immich-folio/lib/tokens.ts

/**
 * Token encoding/decoding for asset IDs.
 * Obfuscates Immich UUIDs in public-facing URLs using AES encryption.
 *
 * Uses deterministic encryption (IV derived from asset ID) so the same
 * asset always produces the same token — essential for browser caching.
 */

import crypto from 'crypto';
import { getConfig } from './config';
import { isUuid } from './uuid';

let _key: Buffer | null = null;

function getKey(): Buffer {
  if (!_key) {
    const authSecret = getConfig().authSecret;
    _key = crypto.createHash('sha256').update(authSecret).digest();
  }
  return _key;
}

/**
 * Encode an asset ID into an opaque URL-safe token.
 * Note: The AES-GCM deterministic IV causes the identical input asset ID
 * to encrypt to the exact same cipher token. This provides URL obfuscation
 * and caching consistency, but it does NOT provide k-anonymous cryptographic
 * security guarantees against recognizing identical items if intercepted.
 */
export function encodeAssetId(assetId: string): string {
  const key = getKey();
  // Deterministic IV from asset ID (same input → same token).
  // SHA-256 slice → first 16 bytes. MD5 was deprecated for cryptographic use.
  const iv = crypto.createHash('sha256').update(assetId).digest().subarray(0, 16);
  const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
  const encrypted = Buffer.concat([cipher.update(assetId, 'utf8'), cipher.final()]);
  const authTag = cipher.getAuthTag();
  // Compact: base64url(iv + authTag + ciphertext) with v2 prefix
  const payload = Buffer.concat([iv, authTag, encrypted]).toString('base64url');
  return `v2:${payload}`;
}

/**
 * Decode a token back into an asset ID.
 * Returns null if the token is invalid.
 */
export function decodeAssetId(token: string): string | null {
  // 🛡️ SECURITY: Enforce maximum token length to prevent memory exhaustion DoS
  // A v2 token for a 36-char UUID is ~110 chars. 256 is generous but safe.
  if (token.length > 256) return null;

  try {
    const key = getKey();

    let decrypted: string;

    if (token.startsWith('v2:')) {
      const data = Buffer.from(token.slice(3), 'base64url');
      if (data.length < 33) return null; // iv(16) + authTag(16) + at least 1 byte

      const iv = data.subarray(0, 16);
      const authTag = data.subarray(16, 32);
      const encrypted = data.subarray(32);

      const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
      decipher.setAuthTag(authTag);
      decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]).toString('utf8');
    } else {
      // Legacy aes-256-cbc fallback
      const data = Buffer.from(token, 'base64url');
      if (data.length < 17) return null; // iv(16) + at least 1 byte

      const iv = data.subarray(0, 16);
      const encrypted = data.subarray(16);
      const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
      decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]).toString('utf8');
    }

    // Validate it looks like a UUID
    return isUuid(decrypted) ? decrypted : null;
  } catch {
    return null;
  }
}