keeweb-plugins/scripts/sign.js

const fs = require('fs');
const signer = require('pkcs15-smartcard-sign');
const keytar = require('keytar');

const verifyKey = fs.readFileSync('keys/public-key.pem');
const key = '02';

function getPin() {
    if (getPin.pin) {
        return Promise.resolve(getPin.pin);
    }
    return keytar.getPassword('keeweb.pin', 'keeweb').then(pass => {
        if (pass) {
            getPin.pin = pass;
            return pass;
        } else {
            throw 'Cannot find PIN';
        }
    });
}

module.exports = function sign(data) {
    return getPin().then(pin => signer.sign({ data, verifyKey, pin, key }).then(data => data.toString('base64')));
};