80 lines
2.5 KiB
TypeScript
80 lines
2.5 KiB
TypeScript
/**
|
|
* NIP-98 HTTP Auth implementation
|
|
* Generates authentication tokens for HTTP requests using Nostr events
|
|
* See: https://github.com/nostr-protocol/nips/blob/master/98.md
|
|
*/
|
|
|
|
import type { EventTemplate } from 'nostr-tools'
|
|
import { finalizeEvent } from 'nostr-tools'
|
|
import { hexToBytes } from 'nostr-tools/utils'
|
|
import { nostrService } from './nostr'
|
|
import { nostrAuthService } from './nostrAuth'
|
|
|
|
/**
|
|
* Generate NIP-98 authentication token for HTTP request
|
|
* @param method HTTP method (GET, POST, etc.)
|
|
* @param url Full URL of the request
|
|
* @param payloadHash Optional SHA256 hash of the request body (for POST/PUT)
|
|
* @returns Base64-encoded signed event token
|
|
*/
|
|
export async function generateNip98Token(method: string, url: string, payloadHash?: string): Promise<string> {
|
|
const pubkey = nostrService.getPublicKey()
|
|
if (!pubkey) {
|
|
throw new Error('Public key required for NIP-98 authentication. Please unlock your account.')
|
|
}
|
|
|
|
// Check if private key is available (unlocked)
|
|
if (!nostrAuthService.isUnlocked()) {
|
|
throw new Error('Private key required for NIP-98 authentication. Please unlock your account with your recovery phrase.')
|
|
}
|
|
|
|
const privateKey = nostrAuthService.getPrivateKey()
|
|
if (!privateKey) {
|
|
throw new Error('Private key not available. Please unlock your account.')
|
|
}
|
|
|
|
// Parse URL to get components
|
|
const urlObj = new URL(url)
|
|
const path = urlObj.pathname + urlObj.search
|
|
|
|
// Build event template for NIP-98
|
|
const tags: string[][] = [
|
|
['u', urlObj.origin + path],
|
|
['method', method],
|
|
]
|
|
|
|
// Add payload hash if provided (for POST/PUT requests)
|
|
if (payloadHash) {
|
|
tags.push(['payload', payloadHash])
|
|
}
|
|
|
|
const eventTemplate: EventTemplate & { pubkey: string } = {
|
|
kind: 27235, // NIP-98 kind for HTTP auth
|
|
created_at: Math.floor(Date.now() / 1000),
|
|
tags,
|
|
content: '',
|
|
pubkey,
|
|
}
|
|
|
|
// Sign the event directly with the private key (no plugin needed)
|
|
const secretKey = hexToBytes(privateKey)
|
|
const signedEvent = finalizeEvent(eventTemplate, secretKey)
|
|
|
|
// Encode event as base64 JSON
|
|
const eventJson = JSON.stringify(signedEvent)
|
|
const eventBytes = new TextEncoder().encode(eventJson)
|
|
const base64Token = btoa(String.fromCharCode(...eventBytes))
|
|
|
|
return base64Token
|
|
}
|
|
|
|
/**
|
|
* Check if NIP-98 authentication is available
|
|
* Requires both public key and unlocked private key
|
|
*/
|
|
export function isNip98Available(): boolean {
|
|
const pubkey = nostrService.getPublicKey()
|
|
const isUnlocked = nostrAuthService.isUnlocked()
|
|
return Boolean(pubkey) && isUnlocked
|
|
}
|