@offlinejs/encryption 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import { StorageAdapter, EncryptionCodec } from '@offlinejs/types';
+
+declare const createJsonEncryptionStorage: (storage: StorageAdapter, codec: EncryptionCodec) => StorageAdapter;
+declare const createWebCryptoAesGcmCodec: (key: CryptoKey) => Promise<EncryptionCodec>;
+declare const generateAesGcmKey: () => Promise<CryptoKey>;
+
+export { createJsonEncryptionStorage, createWebCryptoAesGcmCodec, generateAesGcmKey };

package/dist/index.js

@@ -0,0 +1,105 @@
+import { STORAGE_ADAPTER_CONTRACT_VERSION } from '@offlinejs/types';
+import { withIndexForwarding, applyQuery } from '@offlinejs/utils';
+
+// src/index.ts
+var createJsonEncryptionStorage = (storage, codec) => {
+  const createEncryptedStore = (store) => ({
+    clear: (collection) => store.clear(collection),
+    delete: (collection, id) => store.delete(collection, id),
+    async find(collection, query) {
+      const encryptedRecords = await store.find(collection);
+      const records = await Promise.all(
+        encryptedRecords.map((record) => decryptRecord(record, codec))
+      );
+      return applyQuery(records, query);
+    },
+    async get(collection, id) {
+      const record = await store.get(collection, id);
+      return record ? decryptRecord(record, codec) : null;
+    },
+    async set(collection, value) {
+      await store.set(collection, await encryptRecord(value, codec));
+    }
+  });
+  const wrapper = {
+    name: `${storage.name}:encrypted`,
+    contractVersion: STORAGE_ADAPTER_CONTRACT_VERSION,
+    ...storage.capabilities ? { capabilities: storage.capabilities } : {},
+    clear: (collection) => storage.clear(collection),
+    delete: (collection, id) => storage.delete(collection, id),
+    async find(collection, query) {
+      const encryptedRecords = await storage.find(collection);
+      const records = await Promise.all(
+        encryptedRecords.map((record) => decryptRecord(record, codec))
+      );
+      return applyQuery(records, query);
+    },
+    async get(collection, id) {
+      const record = await storage.get(collection, id);
+      return record ? decryptRecord(record, codec) : null;
+    },
+    async set(collection, value) {
+      await storage.set(collection, await encryptRecord(value, codec));
+    },
+    transaction: (scope, run) => storage.transaction(scope, (store) => run(createEncryptedStore(store))),
+    ...storage.migrate ? { migrate: storage.migrate.bind(storage) } : {}
+  };
+  return withIndexForwarding(wrapper, storage);
+};
+var createWebCryptoAesGcmCodec = async (key) => ({
+  async decrypt(value) {
+    const iv = value.slice(0, 12);
+    const ciphertext = value.slice(12);
+    const decrypted = await globalThis.crypto.subtle.decrypt(
+      { iv, name: "AES-GCM" },
+      key,
+      ciphertext
+    );
+    return new Uint8Array(decrypted);
+  },
+  async encrypt(value) {
+    const iv = globalThis.crypto.getRandomValues(new Uint8Array(12));
+    const encrypted = await globalThis.crypto.subtle.encrypt({ iv, name: "AES-GCM" }, key, value);
+    const output = new Uint8Array(iv.byteLength + encrypted.byteLength);
+    output.set(iv, 0);
+    output.set(new Uint8Array(encrypted), iv.byteLength);
+    return output;
+  }
+});
+var generateAesGcmKey = () => globalThis.crypto.subtle.generateKey({ length: 256, name: "AES-GCM" }, true, [
+  "encrypt",
+  "decrypt"
+]);
+var encryptRecord = async (record, codec) => {
+  const bytes = new TextEncoder().encode(JSON.stringify(record));
+  const encrypted = await codec.encrypt(bytes);
+  return {
+    id: record.id,
+    __offlinejsEncrypted: true,
