Signature signing

.env.example

@@ -9,3 +9,4 @@ BERRYDASH_DB_USER=
 BERRYDASH_DB_PASS=
 BERRYDASH_DB_NAME=
 TURNSTILE_SECRET_KEY=
+SIGNING_PRIVATE_KEY=

src/lib/util.ts

@@ -10,14 +10,25 @@ import { Context } from 'elysia'
 import axios from 'axios'
 import FormData from 'form-data'
 import nodemailer from 'nodemailer'
-import { createHash } from 'crypto'
+import { createHash, createSign } from 'crypto'
 import { and, eq, sql } from 'drizzle-orm'
 import { verifyCodes } from './tables'
 
+const privateKey = `-----BEGIN PRIVATE KEY-----\n${process.env.PRIVATE_SIGNING_KEY}\n-----END PRIVATE KEY-----`
+
 export const jsonResponse = (data: any, status = 200) => {
-  return new Response(JSON.stringify(data), {
+  const body = JSON.stringify(data)
+
+  const signer = createSign('SHA256')
+  signer.update(body)
+  const signature = signer.sign(privateKey, 'base64')
+
+  return new Response(body, {
     status,
-    headers: { 'Content-Type': 'application/json' }
+    headers: {
+      'Content-Type': 'application/json',
+      'X-Signature': signature
+    }
   })
 }