@webda/core 2.0.0-beta.1 → 2.0.0

package/lib/services/cron.spec.js

@@ -1,39 +1,36 @@
-"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-const mocha_1 = require("@testdeck/mocha");
-const assert = require("assert");
-const crontab = require("node-cron");
-const sinon = require("sinon");
-const __1 = require("..");
-const test_1 = require("../test");
-class MyService extends __1.Service {
+import { suite, test } from "@testdeck/mocha";
+import * as assert from "assert";
+import * as sinon from "sinon";
+import { Cron, CronDefinition, CronService, Service } from "...js";
+import { WebdaTest } from "../test.js";
+class MyService extends Service {
     test() {
         // Empty one
     }
     test2(myArg) { }
 }
 __decorate([
-    (0, __1.Cron)("0/15 * * * *", "plop")
+    Cron("0/15 * * * *", "plop")
 ], MyService.prototype, "test", null);
 __decorate([
-    (0, __1.Cron)("0/25 * * * *", undefined, "myArg")
+    Cron("0/25 * * * *", undefined, "myArg")
 ], MyService.prototype, "test2", null);
-let CronServiceTest = class CronServiceTest extends test_1.WebdaTest {
+let CronServiceTest = class CronServiceTest extends WebdaTest {
     annotations() {
         this.registerService(new MyService(this.webda, "myService", {}));
-        let def = new __1.CronDefinition("0/15 * * * *", [], "myservice", "test", "plop");
-        let service = new __1.CronService(this.webda, "cron", {});
+        let def = new CronDefinition("0/15 * * * *", [], "myservice", "test", "plop");
+        let service = new CronService(this.webda, "cron", {});
         service.schedule("* * * * *", () => { }, "mine");
         assert.deepStrictEqual(service.getCrontab()[1], def);
         // for cov
         assert.deepStrictEqual(service.getCrontab()[1], def);
-        const cron = sinon.stub(crontab, "schedule").callsFake((cron, cb) => {
+        const cron = sinon.stub(service, "crontabSchedule").callsFake((cron, cb) => {
             try {
                 cb();
             }
@@ -55,21 +52,21 @@ let CronServiceTest = class CronServiceTest extends test_1.WebdaTest {
     }
 };
 __decorate([
-    mocha_1.test
+    test
 ], CronServiceTest.prototype, "annotations", null);
 CronServiceTest = __decorate([
-    mocha_1.suite
+    suite
 ], CronServiceTest);
 let CronDefinitionTest = class CronDefinitionTest {
     testString() {
-        assert.strictEqual(new __1.CronDefinition("* * * * *").toString(), "* * * * *: .()");
-        assert.strictEqual(new __1.CronDefinition("* * * * *", [{}, {}], "plop", "method", "desc").toString(), "* * * * *: plop.method([object Object],[object Object]) # desc");
+        assert.strictEqual(new CronDefinition("* * * * *").toString(), "* * * * *: .()");
+        assert.strictEqual(new CronDefinition("* * * * *", [{}, {}], "plop", "method", "desc").toString(), "* * * * *: plop.method([object Object],[object Object]) # desc");
     }
 };
 __decorate([
-    mocha_1.test
+    test
 ], CronDefinitionTest.prototype, "testString", null);
 CronDefinitionTest = __decorate([
-    mocha_1.suite
+    suite
 ], CronDefinitionTest);
 //# sourceMappingURL=cron.spec.js.map

package/lib/services/cron.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"cron.spec.js","sourceRoot":"","sources":["../../src/services/cron.spec.ts"],"names":[],"mappings":";;;;;;;;AAAA,2CAA8C;AAC9C,iCAAiC;AACjC,qCAAqC;AACrC,+BAA+B;AAC/B,0BAAgE;AAChE,kCAAoC;AAEpC,MAAM,SAAU,SAAQ,WAAO;IAE7B,IAAI;QACF,YAAY;IACd,CAAC;IAGD,KAAK,CAAC,KAAa,IAAG,CAAC;CACxB;AANC;IADC,IAAA,QAAI,EAAC,cAAc,EAAE,MAAM,CAAC;qCAG5B;AAGD;IADC,IAAA,QAAI,EAAC,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC;sCAClB;AAGzB,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,gBAAS;IAErC,WAAW;QACT,IAAI,