vestauth 0.1.32 → 0.1.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vestauth",
-  "version": "0.1.32",
+  "version": "0.1.36",
   "description": "auth for agents",
   "keywords": [
     "vestauth"
@@ -40,7 +40,8 @@
     "@noble/hashes": "^1.8.0",
     "@noble/secp256k1": "^1.7.2",
     "commander": "^11.1.0",
-    "eciesjs": "^0.4.16"
+    "eciesjs": "^0.4.16",
+    "undici": "7.11.0"
   },
   "devDependencies": {
     "@yao-pkg/pkg": "^5.14.2",

package/src/cli/actions/verifyAgent.js

@@ -0,0 +1,23 @@
+const { logger } = require('./../../shared/logger')
+
+const main = require('./../../lib/main')
+
+async function verifyAgent (providerPrivateKey, providerChallenge, authorizationHeader) {
+  logger.debug(`providerPrivateKey: ${providerPrivateKey}`)
+  logger.debug(`providerChallenge: ${providerChallenge}`)
+  logger.debug(`authorizationHeader: ${authorizationHeader}`)
+
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const json = await main.verifyAgent(providerPrivateKey, providerChallenge, authorizationHeader)
+
+  let space = 0
+  if (options.prettyPrint) {
+    space = 2
+  }
+
+  console.log(JSON.stringify(json, null, space))
+}
+
+module.exports = verifyAgent

package/src/cli/vestauth.js

@@ -81,6 +81,16 @@ program.command('verify')
   .option('-pp, --pretty-print', 'pretty print output')
   .action(verifyAction)
 
+// vestauth verifyAgent
+const verifyAgentAction = require('./actions/verifyAgent')
+program.command('verifyagent')
+  .description('verify agent')
+  .argument('<providerPrivateKey>', '')
+  .argument('<providerChallenge>', '')
+  .argument('<authorizationHeader>', '')
+  .option('-pp, --pretty-print', 'pretty print output')
+  .action(verifyAgentAction)
+
 // vestauth help
 program.command('help [command]')
   .description('display help for command')

package/src/lib/api/postVerify.js

@@ -0,0 +1,42 @@
+const { http } = require('../helpers/http')
+const buildApiError = require('../helpers/buildApiError')
+
+class PostVerify {
+  constructor (hostname, providerPublicKey, providerSignature, agentPublicKey, agentSignature) {
+    this.hostname = hostname || 'https://api.vestauth.com'
+    this.providerPublicKey = providerPublicKey
+    this.providerSignature = providerSignature
+    this.agentPublicKey = agentPublicKey
+    this.agentSignature = agentSignature
+  }
+
+  async run () {
+    const url = `${this.hostname}/api/agent/verify`
+    const providerPublicKey = this.providerPublicKey
+    const providerSignature = this.providerSignature
+    const agentPublicKey = this.agentPublicKey
+    const agentSignature = this.agentSignature
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Agent ${providerPublicKey}:${providerSignature}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        public_key: agentPublicKey,
+        signature: agentSignature
+      })
+    })
+
+    if (resp.statusCode >= 400) {
+      const json = await resp.body.json()
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    const json = await resp.body.json()
+    return json
+  }
+}
+
+module.exports = PostVerify

package/src/lib/helpers/buildApiError.js

@@ -0,0 +1,16 @@
+function buildApiError (statusCode, json) {
+  const code = json.error.code || statusCode.toString()
+  const message = `[${code}] ${json.error.message}`
+  const help = `[${code}] ${json.error.help || JSON.stringify(json)}`
+  const meta = json.error.meta
+
+  const error = new Error(message)
+  error.code = code
+  error.help = help
+  error.meta = meta
+  error.json = json
+
+  return error
+}
+
+module.exports = buildApiError

package/src/lib/helpers/errors.js

@@ -3,6 +3,17 @@ class Errors {
     this.message = options.message
   }
 
+  econnrefused () {
+    const code = 'ECONNREFUSED'
+    const message = `[${code}] connection refused`
+    const help = `[${code}] check your internet connection`
+
+    const e = new Error(message)
+    e.code = code
+    e.help = help
+    return e
+  }
+
   dangerousDependencyHoist () {
     const code = 'DANGEROUS_DEPENDENCY_HOIST'
     const message = `[${code}] your environment has hoisted an incompatible version of a vestauth dependency: ${this.message}`

package/src/lib/helpers/http.js

@@ -0,0 +1,17 @@
+const { request } = require('undici')
+
+const Errors = require('./errors')
+
+async function http (url, opts = {}) {
+  try {
+    return await request(url, opts)
+  } catch (err) {
+    if (err.code === 'econnrefused') {
+      throw new Errors().econnrefused()
+    }
+
+    throw err
+  }
+}
+
+module.exports = { http }

package/src/lib/helpers/keypair.js

@@ -1,10 +1,13 @@
 const { PrivateKey } = require('eciesjs')
 
+const stripFormatting = require('./stripFormatting')
+
 function keypair (existingPrivateKey, prefix = 'agent') {
   let kp
 
   if (existingPrivateKey) {
-    kp = new PrivateKey(Buffer.from(existingPrivateKey, 'hex'))
+    const existingPrivateKeyStripped = stripFormatting(existingPrivateKey)
+    kp = new PrivateKey(Buffer.from(existingPrivateKeyStripped, 'hex'))
   } else {
     kp = new PrivateKey()
   }

package/src/lib/helpers/verifyAgent.js

@@ -0,0 +1,19 @@
+const PostVerify = require('../api/postVerify')
+const keypair = require('./keypair')
+const sign = require('./sign')
+
+async function verifyAgent (providerPrivateKey, providerChallenge, authorizationHeader) {
+  const kp = keypair(providerPrivateKey, 'provider')
+  const providerSignature = await sign(providerChallenge, kp.privateKey)
+
+  const raw = authorizationHeader.replace(/^Agent\s+/i, '').trim() // remove 'Agent ' prefix
+  const split = String(raw).split(':')
+  const agentPublicKey = split[0]
+  const agentSignature = split[1]
+
+  const json = await new PostVerify('https://api.vestauth.com', kp.publicKey, providerSignature, agentPublicKey, agentSignature).run()
+
+  return json
+}
+
+module.exports = verifyAgent

package/src/lib/main.js

@@ -4,6 +4,7 @@ const keypair = require('./helpers/keypair')
 const sign = require('./helpers/sign')
 const verify = require('./helpers/verify')
 const verifyAuthorizationHeader = require('./helpers/verifyAuthorizationHeader')
+const verifyAgent = require('./helpers/verifyAgent')
 
 module.exports = {
   challenge,
@@ -11,5 +12,6 @@ module.exports = {
   keypair,
   sign,
   verify,
-  verifyAuthorizationHeader
+  verifyAuthorizationHeader,
+  verifyAgent
 }