tailchat/server/plugins/com.msgbyte.agora/services/utils/AccessToken2.ts

import crypto from 'crypto';
import zlib from 'zlib';
const VERSION_LENGTH = 3;
const APP_ID_LENGTH = 32;

const getVersion = () => {
  return '007';
};

class Service {
  __type;
  __privileges;

  constructor(service_type) {
    this.__type = service_type;
    this.__privileges = {};
  }

  __pack_type() {
    const buf = new ByteBuf();
    buf.putUint16(this.__type);
    return buf.pack();
  }

  __pack_privileges() {
    const buf = new ByteBuf();
    buf.putTreeMapUInt32(this.__privileges);
    return buf.pack();
  }

  service_type() {
    return this.__type;
  }

  add_privilege(privilege, expire) {
    this.__privileges[privilege] = expire;
  }

  pack() {
    return Buffer.concat([this.__pack_type(), this.__pack_privileges()]);
  }

  unpack(buffer) {
    const bufReader = new ReadByteBuf(buffer);
    this.__privileges = bufReader.getTreeMapUInt32();
    return bufReader;
  }
}

const kRtcServiceType = 1;

class ServiceRtc extends Service {
  static kPrivilegeJoinChannel = 1;
  static kPrivilegePublishAudioStream = 2;
  static kPrivilegePublishVideoStream = 3;
  static kPrivilegePublishDataStream = 4;

  __channel_name;
  __uid;

  constructor(channel_name, uid) {
    super(kRtcServiceType);
    this.__channel_name = channel_name;
    this.__uid = uid === 0 ? '' : `${uid}`;
  }

  pack() {
    const buffer = new ByteBuf();
    buffer.putString(this.__channel_name).putString(this.__uid);
    return Buffer.concat([super.pack(), buffer.pack()]);
  }

  unpack(buffer) {
    const bufReader = super.unpack(buffer);
    this.__channel_name = bufReader.getString();
    this.__uid = bufReader.getString();
    return bufReader;
  }
}

const kRtmServiceType = 2;

class ServiceRtm extends Service {
  __user_id;

  constructor(user_id) {
    super(kRtmServiceType);
    this.__user_id = user_id || '';
  }

  pack() {
    const buffer = new ByteBuf();
    buffer.putString(this.__user_id);
    return Buffer.concat([super.pack(), buffer.pack()]);
  }

  unpack(buffer) {
    const bufReader = super.unpack(buffer);
    this.__user_id = bufReader.getString();
    return bufReader;
  }
}

(ServiceRtm as any).kPrivilegeLogin = 1;

const kFpaServiceType = 4;

class ServiceFpa extends Service {
  constructor() {
    super(kFpaServiceType);
  }

  pack() {
    return super.pack();
  }

  unpack(buffer) {
    const bufReader = super.unpack(buffer);
    return bufReader;
  }
}

(ServiceFpa as any).kPrivilegeLogin = 1;

const kChatServiceType = 5;

class ServiceChat extends Service {
  __user_id;

  constructor(user_id) {
    super(kChatServiceType);
    this.__user_id = user_id || '';
  }

  pack() {
    const buffer = new ByteBuf();
    buffer.putString(this.__user_id);
    return Buffer.concat([super.pack(), buffer.pack()]);
  }

  unpack(buffer) {
    const bufReader = super.unpack(buffer);
    this.__user_id = bufReader.getString();
    return bufReader;
  }
}

(ServiceChat as any).kPrivilegeUser = 1;
(ServiceChat as any).kPrivilegeApp = 2;

const kEducationServiceType = 7;

class ServiceEducation extends Service {
  __room_uuid;
  __user_uuid;
  __role;

  constructor(roomUuid, userUuid, role) {
    super(kEducationServiceType);
    this.__room_uuid = roomUuid || '';
    this.__user_uuid = userUuid || '';
    this.__role = role || -1;
  }

  pack() {
    const buffer = new ByteBuf();
    buffer.putString(this.__room_uuid);
    buffer.putString(this.__user_uuid);
    buffer.putInt16(this.__role);
    return Buffer.concat([super.pack(), buffer.pack()]);
  }

  unpack(buffer) {
    const bufReader = super.unpack(buffer);
    this.__room_uuid = bufReader.getString();
    this.__user_uuid = bufReader.getString();
    this.__role = bufReader.getInt16();
    return bufReader;
  }
}

(ServiceEducation as any).PRIVILEGE_ROOM_USER = 1;
(ServiceEducation as any).PRIVILEGE_USER = 2;
(ServiceEducation as any).PRIVILEGE_APP = 3;

class AccessToken2 {
  appId;
  appCertificate;
  issueTs;
  expire;
  salt;
  services;

  constructor(appId, appCertificate, issueTs, expire) {
    this.appId = appId;
    this.appCertificate = appCertificate;
    this.issueTs = issueTs || new Date().getTime() / 1000;
    this.expire = expire;
    // salt ranges in (1, 99999999)
    this.salt = Math.floor(Math.random() * 99999999) + 1;
    this.services = {};
  }

  __signing() {
    let signing = encodeHMac(
      new ByteBuf().putUint32(this.issueTs).pack(),
      this.appCertificate
    );
    signing = encodeHMac(new ByteBuf().putUint32(this.salt).pack(), signing);
    return signing;
  }

