cassproject 1.5.9 → 1.5.10

package/README.md

@@ -35,10 +35,11 @@ Development unit tests presume you have a CaSS Repository running on `localhost:
 
 ## Publish checklist
 
- * Review dependencies, autocomplete version numbers
- * Increment version number in package.json and yuidoc.json
+ * Review dependencies, autocomplete version numbers to latest versions.
+ * Increment version number in package.json and yuidoc.json.
+ * Update changelog.
  * Update documentation, `npm run docs`
- * Delete yuidocs from package.json, delete package-lock.json
+ * Delete yuidocs from package.json, delete package-lock.json.
  * `npm install`
  * `npm test` - Must not fail any tests.
  * Document code coverage output by the previous step.
@@ -48,6 +49,43 @@ Development unit tests presume you have a CaSS Repository running on `localhost:
 
 # Changelog
 
+## 1.5.10
+* FIPS support on Node 18 with custom Node 18 compilation and compiled OpenSSL library.
+
+## 1.5.9
+* Code coverage documentation
+* Login record migration
+
+## 1.5.8
+* Added additional webworker fallback for forge in web worker mode.
+* Fixes to http2 mode
+* CTDLASN CSV Import fixes.
+* Static analysis fixes.
+
+## 1.5.7
+* Browser crypto module now detected correctly 
+
+## 1.5.6
+* Plugin support now informed by repository
+
+## 1.5.5
+* Compatibility with Vite
+* Directories of private frameworks are no longer encrypted.
+
+## 1.5.4
+* HTTP2 support.
+
+## 1.5.3
+* Library Version Increment
+* CTDL-ASN bug fix.
+
+## 1.5.2
+* Library Version Increment
+* CTDL-ASN bug fix.
+
+## 1.5.1
+* CTDL-ASN bug fix.
+
 ## 1.5.0
 * Version increment
 

package/index.js

@@ -2,6 +2,7 @@ if (typeof window !== "undefined" && window) {
     window.global = window;
     window.module = {};
 }
+
 global.generateUUID = function () {
     var d = new Date().getTime();
     if (typeof window !== "undefined" && window && window.performance && typeof window.performance.now === "function") {

