@agnostack/verifyd 1.0.0

package/dist/shared/request.js

@@ -0,0 +1,60 @@
+"use strict";
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeURIParts = exports.prepareRequestOptions = exports.getRequestMethod = exports.CONTENT_TYPES = exports.HEADER_CONTENT_TYPE = void 0;
+const display_1 = require("./display");
+const TEMP_HOSTNAME = 'xyz.com';
+const REMOVABLE_KEYS = ['shop', 'host'];
+exports.HEADER_CONTENT_TYPE = 'Content-Type';
+exports.CONTENT_TYPES = {
+    APPLICATION_JSON: 'application/json',
+};
+const getRequestMethod = (body, _method) => {
+    const method = _method !== null && _method !== void 0 ? _method : (body ? 'POST' : 'GET');
+    return (0, display_1.uppercase)(method);
+};
+exports.getRequestMethod = getRequestMethod;
+const prepareRequestOptions = (_a = {}) => {
+    var { method: _method, body: _body, headers: _header } = _a, requestOptions = __rest(_a, ["method", "body", "headers"]);
+    const method = (0, exports.getRequestMethod)(_body, _method);
+    const headers = Object.assign({ [exports.HEADER_CONTENT_TYPE]: exports.CONTENT_TYPES.APPLICATION_JSON }, _header);
+    let body = _body;
+    if (body && headers[exports.HEADER_CONTENT_TYPE].startsWith(exports.CONTENT_TYPES.APPLICATION_JSON)) {
+        body = JSON.stringify((0, display_1.safeParse)(body));
+    }
+    return Object.assign(Object.assign({ method,
+        headers }, (body && (method !== 'GET')) && { body }), requestOptions);
+};
+exports.prepareRequestOptions = prepareRequestOptions;
+const convertToURL = (uri) => {
+    if ((0, display_1.stringEmpty)(uri)) {
+        return undefined;
+    }
+    const protocolRegex = /^(https?:\/\/).+/i;
+    if (!protocolRegex.test(uri)) {
+        return new URL(`https://${TEMP_HOSTNAME}${(0, display_1.ensureLeadingSlash)(uri)}`);
+    }
+    return new URL(uri);
+};
+const normalizeURIParts = (uri) => {
+    const urlObject = convertToURL(uri);
+    if (!urlObject) {
+        return undefined;
+    }
+    REMOVABLE_KEYS.forEach((key) => urlObject.searchParams.delete(key));
+    return Object.assign(Object.assign({}, (urlObject.hostname !== TEMP_HOSTNAME) && {
+        origin: urlObject.origin,
+    }), { pathname: urlObject.pathname, search: urlObject.search });
+};
+exports.normalizeURIParts = normalizeURIParts;
+//# sourceMappingURL=request.js.map

package/dist/shared/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/shared/request.js"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,uCAKkB;AAElB,MAAM,aAAa,GAAG,SAAS,CAAA;AAC/B,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAE1B,QAAA,mBAAmB,GAAG,cAAc,CAAA;AACpC,QAAA,aAAa,GAAG;IAC3B,gBAAgB,EAAE,kBAAkB;CACrC,CAAA;AAEM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IAChD,MAAM,MAAM,GAAG,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAEjD,OAAO,IAAA,mBAAS,EAAC,MAAM,CAAC,CAAA;AAC1B,CAAC,CAAA;AAJY,QAAA,gBAAgB,oBAI5B;AAEM,MAAM,qBAAqB,GAAG,CAAC,KAAwE,EAAE,EAAE,EAAE;QAA9E,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,OAA0B,EAArB,cAAc,cAAnE,6BAAqE,CAAF;IACvG,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAE/C,MAAM,OAAO,mBACX,CAAC,2BAAmB,CAAC,EAAE,qBAAa,CAAC,gBAAgB,IAClD,OAAO,CACX,CAAA;IAED,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,IAAI,IAAI,IAAI,OAAO,CAAC,2BAAmB,CAAC,CAAC,UAAU,CAAC,qBAAa,CAAC,gBAAgB,CAAC,EAAE;QACnF,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,CAAA;KACvC;IAED,qCACE,MAAM;QACN,OAAO,IACJ,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GACxC,cAAc,EAClB;AACH,CAAC,CAAA;AAnBY,QAAA,qBAAqB,yBAmBjC;AAED,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,EAAE;IAC3B,IAAI,IAAA,qBAAW,EAAC,GAAG,CAAC,EAAE;QACpB,OAAO,SAAS,CAAA;KACjB;IAED,MAAM,aAAa,GAAG,mBAAmB,CAAA;IAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC5B,OAAO,IAAI,GAAG,CAAC,WAAW,aAAa,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,EAAE,CAAC,CAAA;KACrE;IAED,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;AACrB,CAAC,CAAA;AAEM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,EAAE;IACvC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,EAAE;QACd,OAAO,SAAS,CAAA;KACjB;IAED,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAEnE,uCACK,CAAC,SAAS,CAAC,QAAQ,KAAK,aAAa,CAAC,IAAI;QAC3C,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,KACD,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAC5B,MAAM,EAAE,SAAS,CAAC,MAAM,IACzB;AACH,CAAC,CAAA;AAfY,QAAA,iBAAiB,qBAe7B"}

