@0xkey-io/api-key-stamper 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,5 @@
+# @0xkey-io/api-key-stamper
+
+## 0.1.0
+
+Initial release.

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 0xkey
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,26 @@
+---
+title: "API Key Stamper"
+---
+
+# @0xkey-io/api-key-stamper
+
+[![npm](https://img.shields.io/npm/v/@0xkey-io/api-key-stamper?color=%234C48FF)](https://www.npmjs.com/package/@0xkey-io/api-key-stamper)
+
+This package contains functions to stamp a ZeroXKey request. It is meant to be used with [`@0xkey-io/http`](https://www.npmjs.com/package/@0xkey-io/http)
+
+Usage:
+
+```ts
+import { ApiKeyStamper } from "@0xkey-io/api-key-stamper";
+import { ZeroXKeyClient } from "@0xkey-io/http";
+
+const stamper = new ApiKeyStamper({
+  apiPublicKey: "...",
+  apiPrivateKey: "...",
+});
+
+const httpClient = new ZeroXKeyClient(
+  { baseUrl: "https://api.0xkey.com" },
+  stamper,
+);
+```

package/dist/_kernel/stamper.d.ts

@@ -0,0 +1,29 @@
+/// <reference lib="dom" />
+export type Runtime = "browser" | "node" | "purejs";
+export type TApiKeyStamperConfig = {
+    apiPublicKey: string;
+    apiPrivateKey: string;
+    runtimeOverride?: Runtime | undefined;
+};
+export declare enum SignatureFormat {
+    Der = "der",
+    Raw = "raw"
+}
+export declare const detectRuntime: () => Runtime;
+export declare const signWithApiKey: (input: {
+    content: string;
+    publicKey: string;
+    privateKey: string;
+}, runtimeOverride?: Runtime | undefined) => Promise<string>;
+export declare class ApiKeyStamper {
+    apiPublicKey: string;
+    apiPrivateKey: string;
+    runtimeOverride?: Runtime | undefined;
+    constructor(config: TApiKeyStamperConfig);
+    stamp(payload: string): Promise<{
+        stampHeaderName: "X-Stamp";
+        stampHeaderValue: string;
+    }>;
+    sign(payload: string, format: SignatureFormat): Promise<string>;
+}
+//# sourceMappingURL=stamper.d.ts.map

package/dist/_kernel/stamper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamper.d.ts","sourceRoot":"","sources":["../../src/_kernel/stamper.ts"],"names":[],"mappings":";AAUA,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEpD,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC,CAAC;AAEF,oBAAY,eAAe;IACzB,GAAG,QAAQ;IACX,GAAG,QAAQ;CACZ;AAaD,eAAO,MAAM,aAAa,QAAO,OAUhC,CAAC;AAEF,eAAO,MAAM,cAAc,UAClB;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,oBACiB,OAAO,GAAG,SAAS,KACpC,QAAQ,MAAM,CAahB,CAAC;AAEF,qBAAa,aAAa;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;gBAE1B,MAAM,EAAE,oBAAoB;IAMlC,KAAK,CAAC,OAAO,EAAE,MAAM;;;;IAsBrB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe;CA4BpD"}

package/dist/_kernel/stamping.d.ts

@@ -0,0 +1,6 @@
+export declare const STAMP_HEADER_API_KEY = "X-Stamp";
+export declare function createStampResult<N extends string>(stampHeaderName: N, stampHeaderValue: string): {
+    stampHeaderName: N;
+    stampHeaderValue: string;
+};
+//# sourceMappingURL=stamping.d.ts.map

package/dist/_kernel/stamping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamping.d.ts","sourceRoot":"","sources":["../../src/_kernel/stamping.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EAChD,eAAe,EAAE,CAAC,EAClB,gBAAgB,EAAE,MAAM,GACvB;IAAE,eAAe,EAAE,CAAC,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAElD"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { ApiKeyStamper, SignatureFormat, detectRuntime, signWithApiKey, type Runtime, type TApiKeyStamperConfig, } from "./_kernel/stamper";
+export { pointDecode } from "./tink/elliptic_curves";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,KAAK,OAAO,EACZ,KAAK,oBAAoB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,371 @@
+'use strict';
+
+var encoding = require('@0xkey-io/encoding');
+var crypto$1 = require('@0xkey-io/crypto');
+
+function createStampResult(stampHeaderName, stampHeaderValue) {
