camera.ui3 0.0.3-1.alpha.0

package/dist/server/src/api/utils/cert.js

@@ -0,0 +1,411 @@
+import forge from 'node-forge';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { isIPv4, isIPv6 } from 'node:net';
+import { join } from 'node:path';
+import { container } from 'tsyringe';
+import { DEFAULTS, HOST_CERT_FILENAME, HOST_KEY_FILENAME, P12_FILENAME, P12_PASSWORD, ROOT_CERT_FILENAME, ROOT_KEY_FILENAME } from './constants.js';
+const makeNumberPositive = (hexString) => {
+    let mostSignificativeHexDigitAsInt = Number.parseInt(hexString[0], 16);
+    if (mostSignificativeHexDigitAsInt < 8) {
+        return hexString;
+    }
+    mostSignificativeHexDigitAsInt -= 8;
+    return mostSignificativeHexDigitAsInt.toString() + hexString.slice(1);
+};
+// Generate a random serial number for the Certificate
+const randomSerialNumber = () => {
+    return makeNumberPositive(forge.util.bytesToHex(forge.random.getBytesSync(20)));
+};
+// Get the Not Before Date for a Certificate (will be valid from 2 days ago)
+const getCertNotBefore = () => {
+    const twoDaysAgo = new Date(Date.now() - 60 * 60 * 24 * 2 * 1000);
+    const year = twoDaysAgo.getFullYear();
+    const month = (twoDaysAgo.getMonth() + 1).toString().padStart(2, '0');
+    const day = twoDaysAgo.getDate();
+    return new Date(`${year}-${month}-${day} 00:00:00Z`);
+};
+// Get Certificate Expiration Date (Valid for 90 Days)
+const getCertNotAfter = (notBefore) => {
+    const ninetyDaysLater = new Date(notBefore.getTime() + 60 * 60 * 24 * 90 * 1000);
+    const year = ninetyDaysLater.getFullYear();
+    const month = (ninetyDaysLater.getMonth() + 1).toString().padStart(2, '0');
+    const day = ninetyDaysLater.getDate();
+    return new Date(`${year}-${month}-${day} 23:59:59Z`);
+};
+// Get CA Expiration Date (Valid for 100 Years)
+const getCANotAfter = (notBefore) => {
+    const year = notBefore.getFullYear() + 100;
+    const month = (notBefore.getMonth() + 1).toString().padStart(2, '0');
+    const day = notBefore.getDate();
+    return new Date(`${year}-${month}-${day} 23:59:59Z`);
+};
+export const getCert = (forceNew) => {
+    const logger = container.resolve('logger');
+    const configService = container.resolve('configService');
+    const certFile = join(configService.STORAGE_PATH, ROOT_CERT_FILENAME);
+    const keyFile = join(configService.STORAGE_PATH, ROOT_KEY_FILENAME);
+    let cert;
+    let key;
+    let certPath;
+    let keyPath;
+    const { config } = configService;
+    if (config.ssl?.certFile && config.ssl?.keyFile && existsSync(config.ssl.certFile) && existsSync(config.ssl.keyFile) && !forceNew) {
+        logger.debug('Configuring server with certificate/key defined in camera.ui.yaml...');
+        cert = readFileSync(config.ssl.certFile, 'utf8');
+        key = readFileSync(config.ssl.keyFile, 'utf8');
+        certPath = config.ssl.certFile;
+        keyPath = config.ssl.keyFile;
+    }
+    else {
+        logger.debug('Generating new certificate/key for server...');
+        const data = createRootCA(config.ssl?.addresses);
+        cert = data.cert;
+        key = data.key;
+        certPath = certFile;
+        keyPath = keyFile;
+    }
+    return {
+        cert,
+        certPath,
+        key,
+        keyPath,
+    };
+};
+export const createRootCA = (customAddresses = ['127.0.0.1']) => {
+    const configService = container.resolve('configService');
+    const serialNumber = randomSerialNumber();
+    const addresses = customAddresses.map((address) => {
+        const object = isIPv4(address) || isIPv6(address)
