@serve.zone/dcrouter 17.7.1 → 17.9.0

package/dist_ts/webpush/classes.webpush-crypto.js

@@ -0,0 +1,231 @@
+import * as plugins from '../plugins.js';
+const KEY_ID_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
+const BASE64URL_KEY_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+const BASE64URL_VALUE_PATTERN = /^[A-Za-z0-9_-]+$/;
+const KEY_RING_LIMIT = 8;
+const AAD_SCHEMA_VERSION = 1;
+function requirePlainObject(valueArg, labelArg) {
+    if (valueArg === null
+        || typeof valueArg !== 'object'
+        || Array.isArray(valueArg)
+        || Object.getPrototypeOf(valueArg) !== Object.prototype) {
+        throw new Error(`${labelArg} must be a plain object`);
+    }
+    return valueArg;
+}
+function decodeBase64UrlExact(valueArg, lengthArg, labelArg) {
+    if (typeof valueArg !== 'string' || !BASE64URL_VALUE_PATTERN.test(valueArg)) {
+        throw new Error(`${labelArg} must be unpadded base64url`);
+    }
+    const decoded = Buffer.from(valueArg, 'base64url');
+    if (decoded.length !== lengthArg || decoded.toString('base64url') !== valueArg) {
+        throw new Error(`${labelArg} has an invalid encoded length`);
+    }
+    return decoded;
+}
+function parseKeyRingSource(rawValueArg, labelArg) {
+    if (typeof rawValueArg === 'string') {
+        const trimmed = rawValueArg.trim();
+        if (!trimmed) {
+            throw new Error(`${labelArg} is empty`);
+        }
+        const jsonText = trimmed.startsWith('base64Object:')
+            ? Buffer.from(trimmed.slice('base64Object:'.length), 'base64').toString('utf8')
+            : trimmed;
+        try {
+            return requirePlainObject(JSON.parse(jsonText), labelArg);
+        }
+        catch (error) {
+            if (error.message.startsWith(`${labelArg} `))
+                throw error;
+            throw new Error(`${labelArg} must be valid JSON`, { cause: error });
+        }
+    }
+    return requirePlainObject(rawValueArg, labelArg);
+}
+export function parseWebPushKeyRing(rawValueArg, labelArg) {
+    const source = parseKeyRingSource(rawValueArg, labelArg);
+    const currentKeyId = source.currentKeyId;
+    if (typeof currentKeyId !== 'string' || !KEY_ID_PATTERN.test(currentKeyId)) {
+        throw new Error(`${labelArg}.currentKeyId is invalid`);
+    }
+    const rawKeys = requirePlainObject(source.keys, `${labelArg}.keys`);
+    const entries = Object.entries(rawKeys);
+    if (entries.length === 0 || entries.length > KEY_RING_LIMIT) {
+        throw new Error(`${labelArg}.keys must contain 1 to ${KEY_RING_LIMIT} keys`);
+    }
+    const keys = new Map();
+    const fingerprints = new Set();
+    for (const [keyId, encodedKey] of entries) {
+        if (!KEY_ID_PATTERN.test(keyId)) {
+            throw new Error(`${labelArg}.keys contains an invalid key id`);
+        }
+        if (typeof encodedKey !== 'string' || !BASE64URL_KEY_PATTERN.test(encodedKey)) {
+            throw new Error(`${labelArg}.keys.${keyId} must be a 32-byte unpadded base64url key`);
+        }
+        const key = decodeBase64UrlExact(encodedKey, 32, `${labelArg}.keys.${keyId}`);
+        const fingerprint = key.toString('hex');
+        if (fingerprints.has(fingerprint)) {
+            throw new Error(`${labelArg}.keys must not contain duplicate key material`);
+        }
+        fingerprints.add(fingerprint);
+        keys.set(keyId, key);
+    }
+    if (!keys.has(currentKeyId)) {
+        throw new Error(`${labelArg}.currentKeyId does not name a configured key`);
+    }
+    return {
+        currentKeyId,
+        keys,
+    };
+}
+export function assertDistinctWebPushKeyRings(encryptionRingArg, hmacRingArg) {
+    const encryptionFingerprints = new Set([...encryptionRingArg.keys.values()].map((keyArg) => keyArg.toString('hex')));
+    if ([...hmacRingArg.keys.values()]
+        .some((keyArg) => encryptionFingerprints.has(keyArg.toString('hex')))) {
+        throw new Error('Web Push encryption and HMAC key rings must use distinct key material');
+    }
+}
