Signature signing

.env.example

@@ -9,3 +9,4 @@ BERRYDASH_DB_USER=
 BERRYDASH_DB_PASS=
 BERRYDASH_DB_NAME=
 TURNSTILE_SECRET_KEY=
+PRIVATE_SIGNING_KEY=

src/lib/util.ts

@@ -10,14 +10,26 @@ import { Context } from 'elysia'
 import axios from 'axios'
 import FormData from 'form-data'
 import nodemailer from 'nodemailer'
-import { createHash } from 'crypto'
+import { createHash, createPrivateKey, sign } from 'crypto'
 import { and, eq, sql } from 'drizzle-orm'
 import { verifyCodes } from './tables'
 
 export const jsonResponse = (data: any, status = 200) => {
-  return new Response(JSON.stringify(data), {
+  const body = JSON.stringify(data)
+
+  const key = Buffer.from(
+    process.env.PRIVATE_SIGNING_KEY ?? '',
+    'base64'
+  ).toString('utf-8')
+  const privateKey = createPrivateKey(key)
+  const signature = sign(null, Buffer.from(body), privateKey).toString('base64')
+
+  return new Response(body, {
     status,
-    headers: { 'Content-Type': 'application/json' }
+    headers: {
+      'Content-Type': 'application/json',
+      'X-Signature': signature
+    }
   })
 }