Class UserAuthenticator

src/user.ts:63–104

};

export class UserAuthenticator implements Authenticator {
  authmode: string;
  constructor(private credentials: AuthenticatorCredentials[]) {
    this.authmode = "UserAuthenticator";
  }

  async checkCredentials(r: Request): Promise<AuthenticatorCheckCredentialsResponse> {
    const res = stripUsernamePasswordFromHeader(r);
    if ("verified" in res) {
      return res;
    }

    const [username, password] = res;

    const credential = this.credentials.find((c) => c.username === username);
    if (!credential) {
      return { verified: false, payload: null };
    }

    try {
      if (!crypto.subtle.timingSafeEqual(stringToArrayBuffer(username), stringToArrayBuffer(credential.username))) {
        return { verified: false, payload: null };
      }

      if (!crypto.subtle.timingSafeEqual(stringToArrayBuffer(password), stringToArrayBuffer(credential.password))) {
        return { verified: false, payload: null };
      }
    } catch (err) {
      console.error(`Failed authentication timingSafeEqual: ${errorString(err)}`);
      return { verified: false, payload: null };
    }

    const payload = {
      username,
      capabilities: credential.capabilities,
      exp: Date.now() + 60 * 60,
      aud: "",
    };

    return RegistryTokens.verifyPayload(r, payload);
  }
}