Vairogs API & MCP

const { pbkdf2Sync } = require('crypto');

const masterPassword = 'lietotāja_galvenā_parole';
const salt = response.salt; // base64 no API

// Atvasināt 256-bitu atslēgu ar PBKDF2
const key = pbkdf2Sync(
  masterPassword,
  Buffer.from(salt, 'base64'),
  100000,  // iterācijas
  32,      // 256 biti
  'sha256'
);

const crypto = require('crypto');

function decryptItem(encryptedData, iv, key) {
  const decipher = crypto.createDecipheriv(
    'aes-256-gcm',
    key,
    Buffer.from(iv, 'base64')
  );

  const encrypted = Buffer.from(encryptedData, 'base64');

  // Pēdējie 16 baiti ir autentifikācijas tags
  const authTag = encrypted.slice(-16);
  const ciphertext = encrypted.slice(0, -16);

  decipher.setAuthTag(authTag);

  const decrypted = Buffer.concat([
    decipher.update(ciphertext),
    decipher.final()
  ]);

  return JSON.parse(decrypted.toString('utf8'));
}

// Lietojums
const item = response.items[0];
const plaintext = decryptItem(item.encryptedData, item.iv, key);
console.log(plaintext);
// { username: '...', password: '...', url: '...', notes: '...' }

const { pbkdf2Sync, createDecipheriv } = require('crypto');

const API_KEY = process.env.VAIROGS_API_KEY;
const MASTER_PASSWORD = process.env.VAIROGS_MASTER_PASSWORD;
const BASE_URL = 'https://vairogs.lv/api/v1';

async function fetchAndDecrypt() {
  // 1. Iegūt ierakstus
  const response = await fetch(`${BASE_URL}/items`, {
    headers: { 'X-API-Key': API_KEY }
  });
  const { data } = await response.json();

  // 2. Atvasināt šifrēšanas atslēgu
  const key = pbkdf2Sync(
    MASTER_PASSWORD,
    Buffer.from(data.salt, 'base64'),
    100000,
    32,
    'sha256'
  );

  // 3. Atšifrēt katru ierakstu
  const decryptedItems = data.items.map(item => {
    try {
      const encrypted = Buffer.from(item.encryptedData, 'base64');
      const iv = Buffer.from(item.iv, 'base64');
      const authTag = encrypted.slice(-16);
      const ciphertext = encrypted.slice(0, -16);

      const decipher = createDecipheriv('aes-256-gcm', key, iv);
      decipher.setAuthTag(authTag);

      const decrypted = Buffer.concat([
        decipher.update(ciphertext),
        decipher.final()
      ]);

      return {
        id: item.id,
        type: item.type,
        title: item.title,
        data: JSON.parse(decrypted.toString())
      };
    } catch (error) {
      return { id: item.id, error: 'Atšifrēšana neizdevās' };
    }
  });

  return decryptedItems;
}

fetchAndDecrypt().then(items => {
  console.log('Atšifrētie ieraksti:', items);
});