+            ? {
+                type: 7,
+                ip: address,
+            }
+            : {
+                type: 2,
+                value: address,
+            };
+        return object;
+    }) || [];
+    if (addresses.length === 0 || !addresses.some((addr) => addr.value === '127.0.0.1')) {
+        addresses.push({
+            type: 7,
+            ip: '127.0.0.1',
+        });
+    }
+    // Define the attributes for the new Root CA
+    const attributes = [
+        {
+            shortName: 'C',
+            value: DEFAULTS.C,
+        },
+        {
+            shortName: 'ST',
+            value: DEFAULTS.ST,
+        },
+        {
+            shortName: 'L',
+            value: DEFAULTS.L,
+        },
+        {
+            shortName: 'CN',
+            value: DEFAULTS.ROOT_CN,
+        },
+        {
+            shortName: 'O',
+            value: DEFAULTS.O,
+        },
+        {
+            shortName: 'OU',
+            value: DEFAULTS.OU,
+        },
+    ];
+    const extensions = [
+        {
+            name: 'basicConstraints',
+            cA: true,
+            critical: true,
+        },
+        {
+            name: 'keyUsage',
+            critical: true,
+            keyCertSign: true,
+            cRLSign: true,
+            digitalSignature: true,
+            nonRepudiation: true,
+            keyEncipherment: true,
+            dataEncipherment: true,
+        },
+        // x509lint	ERROR	CA root certificate with Extended Key Usage
+        /*{
+          name: 'extKeyUsage',
+          serverAuth: true,
+          clientAuth: true,
+          codeSigning: true,
+          emailProtection: true,
+          timeStamping: true,
+        },*/
+        {
+            name: 'nsCertType',
+            client: true,
+            server: true,
+            email: true,
+            objsign: true,
+            sslCA: true,
+            emailCA: true,
+            objCA: true,
+        },
+        {
+            name: 'subjectKeyIdentifier',
+        },
+        /*{
+          name: 'authorityKeyIdentifier',
+          keyid: 'always',
+          issuer: true,
+        },*/
+        {
+            name: 'authorityKeyIdentifier',
+            keyIdentifier: true,
+            //authorityCertIssuer: true,
+            //serialNumber: serialNumber,
+        },
+        {
+            name: 'subjectAltName',
+            altNames: addresses,
+        },
+    ];
+    // Create a new Keypair for the Root CA
+    const { privateKey, publicKey } = forge.pki.rsa.generateKeyPair(2048);
+    // Create an empty Certificate
+    const cert = forge.pki.createCertificate();
+    // Set the Certificate attributes for the new Root CA
+    cert.publicKey = publicKey;
+    cert.privateKey = privateKey;
+    cert.serialNumber = serialNumber;
+    cert.validity.notBefore = getCertNotBefore();
+    cert.validity.notAfter = getCANotAfter(cert.validity.notBefore);
+    cert.setSubject(attributes);
+    cert.setIssuer(attributes);
+    cert.setExtensions(extensions);
+    // Self-sign the Certificate
+    cert.sign(privateKey, forge.md.sha512.create());
+    // Convert to PEM format
+    const pemCert = forge.pki.certificateToPem(cert);
+    const pemPrivateKey = forge.pki.privateKeyToPem(privateKey);
+    // Write Root CA PEM cert/key to disk
+    const rootCertFilePath = join(configService.STORAGE_PATH, ROOT_CERT_FILENAME);
+    const rootPrivateKeyFilePath = join(configService.STORAGE_PATH, ROOT_KEY_FILENAME);
+    writeFileSync(rootCertFilePath, pemCert);
