Function aesKeyForPassword

packages/ci-proxy-worker/src/index.ts:317–335

(
  password: string,
  encodedSalt: string,
)

}

async function aesKeyForPassword(
  password: string,
  encodedSalt: string,
): Promise<CryptoKey> {
  const salt = base64UrlBytes(encodedSalt);
  const passwordBytes = new TextEncoder().encode(password);
  const material = new Uint8Array(passwordBytes.length + salt.length + 1);
  material.set(passwordBytes);
  material[passwordBytes.length] = 0;
  material.set(salt, passwordBytes.length + 1);
  const digest = await crypto.subtle.digest("SHA-256", material);
  return crypto.subtle.importKey(
    "raw",
    digest,
    { name: "AES-GCM", length: 256 },
    false,
    ["decrypt"],
  );
}

function sessionFromCookie(request: Request): SessionCookie | null {
  const raw = cookieValue(request.headers.get("Cookie") ?? "", SESSION_COOKIE);