+    return { stampHeaderName, stampHeaderValue };
+}
+
+/// <reference lib="dom" />
+const stampHeaderName = "X-Stamp";
+exports.SignatureFormat = void 0;
+(function (SignatureFormat) {
+    SignatureFormat["Der"] = "der";
+    SignatureFormat["Raw"] = "raw";
+})(exports.SignatureFormat || (exports.SignatureFormat = {}));
+const isCryptoEnabledBrowser = typeof window !== "undefined" &&
+    typeof window.document !== "undefined" &&
+    typeof crypto !== "undefined" &&
+    typeof crypto.subtle !== "undefined";
+const isNode = typeof process !== "undefined" &&
+    process.versions != null &&
+    process.versions.node != null;
+const detectRuntime = () => {
+    if (isCryptoEnabledBrowser) {
+        return "browser";
+    }
+    if (isNode) {
+        return "node";
+    }
+    return "purejs";
+};
+const signWithApiKey = async (input, runtimeOverride) => {
+    const runtime = runtimeOverride ?? detectRuntime();
+    switch (runtime) {
+        case "browser":
+            return (await Promise.resolve().then(function () { return require('./webcrypto-BM8R-Kt_.js'); })).signWithApiKey(input);
+        case "node":
+            return (await Promise.resolve().then(function () { return require('./nodecrypto-BEvYdLDk.js'); })).signWithApiKey(input);
+        case "purejs":
+            return (await Promise.resolve().then(function () { return require('./purejs-BG8ixYIu.js'); })).signWithApiKey(input);
+        default:
+            throw new Error(`Unsupported runtime: ${runtime}`);
+    }
+};
+class ApiKeyStamper {
+    constructor(config) {
+        this.apiPublicKey = config.apiPublicKey;
+        this.apiPrivateKey = config.apiPrivateKey;
+        this.runtimeOverride = config.runtimeOverride;
+    }
+    async stamp(payload) {
+        const signature = await signWithApiKey({
+            publicKey: this.apiPublicKey,
+            privateKey: this.apiPrivateKey,
+            content: payload,
+        }, this.runtimeOverride);
+        const stamp = {
+            publicKey: this.apiPublicKey,
+            scheme: "SIGNATURE_SCHEME_TK_API_P256",
+            signature,
+        };
+        return createStampResult(stampHeaderName, encoding.stringToBase64urlString(JSON.stringify(stamp)));
+    }
+    async sign(payload, format) {
+        switch (format) {
+            case exports.SignatureFormat.Raw: {
+                const derSignature = await signWithApiKey({
+                    publicKey: this.apiPublicKey,
+                    privateKey: this.apiPrivateKey,
+                    content: payload,
+                }, this.runtimeOverride);
+                const raw = crypto$1.fromDerSignature(derSignature);
+                return encoding.uint8ArrayToHexString(raw);
+            }
+            case exports.SignatureFormat.Der: {
+                return signWithApiKey({
+                    publicKey: this.apiPublicKey,
+                    privateKey: this.apiPrivateKey,
+                    content: payload,
+                }, this.runtimeOverride);
+            }
+            default:
+                throw new Error(`Unsupported signature format: ${format}`);
+        }
+    }
+}
+
+/**
+ * Code modified from https://github.com/google/tink/blob/6f74b99a2bfe6677e3670799116a57268fd067fa/javascript/subtle/bytes.ts
+ *
+ * @license
+ * Copyright 2020 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Converts the hex string to a byte array.
+ *
+ * @param hex the input
+ * @return the byte array output
+ * @throws {!Error}
+ * @static
+ */
+function fromHex(hex) {
+    if (hex.length % 2 != 0) {
+        throw new Error("Hex string length must be multiple of 2");
+    }
+    const arr = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        arr[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return arr;
+}
+/**
+ * Converts a byte array to hex.
