Function parseKeyedEnvelope

packages/encryption/src/keyed-envelope.ts:37–76

(
  serialized: string,
  expectedScheme: Scheme
)

}

export function parseKeyedEnvelope<Scheme extends string>(
  serialized: string,
  expectedScheme: Scheme
): KeyedEnvelope<Scheme> {
  let parsed: unknown;
  try {
    parsed = JSON.parse(serialized);
  } catch (error) {
    throw new EncryptionFormatError('Invalid keyed envelope: expected serialized JSON', {
      cause: error,
    });
  }

  if (parsed === null || typeof parsed !== 'object') {
    throw new EncryptionFormatError('Invalid keyed envelope: must be an object');
  }

  if (!('scheme' in parsed) || parsed.scheme !== expectedScheme) {
    throw new EncryptionFormatError('Invalid keyed envelope: unsupported scheme');
  }

  if (!('version' in parsed) || parsed.version !== 1) {
    throw new EncryptionFormatError('Invalid keyed envelope: unsupported version');
  }

  if (!('keyId' in parsed) || typeof parsed.keyId !== 'string' || parsed.keyId.length === 0) {
    throw new EncryptionFormatError('Invalid keyed envelope: missing keyId');
  }

  if (!('ciphertext' in parsed) || !isEncryptedEnvelope(parsed.ciphertext)) {
    throw new EncryptionFormatError('Invalid keyed envelope: malformed ciphertext');
  }

  return {
    scheme: expectedScheme,
    version: 1,
    keyId: parsed.keyId,
    ciphertext: parsed.ciphertext,
  };
}

export function encryptKeyedEnvelope<Scheme extends string>(
  value: string,