101 lines
3.8 KiB
Plaintext
101 lines
3.8 KiB
Plaintext
|
import crypto from './webcrypto.js';
|
||
|
|
import { JOSENotSupported } from '../util/errors.js';
|
||
|
|
function subtleMapping(jwk) {
|
||
|
|
let algorithm;
|
||
|
|
let keyUsages;
|
||
|
|
switch (jwk.kty) {
|
||
|
|
case 'RSA': {
|
||
|
|
switch (jwk.alg) {
|
||
|
|
case 'PS256':
|
||
|
|
case 'PS384':
|
||
|
|
case 'PS512':
|
||
|
|
algorithm = { name: 'RSA-PSS', hash: `SHA-${jwk.alg.slice(-3)}` };
|
||
|
|
keyUsages = jwk.d ? ['sign'] : ['verify'];
|
||
|
|
break;
|
||
|
|
case 'RS256':
|
||
|
|
case 'RS384':
|
||
|
|
case 'RS512':
|
||
|
|
algorithm = { name: 'RSASSA-PKCS1-v1_5', hash: `SHA-${jwk.alg.slice(-3)}` };
|
||
|
|
keyUsages = jwk.d ? ['sign'] : ['verify'];
|
||
|
|
break;
|
||
|
|
case 'RSA-OAEP':
|
||
|
|
case 'RSA-OAEP-256':
|
||
|
|
case 'RSA-OAEP-384':
|
||
|
|
case 'RSA-OAEP-512':
|
||
|
|
algorithm = {
|
||
|
|
name: 'RSA-OAEP',
|
||
|
|
hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`,
|
||
|
|
};
|
||
|
|
keyUsages = jwk.d ? ['decrypt', 'unwrapKey'] : ['encrypt', 'wrapKey'];
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 'EC': {
|
||
|
|
switch (jwk.alg) {
|
||
|
|
case 'ES256':
|
||
|
|
algorithm = { name: 'ECDSA', namedCurve: 'P-256' };
|
||
|
|
keyUsages = jwk.d ? ['sign'] : ['verify'];
|
||
|
|
break;
|
||
|
|
case 'ES384':
|
||
|
|
algorithm = { name: 'ECDSA', namedCurve: 'P-384' };
|
||
|
|
keyUsages = jwk.d ? ['sign'] : ['verify'];
|
||
|
|
break;
|
||
|
|
case 'ES512':
|
||
|
|
algorithm = { name: 'ECDSA', namedCurve: 'P-521' };
|
||
|
|
keyUsages = jwk.d ? ['sign'] : ['verify'];
|
||
|
|
break;
|
||
|
|
case 'ECDH-ES':
|
||
|
|
case 'ECDH-ES+A128KW':
|
||
|
|
case 'ECDH-ES+A192KW':
|
||
|
|
case 'ECDH-ES+A256KW':
|
||
|
|
algorithm = { name: 'ECDH', namedCurve: jwk.crv };
|
||
|
|
keyUsages = jwk.d ? ['deriveBits'] : [];
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 'OKP': {
|
||
|
|
switch (jwk.alg) {
|
||
|
|
case 'EdDSA':
|
||
|
|
algorithm = { name: jwk.crv };
|
||
|
|
keyUsages = jwk.d ? ['sign'] : ['verify'];
|
||
|
|
break;
|
||
|
|
case 'ECDH-ES':
|
||
|
|
case 'ECDH-ES+A128KW':
|
||
|
|
case 'ECDH-ES+A192KW':
|
||
|
|
case 'ECDH-ES+A256KW':
|
||
|
|
algorithm = { name: jwk.crv };
|
||
|
|
keyUsages = jwk.d ? ['deriveBits'] : [];
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
default:
|
||
|
|
throw new JOSENotSupported('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
|
||
|
|
}
|
||
|
|
return { algorithm, keyUsages };
|
||
|
|
}
|
||
|
|
const parse = async (jwk) => {
|
||
|
|
if (!jwk.alg) {
|
||
|
|
throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
|
||
|
|
}
|
||
|
|
const { algorithm, keyUsages } = subtleMapping(jwk);
|
||
|
|
const rest = [
|
||
|
|
algorithm,
|
||
|
|
jwk.ext ?? false,
|
||
|
|
jwk.key_ops ?? keyUsages,
|
||
|
|
];
|
||
|
|
const keyData = { ...jwk };
|
||
|
|
delete keyData.alg;
|
||
|
|
delete keyData.use;
|
||
|
|
return crypto.subtle.importKey('jwk', keyData, ...rest);
|
||
|
|
};
|
||
|
|
export default parse;
|