@bsv/sdk 1.3.12 → 1.3.13

package/dist/cjs/src/auth/certificates/__tests/CompletedProtoWallet.js

@@ -1,28 +1,28 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CompletedProtoWallet = void 0;
-const index_js_1 = require("../../../wallet/index.js");
+const index_1 = require("../../../wallet/index");
 // Test Mock wallet which extends ProtoWallet but still implements Wallet interface
 // Unsupported methods throw
-class CompletedProtoWallet extends index_js_1.ProtoWallet {
+class CompletedProtoWallet extends index_1.ProtoWallet {
     constructor(rootKeyOrKeyDeriver) {
         super(rootKeyOrKeyDeriver);
         if (typeof rootKeyOrKeyDeriver['identityKey'] !== 'string') {
-            rootKeyOrKeyDeriver = new index_js_1.KeyDeriver(rootKeyOrKeyDeriver);
+            rootKeyOrKeyDeriver = new index_1.KeyDeriver(rootKeyOrKeyDeriver);
         }
         this.keyDeriver = rootKeyOrKeyDeriver;
     }
     isAuthenticated(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     waitForAuthentication(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     getNetwork(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     getVersion(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async getPublicKey(args, originator) {
         if (args.privileged) {
@@ -43,49 +43,49 @@ class CompletedProtoWallet extends index_js_1.ProtoWallet {
         }
     }
     async createAction(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async signAction(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async abortAction(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async listActions(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async internalizeAction(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async listOutputs(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async relinquishOutput(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async acquireCertificate(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async listCertificates(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async proveCertificate(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async relinquishCertificate(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async discoverByIdentityKey(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async discoverByAttributes(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async getHeight(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
     async getHeaderForHeight(args, originator) {
-        throw new Error("not implemented");
+        throw new Error('not implemented');
     }
 }
 exports.CompletedProtoWallet = CompletedProtoWallet;

package/dist/cjs/src/auth/certificates/__tests/CompletedProtoWallet.js.map

@@ -1 +1 @@
-{"version":3,"file":"CompletedProtoWallet.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/CompletedProtoWallet.ts"],"names":[],"mappings":";;;AACA,uDAA+0B;AAE/0B,mFAAmF;AACnF,4BAA4B;AAC5B,MAAa,oBAAqB,SAAQ,sBAAW;IACnD,YAAY,mBAA0D;QACpE,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC1B,IAAI,OAAO,mBAAmB,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3D,mBAAmB,GAAG,IAAI,qBAAU,CAAC,mBAA4C,CAAC,CAAA;QACpF,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,mBAAiC,CAAA;IACrD,CAAC;IACD,eAAe,CAAC,IAAQ,EAAE,UAAoD;QAC5E,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,qBAAqB,CAAC,IAAQ,EAAE,UAAoD;QAClF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,UAAU,CAAC,IAAQ,EAAE,UAAoD;QACvE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,UAAU,CAAC,IAAQ,EAAE,UAAoD;QACvE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,YAAY,CAChB,IAAsB,EACtB,UAAoD;QAEpD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAA;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAC5F,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,UAAU;qBACvB,eAAe,CACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,YAAY,IAAI,MAAM,EAC3B,IAAI,CAAC,OAAO,CACb;qBACA,QAAQ,EAAE;aACd,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB,EAAE,UAAoD;QAE7F,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAoB,EAAE,UAAoD;QAEzF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,IAAqB,EAAE,UAAoD;QAE3F,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,IAAqB,EAAE,UAAoD;QAE3F,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,IAA2B,EAAE,UAAoD;QAEvG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,IAAqB,EAAE,UAAoD;QAE3F,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAA0B,EAAE,UAAoD;QAErG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,kBAAkB,CAAC,IAA4B,EAAE,UAAoD;QAEzG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAA0B,EAAE,UAAoD;QAErG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAA0B,EAAE,UAAoD;QAErG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,IAA+B,EAAE,UAAoD;QAE/G,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,IAA+B,EAAE,UAAoD;QAE/G,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,IAA8B,EAAE,UAAoD;QAE7G,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAQ,EAAE,UAAoD;QAE5E,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,kBAAkB,CAAC,IAAmB,EAAE,UAAoD;QAEhG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;CACF;AA1GD,oDA0GC"}
