From 460a044f6cc295fba4887bbc968ff0760eadfc31 Mon Sep 17 00:00:00 2001
From: Jan Kassens <jkassens@fb.com>
Date: Mon, 5 Dec 2016 16:17:07 -0800
Subject: [PATCH] delete signedsource.js

Summary:
This module is not actually used inside of React Native. Projects that use this,
can now depend on https://www.npmjs.com/package/signedsource

Reviewed By: yungsters

Differential Revision: D4272511

fbshipit-source-id: 93eb74aa4ccfa8ef8743de2cfa92b5403de91e0a
---
 local-cli/bundle/signedsource.js | 117 -------------------------------
 1 file changed, 117 deletions(-)
 delete mode 100644 local-cli/bundle/signedsource.js

diff --git a/local-cli/bundle/signedsource.js b/local-cli/bundle/signedsource.js
deleted file mode 100644
index 94b51ce9e..000000000
--- a/local-cli/bundle/signedsource.js
+++ /dev/null
@@ -1,117 +0,0 @@
-/**
- * Copyright (c) 2015-present, Facebook, Inc.
- * All rights reserved.
- *
- * This source code is licensed under the BSD-style license found in the
- * LICENSE file in the root directory of this source tree. An additional grant
- * of patent rights can be found in the PATENTS file in the same directory.
- */
-'use strict';
-
-const crypto = require('crypto');
-
-const GENERATED = '@' + 'generated';
-const OLDTOKEN = '<<SignedSource::*O*zOeWoEQle#+L!plEphiEmie@I>>';
-const NEWTOKEN = '<<SignedSource::*O*zOeWoEQle#+L!plEphiEmie@IsG>>';
-const TOKENS = [NEWTOKEN, OLDTOKEN];
-const PATTERN = new RegExp(`${GENERATED} (?:SignedSource<<([a-f0-9]{32})>>)`);
-
-const TokenNotFoundError = new Error(
-  `SignedSource.signFile(...): Cannot sign file without token: ${NEWTOKEN}`
-);
-
-function hash(data, encoding) {
-  const md5sum = crypto.createHash('md5');
-  md5sum.update(data, encoding);
-  return md5sum.digest('hex');
-}
-
-/**
- * Utility for signing and verifying the signature of a file. This is useful for
- * ensuring that the contents of a generated file are not contaminated by manual
- * changes. Example usage:
- *
- *   const myFile = `
- *     // ${SignedSource.getSigningToken()}
- *
- *     console.log('My generated file.');
- *   `;
- *   const mySignedFile = SignedSource.signFile(myFile);
- *
- */
-const SignedSource = {
-  TokenNotFoundError,
-
-  /**
-   * Gets the signing token to be embedded in the file you wish to be signed.
-   */
-  getSigningToken() {
-    return `${GENERATED} ${NEWTOKEN}`;
-  },
-
-  /**
-   * Checks whether a file is signed *without* verifying the signature.
-   */
-  isSigned(data) {
-    return !PATTERN.exec(data);
-  },
-
-  /**
-   * Signs a source file which contains a signing token. Signing modifies only
-   * the signing token, so the token should be placed inside a comment in order
-   * for signing to not change code semantics.
-   */
-  signFile(data) {
-    if (!data.includes(NEWTOKEN)) {
-      if (SignedSource.isSigned(data)) {
-        // Signing a file that was previously signed.
-        data = data.replace(PATTERN, SignedSource.getSigningToken());
-      } else {
-        throw TokenNotFoundError;
-      }
-    }
-    return data.replace(NEWTOKEN, `SignedSource<<${hash(data, 'utf8')}>>`);
-  },
-
-  /**
-   * Verifies the signature in a signed file.
-   */
-  verifySignature(data) {
-    const matches = PATTERN.exec(data);
-    if (!matches) {
-      throw new Error(
-        'SignedSource.verifySignature(...): Cannot verify signature of an ' +
-        'unsigned file.'
-      );
-    }
-    const actual = matches[1];
-    // Replace signature with `NEWTOKEN` and hash to see if it matches the hash
-    // in the file. For backwards compatibility, also try `OLDTOKEN`.
-    return TOKENS.some(token => {
-      const unsigned = data.replace(PATTERN, `${GENERATED} ${token}`);
-      return hash(unsigned, 'utf8') === actual;
-    });
-  },
-};
-
-// @deprecated
-SignedSource.SIGN_OK = {message: 'ok'};
-SignedSource.SIGN_INVALID = new Error('invalid');
-SignedSource.SIGN_UNSIGNED = new Error('unsigned');
-SignedSource.signing_token = SignedSource.getSigningToken;
-SignedSource.is_signed = SignedSource.isSigned;
-SignedSource.sign = data => ({
-  first_time: data.includes(NEWTOKEN),
-  signed_data: SignedSource.signFile(data),
-});
-SignedSource.verify_signature = data => {
-  try {
-    return SignedSource.verifySignature(data)
-      ? SignedSource.SIGN_OK
-      : SignedSource.SIGN_INVALID;
-  } catch (_) {
-    return SignedSource.SIGN_UNSIGNED;
-  }
-};
-
-module.exports = SignedSource;