+    writeFileSync(rootPrivateKeyFilePath, pemPrivateKey);
+    // Return the PEM encoded cert and private key
+    return {
+        cert: pemCert,
+        certPath: rootCertFilePath,
+        key: pemPrivateKey,
+        keyPath: rootPrivateKeyFilePath,
+    };
+};
+export const createCSR = (addresses, keys) => {
+    const csr = forge.pki.createCertificationRequest();
+    csr.publicKey = keys.publicKey;
+    const subject = [
+        {
+            shortName: 'C',
+            value: DEFAULTS.C,
+        },
+        {
+            shortName: 'ST',
+            value: DEFAULTS.ST,
+        },
+        {
+            shortName: 'L',
+            value: DEFAULTS.L,
+        },
+        {
+            shortName: 'O',
+            value: DEFAULTS.O,
+        },
+        {
+            shortName: 'OU',
+            value: DEFAULTS.OU,
+        },
+        {
+            shortName: 'CN',
+            value: DEFAULTS.CN,
+        },
+    ];
+    const attributes = [
+        {
+            name: 'extensionRequest',
+            extensions: [
+                {
+                    name: 'subjectAltName',
+                    altNames: addresses,
+                },
+            ],
+        },
+    ];
+    csr.setSubject(subject);
+    // Bug: https://github.com/digitalbazaar/forge/issues/1036
+    // @ts-ignore
+    csr.setAttributes(attributes);
+    // sign certification request
+    csr.sign(keys.privateKey, forge.md.sha512.create());
+    // Bug?
+    // @ts-ignore
+    if (csr.verify()) {
+        // Convert to PEM format
+        const pemCert = forge.pki.certificationRequestToPem(csr);
+        return {
+            cert: pemCert,
+        };
+    }
+    else {
+        throw new Error('Signature not verified.');
+    }
+    // Convert to PEM format
+    // const pemCert = forge.pki.certificationRequestToPem(csr);
+    // Write CSR PEM cert to disk
+    // const certFilePath = join(STORAGE_PATH, 'camera.ui.csr.cert.pem');
+    // writeFileSync(certFilePath, pemCert);
+    // Return the PEM encoded cert and private key
+    // return {
+    //   certificate: pemCert,
+    // };
+};
+export const createCert = (customAddresses = ['127.0.0.1'] /*, rootCAObject*/) => {
+    const configService = container.resolve('configService');
+    const addresses = customAddresses.map((address) => {
+        return {
+            type: isIPv4(address) || isIPv6(address) ? 7 : 2,
+            value: address,
+        };
+    });
+    if (addresses.length === 0) {
+        addresses.push({
+            type: 7,
+            value: '127.0.0.1',
+        });
+    }
+    // Create Root CA
+    // if (!rootCAObject) {
+    //   const rootCertPath = join(STORAGE_PATH, ROOT_CERT_FILENAME);
+    //   const rootKeyPath = join(STORAGE_PATH, ROOT_KEY_FILENAME);
+    //   const storageDirectory = readdirSync(STORAGE_PATH);
+    //   const rootFilesExist = storageDirectory.every((value) => [ROOT_CERT_FILENAME, ROOT_KEY_FILENAME].includes(value));
+    //   rootCAObject = !rootFilesExist
+    //     ? createRootCA(STORAGE_PATH)
+    //     : {
+    //         certificate: readFileSync(rootCertPath, 'ascii'),
+    //         privateKey: readFileSync(rootKeyPath, 'ascii'),
+    //       };
+    // }
+    // Create a new Keypair
+    const keyPairs = forge.pki.rsa.generateKeyPair(2048);
+    // Create Root CA
+    const rootCAObject = createRootCA(customAddresses);
+    // Create CSR
+    //const csrObject = createCSR(addresses, keyPairs);
+    // Convert the Root CA and CSR PEM details, to a forge Object
