Method validateSignatures

js/sign/src/core/signed-web-bundle.ts:90–120

()

  }

  validateSignatures(): SignatureValidationResult[] {
    const webBundleHash = calcWebBundleHash(this.pureWebBundle);
    const ibCbor = this.integrityBlock.toStrippedCbor();

    return this.integrityBlock.getSignatureStack().map((signature) => {
      try {
        const [keyType, publicKey] = IntegrityBlock.parseSignatureAttributes(
          signature.signatureAttributes
        );
        const keyObject = parseRawPublicKey(keyType, publicKey);
        const derivedBundleId = new WebBundleId(keyObject).serialize();
        const attrCbor = encode(signature.signatureAttributes);
        const dataToBeSigned = generateDataToBeSigned(
          webBundleHash,
          ibCbor,
          attrCbor
        );
        const isValid = verifySignature(
          dataToBeSigned,
          signature.signature,
          keyObject
        );
        return { status: 'success', isValid, derivedBundleId };
      } catch (err) {
        return {
          status: 'error',
          error: err instanceof Error ? err.message : String(err),
        };
      }
    });
  }

  getWebBundleId(): string {
    return this.integrityBlock.getWebBundleId();