Function unpackObject

apis/authflow.ts:33–49

(str: string)

}

async function unpackObject<T>(str: string): Promise<T | null> {
    try {
        const bits = str.split('|');
        if (bits.length == 2) {
            const json = atob(bits[0]);
            const bytes = new TextEncoder().encode(json).buffer;
            const signature = base64.decode(bits[1]);
            if (await crypto.subtle.verify('HMAC', bridgeKey, signature, bytes)) {
                return JSON.parse(json);
            }
        }
    } catch (ex) {
        console.error('Failed to unpack signed object', ex);
    }

    return null;
}

/// Data passed in a hidden, signed field when submitting the authorisation form
interface SignInFormData {