+{"version":3,"file":"CompletedProtoWallet.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/CompletedProtoWallet.ts"],"names":[],"mappings":";;;AACA,iDAwC8B;AAE9B,mFAAmF;AACnF,4BAA4B;AAC5B,MAAa,oBACX,SAAQ,mBAAW;IAGnB,YAAY,mBAA0D;QACpE,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC1B,IAAI,OAAO,mBAAmB,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3D,mBAAmB,GAAG,IAAI,kBAAU,CAClC,mBAA4C,CAC7C,CAAA;QACH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,mBAAiC,CAAA;IACrD,CAAC;IACD,eAAe,CACb,IAAQ,EACR,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,qBAAqB,CACnB,IAAQ,EACR,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,UAAU,CACR,IAAQ,EACR,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,UAAU,CACR,IAAQ,EACR,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,YAAY,CAChB,IAAsB,EACtB,UAAoD;QAEpD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAA;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAA;YACH,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,UAAU;qBACvB,eAAe,CACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,YAAY,IAAI,MAAM,EAC3B,IAAI,CAAC,OAAO,CACb;qBACA,QAAQ,EAAE;aACd,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAsB,EACtB,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,UAAU,CACd,IAAoB,EACpB,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,iBAAiB,CACrB,IAA2B,EAC3B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,gBAAgB,CACpB,IAA0B,EAC1B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,kBAAkB,CACtB,IAA4B,EAC5B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,gBAAgB,CACpB,IAA0B,EAC1B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,gBAAgB,CACpB,IAA0B,EAC1B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,qBAAqB,CACzB,IAA+B,EAC/B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,qBAAqB,CACzB,IAA+B,EAC/B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,oBAAoB,CACxB,IAA8B,EAC9B,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,SAAS,CACb,IAAQ,EACR,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,kBAAkB,CACtB,IAAmB,EACnB,UAAoD;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;CACF;AA3JD,oDA2JC"}

package/dist/cjs/src/auth/certificates/__tests/MasterCertificate.test.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const MasterCertificate_1 = require("../../../auth/certificates/MasterCertificate");
+const VerifiableCertificate_1 = require("../../../auth/certificates/VerifiableCertificate");
+const mod_1 = require("../../../../mod");
+const CompletedProtoWallet_1 = require("../../../auth/certificates/__tests/CompletedProtoWallet");
+describe('MasterCertificate', () => {
+    const subjectPrivateKey = mod_1.PrivateKey.fromRandom();
+    const certifierPrivateKey = mod_1.PrivateKey.fromRandom();
+    // A mock revocation outpoint for testing
+    const mockRevocationOutpoint = 'deadbeefdeadbeefdeadbeefdeadbeef00000000000000000000000000000000.1';
+    // Arbitrary certificate data (in plaintext)
+    const plaintextFields = {
+        name: 'Alice',
+        email: 'alice@example.com',
+        department: 'Engineering'
+    };
+    const subjectWallet = new CompletedProtoWallet_1.CompletedProtoWallet(subjectPrivateKey);
+    const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(certifierPrivateKey);
+    let subjectIdentityKey;
+    let certifierIdentityKey;
+    beforeAll(async () => {
+        subjectIdentityKey = (await subjectWallet.getPublicKey({ identityKey: true })).publicKey;
+        certifierIdentityKey = (await certifierWallet.getPublicKey({ identityKey: true })).publicKey;
+    });
+    describe('constructor', () => {
+        it('should construct a MasterCertificate successfully when masterKeyring is valid', () => {
+            // Prepare a minimal valid MasterCertificate
+            const fieldSymKey = mod_1.SymmetricKey.fromRandom();
+            const encryptedFieldValue = mod_1.Utils.toBase64(fieldSymKey.encrypt(mod_1.Utils.toArray('Alice', 'utf8')));
+            const encryptedKeyForSubject = mod_1.Utils.toBase64([0, 1, 2, 3]);
+            // We assume we have the same fieldName in both `fields` and `masterKeyring`.
