Function deriveCallbackToken

packages/worker-utils/src/callback-token.ts:42–65

(params: CallbackTokenParams)

}

export async function deriveCallbackToken(params: CallbackTokenParams): Promise<string> {
  const secret = params.secret;
  if (!hasCallbackTokenSecret(secret)) {
    throw new Error('Callback token secret must be configured and non-empty');
  }

  const encoder = new TextEncoder();
  const key = await crypto.subtle.importKey(
    'raw',
    encoder.encode(secret),
    { name: 'HMAC', hash: 'SHA-256' },
    false,
    ['sign']
  );
  const signature = await crypto.subtle.sign(
    'HMAC',
    key,
    encoder.encode(
      buildCallbackTokenMessage({ scope: params.scope, resourceParts: params.resourceParts })
    )
  );

  return bytesToHex(new Uint8Array(signature));
}

export async function verifyCallbackToken(params: VerifyCallbackTokenParams): Promise<boolean> {
  if (!params.token || !CALLBACK_TOKEN_HEX_PATTERN.test(params.token)) {