package/package.json

@@ -1,19 +1,23 @@
 {
 	"name": "cassproject",
-	"version": "1.5.9",
+	"version": "1.5.10",
 	"description": "Competency and Skills Service",
 	"main": "index.js",
 	"scripts": {
 		"test": "npm run test15Https11 && npm run test15Https && npm run test15 && npm run test14 && npm run test13 && npm run test12",
-		"testCassTest": "npm run testkill && docker run -d --name cass-test -p80:80 cass-test && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
-		"testDevHttps": "npm run testkill && docker run -d --name cass-test -p443:80 -e HTTPS=true cassproject/cass:dev && wait-on https://localhost/api/ping && npm run testCypressEdgeHttps && npm run testCypressHttps && npm run testNode16Https && npm run testNode15Https && npm run testNode14Https && npm run testNode13Https && npm run testNode12Https",
-		"test15Https": "npm run testkill && docker run -d --name cass-test -p443:443 -e HTTPS=true cassproject/cass:1.5.5 && wait-on https://localhost/api/ping && npm run testCypressEdgeHttps && npm run testCypressHttps && npm run testNode16Https && npm run testkill",
-		"test15Https11": "npm run testkill && docker run -d --name cass-test -p443:443 -e HTTPS=true -e HTTP2=false cassproject/cass:dev && wait-on https://localhost/api/ping && npm run testCypressEdgeHttps && npm run testCypressHttps && npm run testNode16Https && npm run testkill",
-		"test15": "npm run testkill && docker run -d --name cass-test -p80:80 cassproject/cass:1.5.8 && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
+		"testCassTest": "npm run testkill && docker run -d --name cass-test -p80:80 cass-test && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode18 && npm run testNode18Fips && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
+		"testDevHttps": "npm run testkill && docker run -d --name cass-test -p443:80 -e HTTPS=true cassproject/cass:dev && wait-on https://localhost/api/ping && npm run testCypressEdgeHttps && npm run testCypressHttps && npm run testNode18HttpsFips && npm run testNode18Https && npm run testNode16Https && npm run testNode15Https && npm run testNode14Https && npm run testNode13Https && npm run testNode12Https",
+		"test15Https": "npm run testkill && docker run -d --name cass-test -p443:443 -e HTTPS=true cassproject/cass:1.5.10 && wait-on https://localhost/api/ping && npm run testCypressEdgeHttps && npm run testCypressHttps && npm run testNode18HttpsFips && npm run testNode18Https && npm run testNode16Https && npm run testkill",
+		"test15Https11": "npm run testkill && docker run -d --name cass-test -p443:443 -e HTTPS=true -e HTTP2=false cassproject/cass:1.5.10 && wait-on https://localhost/api/ping && npm run testCypressEdgeHttps && npm run testCypressHttps && npm run testNode18HttpsFips && npm run testNode18Https && npm run testNode16Https && npm run testkill",
+		"test15": "npm run testkill && docker run -d --name cass-test -p80:80 cassproject/cass:1.5.10 && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode18 && npm run testNode18Fips && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
 		"test14": "npm run testkill && docker run -d --name cass-test -p80:80 cassproject/cass:1.4.4 && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
 		"test13": "npm run testkill && docker run -d --name cass-test -p80:80 cassproject/cass:1.3.18 && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
 		"test12": "npm run testkill && docker run -d --name cass-test -p80:80 cassproject/cass:1.2.44 && wait-on http://localhost/api/ping && npm run testCypressEdge && npm run testCypress && npm run testNode16 && npm run testNode15 && npm run testNode14 && npm run testNode13 && npm run testNode12 && npm run testkill",
 		"testkill": "docker kill cass-test | exit 0 && docker rm cass-test | exit 0",
+		"testNode18": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node18 -t npm-cass . & docker run --network=\"host\" --name npm-cass npm-cass",
+		"testNode18Https": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node18https -t npm-cass . & docker run -it --network=\"host\" --name npm-cass npm-cass",
+		"testNode18HttpsFips": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node18httpsfips -t npm-cass . & docker run --network=\"host\" --name npm-cass npm-cass",
+		"testNode18Fips": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node18fips -t npm-cass . & docker run --network=\"host\" --name npm-cass npm-cass",
 		"testNode16": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node16 -t npm-cass . & docker run --network=\"host\" --name npm-cass npm-cass",
 		"testNode16Https": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node16https -t npm-cass . & docker run --network=\"host\" --name npm-cass npm-cass",
 		"testNode15": "docker kill npm-cass & docker rm -f npm-cass & docker build --progress plain -f docker/node15 -t npm-cass . & docker run --network=\"host\" --name npm-cass npm-cass",
@@ -31,9 +35,9 @@
 		"autotest": "nodemon test.js",
 		"autoindex": "nodemon index.js",
 		"mocha": "nyc --reporter=lcov --reporter=text mocha -b src/**/*.test.js",
-		"mocha:httpsNoHttp2": "export CASS_LOOPBACK=https://localhost/api/|| set CASS_LOOPBACK=https://localhost/api/&&export HTTP2=false|| set HTTP2=false&& mocha -b src/**/*.test.js",
-		"mocha:https": "export CASS_LOOPBACK=https://localhost/api/|| set CASS_LOOPBACK=https://localhost/api/&& mocha -b src/**/*.test.js",
-		"mocha:clientSideCertificates": "export CASS_LOOPBACK=https://localhost/api/|| set CASS_LOOPBACK=https://localhost/api/&& mocha -b src/**/*.test.js",
+		"mocha:httpsNoHttp2": "export CASS_LOOPBACK=https://127.0.0.1/api/|| set CASS_LOOPBACK=https://127.0.0.1/api/&&export HTTP2=false|| set HTTP2=false&& mocha -b src/**/*.test.js",
+		"mocha:https": "export CASS_LOOPBACK=https://127.0.0.1/api/|| set CASS_LOOPBACK=https://127.0.0.1/api/&& mocha -b src/**/*.test.js",
+		"mocha:clientSideCertificates": "export CASS_LOOPBACK=https://127.0.0.1/api/|| set CASS_LOOPBACK=https://127.0.0.1/api/&& mocha -b src/**/*.test.js",
 		"mochaGraph": "mocha -b src/com/eduworks/ec/graph/**/*.test.js",
 		"automocha": "nodemon --exec \"npm run mocha\"",
 		"automochaGraph": "nodemon --exec \"npm run mochaGraph\"",
@@ -112,20 +116,20 @@
 		"@babel/preset-env": "^7.18.2",
 		"@cypress/browserify-preprocessor": "^3.0.2",
 		"@cypress/vite-dev-server": "^2.2.3",
-		"@cypress/webpack-preprocessor": "^5.11.1",
+		"@cypress/webpack-preprocessor": "^5.12.0",
 		"babel-eslint": "^10.1.0",
 		"babel-loader": "^8.2.5",
 		"babel-plugin-transform-remove-strict-mode": "^0.0.2",
 		"chai": "^4.3.6",
 		"convert-hrtime": "^5.0.0",
 		"cypress": "^9.7.0",
-		"eslint": "^8.16.0",
+		"eslint": "^8.17.0",
 		"mocha": "^10.0.0",
 		"node-polyfill-webpack-plugin": "^1.1.4",
 		"nodemon": "^2.0.16",
 		"nyc": "^15.1.0",
 		"wait-on": "^6.0.1",
-		"webpack": "^5.72.1",
+		"webpack": "^5.73.0",
 		"webpack-cli": "^4.9.2"
 	}
 }

