(Node.js) Sign Manifest File to Generate a Passbook .pkpass in Memory

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive in memory

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // ---------------------------------------------------------------------------------------------
    // This example is the same as Sign Manifest File to Generate a Passbook .pkpass file
    // except everything happens in memory (no input files, no output files)
    // ---------------------------------------------------------------------------------------------

    // First create the manifest.json
    var success;
    var manifest = new chilkat.JsonObject();
    var crypt = new chilkat.Crypt2();

    var zip = new chilkat.Zip();
    zip.NewZip("notUsedAndNeverCreated.zip");

    crypt.HashAlgorithm = "sha1";
    // Return hashes as lowercase hex.
    crypt.EncodingMode = "hexlower";

    var digestStr;

    var pngData = new chilkat.BinData();
    // Assume we load the pngData with bytes for "icon.png" from somewhere, such as a byte array in memory.
    // entry: ZipEntry
    var entry = zip.AppendBd("icon.png",pngData);

    digestStr = crypt.HashBdENC(pngData);
    manifest.UpdateString("\"icon.png\"",digestStr);

    pngData.Clear();
    // Assume we load the pngData with bytes for "icon@2x.png" from somewhere...
    entry = zip.AppendBd("icon@2x.png",pngData);

    digestStr = crypt.HashBdENC(pngData);
    manifest.UpdateString("\"icon@2x.png\"",digestStr);

    pngData.Clear();
    // Assume we load the pngData with bytes for "logo.png" from somewhere...
    entry = zip.AppendBd("logo.png",pngData);

    digestStr = crypt.HashBdENC(pngData);
    manifest.UpdateString("\"logo.png\"",digestStr);

    pngData.Clear();
    // Assume we load the pngData with bytes for "logo@2x.png" from somewhere...
    entry = zip.AppendBd("logo@2x.png",pngData);

    digestStr = crypt.HashBdENC(pngData);
    manifest.UpdateString("\"logo@2x.png\"",digestStr);

    var passJson = "{ .... }";    //  Contains the contents of pass.json
    entry = zip.AppendString("pass.json",passJson);

    digestStr = crypt.HashStringENC(passJson);
    manifest.UpdateString("\"pass.json\"",digestStr);

    entry = zip.AppendString("manifest.json",manifest.Emit());

    // Make sure we have the Apple WWDR intermediate certificate available for 
    // the cert chain in the signature.
    var certVault = new chilkat.XmlCertVault();
    var appleWwdrCert = new chilkat.Cert();
    success = appleWwdrCert.LoadByCommonName("Apple Worldwide Developer Relations Certification Authority");
    if (success !== true) {
        console.log("The Apple WWDR intermediate certificate is not installed.");
        console.log("It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer");
        console.log("You may alternatively load the .cer like this...");
        success = appleWwdrCert.LoadFromFile("qa_data/certs/AppleWWDRCA.cer");
        if (success !== true) {
            console.log(appleWwdrCert.LastErrorText);
            return;
        }

    }

    certVault.AddCert(appleWwdrCert);
    crypt.UseCertVault(certVault);

    // Use a digital certificate and private key from a PFX
    var bdPfx = new chilkat.BinData();
    // Assume we loaded a PFX into bdPfx....
    var pfxPassword = "test123";

    var cert = new chilkat.Cert();
    success = cert.LoadPfxBd(bdPfx,pfxPassword);
    if (success !== true) {
        console.log(cert.LastErrorText);
        return;
    }

    // Provide the signing cert (with associated private key).
    success = crypt.SetSigningCert(cert);
    if (success !== true) {
        console.log(crypt.LastErrorText);
        return;
    }

    // Specify the signed attributes to be included.
    // (These attributes appear to not be necessary, but we're including
    // them just in case they become necessary in the future.)
    var jsonSignedAttrs = new chilkat.JsonObject();
    jsonSignedAttrs.UpdateInt("contentType",1);
    jsonSignedAttrs.UpdateInt("signingTime",1);
    crypt.SigningAttributes = jsonSignedAttrs.Emit();

    // Sign the manifest JSON to produce a signature
    crypt.EncodingMode = "base64";
    var sig = crypt.SignStringENC(manifest.Emit());
    var bdSig = new chilkat.BinData();
    bdSig.AppendEncoded(sig,"base64");
    entry = zip.AppendBd("signature",bdSig);

    // ---------------------------------------------------------------------------------------------
    // Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
    // If this is of interest, please send email to support@chilkatsoft.com
    // ---------------------------------------------------------------------------------------------

    // Create the .pkipass archive (which is a .zip archive containing the required files).
    // the .zip is written to bdZip
    var bdZip = new chilkat.BinData();
    success = zip.WriteBd(bdZip);
    if (success !== true) {
        console.log(zip.LastErrorText);
        return;
    }

    console.log("Success.");

}

chilkatExample();