@bitgo/passkey-crypto 0.2.0 → 0.3.0

package/dist/test/unit/registerPasskey.test.js

@@ -0,0 +1,155 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const sinon = __importStar(require("sinon"));
+const registerPasskey_1 = require("../../src/registerPasskey");
+describe('registerPasskey', function () {
+    let mockBitGo;
+    const mockChallenge = {
+        challenge: btoa('server-challenge-bytes'),
+        baseSalt: 'server-base-salt-abc123',
+        rp: { id: 'bitgo.com', name: 'BitGo' },
+        user: { id: new Uint8Array([1, 2, 3]), name: 'test@bitgo.com', displayName: 'Test User' },
+        pubKeyCredParams: [{ type: 'public-key', alg: -7 }],
+        timeout: 60000,
+    };
+    const mockOtpResponse = {
+        user: {
+            otpDevices: [
+                {
+                    id: 'mongo-device-id-123',
+                    credentialId: 'cred-id-base64',
+                    prfSalt: 'server-assigned-prf-salt',
+                    isPasskey: true,
+                    extensions: { prf: true },
+                },
+            ],
+        },
+    };
+    const clientDataJSON = new TextEncoder().encode(JSON.stringify({ type: 'webauthn.create' }));
+    const attestationObject = new Uint8Array([0xde, 0xad, 0xbe, 0xef]);
+    function makeAttestation(prfEnabled = false) {
+        return {
+            id: 'cred-id-base64',
+            rawId: new ArrayBuffer(8),
+            type: 'public-key',
+            response: {
+                clientDataJSON: clientDataJSON.buffer,
+                attestationObject: attestationObject.buffer,
+                getTransports: () => [],
+            },
+            authenticatorAttachment: null,
+            getClientExtensionResults: () => prfEnabled
+                ? { prf: { enabled: true } }
+                : {},
+        };
+    }
+    beforeEach(function () {
+        mockBitGo = {
+            get: sinon.stub(),
+            put: sinon.stub(),
+            url: sinon.stub().callsFake((path, _version) => `/api/v2${path}`),
+        };
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    describe('with PRF supported', function () {
+        it('should include scopes in PUT payload and return prfSupported: true', async function () {
+            const attestation = makeAttestation(true);
+            const mockProvider = { create: sinon.stub().resolves(attestation), get: sinon.stub() };
+            mockBitGo.get.returns({ result: sinon.stub().resolves(mockChallenge) });
+            const sendStub = sinon.stub().returns({ result: sinon.stub().resolves(mockOtpResponse) });
+            mockBitGo.put.returns({ send: sendStub });
+            const result = await (0, registerPasskey_1.registerPasskey)({
+                bitgo: mockBitGo,
+                provider: mockProvider,
+                label: 'My Passkey',
+            });
+            assert.ok(mockBitGo.get.calledWith('/api/v2/user/otp/webauthn/register'), 'GET should call correct URL');
+            assert.ok(mockBitGo.put.calledWith('/api/v2/user/otp'), 'PUT should call correct URL');
+            const putBody = sendStub.firstCall.args[0];
+            assert.deepStrictEqual(putBody.extensions, ['prf']);
+            assert.deepStrictEqual(putBody.scopes, ['wallet_hot']);
+            assert.strictEqual(putBody.type, 'webauthn');
+            assert.strictEqual(putBody.label, 'My Passkey');
+            const device = mockOtpResponse.user.otpDevices[0];
+            assert.strictEqual(result.id, device.id);
+            assert.strictEqual(result.credentialId, device.credentialId);
+            assert.strictEqual(result.prfSalt, device.prfSalt);
+            assert.strictEqual(result.prfSupported, true);
+        });
+    });
+    describe('without PRF support', function () {
+        it('should omit scopes from PUT payload and return prfSupported: false', async function () {
+            const mockProvider = { create: sinon.stub().resolves(makeAttestation(false)), get: sinon.stub() };
+            mockBitGo.get.returns({ result: sinon.stub().resolves(mockChallenge) });
+            const sendStub = sinon.stub().returns({ result: sinon.stub().resolves(mockOtpResponse) });
+            mockBitGo.put.returns({ send: sendStub });
+            const result = await (0, registerPasskey_1.registerPasskey)({
+                bitgo: mockBitGo,
+                provider: mockProvider,
+                label: 'My Passkey No PRF',
+            });
+            const putBody = sendStub.firstCall.args[0];
+            assert.ok(putBody.extensions === undefined, 'extensions should be omitted when PRF is not supported');
+            assert.ok(putBody.scopes === undefined, 'scopes should be omitted when PRF is not supported');
+            assert.strictEqual(result.prfSupported, false);
+        });
+    });
+    describe('baseSalt sourcing', function () {
+        it('should call GET challenge before provider.create()', async function () {
+            const callOrder = [];
+            const mockProvider = {
+                create: sinon.stub().callsFake(() => {
+                    callOrder.push('provider.create');
+                    return Promise.resolve(makeAttestation());
+                }),
+                get: sinon.stub(),
+            };
+            mockBitGo.get.returns({
+                result: sinon.stub().callsFake(() => {
+                    callOrder.push('GET challenge');
+                    return Promise.resolve(mockChallenge);
+                }),
+            });
+            mockBitGo.put.returns({ send: sinon.stub().returns({ result: sinon.stub().resolves(mockOtpResponse) }) });
+            await (0, registerPasskey_1.registerPasskey)({ bitgo: mockBitGo, provider: mockProvider, label: 'Test' });
+            assert.deepStrictEqual(callOrder, ['GET challenge', 'provider.create']);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/removePasskeyFromAccount.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=removePasskeyFromAccount.test.d.ts.map

