server/utils/init.ts

import chalk from "chalk";
import type { Config } from "~/packages/config-manager";
import {
    LogLevel,
    type LogManager,
    type MultiLogManager,
} from "~/packages/log-manager";

export const checkConfig = async (
    config: Config,
    logger: LogManager | MultiLogManager,
) => {
    await checkOidcConfig(config, logger);

    await checkHttpProxyConfig(config, logger);

    await checkChallengeConfig(config, logger);
};

const checkHttpProxyConfig = async (
    config: Config,
    logger: LogManager | MultiLogManager,
) => {
    if (config.http.proxy.enabled) {
        if (!config.http.proxy.address) {
            await logger.log(
                LogLevel.Critical,
                "Server",
                "The HTTP proxy is enabled, but the proxy address is not set in the config",
            );

            // Hang until Ctrl+C is pressed
            await Bun.sleep(Number.POSITIVE_INFINITY);
        }

        await logger.log(
            LogLevel.Info,
            "Server",
            `HTTP proxy enabled at ${chalk.gray(config.http.proxy.address)}, testing...`,
        );

        // Test the proxy
        const response = await fetch("https://api.ipify.org?format=json", {
            proxy: config.http.proxy.address,
        });

        const ip = (await response.json()).ip;

        await logger.log(
            LogLevel.Info,
            "Server",
            `Your IPv4 address is ${chalk.gray(ip)}`,
        );

        if (!response.ok) {
            await logger.log(
                LogLevel.Critical,
                "Server",
                "The HTTP proxy is enabled, but the proxy address is not reachable",
            );

            // Hang until Ctrl+C is pressed
            await Bun.sleep(Number.POSITIVE_INFINITY);
        }
    }
};

const checkChallengeConfig = async (
    config: Config,
    logger: LogManager | MultiLogManager,
) => {
    if (
        config.validation.challenges.enabled &&
        !config.validation.challenges.key
    ) {
        await logger.log(
            LogLevel.Critical,
            "Server",
            "Challenges are enabled, but the challenge key is not set in the config",
        );

        await logger.log(
            LogLevel.Critical,
            "Server",
            "Below is a generated key for you to copy in the config at validation.challenges.key",
        );

        const key = await crypto.subtle.generateKey(
            {
                name: "HMAC",
                hash: "SHA-256",
            },
            true,
            ["sign"],
        );

        const exported = await crypto.subtle.exportKey("raw", key);

        const base64 = Buffer.from(exported).toString("base64");

        await logger.log(
            LogLevel.Critical,
            "Server",
            `Generated key: ${chalk.gray(base64)}`,
        );

        // Hang until Ctrl+C is pressed
        await Bun.sleep(Number.POSITIVE_INFINITY);
    }
};

const checkOidcConfig = async (
    config: Config,
    logger: LogManager | MultiLogManager,
) => {
    if (!config.oidc.jwt_key) {
        await logger.log(
            LogLevel.Critical,
            "Server",
            "The JWT private key is not set in the config",
        );
        await logger.log(
            LogLevel.Critical,
            "Server",
            "Below is a generated key for you to copy in the config at oidc.jwt_key",
        );
        // Generate a key for them
        const keys = await crypto.subtle.generateKey("Ed25519", true, [
            "sign",
            "verify",
        ]);

        const privateKey = Buffer.from(
            await crypto.subtle.exportKey("pkcs8", keys.privateKey),
        ).toString("base64");

        const publicKey = Buffer.from(
            await crypto.subtle.exportKey("spki", keys.publicKey),
        ).toString("base64");

        await logger.log(
            LogLevel.Critical,
            "Server",
            chalk.gray(`${privateKey};${publicKey}`),
        );

        // Hang until Ctrl+C is pressed
        await Bun.sleep(Number.POSITIVE_INFINITY);
    }

    // Try and import the key
    const privateKey = await crypto.subtle
        .importKey(
            "pkcs8",
            Buffer.from(config.oidc.jwt_key.split(";")[0], "base64"),
            "Ed25519",
            false,
            ["sign"],
        )
        .catch((e) => e as Error);

    // Try and import the key
    const publicKey = await crypto.subtle
        .importKey(
            "spki",
            Buffer.from(config.oidc.jwt_key.split(";")[1], "base64"),
            "Ed25519",
            false,
            ["verify"],
        )
        .catch((e) => e as Error);

    if (privateKey instanceof Error || publicKey instanceof Error) {
        await logger.log(
            LogLevel.Critical,
            "Server",
            "The JWT key could not be imported! You may generate a new one by removing the old one from the config and restarting the server (this will invalidate all current JWTs).",
        );

        // Hang until Ctrl+C is pressed
        await Bun.sleep(Number.POSITIVE_INFINITY);
    }
};