encrypt.js

/* eslint-disable max-statements */
const {importJWK, CompactEncrypt} = require("jose")
const fs = require("fs")
const got = require("got")
const R = require("ramda")
const config = require("../config")
const run = async () => {
  const file = R.last(process.argv)
  if (!file || file.includes("encrypt.js")) {
    console.log("Please add the file you wish to encrypt as the final argument")
    process.exit(1)
  }
  const fileContents = fs.readFileSync(file)
  console.log(`Encrypting ${file}`)

  console.log("Retreiving Moneyhub encryption key")
  const openidConfig = await got(
    `${config.identityServiceUrl}/oidc/.well-known/openid-configuration`
  ).json()
  const certs = await got(openidConfig.jwks_uri).json()

  const jwk = certs.keys.find((key) => key.use === "enc")
  const key = await importJWK(jwk, "ECDH-ES")

  if (!key) {
    console.log("No encryption key found")
    process.exit(1)
  }

  console.log(`Encrypting with key id: ${jwk.kid}`)

  const token = await new CompactEncrypt(fileContents)
    .setProtectedHeader({alg: "ECDH-ES", enc: "A128CBC-HS256"})
    .encrypt(key)

  console.log("Encryption complete")
  console.log("--------")
  console.log(token)
  console.log("--------")
}

run()