oidc-spa 7.1.7 → 7.1.9

package/tools/asymmetricEncryption.js

@@ -0,0 +1,181 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateKeys = generateKeys;
+exports.asymmetricEncrypt = asymmetricEncrypt;
+exports.asymmetricDecrypt = asymmetricDecrypt;
+var INFO_LABEL = "oidc-spa/tools/asymmetricEncryption";
+function generateKeys() {
+    return __awaiter(this, void 0, void 0, function () {
+        var keyPair, publicKeyRaw, privateKeyRaw;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, crypto.subtle.generateKey({
+                        name: "ECDH",
+                        namedCurve: "P-256"
+                    }, true, ["deriveKey", "deriveBits"])];
+                case 1:
+                    keyPair = _a.sent();
+                    return [4 /*yield*/, crypto.subtle.exportKey("jwk", keyPair.publicKey)];
+                case 2:
+                    publicKeyRaw = _a.sent();
+                    return [4 /*yield*/, crypto.subtle.exportKey("jwk", keyPair.privateKey)];
+                case 3:
+                    privateKeyRaw = _a.sent();
+                    return [2 /*return*/, {
+                            publicKey: btoa(JSON.stringify(publicKeyRaw)),
+                            privateKey: btoa(JSON.stringify(privateKeyRaw))
+                        }];
+            }
+        });
+    });
+}
+function asymmetricEncrypt(params) {
+    return __awaiter(this, void 0, void 0, function () {
+        var publicKey, message, importedPublicKey, ephemeralKeyPair, sharedSecret, salt, infoBytes, hkdfKey, derivedKey, iv, encodedMessage, ciphertext, ephemeralPubKeyRaw, payload;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    publicKey = params.publicKey, message = params.message;
+                    return [4 /*yield*/, crypto.subtle.importKey("jwk", JSON.parse(atob(publicKey)), {
+                            name: "ECDH",
+                            namedCurve: "P-256"
+                        }, false, [])];
+                case 1:
+                    importedPublicKey = _a.sent();
+                    return [4 /*yield*/, crypto.subtle.generateKey({
+                            name: "ECDH",
+                            namedCurve: "P-256"
+                        }, true, ["deriveKey", "deriveBits"])];
+                case 2:
+                    ephemeralKeyPair = _a.sent();
+                    return [4 /*yield*/, crypto.subtle.deriveBits({
+                            name: "ECDH",
+                            public: importedPublicKey
+                        }, ephemeralKeyPair.privateKey, 256)];
+                case 3:
+                    sharedSecret = _a.sent();
+                    salt = crypto.getRandomValues(new Uint8Array(16));
+                    infoBytes = new TextEncoder().encode(INFO_LABEL);
+                    return [4 /*yield*/, crypto.subtle.importKey("raw", sharedSecret, "HKDF", false, ["deriveKey"])];
+                case 4:
+                    hkdfKey = _a.sent();
+                    return [4 /*yield*/, crypto.subtle.deriveKey({
+                            name: "HKDF",
+                            hash: "SHA-256",
+                            salt: salt,
+                            info: infoBytes
+                        }, hkdfKey, { name: "AES-GCM", length: 256 }, false, ["encrypt"])];
+                case 5:
+                    derivedKey = _a.sent();
+                    iv = crypto.getRandomValues(new Uint8Array(12));
+                    encodedMessage = new TextEncoder().encode(message);
+                    return [4 /*yield*/, crypto.subtle.encrypt({
+                            name: "AES-GCM",
+                            iv: iv
+                        }, derivedKey, encodedMessage)];
+                case 6:
+                    ciphertext = _a.sent();
