vestauth 0.3.1 → 0.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vestauth",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "auth for agents–from the creator of dotenvx",
   "keywords": [
     "vestauth"
@@ -43,6 +43,7 @@
     "commander": "^11.1.0",
     "eciesjs": "^0.4.16",
     "execa": "^5.1.1",
+    "http-message-sig": "^0.2.0",
     "undici": "7.11.0",
     "web-bot-auth": "^0.1.2"
   },

package/src/cli/actions/provider/verify.js

@@ -0,0 +1,38 @@
+const { logger } = require('./../../../shared/logger')
+
+const { verify } = require('web-bot-auth')
+const { verifierFromJWK } = require('web-bot-auth/crypto')
+
+async function _verify (httpMethod, uri, signatureHeader, signatureInputHeader, publicKey) {
+  logger.debug(`httpMethod: ${httpMethod}`)
+  logger.debug(`uri: ${uri}`)
+  logger.debug(`signatureHeader: ${signatureHeader}`)
+  logger.debug(`signatureInputHeader: ${signatureInputHeader}`)
+  logger.debug(`publicKey: ${publicKey}`)
+
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const verifier = await verifierFromJWK(JSON.parse(publicKey))
+  const headers = {
+    Signature: signatureHeader,
+    'Signature-Input': signatureInputHeader
+  }
+
+  const signedRequest = new Request(uri, { headers: headers })
+  const r = await verify(signedRequest, verifier)
+  console.log(r)
+
+  const output = {
+    implement: 'todo'
+  }
+
+  let space = 0
+  if (options.prettyPrint) {
+    space = 2
+  }
+
+  console.log(JSON.stringify(output, null, space))
+}
+
+module.exports = _verify

package/src/cli/commands/provider.js

@@ -6,6 +6,18 @@ provider
   .description('🔌 provider')
   .allowUnknownOption()
 
+// vestauth provider verify
+const verifyAction = require('./../actions/provider/verify')
+provider.command('verify')
+  .description('verify agent')
+  .argument('<httpMethod>', 'GET (default)')
+  .argument('<uri>', '')
+  .argument('<signatureHeader>', '')
+  .argument('<signatureInputHeader>', '')
+  .argument('<publicKey>', 'public key (json string)')
+  .option('-pp, --pretty-print', 'pretty print output')
+  .action(verifyAction)
+
 // vestauth provider challenge
 const challengeAction = require('./../actions/provider/challenge')
 provider.command('challenge')

package/src/lib/helpers/agentHeaders.js

@@ -1,7 +1,7 @@
 const headers = require('./headers')
 const dotenvx = require('@dotenvx/dotenvx')
-// const { verify } = require('web-bot-auth')
-// const { verifierFromJWK } = require('web-bot-auth/crypto')
+const { verify } = require('web-bot-auth')
+const { verifierFromJWK } = require('web-bot-auth/crypto')
 
 async function agentHeaders (httpMethod, uri, tag = 'vestauth', nonce = null) {
   let publicKey = null
@@ -14,10 +14,10 @@ async function agentHeaders (httpMethod, uri, tag = 'vestauth', nonce = null) {
   const _headers = await headers(httpMethod, uri, privateKey, tag, nonce)
 
   // verification (temp testing)
-  // const verifier = await verifierFromJWK(JSON.parse(publicKey))
-  // const signedRequest = new Request(uri, { headers: _headers })
-  // const r = await verify(signedRequest, verifier)
-  // console.log(r)
+  const verifier = await verifierFromJWK(JSON.parse(publicKey))
+  const signedRequest = new Request(uri, { headers: _headers })
+  const r = await verify(signedRequest, verifier)
+  console.log(r)
 
   return _headers
 }

package/src/lib/helpers/signatureParams.js

@@ -5,7 +5,7 @@ const epoch = require('./epoch')
 function signatureParams (kid, tag = 'vestauth', nonce = null) {
   const { created, expires } = epoch()
 
-  if (!nonce) nonce = crypto.randomBytes(64).toString('base64')
+  if (!nonce) nonce = crypto.randomBytes(64).toString('base64url')
 
   return '("@authority");' +
     `created=${created};` +