+ *
+ * @param bytes the byte array input
+ * @return hex the output
+ * @static
+ */
+function toHex(bytes) {
+    let result = "";
+    for (let i = 0; i < bytes.length; i++) {
+        const hexByte = bytes[i].toString(16);
+        result += hexByte.length > 1 ? hexByte : "0" + hexByte;
+    }
+    return result;
+}
+/**
+ * Base64 encode a byte array.
+ *
+ * @param bytes the byte array input
+ * @param opt_webSafe True indicates we should use the alternative
+ *     alphabet, which does not require escaping for use in URLs.
+ * @return base64 output
+ * @static
+ */
+function toBase64(bytes, opt_webSafe) {
+    const encoded = btoa(
+    /* padding */
+    toByteString(bytes)).replace(/=/g, "");
+    {
+        return encoded.replace(/\+/g, "-").replace(/\//g, "_");
+    }
+}
+/**
+ * Turns a byte array into the string given by the concatenation of the
+ * characters to which the numbers correspond. Each byte is corresponding to a
+ * character. Does not support multi-byte characters.
+ *
+ * @param bytes Array of numbers representing
+ *     characters.
+ * @return Stringification of the array.
+ */
+function toByteString(bytes) {
+    let str = "";
+    for (let i = 0; i < bytes.length; i += 1) {
+        str += String.fromCharCode(bytes[i]);
+    }
+    return str;
+}
+
+/**
+ * Code modified from https://github.com/google/tink/blob/6f74b99a2bfe6677e3670799116a57268fd067fa/javascript/subtle/elliptic_curves.ts
+ * - The implementation of integerToByteArray has been modified to augment the resulting byte array to a certain length.
+ * - The implementation of PointDecode has been modified to decode both compressed and uncompressed points by checking for correct format
+ * - Method isP256CurvePoint added to check whether an uncompressed point is valid
+ *
+ * @license
+ * Copyright 2020 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * P-256 only
+ */
+function getModulus() {
+    // https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf (Appendix D).
+    return BigInt("115792089210356248762697446949407573530086143415290314195533631308" +
+        "867097853951");
+}
+/**
+ * P-256 only
+ */
+function getB() {
+    // https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf (Appendix D).
+    return BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b");
+}
+/** Converts byte array to bigint. */
+function byteArrayToInteger(bytes) {
+    return BigInt("0x" + toHex(bytes));
+}
+/** Converts bigint to byte array. */
+function integerToByteArray(i, length) {
+    const input = i.toString(16);
+    const numHexChars = length * 2;
+    let padding = "";
+    if (numHexChars < input.length) {
+        throw new Error(`cannot pack integer with ${input.length} hex chars into ${length} bytes`);
+    }
+    else {
+        padding = "0".repeat(numHexChars - input.length);
+    }
+    return fromHex(padding + input);
+}
+/** Returns true iff the ith bit (in lsb order) of n is set. */
+function testBit(n, i) {
+    const m = BigInt(1) << BigInt(i);
+    return (n & m) !== BigInt(0);
+}
+/**
+ * Computes a modular exponent.  Since JavaScript BigInt operations are not
+ * constant-time, information about the inputs could leak.  Therefore, THIS
+ * METHOD SHOULD ONLY BE USED FOR POINT DECOMPRESSION.
+ *
+ * @param b base
+ * @param exp exponent
+ * @param p modulus
+ * @return b^exp modulo p
+ */
+function modPow(b, exp, p) {
+    if (exp === BigInt(0)) {
+        return BigInt(1);
+    }
+    let result = b;
+    const exponentBitString = exp.toString(2);
+    for (let i = 1; i < exponentBitString.length; ++i) {
+        result = (result * result) % p;
+        if (exponentBitString[i] === "1") {
+            result = (result * b) % p;
+        }
+    }
+    return result;
+}
+/**
+ * Computes a square root modulo an odd prime.  Since timing and exceptions can
+ * leak information about the inputs, THIS METHOD SHOULD ONLY BE USED FOR
+ * POINT DECOMPRESSION.
+ *
+ * @param x square
+ * @param p prime modulus
+ * @return square root of x modulo p
+ */
+function modSqrt(x, p) {
+    if (p <= BigInt(0)) {
+        throw new Error("p must be positive");
+    }
+    const base = x % p;
+    // The currently supported NIST curves P-256, P-384, and P-521 all satisfy
+    // p % 4 == 3.  However, although currently a no-op, the following check
+    // should be left in place in case other curves are supported in the future.