+                    return [4 /*yield*/, crypto.subtle.exportKey("jwk", ephemeralKeyPair.publicKey)];
+                case 7:
+                    ephemeralPubKeyRaw = _a.sent();
+                    payload = {
+                        ephemeralPubKey: ephemeralPubKeyRaw,
+                        iv: Array.from(iv),
+                        salt: Array.from(salt),
+                        ciphertext: Array.from(new Uint8Array(ciphertext))
+                    };
+                    return [2 /*return*/, {
+                            encryptedMessage: btoa(JSON.stringify(payload))
+                        }];
+            }
+        });
+    });
+}
+function asymmetricDecrypt(params) {
+    return __awaiter(this, void 0, void 0, function () {
+        var privateKey, encryptedMessage, _a, ephemeralPubKey, iv, salt, ciphertext, importedPrivateKey, importedEphemeralPubKey, sharedSecret, infoBytes, hkdfKey, derivedKey, decryptedBuffer;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    privateKey = params.privateKey, encryptedMessage = params.encryptedMessage;
+                    _a = JSON.parse(atob(encryptedMessage)), ephemeralPubKey = _a.ephemeralPubKey, iv = _a.iv, salt = _a.salt, ciphertext = _a.ciphertext;
+                    return [4 /*yield*/, crypto.subtle.importKey("jwk", JSON.parse(atob(privateKey)), {
+                            name: "ECDH",
+                            namedCurve: "P-256"
+                        }, false, ["deriveKey", "deriveBits"])];
+                case 1:
+                    importedPrivateKey = _b.sent();
+                    return [4 /*yield*/, crypto.subtle.importKey("jwk", ephemeralPubKey, {
+                            name: "ECDH",
+                            namedCurve: "P-256"
+                        }, false, [])];
+                case 2:
+                    importedEphemeralPubKey = _b.sent();
+                    return [4 /*yield*/, crypto.subtle.deriveBits({
+                            name: "ECDH",
+                            public: importedEphemeralPubKey
+                        }, importedPrivateKey, 256)];
+                case 3:
+                    sharedSecret = _b.sent();
+                    infoBytes = new TextEncoder().encode(INFO_LABEL);
+                    return [4 /*yield*/, crypto.subtle.importKey("raw", sharedSecret, "HKDF", false, ["deriveKey"])];
+                case 4:
+                    hkdfKey = _b.sent();
+                    return [4 /*yield*/, crypto.subtle.deriveKey({
+                            name: "HKDF",
+                            hash: "SHA-256",
+                            salt: new Uint8Array(salt),
+                            info: infoBytes
+                        }, hkdfKey, { name: "AES-GCM", length: 256 }, false, ["decrypt"])];
+                case 5:
+                    derivedKey = _b.sent();
+                    return [4 /*yield*/, crypto.subtle.decrypt({
+                            name: "AES-GCM",
+                            iv: new Uint8Array(iv)
+                        }, derivedKey, new Uint8Array(ciphertext))];
+                case 6:
+                    decryptedBuffer = _b.sent();
+                    return [2 /*return*/, {
+                            message: new TextDecoder().decode(decryptedBuffer)
+                        }];
+            }
+        });
+    });
+}
+//# sourceMappingURL=asymmetricEncryption.js.map