package/src/com/eduworks/ec/crypto/EcAesCtrAsync.js

@@ -11,16 +11,40 @@ if (typeof crypto == 'undefined')
 		console.log("Webcrypto not available. Tests will fail. Please upgrade, if possible, to Node 16. Non-test mode will fallback to slower cryptograpy methods.: " + err);
 	}
 }
+
 let EcCrypto = require("./EcCrypto.js");
 let EcAesCtrAsyncWorker = require("./EcAesCtrAsyncWorker.js");
 let cassPromisify = require("../promises/helpers.js").cassPromisify;
 let cassReturnAsPromise = require("../promises/helpers.js").cassReturnAsPromise;
+let realCrypto = require('crypto');
 /**
  *  Async version of EcAesCtr that uses browser extensions (window.crypto) to accomplish cryptography much faster.
  *  Falls back to EcAesCtrAsyncWorker, if window.crypto is not available.
  *  @class EcAesCtrAsync
  */
 module.exports = class EcAesCtrAsync {
+	static fipsOn(){		
+		if (process && process.env && process.env.FIPS)
+		if (realCrypto.getFips() == 0)
+			try {
+				realCrypto.setFips(true);
+				//console.log("FIPS compliant crypto provider has been enabled.");
+			} catch (e) {
+				console.log("ERR_CRYPTO_FIPS_UNAVAILABLE",e);
+			}
+	}
+
+	static fipsOff(){	
+		if (process && process.env && process.env.FIPS)	
+		if (realCrypto.getFips() == 1)
+			try {
+				realCrypto.setFips(false);
+				//console.log("FIPS compliant crypto provider has been disabled.");
+			} catch (e) {
+				console.log("ERR_CRYPTO_FIPS_UNAVAILABLE",e);
+			}
+	}
+
 	/**
 	 *  Asynchronous form of {{#crossLink
 	 *  "EcAesCtr/encrypt:method"}}EcAesCtr.encrypt{{/crossLink}}
@@ -50,6 +74,7 @@ module.exports = class EcAesCtrAsync {
 				failure
 			);
 		}
+		this.fipsOn();
 		var keyUsages = [];
 		keyUsages.push("encrypt", "decrypt");
 		var algorithm = {};
@@ -71,6 +96,7 @@ module.exports = class EcAesCtrAsync {
 					return crypto.subtle
 						.encrypt(algorithm, key, data)
 						.then(function (p1) {
+							EcAesCtrAsync.fipsOff();
 							return base64.encode(p1);
 						});
 				}),
@@ -113,6 +139,7 @@ module.exports = class EcAesCtrAsync {
 				failure
 			);
 		}
+		this.fipsOn();
 		var keyUsages = ["encrypt", "decrypt"];
 		var algorithm = {};
 		algorithm.name = "AES-CTR";
@@ -136,6 +163,7 @@ module.exports = class EcAesCtrAsync {
 							EcCrypto.decryptionCache[
 								secret + iv + ciphertext
 							] = EcCrypto.ab2str(p1);
+							EcAesCtrAsync.fipsOff();
 							return EcCrypto.ab2str(p1);
 						});
 				}),

