AhDingsHier Comments

AhDingsHier

•Created by Timo Martinson on 7/22/2023 in #help

Where to store this key — and how?

You could export the key to/as Base64:

async function generateKeyAsBase64() {
  const key = await crypto.subtle.generateKey(
    { name: "HMAC", hash: "SHA-512" },
    true,
    ["sign", "verify"],
  );
  const keyBuffer = await crypto.subtle.exportKey("raw", key);
  return btoa(String.fromCharCode(...new Uint8Array(keyBuffer)));
}

async function generateKeyAsBase64() {
  const key = await crypto.subtle.generateKey(
    { name: "HMAC", hash: "SHA-512" },
    true,
    ["sign", "verify"],
  );
  const keyBuffer = await crypto.subtle.exportKey("raw", key);
  return btoa(String.fromCharCode(...new Uint8Array(keyBuffer)));
}

Then, e.g., store the base64 string in an environment variable. Converting the string to a key is simple:

async function getKeyFromBase64(base64Key: string) {
  const key = Uint8Array.from(atob(base64Key), (c) => c.charCodeAt(0));
  return await crypto.subtle.importKey(
    "raw",
    key,
    { name: "HMAC", hash: "SHA-512" },
    true,
    ["sign", "verify"],
  );
}

async function getKeyFromBase64(base64Key: string) {
  const key = Uint8Array.from(atob(base64Key), (c) => c.charCodeAt(0));
  return await crypto.subtle.importKey(
    "raw",
    key,
    { name: "HMAC", hash: "SHA-512" },
    true,
    ["sign", "verify"],
  );
}

Should work on deploy as well.

5 replies