  __build_check() {
    const is_uuid = (data) => {
      if (data.length !== APP_ID_LENGTH) {
        return false;
      }
      const buf = Buffer.from(data, 'hex');
      return !!buf;
    };

    const { appId, appCertificate, services } = this;
    if (!is_uuid(appId) || !is_uuid(appCertificate)) {
      return false;
    }

    if (Object.keys(services).length === 0) {
      return false;
    }
    return true;
  }

  add_service(service) {
    this.services[service.service_type()] = service;
  }

  build() {
    if (!this.__build_check()) {
      return '';
    }

    const signing = this.__signing();
    let signing_info = new ByteBuf()
      .putString(this.appId)
      .putUint32(this.issueTs)
      .putUint32(this.expire)
      .putUint32(this.salt)
      .putUint16(Object.keys(this.services).length)
      .pack();
    Object.values(this.services).forEach((service: any) => {
      signing_info = Buffer.concat([signing_info, service.pack()]);
    });

    const signature = encodeHMac(signing, signing_info);
    const content = Buffer.concat([
      new ByteBuf().putString(signature).pack(),
      signing_info,
    ]);
    const compressed = zlib.deflateSync(content);
    return `${getVersion()}${Buffer.from(compressed).toString('base64')}`;
  }

  from_string(origin_token) {
    const origin_version = origin_token.substring(0, VERSION_LENGTH);
    if (origin_version !== getVersion()) {
      return false;
    }

    const origin_content = origin_token.substring(
      VERSION_LENGTH,
      origin_token.length
    );
    const buffer = zlib.inflateSync(new Buffer(origin_content, 'base64'));
    const bufferReader = new ReadByteBuf(buffer);

    const signature = bufferReader.getString();
    this.appId = bufferReader.getString();
    this.issueTs = bufferReader.getUint32();
    this.expire = bufferReader.getUint32();
    this.salt = bufferReader.getUint32();
    const service_count = bufferReader.getUint16();

    let remainBuf = bufferReader.pack();
    for (let i = 0; i < service_count; i++) {
      const bufferReaderService = new ReadByteBuf(remainBuf);
      const service_type = bufferReaderService.getUint16();
      const service = new (AccessToken2 as any).kServices[service_type]();
      remainBuf = service.unpack(bufferReaderService.pack()).pack();
      this.services[service_type] = service;
    }
  }
}

const encodeHMac: any = function (key, message) {
  return crypto.createHmac('sha256', key).update(message).digest();
};

const ByteBuf: any = function () {
  const that: any = {
    buffer: Buffer.alloc(1024),
    position: 0,
  };

  that.buffer.fill(0);

  that.pack = function () {
    const out = Buffer.alloc(that.position);
    that.buffer.copy(out, 0, 0, out.length);
    return out;
  };

  that.putUint16 = function (v) {
    that.buffer.writeUInt16LE(v, that.position);
    that.position += 2;
    return that;
  };

  that.putUint32 = function (v) {
    that.buffer.writeUInt32LE(v, that.position);
    that.position += 4;
    return that;
  };
  that.putInt32 = function (v) {
    that.buffer.writeInt32LE(v, that.position);
    that.position += 4;
    return that;
  };

  that.putInt16 = function (v) {
    that.buffer.writeInt16LE(v, that.position);
    that.position += 2;
    return that;
  };

  that.putBytes = function (bytes) {
    that.putUint16(bytes.length);
    bytes.copy(that.buffer, that.position);
    that.position += bytes.length;
    return that;
  };

  that.putString = function (str) {
    return that.putBytes(Buffer.from(str));
  };

  that.putTreeMap = function (map) {
    if (!map) {
      that.putUint16(0);
      return that;
    }

    that.putUint16(Object.keys(map).length);
    for (const key in map) {
      that.putUint16(key);
      that.putString(map[key]);
    }

    return that;
  };

  that.putTreeMapUInt32 = function (map) {
    if (!map) {
      that.putUint16(0);
      return that;
    }

    that.putUint16(Object.keys(map).length);
    for (const key in map) {
      that.putUint16(key);
      that.putUint32(map[key]);
    }

    return that;
  };

  return that;
};

const ReadByteBuf: any = function (bytes) {
  const that: any = {
    buffer: bytes,
    position: 0,
  };

  that.getUint16 = function () {
    const ret = that.buffer.readUInt16LE(that.position);
    that.position += 2;
    return ret;
  };

  that.getUint32 = function () {
    const ret = that.buffer.readUInt32LE(that.position);
    that.position += 4;
    return ret;
  };

  that.getInt16 = function () {
    const ret = that.buffer.readUInt16LE(that.position);
    that.position += 2;
    return ret;
  };

  that.getString = function () {
    const len = that.getUint16();

    const out = Buffer.alloc(len);
    that.buffer.copy(out, 0, that.position, that.position + len);
    that.position += len;
    return out;
  };

  that.getTreeMapUInt32 = function () {
    const map = {};
    const len = that.getUint16();
    for (let i = 0; i < len; i++) {
      const key = that.getUint16();
      const value = that.getUint32();
      map[key] = value;
    }
    return map;
  };

  that.pack = function () {
    const length = that.buffer.length;
    const out = Buffer.alloc(length);
    that.buffer.copy(out, 0, that.position, length);
    return out;
  };

  return that;
};

(AccessToken2 as any).kServices = {};
(AccessToken2 as any).kServices[kRtcServiceType] = ServiceRtc;
(AccessToken2 as any).kServices[kRtmServiceType] = ServiceRtm;
(AccessToken2 as any).kServices[kFpaServiceType] = ServiceFpa;
(AccessToken2 as any).kServices[kChatServiceType] = ServiceChat;
(AccessToken2 as any).kServices[kEducationServiceType] = ServiceEducation;

export {
  AccessToken2,
  ServiceRtc,
  ServiceRtm,
  ServiceFpa,
  ServiceChat,
  ServiceEducation,
  kRtcServiceType,
  kRtmServiceType,
  kFpaServiceType,
  kChatServiceType,
  kEducationServiceType,
};