+    //const csr = forge.pki.certificationRequestFromPem(csrObject.certificate);
+    const caCert = forge.pki.certificateFromPem(rootCAObject.cert);
+    const caKey = forge.pki.privateKeyFromPem(rootCAObject.key);
+    const caStore = forge.pki.createCaStore([caCert]);
+    // This seams like a hack but something is wrong in forge it adds the wrong key
+    const authorityKeyIdentifier = caCert.getExtension('authorityKeyIdentifier');
+    const t = Buffer.from(authorityKeyIdentifier.value).subarray(5);
+    const attributes = [
+        {
+            shortName: 'C',
+            value: DEFAULTS.C,
+        },
+        {
+            shortName: 'ST',
+            value: DEFAULTS.ST,
+        },
+        {
+            shortName: 'L',
+            value: DEFAULTS.L,
+        },
+        {
+            shortName: 'CN',
+            value: DEFAULTS.CN,
+        },
+        {
+            shortName: 'O',
+            value: DEFAULTS.O,
+        },
+    ];
+    const extensions = [
+        {
+            name: 'basicConstraints',
+            cA: false,
+        },
+        {
+            name: 'nsCertType',
+            server: true,
+        },
+        {
+            name: 'subjectKeyIdentifier',
+        },
+        {
+            name: 'authorityKeyIdentifier',
+            authorityCertIssuer: true,
+            serialNumber: caCert.serialNumber,
+            keyIdentifier: t,
+        },
+        {
+            name: 'keyUsage',
+            critical: true,
+            digitalSignature: true,
+            nonRepudiation: true,
+            keyEncipherment: true,
+        },
+        {
+            name: 'extKeyUsage',
+            serverAuth: true,
+        },
+        {
+            name: 'subjectAltName',
+            altNames: addresses,
+        },
+    ];
+    // Create an empty Certificate
+    const cert = forge.pki.createCertificate();
+    // Set the attributes for the new Host Certificate
+    cert.publicKey = keyPairs.publicKey;
+    cert.serialNumber = randomSerialNumber();
+    cert.validity.notBefore = getCertNotBefore();
+    cert.validity.notAfter = getCertNotAfter(cert.validity.notBefore);
+    cert.setSubject(attributes);
+    //cert.setSubject(csr.subject.attributes);
+    cert.setIssuer(caCert.subject.attributes);
+    cert.setExtensions(extensions);
+    // Sign the new Host Certificate using the CA
+    cert.sign(caKey, forge.md.sha512.create());
+    forge.pki.verifyCertificateChain(caStore, [cert, caCert]);
+    // Convert to PEM format
+    const pemCert = forge.pki.certificateToPem(cert);
+    const pemPrivateKey = forge.pki.privateKeyToPem(keyPairs.privateKey);
+    // Generate .p12 file
+    const pkcs12 = forge.pkcs12.toPkcs12Asn1(keyPairs.privateKey, [caCert], P12_PASSWORD, {
+        algorithm: '3des',
+        generateLocalKeyId: true,
+        friendlyName: 'camera.ui',
+    });
+    const pkcs12Der = forge.asn1.toDer(pkcs12).getBytes();
+    // Write PEM cert/key to disk
+    const certFilePath = join(configService.STORAGE_PATH, HOST_CERT_FILENAME);
+    const privateKeyFilePath = join(configService.STORAGE_PATH, HOST_KEY_FILENAME);
+    const p12FilePath = join(configService.STORAGE_PATH, P12_FILENAME);
+    writeFileSync(certFilePath, pemCert);
+    writeFileSync(privateKeyFilePath, pemPrivateKey);
+    writeFileSync(p12FilePath, pkcs12Der, 'binary');
+    // Return the PEM encoded cert and private key
+    return {
+        cert: pemCert,
+        certPath: certFilePath,
+        key: pemPrivateKey,
+        keyPath: privateKeyFilePath,
+    };
+};
+//# sourceMappingURL=cert.js.map