package/dist/test/unit/removePasskeyFromAccount.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removePasskeyFromAccount.test.d.ts","sourceRoot":"","sources":["../../../test/unit/removePasskeyFromAccount.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/removePasskeyFromAccount.test.js

@@ -0,0 +1,88 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const sinon = __importStar(require("sinon"));
+const removePasskeyFromAccount_1 = require("../../src/removePasskeyFromAccount");
+describe('removePasskeyFromAccount', function () {
+    let mockBitGo;
+    const device = {
+        id: 'mongo-object-id-123',
+        credentialId: 'cred-id-should-not-be-used',
+        prfSalt: 'some-salt',
+        isPasskey: true,
+    };
+    beforeEach(function () {
+        mockBitGo = {
+            url: sinon.stub().callsFake((path) => `https://app.bitgo.com/api/v1${path}`),
+            del: sinon.stub().returns({
+                result: sinon.stub().resolves(undefined),
+            }),
+        };
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    it('should DELETE /user/otp/{device.id} using device.id', async function () {
+        await (0, removePasskeyFromAccount_1.removePasskeyFromAccount)({ bitgo: mockBitGo, device });
+        assert.strictEqual(mockBitGo.url.calledOnce, true);
+        assert.strictEqual(mockBitGo.url.firstCall.args[0], `/user/otp/${device.id}`);
+        assert.strictEqual(mockBitGo.del.calledOnce, true);
+    });
+    it('should not use credentialId', async function () {
+        await (0, removePasskeyFromAccount_1.removePasskeyFromAccount)({ bitgo: mockBitGo, device });
+        const urlArg = mockBitGo.url.firstCall.args[0];
+        assert.ok(!urlArg.includes(device.credentialId), 'URL should not contain credentialId');
+    });
+    it('should resolve without returning a value', async function () {
+        const result = await (0, removePasskeyFromAccount_1.removePasskeyFromAccount)({ bitgo: mockBitGo, device });
+        assert.strictEqual(result, undefined);
+    });
+    it('should throw if device.id is empty', async function () {
+        const badDevice = { ...device, id: '' };
+        await assert.rejects(() => (0, removePasskeyFromAccount_1.removePasskeyFromAccount)({ bitgo: mockBitGo, device: badDevice }), {
+            message: 'device.id is required to remove a passkey from the account',
+        });
+        assert.strictEqual(mockBitGo.del.called, false);
+    });
+    it('should throw if device.id is undefined', async function () {
+        const badDevice = { ...device, id: undefined };
+        await assert.rejects(() => (0, removePasskeyFromAccount_1.removePasskeyFromAccount)({ bitgo: mockBitGo, device: badDevice }), {
+            message: 'device.id is required to remove a passkey from the account',
+        });
+        assert.strictEqual(mockBitGo.del.called, false);
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/removePasskeyFromWallet.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=removePasskeyFromWallet.test.d.ts.map

package/dist/test/unit/removePasskeyFromWallet.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removePasskeyFromWallet.test.d.ts","sourceRoot":"","sources":["../../../test/unit/removePasskeyFromWallet.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/removePasskeyFromWallet.test.js

