Bernt
58ca4e68db
- Go backend API with full CRUD for all modules (CRM, Sales, Finance, HR, Legal, Marketing, Support, Purchase, Inventory, Projects, Automation, Analytics) - Rust analytics service with parallel report generation - C runtime with POSIX shared memory IPC - PostgreSQL schema with 30+ tables, full migrations - Redis cache, sessions, pub/sub - Kafka event streaming with Zookeeper - WebSocket hub for real-time updates - Automation engine with cron jobs, workflows, event triggers - JWT authentication, multi-tenant from start - Docker Compose with all services - Nginx reverse proxy with rate limiting - Integration tests passing - Feature gap analysis against Fortnox/Odoo/Visma Refs: BOC-001
48 lines
2.2 KiB
JavaScript
48 lines
2.2 KiB
JavaScript
"use strict";
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.SubtleCryptoProvider = void 0;
|
|
const CryptoProvider_js_1 = require("./CryptoProvider.js");
|
|
/**
|
|
* `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
|
|
*
|
|
* This only supports asynchronous operations.
|
|
*/
|
|
class SubtleCryptoProvider extends CryptoProvider_js_1.CryptoProvider {
|
|
constructor(subtleCrypto) {
|
|
super();
|
|
// If no subtle crypto is interface, default to the global namespace. This
|
|
// is to allow custom interfaces (eg. using the Node webcrypto interface in
|
|
// tests).
|
|
this.subtleCrypto = subtleCrypto || crypto.subtle;
|
|
}
|
|
/** @override */
|
|
computeHMACSignature(payload, secret) {
|
|
throw new CryptoProvider_js_1.CryptoProviderOnlySupportsAsyncError('SubtleCryptoProvider cannot be used in a synchronous context.');
|
|
}
|
|
/** @override */
|
|
async computeHMACSignatureAsync(payload, secret) {
|
|
const encoder = new TextEncoder();
|
|
const key = await this.subtleCrypto.importKey('raw', encoder.encode(secret), {
|
|
name: 'HMAC',
|
|
hash: { name: 'SHA-256' },
|
|
}, false, ['sign']);
|
|
const signatureBuffer = await this.subtleCrypto.sign('hmac', key, encoder.encode(payload));
|
|
// crypto.subtle returns the signature in base64 format. This must be
|
|
// encoded in hex to match the CryptoProvider contract. We map each byte in
|
|
// the buffer to its corresponding hex octet and then combine into a string.
|
|
const signatureBytes = new Uint8Array(signatureBuffer);
|
|
const signatureHexCodes = new Array(signatureBytes.length);
|
|
for (let i = 0; i < signatureBytes.length; i++) {
|
|
signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
|
|
}
|
|
return signatureHexCodes.join('');
|
|
}
|
|
}
|
|
exports.SubtleCryptoProvider = SubtleCryptoProvider;
|
|
// Cached mapping of byte to hex representation. We do this once to avoid re-
|
|
// computing every time we need to convert the result of a signature to hex.
|
|
const byteHexMapping = new Array(256);
|
|
for (let i = 0; i < byteHexMapping.length; i++) {
|
|
byteHexMapping[i] = i.toString(16).padStart(2, '0');
|
|
}
|