package/dist/server/src/api/utils/cert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert.js","sourceRoot":"","sources":["../../../../../src/api/utils/cert.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAYpJ,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAU,EAAE;IACvD,IAAI,8BAA8B,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvE,IAAI,8BAA8B,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,8BAA8B,IAAI,CAAC,CAAC;IACpC,OAAO,8BAA8B,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,sDAAsD;AACtD,MAAM,kBAAkB,GAAG,GAAW,EAAE;IACtC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,GAAS,EAAE;IAClC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IAEjC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,YAAY,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,sDAAsD;AACtD,MAAM,eAAe,GAAG,CAAC,SAAe,EAAQ,EAAE;IAChD,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC;IAEtC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,YAAY,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,+CAA+C;AAC/C,MAAM,aAAa,GAAG,CAAC,SAAe,EAAQ,EAAE;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;IAEhC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,YAAY,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,QAAkB,EAAW,EAAE;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAgB,QAAQ,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAgB,eAAe,CAAC,CAAC;IAExE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAEpE,IAAI,IAAY,CAAC;IACjB,IAAI,GAAW,CAAC;IAEhB,IAAI,QAAgB,CAAC;IACrB,IAAI,OAAe,CAAC;IAEpB,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;IAEjC,IAAI,MAAM,CAAC,GAAG,EAAE,QAAQ,IAAI,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClI,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAErF,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAE7D,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEjD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACjB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAEf,QAAQ,GAAG,QAAQ,CAAC;QACpB,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,GAAG;QACH,OAAO;KACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,kBAA4B,CAAC,WAAW,CAAC,EAAW,EAAE;IACjF,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAgB,eAAe,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAE1C,MAAM,SAAS,GACb,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,MAAM,GACV,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC;gBACP,EAAE,EAAE,OAAO;aACZ;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,CAAC;gBACP,KAAK,EAAE,OAAO;aACf,CAAC;QAER,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,IAAI,EAAE,CAAC;IAEX,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,EAAE,CAAC;QACpF,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,CAAC;YACP,EAAE,EAAE,WAAW;SAChB,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,MAAM,UAAU,GAAG;QACjB;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;QACD;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,OAAO;SACxB;QACD;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;KACF,CAAC;IAEF,MAAM,UAAU,GAAG;QACjB;YACE,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;SACvB;QACD,6DAA6D;QAC7D;;;;;;;YAOI;QACJ;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI;SACZ;QACD;YACE,IAAI,EAAE,sBAAsB;SAC7B;QACD;;;;YAII;QACJ;YACE,IAAI,EAAE,wBAAwB;YAC9B,aAAa,EAAE,IAAI;YACnB,4BAA4B;YAC5B,6BAA6B;SAC9B;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,SAAS;SACpB;KACF,CAAC;IAEF,uCAAuC;IACvC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtE,8BAA8B;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IAE3C,qDAAqD;IACrD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3B,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAE/B,4BAA4B;IAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhD,wBAAwB;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAE5D,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAC9E,MAAM,sBAAsB,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAEnF,aAAa,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACzC,aAAa,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;IAErD,8CAA8C;IAC9C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,gBAAgB;QAC1B,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,sBAAsB;KAChC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAmB,EAAE,IAA2B,EAAoB,EAAE;IAC9F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;IAEnD,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAE/B,MAAM,OAAO,GAAG;QACd;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;QACD;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;KACF,CAAC;IAEF,MAAM,UAAU,GAAG;QACjB;YACE,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,SAAS;iBACpB;aACF;SACF;KACF,CAAC;IAEF,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAExB,0DAA0D;IAC1D,aAAa;IACb,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAE9B,6BAA6B;IAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpD,OAAO;IACP,aAAa;IACb,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,wBAAwB;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAEzD,OAAO;YACL,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,wBAAwB;IACxB,4DAA4D;IAE5D,6BAA6B;IAC7B,qEAAqE;IACrE,wCAAwC;IAExC,8CAA8C;IAC9C,WAAW;IACX,0BAA0B;IAC1B,KAAK;AACP,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,kBAA4B,CAAC,WAAW,CAAC,CAAC,kBAAkB,EAAW,EAAE;IAClG,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAgB,eAAe,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,KAAK,EAAE,OAAO;SACf,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,uBAAuB;IACvB,iEAAiE;IACjE,+DAA+D;IAE/D,wDAAwD;IACxD,uHAAuH;IAEvH,mCAAmC;IACnC,mCAAmC;IACnC,UAAU;IACV,4DAA4D;IAC5D,0DAA0D;IAC1D,WAAW;IACX,IAAI;IAEJ,uBAAuB;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAErD,iBAAiB;IACjB,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAEnD,aAAa;IACb,mDAAmD;IAEnD,6DAA6D;IAC7D,2EAA2E;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAElD,+EAA+E;IAC/E,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,CAAC,wBAAwB,CAAsB,CAAC;IAClG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG;QACjB;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;QACD;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;QACD;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,QAAQ,CAAC,EAAE;SACnB;QACD;YACE,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,QAAQ,CAAC,CAAC;SAClB;KACF,CAAC;IAEF,MAAM,UAAU,GAAG;QACjB;YACE,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,KAAK;SACV;QACD;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;SACb;QACD;YACE,IAAI,EAAE,sBAAsB;SAC7B;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,CAAC;SACjB;QACD;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;SACtB;QACD;YACE,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,SAAS;SACpB;KACF,CAAC;IAEF,8BAA8B;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IAE3C,kDAAkD;IAClD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACpC,IAAI,CAAC,YAAY,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAElE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5B,0CAA0C;IAC1C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAE/B,6CAA6C;IAC7C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAE1D,wBAAwB;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAErE,qBAAqB;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE;QACpF,SAAS,EAAE,MAAM;QACjB,kBAAkB,EAAE,IAAI;QACxB,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAEtD,6BAA6B;IAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAC1E,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAEnE,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;IACjD,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhD,8CAA8C;IAC9C,OAAO;QACL,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,YAAY;QACtB,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,kBAAkB;KAC5B,CAAC;AACJ,CAAC,CAAC"}

