yetangitu/timelimit-server
1
0
Fork 0
mirror of https://codeberg.org/timelimit/timelimit-server.git synced 2025-10-03 01:39:31 +02:00
Code Issues Projects Releases Wiki Activity

Inline the iab_verifier

Browse source
This commit is contained in:
Jonas Lochmann 2022-03-28 02:00:00 +02:00
parent 2ab23ea811
commit d778df9df0
No known key found for this signature in database
GPG key ID: 8B8C9AEE10FA5B36
4 changed files with 52 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

31
package-lock.json generated
View file

@ -16,7 +16,6 @@
"email-addresses": "^3.1.0",
"express": "^4.17.1",
"http-errors": "^1.8.0",
"iab_verifier": "^0.1.2",
"lodash": "^4.17.21",
"mariadb": "^2.5.2",
"nodemailer": "^6.7.2",
@ -1217,12 +1216,6 @@
"node": ">= 8"
}
},
"node_modules/crypto": {
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/crypto/-/crypto-1.0.1.tgz",
"integrity": "sha512-VxBKmeNcqQdiUQUW2Tzq0t377b54N2bMtXO/qiLa+6eRRmmC4qT3D4OnTGoT/U6O9aklQ/jTwbOtRMTTY8G0Ig==",
"deprecated": "This package is no longer supported. It's now a built-in Node module. If you've depended on crypto, you should switch to the one that's built-in."
},
"node_modules/cuint": {
"version": "0.2.2",
"resolved": "https://registry.npmjs.org/cuint/-/cuint-0.2.2.tgz",
@ -2150,17 +2143,6 @@
"node": ">= 0.6"
}
},
"node_modules/iab_verifier": {
"version": "0.1.2",
"resolved": "https://registry.npmjs.org/iab_verifier/-/iab_verifier-0.1.2.tgz",
"integrity": "sha1-2t5VDuOJu96FaLL0ynHV0RFQCV4=",
"dependencies": {
"crypto": "*"
},
"engines": {
"node": ">= 0.10.0"
}
},
"node_modules/iconv-lite": {
"version": "0.4.24",
"resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
@ -6344,11 +6326,6 @@
"which": "^2.0.1"
}
},
"crypto": {
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/crypto/-/crypto-1.0.1.tgz",
"integrity": "sha512-VxBKmeNcqQdiUQUW2Tzq0t377b54N2bMtXO/qiLa+6eRRmmC4qT3D4OnTGoT/U6O9aklQ/jTwbOtRMTTY8G0Ig=="
},
"cuint": {
"version": "0.2.2",
"resolved": "https://registry.npmjs.org/cuint/-/cuint-0.2.2.tgz",
@ -7079,14 +7056,6 @@
"toidentifier": "1.0.1"
}
},
"iab_verifier": {
"version": "0.1.2",
"resolved": "https://registry.npmjs.org/iab_verifier/-/iab_verifier-0.1.2.tgz",
"integrity": "sha1-2t5VDuOJu96FaLL0ynHV0RFQCV4=",
"requires": {
"crypto": "*"
}
},
"iconv-lite": {
"version": "0.4.24",
"resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",

1
package.json
View file

@ -55,7 +55,6 @@
"email-addresses": "^3.1.0",
"express": "^4.17.1",
"http-errors": "^1.8.0",
"iab_verifier": "^0.1.2",
"lodash": "^4.17.21",
"mariadb": "^2.5.2",
"nodemailer": "^6.7.2",

48
src/function/purchase/iab_verifierr.ts Normal file
View file

@ -0,0 +1,48 @@
/*
* The MIT License
*
* Copyright (c) Paul Crawford
* Copyright (c) 2020 Jonas Lochmann
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
* THE SOFTWARE.
*/
import { createPublicKey, createVerify, KeyObject } from 'crypto'
const ALGORITHM = 'RSA-SHA1'
export class IABVerifier {
private readonly publicKey: KeyObject
constructor(publicKeyString: string) {
this.publicKey = createPublicKey({
key: Buffer.from(publicKeyString, 'base64'),
format: 'der',
type: 'spki'
})
}
verifyReceipt(signedData: string, signature: string) {
const verifier = createVerify(ALGORITHM)
verifier.update(signedData)
return verifier.verify(this.publicKey, signature, 'base64')
}
}

11
src/function/purchase/verification.ts
View file

@ -15,21 +15,18 @@
* along with this program. If not, see <https://www.gnu.org/licenses/>.
*/
const IABVerifier: new (publicKey: string) => {
verifyReceipt: (data: string, signature: string) => boolean
// eslint-disable-next-line @typescript-eslint/no-var-requires
} = require('iab_verifier')
import { IABVerifier } from './iab_verifierr'
export const googlePlayPublicKey = process.env.GOOGLE_PLAY_PUBLIC_KEY || ''
const verifier = new IABVerifier(googlePlayPublicKey)
const verifier = googlePlayPublicKey !== '' ? new IABVerifier(googlePlayPublicKey) : null
export const areGooglePlayPaymentsPossible = !!googlePlayPublicKey
export const areGooglePlayPaymentsPossible = !!verifier
export const isGooglePlayPurchaseSignatureValid = ({ receipt, signature }: {
receipt: string
signature: string
}) => {
if (googlePlayPublicKey) {
if (verifier) {
return verifier.verifyReceipt(receipt, signature)
} else {
return false