@neoskop/ethereal-secrets-middleware

Ethereal Secrets

An express middleware to expose a REST endpoint to issue secrets for client to encrypt their local stores with. The keys are stored in a Redis DB.

Usage

let app = express();
app.use('/secrets', etherealSecrets({
    ttl: 15 * 60,
    secret: 'icanhazcheezburger?',
    redis: {
      host: 'localhost'
    }
}));

If a client now issues GET /secrets the API will return JSON in the form of:

{
  "key": "<the key>"
}

Along with a cookie containing a session ID. On subsequent requests the same key is returned as long as the session is valid and the same cookie is sent with the request.