Function readVerifyAndSignWebBundle

js/sign/src/cli-sign.ts:395–431

(
  wbnFilePath: string,
  keyFilesPaths: string[],
  outputFilePath: string,
  maybeWebBundleId?: string
)

}

async function readVerifyAndSignWebBundle(
  wbnFilePath: string,
  keyFilesPaths: string[],
  outputFilePath: string,
  maybeWebBundleId?: string
) {
  const webBundle = await fs.promises.readFile(wbnFilePath);
  if (isSignedWebBundle(webBundle)) {
    throw new Error(
      'Web bundle already signed. Use `add-signature` command instead.'
    );
  }
  if (!isPureWebBundle(webBundle)) {
    throw new Error('Not a web bundle.');
  }

  const privateKeys = new Array<KeyObject>();
  for (const privateKey of keyFilesPaths) {
    privateKeys.push(await parseMaybeEncryptedKeyFromFile(privateKey));
  }

  const signingStrategies = privateKeys.map(
    (privateKey) => new NodeCryptoSigningStrategy(privateKey)
  );

  const signedWebBundle = await SignedWebBundle.fromWebBundle(
    Uint8Array.from(webBundle),
    signingStrategies,
    maybeWebBundleId ? { webBundleId: maybeWebBundleId } : undefined
  );

  greenConsoleLog(`${signedWebBundle.getWebBundleId()}`);
  await fs.promises.writeFile(
    outputFilePath,
    signedWebBundle.getSignedWebBundleBytes()
  );
}

export async function main() {
  await parseArguments();