@vardario/cognito-client 0.1.4 → 0.1.5

package/lib/utils.js

@@ -0,0 +1,111 @@
+import formatInTimeZone from 'date-fns-tz/formatInTimeZone';
+import { hmac, sha256 } from 'hash.js';
+import { BigInteger } from 'jsbn';
+import randomBytes from 'randombytes';
+const initN = 'FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1' +
+    '29024E088A67CC74020BBEA63B139B22514A08798E3404DD' +
+    'EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245' +
+    'E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED' +
+    'EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D' +
+    'C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F' +
+    '83655D23DCA3AD961C62F356208552BB9ED529077096966D' +
+    '670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B' +
+    'E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9' +
+    'DE2BCBF6955817183995497CEA956AE515D2261898FA0510' +
+    '15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64' +
+    'ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7' +
+    'ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B' +
+    'F12FFA06D98A0864D87602733EC86A64521F2B18177B200C' +
+    'BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31' +
+    '43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF';
+const N = new BigInteger(initN, 16);
+const g = new BigInteger('2', 16);
+const k = new BigInteger(hashHexString(`${padHex(N)}${padHex(g)}`), 16);
+export function padHex(bigInt) {
+    const HEX_MSB_REGEX = /^[89a-f]/i;
+    const isNegative = bigInt.compareTo(BigInteger.ZERO) < 0;
+    let hexStr = bigInt.abs().toString(16);
+    hexStr = hexStr.length % 2 !== 0 ? `0${hexStr}` : hexStr;
+    hexStr = HEX_MSB_REGEX.test(hexStr) ? `00${hexStr}` : hexStr;
+    if (isNegative) {
+        const invertedNibbles = hexStr
+            .split('')
+            .map((x) => {
+            const invertedNibble = ~parseInt(x, 16) & 0xf;
+            return '0123456789ABCDEF'.charAt(invertedNibble);
+        })
+            .join('');
+        const flippedBitsBI = new BigInteger(invertedNibbles, 16).add(BigInteger.ONE);
+        hexStr = flippedBitsBI.toString(16);
+        if (hexStr.toUpperCase().startsWith('FF8')) {
+            hexStr = hexStr.substring(2);
+        }
+    }
+    return hexStr;
+}
+export function hashHexString(str) {
+    return hashBuffer(Buffer.from(str, 'hex'));
+}
+export function hashBuffer(buffer) {
+    const hash = sha256().update(buffer).digest('hex');
+    return new Array(64 - hash.length).join('0') + hash;
+}
+export function generateSmallA() {
+    return new BigInteger(randomBytes(128).toString('hex'), 16);
+}
+export function generateA(smallA) {
+    const A = g.modPow(smallA, N);
+    return A;
+}
+export function calculateU(A, B) {
+    return new BigInteger(hashHexString(padHex(A) + padHex(B)), 16);
+}
+export function calculateS(X, B, U, smallA) {
+    const gModPowXN = g.modPow(X, N);
+    const bMinusKMult = B.subtract(k.multiply(gModPowXN));
+    return bMinusKMult.modPow(smallA.add(U.multiply(X)), N).mod(N);
+}
+export function calculateHKDF(ikm, salt) {
+    const infoBitsBuffer = Buffer.concat([
+        Buffer.from('Caldera Derived Key', 'utf8'),
+        Buffer.from(String.fromCharCode(1), 'utf8'),
+    ]);
+    const prk = hmac(sha256, salt)
+        .update(ikm)
+        .digest();
+    const hmacResult = hmac(sha256, prk)
+        .update(infoBitsBuffer)
+        .digest();
+    return hmacResult.slice(0, 16);
+}
+export function getPasswordAuthenticationKey(poolName, username, password, B, U, smallA, salt) {
+    const usernamePassword = `${poolName}${username}:${password}`;
+    const usernamePasswordHash = hashBuffer(Buffer.from(usernamePassword, 'utf-8'));
+    const X = new BigInteger(hashHexString(padHex(salt) + usernamePasswordHash), 16);
+    const S = calculateS(X, B, U, smallA);
+    return calculateHKDF(Buffer.from(padHex(S), 'hex'), Buffer.from(padHex(U), 'hex'));
+}
+export function calculateSignature(poolName, userId, secretBlock, hkdf) {
+    const timeStamp = formatInTimeZone(new Date(), 'UTC', "EEE MMM d HH:mm:ss 'UTC' yyyy");
+    const concatBuffer = Buffer.concat([
+        Buffer.from(poolName, 'utf8'),
+        Buffer.from(userId, 'utf8'),
+        Buffer.from(secretBlock, 'base64'),
+        Buffer.from(timeStamp, 'utf8'),
+    ]);
+    const signature = Buffer.from(hmac(sha256, hkdf)
+        .update(concatBuffer)
+        .digest()).toString('base64');
+    return {
+        signature,
+        timeStamp,
+    };
+}
+export function decodeJwt(jwt) {
+    const [header, payload, signature] = jwt.split('.');
+    return {
+        header: JSON.parse(Buffer.from(header, 'base64').toString('utf-8')),
+        payload: JSON.parse(Buffer.from(payload, 'base64').toString('utf-8')),
+        signature: signature,
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vardario/cognito-client",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "",
   "main": "dist/index.js",
   "type": "module",
@@ -10,14 +10,14 @@
   "author": "Sahin Vardar",
   "license": "MIT",
   "dependencies": {
-    "@vardario/cookies": "^0.1.3",
+    "@vardario/cookies": "^0.1.4",
     "date-fns": "^2.29.3",
-    "date-fns-tz": "^1.3.7"
-  },
-  "devDependencies": {
-    "hash.js": "^1.1.7",
+    "date-fns-tz": "^1.3.7",
     "jsbn": "^1.1.0",
     "randombytes": "^2.1.0",
+    "hash.js": "^1.1.7"
+  },
+  "devDependencies": {
     "@aws-sdk/client-cognito-identity-provider": "^3.209.0",
     "@types/jsbn": "^1.2.30",
     "@types/jsdom": "^20.0.1",
@@ -26,7 +26,6 @@
     "jsdom": "^20.0.2",
     "testcontainers": "^9.0.0",
     "ts-jest": "^29.0.3",
-    "tsup": "^6.7.0",
     "vitest": "^0.31.0"
   },
   "repository": {
@@ -36,7 +35,7 @@
   "packageManager": "pnpm@8.3.1",
   "scripts": {
     "test": "vitest run",
-    "build": "tsup --format esm src/index.ts",
+    "build": "tsc --build",
     "watch": "tsc --build --watch"
   }
 }