package/src/com/eduworks/ec/crypto/EcRsaOaepAsync.js

@@ -1,5 +1,6 @@
 var base64 = require("base64-arraybuffer");
 let forge = require("node-forge");
+const EcAesCtrAsync = require("./EcAesCtrAsync.js");
 if (typeof crypto == 'undefined')
 {
 	if (typeof window !== 'undefined' && window != null && window !== undefined)
@@ -11,6 +12,7 @@ if (typeof crypto == 'undefined')
 		console.log("Webcrypto not available. Tests will fail. Please upgrade, if possible, to Node 16. Non-test mode will fallback to slower cryptograpy methods.: " + err);
 	}
 }
+
 let EcCrypto = require("./EcCrypto.js");
 let EcRsaOaepAsyncWorker = require("./EcRsaOaepAsyncWorker.js");
 let cassPromisify = require("../promises/helpers.js").cassPromisify;
@@ -48,6 +50,7 @@ module.exports = class EcRsaOaepAsync {
 				failure
 			);
 		}
+		EcAesCtrAsync.fipsOn();
 		var keyUsages = [];
 		keyUsages.push("encrypt");
 		var algorithm = {};
@@ -73,6 +76,7 @@ module.exports = class EcRsaOaepAsync {
 			);
 		}
 		p = p.then((result) => {
+			EcAesCtrAsync.fipsOff();
 			return base64.encode(result);
 		});
 		return cassPromisify(p, success, failure);
@@ -111,6 +115,7 @@ module.exports = class EcRsaOaepAsync {
 				failure
 			);
 		}
+		EcAesCtrAsync.fipsOn();
 		var algorithm = {};
 		algorithm.name = "RSA-OAEP";
 		algorithm.hash = "SHA-1";
@@ -123,6 +128,7 @@ module.exports = class EcRsaOaepAsync {
 			if (EcCrypto.caching) {
 				EcCrypto.decryptionCache[ppk.toPem() + cipherText] = result;
 			}
+			EcAesCtrAsync.fipsOff();
 			return result;
 		};
 		if (ppk.key == null) {
@@ -141,6 +147,7 @@ module.exports = class EcRsaOaepAsync {
 				.then(afterKeyIsImported)
 				.catch((error) => {
 					console.trace(ppk, cipherText, error);
+					EcAesCtrAsync.fipsOff();
 					return null;
 				});
 			return cassPromisify(p, success, failure);
@@ -150,6 +157,7 @@ module.exports = class EcRsaOaepAsync {
 				.then(afterKeyIsImported)
 				.catch((error) => {
 					console.trace(error);
+					EcAesCtrAsync.fipsOff();
 					return null;
 				});
 			return cassPromisify(p, success, failure);
@@ -180,6 +188,7 @@ module.exports = class EcRsaOaepAsync {
 		if (text == null) {
 			return cassReturnAsPromise(null, success, failure);
 		}
+		//EcAesCtrAsync.fipsOn();// OPENSSL3 signing with this method doesn't seem to work right now.
 		var keyUsages = [];
 		keyUsages.push("sign");
 		var algorithm = {};
@@ -198,6 +207,7 @@ module.exports = class EcRsaOaepAsync {
 								EcCrypto.str2ab(forge.util.encodeUtf8(text))
 							)
 							.then(function (p1) {
+								//EcAesCtrAsync.fipsOff();// OPENSSL3 signing with this method doesn't seem to work right now.
 								return base64.encode(p1);
 							});
 					}),
@@ -241,6 +251,7 @@ module.exports = class EcRsaOaepAsync {
 		) {
 			return EcRsaOaepAsyncWorker.sign(ppk, text, success, failure);
 		}
+		EcAesCtrAsync.fipsOn();
 		var keyUsages = [];
 		keyUsages.push("sign");
 		var algorithm = {};
@@ -265,7 +276,8 @@ module.exports = class EcRsaOaepAsync {
 				EcCrypto.str2ab(forge.util.encodeUtf8(text))
 			);
 
