public/owltide
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages 1 Wiki Activity Actions

Implement signed cookie helpers

Browse source 
Provide a convenient wrapper for setting SHA-256 HMAC signed cookies and
retreiving them with the signature validated.  The secret key is
configured in the NUXT_COOKIE_SECRET_KEY environment variable.
This commit is contained in:
Hornwitser 2025-03-06 22:07:51 +01:00
parent 5044b7b58d
commit 8da4b02154
4 changed files with 60 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

17
generate-keys.mjs Normal file
View file

@ -0,0 +1,17 @@
import webPush from "web-push";
const vapidKeys = webPush.generateVAPIDKeys();
const cookieSecretKey = Buffer.from(
await crypto.subtle.exportKey(
"raw",
await crypto.subtle.generateKey(
{ name: "HMAC", hash: "SHA-256" }, true, ["sign", "verify"]
)
)
).toString("base64url");
console.log(`\
NUXT_PUBLIC_VAPID_PUBLIC_KEY=${vapidKeys.publicKey}
NUXT_VAPID_PRIVATE_KEY=${vapidKeys.privateKey}
NUXT_COOKIE_SECRET_KEY=${cookieSecretKey}
`);