Initial commit

node_modules/hpkp/index.js

@@ -0,0 +1,71 @@
+var badArgumentsError = new Error('hpkp must be called with a maxAge and at least two SHA-256s (one actually used and another kept as a backup).')
+
+module.exports = function hpkp (passedOptions) {
+  var options = parseOptions(passedOptions)
+  var headerKey = getHeaderKey(options)
+  var headerValue = getHeaderValue(options)
+
+  return function hpkp (req, res, next) {
+    var setHeader = true
+    var setIf = options.setIf
+
+    if (setIf) {
+      setHeader = setIf(req, res)
+    }
+
+    if (setHeader) {
+      res.setHeader(headerKey, headerValue)
+    }
+
+    next()
+  }
+}
+
+function parseOptions (options) {
+  if (!options) { throw badArgumentsError }
+
+  if (options.maxage && options.maxAge) { throw badArgumentsError }
+
+  var maxAge = options.maxAge
+  var sha256s = options.sha256s
+  var setIf = options.setIf
+
+  if (!maxAge || maxAge <= 0) { throw badArgumentsError }
+  if (!sha256s || sha256s.length < 2) { throw badArgumentsError }
+  if (setIf && (typeof setIf !== 'function')) {
+    throw new TypeError('setIf must be a function.')
+  }
+
+  if (options.reportOnly && !options.reportUri) { throw badArgumentsError }
+
+  return {
+    maxAge: maxAge,
+    sha256s: sha256s,
+    includeSubDomains: options.includeSubDomains || options.includeSubdomains,
+    reportUri: options.reportUri,
+    reportOnly: options.reportOnly,
+    setIf: setIf
+  }
+}
+
+function getHeaderKey (options) {
+  var header = 'Public-Key-Pins'
+  if (options.reportOnly) {
+    header += '-Report-Only'
+  }
+  return header
+}
+
+function getHeaderValue (options) {
+  var result = options.sha256s.map(function (sha) {
+    return 'pin-sha256="' + sha + '"'
+  })
+  result.push('max-age=' + Math.round(options.maxAge))
+  if (options.includeSubDomains) {
+    result.push('includeSubDomains')
+  }
+  if (options.reportUri) {
+    result.push('report-uri="' + options.reportUri + '"')
+  }
+  return result.join('; ')
+}