@bradford-tech/supabase-integrity-attest 0.2.1

package/esm/src/errors.d.ts

@@ -0,0 +1,26 @@
+export declare enum AttestationErrorCode {
+    INVALID_FORMAT = "INVALID_FORMAT",
+    INVALID_CERTIFICATE_CHAIN = "INVALID_CERTIFICATE_CHAIN",
+    NONCE_MISMATCH = "NONCE_MISMATCH",
+    RP_ID_MISMATCH = "RP_ID_MISMATCH",
+    KEY_ID_MISMATCH = "KEY_ID_MISMATCH",
+    INVALID_COUNTER = "INVALID_COUNTER",
+    INVALID_AAGUID = "INVALID_AAGUID"
+}
+export declare class AttestationError extends Error {
+    readonly code: AttestationErrorCode;
+    readonly name = "AttestationError";
+    constructor(code: AttestationErrorCode, message: string);
+}
+export declare enum AssertionErrorCode {
+    INVALID_FORMAT = "INVALID_FORMAT",
+    RP_ID_MISMATCH = "RP_ID_MISMATCH",
+    COUNTER_NOT_INCREMENTED = "COUNTER_NOT_INCREMENTED",
+    SIGNATURE_INVALID = "SIGNATURE_INVALID"
+}
+export declare class AssertionError extends Error {
+    readonly code: AssertionErrorCode;
+    readonly name = "AssertionError";
+    constructor(code: AssertionErrorCode, message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/esm/src/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/src/errors.ts"],"names":[],"mappings":"AAEA,oBAAY,oBAAoB;IAC9B,cAAc,mBAAmB;IACjC,yBAAyB,8BAA8B;IACvD,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;CAClC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aAGvB,IAAI,EAAE,oBAAoB;IAF5C,SAAkB,IAAI,sBAAsB;gBAE1B,IAAI,EAAE,oBAAoB,EAC1C,OAAO,EAAE,MAAM;CAIlB;AAED,oBAAY,kBAAkB;IAC5B,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;IACnD,iBAAiB,sBAAsB;CACxC;AAED,qBAAa,cAAe,SAAQ,KAAK;aAGrB,IAAI,EAAE,kBAAkB;IAF1C,SAAkB,IAAI,oBAAoB;gBAExB,IAAI,EAAE,kBAAkB,EACxC,OAAO,EAAE,MAAM;CAIlB"}

package/esm/src/errors.js

@@ -0,0 +1,52 @@
+// src/errors.ts
+export var AttestationErrorCode;
+(function (AttestationErrorCode) {
+    AttestationErrorCode["INVALID_FORMAT"] = "INVALID_FORMAT";
+    AttestationErrorCode["INVALID_CERTIFICATE_CHAIN"] = "INVALID_CERTIFICATE_CHAIN";
+    AttestationErrorCode["NONCE_MISMATCH"] = "NONCE_MISMATCH";
+    AttestationErrorCode["RP_ID_MISMATCH"] = "RP_ID_MISMATCH";
+    AttestationErrorCode["KEY_ID_MISMATCH"] = "KEY_ID_MISMATCH";
+    AttestationErrorCode["INVALID_COUNTER"] = "INVALID_COUNTER";
+    AttestationErrorCode["INVALID_AAGUID"] = "INVALID_AAGUID";
+})(AttestationErrorCode || (AttestationErrorCode = {}));
+export class AttestationError extends Error {
+    constructor(code, message) {
+        super(message);
+        Object.defineProperty(this, "code", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: code
+        });
+        Object.defineProperty(this, "name", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: "AttestationError"
+        });
+    }
+}
+export var AssertionErrorCode;
+(function (AssertionErrorCode) {
+    AssertionErrorCode["INVALID_FORMAT"] = "INVALID_FORMAT";
+    AssertionErrorCode["RP_ID_MISMATCH"] = "RP_ID_MISMATCH";
+    AssertionErrorCode["COUNTER_NOT_INCREMENTED"] = "COUNTER_NOT_INCREMENTED";
+    AssertionErrorCode["SIGNATURE_INVALID"] = "SIGNATURE_INVALID";
+})(AssertionErrorCode || (AssertionErrorCode = {}));
+export class AssertionError extends Error {
+    constructor(code, message) {
+        super(message);
+        Object.defineProperty(this, "code", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: code
+        });
+        Object.defineProperty(this, "name", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: "AssertionError"
+        });
+    }
+}

package/esm/src/utils.d.ts

@@ -0,0 +1,13 @@
+/** Concatenate multiple Uint8Arrays into one. */
+export declare function concat(...arrays: Uint8Array[]): Uint8Array;
+/** Constant-time comparison of two byte arrays. */
+export declare function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean;
+/** Decode base64 string to bytes, or pass through Uint8Array unchanged. */
+export declare function decodeBase64Bytes(input: Uint8Array | string): Uint8Array;
+/** Convert a UTF-8 string to bytes, or pass through Uint8Array unchanged. */
+export declare function toBytes(input: Uint8Array | string): Uint8Array;
+/** Import a PEM-encoded SPKI public key as a CryptoKey for ECDSA P-256 verification. */
+export declare function importPemPublicKey(pem: string): Promise<CryptoKey>;
+/** Export a CryptoKey to PEM-encoded SPKI format. */
+export declare function exportKeyToPem(key: CryptoKey): Promise<string>;
+//# sourceMappingURL=utils.d.ts.map