package/dist/shared/types.d.ts

@@ -0,0 +1 @@
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":""}

package/dist/shared/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/dist/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":""}

package/dist/shared/verification.d.ts

@@ -0,0 +1,31 @@
+export function getKeysData(publicKey: any, { crypto: _crypto, util: _util }?: {
+    crypto: any;
+    util: any;
+}): Promise<{
+    publicKey: any;
+    ephemeral: {};
+    verification: {
+        derivedSecretKey?: undefined;
+        derivedHMACKey?: undefined;
+    } | {
+        derivedSecretKey: any;
+        derivedHMACKey: any;
+    };
+}>;
+export function prepareVerificationRequest({ keysData: _keysData, disableRecryption: _disableRecryption, crypto: _crypto, util: _util }?: {
+    keysData: any;
+    disableRecryption: any;
+    crypto: any;
+    util: any;
+}): (requestPath: any, { method: rawMethod, body: rawBody, headers: rawHeaders, ...requestOptions }?: {
+    method: any;
+    body: any;
+    headers: any;
+}) => Promise<any[] | undefined>;
+export function processVerificationResponse({ keysData, disableRecryption: _disableRecryption, crypto: _crypto, util: _util }?: {
+    keysData: any;
+    disableRecryption: any;
+    crypto: any;
+    util: any;
+}): (encryptedResponse: any, _derivedSecretKey: any) => Promise<any>;
+//# sourceMappingURL=verification.d.ts.map

package/dist/shared/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/shared/verification.js"],"names":[],"mappings":"AAcO;;;;;;;;;;;;;GAiBN;AAGM;;;;;;;;;iCAkEN;AAEM;;;;;qEAaN"}

