greenlock-store-fs.js/accounts.js

"use strict";

var accounts = module.exports;
var store = accounts;
var U = require("./utils.js");

var fs = require("fs");
var path = require("path");
var PromiseA = require("./promise.js");
var readFileAsync = PromiseA.promisify(fs.readFile);
var writeFileAsync = PromiseA.promisify(fs.writeFile);
var mkdirpAsync = PromiseA.promisify(require("@root/mkdirp"));

// Implement if you need the ACME account metadata elsewhere in the chain of events
//store.accounts.check = function (opts) {
//  console.log('accounts.check for', opts.account, opts.email);
//  return PromiseA.resolve(null);
//};

// Accounts.checkKeypair
//
// Use account.id, or email, if id hasn't been set, to find an account keypair.
// Return an object with string privateKeyPem and/or object privateKeyJwk (or null, not undefined)
accounts.checkKeypair = function(opts) {
    var id =
        (opts.account && opts.account.id) ||
        (opts.subscriberEmail || opts.email) ||
        "single-user";
    //console.log('accounts.checkKeypair for', id);

    var pathname = path.join(
        accountsDir(store, opts),
        sanitizeFilename(id) + ".json"
    );
    return readFileAsync(U._tameWild(pathname, opts.subject), "utf8")
        .then(function(blob) {
            // keypair can treated as an opaque object and just passed along,
            // but just to show you what it is...
            var keypair = JSON.parse(blob);
            return keypair;
            /*
      {
				privateKeyPem: keypair.privateKeyPem, // string PEM private key
				privateKeyJwk: keypair.privateKeyJwk, // object JWK private key
				private: keypair.private,
				public: keypair.public
			};
      */
        })
        .catch(function(err) {
            if ("ENOENT" === err.code) {
                return null;
            }
            throw err;
        });
};

// Accounts.setKeypair({ account, email, keypair, ... }):
//
// Use account.id (or email if no id is present) to save an account keypair
// Return null (not undefined) on success, or throw on error
accounts.setKeypair = function(opts) {
    //console.log('accounts.setKeypair for', opts.account, opts.email, opts.keypair);
    var id = opts.account.id || opts.email || "single-user";

    // you can just treat the keypair as opaque and save and retrieve it as JSON
    var keyblob = JSON.stringify(opts.keypair);
    /*
	var keyblob = JSON.stringify({
		privateKeyPem: opts.keypair.privateKeyPem, // string PEM
		privateKeyJwk: opts.keypair.privateKeyJwk, // object JWK
    private: opts.keypair.private
	});
  */

    // Ignore.
    // Just implementation specific details here.
    return mkdirpAsync(accountsDir(store, opts))
        .then(function() {
            var pathname = path.join(
                accountsDir(store, opts),
                sanitizeFilename(id) + ".json"
            );
            return writeFileAsync(
                U._tameWild(pathname, opts.subject),
                keyblob,
                "utf8"
            );
        })
        .then(function() {
            // This is your job: return null, not undefined
            return null;
        });
};

// Implement if you need the ACME account metadata elsewhere in the chain of events
//accounts.set = function (opts) {
//  console.log('account.set:', opts.account, opts.email, opts.receipt);
//  return PromiseA.resolve(null);
//};

function sanitizeFilename(id) {
    return id.replace(/(\.\.)|\\|\//g, "_").replace(/[^!-~]/g, "_");
}

function accountsDir(store, opts) {
    var dir = U._tpl(
        store,
        opts,
        opts.accountsDir || store.options.accountsDir
    );
    return U._tameWild(dir, opts.subject || "");
}