-		p = p.then(function (p1) {
+		p = p.then(function (p1) {								
+			EcAesCtrAsync.fipsOff();
 			return base64.encode(p1);
 		});
 		return cassPromisify(p, success, failure);
@@ -299,6 +311,7 @@ module.exports = class EcRsaOaepAsync {
 				failure
 			);
 		}
+		EcAesCtrAsync.fipsOn();
 		var algorithm = {};
 		algorithm.name = "RSASSA-PKCS1-v1_5";
 		algorithm.hash = "SHA-1";
@@ -315,7 +328,10 @@ module.exports = class EcRsaOaepAsync {
 							key,
 							base64.decode(signature),
 							EcCrypto.str2ab(forge.util.encodeUtf8(text))
-						);
+						).then((result)=>{						
+							EcAesCtrAsync.fipsOff();
+							return result;
+						});
 					}),
 				success,
 				failure
@@ -327,7 +343,10 @@ module.exports = class EcRsaOaepAsync {
 					pk.signKey,
 					base64.decode(signature),
 					EcCrypto.str2ab(forge.util.encodeUtf8(text))
-				),
+				).then((result)=>{						
+					EcAesCtrAsync.fipsOff();
+					return result;
+				}),
 				success,
 				failure
 			);
@@ -362,6 +381,7 @@ module.exports = class EcRsaOaepAsync {
 				failure
 			);
 		}
+		EcAesCtrAsync.fipsOn();
 		var algorithm = {};
 		algorithm.name = "RSASSA-PKCS1-v1_5";
 		algorithm.hash = "SHA-256";
@@ -378,7 +398,10 @@ module.exports = class EcRsaOaepAsync {
 							key,
 							base64.decode(signature),
 							EcCrypto.str2ab(forge.util.encodeUtf8(text))
-						);
+						).then((result)=>{						
+							EcAesCtrAsync.fipsOff();
+							return result;
+						});
 					}),
 				success,
 				failure
@@ -390,7 +413,10 @@ module.exports = class EcRsaOaepAsync {
 					pk.signKey256,
 					base64.decode(signature),
 					EcCrypto.str2ab(forge.util.encodeUtf8(text))
-				),
+				).then((result)=>{						
+					EcAesCtrAsync.fipsOff();
+					return result;
+				}),
 				success,
 				failure
 			);

package/src/com/eduworks/ec/remote/EcRemote.js

@@ -8,6 +8,20 @@ if (typeof process === 'object') {
   }
 }
 
+if (isNode)
+{
+	try{
+		const dns = require('node:dns');
+		if (dns && dns.setDefaultResultOrder)
+		{
+			//Support for Node 18 using Docker containers with a network that doesn't support ipv6 loopback.
+			dns.setDefaultResultOrder('ipv4first');
+		}
+	} 
+	catch(ex){
+	}
+}
+
 global.httpOptions = [];
 global.http2Enabled = {};
 if (global.axios == null)