@@ -0,0 +1,170 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const sinon = __importStar(require("sinon"));
+const src_1 = require("../../src");
+describe('removePasskeyFromWallet', function () {
+    const coinName = 'tbtc';
+    const walletId = 'wallet-abc123';
+    const keychainId = 'key-user-id';
+    const encryptedPrv = 'encrypted-prv-string';
+    const walletPassphrase = 'correct-passphrase';
+    const device = {
+        id: 'mongo-object-id-123',
+        credentialId: 'cred-id-456',
+        prfSalt: 'some-salt',
+        isPasskey: true,
+    };
+    let mockBitGo;
+    let mockWallet;
+    let mockKeychains;
+    let mockWallets;
+    beforeEach(function () {
+        mockWallet = {
+            keyIds: sinon.stub().returns([keychainId, 'backup-key-id', 'bitgo-key-id']),
+        };
+        mockWallets = {
+            get: sinon.stub().resolves(mockWallet),
+        };
+        mockKeychains = {
+            get: sinon.stub().resolves({ id: keychainId, encryptedPrv }),
+        };
+        mockBitGo = {
+            coin: sinon.stub().returns({
+                wallets: sinon.stub().returns(mockWallets),
+                keychains: sinon.stub().returns(mockKeychains),
+            }),
+            decrypt: sinon.stub().returns('xprv-decrypted'),
+            del: sinon.stub().returns({
+                result: sinon.stub().resolves({}),
+            }),
+            url: sinon.stub().callsFake((path, version) => `/api/v${version ?? 1}${path}`),
+        };
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    it('should successfully remove a passkey device', async function () {
+        await (0, src_1.removePasskeyFromWallet)({
+            bitgo: mockBitGo,
+            coin: coinName,
+            walletId,
+            device,
+            walletPassphrase,
+        });
+        // Verify coin was initialized
+        sinon.assert.calledWithExactly(mockBitGo.coin, coinName);
+        // Verify wallet was fetched
+        sinon.assert.calledWithExactly(mockWallets.get, { id: walletId });
+        // Verify keychain was fetched with correct ID
+        sinon.assert.calledWithExactly(mockKeychains.get, { id: keychainId });
+        // Verify DELETE was called with device.id (not credentialId)
+        sinon.assert.calledOnce(mockBitGo.del);
+        sinon.assert.calledWithExactly(mockBitGo.del, `/api/v2/key/${keychainId}/webauthndevice/${device.id}`);
+    });
+    it('should throw and not call DELETE if passphrase is wrong', async function () {
+        mockBitGo.decrypt = sinon.stub().throws(new Error('decryption failed'));
+        await assert.rejects(() => (0, src_1.removePasskeyFromWallet)({
+            bitgo: mockBitGo,
+            coin: coinName,
+            walletId,
+            device,
+            walletPassphrase: 'wrong-passphrase',
+        }), (err) => {
+            assert.ok(err.message.includes('Incorrect wallet passphrase'));
+            return true;
+        });
+        sinon.assert.notCalled(mockBitGo.del);
+    });
+    it('should throw descriptively if keychain has no encryptedPrv', async function () {
+        mockKeychains.get = sinon.stub().resolves({ id: keychainId });
+        await assert.rejects(() => (0, src_1.removePasskeyFromWallet)({
+            bitgo: mockBitGo,
+            coin: coinName,
+            walletId,
+            device,
+            walletPassphrase,
+        }), (err) => {
+            assert.ok(err.message.includes('Incorrect wallet passphrase'));
+            return true;
+        });
+        sinon.assert.notCalled(mockBitGo.del);
+    });
+    it('should throw if device.id is empty', async function () {
+        const deviceNoId = { ...device, id: '' };
+        await assert.rejects(() => (0, src_1.removePasskeyFromWallet)({
+            bitgo: mockBitGo,
+            coin: coinName,
+            walletId,
+            device: deviceNoId,
+            walletPassphrase,
+        }), (err) => {
+            assert.ok(err.message.includes('device.id is required'));
+            return true;
+        });
+        sinon.assert.notCalled(mockBitGo.coin);
+    });
+    it('should propagate wallet fetch errors', async function () {
+        mockWallets.get = sinon.stub().rejects(new Error('404 Not Found'));
+        await assert.rejects(() => (0, src_1.removePasskeyFromWallet)({
+            bitgo: mockBitGo,
+            coin: coinName,
+            walletId,
+            device,
+            walletPassphrase,
+        }), (err) => {
+            assert.ok(err.message.includes('404 Not Found'));
+            return true;
+        });
+        sinon.assert.notCalled(mockBitGo.del);
+    });
+    it('should propagate DELETE errors after passphrase verification', async function () {
+        mockBitGo.del = sinon.stub().returns({
+            result: sinon.stub().rejects(new Error('500 Internal Server Error')),
+        });
+        await assert.rejects(() => (0, src_1.removePasskeyFromWallet)({
+            bitgo: mockBitGo,
+            coin: coinName,
+            walletId,
+            device,
+            walletPassphrase,
+        }), (err) => {
+            assert.ok(err.message.includes('500 Internal Server Error'));
+            return true;
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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