/* Copyright (C) 2020 Yarmo Mackenbach This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details. You should have received a copy of the GNU Affero General Public License along with this program. If not, see . Also add information on how to contact you by electronic and paper mail. If your software can interact with users remotely through a computer network, you should also make sure that it provides a way for users to get its source. For example, if your program is a web application, its interface could display a "Source" link that leads users to an archive of the code. There are many ways you could offer source, and different solutions will be better for different programs; see section 13 for the specific requirements. You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU AGPL, see . */ const bent = require('bent'); const getJSON = bent('json'); require('dotenv').config(); const Proxy = async (params) => { let res = { success: false, errors: [], isVerified: false, params: params } if (!res.params.checkClaim) { switch (res.params.checkClaimFormat) { default: case "uri": res.params.checkClaim = `openpgp4fpr:${res.params.fingerprint}`; break; case "message": res.params.checkClaim = `[Verifying my OpenPGP key: openpgp4fpr:${res.params.fingerprint}]`; break; case "fingerprint": res.params.checkClaim = res.params.fingerprint; break; } } const obj = await getJSON(res.params.url); res.isVerified = VerifyJsonProof(obj, res.params.checkPath, res.params.checkClaim, res.params.checkRelation); res.success = true; return res; }; const Twitter = async (params) => { let res = { success: false, errors: [], isVerified: false, params: params } let twitter_api_auth = process.env.TWITTER_API_AUTH; if (!twitter_api_auth) { let proofUrl = `https://mobile.twitter.com/${res.params.account}/status/${res.params.tweetId}`; let re = new RegExp(`[Verifying my OpenPGP key: openpgp4fpr:${res.params.fingerprint}]`, "gi"); const get = bent('GET'); const obj = await get(proofUrl); res.isVerified = re.test(obj.data); return res; } let proofUrl = `https://api.twitter.com/labs/2/tweets/${res.params.tweetId}?tweet.fields=author_id,created_at,id,source,text`; let re = new RegExp(`[Verifying my OpenPGP key: openpgp4fpr:${res.params.fingerprint}]`, "gi"); const get = bent('GET', 'json', {'Content-Type': 'application/json', 'Authorization': `Bearer ${twitter_api_auth}`}); const obj = await get(proofUrl); res.isVerified = re.test(obj.data.text); res.success = true; return res; }; const VerifyJsonProof = (data, checkPath, checkClaim, checkRelation) => { let isVerified = false; let re; if (!data) { return isVerified; } if (checkPath.length == 0) { switch (checkRelation) { default: case 'contains': re = new RegExp(checkClaim, "gi"); return re.test(data); break; case 'eq': return data.replace(/\r?\n|\r/, '').toLowerCase() == checkClaim.toLowerCase(); break; case 'oneOf': re = new RegExp(checkClaim, "gi"); return re.test(data.join("|")); break; } } if (Array.isArray(data)) { data.forEach((item, i) => { isVerified = isVerified || VerifyJsonProof(item, checkPath, checkClaim, checkRelation); }); } else if (Array.isArray(data[checkPath[0]])) { data[checkPath[0]].forEach((item, i) => { isVerified = isVerified || VerifyJsonProof(item, checkPath.slice(1), checkClaim, checkRelation); }); } else { isVerified = isVerified || VerifyJsonProof(data[checkPath[0]], checkPath.slice(1), checkClaim, checkRelation); } return isVerified; } exports.Proxy = Proxy; exports.Twitter = Twitter;