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG,GAAG,IAAI,kBAAc,CAAC,cAAc,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9E,IAAI,OAAO,GAAG,IAAI,eAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,UAAU;QACV,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YAClE,IAAI;gBACF,EAAE,EAAE,CAAC;aACN;YAAC,OAAO,GAAG,EAAE,GAAE;QAClB,CAAC,CAAC,CAAC;QACH,IAAI;YACF,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC;YACrC,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;SAClB;gBAAS;SACT;IACH,CAAC;CACF,CAAA;AA1BC;IADC,YAAI;kDA0BJ;AA3BG,eAAe;IADpB,aAAK;GACA,eAAe,CA4BpB;AAGD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEtB,UAAU;QACR,MAAM,CAAC,WAAW,CAAC,IAAI,kBAAc,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACjF,MAAM,CAAC,WAAW,CAChB,IAAI,kBAAc,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAC9E,gEAAgE,CACjE,CAAC;IACJ,CAAC;CACF,CAAA;AAPC;IADC,YAAI;oDAOJ;AARG,kBAAkB;IADvB,aAAK;GACA,kBAAkB,CASvB"}
+{"version":3,"file":"cron.spec.js","sourceRoot":"","sources":["../../src/services/cron.spec.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,MAAM,SAAU,SAAQ,OAAO;IAE7B,IAAI;QACF,YAAY;IACd,CAAC;IAGD,KAAK,CAAC,KAAa,IAAG,CAAC;CACxB;AANC;IADC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;qCAG5B;AAGD;IADC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC;sCAClB;AAGzB,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,SAAS;IAErC,WAAW;QACT,IAAI,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG,GAAG,IAAI,cAAc,CAAC,cAAc,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9E,IAAI,OAAO,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,UAAU;QACV,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YACzE,IAAI;gBACF,EAAE,EAAE,CAAC;aACN;YAAC,OAAO,GAAG,EAAE,GAAE;QAClB,CAAC,CAAC,CAAC;QACH,IAAI;YACF,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC;YACrC,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;SAClB;gBAAS;SACT;IACH,CAAC;CACF,CAAA;AA1BC;IADC,IAAI;kDA0BJ;AA3BG,eAAe;IADpB,KAAK;GACA,eAAe,CA4BpB;AAGD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEtB,UAAU;QACR,MAAM,CAAC,WAAW,CAAC,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACjF,MAAM,CAAC,WAAW,CAChB,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAC9E,gEAAgE,CACjE,CAAC;IACJ,CAAC;CACF,CAAA;AAPC;IADC,IAAI;oDAOJ;AARG,kBAAkB;IADvB,KAAK;GACA,kBAAkB,CASvB"}

package/lib/services/cryptoservice.d.ts

@@ -0,0 +1,258 @@
+/// <reference types="node" />
+/// <reference types="node" />
+import { Context, RegistryEntry, Store } from "../index.js";
+import { DeepPartial, Service, ServiceParameters } from "./service.js";
+export interface KeysRegistry {
+    /**
+     * Contains the instanceId of the last
+     * service who rotated
+     */
+    rotationInstance: string;
+    /**
+     * Key storage
+     */
+    [keys: `key_${string}`]: {
+        publicKey: string;
+        privateKey: string;
+        symetric: string;
+    };
+    /**
+     * Current key
+     */
+    current: string;
+}
+/**
+ * JWT Options
+ */
+export interface JWTOptions {
+    /**
+     * Secret to use with JWT
+     */
+    secretOrPublicKey?: string | Buffer | {
+        key: string;
+        passphrase: string;
+    };
+    /**
+     * Algorithm for JWT token
+     *
+     * @see https://www.npmjs.com/package/jsonwebtoken
+     * @default "HS256"
+     */
+    algorithm?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | "ES256" | "ES384" | "ES512";
+    /**
+     * expressed in seconds or a string describing a time span zeit/ms.
+     *
+     * Eg: 60, "2 days", "10h", "7d". A numeric value is interpreted as a seconds count. If you use a string be sure you provide the time units (days, hours, etc), otherwise milliseconds unit is used by default ("120" is equal to "120ms").