+            const fields = { name: encryptedFieldValue };
+            const masterKeyring = { name: encryptedKeyForSubject };
+            const certificate = new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), // type
+            mod_1.Utils.toBase64((0, mod_1.Random)(16)), // serialNumber
+            subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, fields, masterKeyring);
+            expect(certificate).toBeInstanceOf(MasterCertificate_1.MasterCertificate);
+            expect(certificate.fields).toEqual(fields);
+            expect(certificate.masterKeyring).toEqual(masterKeyring);
+            expect(certificate.subject).toEqual(subjectIdentityKey);
+            expect(certificate.certifier).toEqual(certifierIdentityKey);
+        });
+        it('should throw if masterKeyring is missing a key for any field', () => {
+            const fields = { name: 'encrypted_value' };
+            const masterKeyring = {}; // intentionally empty
+            expect(() => {
+                new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), // type
+                mod_1.Utils.toBase64((0, mod_1.Random)(16)), // serialNumber
+                subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, fields, masterKeyring);
+            }).toThrowError(/Master keyring must contain a value for every field/);
+        });
+    });
+    describe('decryptFields (static)', () => {
+        it('should decrypt all fields correctly using subject wallet', async () => {
+            // Issue a certificate for the subject, which includes a valid masterKeyring
+            const certificate = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, plaintextFields, 'TEST_CERT');
+            // Now subject should be able to decrypt all fields via static method
+            const decrypted = await MasterCertificate_1.MasterCertificate.decryptFields(subjectWallet, certificate.masterKeyring, certificate.fields, certificate.certifier // because certifier was the encryption counterparty
+            );
+            expect(decrypted).toEqual(plaintextFields);
+        });
+        it('should throw if masterKeyring is empty or invalid', async () => {
+            // Manually create a MasterCertificate with an empty masterKeyring
+            expect(() => new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), mod_1.Utils.toBase64((0, mod_1.Random)(16)), subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, { name: mod_1.Utils.toBase64([1, 2, 3]) }, {})).toThrow('Master keyring must contain a value for every field. Missing key for field: "name"');
+        });
+        it('should throw if decryption fails for any field', async () => {
+            // Manually craft a scenario where the key is incorrect
+            const badKeyMasterKeyring = mod_1.Utils.toBase64([9, 9, 9, 9]); // Not the correct key
+            const badKeyCertificate = new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), mod_1.Utils.toBase64((0, mod_1.Random)(16)), subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, {
+                name: mod_1.Utils.toBase64(mod_1.SymmetricKey.fromRandom().encrypt(mod_1.Utils.toArray('Alice', 'utf8')))
+            }, { name: badKeyMasterKeyring });
+            await expect(MasterCertificate_1.MasterCertificate.decryptFields(subjectWallet, badKeyCertificate.masterKeyring, badKeyCertificate.fields, badKeyCertificate.certifier)).rejects.toThrow('Failed to decrypt all master certificate fields.');
+        });
+    });
+    describe('createKeyringForVerifier (static)', () => {
+        const verifierPrivateKey = mod_1.PrivateKey.fromRandom();
+        const verifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(verifierPrivateKey);
+        let verifierIdentityKey;
+        let issuedCert;
+        beforeAll(async () => {
+            verifierIdentityKey = (await verifierWallet.getPublicKey({ identityKey: true })).publicKey;
+            // Issue a certificate to reuse in tests
+            issuedCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, plaintextFields, 'TEST_CERT');
+        });
+        it('should create a verifier keyring for specified fields', async () => {
+            // We only want to share "name" with the verifier
+            const fieldsToReveal = ['name'];
+            const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, // the original certifier
+            verifierIdentityKey, // the new verifier
+            issuedCert.fields, // encrypted fields
+            fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber);
+            // The new keyring should only contain "name"
+            expect(Object.keys(keyringForVerifier)).toHaveLength(1);
+            expect(keyringForVerifier).toHaveProperty('name');
+            // Now let's create a VerifiableCertificate for the verifier
+            const verifiableCert = new VerifiableCertificate_1.VerifiableCertificate(issuedCert.type, issuedCert.serialNumber, issuedCert.subject, issuedCert.certifier, issuedCert.revocationOutpoint, issuedCert.fields, keyringForVerifier, issuedCert.signature);