package/dist/shared/verification.js

@@ -0,0 +1,91 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processVerificationResponse = exports.prepareVerificationRequest = exports.getKeysData = void 0;
+const datetime_1 = require("./datetime");
+const request_1 = require("./request");
+const display_1 = require("./display");
+const WebCrypto_1 = __importDefault(require("./WebCrypto"));
+const getKeysData = (publicKey, { crypto: _crypto, util: _util } = {}) => __awaiter(void 0, void 0, void 0, function* () {
+    const webCrypto = new WebCrypto_1.default({ crypto: _crypto, util: _util });
+    const _ephemeralStoreableKeyPair = yield webCrypto.getStorableKeyPair(yield webCrypto.generateKeyPair(publicKey));
+    const _verificationKeyPair = yield webCrypto.getVerificationKeys({
+        publicKey,
+        privateKey: _ephemeralStoreableKeyPair.privateKey,
+    });
+    return {
+        publicKey,
+        ephemeral: _ephemeralStoreableKeyPair,
+        verification: _verificationKeyPair,
+    };
+});
+exports.getKeysData = getKeysData;
+// eslint-disable-next-line arrow-body-style
+const prepareVerificationRequest = ({ keysData: _keysData, disableRecryption: _disableRecryption, crypto: _crypto, util: _util } = {}) => {
+    const webCrypto = new WebCrypto_1.default({ crypto: _crypto, util: _util });
+    const disableRecryption = (0, display_1.isTrue)(_disableRecryption);
+    return (requestPath, _a = {}) => __awaiter(void 0, void 0, void 0, function* () {
+        var { method: rawMethod, body: rawBody, headers: rawHeaders } = _a, requestOptions = __rest(_a, ["method", "body", "headers"]);
+        let parsedBody = (0, display_1.safeParse)(rawBody);
+        const method = (0, request_1.getRequestMethod)(parsedBody, rawMethod);
+        if (disableRecryption || (0, display_1.stringEmpty)(_keysData === null || _keysData === void 0 ? void 0 : _keysData.publicKey)) {
+            return [
+                requestPath,
+                (0, request_1.prepareRequestOptions)(Object.assign({ method, body: parsedBody, headers: rawHeaders }, requestOptions), requestPath)
+            ];
+        }
+        const { verification: { derivedHMACKey, derivedSecretKey, } = {}, ephemeral: { publicKey: ephemeralPublicKey, } = {}, } = _keysData !== null && _keysData !== void 0 ? _keysData : {};
+        if (!derivedHMACKey || !ephemeralPublicKey) {
+            return undefined;
+        }
+        if (parsedBody && derivedSecretKey) {
+            parsedBody = yield webCrypto.encryptMessage(JSON.stringify(parsedBody), derivedSecretKey);
+        }
+        const timestamp = (0, datetime_1.toUnixString)();
+        const computedHMAC = yield webCrypto.generateHMAC((0, display_1.objectToSortedString)(Object.assign({ body: parsedBody, method,
+            timestamp }, (0, request_1.normalizeURIParts)(requestPath))), derivedHMACKey);
+        return [
+            requestPath,
+            (0, request_1.prepareRequestOptions)(Object.assign({ method, body: parsedBody, headers: Object.assign({ 'X-Authorization': `HMAC-SHA256 ${computedHMAC}`, 'X-Authorization-Timestamp': timestamp, 'X-Ephemeral-Key': ephemeralPublicKey, 'X-Public-Key': _keysData.publicKey }, rawHeaders) }, requestOptions), requestPath),
+            derivedSecretKey
+        ];
+    });
+};
+exports.prepareVerificationRequest = prepareVerificationRequest;
+const processVerificationResponse = ({ keysData, disableRecryption: _disableRecryption, crypto: _crypto, util: _util } = {}) => {
+    const webCrypto = new WebCrypto_1.default({ crypto: _crypto, util: _util });
+    const disableRecryption = (0, display_1.isTrue)(_disableRecryption);
+    return (encryptedResponse, _derivedSecretKey) => __awaiter(void 0, void 0, void 0, function* () {
+        var _a;
+        const derivedSecretKey = _derivedSecretKey !== null && _derivedSecretKey !== void 0 ? _derivedSecretKey : (_a = keysData.verification) === null || _a === void 0 ? void 0 : _a.derivedSecretKey;
+        if (disableRecryption || !encryptedResponse || !derivedSecretKey) {
+            return encryptedResponse;
+        }
+        const decryptedMessage = yield webCrypto.decryptMessage(encryptedResponse, derivedSecretKey);
+        return (0, display_1.safeParse)(decryptedMessage);
+    });
+};
+exports.processVerificationResponse = processVerificationResponse;
+//# sourceMappingURL=verification.js.map

