mirror of
https://github.com/SomboChea/ui
synced 2024-05-20 18:31:37 +07:00
74 lines
2.1 KiB
JavaScript
74 lines
2.1 KiB
JavaScript
/**
|
|
* @prettier
|
|
* @flow
|
|
*/
|
|
|
|
import { createDecipher, createCipher, createHash, pseudoRandomBytes } from 'crypto';
|
|
import jwt from 'jsonwebtoken';
|
|
|
|
import type { JWTSignOptions, RemoteUser } from '@verdaccio/types';
|
|
|
|
export const defaultAlgorithm = 'aes192';
|
|
export const defaultTarballHashAlgorithm = 'sha1';
|
|
|
|
export function aesEncrypt(buf: Buffer, secret: string): Buffer {
|
|
// deprecated
|
|
// https://nodejs.org/api/crypto.html#crypto_crypto_createcipher_algorithm_password_options
|
|
const c = createCipher(defaultAlgorithm, secret);
|
|
const b1 = c.update(buf);
|
|
const b2 = c.final();
|
|
return Buffer.concat([b1, b2]);
|
|
}
|
|
|
|
export function aesDecrypt(buf: Buffer, secret: string) {
|
|
try {
|
|
// deprecated
|
|
// https://nodejs.org/api/crypto.html#crypto_crypto_createdecipher_algorithm_password_options
|
|
const c = createDecipher(defaultAlgorithm, secret);
|
|
const b1 = c.update(buf);
|
|
const b2 = c.final();
|
|
return Buffer.concat([b1, b2]);
|
|
} catch (_) {
|
|
return new Buffer(0);
|
|
}
|
|
}
|
|
|
|
export function createTarballHash() {
|
|
return createHash(defaultTarballHashAlgorithm);
|
|
}
|
|
|
|
/**
|
|
* Express doesn't do ETAGS with requests <= 1024b
|
|
* we use md5 here, it works well on 1k+ bytes, but sucks with fewer data
|
|
* could improve performance using crc32 after benchmarks.
|
|
* @param {Object} data
|
|
* @return {String}
|
|
*/
|
|
export function stringToMD5(data: Buffer | string) {
|
|
return createHash('md5')
|
|
.update(data)
|
|
.digest('hex');
|
|
}
|
|
|
|
export function generateRandomHexString(length: number = 8) {
|
|
return pseudoRandomBytes(length).toString('hex');
|
|
}
|
|
|
|
export async function signPayload(payload: RemoteUser, secretOrPrivateKey: string, options: JWTSignOptions): Promise<string> {
|
|
return new Promise(function(resolve, reject) {
|
|
return jwt.sign(
|
|
payload,
|
|
secretOrPrivateKey,
|
|
{
|
|
notBefore: '1', // Make sure the time will not rollback :)
|
|
...options,
|
|
},
|
|
(error, token) => (error ? reject(error) : resolve(token))
|
|
);
|
|
});
|
|
}
|
|
|
|
export function verifyPayload(token: string, secretOrPrivateKey: string) {
|
|
return jwt.verify(token, secretOrPrivateKey);
|
|
}
|