Use atob() and btoa() instead of external package

Author: aron

lib/util.js

@@ -1,5 +1,3 @@
-const base64 = require("@hexagon/base64");
-
 const ApiError = require("./error");
 
 /**
@@ -101,14 +99,45 @@ async function createHMACSHA256(secret, data) {
 
   const key = await crypto.subtle.importKey(
     "raw",
-    base64.toArrayBuffer(secret),
+    base64ToBytes(secret),
     { name: "HMAC", hash: "SHA-256" },
     false,
     ["sign"]
   );
 
   const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(data));
-  return base64.fromArrayBuffer(signature);
+  return bytesToBase64(signature);
+}
+
+/**
+ * Convert a base64 encoded string into bytes.
+ *
+ * @param {string} the base64 encoded string
+ * @return {Uint8Array}
+ *
+ * Two functions for encoding/decoding base64 strings using web standards. Not
+ * intended to be used to encode/decode arbitrary string data.
+ * See: https://developer.mozilla.org/en-US/docs/Glossary/Base64#javascript_support
+ * See: https://stackoverflow.com/a/31621532
+ *
+ * Performance might take a hit because of the conversion to string and then to binary,
+ * if this is the case we might want to look at an alternative solution.
+ * See: https://jsben.ch/wnaZC
+ */
+function base64ToBytes(base64) {
+  return Uint8Array.from(atob(base64), (m) => m.codePointAt(0));
+}
+
+/**
+ * Convert a base64 encoded string into bytes.
+ *
+ * See {@link base64ToBytes} for caveats.
+ *
+ * @param {Uint8Array | ArrayBuffer} the base64 encoded string
+ * @return {string}
+ */
+function bytesToBase64(bytes) {
+  return btoa(String.fromCharCode.apply(null, new Uint8Array(bytes)));
 }
 
 /**

package-lock.json

@@ -45,8 +45,5 @@
     "publint": "^0.2.7",
     "ts-jest": "^29.1.0",
     "typescript": "^5.0.2"
-  },
-  "dependencies": {
-    "@hexagon/base64": "^1.1.28"
   }
 }