72 lines
1.8 KiB
JavaScript
72 lines
1.8 KiB
JavaScript
var badArgumentsError = new Error('hpkp must be called with a maxAge and at least two SHA-256s (one actually used and another kept as a backup).')
|
|
|
|
module.exports = function hpkp (passedOptions) {
|
|
var options = parseOptions(passedOptions)
|
|
var headerKey = getHeaderKey(options)
|
|
var headerValue = getHeaderValue(options)
|
|
|
|
return function hpkp (req, res, next) {
|
|
var setHeader = true
|
|
var setIf = options.setIf
|
|
|
|
if (setIf) {
|
|
setHeader = setIf(req, res)
|
|
}
|
|
|
|
if (setHeader) {
|
|
res.setHeader(headerKey, headerValue)
|
|
}
|
|
|
|
next()
|
|
}
|
|
}
|
|
|
|
function parseOptions (options) {
|
|
if (!options) { throw badArgumentsError }
|
|
|
|
if (options.maxage && options.maxAge) { throw badArgumentsError }
|
|
|
|
var maxAge = options.maxAge
|
|
var sha256s = options.sha256s
|
|
var setIf = options.setIf
|
|
|
|
if (!maxAge || maxAge <= 0) { throw badArgumentsError }
|
|
if (!sha256s || sha256s.length < 2) { throw badArgumentsError }
|
|
if (setIf && (typeof setIf !== 'function')) {
|
|
throw new TypeError('setIf must be a function.')
|
|
}
|
|
|
|
if (options.reportOnly && !options.reportUri) { throw badArgumentsError }
|
|
|
|
return {
|
|
maxAge: maxAge,
|
|
sha256s: sha256s,
|
|
includeSubDomains: options.includeSubDomains || options.includeSubdomains,
|
|
reportUri: options.reportUri,
|
|
reportOnly: options.reportOnly,
|
|
setIf: setIf
|
|
}
|
|
}
|
|
|
|
function getHeaderKey (options) {
|
|
var header = 'Public-Key-Pins'
|
|
if (options.reportOnly) {
|
|
header += '-Report-Only'
|
|
}
|
|
return header
|
|
}
|
|
|
|
function getHeaderValue (options) {
|
|
var result = options.sha256s.map(function (sha) {
|
|
return 'pin-sha256="' + sha + '"'
|
|
})
|
|
result.push('max-age=' + Math.round(options.maxAge))
|
|
if (options.includeSubDomains) {
|
|
result.push('includeSubDomains')
|
|
}
|
|
if (options.reportUri) {
|
|
result.push('report-uri="' + options.reportUri + '"')
|
|
}
|
|
return result.join('; ')
|
|
}
|