+    if (testBit(p, 0) && /* istanbul ignore next */ testBit(p, 1)) {
+        // Case p % 4 == 3 (applies to NIST curves P-256, P-384, and P-521)
+        // q = (p + 1) / 4
+        const q = (p + BigInt(1)) >> BigInt(2);
+        const squareRoot = modPow(base, q, p);
+        if ((squareRoot * squareRoot) % p !== base) {
+            throw new Error("could not find a modular square root");
+        }
+        return squareRoot;
+    }
+    // Skipping other elliptic curve types that require Cipolla's algorithm.
+    throw new Error("unsupported modulus value");
+}
+/**
+ * Computes the y-coordinate of a point on an elliptic curve given its
+ * x-coordinate.  Since timing and exceptions can leak information about the
+ * inputs, THIS METHOD SHOULD ONLY BE USED FOR POINT DECOMPRESSION.
+ *
+ * P-256 only
+ *
+ * @param x x-coordinate
+ * @param lsb least significant bit of the y-coordinate
+ * @return y-coordinate
+ */
+function getY(x, lsb) {
+    const p = getModulus();
+    const a = p - BigInt(3);
+    const b = getB();
+    const rhs = ((x * x + a) * x + b) % p;
+    let y = modSqrt(rhs, p);
+    if (lsb !== testBit(y, 0)) {
+        y = (p - y) % p;
+    }
+    return y;
+}
+/**
+ *
+ * Given x and y coordinates of a JWK, checks whether these are valid points on
+ * the P-256 elliptic curve.
+ *
+ * P-256 only
+ *
+ * @param x x-coordinate
+ * @param y y-coordinate
+ * @return boolean validity
+ */
+function isP256CurvePoint(x, y) {
+    const p = getModulus();
+    const a = p - BigInt(3);
+    const b = getB();
+    const rhs = ((x * x + a) * x + b) % p;
+    const lhs = y ** BigInt(2) % p;
+    return lhs === rhs;
+}
+/**
+ * Decodes a public key in _compressed_ OR _uncompressed_ format.
+ * Augmented to ensure that the x and y components are padded to fit 32 bytes.
+ *
+ * P-256 only
+ */
+function pointDecode(point) {
+    const fieldSize = fieldSizeInBytes();
+    const compressedLength = fieldSize + 1;
+    const uncompressedLength = 2 * fieldSize + 1;
+    if (point.length !== compressedLength &&
+        point.length !== uncompressedLength) {
+        throw new Error("Invalid length: point is not in compressed or uncompressed format");
+    }
+    // Decodes point if its length and first bit match the compressed format
+    if ((point[0] === 2 || point[0] === 3) && point.length == compressedLength) {
+        const lsb = point[0] === 3; // point[0] must be 2 (false) or 3 (true).
+        const x = byteArrayToInteger(point.subarray(1, point.length));
+        const p = getModulus();
+        if (x < BigInt(0) || x >= p) {
+            throw new Error("x is out of range");
+        }
+        const y = getY(x, lsb);
+        const result = {
+            kty: "EC",
+            crv: "P-256",
+            x: toBase64(integerToByteArray(x, 32)),
+            y: toBase64(integerToByteArray(y, 32)),
+            ext: true,
+        };
+        return result;
+        // Decodes point if its length and first bit match the uncompressed format
+    }
+    else if (point[0] === 4 && point.length == uncompressedLength) {
+        const x = byteArrayToInteger(point.subarray(1, fieldSize + 1));
+        const y = byteArrayToInteger(point.subarray(fieldSize + 1, 2 * fieldSize + 1));