package/dist/server/src/api/utils/constants.d.ts

@@ -0,0 +1,15 @@
+export declare const HOST_CERT_FILENAME = "camera.ui.cert.pem";
+export declare const HOST_KEY_FILENAME = "camera.ui.key.pem";
+export declare const ROOT_CERT_FILENAME = "camera.ui.root.cert.pem";
+export declare const ROOT_KEY_FILENAME = "camera.ui.root.key.pem";
+export declare const P12_FILENAME = "camera.ui.p12";
+export declare const P12_PASSWORD = "camera.ui";
+export declare const DEFAULTS: {
+    C: string;
+    ST: string;
+    L: string;
+    O: string;
+    OU: string;
+    CN: string;
+    ROOT_CN: string;
+};

package/dist/server/src/api/utils/constants.js

@@ -0,0 +1,17 @@
+// export const CSR_CERT_FILENAME = 'camera.ui.csr.cert.pem';
+export const HOST_CERT_FILENAME = 'camera.ui.cert.pem';
+export const HOST_KEY_FILENAME = 'camera.ui.key.pem';
+export const ROOT_CERT_FILENAME = 'camera.ui.root.cert.pem';
+export const ROOT_KEY_FILENAME = 'camera.ui.root.key.pem';
+export const P12_FILENAME = 'camera.ui.p12';
+export const P12_PASSWORD = 'camera.ui';
+export const DEFAULTS = {
+    C: 'DE',
+    ST: 'Berlin',
+    L: 'Berlin',
+    O: 'camera.ui',
+    OU: 'cui',
+    CN: 'camera.ui root certificate',
+    ROOT_CN: 'camera.ui root certificate',
+};
+//# sourceMappingURL=constants.js.map

package/dist/server/src/api/utils/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/api/utils/constants.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,CAAC,EAAE,IAAI;IACP,EAAE,EAAE,QAAQ;IACZ,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,WAAW;IACd,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,4BAA4B;IAChC,OAAO,EAAE,4BAA4B;CACtC,CAAC"}

package/dist/server/src/api/utils/fetch.d.ts

@@ -0,0 +1,2 @@
+declare const fetchWithTimeout: (url: string, options?: RequestInit) => Promise<Response>;
+export default fetchWithTimeout;