+            // The verifier should successfully decrypt the "name" field
+            const decrypted = await verifiableCert.decryptFields(verifierWallet);
+            expect(decrypted).toEqual({ name: plaintextFields.name });
+        });
+        it('should throw if fields to reveal are not a subset of the certificate fields', async () => {
+            await expect(MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, verifierIdentityKey, issuedCert.fields, ['nonexistent_field'], issuedCert.masterKeyring, issuedCert.serialNumber)).rejects.toThrow(/Fields to reveal must be a subset of the certificate fields\. Missing the "nonexistent_field" field\./);
+        });
+        it('should throw if the master key fails to decrypt the corresponding field', async () => {
+            // We'll tamper with the certificate's masterKeyring so that a field key is invalid
+            const tamperedCert = new MasterCertificate_1.MasterCertificate(issuedCert.type, issuedCert.serialNumber, issuedCert.subject, issuedCert.certifier, issuedCert.revocationOutpoint, issuedCert.fields, {
+                // Tamper: replace 'name' field with nonsense
+                name: mod_1.Utils.toBase64([66, 66, 66]),
+                email: issuedCert.masterKeyring.email,
+                department: issuedCert.masterKeyring.department
+            }, issuedCert.signature);
+            await expect(MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, tamperedCert.certifier, verifierIdentityKey, tamperedCert.fields, ['name'], tamperedCert.masterKeyring, tamperedCert.serialNumber)).rejects.toThrow('Failed to decrypt certificate field!');
+        });
+        it('should support optional originator parameter', async () => {
+            const fieldsToReveal = ['name'];
+            const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, verifierIdentityKey, issuedCert.fields, fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber, 'my-originator');
+            expect(keyringForVerifier).toHaveProperty('name');
+        });
+        it('should support counterparty of "anyone" or "self"', async () => {
+            const fieldsToReveal = ['name'];
+            // "anyone"
+            const anyoneKeyring = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, 'anyone', issuedCert.fields, fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber, 'my-originator');
+            expect(anyoneKeyring).toHaveProperty('name');
+            // "self"
+            const selfKeyring = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, 'self', issuedCert.fields, fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber, 'my-originator');
+            expect(selfKeyring).toHaveProperty('name');
+        });
+    });
+    describe('issueCertificateForSubject (static)', () => {
+        it('should issue a valid MasterCertificate for the given subject', async () => {
+            const newPlaintextFields = {
+                project: 'Top Secret',
+                clearanceLevel: 'High'
+            };
+            const revocationFn = jest.fn().mockResolvedValue(mockRevocationOutpoint);
+            const newCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, newPlaintextFields, 'TEST_CERT', revocationFn);
+            expect(newCert).toBeInstanceOf(MasterCertificate_1.MasterCertificate);
+            // The certificate's fields should be encrypted base64
+            for (const fieldName in newPlaintextFields) {
+                expect(newCert.fields[fieldName]).toMatch(/^[A-Za-z0-9+/]+=*$/); // quick base64 check
+            }
+            // The masterKeyring should also contain base64 strings
+            for (const fieldName in newPlaintextFields) {
+                expect(newCert.masterKeyring[fieldName]).toMatch(/^[A-Za-z0-9+/]+=*$/);
+            }
+            // Check revocation outpoint is from mock
+            expect(newCert.revocationOutpoint).toEqual(mockRevocationOutpoint);
+            // Check we have a signature
+            expect(newCert.signature).toBeDefined();
+            // Check that the revocationFn was called
+            expect(revocationFn).toHaveBeenCalledWith(newCert.serialNumber);
+        });
+        it('should allow passing a custom serial number when issuing the certificate', async () => {
+            const customSerialNumber = mod_1.Utils.toBase64((0, mod_1.Random)(32));
+            const newPlaintextFields = { status: 'Approved' };
+            const newCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, newPlaintextFields, 'TEST_CERT', undefined, // No custom revocation function
+            customSerialNumber // Pass our custom serial number
+            );
+            expect(newCert).toBeInstanceOf(MasterCertificate_1.MasterCertificate);
+            expect(newCert.serialNumber).toEqual(customSerialNumber); // Must match exactly
+            // Check encryption
+            for (const fieldName in newPlaintextFields) {
+                expect(newCert.fields[fieldName]).toMatch(/^[A-Za-z0-9+/]+=*$/);
+            }
+        });
