import { KeyStack } from "https://deno.land/x/lume@v1.16.1/deps/crypto.ts";
A cryptographic key chain which allows signing of data to prevent tampering, but also allows for easy key rotation without needing to re-sign the data.
Data is signed as SHA256 HMAC.
This was inspired by keygrip.
Examples
Example 1
Example 1
import { KeyStack } from "https://deno.land/std@0.224.0/crypto/keystack.ts";
const keyStack = new KeyStack(["hello", "world"]);
const digest = await keyStack.sign("some data");
const rotatedStack = new KeyStack(["deno", "says", "hello", "world"]);
await rotatedStack.verify("some data", digest); // true
Methods
indexOf(data: Data, digest: string): Promise<number>
Given data and a digest, return the current index of the key in the
keys passed the constructor that was used to generate the digest. If no
key can be found, the method returns -1.
sign(data: Data): Promise<string>
Take data and return a SHA256 HMAC digest that uses the current 0 index
of the keys passed to the constructor. This digest is in the form of a
URL safe base64 encoded string.
verify(data: Data, digest: string): Promise<boolean>
Given data and a digest, verify that one of the keys provided the
constructor was used to generate the digest. Returns true if one of
the keys was used, otherwise false.
[Symbol.for("Deno.customInspect")](inspect: (value: unknown) => string)
[Symbol.for("nodejs.util.inspect.custom")]()
depth: number,
options: any,
inspect: (value: unknown, options?: unknown) => string,