package/dist/server/src/api/utils/fetch.js

@@ -0,0 +1,24 @@
+const fetchWithTimeout = async (url, options) => {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => {
+        controller.abort();
+    }, 15000);
+    try {
+        const response = await fetch(url, {
+            ...options,
+            signal: controller.signal,
+        });
+        return response;
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === 'AbortError') {
+            throw new Error('Timeout: request took more than 15 seconds');
+        }
+        throw error;
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+};
+export default fetchWithTimeout;
+//# sourceMappingURL=fetch.js.map

package/dist/server/src/api/utils/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../../../../src/api/utils/fetch.ts"],"names":[],"mappings":"AAAA,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAW,EAAE,OAAqB,EAAqB,EAAE;IACvF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAChC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,OAAO;YACV,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/server/src/api/utils/moveFiles.d.ts

@@ -0,0 +1 @@
+export declare const moveFiles: (sourceDir: string, targetDir: string) => Promise<void>;

package/dist/server/src/api/utils/moveFiles.js

@@ -0,0 +1,39 @@
+import { move } from 'fs-extra/esm';
+import { lstatSync, readdir, rename } from 'node:fs';
+import { join } from 'node:path';
+export const moveFiles = (sourceDir, targetDir) => {
+    return new Promise((_resolve, _reject) => {
+        readdir(sourceDir, (error, files) => {
+            if (error) {
+                _reject(error);
+                return;
+            }
+            files.forEach((file) => {
+                const oldPath = join(sourceDir, file);
+                const newPath = join(targetDir, file);
+                const stat = lstatSync(oldPath);
+                if (stat.isDirectory()) {
+                    move(oldPath, newPath, { overwrite: true }, (error) => {
+                        if (error) {
+                            _reject(error);
+                            return;
+                        }
+                        _resolve();
+                    });
+                }
+                else if (stat.isFile()) {
+                    rename(oldPath, newPath, (error) => {
+                        if (error) {
+                            _reject(error);
+                            return;
+                        }
+                        if (files.indexOf(file) === files.length - 1) {
+                            _resolve();
+                        }
+                    });
+                }
+            });
+        });
+    });
+};
+//# sourceMappingURL=moveFiles.js.map

package/dist/server/src/api/utils/moveFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moveFiles.js","sourceRoot":"","sources":["../../../../../src/api/utils/moveFiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAiB,EAAE;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;QACvC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;wBACpD,IAAI,KAAK,EAAE,CAAC;4BACV,OAAO,CAAC,KAAK,CAAC,CAAC;4BACf,OAAO;wBACT,CAAC;wBAED,QAAQ,EAAE,CAAC;oBACb,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBACzB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;wBACjC,IAAI,KAAK,EAAE,CAAC;4BACV,OAAO,CAAC,KAAK,CAAC,CAAC;4BACf,OAAO;wBACT,CAAC;wBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC7C,QAAQ,EAAE,CAAC;wBACb,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/server/src/api/utils/parse.d.ts

@@ -0,0 +1,2 @@
+import type { JwtTokenDecoded } from '../types/index.js';
+export declare const parseJwt: (access_token: string) => JwtTokenDecoded;

package/dist/server/src/api/utils/parse.js

@@ -0,0 +1,12 @@
+export const parseJwt = (access_token) => {
+    const base64Url = access_token.split('.')[1];
+    const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
+    const jsonPayload = decodeURIComponent(atob(base64)
+        .split('')
+        .map((c) => {
+        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+    })
+        .join(''));
+    return JSON.parse(jsonPayload);
+};
+//# sourceMappingURL=parse.js.map

package/dist/server/src/api/utils/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../../../../src/api/utils/parse.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,YAAoB,EAAmB,EAAE;IAChE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAW,kBAAkB,CAC5C,IAAI,CAAC,MAAM,CAAC;SACT,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CACZ,CAAC;IAEF,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC,CAAC"}