+        const p = getModulus();
+        if (x < BigInt(0) ||
+            x >= p ||
+            y < BigInt(0) ||
+            y >= p ||
+            !isP256CurvePoint(x, y)) {
+            throw new Error("invalid uncompressed x and y coordinates");
+        }
+        const result = {
+            kty: "EC",
+            crv: "P-256",
+            x: toBase64(integerToByteArray(x, 32)),
+            y: toBase64(integerToByteArray(y, 32)),
+            ext: true,
+        };
+        return result;
+    }
+    throw new Error("invalid format");
+}
+/**
+ * P-256 only
+ */
+function fieldSizeInBytes() {
+    return 32;
+}
+
+exports.ApiKeyStamper = ApiKeyStamper;
+exports.detectRuntime = detectRuntime;
+exports.pointDecode = pointDecode;
+exports.signWithApiKey = signWithApiKey;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/_kernel/stamping.ts","../src/_kernel/stamper.ts","../src/tink/bytes.ts","../src/tink/elliptic_curves.ts"],"sourcesContent":[null,null,null,null],"names":["SignatureFormat","stringToBase64urlString","fromDerSignature","uint8ArrayToHexString","Bytes.toHex","Bytes.fromHex","Bytes.toBase64"],"mappings":";;;;;AAEM,SAAU,iBAAiB,CAC/B,eAAkB,EAClB,gBAAwB,EAAA;AAExB,IAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE;AAC9C;;ACPA;AAQA,MAAM,eAAe,GAAG,SAAS;AAUrBA;AAAZ,CAAA,UAAY,eAAe,EAAA;AACzB,IAAA,eAAA,CAAA,KAAA,CAAA,GAAA,KAAW;AACX,IAAA,eAAA,CAAA,KAAA,CAAA,GAAA,KAAW;AACb,CAAC,EAHWA,uBAAe,KAAfA,uBAAe,GAAA,EAAA,CAAA,CAAA;AAK3B,MAAM,sBAAsB,GAC1B,OAAO,MAAM,KAAK,WAAW;AAC7B,IAAA,OAAO,MAAM,CAAC,QAAQ,KAAK,WAAW;IACtC,OAAO,MAAM,KAAK,WAAW;AAC7B,IAAA,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW;AAEtC,MAAM,MAAM,GACV,OAAO,OAAO,KAAK,WAAW;IAC9B,OAAO,CAAC,QAAQ,IAAI,IAAI;AACxB,IAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI;AAExB,MAAM,aAAa,GAAG,MAAc;IACzC,IAAI,sBAAsB,EAAE;AAC1B,QAAA,OAAO,SAAS;IAClB;IAEA,IAAI,MAAM,EAAE;AACV,QAAA,OAAO,MAAM;IACf;AAEA,IAAA,OAAO,QAAQ;AACjB;AAEO,MAAM,cAAc,GAAG,OAC5B,KAIC,EACD,eAAqC,KAClB;AACnB,IAAA,MAAM,OAAO,GAAG,eAAe,IAAI,aAAa,EAAE;IAElD,QAAQ,OAAO;AACb,QAAA,KAAK,SAAS;AACZ,YAAA,OAAO,CAAC,MAAM,oDAAO,yBAAc,KAAC,EAAE,cAAc,CAAC,KAAK,CAAC;AAC7D,QAAA,KAAK,MAAM;AACT,YAAA,OAAO,CAAC,MAAM,oDAAO,0BAAe,KAAC,EAAE,cAAc,CAAC,KAAK,CAAC;AAC9D,QAAA,KAAK,QAAQ;AACX,YAAA,OAAO,CAAC,MAAM,oDAAO,sBAAW,KAAC,EAAE,cAAc,CAAC,KAAK,CAAC;AAC1D,QAAA;AACE,YAAA,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAA,CAAE,CAAC;;AAExD;MAEa,aAAa,CAAA;AAKxB,IAAA,WAAA,CAAY,MAA4B,EAAA;AACtC,QAAA,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY;AACvC,QAAA,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa;AACzC,QAAA,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe;IAC/C;IAEA,MAAM,KAAK,CAAC,OAAe,EAAA;AACzB,QAAA,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC;YACE,SAAS,EAAE,IAAI,CAAC,YAAY;YAC5B,UAAU,EAAE,IAAI,CAAC,aAAa;AAC9B,YAAA,OAAO,EAAE,OAAO;AACjB,SAAA,EACD,IAAI,CAAC,eAAe,CACrB;AAED,QAAA,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,IAAI,CAAC,YAAY;AAC5B,YAAA,MAAM,EAAE,8BAA8B;YACtC,SAAS;SACV;AAED,QAAA,OAAO,iBAAiB,CACtB,eAAe,EACfC,gCAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC/C;IACH;AAEA,IAAA,MAAM,IAAI,CAAC,OAAe,EAAE,MAAuB,EAAA;QACjD,QAAQ,MAAM;AACZ,YAAA,KAAKD,uBAAe,CAAC,GAAG,EAAE;AACxB,gBAAA,