+     */
+    expiresIn?: number | string;
+    /**
+     * Audience for the jwt
+     */
+    audience?: string;
+    /**
+     * Issuer of the token
+     */
+    issuer?: string;
+    /**
+     * Subject for JWT
+     */
+    subject?: string;
+    keyid?: any;
+}
+export declare class CryptoServiceParameters extends ServiceParameters {
+    /**
+     * Number of hours a key should be used for encryption
+     *
+     * if auto-rotate is not set this
+     */
+    keyActiveLifespan: number;
+    /**
+     * Number of hours allowed to decrypt data encrypted with this key
+     */
+    keyLifespan: number;
+    /**
+     * Try to rotate keys when they expire in days
+     */
+    autoRotate?: number;
+    /**
+     * Create first set of key if does not exist
+     */
+    autoCreate?: boolean;
+    /**
+     * To expose JWKS
+     *
+     * @see https://datatracker.ietf.org/doc/html/rfc7517
+     */
+    url?: string;
+    /**
+     * Type of asymetric key
+     *
+     * https://nodejs.org/api/crypto.html#cryptogeneratekeypairsynctype-options
+     * https://nodejs.org/docs/latest-v14.x/api/crypto.html#crypto_crypto_generatekeypairsync_type_options
+     */
+    asymetricType: "rsa" | "dsa" | "ec" | "ed25519" | "ed448" | "x25519" | "x448" | "dh";
+    /**
+     * Options for asymetric generation
+     */
+    asymetricOptions?: {
+        /**
+         * @default 2048
+         */
+        modulusLength?: number;
+        /**
+         * Only if asymetricType "ec"
+         */
+        namedCurve?: string;
+        publicKeyEncoding?: {
+            /**
+             * @default spki
+             */
+            type?: "spki" | "pkcs1";
+            format?: "pem";
+        };
+        privateKeyEncoding?: {
+            /**
+             * https://nodejs.org/docs/latest-v14.x/api/crypto.html#crypto_keyobject_export_options
+             * @default pkcs8
+             */
+            type?: "pkcs1" | "pkcs8" | "sec1";
+            format?: "pem";
+            cipher?: string;
+            passphrase?: string;
+        };
+    };
+    /**
+     * @default 256
+     */
+    symetricKeyLength?: number;
+    /**
+     * @default "aes-256-ctr"
+     */
+    symetricCipher?: string;
+    /**
+     * Default JWT options
+     */
+    jwt?: JWTOptions;
+    constructor(params: any);
+}
+interface KeysDefinition {
+    publicKey: string;
+    privateKey: string;
+    symetric: string;
+}
+/**
+ * @WebdaModda
+ */
+export default class CryptoService<T extends CryptoServiceParameters = CryptoServiceParameters> extends Service<T> {
+    currentSymetricKey: string;
+    currentAsymetricKey: {
+        publicKey: string;
+        privateKey: string;
+    };
+    current: string;
+    age: number;
+    keys: {
+        [key: string]: KeysDefinition;
+    };
+    /**
+     * JWKS cache
+     */
+    jwks: {
+        [key: string]: {
+            n: string;
+            e: string;
+        };
+    };
+    registry: Store<RegistryEntry>;
+    /**
+     * @override
+     */
+    loadParameters(params: DeepPartial<T>): ServiceParameters;
+    /**
+     * @override
+     */
+    init(): Promise<this>;
+    /**
+     *
+     */
+    serveJWKS(context: Context): Promise<void>;
+    /**
+     * Load keys from registry
+     */
+    load(): Promise<boolean>;
+    /**
+     * Generate asymetric key
+     * @returns
+     */
+    generateAsymetricKeys(): {
+        publicKey: string;
+        privateKey: string;
+    };
+    /**
+     * Generate symetric key
+     * @returns
+     */
+    generateSymetricKey(): string;
+    /**
+     * Return current key set
+     */
+    getCurrentKeys(): Promise<{
+        id: string;
+        keys: KeysDefinition;
+    }>;
+    /**
+     * Retrieve a HMAC for a string
+     * @param data
+     * @param keyId to use
+     * @returns
+     */
+    hmac(data: string | any, keyId?: string): Promise<string>;
+    /**
+     * Verify a HMAC for a string
+     * @param data
+     * @returns
+     */
+    hmacVerify(data: string | any, hmac: string): Promise<boolean>;
+    /**
+     * JWT token generation
+     */
+    jwtSign(data: any, options?: JWTOptions): Promise<string>;
+    /**
+     *
+     * @param keyId
+     * @returns
+     */
+    checkKey(keyId: string): Promise<boolean>;
+    /**
+     * Get JWT key based on kid
+     */
+    getJWTKey(header: any, callback: any): Promise<void>;
+    /**
+     * JWT token verification
+     */
+    jwtVerify(token: string, options?: JWTOptions): Promise<string | any>;
