Function parseRemovalKey

js/sign/src/cli-sign.ts:48–80

(keyInput: string)

// That key may be either provided by Bytes encoded in base64 or path to file with key. This function checks that and parses key.
async function parseRemovalKey(keyInput: string): Promise<Uint8Array> {
  if (keyInput.endsWith('.pem') || fs.existsSync(keyInput)) {
    if (!fs.existsSync(keyInput)) {
      throw new Error(`The key file "${keyInput}" does not exist.`);
    }
    const data = await fs.promises.readFile(keyInput);
    try {
      // Try parsing as private key (it handles encrypted ones too)
      const privateKey = await parseMaybeEncryptedKey(data, keyInput);
      return getRawPublicKey(privateKey);
    } catch {
      // Try parsing as public key
      try {
        const pubKeyObject = crypto.createPublicKey(data);
        return getRawPublicKey(pubKeyObject);
      } catch (err) {
        throw new Error(
          `Failed to parse key from file "${keyInput}". Ensure it is a valid PEM-encoded Ed25519 or ECDSA P-256 key.`,
          { cause: err }
        );
      }
    }
  } else {
    // Assume Base64 string
    // Base64 regex check (simplified, but sufficient for raw keys)
    if (!/^[A-Za-z0-9+/=]+$/.test(keyInput)) {
      throw new Error(
        `The provided key "${keyInput}" is neither a valid file path nor a proper Base64-encoded string.`
      );
    }
    return new Uint8Array(Buffer.from(keyInput, 'base64'));
  }
}

const program = new Command()
  .name(name)