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC;oBACE,SAAS,EAAE,IAAI,CAAC,YAAY;oBAC5B,UAAU,EAAE,IAAI,CAAC,aAAa;AAC9B,oBAAA,OAAO,EAAE,OAAO;AACjB,iBAAA,EACD,IAAI,CAAC,eAAe,CACrB;AACD,gBAAA,MAAM,GAAG,GAAGE,yBAAgB,CAAC,YAAY,CAAC;AAC1C,gBAAA,OAAOC,8BAAqB,CAAC,GAAG,CAAC;YACnC;AACA,YAAA,KAAKH,uBAAe,CAAC,GAAG,EAAE;AACxB,gBAAA,OAAO,cAAc,CACnB;oBACE,SAAS,EAAE,IAAI,CAAC,YAAY;oBAC5B,UAAU,EAAE,IAAI,CAAC,aAAa;AAC9B,oBAAA,OAAO,EAAE,OAAO;AACjB,iBAAA,EACD,IAAI,CAAC,eAAe,CACrB;YACH;AACA,YAAA;AACE,gBAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAA,CAAE,CAAC;;IAEhE;AACD;;ACjID;;;;;;AAMG;AAEH;;;;;;;AAOG;AACG,SAAU,OAAO,CAAC,GAAW,EAAA;IACjC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE;AACvB,QAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;IAC5D;IACA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1C,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;QACtC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD;AACA,IAAA,OAAO,GAAG;AACZ;AAEA;;;;;;AAMG;AACG,SAAU,KAAK,CAAC,KAAiB,EAAA;IACrC,IAAI,MAAM,GAAG,EAAE;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtC,QAAA,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,GAAG,GAAG,GAAG,OAAO;IACxD;AACA,IAAA,OAAO,MAAM;AACf;AAEA;;;;;;;;AAQG;AACG,SAAU,QAAQ,CAAC,KAAiB,EAAE,WAAqB,EAAA;IAC/D,MAAM,OAAO,GAAG,IAAI;;IAElB,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACF;AACf,QAAA,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;IACxD;AAEF;AAEA;;;;;;;;AAQG;AACG,SAAU,YAAY,CAAC,KAAiB,EAAA;IAC5C,IAAI,GAAG,GAAG,EAAE;AACZ,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;QACxC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;IACvC;AACA,IAAA,OAAO,GAAG;AACZ;;AC9EA;;;;;;;;;AASG;AAIH;;AAEG;AACH,SAAS,UAAU,GAAA;;IAEjB,OAAO,MAAM,CACX,oEAAoE;AAClE,QAAA,cAAc,CACjB;AACH;AAEA;;AAEG;AACH,SAAS,IAAI,GAAA;;AAEX,IAAA,OAAO,MAAM,CACX,oEAAoE,CACrE;AACH;AAEA;AACA,SAAS,kBAAkB,CAAC,KAAiB,EAAA;IAC3C,OAAO,MAAM,CAAC,IAAI,GAAGI,KAAW,CAAC,KAAK,CAAC,CAAC;AAC1C;AAEA;AACA,SAAS,kBAAkB,CAAC,CAAS,EAAE,MAAc,EAAA;IACnD,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC5B,IAAA,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE;AAChB,IAAA,IAAI,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,CAAA,yBAAA,EAA4B,KAAK,CAAC,MAAM,CAAA,gBAAA,EAAmB,MAAM,CAAA,MAAA,CAAQ,CAC1E;IACH;SAAO;QACL,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;IAClD;IACA,OAAOC,OAAa,CAAC,OAAO,GAAG,KAAK,CAAC;AACvC;AAEA;AACA,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS,EAAA;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC;AAC9B;AAEA;;;;;;;;;AASG;AACH,SAAS,MAAM,CAAC,CAAS,EAAE,GAAW,EAAE,CAAS,EAAA;AAC/C,IAAA,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE;AACrB,QAAA,OAAO,MAAM,CAAC,CAAC,CAAC;IAClB;IACA,IAAI,MAAM,GAAG,CAAC;IACd,MAAM,iBAAiB,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;QACjD,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC;AAC9B,QAAA,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;YAChC,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC;QAC3B;IACF;AACA,IAAA,OAAO,MAAM;AACf;AAEA;;;;;;;;AAQG;AACH,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS,EAAA;AACnC,IAAA,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;AAClB,QAAA,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC;IACvC;AACA,IAAA,