20 lines
834 B
TypeScript
20 lines
834 B
TypeScript
|
// Edge-compatible — no Node.js imports here (used in middleware)
|
||
|
|
|
||
|
|
export const AUTH_ENABLED = !!(process.env.AUTH_USER && process.env.AUTH_PASS)
|
||
|
|
export const COOKIE_NAME = "ds_session"
|
||
|
|
|
||
|
|
// HMAC-SHA256(user, key=pass) — deterministic, no in-memory state, survives restarts
|
||
|
|
// Works in both Edge (SubtleCrypto) and Node.js runtime
|
||
|
|
export async function computeSessionToken(): Promise<string> {
|
||
|
|
const user = process.env.AUTH_USER ?? ""
|
||
|
|
const pass = process.env.AUTH_PASS ?? ""
|
||
|
|
const enc = new TextEncoder()
|
||
|
|
const key = await globalThis.crypto.subtle.importKey(
|
||
|
|
"raw", enc.encode(pass),
|
||
|
|
{ name: "HMAC", hash: "SHA-256" },
|
||
|
|
false, ["sign"]
|
||
|
|
)
|
||
|
|
const sig = await globalThis.crypto.subtle.sign("HMAC", key, enc.encode(user))
|
||
|
|
return Array.from(new Uint8Array(sig), b => b.toString(16).padStart(2, "0")).join("")
|
||
|
|
}
|