+export function buildWebPushAad(contextArg) {
+    for (const [name, value] of Object.entries(contextArg)) {
+        if (typeof value !== 'string' || !value.trim()) {
+            throw new Error(`Web Push AAD ${name} is missing`);
+        }
+    }
+    return Buffer.from(canonicalJson({
+        schemaVersion: AAD_SCHEMA_VERSION,
+        gatewayClientId: contextArg.gatewayClientId,
+        appInstanceId: contextArg.appInstanceId,
+        bindingId: contextArg.bindingId,
+        documentType: contextArg.documentType,
+        documentId: contextArg.documentId,
+    }), 'utf8');
+}
+function canonicalize(valueArg) {
+    if (valueArg === null
+        || typeof valueArg === 'string'
+        || typeof valueArg === 'boolean') {
+        return valueArg;
+    }
+    if (typeof valueArg === 'number') {
+        if (!Number.isFinite(valueArg))
+            throw new Error('Canonical JSON does not support non-finite numbers');
+        return valueArg;
+    }
+    if (Array.isArray(valueArg)) {
+        return valueArg.map((entryArg) => canonicalize(entryArg));
+    }
+    const value = requirePlainObject(valueArg, 'Canonical JSON value');
+    const result = {};
+    for (const key of Object.keys(value).sort()) {
+        if (value[key] === undefined) {
+            throw new Error('Canonical JSON does not support undefined values');
+        }
+        result[key] = canonicalize(value[key]);
+    }
+    return result;
+}
+export function canonicalJson(valueArg) {
+    return JSON.stringify(canonicalize(valueArg));
+}
+export class WebPushCrypto {
+    encryptionRing;
+    hmacRing;
+    constructor(encryptionRing, hmacRing) {
+        this.encryptionRing = encryptionRing;
+        this.hmacRing = hmacRing;
+        assertDistinctWebPushKeyRings(encryptionRing, hmacRing);
+    }
+    get currentEncryptionKeyId() {
+        return this.encryptionRing.currentKeyId;
+    }
+    get currentHmacKeyId() {
+        return this.hmacRing.currentKeyId;
+    }
+    encryptJson(valueArg, aadContextArg) {
+        const keyId = this.encryptionRing.currentKeyId;
+        const key = this.encryptionRing.keys.get(keyId);
+        if (!key)
+            throw new Error('Current Web Push encryption key is unavailable');
+        const nonce = plugins.crypto.randomBytes(12);
+        const cipher = plugins.crypto.createCipheriv('aes-256-gcm', key, nonce);
+        cipher.setAAD(buildWebPushAad(aadContextArg));
+        const ciphertext = Buffer.concat([
+            cipher.update(canonicalJson(valueArg), 'utf8'),
+            cipher.final(),
+        ]);
+        const tag = cipher.getAuthTag();
+        return {
+            version: 1,
+            algorithm: 'aes-256-gcm',
+            keyId,
+            nonce: nonce.toString('base64url'),
+            ciphertext: ciphertext.toString('base64url'),
+            tag: tag.toString('base64url'),
+        };
+    }
+    decryptJson(envelopeArg, aadContextArg) {
+        if (envelopeArg?.version !== 1
+            || envelopeArg.algorithm !== 'aes-256-gcm'
+            || typeof envelopeArg.keyId !== 'string'
+            || !KEY_ID_PATTERN.test(envelopeArg.keyId)) {
+            throw new Error('Web Push encrypted envelope is malformed');
+        }
+        const key = this.encryptionRing.keys.get(envelopeArg.keyId);
+        if (!key)
+            throw new Error('Web Push encrypted envelope references an unavailable key');
+        const nonce = decodeBase64UrlExact(envelopeArg.nonce, 12, 'Web Push envelope nonce');
+        const tag = decodeBase64UrlExact(envelopeArg.tag, 16, 'Web Push envelope tag');
+        if (typeof envelopeArg.ciphertext !== 'string'
+            || !envelopeArg.ciphertext
+            || !BASE64URL_VALUE_PATTERN.test(envelopeArg.ciphertext)) {
+            throw new Error('Web Push envelope ciphertext is malformed');
+        }
+        const ciphertext = Buffer.from(envelopeArg.ciphertext, 'base64url');
+        if (ciphertext.toString('base64url') !== envelopeArg.ciphertext) {