+    data: bytesToBase64(encrypted)
+  };
+};
+var decryptRecord = async (record, codec) => {
+  const encrypted = base64ToBytes(record.data);
+  const decrypted = await codec.decrypt(encrypted);
+  return JSON.parse(new TextDecoder().decode(decrypted));
+};
+var bytesToBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return globalThis.btoa(binary);
+};
+var base64ToBytes = (value) => {
+  const binary = globalThis.atob(value);
+  const bytes = new Uint8Array(binary.length);
+  for (let index = 0; index < binary.length; index += 1) {
+    bytes[index] = binary.charCodeAt(index);
+  }
+  return bytes;
+};
+
+export { createJsonEncryptionStorage, createWebCryptoAesGcmCodec, generateAesGcmKey };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;AAeO,IAAM,2BAAA,GAA8B,CACzC,OAAA,EACA,KAAA,KACmB;AACnB,EAAA,MAAM,oBAAA,GAAuB,CAAC,KAAA,MAA+C;AAAA,IAC3E,KAAA,EAAO,CAAC,UAAA,KAAe,KAAA,CAAM,MAAM,UAAU,CAAA;AAAA,IAC7C,QAAQ,CAAC,UAAA,EAAY,OAAO,KAAA,CAAM,MAAA,CAAO,YAAY,EAAE,CAAA;AAAA,IACvD,MAAM,IAAA,CACJ,UAAA,EACA,KAAA,EACoB;AACpB,MAAA,MAAM,gBAAA,GAAmB,MAAM,KAAA,CAAM,IAAA,CAAsB,UAAU,CAAA;AACrE,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA;AAAA,QAC5B,iBAAiB,GAAA,CAAI,CAAC,WAAW,aAAA,CAAuB,MAAA,EAAQ,KAAK,CAAC;AAAA,OACxE;AACA,MAAA,OAAO,UAAA,CAAW,SAAS,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IACA,MAAM,GAAA,CACJ,UAAA,EACA,EAAA,EACyB;AACzB,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,CAAqB,YAAY,EAAE,CAAA;AAC9D,MAAA,OAAO,MAAA,GAAS,aAAA,CAAuB,MAAA,EAAQ,KAAK,CAAA,GAAI,IAAA;AAAA,IAC1D,CAAA;AAAA,IACA,MAAM,GAAA,CAAkC,UAAA,EAAoB,KAAA,EAA+B;AACzF,MAAA,MAAM,MAAM,GAAA,CAAI,UAAA,EAAY,MAAM,aAAA,CAAc,KAAA,EAAO,KAAK,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF,CAAA;AAEA,EAAA,MAAM,OAAA,GAA0B;AAAA,IAC9B,IAAA,EAAM,CAAA,EAAG,OAAA,CAAQ,IAAI,CAAA,UAAA,CAAA;AAAA,IACrB,eAAA,EAAiB,gCAAA;AAAA,IACjB,GAAI,QAAQ,YAAA,GAAe,EAAE,cAAc,OAAA,CAAQ,YAAA,KAAiB,EAAC;AAAA,IACrE,KAAA,EAAO,CAAC,UAAA,KAAe,OAAA,CAAQ,MAAM,UAAU,CAAA;AAAA,IAC/C,QAAQ,CAAC,UAAA,EAAY,OAAO,OAAA,CAAQ,MAAA,CAAO,YAAY,EAAE,CAAA;AAAA,IACzD,MAAM,IAAA,CACJ,UAAA,EACA,KAAA,EACoB;AACpB,MAAA,MAAM,gBAAA,GAAmB,MAAM,OAAA,CAAQ,IAAA,CAAsB,UAAU,CAAA;AACvE,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA;AAAA,QAC5B,iBAAiB,GAAA,CAAI,CAAC,WAAW,aAAA,CAAuB,MAAA,EAAQ,KAAK,CAAC;AAAA,OACxE;AAEA,MAAA,OAAO,UAAA,CAAW,SAAS,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IACA,MAAM,GAAA,CACJ,UAAA,EACA,EAAA,EACyB;AACzB,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,GAAA,CAAqB,YAAY,EAAE,CAAA;AAChE,MAAA,OAAO,MAAA,GAAS,aAAA,CAAuB,MAAA,EAAQ,KAAK,CAAA,GAAI,IAAA;AAAA,IAC1D,CAAA;AAAA,IACA,MAAM,GAAA,CAAkC,UAAA,EAAoB,KAAA,EAA+B;AACzF,MAAA,MAAM,QAAQ,GAAA,CAAI,UAAA,EAAY,MAAM,aAAA,CAAc,KAAA,EAAO,KAAK,CAAC,CAAA;AAAA,IACjE,CAAA;AAAA,IACA,WAAA,EAAa,CAAS,KAAA,EAAiB,GAAA,KACrC,OAAA,CAAQ,WAAA,CAAY,KAAA,EAAO,CAAC,KAAA,KAAU,GAAA,CAAI,oBAAA,CAAqB,KAAK,CAAC,CAAC,CAAA;AAAA,IACxE,GAAI,OAAA,CAAQ,OAAA,GAAU,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,OAAO,CAAA,EAAE,GAAI;AAAC,GACtE;AAEA,EAAA,OAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAC7C;AAEO,IAAM,0BAAA,GAA6B,OAAO,GAAA,MAA8C;AAAA,EAC7F,MAAM,QAAQ,KAAA,EAAO;AACnB,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC5B,IAAA,MAAM,UAAA,GAAa,KAAA,CAAM,KAAA,CAAM,EAAE,CAAA;AACjC,IAAA,MAAM,SAAA,GAAY,MAAM,UAAA,CAAW,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MAC/C,EAAE,EAAA,EAAI,IAAA,EAAM,SAAA,EAAU;AAAA,MACtB,GAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,WAAW,SAAS,CAAA;AAAA,EACjC,CAAA;AAAA,EACA,MAAM,QAAQ,KAAA,EAAO;AACnB,IAAA,MAAM,KAAK,UAAA,CAAW,MAAA,CAAO,gBAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AAC/D,IAAA,MAAM,SAAA,GAAY,MAAM,UAAA,CAAW,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,EAAE,EAAA,EAAI,IAAA,EAAM,SAAA,EAAU,EAAG,GAAA,EAAK,KAAK,CAAA;AAC5F,IAAA,MAAM,SAAS,IAAI,UAAA,CAAW,EAAA,CAAG,UAAA,GAAa,UAAU,UAAU,CAAA;AAClE,IAAA,MAAA,CAAO,GAAA,CAAI,IAAI,CAAC,CAAA;AAChB,IAAA,MAAA,CAAO,IAAI,IAAI,UAAA,CAAW,SAAS,CAAA,EAAG,GAAG,UAAU,CAAA;AACnD,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAA;AAEO,IAAM,iBAAA,GAAoB,MAC/B,UAAA,CAAW,MAAA,CAAO,MAAA,CAAO,WAAA,CAAY,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAA,EAAM,SAAA,EAAU,EAAG,IAAA,EAAM;AAAA,EAC3E,SAAA;AAAA,EACA;AACF,CAAC;AAEH,IAAM,aAAA,GAAgB,OACpB,MAAA,EACA,KAAA,KAC6B;AAC7B,EAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY,CAAE,OAAO,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAC7D,EAAA,MAAM,SAAA,GAAY,MAAM,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AAE3C,EAAA,OAAO;AAAA,IACL,IAAI,MAAA,CAAO,EAAA;AAAA,IACX,oBAAA,EAAsB,IAAA;AAAA,IACtB,IAAA,EAAM,cAAc,SAAS;AAAA,GAC/B;AACF,CAAA;AAEA,IAAM,aAAA,GAAgB,OACpB,MAAA,EACA,KAAA,KACqB;AACrB,EAAA,MAAM,SAAA,GAAY,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AAC3C,EAAA,MAAM,SAAA,GAAY,MAAM,KAAA,CAAM,OAAA,CAAQ,SAAS,CAAA;AAC/C,EAAA,OAAO,KAAK,KAAA,CAAM,IAAI,aAAY,CAAE,MAAA,CAAO,SAAS,CAAC,CAAA;AACvD,CAAA;AAEA,IAAM,aAAA,GAAgB,CAAC,KAAA,KAA8B;AACnD,EAAA,IAAI,MAAA,GAAS,EAAA;AAEb,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAA,IAAU,MAAA,CAAO,aAAa,IAAI,CAAA;AAAA,EACpC;AAEA,EAAA,OAAO,UAAA,CAAW,KAAK,MAAM,CAAA;AAC/B,CAAA;AAEA,IAAM,aAAA,GAAgB,CAAC,KAAA,KAA8B;AACnD,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAE1C,EAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA,EAAG;AACrD,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,KAAK,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,KAAA;AACT,CAAA","file":"index.js","sourcesContent":["import {\n  STORAGE_ADAPTER_CONTRACT_VERSION,\n  type EncryptionCodec,\n  type EntityRecord,\n  type QueryOptions,\n  type StorageAdapter,\n  type TransactionStore\n} from \"@offlinejs/types\";\nimport { applyQuery, withIndexForwarding } from \"@offlinejs/utils\";\n\ninterface EncryptedRecord extends EntityRecord {\n  __offlinejsEncrypted: true;\n  data: string;\n}\n\nexport const createJsonEncryptionStorage = (\n  storage: StorageAdapter,\n  codec: EncryptionCodec\n): StorageAdapter => {\n  const createEncryptedStore = (store: TransactionStore): TransactionStore => ({\n    clear: (collection) => store.clear(collection),\n    delete: (collection, id) => store.delete(collection, id),\n    async find<TRecord extends EntityRecord>(\n      collection: string,\n      query?: QueryOptions<TRecord>\n    ): Promise<TRecord[]> {\n      const encryptedRecords = await store.find<EncryptedRecord>(collection);\n      const records = await Promise.all(\n        encryptedRecords.map((record) => decryptRecord<TRecord>(record, codec))\n      );\n      return applyQuery(records, query);\n    },\n    async get<TRecord extends EntityRecord>(\n      collection: string,\n      id: string\n    ): Promise<TRecord | null> {\n      const record = await store.get<EncryptedRecord>(collection, id);\n      return record ? decryptRecord<TRecord>(record, codec) : null;\n    },\n    async set<TRecord extends EntityRecord>(collection: string, value: TRecord): Promise<void> {\n      await store.set(collection, await encryptRecord(value, codec));\n    }\n  });\n\n  const wrapper: StorageAdapter = {\n    name: `${storage.name}:encrypted`,\n    contractVersion: STORAGE_ADAPTER_CONTRACT_VERSION,\n    ...