| 1 | |
| 2 | |
| 3 | |
| 4 | |
| 5 | |
| 6 | |
| 7 | |
| 8 | |
| 9 | |
| 10 |
|
| 11 |
|
| 12 | const encoder = new TextEncoder();
|
| 13 | const sign = async (value, secret) => {
|
| 14 | let data = encoder.encode(value);
|
| 15 | let key = await createKey(secret, ["sign"]);
|
| 16 | let signature = await crypto.subtle.sign("HMAC", key, data);
|
| 17 | let hash = btoa(String.fromCharCode(...new Uint8Array(signature))).replace(/=+$/, "");
|
| 18 | return value + "." + hash;
|
| 19 | };
|
| 20 | const unsign = async (cookie, secret) => {
|
| 21 | let index = cookie.lastIndexOf(".");
|
| 22 | let value = cookie.slice(0, index);
|
| 23 | let hash = cookie.slice(index + 1);
|
| 24 | let data = encoder.encode(value);
|
| 25 | let key = await createKey(secret, ["verify"]);
|
| 26 | try {
|
| 27 | let signature = byteStringToUint8Array(atob(hash));
|
| 28 | return await crypto.subtle.verify("HMAC", key, signature, data) ? value : false;
|
| 29 | } catch (e) {
|
| 30 | return false;
|
| 31 | }
|
| 32 | };
|
| 33 | const createKey = async (secret, usages) => crypto.subtle.importKey("raw", encoder.encode(secret), {
|
| 34 | name: "HMAC",
|
| 35 | hash: "SHA-256"
|
| 36 | }, false, usages);
|
| 37 | function byteStringToUint8Array(byteString) {
|
| 38 | let array = new Uint8Array(byteString.length);
|
| 39 | for (let i = 0; i < byteString.length; i++) array[i] = byteString.charCodeAt(i);
|
| 40 | return array;
|
| 41 | }
|
| 42 |
|
| 43 | export { sign, unsign };
|