+    /**
+     * Encrypt data
+     */
+    encrypt(data: any): Promise<string>;
+    /**
+     * Parse the JWT header section
+     */
+    getJWTHeader(token: string): any;
+    /**
+     * Decrypt data
+     */
+    decrypt(token: string): Promise<any>;
+    /**
+     * Get next id
+     */
+    getNextId(): {
+        id: string;
+        age: number;
+    };
+    /**
+     * Rotate keys
+     */
+    rotate(): Promise<void>;
+}
+export { CryptoService };

package/lib/services/cryptoservice.js

@@ -0,0 +1,312 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { createCipheriv, createDecipheriv, createHmac, generateKeyPairSync, randomBytes } from "crypto";
+import jwt from "jsonwebtoken";
+import { pem2jwk } from "pem-jwk";
+import { JSONUtils } from "../utils/serializers.js";
+import { Inject, Route, Service, ServiceParameters } from "./service.js";
+export class CryptoServiceParameters extends ServiceParameters {
+    constructor(params) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        super(params);
+        this.symetricKeyLength ?? (this.symetricKeyLength = 256);
+        this.symetricCipher ?? (this.symetricCipher = "aes-256-ctr");
+        this.asymetricType ?? (this.asymetricType = "rsa");
+        this.asymetricOptions ?? (this.asymetricOptions = {});
+        (_a = this.asymetricOptions).modulusLength ?? (_a.modulusLength = 2048);
+        (_b = this.asymetricOptions).privateKeyEncoding ?? (_b.privateKeyEncoding = {});
+        (_c = this.asymetricOptions.privateKeyEncoding).format ?? (_c.format = "pem");
+        (_d = this.asymetricOptions.privateKeyEncoding).type ?? (_d.type = "pkcs8");
+        (_e = this.asymetricOptions).publicKeyEncoding ?? (_e.publicKeyEncoding = {});
+        (_f = this.asymetricOptions.publicKeyEncoding).format ?? (_f.format = "pem");
+        (_g = this.asymetricOptions.publicKeyEncoding).type ?? (_g.type = "spki");
+        this.jwt ?? (this.jwt = {});
+        (_h = this.jwt).algorithm ?? (_h.algorithm = "HS256");
+    }
+}
+/**
+ * @WebdaModda
+ */
+export default class CryptoService extends Service {
+    constructor() {
+        super(...arguments);
+        /**
+         * JWKS cache
+         */
+        this.jwks = {};
+    }
+    /**
+     * @override
+     */
+    loadParameters(params) {
+        return new CryptoServiceParameters(params);
+    }
+    /**
+     * @override
+     */
+    async init() {
+        await super.init();
+        // Load keys
+        if (!(await this.load()) && this.parameters.autoCreate) {
+            await this.rotate();
+        }
+        return this;
+    }
+    /**
+     *
+     */
+    async serveJWKS(context) {
+        context.write({
+            keys: Object.keys(this.keys).map(k => {
+                if (!this.jwks[k]) {
+                    /*
+                      when Node >= 16
+                      this.jwks[k] = createPublicKey(this.keys[k].publicKey).export({ format: "jwk" });
+                      and remove pem-jwk
+                      */
+                    this.jwks[k] = pem2jwk(this.keys[k].publicKey);
+                }
+                return {
+                    kty: "RSA",
+                    kid: k,
+                    n: this.jwks[k].n,
+                    e: this.jwks[k].e
+                };
+            })
+        });
+    }
+    /**
+     * Load keys from registry
+     */
+    async load() {
+        let load = await this.registry.get("keys");
+        if (!load) {
+            return false;
+        }
+        this.keys = {};
+        Object.keys(load)
+            .filter(k => k.startsWith("key_"))
+            .forEach(k => {
+            this.keys[k.substring(4)] = load[k];
+        });
+        this.current = load.current.startsWith("init-") ? undefined : load.current;
+        this.age = parseInt(this.current, 36);
+        return true;
+    }
+    /**
+     * Generate asymetric key
+     * @returns
+     */
+    generateAsymetricKeys() {
+        const { publicKey, privateKey } = generateKeyPairSync(
+        // @ts-ignore
+        this.parameters.asymetricType, this.parameters.asymetricOptions);
+        return { publicKey, privateKey };
+    }
+    /**
+     * Generate symetric key
+     * @returns
+     */
+    generateSymetricKey() {
+        return randomBytes(this.parameters.symetricKeyLength / 8).toString("base64");
+    }
+    /**
+     * Return current key set
+     */
+    async getCurrentKeys() {