package/tools/asymmetricEncryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asymmetricEncryption.js","sourceRoot":"","sources":["../src/tools/asymmetricEncryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,oCAiBC;AAED,8CA6EC;AAED,8CA8EC;AAlLD,IAAM,UAAU,GAAG,qCAAqC,CAAC;AAEzD,SAAsB,YAAY;;;;;wBACd,qBAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC3C;wBACI,IAAI,EAAE,MAAM;wBACZ,UAAU,EAAE,OAAO;qBACtB,EACD,IAAI,EACJ,CAAC,WAAW,EAAE,YAAY,CAAC,CAC9B,EAAA;;oBAPK,OAAO,GAAG,SAOf;oBAEoB,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,EAAA;;oBAAtE,YAAY,GAAG,SAAuD;oBACtD,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,EAAA;;oBAAxE,aAAa,GAAG,SAAwD;oBAE9E,sBAAO;4BACH,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;4BAC7C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;yBAClD,EAAC;;;;CACL;AAED,SAAsB,iBAAiB,CAAC,MAGvC;;;;;;oBACW,SAAS,GAAc,MAAM,UAApB,EAAE,OAAO,GAAK,MAAM,QAAX,CAAY;oBAEZ,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACnD,KAAK,EACL,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAC3B;4BACI,IAAI,EAAE,MAAM;4BACZ,UAAU,EAAE,OAAO;yBACtB,EACD,KAAK,EACL,EAAE,CACL,EAAA;;oBATK,iBAAiB,GAAG,SASzB;oBAEwB,qBAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CACpD;4BACI,IAAI,EAAE,MAAM;4BACZ,UAAU,EAAE,OAAO;yBACtB,EACD,IAAI,EACJ,CAAC,WAAW,EAAE,YAAY,CAAC,CAC9B,EAAA;;oBAPK,gBAAgB,GAAG,SAOxB;oBAEoB,qBAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC/C;4BACI,IAAI,EAAE,MAAM;4BACZ,MAAM,EAAE,iBAAiB;yBAC5B,EACD,gBAAgB,CAAC,UAAU,EAC3B,GAAG,CACN,EAAA;;oBAPK,YAAY,GAAG,SAOpB;oBAEK,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;oBAClD,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBAEvC,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,EAAA;;oBAA1F,OAAO,GAAG,SAAgF;oBAE7E,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C;4BACI,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,SAAS;4BACf,IAAI,MAAA;4BACJ,IAAI,EAAE,SAAS;yBAClB,EACD,OAAO,EACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,CAAC,CACd,EAAA;;oBAXK,UAAU,GAAG,SAWlB;oBAEK,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;oBAChD,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAEtC,qBAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC1C;4BACI,IAAI,EAAE,SAAS;4BACf,EAAE,IAAA;yBACL,EACD,UAAU,EACV,cAAc,CACjB,EAAA;;oBAPK,UAAU,GAAG,SAOlB;oBAE0B,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAArF,kBAAkB,GAAG,SAAgE;oBAErF,OAAO,GAAG;wBACZ,eAAe,EAAE,kBAAkB;wBACnC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBAClB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;wBACtB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;qBACrD,CAAC;oBAEF,sBAAO;4BACH,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;yBAClD,EAAC;;;;CACL;AAED,SAAsB,iBAAiB,CAAC,MAGvC;;;;;;oBACW,UAAU,GAAuB,MAAM,WAA7B,EAAE,gBAAgB,GAAK,MAAM,iBAAX,CAAY;oBAE1C,KAUF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EATlC,eAAe,qBAAA,EACf,EAAE,QAAA,EACF,IAAI,UAAA,EACJ,UAAU,gBAAA,CAMyB;oBAEZ,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACpD,KAAK,EACL,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAC5B;4BACI,IAAI,EAAE,MAAM;4BACZ,UAAU,EAAE,OAAO;yBACtB,EACD,KAAK,EACL,CAAC,WAAW,EAAE,YAAY,CAAC,CAC9B,EAAA;;oBATK,kBAAkB,GAAG,SAS1B;oBAE+B,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzD,KAAK,EACL,eAAe,EACf;4BACI,IAAI,EAAE,MAAM;4BACZ,UAAU,EAAE,OAAO;yBACtB,EACD,KAAK,EACL,EAAE,CACL,EAAA;;oBATK,uBAAuB,GAAG,SAS/B;oBAEoB,qBAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC/C;4BACI,IAAI,EAAE,MAAM;4BACZ,MAAM,EAAE,uBAAuB;yBAClC,EACD,kBAAkB,EAClB,GAAG,CACN,EAAA;;oBAPK,YAAY,GAAG,SAOpB;oBAEK,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBAEvC,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,EAAA;;oBAA1F,OAAO,GAAG,SAAgF;oBAE7E,qBAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C;4BACI,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;4BAC1B,IAAI,EAAE,SAAS;yBAClB,EACD,OAAO,EACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,CAAC,CACd,EAAA;;oBAXK,UAAU,GAAG,SAWlB;oBAEuB,qBAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC/C;4BACI,IAAI,EAAE,SAAS;4BACf,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;yBACzB,EACD,UAAU,EACV,IAAI,UAAU,CAAC,UAAU,CAAC,CAC7B,EAAA;;oBAPK,eAAe,GAAG,SAOvB;oBAED,sBAAO;4BACH,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;yBACrD,EAAC;;;;CACL"}