pocketenv / apps / sandbox / src / lib / decrypt.ts

import sodium from "libsodium-wrappers";
import process from "node:process";

await sodium.ready;

export default function decrypt(value: string): string {
  const sealed = sodium.from_base64(
    value,
    sodium.base64_variants.URLSAFE_NO_PADDING,
  );
  let decryptedBytes = sodium.crypto_box_seal_open(
    sealed,
    sodium.from_hex(process.env.PUBLIC_KEY!),
    sodium.from_hex(process.env.PRIVATE_KEY!),
  );
  return sodium.to_string(decryptedBytes);
}