@yourrealm/sdk 0.0.0-alpha.1378.ce03c8dc

package/dist/docker.js

@@ -0,0 +1,54 @@
+import "./chunk-MLKGABMK.js";
+
+// src/docker.ts
+var B64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+function decodeBase64(input) {
+  let s = input;
+  s = s.replace(/[\r\n]/g, "");
+  while (s.length > 0 && s[s.length - 1] === "=") s = s.slice(0, -1);
+  let out = "";
+  let acc = 0;
+  let bits = 0;
+  for (let i = 0; i < s.length; i++) {
+    const idx = B64.indexOf(s[i]);
+    if (idx < 0) return null;
+    acc = acc << 6 | idx;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      out += String.fromCharCode(acc >> bits & 255);
+    }
+  }
+  return out;
+}
+function constantTimeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+function checkDockerBasic(request, expectedSecret) {
+  const header = request.headers.get("authorization");
+  if (!header) return false;
+  const space = header.indexOf(" ");
+  if (space < 0) return false;
+  if (header.slice(0, space).toLowerCase() !== "basic") return false;
+  const decoded = decodeBase64(header.slice(space + 1).trim());
+  if (decoded == null) return false;
+  const colon = decoded.indexOf(":");
+  if (colon < 0) return false;
+  return constantTimeEqual(decoded.slice(colon + 1), expectedSecret);
+}
+function dockerChallenge(realm = "Realm registry") {
+  return new Response(null, {
+    status: 401,
+    headers: {
+      "WWW-Authenticate": `Basic realm="${realm}"`,
+      "Docker-Distribution-Api-Version": "registry/2.0"
+    }
+  });
+}
+export {
+  checkDockerBasic,
+  dockerChallenge
+};