File size: 1,922 Bytes
9d2d895 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 | const ANON_KEY = 'wm-anon-id';
const ANON_CLAIM_TOKEN_KEY = 'wm-anon-claim-token';
const ANON_CLAIM_TOKEN_VERSION = 'v2';
const HMAC_SHA256_HEX = /^[0-9a-f]{64}$/;
export function getStoredAnonId(): string | null {
try {
return localStorage.getItem(ANON_KEY);
} catch {
return null;
}
}
export function saveAnonId(anonId: string): void {
localStorage.setItem(ANON_KEY, anonId);
}
export function getStoredAnonClaimToken(): string | null {
try {
return localStorage.getItem(ANON_CLAIM_TOKEN_KEY);
} catch {
return null;
}
}
function isFreshAnonClaimToken(token: string): boolean {
const [version, expiresAtRaw, signature, ...extra] = token.split('.');
if (version !== ANON_CLAIM_TOKEN_VERSION || extra.length > 0) return false;
if (!expiresAtRaw || !signature || !/^\d+$/.test(expiresAtRaw)) return false;
if (!HMAC_SHA256_HEX.test(signature)) return false;
const expiresAt = Number(expiresAtRaw);
return Number.isSafeInteger(expiresAt) && expiresAt > Date.now();
}
export function getFreshStoredAnonClaimToken(): string | null {
const token = getStoredAnonClaimToken();
if (!token) return null;
if (isFreshAnonClaimToken(token)) return token;
clearStoredAnonClaimToken();
return null;
}
export function saveAnonClaimToken(token: string): void {
try {
localStorage.setItem(ANON_CLAIM_TOKEN_KEY, token);
} catch {
// Restricted storage contexts cannot preserve anonymous claim proof. The
// server will fail closed if protected payment rows later need migration.
}
}
export function clearStoredAnonClaimToken(): void {
try {
localStorage.removeItem(ANON_CLAIM_TOKEN_KEY);
} catch {
// Ignore restricted storage cleanup failures.
}
}
export function clearStoredAnonIdentity(): void {
try {
localStorage.removeItem(ANON_KEY);
clearStoredAnonClaimToken();
} catch {
// Ignore restricted storage cleanup failures.
}
}
|