@bsv/sdk 1.6.7 → 1.6.9

package/dist/esm/src/auth/certificates/__tests/Certificate.test.js

@@ -0,0 +1,182 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("../../../auth/index");
+const CompletedProtoWallet_1 = require("../../../auth/certificates/__tests/CompletedProtoWallet");
+const index_2 = require("../../../primitives/index");
+describe("Certificate", () => {
+    // Sample data for testing
+    const sampleType = index_2.Utils.toBase64(new Array(32).fill(1));
+    const sampleSerialNumber = index_2.Utils.toBase64(new Array(32).fill(2));
+    const sampleSubjectPrivateKey = index_2.PrivateKey.fromRandom();
+    const sampleSubjectPubKey = sampleSubjectPrivateKey.toPublicKey().toString();
+    const sampleCertifierPrivateKey = index_2.PrivateKey.fromRandom();
+    const sampleCertifierPubKey = sampleCertifierPrivateKey
+        .toPublicKey()
+        .toString();
+    const sampleRevocationOutpoint = "deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef.1";
+    const sampleFields = {
+        name: "Alice",
+        email: "alice@example.com",
+        organization: "Example Corp",
+    };
+    const sampleFieldsEmpty = {};
+    it("should construct a Certificate with valid data", () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        expect(certificate.type).toEqual(sampleType);
+        expect(certificate.serialNumber).toEqual(sampleSerialNumber);
+        expect(certificate.subject).toEqual(sampleSubjectPubKey);
+        expect(certificate.certifier).toEqual(sampleCertifierPubKey);
+        expect(certificate.revocationOutpoint).toEqual(sampleRevocationOutpoint);
+        expect(certificate.signature).toBeUndefined();
+        expect(certificate.fields).toEqual(sampleFields);
+    });
+    it("should serialize and deserialize the Certificate without signature", () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        const serialized = certificate.toBinary(false); // Exclude signature
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.type).toEqual(sampleType);
+        expect(deserializedCertificate.serialNumber).toEqual(sampleSerialNumber);
+        expect(deserializedCertificate.subject).toEqual(sampleSubjectPubKey);
+        expect(deserializedCertificate.certifier).toEqual(sampleCertifierPubKey);
+        expect(deserializedCertificate.revocationOutpoint).toEqual(sampleRevocationOutpoint);
+        expect(deserializedCertificate.signature).toBeUndefined();
+        expect(deserializedCertificate.fields).toEqual(sampleFields);
+    });
+    it("should serialize and deserialize the Certificate with signature", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        // Sign the certificate
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        await certificate.sign(certifierWallet);
+        const serialized = certificate.toBinary(true); // Include signature
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.type).toEqual(sampleType);
+        expect(deserializedCertificate.serialNumber).toEqual(sampleSerialNumber);
+        expect(deserializedCertificate.subject).toEqual(sampleSubjectPubKey);
+        expect(deserializedCertificate.certifier).toEqual(sampleCertifierPubKey);
+        expect(deserializedCertificate.revocationOutpoint).toEqual(sampleRevocationOutpoint);
+        expect(deserializedCertificate.signature).toEqual(certificate.signature);
+        expect(deserializedCertificate.fields).toEqual(sampleFields);
+    });
+    it("should sign the Certificate and verify the signature successfully", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        // Sign the certificate
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        await certificate.sign(certifierWallet);
+        // Verify the signature
+        const isValid = await certificate.verify();
+        expect(isValid).toBe(true);
+    });
+    it("should fail verification if the Certificate is tampered with", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        // Sign the certificate
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        await certificate.sign(certifierWallet);
+        // Tamper with the certificate (modify a field)
+        certificate.fields.email = "attacker@example.com";
+        // Verify the signature
+        await expect(certificate.verify()).rejects.toThrow();
+    });
+    it("should fail verification if the signature is missing", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        // Verify the signature
+        await expect(certificate.verify()).rejects.toThrow();
+    });
+    it("should fail verification if the signature is incorrect", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, "3045022100cde229279465bb91992ccbc30bf6ed4eb8cdd9d517f31b30ff778d500d5400010220134f0e4065984f8668a642a5ad7a80886265f6aaa56d215d6400c216a4802177" // Incorrect signature
