vestauth 0.1.11 → 0.1.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vestauth",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "vestauth",
   "keywords": [
     "vestauth"
@@ -19,11 +19,21 @@
   "author": "@motdotla",
   "type": "commonjs",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "standard": "standard",
+    "standard:fix": "standard --fix",
+    "test": "tap run --allow-empty-coverage --disable-coverage --timeout=60000",
+    "test-coverage": "tap run --show-full-coverage --timeout=60000",
+    "testshell": "bash shellspec",
+    "prerelease": "npm test && npm run testshell",
+    "release": "standard-version"
   },
   "dependencies": {
     "@noble/hashes": "^1.8.0",
     "@noble/secp256k1": "^3.0.0",
     "eciesjs": "^0.4.16"
+  },
+  "devDependencies": {
+    "standard": "^17.1.0",
+    "standard-version": "^9.5.0"
   }
 }

package/src/lib/helpers/challenge.js

@@ -0,0 +1,7 @@
+const crypto = require('crypto')
+
+function challenge () {
+  return crypto.randomBytes(32).toString('base64url')
+}
+
+module.exports = challenge

package/src/lib/helpers/hash.js

@@ -1,8 +1,8 @@
 const { sha256 } = require('@noble/hashes/sha2.js')
 const { utf8ToBytes } = require('@noble/hashes/utils.js')
 
-function hash (message = 'hello') {
-  return sha256(utf8ToBytes(message))
+function hash (str = '') {
+  return sha256(utf8ToBytes(str))
 }
 
 module.exports = hash

package/src/lib/helpers/sign.js

@@ -6,16 +6,10 @@ secp.hashes.sha256 = sha256
 secp.hashes.hmacSha256 = (key, msg) => hmac(sha256, key, msg)
 const hash = require('./hash')
 
-// // publicKey (compressed): Uint8Array
-// const publicKey = getPublicKey(privateKey, true)
-//
-// // verifier side (server or client)
-// const ok = verify(signature, hash, publicKey)
-
-function sign (message, privateKeyHex) {
-  const hashMessage = hash(message)
+function sign (challenge, privateKeyHex) {
+  const hashChallenge = hash(challenge)
   const privateKeyBytes = Buffer.from(privateKeyHex, 'hex')
-  const signature = secp.sign(hashMessage, privateKeyBytes)
+  const signature = secp.sign(hashChallenge, privateKeyBytes)
 
   return Buffer.from(signature).toString('base64url') // base64 returned
 }

package/src/lib/helpers/verify.js

@@ -1,17 +1,12 @@
-// import { sign, verify, getPublicKey } from '@noble/secp256k1'
-// // publicKey (compressed): Uint8Array
-// const publicKey = getPublicKey(privateKey, true)
-//
-// // verifier side (server or client)
-// const ok = verify(signature, hash, publicKey)
+const secp = require('@noble/secp256k1')
+const hash = require('./hash')
 
-function verify () {
-  console.log('verify todo')
-  // const hashMessage = hash(message)
-  // const hashPrivateKey = hash(privateKey)
-  // const signature = secp.sign(hashMessage, hashPrivateKey)
+function verify (challenge, signatureBase64, publicKeyHex) {
+  const hashChallenge = hash(challenge)
+  const signature = Buffer.from(signatureBase64, 'base64url')
+  const publicKeyBytes = Buffer.from(publicKeyHex, 'hex')
 
-  // return Buffer.from(signature).toString('base64url') // base64 returned
+  return secp.verify(signature, hashChallenge, publicKeyBytes)
 }
 
 module.exports = verify

package/src/lib/main.js

@@ -1,9 +1,11 @@
+const challenge = require('./helpers/challenge')
 const hash = require('./helpers/hash')
 const keypair = require('./helpers/keypair')
 const sign = require('./helpers/sign')
 const verify = require('./helpers/verify')
 
 module.exports = {
+  challenge,
   hash,
   keypair,
   sign,