/api/mek/register, /api/mek/register/initial Endpoint에서 MEK에 대한 서명을 요구하도록 변경

This commit is contained in:
static
2024-12-31 07:48:40 +09:00
parent f30cc697bb
commit 3ee6365ff2
6 changed files with 51 additions and 12 deletions

View File

@@ -13,6 +13,7 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
z.object({
clientId: z.number(),
mek: z.string().base64().nonempty(),
sigMek: z.string().base64().nonempty(),
}),
),
})
@@ -23,9 +24,10 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
await registerNewActiveMek(
userId,
clientId,
meks.map(({ clientId, mek }) => ({
meks.map(({ clientId, mek, sigMek }) => ({
clientId,
encMek: mek.trim(),
sigEncMek: sigMek.trim(),
})),
);
return text("MEK registered", { headers: { "Content-Type": "text/plain" } });

View File

@@ -13,11 +13,12 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
const zodRes = z
.object({
mek: z.string().base64().nonempty(),
sigMek: z.string().base64().nonempty(),
})
.safeParse(await request.json());
if (!zodRes.success) error(400, "Invalid request body");
const { mek } = zodRes.data;
const { mek, sigMek } = zodRes.data;
await registerInitialActiveMek(userId, clientId, mek);
await registerInitialActiveMek(userId, clientId, mek, sigMek);
return text("MEK registered", { headers: { "Content-Type": "text/plain" } });
};