+        it('should allow issuing a self-signed certificate and decrypt it with the same wallet', async () => {
+            // In a self-signed scenario, the subject and certifier are the same
+            const subjectWallet = new CompletedProtoWallet_1.CompletedProtoWallet(mod_1.PrivateKey.fromRandom());
+            // Some sample fields
+            const selfSignedFields = {
+                owner: 'Bob',
+                organization: 'SelfCo'
+            };
+            // Issue the certificate for "self"
+            const selfSignedCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(subjectWallet, // act as certifier
+            'self', selfSignedFields, 'SELF_SIGNED_TEST');
+            // Now we attempt to decrypt the fields with the same wallet
+            const decrypted = await MasterCertificate_1.MasterCertificate.decryptFields(subjectWallet, selfSignedCert.masterKeyring, selfSignedCert.fields, 'self');
+            expect(decrypted).toEqual(selfSignedFields);
+        });
+    });
+});
+//# sourceMappingURL=MasterCertificate.test.js.map

package/dist/cjs/src/auth/certificates/__tests/MasterCertificate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MasterCertificate.test.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/MasterCertificate.test.ts"],"names":[],"mappings":";;AAAA,oFAAgF;AAChF,4FAAwF;AACxF,yCAKwB;AACxB,kGAA8F;AAE9F,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,iBAAiB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IACjD,MAAM,mBAAmB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IAEnD,yCAAyC;IACzC,MAAM,sBAAsB,GAC1B,oEAAoE,CAAA;IAEtE,4CAA4C;IAC5C,MAAM,eAAe,GAAG;QACtB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,mBAAmB;QAC1B,UAAU,EAAE,aAAa;KAC1B,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,2CAAoB,CAAC,iBAAiB,CAAC,CAAA;IACjE,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,mBAAmB,CAAC,CAAA;IACrE,IAAI,kBAA0B,CAAA;IAC9B,IAAI,oBAA4B,CAAA;IAEhC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,kBAAkB,GAAG,CACnB,MAAM,aAAa,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACxD,CAAC,SAAS,CAAA;QACX,oBAAoB,GAAG,CACrB,MAAM,eAAe,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAC1D,CAAC,SAAS,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;YACvF,4CAA4C;YAC5C,MAAM,WAAW,GAAG,kBAAY,CAAC,UAAU,EAAE,CAAA;YAC7C,MAAM,mBAAmB,GAAG,WAAK,CAAC,QAAQ,CACxC,WAAW,CAAC,OAAO,CAAC,WAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAa,CAChE,CAAA;YAED,MAAM,sBAAsB,GAAG,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC3D,6EAA6E;YAC7E,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAA;YAC5C,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAA;YAEtD,MAAM,WAAW,GAAG,IAAI,qCAAiB,CACvC,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,OAAO;YACnC,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,eAAe;YAC3C,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,MAAM,EACN,aAAa,CACd,CAAA;YAED,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,qCAAiB,CAAC,CAAA;YACrD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YACxD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YACvD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAA;YAC1C,MAAM,aAAa,GAAG,EAAE,CAAA,CAAC,sBAAsB;YAE/C,MAAM,CAAC,GAAG,EAAE;gBACV,IAAI,qCAAiB,CACnB,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,OAAO;gBACnC,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,eAAe;gBAC3C,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,MAAM,EACN,aAAa,CACd,CAAA;YACH,CAAC,CAAC,CAAC,YAAY,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,4EAA4E;YAC5E,MAAM,WAAW,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CACpE,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,WAAW,CACZ,CAAA;YAED,qEAAqE;YACrE,MAAM,SAAS,GAAG,MAAM,qCAAiB,CAAC,aAAa,CACrD,aAAa,EACb,WAAW,CAAC,aAAa,EACzB,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,SAAS,CAAC,oDAAoD;aAC3E,CAAA;YACD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,kEAAkE;YAClE,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,qCAAiB,CACnB,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,EAAE,IAAI,EAAE,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EACnC,EAAE,CACH,CACJ,CAAC,OAAO,CACP,oFAAoF,CACrF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,uDAAuD;YACvD,MAAM,mBAAmB,GAAG,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,sBAAsB;YAC/E,MAAM,iBAAiB,GAAG,IAAI,qCAAiB,CAC7C,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB;gBACE,IAAI,EAAE,WAAK,CAAC,QAAQ,CAClB,kBAAY,CAAC,UAAU,EAAE,CAAC,OAAO,CAC/B,WAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CACnB,CACd;aACF,EACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAC9B,CAAA;YAED,MAAM,MAAM,CACV,qCAAiB,CAAC,aAAa,CAC7B,aAAa,EACb,iBAAiB,CAAC,aAAa,EAC/B,iBAAiB,CAAC,MAAM,EACxB,iBAAiB,CAAC,SAAS,CAC5B,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,MAAM,kBAAkB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;QAClD,MAAM,cAAc,GAAG,IAAI,2CAAoB,CAAC,kBAAkB,CAAC,CAAA;QACnE,IAAI,mBAA2B,CAAA;QAE/B,IAAI,UAA6B,CAAA;QAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,mBAAmB,GAAG,CACpB,MAAM,cAAc,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACzD,CAAC,SAAS,CAAA;YACX,wCAAwC;YACxC,UAAU,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CAC7D,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,iDAAiD;YACjD,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAA;YAE/B,MAAM,kBAAkB,GACtB,MAAM,qCAAiB,CAAC,wBAAwB,CAC9C,aAAa,EACb,UAAU,CAAC,SAAS,EAAE,yBAAyB;YAC/C,mBAAmB,EAAE,mBAAmB;YACxC,UAAU,CAAC,MAAM,EAAE,mBAAmB;YACtC,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,CACxB,CAAA;YAEH,6CAA6C;YAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,kBAAkB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAEjD,4DAA4D;YAC5D,MAAM,cAAc,GAAG,IAAI,6CAAqB,CAC9C,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,kBAAkB,EAC7B,UAAU,CAAC,MAAM,EACjB,kBAAkB,EAClB,UAAU,CAAC,SAAS,CACrB,CAAA;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;YACpE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;YAC3F,MAAM,MAAM,CACV,qCAAiB,CAAC,wBAAwB,CACxC,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,mBAAmB,EACnB,UAAU,CAAC,MAAM,EACjB,CAAC,mBAAmB,CAAC,EACrB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,CACxB,CACF,CAAC,OAAO,CAAC,OAAO,CACf,uGAAuG,CACxG,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,mFAAmF;YACnF,MAAM,YAAY,GAAG,IAAI,qCAAiB,CACxC,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,kBAAkB,EAC7B,UAAU,CAAC,MAAM,EACjB;gBACE,6CAA6C;gBAC7C,IAAI,EAAE,WAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClC,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,KAAK;gBACrC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,UAAU;aAChD,EACD,UAAU,CAAC,SAAS,CACrB,CAAA;YAED,MAAM,MAAM,CACV,qCAAiB,CAAC,wBAAwB,CACxC,aAAa,EACb,YAAY,CAAC,SAAS,EACtB,mBAAmB,EACnB,YAAY,CAAC,MAAM,EACnB,CAAC,MAAM,CAAC,EACR,YAAY,CAAC,aAAa,EAC1B,YAAY,CAAC,YAAY,CAC1B,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAA;YAC/B,MAAM,kBAAkB,GACtB,MAAM,qCAAiB,CAAC,wBAAwB,CAC9C,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,mBAAmB,EACnB,UAAU,CAAC,MAAM,EACjB,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,EACvB,eAAe,CAChB,CAAA;YACH,MAAM,CAAC,kBAAkB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAA;YAE/B,WAAW;YACX,MAAM,aAAa,GAAG,MAAM,qCAAiB,CAAC,wBAAwB,CACpE,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,QAAQ,EACR,UAAU,CAAC,MAAM,EACjB,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,EACvB,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,aAAa,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAE5C,SAAS;YACT,MAAM,WAAW,GAAG,MAAM,qCAAiB,CAAC,wBAAwB,CAClE,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,MAAM,EACN,UAAU,CAAC,MAAM,EACjB,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,EACvB,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,kBAAkB,GAAG;gBACzB,OAAO,EAAE,YAAY;gBACrB,cAAc,EAAE,MAAM;aACvB,CAAA;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAA;YAExE,MAAM,OAAO,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CAChE,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,YAAY,CACb,CAAA;YAED,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,qCAAiB,CAAC,CAAA;YACjD,sDAAsD;YACtD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA,CAAC,qBAAqB;YACvF,CAAC;YACD,uDAAuD;YACvD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACxE,CAAC;YACD,yCAAyC;YACzC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;YAClE,4BAA4B;YAC5B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;YACvC,yCAAyC;YACzC,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,kBAAkB,GAAG,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,CAAA;YACrD,MAAM,kBAAkB,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;YACjD,MAAM,OAAO,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CAChE,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,SAAS,EAAE,gCAAgC;YAC3C,kBAAkB,CAAC,gCAAgC;aACpD,CAAA;YAED,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,qCAAiB,CAAC,CAAA;YACjD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA,CAAC,qBAAqB;YAC9E,mBAAmB;YACnB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACjE,CAAC;QACH,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;YAClG,oEAAoE;YACpE,MAAM,aAAa,GAAG,IAAI,2CAAoB,CAAC,gBAAU,CAAC,UAAU,EAAE,CAAC,CAAA;YAEvE,qBAAqB;YACrB,MAAM,gBAAgB,GAAG;gBACvB,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,QAAQ;aACvB,CAAA;YAED,mCAAmC;YACnC,MAAM,cAAc,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CACvE,aAAa,EAAE,mBAAmB;YAClC,MAAM,EACN,gBAAgB,EAChB,kBAAkB,CACnB,CAAA;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,qCAAiB,CAAC,aAAa,CACrD,aAAa,EACb,cAAc,CAAC,aAAa,EAC5B,cAAc,CAAC,MAAM,EACrB,MAAM,CACP,CAAA;YAED,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/cjs/src/auth/certificates/__tests/VerifiableCertificate.test.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const VerifiableCertificate_1 = require("../../../auth/certificates/VerifiableCertificate");
+const mod_1 = require("../../../../mod");
+const CompletedProtoWallet_1 = require("../../../auth/certificates/__tests/CompletedProtoWallet");
+const MasterCertificate_1 = require("../../../auth/certificates/MasterCertificate");
+const index_1 = require("../../../wallet/index");