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC;;;;AAIlB,IAAA,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,+BAA+B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;;;AAG7D,QAAA,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,CAAC,KAAK,IAAI,EAAE;AAC1C,YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;QACzD;AACA,QAAA,OAAO,UAAU;IACnB;;AAEA,IAAA,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC;AAC9C;AAEA;;;;;;;;;;AAUG;AACH,SAAS,IAAI,CAAC,CAAS,EAAE,GAAY,EAAA;AACnC,IAAA,MAAM,CAAC,GAAG,UAAU,EAAE;IACtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACvB,IAAA,MAAM,CAAC,GAAG,IAAI,EAAE;AAChB,IAAA,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvB,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACzB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjB;AACA,IAAA,OAAO,CAAC;AACV;AAEA;;;;;;;;;;AAUG;AACH,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS,EAAA;AAC5C,IAAA,MAAM,CAAC,GAAG,UAAU,EAAE;IACtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACvB,IAAA,MAAM,CAAC,GAAG,IAAI,EAAE;AAChB,IAAA,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9B,OAAO,GAAG,KAAK,GAAG;AACpB;AAEA;;;;;AAKG;AACG,SAAU,WAAW,CAAC,KAAiB,EAAA;AAC3C,IAAA,MAAM,SAAS,GAAG,gBAAgB,EAAE;AACpC,IAAA,MAAM,gBAAgB,GAAG,SAAS,GAAG,CAAC;AACtC,IAAA,MAAM,kBAAkB,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC;AAC5C,IAAA,IACE,KAAK,CAAC,MAAM,KAAK,gBAAgB;AACjC,QAAA,KAAK,CAAC,MAAM,KAAK,kBAAkB,EACnC;AACA,QAAA,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE;IACH;;IAEA,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,IAAI,gBAAgB,EAAE;QAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3B,QAAA,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC7D,QAAA,MAAM,CAAC,GAAG,UAAU,EAAE;QACtB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC;QACtC;QACA,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AACtB,QAAA,MAAM,MAAM,GAAe;AACzB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,GAAG,EAAE,OAAO;AACZ,YAAA,CAAC,EAAEC,QAAc,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAqB,CAAC;AAChE,YAAA,CAAC,EAAEA,QAAc,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAqB,CAAC;AAChE,YAAA,GAAG,EAAE,IAAI;SACV;AACD,QAAA,OAAO,MAAM;;IAEf;AAAO,SAAA,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,kBAAkB,EAAE;AAC/D,QAAA,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;AAC9D,QAAA,MAAM,CAAC,GAAG,kBAAkB,CAC1B,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CACjD;AACD,QAAA,MAAM,CAAC,GAAG,UAAU,EAAE;AACtB,QAAA,IACE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACb,YAAA,CAAC,IAAI,CAAC;AACN,YAAA,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACb,YAAA,CAAC,IAAI,CAAC;AACN,YAAA,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EACvB;AACA,YAAA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC;QAC7D;AACA,QAAA,MAAM,MAAM,GAAe;AACzB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,GAAG,EAAE,OAAO;AACZ,YAAA,CAAC,EAAEA,QAAc,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAqB,CAAC;AAChE,YAAA,CAAC,EAAEA,QAAc,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAqB,CAAC;AAChE,YAAA,GAAG,EAAE,IAAI;SACV;AACD,QAAA,OAAO,MAAM;IACf;AACA,IAAA,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC;AACnC;AAEA;;AAEG;AACH,SAAS,gBAAgB,GAAA;AACvB,IAAA,OAAO,EAAE;AACX;;;;;;;"}