vybe/src/event/authenticate.js

const db = require('../db');
const openpgp = require('openpgp');

const authenticate = async (msg, respond, socket, io) => {
	if (!msg.name || !msg.message) {
		return respond({
			success: false,
			message: 'invalid message'
		});
	}
	const result = await db.query('select * from user where name = ?', [
		msg.name
	]);
	if (result.rows.length === 0) {
		return respond({
			success: false,
			message: 'user not found'
		});
	}
	try {
		const key = await openpgp.readKey({ armoredKey: result.rows[0].pubkey });
		const verification = await openpgp.verify({
			message: await openpgp.readCleartextMessage({
				cleartextMessage: msg.message,
			}),
			verificationKeys: key,
			expectSigned: true
		});
		const data = verification.data.split(' ');
		if (data[0] !== 'vybe_auth') {
			return respond({
				success: false,
				message: 'bad auth message'
			});
		}
		const auths = await db.query(
			'select * from authentication where user = ? and salt = ?',
			[result.rows[0].id, data[1]]
		);
		if (auths.rows.length === 0) {
			await db.query('insert into authentication (user, salt) values (?, ?)', [
				result.rows[0].id,
				data[1]
			]);
			socket.username = msg.name;
			if (io.cache[msg.name]) {
				io.cache[msg.name].push(socket.id);
			} else {
				io.cache[msg.name] = [socket.id];
			}
			return respond({
				success: true,
			});
		} else {
			return respond({
				success: false,
				message: 'already authenticated with this message'
			});
		}
	} catch (err) {
		console.error('error in authentication: ' + err);
		return respond({
			success: false,
			message: 'message signature verification failed'
		});
	}
};

module.exports = authenticate;