devsam/core_ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

securetoken 타입 변경

Browse Source 
- 웹 통신시 혹시 모르니
This commit is contained in:
Hide_D
2023-08-19 06:54:53 +00:00
parent f8b8ea6cbe
commit 194b213f61
1 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/SecureToken.ts
+8 -7
View File
@@ -18,11 +18,11 @@ export type SecureEncryptedToken = {
payload: string; //BASE64(AES(BSON(aad),BSON(payload))) payload: string; //BASE64(AES(BSON(aad),BSON(payload)))
} }
export type SecurePlaintextToken<T extends object> = { export type SecurePlaintextToken = {
nonce: string; // [key, iv] = SHA512(presharedSecret + nonce) nonce: string; // [key, iv] = SHA512(presharedSecret + nonce)
type: string; // aad[0] type: string; // aad[0]
validUntil: string; // aad[1] validUntil: string; // aad[1]
payload: T; // aad[2] payload: string; // JSON => aad[2]
tag: string; //BASE64(AES(BSON(aad),null))) tag: string; //BASE64(AES(BSON(aad),null)))
} }
@@ -102,7 +102,7 @@ export async function parseSecureEncryptedToken<T extends object>(secureToken: S
return payload as T; return payload as T;
} }
export async function generateSecurePlaintextToken<T extends object>(validUntil: Date, type: string, payload: T, presharedTokenSecret?: string): Promise<SecurePlaintextToken<T>> { export async function generateSecurePlaintextToken<T extends object>(validUntil: Date, type: string, payload: T, presharedTokenSecret?: string): Promise<SecurePlaintextToken> {
if (!presharedTokenSecret) { if (!presharedTokenSecret) {
if (!staticPresharedTokenSecret) { if (!staticPresharedTokenSecret) {
throw new Error("PRESHARED_TOKEN_SECRET is not set"); throw new Error("PRESHARED_TOKEN_SECRET is not set");
@@ -124,8 +124,9 @@ export async function generateSecurePlaintextToken<T extends object>(validUntil:
const iv = new Uint8Array(keyBuffer.buffer, 32, 12); const iv = new Uint8Array(keyBuffer.buffer, 32, 12);
const validUntilText = validUntil.toISOString(); const validUntilText = validUntil.toISOString();
const jsonPayload = JSON.stringify(payload);
const aad = [type, validUntilText, payload]; const aad = [type, validUntilText, jsonPayload];
const aadRaw = BSON.serialize(aad); const aadRaw = BSON.serialize(aad);
const dummyPayload = new ArrayBuffer(0); const dummyPayload = new ArrayBuffer(0);
@@ -136,12 +137,12 @@ export async function generateSecurePlaintextToken<T extends object>(validUntil:
nonce: nonce.toString('base64'), nonce: nonce.toString('base64'),
type, type,
validUntil: validUntilText, validUntil: validUntilText,
payload, payload: jsonPayload,
tag: tag.toString('base64'), tag: tag.toString('base64'),
} }
} }
export async function parseSecurePlaintextToken<T extends object>(secureToken: SecurePlaintextToken<T>, presharedTokenSecret?: string): Promise<T> { export async function parseSecurePlaintextToken<T extends object>(secureToken: SecurePlaintextToken, presharedTokenSecret?: string): Promise<T> {
if (!presharedTokenSecret) { if (!presharedTokenSecret) {
if (!staticPresharedTokenSecret) { if (!staticPresharedTokenSecret) {
throw new Error("PRESHARED_TOKEN_SECRET is not set"); throw new Error("PRESHARED_TOKEN_SECRET is not set");
@@ -167,5 +168,5 @@ export async function parseSecurePlaintextToken<T extends object>(secureToken: S
await AES_GCM_Decrypt(key, iv, tag, aadRaw); await AES_GCM_Decrypt(key, iv, tag, aadRaw);
return secureToken.payload; return JSON.parse(secureToken.payload);
} }