-
-
Notifications
You must be signed in to change notification settings - Fork 299
/
decrypt.ts
89 lines (81 loc) · 2.46 KB
/
decrypt.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
import { flattenedDecrypt } from '../flattened/decrypt.ts'
import { JWEInvalid } from '../../util/errors.ts'
import { decoder } from '../../lib/buffer_utils.ts'
import type {
KeyLike,
DecryptOptions,
CompactJWEHeaderParameters,
GetKeyFunction,
FlattenedJWE,
CompactDecryptResult,
ResolvedKey,
} from '../../types.d.ts'
/**
* Interface for Compact JWE Decryption dynamic key resolution. No token components have been
* verified at the time of this function call.
*/
export interface CompactDecryptGetKey
extends GetKeyFunction<CompactJWEHeaderParameters, FlattenedJWE> {}
/**
* Decrypts a Compact JWE.
*
* @param jwe Compact JWE.
* @param key Private Key or Secret to decrypt the JWE with. See
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
* @param options JWE Decryption options.
*/
export async function compactDecrypt(
jwe: string | Uint8Array,
key: KeyLike | Uint8Array,
options?: DecryptOptions,
): Promise<CompactDecryptResult>
/**
* @param jwe Compact JWE.
* @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
* @param options JWE Decryption options.
*/
export async function compactDecrypt<T extends KeyLike = KeyLike>(
jwe: string | Uint8Array,
getKey: CompactDecryptGetKey,
options?: DecryptOptions,
): Promise<CompactDecryptResult & ResolvedKey<T>>
export async function compactDecrypt(
jwe: string | Uint8Array,
key: KeyLike | Uint8Array | CompactDecryptGetKey,
options?: DecryptOptions,
) {
if (jwe instanceof Uint8Array) {
jwe = decoder.decode(jwe)
}
if (typeof jwe !== 'string') {
throw new JWEInvalid('Compact JWE must be a string or Uint8Array')
}
const {
0: protectedHeader,
1: encryptedKey,
2: iv,
3: ciphertext,
4: tag,
length,
} = jwe.split('.')
if (length !== 5) {
throw new JWEInvalid('Invalid Compact JWE')
}
const decrypted = await flattenedDecrypt(
{
ciphertext,
iv: <string>(iv || undefined),
protected: protectedHeader || undefined,
tag: <string>(tag || undefined),
encrypted_key: encryptedKey || undefined,
},
<Parameters<typeof flattenedDecrypt>[1]>key,
options,
)
const result = { plaintext: decrypted.plaintext, protectedHeader: decrypted.protectedHeader! }
if (typeof key === 'function') {
return { ...result, key: decrypted.key }
}
return result
}