package/esm/src/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/src/utils.ts"],"names":[],"mappings":"AAGA,iDAAiD;AACjD,wBAAgB,MAAM,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAU1D;AAED,mDAAmD;AACnD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAOvE;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAGxE;AAED,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAG9D;AAED,wFAAwF;AACxF,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAaxE;AAED,qDAAqD;AACrD,wBAAsB,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAIpE"}

package/esm/src/utils.js

@@ -0,0 +1,52 @@
+// src/utils.ts
+import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.10/base64.js";
+/** Concatenate multiple Uint8Arrays into one. */
+export function concat(...arrays) {
+    let totalLength = 0;
+    for (const arr of arrays)
+        totalLength += arr.length;
+    const result = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const arr of arrays) {
+        result.set(arr, offset);
+        offset += arr.length;
+    }
+    return result;
+}
+/** Constant-time comparison of two byte arrays. */
+export function constantTimeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++) {
+        diff |= a[i] ^ b[i];
+    }
+    return diff === 0;
+}
+/** Decode base64 string to bytes, or pass through Uint8Array unchanged. */
+export function decodeBase64Bytes(input) {
+    if (input instanceof Uint8Array)
+        return input;
+    return decodeBase64(input);
+}
+/** Convert a UTF-8 string to bytes, or pass through Uint8Array unchanged. */
+export function toBytes(input) {
+    if (input instanceof Uint8Array)
+        return input;
+    return new TextEncoder().encode(input);
+}
+/** Import a PEM-encoded SPKI public key as a CryptoKey for ECDSA P-256 verification. */
+export async function importPemPublicKey(pem) {
+    const base64 = pem
+        .replace("-----BEGIN PUBLIC KEY-----", "")
+        .replace("-----END PUBLIC KEY-----", "")
+        .replace(/\s/g, "");
+    const spki = decodeBase64(base64);
+    return await crypto.subtle.importKey("spki", spki, { name: "ECDSA", namedCurve: "P-256" }, true, ["verify"]);
+}
+/** Export a CryptoKey to PEM-encoded SPKI format. */
+export async function exportKeyToPem(key) {
+    const spki = await crypto.subtle.exportKey("spki", key);
+    const base64 = encodeBase64(spki);
+    return `-----BEGIN PUBLIC KEY-----\n${base64}\n-----END PUBLIC KEY-----`;
+}

package/esm/tests/assertion.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertion.test.d.ts","sourceRoot":"","sources":["../../src/tests/assertion.test.ts"],"names":[],"mappings":""}

package/esm/tests/attestation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.test.d.ts","sourceRoot":"","sources":["../../src/tests/attestation.test.ts"],"names":[],"mappings":""}

package/esm/tests/authdata.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authdata.test.d.ts","sourceRoot":"","sources":["../../src/tests/authdata.test.ts"],"names":[],"mappings":""}

package/esm/tests/certificate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate.test.d.ts","sourceRoot":"","sources":["../../src/tests/certificate.test.ts"],"names":[],"mappings":""}

package/esm/tests/cose.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cose.test.d.ts","sourceRoot":"","sources":["../../src/tests/cose.test.ts"],"names":[],"mappings":""}

package/esm/tests/der.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"der.test.d.ts","sourceRoot":"","sources":["../../src/tests/der.test.ts"],"names":[],"mappings":""}

package/esm/tests/errors.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.test.d.ts","sourceRoot":"","sources":["../../src/tests/errors.test.ts"],"names":[],"mappings":""}

package/esm/tests/fixtures/apple-attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-attestation.d.ts","sourceRoot":"","sources":["../../../src/tests/fixtures/apple-attestation.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,eAAO,MAAM,iBAAiB;;;;IAK5B,oDAAoD;;IAIpD,oDAAoD;;;;;;;;CAQrD,CAAC"}

package/esm/tests/fixtures/generate-assertion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-assertion.d.ts","sourceRoot":"","sources":["../../../src/tests/fixtures/generate-assertion.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,UAAU,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CAiDnC"}

package/esm/tests/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../src/tests/utils.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@bradford-tech/supabase-integrity-attest",
+  "version": "0.2.1",
+  "description": "Verify Apple App Attest attestations and assertions using WebCrypto.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bradford-tech/supabase-integrity-attest.git"
+  },
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/bradford-tech/supabase-integrity-attest/issues"
+  },
+  "module": "./esm/mod.js",
+  "exports": {
+    ".": {
+      "import": "./esm/mod.js"
+    }
+  },
+  "scripts": {
+    "test": "node test_runner.js"
+  },
+  "dependencies": {
+    "asn1js": "^3.0.7",
+    "cborg": "^4.5.8",
+    "pkijs": "^3.3.3"
+  },
+  "devDependencies": {
+    "@types/node": "^20.9.0",
+    "picocolors": "^1.0.0",
+    "@deno/shim-deno-test": "~0.5.0"
+  },
+  "_generatedBy": "dnt@dev"
+}