Add author id hash to database

scripts/add-author-id-hash.js

@@ -0,0 +1,51 @@
+import crypto from 'crypto';
+import dotenv from 'dotenv';
+import { open } from 'sqlite';
+import sqlite3 from 'sqlite3';
+
+dotenv.config();
+
+async function main() {
+  Encrypter.initialize(process.env.DATABASE_SECRET);
+
+  const db = await open({
+    filename: './data/discord-main.db',
+    driver: sqlite3.Database
+  });
+
+  const messages = await db.all('SELECT * FROM messages');
+
+  db.exec('BEGIN TRANSACTION');
+  for (const message of messages) {
+    db.run('UPDATE messages SET author_id_hash = ? WHERE id = ?', Encrypter.hash(Encrypter.decrypt(message.author_id)), message.id);
+  }
+  db.exec('COMMIT');
+}
+
+class Encrypter {
+  static initialize(encryptionKey) {
+    this.key = crypto.scryptSync(encryptionKey, 'salt', 32);
+  }
+  static encrypt(clearText) {
+    const iv = crypto.randomBytes(16);
+    const cipher = crypto.createCipheriv(this.algorithm, this.key, iv);
+    const encrypted = cipher.update(clearText, 'utf8', 'hex');
+    return [
+      encrypted + cipher.final('hex'),
+      Buffer.from(iv).toString('hex'),
+    ].join('|');
+  }
+  static decrypt(encryptedText) {
+    const [encrypted, iv] = encryptedText.split('|');
+    if (!iv)
+      throw new Error('IV not found');
+    const decipher = crypto.createDecipheriv(this.algorithm, this.key, Buffer.from(iv, 'hex'));
+    return decipher.update(encrypted, 'hex', 'utf8') + decipher.final('utf8');
+  }
+  static hash(clearText) {
+    return crypto.createHmac('sha256', this.key).update(clearText).digest('base64');
+  }
+}
+Encrypter.algorithm = 'aes-256-cbc';
+
+main();

sql/migrations/0004-add-author-id-hash.sql

@@ -0,0 +1,10 @@
+--------------------------------------------------------------------------------
+-- Up
+--------------------------------------------------------------------------------
+ALTER TABLE messages ADD author_id_hash TEXT NOT NULL DEFAULT '';
+CREATE INDEX IF NOT EXISTS index_author_id_hash ON messages (author_id_hash);
+
+--------------------------------------------------------------------------------
+-- Down
+--------------------------------------------------------------------------------
+ALTER TABLE messages DROP COLUMN author_id_hash;

src/shared/Database.ts

@@ -131,7 +131,7 @@ export class Database {
       const serializedMessage = serializeMessage(message);
 
       await Database.db.run(`
-        INSERT INTO messages (id, id_hash, author_id, author_name, channel_id, attachments, stickers, content) VALUES
+        INSERT INTO messages (id, id_hash, author_id, author_id_hash, author_name, channel_id, attachments, stickers, content) VALUES
         (:id, :id_hash, :author_id, :author_name, :channel_id, :attachments, :stickers, :content)
       `, ...serializedMessage);
 
@@ -172,6 +172,10 @@ export class Database {
     await Database.db.run('DELETE from messages WHERE datetime(timestamp) < datetime("now", "-28 days")');
   }
 
+  static async purgeMessagesFrom(id: string) {
+    await Database.db.run('DELETE from messages WHERE ');
+  }
+
   //#endregion
 
   //#region Tickets

src/types/database-types.d.ts

@@ -1,7 +1,8 @@
 export type LoggedMessage = {
   id: string
-  id_encrypted: string
+  id_hash: string
   author_id: string
+  author_id_hash: string
   author_name: string
   channel_id: string
   attachments: string