102 lines
3.4 KiB
JavaScript
102 lines
3.4 KiB
JavaScript
import {
|
||
decryptJsonWithStoragePwd,
|
||
encryptJsonWithStoragePwd,
|
||
} from './crypto-utils.js';
|
||
|
||
const DB_NAME = 'shine-ui-auth';
|
||
const DB_VERSION = 1;
|
||
const STORE_SECRETS = 'encrypted-secrets';
|
||
const STORE_SESSIONS = 'session-keys';
|
||
|
||
function openDb() {
|
||
return new Promise((resolve, reject) => {
|
||
const request = indexedDB.open(DB_NAME, DB_VERSION);
|
||
request.onupgradeneeded = () => {
|
||
const db = request.result;
|
||
if (!db.objectStoreNames.contains(STORE_SECRETS)) {
|
||
db.createObjectStore(STORE_SECRETS, { keyPath: 'login' });
|
||
}
|
||
if (!db.objectStoreNames.contains(STORE_SESSIONS)) {
|
||
db.createObjectStore(STORE_SESSIONS, { keyPath: 'login' });
|
||
}
|
||
};
|
||
request.onsuccess = () => resolve(request.result);
|
||
request.onerror = () => reject(request.error || new Error('IndexedDB недоступен'));
|
||
});
|
||
}
|
||
|
||
async function put(storeName, value) {
|
||
const db = await openDb();
|
||
await new Promise((resolve, reject) => {
|
||
const tx = db.transaction(storeName, 'readwrite');
|
||
tx.objectStore(storeName).put(value);
|
||
tx.oncomplete = () => resolve();
|
||
tx.onerror = () => reject(tx.error || new Error('Ошибка записи в IndexedDB'));
|
||
});
|
||
db.close();
|
||
}
|
||
|
||
async function get(storeName, key) {
|
||
const db = await openDb();
|
||
const result = await new Promise((resolve, reject) => {
|
||
const tx = db.transaction(storeName, 'readonly');
|
||
const req = tx.objectStore(storeName).get(key);
|
||
req.onsuccess = () => resolve(req.result || null);
|
||
req.onerror = () => reject(req.error || new Error('Ошибка чтения из IndexedDB'));
|
||
});
|
||
db.close();
|
||
return result;
|
||
}
|
||
|
||
export async function saveEncryptedUserSecrets(login, storagePwd, keys) {
|
||
const encrypted = await encryptJsonWithStoragePwd(keys, storagePwd);
|
||
await put(STORE_SECRETS, {
|
||
login,
|
||
encrypted,
|
||
updatedAtMs: Date.now(),
|
||
});
|
||
}
|
||
|
||
export async function loadEncryptedUserSecrets(login, storagePwd) {
|
||
const row = await get(STORE_SECRETS, login);
|
||
if (!row?.encrypted) {
|
||
throw new Error('На устройстве нет сохранённых ключей для этого логина');
|
||
}
|
||
return decryptJsonWithStoragePwd(row.encrypted, storagePwd);
|
||
}
|
||
|
||
export async function updateEncryptedUserSecrets(login, storagePwd, updater) {
|
||
if (typeof updater !== 'function') {
|
||
throw new Error('updateEncryptedUserSecrets: updater должен быть функцией');
|
||
}
|
||
|
||
const current = await loadEncryptedUserSecrets(login, storagePwd);
|
||
const next = await updater(current);
|
||
if (!next || typeof next !== 'object') {
|
||
throw new Error('updateEncryptedUserSecrets: updater должен вернуть объект secrets');
|
||
}
|
||
await saveEncryptedUserSecrets(login, storagePwd, next);
|
||
return next;
|
||
}
|
||
|
||
export async function saveSessionMaterial(login, material) {
|
||
await put(STORE_SESSIONS, {
|
||
login,
|
||
...material,
|
||
updatedAtMs: Date.now(),
|
||
});
|
||
}
|
||
|
||
export async function loadSessionMaterial(login) {
|
||
return get(STORE_SESSIONS, login);
|
||
}
|
||
|
||
export async function clearClientAuthData() {
|
||
await new Promise((resolve, reject) => {
|
||
const request = indexedDB.deleteDatabase(DB_NAME);
|
||
request.onsuccess = () => resolve();
|
||
request.onerror = () => reject(request.error || new Error('Не удалось очистить IndexedDB'));
|
||
request.onblocked = () => reject(new Error('Очистка IndexedDB заблокирована открытыми соединениями'));
|
||
});
|
||
}
|