+        if (!this.keys || !this.current || !this.keys[this.current]) {
+            throw new Error("CryptoService not initialized");
+        }
+        return { keys: this.keys[this.current], id: this.current };
+    }
+    /**
+     * Retrieve a HMAC for a string
+     * @param data
+     * @param keyId to use
+     * @returns
+     */
+    async hmac(data, keyId) {
+        if (typeof data !== "string") {
+            data = JSONUtils.stringify(data);
+        }
+        let key = keyId ? { id: keyId, keys: this.keys[keyId] } : await this.getCurrentKeys();
+        return key.id + "." + createHmac("sha256", key.keys.symetric).update(data).digest("hex");
+    }
+    /**
+     * Verify a HMAC for a string
+     * @param data
+     * @returns
+     */
+    async hmacVerify(data, hmac) {
+        if (typeof data !== "string") {
+            data = JSONUtils.stringify(data);
+        }
+        let [keyId, mac] = hmac.split(".");
+        if (!(await this.checkKey(keyId))) {
+            return false;
+        }
+        return createHmac("sha256", this.keys[keyId].symetric).update(data).digest("hex") === mac;
+    }
+    /**
+     * JWT token generation
+     */
+    async jwtSign(data, options) {
+        let res = { ...this.parameters.jwt, ...options };
+        let key = res.secretOrPublicKey;
+        // Default to our current private key
+        if (!res.secretOrPublicKey) {
+            let keyInfo = await this.getCurrentKeys();
+            // Depending on the algo fallback to the right key
+            if (res.algorithm.startsWith("HS")) {
+                key = keyInfo.keys.symetric;
+                res.keyid = "S" + keyInfo.id;
+            }
+            else {
+                key = keyInfo.keys.privateKey;
+                res.keyid = "A" + keyInfo.id;
+            }
+        }
+        delete res.secretOrPublicKey;
+        return jwt.sign(data, key, res);
+    }
+    /**
+     *
+     * @param keyId
+     * @returns
+     */
+    async checkKey(keyId) {
+        if (!this.keys[keyId]) {
+            // Key is more recent than current one so try to reload
+            if (parseInt(keyId, 36) > this.age) {
+                await this.load();
+            }
+            // Key is still not found
+            if (!this.keys[keyId]) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * Get JWT key based on kid
+     */
+    async getJWTKey(header, callback) {
+        if (!header.kid) {
+            callback(new Error("Unknown key"));
+            return;
+        }
+        let keyId = header.kid.substring(1);
+        if (!(await this.checkKey(keyId))) {
+            callback(new Error("Unknown key"));
+            return;
+        }
+        // Check first letter that define Symetric or Asymetric
+        if (header.kid.startsWith("S")) {
+            callback(null, this.keys[keyId].symetric);
+        }
+        else if (header.kid.startsWith("A")) {
+            callback(null, this.keys[keyId].publicKey);
+        }
+        else {
+            callback(new Error("Unknown key"));
+        }
+    }
+    /**
+     * JWT token verification
+     */
+    async jwtVerify(token, options) {
+        return new Promise((resolve, reject) => {
+            jwt.verify(token, options?.secretOrPublicKey || this.getJWTKey.bind(this), {
+                ...options,
+                secretOrPublicKey: undefined
+            }, (err, result) => {
+                if (err) {
+                    reject(err);
+                }
+                else {
+                    resolve(result);
+                }
+            });
+        });
+    }
+    /**
+     * Encrypt data
+     */
+    async encrypt(data) {
+        let key = await this.getCurrentKeys();
+        // Initialization Vector
+        let iv = randomBytes(16);
+        let cipher = createCipheriv(this.parameters.symetricCipher, Buffer.from(key.keys.symetric, "base64"), iv);
+        let encrypted = Buffer.concat([iv, cipher.update(Buffer.from(JSON.stringify(data))), cipher.final()]).toString("base64");
+        return this.jwtSign(encrypted, { keyid: `S${key.id}`, secretOrPublicKey: key.keys.symetric });
+    }
+    /**
+     * Parse the JWT header section
+     */
+    getJWTHeader(token) {
+        return JSON.parse(Buffer.from(token.split(".")[0], "base64").toString());
+    }
+    /**
+     * Decrypt data
+     */
+    async decrypt(token) {
+        let input = Buffer.from(await this.jwtVerify(token), "base64");
