PeerTube/server/helpers/peertube-crypto.ts

72 lines
1.9 KiB
TypeScript
Raw Normal View History

2017-11-23 17:53:38 +01:00
import { BCRYPT_SALT_SIZE, PRIVATE_RSA_KEY_SIZE } from '../initializers'
2017-12-14 17:38:41 +01:00
import { ActorModel } from '../models/activitypub/actor'
2017-11-23 17:53:38 +01:00
import { bcryptComparePromise, bcryptGenSaltPromise, bcryptHashPromise, createPrivateKey, getPublicKey } from './core-utils'
2017-11-17 15:20:42 +01:00
import { jsig } from './custom-jsonld-signature'
2017-11-23 17:53:38 +01:00
import { logger } from './logger'
2017-11-09 17:51:58 +01:00
async function createPrivateAndPublicKeys () {
logger.info('Generating a RSA key...')
2017-11-09 17:51:58 +01:00
const { key } = await createPrivateKey(PRIVATE_RSA_KEY_SIZE)
const { publicKey } = await getPublicKey(key)
2017-11-09 17:51:58 +01:00
return { privateKey: key, publicKey }
}
2017-12-14 17:38:41 +01:00
function isSignatureVerified (fromActor: ActorModel, signedDocument: object) {
2017-11-09 17:51:58 +01:00
const publicKeyObject = {
'@context': jsig.SECURITY_CONTEXT_URL,
2017-12-14 17:38:41 +01:00
'@id': fromActor.url,
2017-11-09 17:51:58 +01:00
'@type': 'CryptographicKey',
2017-12-14 17:38:41 +01:00
owner: fromActor.url,
publicKeyPem: fromActor.publicKey
}
2017-11-09 17:51:58 +01:00
const publicKeyOwnerObject = {
'@context': jsig.SECURITY_CONTEXT_URL,
2017-12-14 17:38:41 +01:00
'@id': fromActor.url,
2017-11-09 17:51:58 +01:00
publicKey: [ publicKeyObject ]
}
2017-11-09 17:51:58 +01:00
const options = {
publicKey: publicKeyObject,
publicKeyOwner: publicKeyOwnerObject
}
return jsig.promises.verify(signedDocument, options)
2017-11-09 17:51:58 +01:00
.catch(err => {
logger.error('Cannot check signature.', err)
return false
})
2016-08-25 17:57:37 +02:00
}
2017-12-14 17:38:41 +01:00
function signObject (byActor: ActorModel, data: any) {
2017-11-09 17:51:58 +01:00
const options = {
2017-12-14 17:38:41 +01:00
privateKeyPem: byActor.privateKey,
2017-12-18 11:53:04 +01:00
creator: byActor.url,
algorithm: 'RsaSignature2017'
}
return jsig.promises.sign(data, options)
2017-11-09 17:51:58 +01:00
}
function comparePassword (plainPassword: string, hashPassword: string) {
return bcryptComparePromise(plainPassword, hashPassword)
}
2016-02-05 18:03:20 +01:00
async function cryptPassword (password: string) {
const salt = await bcryptGenSaltPromise(BCRYPT_SALT_SIZE)
2017-10-31 16:31:24 +01:00
return bcryptHashPromise(password, salt)
2016-08-25 17:57:37 +02:00
}
// ---------------------------------------------------------------------------
2016-02-05 18:03:20 +01:00
2017-05-15 22:22:03 +02:00
export {
2017-11-09 17:51:58 +01:00
isSignatureVerified,
2017-05-15 22:22:03 +02:00
comparePassword,
2017-11-09 17:51:58 +01:00
createPrivateAndPublicKeys,
2017-05-15 22:22:03 +02:00
cryptPassword,
2017-11-09 17:51:58 +01:00
signObject
}