(storage.capabilities ? { capabilities: storage.capabilities } : {}),\n    clear: (collection) => storage.clear(collection),\n    delete: (collection, id) => storage.delete(collection, id),\n    async find<TRecord extends EntityRecord>(\n      collection: string,\n      query?: QueryOptions<TRecord>\n    ): Promise<TRecord[]> {\n      const encryptedRecords = await storage.find<EncryptedRecord>(collection);\n      const records = await Promise.all(\n        encryptedRecords.map((record) => decryptRecord<TRecord>(record, codec))\n      );\n\n      return applyQuery(records, query);\n    },\n    async get<TRecord extends EntityRecord>(\n      collection: string,\n      id: string\n    ): Promise<TRecord | null> {\n      const record = await storage.get<EncryptedRecord>(collection, id);\n      return record ? decryptRecord<TRecord>(record, codec) : null;\n    },\n    async set<TRecord extends EntityRecord>(collection: string, value: TRecord): Promise<void> {\n      await storage.set(collection, await encryptRecord(value, codec));\n    },\n    transaction: <TValue>(scope: string[], run: (store: TransactionStore) => Promise<TValue>) =>\n      storage.transaction(scope, (store) => run(createEncryptedStore(store))),\n    ...(storage.migrate ? { migrate: storage.migrate.bind(storage) } : {})\n  };\n\n  return withIndexForwarding(wrapper, storage);\n};\n\nexport const createWebCryptoAesGcmCodec = async (key: CryptoKey): Promise<EncryptionCodec> => ({\n  async decrypt(value) {\n    const iv = value.slice(0, 12);\n    const ciphertext = value.slice(12);\n    const decrypted = await globalThis.crypto.subtle.decrypt(\n      { iv, name: \"AES-GCM\" },\n      key,\n      ciphertext\n    );\n    return new Uint8Array(decrypted);\n  },\n  async encrypt(value) {\n    const iv = globalThis.crypto.getRandomValues(new Uint8Array(12));\n    const encrypted = await globalThis.crypto.subtle.encrypt({ iv, name: \"AES-GCM\" }, key, value);\n    const output = new Uint8Array(iv.byteLength + encrypted.byteLength);\n    output.set(iv, 0);\n    output.set(new Uint8Array(encrypted), iv.byteLength);\n    return output;\n  }\n});\n\nexport const generateAesGcmKey = (): Promise<CryptoKey> =>\n  globalThis.crypto.subtle.generateKey({ length: 256, name: \"AES-GCM\" }, true, [\n    \"encrypt\",\n    \"decrypt\"\n  ]);\n\nconst encryptRecord = async <TRecord extends EntityRecord>(\n  record: TRecord,\n  codec: EncryptionCodec\n): Promise<EncryptedRecord> => {\n  const bytes = new TextEncoder().encode(JSON.stringify(record));\n  const encrypted = await codec.encrypt(bytes);\n\n  return {\n    id: record.id,\n    __offlinejsEncrypted: true,\n    data: bytesToBase64(encrypted)\n  };\n};\n\nconst decryptRecord = async <TRecord extends EntityRecord>(\n  record: EncryptedRecord,\n  codec: EncryptionCodec\n): Promise<TRecord> => {\n  const encrypted = base64ToBytes(record.data);\n  const decrypted = await codec.decrypt(encrypted);\n  return JSON.parse(new TextDecoder().decode(decrypted)) as TRecord;\n};\n\nconst bytesToBase64 = (bytes: Uint8Array): string => {\n  let binary = \"\";\n\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte);\n  }\n\n  return globalThis.btoa(binary);\n};\n\nconst base64ToBytes = (value: string): Uint8Array => {\n  const binary = globalThis.atob(value);\n  const bytes = new Uint8Array(binary.length);\n\n  for (let index = 0; index < binary.length; index += 1) {\n    bytes[index] = binary.charCodeAt(index);\n  }\n\n  return bytes;\n};\n"]}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@offlinejs/encryption",
+  "version": "0.1.0",
+  "description": "Encryption codec and encrypted storage wrapper for OfflineJS.",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@offlinejs/types": "0.1.0",
+    "@offlinejs/utils": "0.1.0"
+  },
+  "devDependencies": {
+    "tsup": "latest",
+    "typescript": "latest"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit"
+  }
+}