removed the need for @lukeed/csprng

package.json

@@ -22,7 +22,6 @@
     "watch": "tsc --build --watch"
   },
   "dependencies": {
-    "@lukeed/csprng": "^1.1.0",
     "buffer": "^6.0.3",
     "date-fns-tz": "^2.0.0",
     "hash.js": "^1.1.7",
@@ -32,7 +31,6 @@
     "@aws-sdk/client-cognito-identity-provider": "^3.465.0",
     "@types/jsbn": "^1.2.33",
     "@types/jsdom": "^21.1.5",
-    "@types/randombytes": "^2.0.3",
     "@typescript-eslint/eslint-plugin": "^6.11.0",
     "@typescript-eslint/parser": "^6.11.0",
     "eslint": "^8.54.0",

src/utils.ts

@@ -2,7 +2,6 @@ import hashJs from 'hash.js';
 import { BigInteger } from 'jsbn';
 import { Buffer } from 'buffer';
 import formatInTimeZone from 'date-fns-tz/formatInTimeZone';
-import { random } from '@lukeed/csprng';
 
 const initN =
   'FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1' +
@@ -156,7 +155,7 @@ export function decodeJwt<T = unknown>(jwt: string) {
 }
 
 export async function randomBytes(num: number) {
-  return random(num);
+  return Buffer.from(crypto.getRandomValues(new Uint8Array(num)));
 }
 
 export function formatTimestamp(date: Date) {
@@ -174,3 +173,27 @@ export function calculateSecretHash(clientSecret: string, userPoolClientId: stri
 
   return hash;
 }
+
+export async function digest(algorithm: AlgorithmIdentifier, str: string) {
+  const buffer = new TextEncoder().encode(str);
+  const hashBuffer = await crypto.subtle.digest(algorithm, buffer);
+  return Array.from(new Uint8Array(hashBuffer))
+    .map(b => b.toString(16).padStart(2, '0'))
+    .join('');
+}
+
+export async function hmac(algorithm: AlgorithmIdentifier, key: string, data: string) {
+  const enc = new TextEncoder();
+  const cryptoKey = await crypto.subtle.importKey(
+    'raw',
+    enc.encode(key),
+    {
+      name: 'HMAC',
+      hash: algorithm
+    },
+    false,
+    ['sign']
+  );
+  const signature = await crypto.subtle.sign(algorithm, cryptoKey, enc.encode(data));
+  return new Uint8Array(signature);
+}