+            throw new Error('Web Push envelope ciphertext is malformed');
+        }
+        try {
+            const decipher = plugins.crypto.createDecipheriv('aes-256-gcm', key, nonce);
+            decipher.setAAD(buildWebPushAad(aadContextArg));
+            decipher.setAuthTag(tag);
+            const plaintext = Buffer.concat([
+                decipher.update(ciphertext),
+                decipher.final(),
+            ]).toString('utf8');
+            return JSON.parse(plaintext);
+        }
+        catch (error) {
+            throw new Error('Web Push encrypted envelope authentication failed', { cause: error });
+        }
+    }
+    hmac(domainArg, valueArg, keyIdArg = this.hmacRing.currentKeyId) {
+        const key = this.hmacRing.keys.get(keyIdArg);
+        if (!key)
+            throw new Error('Web Push HMAC key is unavailable');
+        const digest = plugins.crypto
+            .createHmac('sha256', key)
+            .update(`dcrouter:webpush:v1:${domainArg}\0`, 'utf8')
+            .update(valueArg, 'utf8')
+            .digest('base64url');
+        return {
+            keyId: keyIdArg,
+            digest,
+        };
+    }
+    verifyHmac(domainArg, valueArg, keyIdArg, expectedDigestArg) {
+        let actualDigest;
+        try {
+            actualDigest = this.hmac(domainArg, valueArg, keyIdArg).digest;
+        }
+        catch {
+            return false;
+        }
+        const actual = Buffer.from(actualDigest, 'base64url');
+        const expected = Buffer.from(expectedDigestArg, 'base64url');
+        return actual.length === expected.length
+            && actual.length > 0
+            && plugins.crypto.timingSafeEqual(actual, expected);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/webpush/classes.webpush-manager.d.ts

@@ -0,0 +1,153 @@
+import * as plugins from '../plugins.js';
+import { WebPushBindingDoc, WebPushSpoolDoc, type IWebPushStoredCredential, type TWebPushControllerIntent } from '../db/index.js';
+import { type IWebPushTransport } from './classes.webpush-transport.js';
+type IWebPushBinding = plugins.servezoneInterfaces.data.IWebPushBinding;
+type IWebPushCredentialOneTimeSecret = plugins.servezoneInterfaces.data.IWebPushCredentialOneTimeSecret;
+type IWebPushDeliveryStatus = plugins.servezoneInterfaces.data.IWebPushDeliveryStatus;
+type IWebPushNotificationPayload = plugins.servezoneInterfaces.data.IWebPushNotificationPayload;
+type IWebPushResourceOwner = plugins.servezoneInterfaces.data.IWebPushResourceOwner;
+type IWebPushServiceStatus = plugins.servezoneInterfaces.data.IWebPushServiceStatus;
+type IWebPushSubscription = plugins.servezoneInterfaces.data.IWebPushSubscription;
+type TWebPushBindingSync = plugins.servezoneInterfaces.requests.webpush.TWebPushBindingSync;
+type IWebPushAppCredentialAuth = plugins.servezoneInterfaces.requests.webpush.IWebPushAppCredentialAuth;
+type TWebPushCancellationTarget = plugins.servezoneInterfaces.data.TWebPushCancellationTarget;
+type TWebPushDeliveryState = plugins.servezoneInterfaces.data.TWebPushDeliveryState;
+type TWebPushUrgency = plugins.servezoneInterfaces.data.TWebPushUrgency;
+interface IWebPushQenv {
+    getEnvVarOnDemand(nameArg: string): Promise<string | undefined>;
+}
+export interface IWebPushManagerOptions {
+    qenv?: IWebPushQenv;
+    transport?: IWebPushTransport;
+    startWorker?: boolean;
+    now?: () => number;
+    admissionPolicy?: Partial<IWebPushAdmissionPolicy>;
+}
+export interface IWebPushAdmissionPolicy {
+    shortWindowMs: number;
+    shortLimit: number;
+    longWindowMs: number;
+    longLimit: number;
+}
+export interface IWebPushAuthenticatedBinding {
+    binding: WebPushBindingDoc;
+    credential: IWebPushStoredCredential;
+}
+export interface IWebPushBindingSyncResult {
+    binding: IWebPushBinding;
+    credential?: IWebPushCredentialOneTimeSecret;
+}
+/**
+ * Durable controller ordering token. The controller id and epoch remain stable
+ * for an owner, while generation increases for every desired-state mutation.
