wiki-security-sessionless 0.0.3 → 0.0.5

package/generate-signature.js

@@ -8,7 +8,7 @@ if(!process.env.PRIVATE_KEY || !process.env.OWNER_NAME) {
 sessionless.getKeys = () => {
   return {
     privateKey: process.env.PRIVATE_KEY,
-    pubKey: ''
+    pubKey: '03dbd40d0dcb3f112ef184ea6de8a8a44808fb55fa99747fc901642e8a4245ed0c'
   };
 };
 
@@ -19,3 +19,5 @@ sessionless.sign(message)
   .then(signature => console.log(`?timestamp=${timestamp}&signature=${signature}`))
   .catch(console.error);
 
+
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki-security-sessionless",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "description": "A sessionless security module for the federated wiki",
   "repository": "https://github.com/zach-planet-nine/wiki-security-sessionless",
   "keywords": [

package/server/sessionless.js

@@ -3,9 +3,9 @@ const sessionless = require('sessionless-node');
 
 console.log('sessionless server starting');
 
-let keys;
-const saveKeys = (_keys) => keys = _keys;
-const getKeys = () => keys;
+let sessionlessKeys;
+const saveKeys = (_sessionlessKeys) => sessionlessKeys = _sessionlessKeys;
+const getKeys = () => sessionlessKeys;
 
 module.exports = (log, loga, argv) => {
   const security = {};
@@ -42,7 +42,7 @@ module.exports = (log, loga, argv) => {
     // TODO: This may be relevant if we add joan for PAP
   };
 
-  security.isAuthorized = async (req) => {
+  security.isAuthorized = (req) => {
     return req.sessionless && req.sessionless.isVerified;
   }
 
@@ -53,10 +53,10 @@ module.exports = (log, loga, argv) => {
     const message = timestamp + name;    
     
     try {
-      if(sessionless.verifySignature(signature, message, owner.keys.pubKey)) {
-	const keys = await sessionless.generateKeys(saveKeys, getKeys);
+      if(sessionless.verifySignature(signature, message, owner.sessionlessKeys.pubKey)) {
+	const sessionlessKeys = await sessionless.generateKeys(saveKeys, getKeys);
 
-	req.session.key = keys.privateKey;
+	req.session.key = sessionlessKeys.privateKey;
 
 	return res.redirect('/view/welcome-visitors');
       } 
@@ -77,9 +77,9 @@ module.exports = (log, loga, argv) => {
 
       if(req.session && req.session.key) {
         try {
-          const keys = await sessionless.getKeys();
-          keys.privateKey = req.session.key;
-          sessionless.getKeys = () => keys;
+          const sessionlessKeys = await sessionless.getKeys();
+          sessionlessKeys.privateKey = req.session.key;
+          sessionless.getKeys = () => sessionlessKeys;
         } catch(err) {
           req.session.reset();
           req.sessionless.isVerified = false;
@@ -89,7 +89,7 @@ module.exports = (log, loga, argv) => {
         try {
           const signature = await sessionless.sign(req.path);
 
-          const isVerified = sessionless.verifySignature(signature, req.path, keys.pubKey);
+          const isVerified = sessionless.verifySignature(signature, req.path, sessionlessKeys.pubKey);
           req.sessionless.isVerified = isVerified;
         } catch(err) {
           req.sessionless.isVerified = false;