545563e776
- Complete NestJS TypeScript implementation with WebSocket support - Direct messaging (DM) and group chat functionality - End-to-end encryption with AES encryption and key pairs - Media file support (images, videos, audio, documents) up to 100MB - Push notifications with Firebase Cloud Messaging integration - Mention alerts and real-time typing indicators - User authentication with JWT and Passport - SQLite database with TypeORM entities and relationships - Comprehensive API documentation with Swagger/OpenAPI - File upload handling with secure access control - Online/offline status tracking and presence management - Message editing, deletion, and reply functionality - Notification management with automatic cleanup - Health check endpoint for monitoring - CORS configuration for cross-origin requests - Environment-based configuration management - Structured for Flutter SDK integration Features implemented: ✅ Real-time messaging with Socket.IO ✅ User registration and authentication ✅ Direct messages and group chats ✅ Media file uploads and management ✅ End-to-end encryption ✅ Push notifications ✅ Mention alerts ✅ Typing indicators ✅ Message read receipts ✅ Online status tracking ✅ File access control ✅ Comprehensive API documentation Ready for Flutter SDK development and production deployment.
81 lines
1.8 KiB
JavaScript
81 lines
1.8 KiB
JavaScript
const jose = require('jose');
|
|
const JwksError = require('./errors/JwksError');
|
|
|
|
function resolveAlg(jwk) {
|
|
if (jwk.alg) {
|
|
return jwk.alg;
|
|
}
|
|
|
|
if (jwk.kty === 'RSA') {
|
|
return 'RS256';
|
|
}
|
|
|
|
if (jwk.kty === 'EC') {
|
|
switch (jwk.crv) {
|
|
case 'P-256':
|
|
return 'ES256';
|
|
case 'secp256k1':
|
|
return 'ES256K';
|
|
case 'P-384':
|
|
return 'ES384';
|
|
case 'P-521':
|
|
return 'ES512';
|
|
}
|
|
}
|
|
|
|
if (jwk.kty === 'OKP') {
|
|
switch (jwk.crv) {
|
|
case 'Ed25519':
|
|
case 'Ed448':
|
|
return 'EdDSA';
|
|
}
|
|
}
|
|
|
|
throw new JwksError('Unsupported JWK');
|
|
}
|
|
|
|
async function retrieveSigningKeys(jwks) {
|
|
const results = [];
|
|
|
|
jwks = jwks
|
|
.filter(({ use }) => use === 'sig' || use === undefined)
|
|
.filter(({ kty }) => kty === 'RSA' || kty === 'EC' || kty === 'OKP');
|
|
|
|
for (const jwk of jwks) {
|
|
try {
|
|
const key = await jose.importJWK({ ...jwk, ext: true }, resolveAlg(jwk));
|
|
if (key.type !== 'public') {
|
|
continue;
|
|
}
|
|
let getSpki;
|
|
switch (key[Symbol.toStringTag]) {
|
|
case 'CryptoKey': {
|
|
const spki = await jose.exportSPKI(key);
|
|
getSpki = () => spki;
|
|
break;
|
|
}
|
|
case 'KeyObject':
|
|
// Assume legacy Node.js version without the Symbol.toStringTag backported
|
|
// Fall through
|
|
default:
|
|
getSpki = () => key.export({ format: 'pem', type: 'spki' });
|
|
}
|
|
results.push({
|
|
get publicKey() { return getSpki(); },
|
|
get rsaPublicKey() { return getSpki(); },
|
|
getPublicKey() { return getSpki(); },
|
|
...(typeof jwk.kid === 'string' && jwk.kid ? { kid: jwk.kid } : undefined),
|
|
...(typeof jwk.alg === 'string' && jwk.alg ? { alg: jwk.alg } : undefined)
|
|
});
|
|
} catch (err) {
|
|
continue;
|
|
}
|
|
}
|
|
|
|
return results;
|
|
}
|
|
|
|
module.exports = {
|
|
retrieveSigningKeys
|
|
};
|