@tempoxyz/id 0.0.0-pr-187.sha-eed04d3

package/src/internal/Id.ts

@@ -0,0 +1,41 @@
+/**
+ * Creates IDs in the formats that Tempo ID's records keep from WorkOS, so an imported user and a new
+ * one share the `sub` scheme.
+ * @module
+ */
+
+/** Consonants only, so user codes spell no words and survive being read aloud. */
+const consonants = 'BCDFGHJKLMNPQRSTVWXZ'
+
+/** Crockford's base 32, which ULIDs use. */
+const alphabet = '0123456789ABCDEFGHJKMNPQRSTVWXYZ'
+
+/** Returns a new user ID: `user_` and a ULID, as WorkOS user IDs are. */
+export function user() {
+  return `user_${ulid()}`
+}
+
+/** Returns a new device grant user code: 8 consonants, which pages show as `BCDF-GHJK`. */
+export function userCode() {
+  const characters: string[] = []
+  while (characters.length < 8)
+    for (const byte of crypto.getRandomValues(new Uint8Array(16)))
+      // Bytes below 240 map evenly onto the 20 consonants.
+      if (byte < 240 && characters.length < 8)
+        characters.push(consonants[byte % consonants.length]!)
+  return characters.join('')
+}
+
+/** Returns a ULID: 48 bits of milliseconds, then 80 random bits, in 26 base-32 characters. */
+function ulid() {
+  const now = Date.now()
+  const time = Array.from({ length: 10 }, (_, index) => {
+    const shift = 5 * (9 - index)
+    return alphabet[Math.floor(now / 2 ** shift) % 32]
+  }).join('')
+  const random = Array.from(
+    crypto.getRandomValues(new Uint8Array(16)),
+    (byte) => alphabet[byte % 32],
+  ).join('')
+  return time + random
+}