+describe('VerifiableCertificate', () => {
+    const subjectPrivateKey = mod_1.PrivateKey.fromRandom();
+    const subjectIdentityKey = subjectPrivateKey.toPublicKey().toString();
+    const certifierPrivateKey = mod_1.PrivateKey.fromRandom();
+    const certifierIdentityKey = certifierPrivateKey.toPublicKey().toString();
+    const verifierPrivateKey = mod_1.PrivateKey.fromRandom();
+    const verifierIdentityKey = verifierPrivateKey.toPublicKey().toString();
+    const subjectWallet = new CompletedProtoWallet_1.CompletedProtoWallet(subjectPrivateKey);
+    const verifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(verifierPrivateKey);
+    const sampleType = mod_1.Utils.toBase64(new Array(32).fill(1));
+    const sampleSerialNumber = mod_1.Utils.toBase64(new Array(32).fill(2));
+    const sampleRevocationOutpoint = 'deadbeefdeadbeefdeadbeefdeadbeef00000000000000000000000000000000.1';
+    const plaintextFields = {
+        name: 'Alice',
+        email: 'alice@example.com',
+        organization: 'Example Corp'
+    };
+    let verifiableCert;
+    beforeEach(async () => {
+        // For each test, we'll build a fresh VerifiableCertificate with valid encryption
+        const { certificateFields, masterKeyring } = await MasterCertificate_1.MasterCertificate.createCertificateFields(subjectWallet, certifierIdentityKey, plaintextFields);
+        const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, certifierIdentityKey, verifierIdentityKey, certificateFields, Object.keys(certificateFields), masterKeyring, sampleSerialNumber);
+        verifiableCert = new VerifiableCertificate_1.VerifiableCertificate(sampleType, sampleSerialNumber, subjectIdentityKey, certifierIdentityKey, sampleRevocationOutpoint, certificateFields, keyringForVerifier);
+    });
+    describe('constructor', () => {
+        it('should create a VerifiableCertificate with all required properties', () => {
+            expect(verifiableCert).toBeInstanceOf(VerifiableCertificate_1.VerifiableCertificate);
+            expect(verifiableCert.type).toEqual(sampleType);
+            expect(verifiableCert.serialNumber).toEqual(sampleSerialNumber);
+            expect(verifiableCert.subject).toEqual(subjectIdentityKey);
+            expect(verifiableCert.certifier).toEqual(certifierIdentityKey);
+            expect(verifiableCert.revocationOutpoint).toEqual(sampleRevocationOutpoint);
+            expect(verifiableCert.fields).toBeDefined();
+            expect(verifiableCert.keyring).toBeDefined();
+        });
+    });
+    describe('decryptFields', () => {
+        it('should decrypt fields successfully when provided the correct verifier wallet and keyring', async () => {
+            const decrypted = await verifiableCert.decryptFields(verifierWallet);
+            expect(decrypted).toEqual(plaintextFields);
+        });
+        it('should fail if the verifier wallet does not have the correct private key (wrong key)', async () => {
+            const wrongPrivateKey = mod_1.PrivateKey.fromRandom();
+            const wrongWallet = new CompletedProtoWallet_1.CompletedProtoWallet(wrongPrivateKey);
+            await expect(verifiableCert.decryptFields(wrongWallet)).rejects.toThrow(/Failed to decrypt selectively revealed certificate fields using keyring/);
+        });
+        it('should fail if the keyring is empty or missing keys', async () => {
+            // Create a new VerifiableCertificate but with an empty keyring
+            const fields = verifiableCert.fields;
+            const emptyKeyringCert = new VerifiableCertificate_1.VerifiableCertificate(verifiableCert.type, verifiableCert.serialNumber, verifiableCert.subject, verifiableCert.certifier, verifiableCert.revocationOutpoint, fields, {}, // empty
+            verifiableCert.signature);
+            await expect(emptyKeyringCert.decryptFields(verifierWallet)).rejects.toThrow('A keyring is required to decrypt certificate fields for the verifier.');
+        });
+        it('should fail if the encrypted field or its key is tampered', async () => {
+            // Tamper the keyring so it doesn't match the field encryption
+            verifiableCert.keyring.name = mod_1.Utils.toBase64([9, 9, 9, 9]);
+            await expect(verifiableCert.decryptFields(verifierWallet)).rejects.toThrow(/Failed to decrypt selectively revealed certificate fields using keyring/);
+        });
+        it('should be able to decrypt fields using the anyone wallet', async () => {
+            const { certificateFields, masterKeyring } = await MasterCertificate_1.MasterCertificate.createCertificateFields(subjectWallet, certifierIdentityKey, plaintextFields);
+            const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, certifierIdentityKey, 'anyone', certificateFields, Object.keys(certificateFields), masterKeyring, sampleSerialNumber);
+            verifiableCert = new VerifiableCertificate_1.VerifiableCertificate(sampleType, sampleSerialNumber, subjectIdentityKey, 'anyone', sampleRevocationOutpoint, certificateFields, keyringForVerifier);
