@workos-inc/node 7.50.0 → 7.51.0

package/lib/vault/cryptography/decrypt.d.ts

@@ -1,9 +0,0 @@
-/// <reference types="node" />
-export interface Decoded {
-    iv: Buffer;
-    tag: Buffer;
-    keys: string;
-    ciphertext: Buffer;
-}
-export declare const decrypt: (payload: string | Decoded, dataKey: string, aad: string) => string;
-export declare const decode: (payload: string) => Decoded;

package/lib/vault/cryptography/decrypt.js

@@ -1,39 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.decode = exports.decrypt = void 0;
-const crypto_1 = __importDefault(require("crypto"));
-const leb_1 = require("leb");
-const decrypt = (payload, dataKey, aad) => {
-    if (typeof payload === 'string') {
-        payload = (0, exports.decode)(payload);
-    }
-    const { iv, tag, ciphertext } = payload;
-    const key = Buffer.from(dataKey, 'base64');
-    const decipher = crypto_1.default
-        .createDecipheriv('aes-256-gcm', key, iv)
-        .setAAD(Buffer.from(aad))
-        .setAuthTag(tag);
-    const decrypted = decipher.update(ciphertext, undefined, 'utf-8') + decipher.final('utf-8');
-    return decrypted;
-};
-exports.decrypt = decrypt;
-const decode = (payload) => {
-    const inputData = Buffer.from(payload, 'base64');
-    const iv = inputData.slice(0, 32);
-    const tag = inputData.slice(32, 48);
-    const { value: keyLen, nextIndex } = (0, leb_1.decodeUInt32)(inputData, 48);
-    const keys = inputData
-        .slice(nextIndex, nextIndex + keyLen)
-        .toString('base64');
-    const ciphertext = inputData.slice(nextIndex + keyLen);
-    return {
-        iv,
-        tag,
-        keys,
-        ciphertext,
-    };
-};
-exports.decode = decode;

package/lib/vault/cryptography/encrypt.d.ts

@@ -1 +0,0 @@
-export declare const encrypt: (data: string, dataKey: string, encryptedKeys: string, aad: string) => string;

package/lib/vault/cryptography/encrypt.js

@@ -1,33 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.encrypt = void 0;
-const crypto_1 = __importDefault(require("crypto"));
-const leb_1 = require("leb");
-const encrypt = (data, dataKey, encryptedKeys, aad) => {
-    // encrypt using the returned data key
-    const key = Buffer.from(dataKey, 'base64');
-    const keyBlob = Buffer.from(encryptedKeys, 'base64');
-    const prefixLen = (0, leb_1.encodeUInt32)(keyBlob.length);
-    const iv = crypto_1.default.randomBytes(32);
-    const cipher = crypto_1.default
-        .createCipheriv('aes-256-gcm', key, iv)
-        .setAAD(Buffer.from(aad));
-    const ciphertext = Buffer.concat([
-        cipher.update(data, 'utf8'),
-        cipher.final(),
-    ]);
-    const tag = cipher.getAuthTag();
-    // store the encrypted keys with the ciphertext
-    const payload = Buffer.concat([
-        iv,
-        tag,
-        prefixLen,
-        keyBlob,
-        ciphertext,
-    ]).toString('base64');
-    return payload;
-};
-exports.encrypt = encrypt;