package/dist/server/src/api/websocket/index.d.ts

@@ -0,0 +1,16 @@
+import { Server } from 'socket.io';
+import type { FastifyInstance } from 'fastify';
+import type { ServerOptions } from 'socket.io';
+import type { SocketNsp, SocketNspMap } from './types.js';
+export declare class SocketService {
+    io: Server;
+    namespaces: Map<SocketNsp, SocketNspMap>;
+    adminNsp: SocketNsp[];
+    private logger;
+    private authService;
+    private configService;
+    private api;
+    constructor(app: FastifyInstance, opts: Partial<ServerOptions>);
+    private registerNamespaces;
+    private setupConnection;
+}

package/dist/server/src/api/websocket/index.js

@@ -0,0 +1,75 @@
+import { Server } from 'socket.io';
+import { container } from 'tsyringe';
+import { authorize } from '../middlewares/socketAuth.middleware.js';
+import { AuthService } from '../services/auth.service.js';
+import { API_EVENT } from '../../api.js';
+import { WebsocketProxy } from '../../nats/websocket.js';
+import { LogsNamespace } from './nsp/logs.js';
+import { MainNamespace } from './nsp/main.js';
+import { MetricsNamespace } from './nsp/metrics.js';
+import { NotificationsNamespace } from './nsp/notifications.js';
+import { PluginsNamespace } from './nsp/plugins.js';
+import { ServerNamespace } from './nsp/server.js';
+import { StatusNamespace } from './nsp/status.js';
+export class SocketService {
+    io;
+    namespaces = new Map();
+    adminNsp = ['/logs', '/notifications', '/status', '/metrics', '/plugins', '/proxy', '/server'];
+    logger;
+    authService;
+    configService;
+    api;
+    constructor(app, opts) {
+        container.registerInstance('socketService', this);
+        this.logger = container.resolve('logger');
+        this.configService = container.resolve('configService');
+        this.api = container.resolve('api');
+        this.io = new Server(app.server, opts);
+        this.registerNamespaces();
+        this.api.once(API_EVENT.SHUTDOWN, () => {
+            this.io.close();
+        });
+    }
+    async registerNamespaces() {
+        this.authService = new AuthService();
+        this.namespaces.set('/camera.ui', new MainNamespace(this.io));
+        this.namespaces.set('/server', new ServerNamespace(this.io));
+        this.namespaces.set('/notifications', new NotificationsNamespace(this.io));
+        this.namespaces.set('/metrics', new MetricsNamespace(this.io));
+        this.namespaces.set('/logs', new LogsNamespace(this.io));
+        this.namespaces.set('/status', new StatusNamespace(this.io));
+        this.namespaces.set('/plugins', new PluginsNamespace(this.io));
+        this.namespaces.set('/proxy', new WebsocketProxy(this.io));
+        for (const [nsp, contructor] of this.namespaces) {
+            contructor.nsp.use(authorize({ secret: this.configService.SECRETS.jwtAccessKey })).on('connection', (socket) => this.setupConnection(socket, nsp));
+        }
+    }
+    setupConnection(socket, nsp) {
+        const username = socket.decodedToken?.username;
+        const address = socket.conn.remoteAddress;
+        try {
+            if (this.adminNsp.includes(nsp) && socket.decodedToken?.role !== 'admin') {
+                throw new Error('No permission');
+            }
+            const valid = this.authService.findByToken(socket.encodedToken);
+            if (!valid) {
+                throw new Error('Unauthenticated');
+            }
+            const device = this.authService.clientDataByToken(socket.encodedToken)?.device || 'unknown';
+            this.logger.trace(`${username} | ${address} | ${device} | authenticated and connected to ${nsp}`);
+            const onEnd = (reason = 'transport close') => {
+                this.logger.trace(`${username} | ${address} | ${device} | disconnected from ${nsp} (${reason})`);
+                socket.removeAllListeners('end');
+                socket.removeAllListeners('disconnect');
+                socket.disconnect();
+            };
+            // socket.on('end', onEnd.bind(this));
+            socket.on('disconnect', onEnd.bind(this));
+        }
+        catch {
+            socket.emit('unauthenticated');
+            socket.disconnect(true);
+        }
+    }
+}
+//# sourceMappingURL=index.js.map