Function parseRequest

backend/src/utils/httpsigjs/parser.ts:112–378

(request: Request, options?: Options)

 * @throws {ExpiredRequestError} if the value of date or x-date exceeds skew.
 */
export function parseRequest(request: Request, options?: Options): ParsedSignature {
	if (options === undefined) {
		options = {
			clockSkew: 300,
			headers: ['host', '(request-target)'],
			strict: false,
		}
	}

	if (request.method == 'POST') {
		options.headers.push('digest')
	}

	let headers = [request.headers.has('x-date') ? 'x-date' : 'date']
	if (options.headers !== undefined) {
		headers = options.headers
	}

	const authz = request.headers.get(HEADER.AUTH) || request.headers.get(HEADER.SIG)

	if (!authz) {
		const errHeader = HEADER.AUTH + ' or ' + HEADER.SIG

		throw new MissingHeaderError('no ' + errHeader + ' header ' + 'present in the request')
	}

	options.clockSkew = options.clockSkew || 300

	let i = 0
	let state = authz === request.headers.get(HEADER.SIG) ? State.Params : State.New
	let substate = ParamsState.Name
	let tmpName = ''
	let tmpValue = ''

	const parsed: ParsedSignature = {
		scheme: authz === request.headers.get(HEADER.SIG) ? 'Signature' : '',
		params: {},
		signingString: '',
		signature: '',
		keyId: '',
		algorithm: '',
		opaque: '',
	}

	for (i = 0; i < authz.length; i++) {
		const c = authz.charAt(i)
		let code = c.charCodeAt(0)

		switch (Number(state)) {
			case State.New:
				if (c !== ' ') parsed.scheme += c
				else state = State.Params
				break

			case State.Params:
				switch (Number(substate)) {
					case ParamsState.Name:
						// restricted name of A-Z / a-z