fix authentication + public key linked to socket.io

src/app.js

@@ -16,6 +16,13 @@ const routes = require(__dirname + '/routes');
 // session (used for login challenge)
 const session = require('express-session');
 const SQLiteStore = require('connect-sqlite3')(session);
+const sessionMiddleware = session({
+    store: new SQLiteStore,
+    secret: process.env.COOKIE_SECRET || "toto",
+    resave: false,
+    saveUninitialized: true,
+    cookie: { maxAge: 7 * 24 * 60 * 60 * 1000 } // 1 week
+});
 
 // configure app
 app.set("port", port);
@@ -23,24 +30,24 @@ app.set('view engine', 'pug');
 app.set('views', __dirname + '/views');
 app.use(cookieParser());
 app.use(express.json());
-app.use(session({
-    store: new SQLiteStore,
-    secret: process.env.COOKIE_SECRET || "toto",
-    resave: false,
-    saveUninitialized: true,
-    cookie: { maxAge: 7 * 24 * 60 * 60 * 1000 } // 1 week
-}));
+app.use(sessionMiddleware);
 
 app.use("/", routes);
 // bootstrap
 app.use('/css', express.static(__dirname + '/node_modules/bootstrap/dist/css'));
 
 // socket.io
+io.engine.use(sessionMiddleware);
 io.on('connection', (socket) => {
-  console.log('A user connected');
-  socket.on('disconnect', () => {
-    console.log('User disconnected');
-  });
+    const session = socket.request.session;
+    console.log('A user connected');
+    socket.on('disconnect', () => {
+        console.log('User disconnected');
+    });
+    socket.on('chat message', (msg) => {
+        console.log('message: ' + msg + ', sender: ' + session.id);
+        console.log(session.publicKey);
+    });
 });
 
 

src/authentication.js

@@ -18,7 +18,6 @@ const authentication = {
                         msg
                     );
                     if (verified) {
-                        console.log('Signature verified successfully with public key:', pemPubKey);
                         return pemPubKey;
                     }
                 } catch (err) {

src/controllers/account.js

@@ -36,13 +36,19 @@ const accountController = {
         const { signature } = req.body;
         const publicKeys = await database.getPublicKeys();
         const msg = new TextEncoder().encode(req.session.randomNumber);
-        const sig = new TextEncoder().encode(signature);
-        let validKey = authentication.verifySignature(msg, sig, publicKeys);
+        const sig = Buffer.from(signature, 'base64');
+        let validKey = await authentication.verifySignature(msg, sig, publicKeys);
         if (validKey !== null) {
             req.session.publicKey = validKey;
-            socket.auth = { validKey };
-            socket.connect();
-            return res.status(200).json({ message: "Challenge solved successfully" });
+            req.session.save((err) => {
+                if (err) {
+                    console.error("Error saving session:", err);
+                    return res.status(500).json({ error: "Session save error" });
+                }
+                socket.auth = { validKey };
+                socket.connect();
+                return res.status(200).json({ message: "Challenge solved successfully" });
+            });
         } else {
             return res.status(400).json({ error: "Challenge failed" });
         }

src/controllers/main.js

@@ -3,6 +3,7 @@ const path = require('path');
 const mainController = {
     root: (req, res) => {
         let pubKey = req.session.publicKey;
+        console.log(pubKey);
         let isLoggedIn = typeof pubKey !== 'undefined';
         res.render('index', {isLoggedIn, pubKey});
     },

src/socket.js

@@ -3,7 +3,8 @@ import { io } from "socket.io-client";
 const URL = "http://localhost:3333";
 const socket = io(URL, {
   autoConnect: false,
-  transports: ['websocket', 'polling']
+  transports: ['websocket', 'polling'],
+  withCredentials: true
 });
 
 // log during dev

src/views/index.pug

@@ -45,6 +45,9 @@ html(lang="en-US")
           .btn-group.mr-2(role="group", aria-label="logout")
             a#logout.btn.btn-secondary(href="./account/logout") logout
 
+
+        p#pubkey #{pubKey}
+
         ul#messages
 
         form#form(action="")
@@ -52,3 +55,4 @@ html(lang="en-US")
           button Send
 
 
+