                scope: {
+                    product: config.productId
+                }
+            }
+        })
+    });
+    const body = await res.text();
+    const { meta, data, errors } = JSON.parse(body);
+    if (meta.nonce !== nonce) {
+        return {
+            id: 'INVALID_LICENSE',
+            code: 'INVALID_LICENSE',
+            entitlements,
+            metadata: {},
+            timestamp: new Date()
+        };
+    }
+    if (errors) {
+        return {
+            id: 'INVALID_LICENSE',
+            code: 'INVALID_LICENSE',
+            entitlements,
+            metadata: {},
+            timestamp: new Date()
+        };
+    }
+    await keygenVerifyApiSignature({
+        body,
+        config,
+        date: res.headers.get('date'),
+        signatureHeader: res.headers.get('keygen-signature'),
+        target: `post /v1/accounts/${config.accountId}/licenses/actions/validate-key`
+    });
+    if (data?.relationships?.entitlements?.links?.related) {
+        const entitlementResponse = await (await fetch(`https://api.keygen.sh/${data.relationships.entitlements.links.related}`, {
+            method: 'GET',
+            headers: {
+                'Content-Type': 'application/vnd.api+json',
+                Accept: 'application/vnd.api+json',
+                Authorization: `License ${licenseKey}`
+            }
+        })).json();
+        entitlements = (entitlementResponse?.data ?? []).map((ent)=>ent?.attributes?.code);
+    }
+    return {
+        id: data?.id,
+        code: meta?.code,
+        entitlements,
+        expiry: data?.attributes?.expiry ? new Date(data?.attributes?.expiry) : undefined,
+        metadata: data?.attributes?.metadata,
+        timestamp: new Date()
+    };
+}
+export default keygenValidateLicense;

package/dist/keygenValidateLicenseOffline.js

@@ -0,0 +1,53 @@
+/*
+  Copyright 2020-2024 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import crypto from 'crypto';
+async function keygenValidateLicenseOffline({ config, licenseKey }) {
+    const [data, signature] = licenseKey.split('.');
+    const [prefix, enc] = data.split('/');
+    if (prefix !== 'key') {
+        throw new Error(`Unsupported prefix '${prefix}'`);
+    }
+    const verifyKey = crypto.createPublicKey({
+        format: 'der',
+        type: 'spki',
+        key: Buffer.from(config.publicKey, 'base64')
+    });
+    const signatureBytes = Buffer.from(signature, 'base64');
+    const dataBytes = Buffer.from(data);
+    const ok = crypto.verify(null, dataBytes, verifyKey, signatureBytes);
+    if (!ok) {
+        throw new Error('TODO');
+    }
+    const decoded = JSON.parse(Buffer.from(enc, 'base64'));
+    const expiry = new Date(decoded.expiry);
+    if (decoded.product !== config.productId) {
+        return {
+            id: 'INVALID_LICENSE',
+            code: 'INVALID_LICENSE',
+            entitlements: [],
+            metadata: {},
+            timestamp: new Date()
+        };
+    }
+    return {
+        id: decoded.id,
+        code: expiry.valueOf() < Date.now() ? 'EXPIRED' : 'VALID',
+        entitlements: decoded.entitlements,
+        expiry: expiry,
+        metadata: decoded.metadata,
+        timestamp: new Date()
+    };
+}
+export default keygenValidateLicenseOffline;

package/dist/keygenVerifyApiSignature.js

@@ -0,0 +1,45 @@
+/*
+  Copyright 2020-2024 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import crypto from 'crypto';
+async function keygenVerifyApiSignature({ body, config, date, signatureHeader, target }) {
+    if (signatureHeader == null) {
+        throw new Error('Signature was expected but is missing'); // TODO
+    }
+    const [, signature] = signatureHeader.match(/signature="(.*)",/i);
+    const sha256 = crypto.createHash('sha256').update(body);
+    const digest = `sha-256=${sha256.digest('base64')}`;
+    // Rebuild the signing data
+    const data = [
+        `(request-target): ${target}`,
+        `host: api.keygen.sh`,
+        `date: ${date}`,
+        `digest: ${digest}`
+    ].join('\n');
+    // Decode DER verify key
+    const verifyKey = crypto.createPublicKey({
+        key: Buffer.from(config.publicKey, 'base64'),
+        format: 'der',
+        type: 'spki'
+    });
+    // Convert into bytes
+    const signatureBytes = Buffer.from(signature, 'base64');
+    const dataBytes = Buffer.from(data);
+    // Cryptographically verify data against the signature
+    const ok = crypto.verify(null, dataBytes, verifyKey, signatureBytes);
+    if (!ok) {
+        throw new Error(`Signature does not match: ${signature}`); // TODO
+    }
+}
+export default keygenVerifyApiSignature;

package/dist/readFile.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/dist/spawnProcess.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
@@ -13,7 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */ import { spawn } from 'child_process';
-function createStdIOHandler({ lineHandler  }) {
+function createStdIOHandler({ lineHandler }) {
     function handler(data) {
         data.toString('utf8').split('\n').forEach((line)=>{
             if (line) {
@@ -23,7 +23,7 @@ function createStdIOHandler({ lineHandler  }) {
     }
     return handler;
 }
-function spawnProcess({ args , command , processOptions , returnProcess , stdErrLineHandler , stdOutLineHandler =()=>{}  }) {
+function spawnProcess({ args, command, processOptions, returnProcess, stdErrLineHandler, stdOutLineHandler = ()=>{} }) {
     if (!stdErrLineHandler) {
         stdErrLineHandler = stdOutLineHandler;
     }

package/dist/writeFile.js

@@ -1,5 +1,5 @@
 /*
-  Copyright 2020-2023 Lowdefy, Inc
+  Copyright 2020-2024 Lowdefy, Inc
 
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/node-utils",
-  "version": "4.0.0-rc.9",
+  "version": "4.0.1",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -33,24 +33,22 @@
   "files": [
     "dist/*"
   ],
-  "scripts": {
-    "build": "swc src --out-dir dist --config-file ../../../.swcrc --delete-dir-on-start",
-    "clean": "rm -rf dist",
-    "prepublishOnly": "pnpm build",
-    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js"
-  },
   "dependencies": {
-    "@lowdefy/helpers": "4.0.0-rc.9",
-    "fs-extra": "11.1.0"
+    "@lowdefy/helpers": "4.0.1",
+    "fs-extra": "11.1.1"
   },
   "devDependencies": {
-    "@swc/cli": "0.1.59",
-    "@swc/core": "1.3.24",
-    "@swc/jest": "0.2.24",
-    "jest": "28.1.0"
+    "@swc/cli": "0.1.63",
+    "@swc/core": "1.3.99",
+    "@swc/jest": "0.2.29",
+    "jest": "28.1.3"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "d20e6ac424643feca527a732dc2b0710713c8243"
-}
+  "scripts": {
+    "build": "swc src --out-dir dist --config-file ../../../.swcrc --delete-dir-on-start",
+    "clean": "rm -rf dist",
+    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js"
+  }
+}