beta version

Author: alessiodionisi

.gitignore

@@ -0,0 +1 @@
+node_modules

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Alessio Dionisi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,3 @@
+# HTTP Signature for Insomnia REST Client
+
+This is a plugin for the [Insomnia REST Client](https://insomnia.rest/)

package-lock.json

@@ -0,0 +1,18 @@
+{
+  "name": "insomnia-plugin-http-signature",
+  "version": "1.0.0-beta.1",
+  "author": "Alessio Dionisi <hello@adns.io>",
+  "description": "HTTP Signature for Insomnia REST Client",
+  "repository": "github:adnsio/insomnia-plugin-http-signature",
+  "bugs": "https://github.com/adnsio/insomnia-plugin-http-signature/issues",
+  "homepage": "https://github.com/adnsio/insomnia-plugin-http-signature#readme",
+  "license": "MIT",
+  "main": "./src/plugin.js",
+  "insomnia": {
+    "name": "http-signature",
+    "description": "HTTP Signature"
+  },
+  "dependencies": {
+    "luxon": "^1.3.3"
+  }
+}

package.json

@@ -0,0 +1,64 @@
+const crypto = require('crypto')
+const { DateTime } = require('luxon')
+const { parse: parseUrl } = require('url')
+
+module.exports.requestHooks = [
+  async context => {
+    const { store, request } = context
+    const keyId = await store.getItem('keyId')
+    let privateKey = await store.getItem('privateKey')
+    privateKey = `-----BEGIN PRIVATE KEY-----\n${privateKey}\n-----END PRIVATE KEY-----`
+
+    const parsedUrl = parseUrl(request.getUrl())
+
+    const algorithmBits = 256
+    const hashAlgorithm = `sha${algorithmBits}`
+    const digestAlgorithm = `SHA-${algorithmBits}`
+    const signAlgorithm = `RSA-SHA${algorithmBits}`
+
+    const date = DateTime.utc().toRFC2822()
+
+    const digestHash = crypto.createHash(hashAlgorithm)
+    const digest = digestHash.update(request.getBodyText()).digest('base64')
+
+    const signatureString = []
+    signatureString.push(`(request-target): ${request.getMethod().toLowerCase()} ${parsedUrl.path}`)
+    signatureString.push(`host: ${parsedUrl.hostname}`)
+    signatureString.push(`digest: ${digestAlgorithm}=${digest}`)
+    signatureString.push(`date: ${date}`)
+    if (request.hasHeader('Content-Type')) signatureString.push(`content-type: ${request.getHeader('Content-Type')}`)
+    const signature = signatureString.join('\n')
+
+    const signatureSign = crypto.createSign(signAlgorithm)
+    const signedSignature = signatureSign.update(signature).sign(privateKey, 'base64')
+
+    const authorization = `Signature keyId="${keyId}", algorithm="${signAlgorithm.toLowerCase()}", headers="(request-target) host digest date${request.hasHeader('Content-Type') ? ' content-type' : ''}", signature="${signedSignature}"`
+
+    request.setHeader('Digest', `${digestAlgorithm}=${digest}`)
+    request.setHeader('Date', date)
+    request.setHeader('Authorization', authorization)
+  }
+]
+
+module.exports.templateTags = [{
+  name: 'httpsignature',
+  displayName: 'HTTP Signature',
+  description: 'sign http requests',
+
+  args: [
+    {
+      displayName: 'Key ID',
+      type: 'string'
+    },
+    {
+      displayName: 'Private Key',
+      type: 'string'
+    }
+  ],
+
+  async run (context, keyId, privateKey) {
+    await context.store.setItem('keyId', keyId)
+    await context.store.setItem('privateKey', privateKey)
+    return ' '
+  }
+}]