+ */
+export interface IWebPushControllerMutation {
+    id: string;
+    epoch: string;
+    generation: number;
+    operationId: string;
+    intent: TWebPushControllerIntent;
+}
+export interface IWebPushBindingDelete {
+    id?: string;
+    owner: IWebPushResourceOwner;
+    controller: IWebPushControllerMutation;
+}
+export interface IWebPushEnqueueResult {
+    accepted: boolean;
+    spoolItemId: string;
+}
+export interface IWebPushCancelResult {
+    cancelledCount: number;
+    alreadyTerminalCount: number;
+}
+export declare function toPublicWebPushBinding(bindingArg: WebPushBindingDoc): IWebPushBinding;
+export declare function toPublicWebPushDelivery(spoolArg: WebPushSpoolDoc): IWebPushDeliveryStatus;
+export declare function buildWebPushTerminalUpdate(optionsArg: {
+    state: Extract<TWebPushDeliveryState, 'pushServiceAccepted' | 'invalidSubscription' | 'failed' | 'expired' | 'cancelled'>;
+    now: number;
+    pushServiceStatusCode?: number;
+    errorCode?: string;
+}): Record<string, unknown>;
+export declare class WebPushManager {
+    private readonly qenv;
+    private readonly transport;
+    private readonly startWorker;
+    private readonly now;
+    private readonly admissionPolicy;
+    private enabled;
+    private started;
+    private ready;
+    private crypto?;
+    private vapidSubject?;
+    private workerTimer?;
+    private activeWorkerCycle?;
+    private expiredCredentialOverlapCursor?;
+    private expiredCredentialRecoveryCursor?;
+    private retiredVapidCursor?;
+    private inactiveLifecycleCursor?;
+    constructor(optionsArg?: IWebPushManagerOptions);
+    get isEnabled(): boolean;
+    get isReady(): boolean;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    getUnavailableServiceStatus(): IWebPushServiceStatus;
+    listBindings(ownerFilterArg?: Partial<IWebPushResourceOwner>): Promise<IWebPushBinding[]>;
+    getBindingById(idArg: string): Promise<WebPushBindingDoc | null>;
+    getBindingByCredentialId(credentialIdArg: string): Promise<WebPushBindingDoc | null>;
+    syncBinding(bindingArg: TWebPushBindingSync, controllerArg: IWebPushControllerMutation, createdByArg: string): Promise<IWebPushBindingSyncResult>;
+    private resumeControllerSyncReplay;
+    deleteBinding(deleteArg: IWebPushBindingDelete, deletedByArg: string): Promise<boolean>;
+    private resumeControllerDeleteReplay;
+    rotateCredential(credentialIdArg: string): Promise<IWebPushCredentialOneTimeSecret>;
+    rotateVapidKey(bindingIdArg: string): Promise<IWebPushBinding>;
+    authenticateAppCredential(authArg: IWebPushAppCredentialAuth): Promise<IWebPushAuthenticatedBinding>;
+    getServiceStatus(authArg: IWebPushAppCredentialAuth): Promise<IWebPushServiceStatus>;
+    enqueue(authArg: IWebPushAppCredentialAuth, requestArg: {
+        idempotencyKey: string;
+        subscriptionId: string;
+        subscription: IWebPushSubscription;
+        vapidKeyId: string;
+        payload: IWebPushNotificationPayload;
+        ttlSeconds?: number;
+        urgency?: TWebPushUrgency;
+        collapseKey?: string;
+    }): Promise<IWebPushEnqueueResult>;
+    getDeliveryStatus(authArg: IWebPushAppCredentialAuth, spoolItemIdArg: string): Promise<IWebPushDeliveryStatus | undefined>;
+    cancel(authArg: IWebPushAppCredentialAuth, targetArg: TWebPushCancellationTarget): Promise<IWebPushCancelResult>;
+    processDueDeliveriesOnce(limitArg?: number): Promise<number>;
+    private requirePersistenceReady;
+    private requireReady;
+    private bindingOwner;
+    private assertBindingOwner;
+    private credentialHmacValue;
+    private createCredential;
+    private credentialRotationRecoveryAad;
+    private replayCredentialRotation;
+    private createVapidKey;
+    private spoolAadBase;
+    private assertBindingLifecycleActive;
+    private reserveAdmission;
+    private cancelSpoolIfLifecycleChanged;
+    private scrubDeletedBindingLifecycle;
+    private cleanupExpiredCredentialOverlaps;
+    private cleanupExpiredCredentialRotationRecoveries;
+    private cleanupRetiredVapidKeys;
+    private runMaintenanceOnce;
+    private cleanupInactiveBindingLifecycles;
+    private selectBindingMaintenanceBatch;
+    private requestBindingLifecyclesBeforeCancellation;
+    private drainBindingLifecyclesBefore;
+    private waitForBindingLifecyclesBeforeDrain;
+    private finishStaleCancelledSending;
+    private finishStaleCancelledSendingBefore;
+    private cancelWithinBinding;
+    private expireDueItems;
+    private claimNextItem;
+    private processClaimedItem;
+    private finishTerminal;
+    private deferOrFinish;
+    private retryDelayMs;
+    private scheduleWorker;
+}
+export {};