+        let header = this.getJWTHeader(token);
+        let iv = input.slice(0, 16);
+        let decipher = createDecipheriv(this.parameters.symetricCipher, Buffer.from(this.keys[header.kid.substring(1)].symetric, "base64"), iv);
+        return JSON.parse(decipher.update(input.slice(16)).toString() + decipher.final().toString());
+    }
+    /**
+     * Get next id
+     */
+    getNextId() {
+        // Should be good for years as 8char
+        let age = Math.floor(Date.now() / 1000);
+        return { age, id: age.toString(36) };
+    }
+    /**
+     * Rotate keys
+     */
+    async rotate() {
+        const { age, id } = this.getNextId();
+        let next = {
+            current: id,
+            rotationInstance: this.getWebda().getInstanceId()
+        };
+        next[`key_${id}`] = {
+            ...this.generateAsymetricKeys(),
+            symetric: this.generateSymetricKey()
+        };
+        if (!(await this.registry.exists("keys"))) {
+            this.current = `init-${this.getWebda().getInstanceId()}`;
+            await this.registry.put("keys", { current: this.current });
+        }
+        if (await this.registry.conditionalPatch("keys", next, "current", this.current)) {
+            this.keys ?? (this.keys = {});
+            this.keys[id] = next[`key_${id}`];
+            this.current = id;
+            this.age = age;
+        }
+        else {
+            // Reload as something else has modified
+            await this.load();
+        }
+    }
+}
+__decorate([
+    Inject("Registry")
+], CryptoService.prototype, "registry", void 0);
+__decorate([
+    Route(".", ["GET"], false, {
+        description: "Serve JWKS keys",
+        get: {
+            operationId: "getJWKS"
+        }
+    })
+], CryptoService.prototype, "serveJWKS", null);
+export { CryptoService };
+//# sourceMappingURL=cryptoservice.js.map

package/lib/services/cryptoservice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoservice.js","sourceRoot":"","sources":["../../src/services/cryptoservice.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACxG,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAe,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAsEnF,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IA4E5D,YAAY,MAAW;;QACrB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,iBAAiB,KAAtB,IAAI,CAAC,iBAAiB,GAAK,GAAG,EAAC;QAC/B,IAAI,CAAC,cAAc,KAAnB,IAAI,CAAC,cAAc,GAAK,aAAa,EAAC;QACtC,IAAI,CAAC,aAAa,KAAlB,IAAI,CAAC,aAAa,GAAK,KAAK,EAAC;QAC7B,IAAI,CAAC,gBAAgB,KAArB,IAAI,CAAC,gBAAgB,GAAK,EAAE,EAAC;QAC7B,MAAA,IAAI,CAAC,gBAAgB,EAAC,aAAa,QAAb,aAAa,GAAK,IAAI,EAAC;QAC7C,MAAA,IAAI,CAAC,gBAAgB,EAAC,kBAAkB,QAAlB,kBAAkB,GAAK,EAAE,EAAC;QAChD,MAAA,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAC,MAAM,QAAN,MAAM,GAAK,KAAK,EAAC;QAC1D,MAAA,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAC,IAAI,QAAJ,IAAI,GAAK,OAAO,EAAC;QAC1D,MAAA,IAAI,CAAC,gBAAgB,EAAC,iBAAiB,QAAjB,iBAAiB,GAAK,EAAE,EAAC;QAC/C,MAAA,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAC,MAAM,QAAN,MAAM,GAAK,KAAK,EAAC;QACzD,MAAA,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAC,IAAI,QAAJ,IAAI,GAAK,MAAM,EAAC;QACxD,IAAI,CAAC,GAAG,KAAR,IAAI,CAAC,GAAG,GAAK,EAAE,EAAC;QAChB,MAAA,IAAI,CAAC,GAAG,EAAC,SAAS,QAAT,SAAS,GAAK,OAAO,EAAC;IACjC,CAAC;CACF;AAQD;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,aAA2E,SAAQ,OAAU;IAAlH;;QAQE;;WAEG;QACH,SAAI,GAKA,EAAE,CAAC;IAqST,CAAC;IAhSC;;OAEG;IACH,cAAc,CAAC,MAAsB;QACnC,OAAO,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,YAAY;QACZ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YACtD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;SACrB;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IAOH,KAAK,CAAC,SAAS,CAAC,OAAgB;QAC9B,OAAO,CAAC,KAAK,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBACjB;;;;wBAII;oBACJ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;iBAChD;gBACD,OAAO;oBACL,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,CAAC;oBACN,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjB,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;iBAClB,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,GAA2B,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QACpE,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,KAAK,CAAC;SACd;QACD,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACjC,OAAO,CAAC,CAAC,CAAC,EAAE;YACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3E,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,qBAAqB;QACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB;QACnD,aAAa;QACb,IAAI,CAAC,UAAU,CAAC,aAAa,EAC7B,IAAI,CAAC,UAAU,CAAC,gBAAgB,CACjC,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC3D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;SAClD;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,IAAI,CAAC,IAAkB,EAAE,KAAc;QAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YAC5B,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SAClC;QACD,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACtF,OAAO,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,UAAU,CAAC,IAAkB,EAAE,IAAY;QACtD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YAC5B,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SAClC;QACD,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;YACjC,OAAO,KAAK,CAAC;SACd;QACD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;IAC5F,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,IAAS,EAAE,OAAoB;QAClD,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACjD,IAAI,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;QAChC,qCAAqC;QACrC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE;YAC1B,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,kDAAkD;YAClD,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;gBAClC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC5B,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC;aAC9B;iBAAM;gBACL,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC9B,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC;aAC9B;SACF;QACD,OAAO,GAAG,CAAC,iBAAiB,CAAC;QAC7B,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACrB,uDAAuD;YACvD,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;gBAClC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;aACnB;YACD,yBAAyB;YACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACrB,OAAO,KAAK,CAAC;aACd;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ;QACrC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACf,QAAQ,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACnC,OAAO;SACR;QACD,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;YACjC,QAAQ,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACnC,OAAO;SACR;QACD,uDAAuD;QACvD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;YAC9B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;SAC3C;aAAM,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;YACrC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;SAC5C;aAAM;YACL,QAAQ,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;SACpC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,OAAoB;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,GAAG,CAAC,MAAM,CACR,KAAK,EACL,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EACvD;gBACE,GAAG,OAAO;gBACV,iBAAiB,EAAE,SAAS;aAC7B,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACd,IAAI,GAAG,EAAE;oBACP,MAAM,CAAC,GAAG,CAAC,CAAC;iBACb;qBAAM;oBACL,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;YACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,IAAS;QAC5B,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,wBAAwB;QACxB,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1G,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC5G,QAAQ,CACT,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,KAAa;QAChC,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,gBAAgB,CAC7B,IAAI,CAAC,UAAU,CAAC,cAAc,EAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAClE,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,SAAS;QACP,oCAAoC;QACpC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,IAAI,GAAiB;YACvB,OAAO,EAAE,EAAE;YACX,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE;SAClD,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG;YAClB,GAAG,IAAI,CAAC,qBAAqB,EAAE;YAC/B,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE;YACzC,IAAI,CAAC,OAAO,GAAG,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC;YACzD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SAC5D;QACD,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC/E,IAAI,CAAC,IAAI,KAAT,IAAI,CAAC,IAAI,GAAK,EAAE,EAAC;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;SAChB;aAAM;YACL,wCAAwC;YACxC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;SACnB;IACH,CAAC;CACF;AAlSC;IADC,MAAM,CAAC,UAAU,CAAC;+CACY;AA8B/B;IANC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE;QAC1B,WAAW,EAAE,iBAAiB;QAC9B,GAAG,EAAE;YACH,WAAW,EAAE,SAAS;SACvB;KACF,CAAC;8CAoBD;AAmPH,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/lib/services/cryptoservice.spec.d.ts

@@ -0,0 +1 @@
+export {};