package/dist/shared/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/shared/verification.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAyC;AACzC,uCAIkB;AAClB,uCAKkB;AAClB,4DAAmC;AAE5B,MAAM,WAAW,GAAG,CAAO,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IACpF,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAEjE,MAAM,0BAA0B,GAAG,MAAM,SAAS,CAAC,kBAAkB,CACnE,MAAM,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAC3C,CAAA;IAED,MAAM,oBAAoB,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC;QAC/D,SAAS;QACT,UAAU,EAAE,0BAA0B,CAAC,UAAU;KAClD,CAAC,CAAA;IAEF,OAAO;QACL,SAAS;QACT,SAAS,EAAE,0BAA0B;QACrC,YAAY,EAAE,oBAAoB;KACnC,CAAA;AACH,CAAC,CAAA,CAAA;AAjBY,QAAA,WAAW,eAiBvB;AAED,4CAA4C;AACrC,MAAM,0BAA0B,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IAC9I,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjE,MAAM,iBAAiB,GAAG,IAAA,gBAAM,EAAC,kBAAkB,CAAC,CAAA;IAEpD,OAAO,CAAO,WAAW,EAAE,KAAgF,EAAE,EAAE,EAAE;YAAtF,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,OAA2B,EAArB,cAAc,cAA3E,6BAA6E,CAAF;QACpG,IAAI,UAAU,GAAG,IAAA,mBAAS,EAAC,OAAO,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAEtD,IAAI,iBAAiB,IAAI,IAAA,qBAAW,EAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,SAAS,CAAC,EAAE;YAC1D,OAAO;gBACL,WAAW;gBACX,IAAA,+BAAqB,kBACnB,MAAM,EACN,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,UAAU,IAChB,cAAc,GAChB,WAAW,CAAC;aAChB,CAAA;SACF;QAED,MAAM,EACJ,YAAY,EAAE,EACZ,cAAc,EACd,gBAAgB,GACjB,GAAG,EAAE,EACN,SAAS,EAAE,EACT,SAAS,EAAE,kBAAkB,GAC9B,GAAG,EAAE,GACP,GAAG,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAA;QAEnB,IAAI,CAAC,cAAc,IAAI,CAAC,kBAAkB,EAAE;YAC1C,OAAO,SAAS,CAAA;SACjB;QAED,IAAI,UAAU,IAAI,gBAAgB,EAAE;YAClC,UAAU,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAA;SAC1F;QAED,MAAM,SAAS,GAAG,IAAA,uBAAY,GAAE,CAAA;QAChC,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,YAAY,CAC/C,IAAA,8BAAoB,kBAClB,IAAI,EAAE,UAAU,EAChB,MAAM;YACN,SAAS,IACN,IAAA,2BAAiB,EAAC,WAAW,CAAC,EACjC,EACF,cAAc,CACf,CAAA;QAED,OAAO;YACL,WAAW;YACX,IAAA,+BAAqB,kBACnB,MAAM,EACN,IAAI,EAAE,UAAU,EAChB,OAAO,kBACL,iBAAiB,EAAE,eAAe,YAAY,EAAE,EAChD,2BAA2B,EAAE,SAAS,EACtC,iBAAiB,EAAE,kBAAkB,EACrC,cAAc,EAAE,SAAS,CAAC,SAAS,IAChC,UAAU,KAEZ,cAAc,GAChB,WAAW,CAAC;YACf,gBAAgB;SACjB,CAAA;IACH,CAAC,CAAA,CAAA;AACH,CAAC,CAAA;AAlEY,QAAA,0BAA0B,8BAkEtC;AAEM,MAAM,2BAA2B,GAAG,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IACpI,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjE,MAAM,iBAAiB,GAAG,IAAA,gBAAM,EAAC,kBAAkB,CAAC,CAAA;IAEpD,OAAO,CAAO,iBAAiB,EAAE,iBAAiB,EAAE,EAAE;;QACpD,MAAM,gBAAgB,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,MAAA,QAAQ,CAAC,YAAY,0CAAE,gBAAgB,CAAA;QACrF,IAAI,iBAAiB,IAAI,CAAC,iBAAiB,IAAI,CAAC,gBAAgB,EAAE;YAChE,OAAO,iBAAiB,CAAA;SACzB;QAED,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;QAC5F,OAAO,IAAA,mBAAS,EAAC,gBAAgB,CAAC,CAAA;IACpC,CAAC,CAAA,CAAA;AACH,CAAC,CAAA;AAbY,QAAA,2BAA2B,+BAavC"}