@webiny/api-file-manager-server 0.0.0-unstable.9f53ea597d

package/utils/uploadToken.js

@@ -0,0 +1,22 @@
+import { createHmac } from "node:crypto";
+const createUploadToken = (payload, secret)=>{
+    const json = JSON.stringify(payload);
+    const encoded = Buffer.from(json).toString("base64url");
+    const signature = createHmac("sha256", secret).update(encoded).digest("base64url");
+    return `${encoded}.${signature}`;
+};
+const verifyUploadToken = (token, secret)=>{
+    const dotIndex = token.indexOf(".");
+    if (-1 === dotIndex) throw new Error("Invalid token format.");
+    const encoded = token.slice(0, dotIndex);
+    const signature = token.slice(dotIndex + 1);
+    const expectedSignature = createHmac("sha256", secret).update(encoded).digest("base64url");
+    if (signature !== expectedSignature) throw new Error("Invalid token signature.");
+    const json = Buffer.from(encoded, "base64url").toString("utf-8");
+    const payload = JSON.parse(json);
+    if (payload.expiresAt < Date.now()) throw new Error("Token has expired.");
+    return payload;
+};
+export { createUploadToken, verifyUploadToken };
+
+//# sourceMappingURL=uploadToken.js.map

package/utils/uploadToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/uploadToken.js","sources":["../../src/utils/uploadToken.ts"],"sourcesContent":["import { createHmac } from \"node:crypto\";\nimport type { UploadTokenPayload } from \"~/types.js\";\n\nexport const createUploadToken = (payload: UploadTokenPayload, secret: string): string => {\n    const json = JSON.stringify(payload);\n    const encoded = Buffer.from(json).toString(\"base64url\");\n    const signature = createHmac(\"sha256\", secret).update(encoded).digest(\"base64url\");\n\n    return `${encoded}.${signature}`;\n};\n\nexport const verifyUploadToken = (token: string, secret: string): UploadTokenPayload => {\n    const dotIndex = token.indexOf(\".\");\n    if (dotIndex === -1) {\n        throw new Error(\"Invalid token format.\");\n    }\n\n    const encoded = token.slice(0, dotIndex);\n    const signature = token.slice(dotIndex + 1);\n\n    const expectedSignature = createHmac(\"sha256\", secret).update(encoded).digest(\"base64url\");\n\n    if (signature !== expectedSignature) {\n        throw new Error(\"Invalid token signature.\");\n    }\n\n    const json = Buffer.from(encoded, \"base64url\").toString(\"utf-8\");\n    const payload = JSON.parse(json) as UploadTokenPayload;\n\n    if (payload.expiresAt < Date.now()) {\n        throw new Error(\"Token has expired.\");\n    }\n\n    return payload;\n};\n"],"names":["createUploadToken","payload","secret","json","JSON","encoded","Buffer","signature","createHmac","verifyUploadToken","token","dotIndex","Error","expectedSignature","Date"],"mappings":";AAGO,MAAMA,oBAAoB,CAACC,SAA6BC;IAC3D,MAAMC,OAAOC,KAAK,SAAS,CAACH;IAC5B,MAAMI,UAAUC,OAAO,IAAI,CAACH,MAAM,QAAQ,CAAC;IAC3C,MAAMI,YAAYC,WAAW,UAAUN,QAAQ,MAAM,CAACG,SAAS,MAAM,CAAC;IAEtE,OAAO,GAAGA,QAAQ,CAAC,EAAEE,WAAW;AACpC;AAEO,MAAME,oBAAoB,CAACC,OAAeR;IAC7C,MAAMS,WAAWD,MAAM,OAAO,CAAC;IAC/B,IAAIC,AAAa,OAAbA,UACA,MAAM,IAAIC,MAAM;IAGpB,MAAMP,UAAUK,MAAM,KAAK,CAAC,GAAGC;IAC/B,MAAMJ,YAAYG,MAAM,KAAK,CAACC,WAAW;IAEzC,MAAME,oBAAoBL,WAAW,UAAUN,QAAQ,MAAM,CAACG,SAAS,MAAM,CAAC;IAE9E,IAAIE,cAAcM,mBACd,MAAM,IAAID,MAAM;IAGpB,MAAMT,OAAOG,OAAO,IAAI,CAACD,SAAS,aAAa,QAAQ,CAAC;IACxD,MAAMJ,UAAUG,KAAK,KAAK,CAACD;IAE3B,IAAIF,QAAQ,SAAS,GAAGa,KAAK,GAAG,IAC5B,MAAM,IAAIF,MAAM;IAGpB,OAAOX;AACX"}