anversoft
commented
2 years ago Hi @onevoprojects, what a great explanation! We need some information to help you:
- what version of verifica c19 sdk are you using?
- what version of nodejs are you using?
- have you checked that the string read by the qr reader is the same both before and after being transmitted to the server?
This is the code of my server (it is the old version, now I have also added cors and static files) and it works.
const app = require('./server.js');
const verifier = require('./verifier.js');
const schedule = require('node-schedule');
const port = process.env.SERVER_PORT || 3000;
function startCron () {
console.log('CRON Started');
schedule.scheduleJob('0 */15 * * * *', async function () {
verifier.updateDefinitions();
});
}
app.listen(port, async () => {
console.log('ValidatorServer ready for requests, ');
verifier.updateDefinitions(() => startCron(), () => startCron());
});const express = require('express');
const helmet = require('helmet');
const indexRoutes = require('./routes/index.js');
const app = express();
// ============================================================================
// HELMET
// ============================================================================
app.use(helmet());
app.use(helmet.contentSecurityPolicy());
app.use(helmet.dnsPrefetchControl());
app.use(helmet.expectCt());
app.use(helmet.frameguard());
app.use(helmet.hidePoweredBy());
app.use(helmet.hsts());
app.use(helmet.ieNoOpen());
app.use(helmet.noSniff());
app.use(helmet.permittedCrossDomainPolicies());
app.use(helmet.referrerPolicy());
app.use(helmet.xssFilter());
// app.use(cors()); -- I haven't committed the latest version yet
// ============================================================================
// ============================================================================
// ROUTES
// ============================================================================
app.use('/', indexRoutes);
// ============================================================================
module.exports = app;Routes
const express = require('express');
const verifier = require('../verifier.js');
const router = express.Router();
const root = require('../../rootdirectory.js');
const path = require('path');
const shell = require('shelljs');
const pck = require('../../package.json');
// Server info
router.get('/api/v1/check', function (req, res, next) {
res.json({
version: pck.version,
description: pck.description,
lastUpdate: verifier.data.lastDefinitionUpdate
});
});
// Check the GP
router.get('/api/v1/checkdgc', async function (req, res, next) {
await verifier.testDGC(req.query, res, verifier.data).catch(err => next(err));
});
// Update the definitions manually
router.post('/api/v1/updateDefinitions', async function (req, res, next) {
verifier.updateDefinitions(val => res.send(val), err => next(err));
});
// Restart
router.post('/api/v1/serverRestart', function (req, res, next) {
res.send('Server Restarting...');
const rt = path.join(root, 'upgrade.sh');
shell.exec(rt);
});
module.exports = router;And then the validator
/**
* Testa il green pass
* @param {*} query Query della richiesta GET
* @param {*} res Risposta del server
* @param {*} data Data
*/
async function testDGC (query, res, data) {
const ret = {
message: undefined,
valid: false,
hash: undefined,
surname: undefined,
forename: undefined,
error: undefined
};
// * Codice QR Green Pass
const dgc = query.dgc;
// ? Controlla che le definizioni siano aggiornate
if (data.lastDefinitionUpdate === null || data.lastDefinitionUpdate === '') {
// ! Le definizioni non sono aggiornate
ret.error = 'DEFINIZIONI NON AGGIORNATE';
res.status(400);
res.json(ret);
} else if (dgc === undefined) {
// ! Il green pass non è valido
ret.error = 'GP NON VALIDO';
res.status(400);
res.json(ret);
} else if (query.validationMode === undefined || Number.isNaN(query.validationMode) || query.validationMode < 0) {
// ! Il metodo di validazione non è valido
ret.error = 'METODO DI VALIDAZIONE NON VALIDO';
res.status(400);
res.json(ret);
} else {
try {
// * Tipo di validazione
const validationMode = getValidationMode(query.validationMode);
// * Crea il DCC
const myDCC = await Certificate.fromRaw(dgc);
// * Imposta il nome, cognome e Hash
ret.forename = myDCC.person.givenName;
ret.surname = myDCC.person.familyName;
ret.hash = crypto.createHash('md5').update(myDCC.person.standardisedGivenName + myDCC.person.standardisedFamilyName + myDCC.dateOfBirth).digest('hex');
// * Valida il Green Pass
const validationResult = await Validator.validate(myDCC, validationMode);
// * Prendi il risultato
ret.valid = validationResult.result;
// * Genera un messaggio di risposta
switch (validationResult.code) {
case Validator.codes.VALID:
ret.message = 'VALIDO IN ITALIA ED EUROPA';
break;
case Validator.codes.TEST_NEEDED:
ret.message = 'TEST RICHIESTO';
break;
case Validator.codes.NOT_VALID:
ret.message = 'NON VALIDO';
break;
case Validator.codes.NOT_VALID_YET:
ret.message = 'NON ANCORA VALIDO';
break;
case Validator.codes.REVOKED:
ret.message = 'GREEN PASS REVOCATO';
break;
case Validator.codes.NOT_EU_DCC:
ret.message = 'GREEN PASS NON EUROPEO';
break;
default:
ret.error = validationResult.message;
break;
}
} catch (error) {
ret.valid = false;
ret.error = error.data !== undefined ? error.data.error.message : error.message;
}
if (ret.valid) res.status(200);
else res.status(400);
res.json(ret);
}
}
onevodev
astagi
DESCRIPTION: On decryption of the embedded zlib archive of green passes of people who has had their QR code re-emitted after their third dose of vaccine, the call on zlib fails to decompress the package, blocking the successive process of validation.
Steps to reproduce the behavior:
npm iand started my personal validator server wrote following literal instructions** of the SDK [view README.md];raw_gp_string}Expected behavior As per usual working behavior, i usually received the values i requested from my validator server: an object from where i extract name (obj.person), surname (same), DoB (obj.date_of_birth) and GP validity (obj.code). Here an example without personal info:
when decrypting a 'third dose' greenpass, i get this:
Screenshots
Food for Thoughts It looks like a zlib decompressing error, but as I'm not directly involved in the green pass creation I can't figure out what exactly changes in a newly-emitted GP. The error, i think, resides in the line 17 -
dcc._coseRaw = zlib.inflateSync(base45Data);It looks like, by printing out the variablebase45datain dcc.js the new GPs are longer byte strings, so it may be related to that, but can't tell for sure The process breaks right on that line and does not go on. Tried on amd64 and aarch64, same issue. I've seen zlib compilation issues on Apple M1 but experimenting on 64bit it seems like the issue remains the same. Perhaps passing an option to the method zlib.inflateSync as per https://nodejs.org/api/zlib.html#zlibinflatesyncbuffer-options might fix the problem, but i only managed to try unsuccessfully.Please let me know if this is the wrong place to open the issue, but i was really unsure about where to post it, and this seemed the most reasonable place. Thanks for eventual aid fixing this. Also, a huge thanks to all developers i am using code from!