+            const decrypted = await verifiableCert.decryptFields(new index_1.ProtoWallet('anyone'));
+            expect(decrypted).toEqual(plaintextFields);
+        });
+    });
+});
+//# sourceMappingURL=VerifiableCertificate.test.js.map

package/dist/cjs/src/auth/certificates/__tests/VerifiableCertificate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerifiableCertificate.test.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/VerifiableCertificate.test.ts"],"names":[],"mappings":";;AAAA,4FAAwF;AACxF,yCAIwB;AACxB,kGAA8F;AAE9F,oFAAgF;AAChF,iDAAmD;AAEnD,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,iBAAiB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IACjD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAA;IACrE,MAAM,mBAAmB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IACnD,MAAM,oBAAoB,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAA;IACzE,MAAM,kBAAkB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IAClD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAA;IAEvE,MAAM,aAAa,GAAG,IAAI,2CAAoB,CAAC,iBAAiB,CAAC,CAAA;IACjE,MAAM,cAAc,GAAG,IAAI,2CAAoB,CAAC,kBAAkB,CAAC,CAAA;IAEnE,MAAM,UAAU,GAAG,WAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACxD,MAAM,kBAAkB,GAAG,WAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,wBAAwB,GAC5B,oEAAoE,CAAA;IAEtE,MAAM,eAAe,GAAG;QACtB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE,cAAc;KAC7B,CAAA;IAED,IAAI,cAAqC,CAAA;IAEzC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,iFAAiF;QACjF,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,GACxC,MAAM,qCAAiB,CAAC,uBAAuB,CAC7C,aAAa,EACb,oBAAoB,EACpB,eAAe,CAChB,CAAA;QACH,MAAM,kBAAkB,GAAG,MAAM,qCAAiB,CAAC,wBAAwB,CACzE,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,aAAa,EACb,kBAAkB,CACnB,CAAA;QACD,cAAc,GAAG,IAAI,6CAAqB,CACxC,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,6CAAqB,CAAC,CAAA;YAC5D,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YAC/C,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAC1D,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YAC9D,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAC/C,wBAAwB,CACzB,CAAA;YACD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;YAC3C,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;YACxG,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;YACpE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;YACpG,MAAM,eAAe,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;YAC/C,MAAM,WAAW,GAAG,IAAI,2CAAoB,CAAC,eAAe,CAAC,CAAA;YAE7D,MAAM,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACrE,yEAAyE,CAC1E,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAA;YACpC,MAAM,gBAAgB,GAAG,IAAI,6CAAqB,CAChD,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,YAAY,EAC3B,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,SAAS,EACxB,cAAc,CAAC,kBAAkB,EACjC,MAAM,EACN,EAAE,EAAE,QAAQ;YACZ,cAAc,CAAC,SAAS,CACzB,CAAA;YAED,MAAM,MAAM,CACV,gBAAgB,CAAC,aAAa,CAAC,cAAc,CAAC,CAC/C,CAAC,OAAO,CAAC,OAAO,CACf,uEAAuE,CACxE,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,8DAA8D;YAC9D,cAAc,CAAC,OAAO,CAAC,IAAI,GAAG,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1D,MAAM,MAAM,CACV,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAC7C,CAAC,OAAO,CAAC,OAAO,CACf,yEAAyE,CAC1E,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,GACxC,MAAM,qCAAiB,CAAC,uBAAuB,CAC7C,aAAa,EACb,oBAAoB,EACpB,eAAe,CAChB,CAAA;YACH,MAAM,kBAAkB,GACtB,MAAM,qCAAiB,CAAC,wBAAwB,CAC9C,aAAa,EACb,oBAAoB,EACpB,QAAQ,EACR,iBAAiB,EACjB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,aAAa,EACb,kBAAkB,CACnB,CAAA;YACH,cAAc,GAAG,IAAI,6CAAqB,CACxC,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,CACnB,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,aAAa,CAClD,IAAI,mBAAW,CAAC,QAAQ,CAAC,CAC1B,CAAA;YACD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/cjs/src/auth/certificates/index.js

@@ -18,9 +18,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Certificate = void 0;
-var Certificate_js_1 = require("./Certificate.js");
-Object.defineProperty(exports, "Certificate", { enumerable: true, get: function () { return __importDefault(Certificate_js_1).default; } });
-__exportStar(require("./MasterCertificate.js"), exports);
-__exportStar(require("./VerifiableCertificate.js"), exports);
-__exportStar(require("./__tests/CompletedProtoWallet.js"), exports);
+var Certificate_1 = require("./Certificate");
+Object.defineProperty(exports, "Certificate", { enumerable: true, get: function () { return __importDefault(Certificate_1).default; } });
+__exportStar(require("./MasterCertificate"), exports);
+__exportStar(require("./VerifiableCertificate"), exports);
+__exportStar(require("./__tests/CompletedProtoWallet"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/src/auth/certificates/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/certificates/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,mDAAyD;AAAhD,8HAAA,OAAO,OAAe;AAC/B,yDAAsC;AACtC,6DAA0C;AAC1C,oEAAiD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/auth/certificates/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,6CAAuD;AAA9C,2HAAA,OAAO,OAAe;AAC/B,sDAAoC;AACpC,0DAAwC;AACxC,iEAA+C"}