+        );
+        // Verify the signature
+        await expect(certificate.verify()).rejects.toThrowErrorMatchingInlineSnapshot(`"Signature is not valid"`);
+    });
+    it("should handle certificates with empty fields", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFieldsEmpty, undefined // No signature
+        );
+        // Sign the certificate
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        await certificate.sign(certifierWallet);
+        // Serialize and deserialize
+        const serialized = certificate.toBinary(true);
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.fields).toEqual(sampleFieldsEmpty);
+        // Verify the signature
+        const isValid = await deserializedCertificate.verify();
+        expect(isValid).toBe(true);
+    });
+    it("should correctly handle serialization/deserialization when signature is excluded", () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, "deadbeef1234" // Placeholder signature
+        );
+        // Serialize without signature
+        const serialized = certificate.toBinary(false);
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.signature).toBeUndefined(); // Signature should be empty
+        expect(deserializedCertificate.fields).toEqual(sampleFields);
+    });
+    it("should correctly handle certificates with long field names and values", async () => {
+        const longFieldName = "longFieldName_".repeat(10); // Exceeding typical lengths
+        const longFieldValue = "longFieldValue_".repeat(20);
+        const fields = {
+            [longFieldName]: longFieldValue,
+        };
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, fields, undefined // No signature
+        );
+        // Sign the certificate
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        await certificate.sign(certifierWallet);
+        // Serialize and deserialize
+        const serialized = certificate.toBinary(true);
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.fields).toEqual(fields);
+        // Verify the signature
+        const isValid = await deserializedCertificate.verify();
+        expect(isValid).toBe(true);
+    });
+    it("should correctly serialize and deserialize the revocationOutpoint", () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, sampleFields, undefined // No signature
+        );
+        const serialized = certificate.toBinary(false);
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.revocationOutpoint).toEqual(sampleRevocationOutpoint);
+    });
+    it("should correctly handle certificates with no fields", async () => {
+        const certificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, sampleRevocationOutpoint, {}, // No fields
+        undefined // No signature
+        );
+        // Sign the certificate
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        await certificate.sign(certifierWallet);
+        // Serialize and deserialize
+        const serialized = certificate.toBinary(true);
+        const deserializedCertificate = index_1.Certificate.fromBinary(serialized);
+        expect(deserializedCertificate.fields).toEqual({});
+        // Verify the signature
+        const isValid = await deserializedCertificate.verify();
+        expect(isValid).toBe(true);
+    });
+    it("should throw if already signed, and should update the certifier field if it differs from the wallet's public key", async () => {
+        // Scenario 1: Certificate already has a signature
+        const preSignedCertificate = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, sampleCertifierPubKey, // We'll pretend this was signed by them
+        sampleRevocationOutpoint, sampleFields, "deadbeef" // Already has a placeholder signature
+        );
+        const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(sampleCertifierPrivateKey);
+        // Trying to sign again should throw
+        await expect(preSignedCertificate.sign(certifierWallet)).rejects.toThrow("Certificate has already been signed!");
+        // Scenario 2: The certifier property is set to something different from the wallet's public key
+        const mismatchedCertifierPubKey = index_2.PrivateKey.fromRandom()
+            .toPublicKey()
+            .toString();
+        const certificateWithMismatch = new index_1.Certificate(sampleType, sampleSerialNumber, sampleSubjectPubKey, mismatchedCertifierPubKey, // Different from actual wallet key
+        sampleRevocationOutpoint, sampleFields);
+        // Sign the certificate; it should automatically update
+        // the certifier field to match the wallet's actual public key
+        const certifierPubKey = (await certifierWallet.getPublicKey({ identityKey: true })).publicKey;
+        await certificateWithMismatch.sign(certifierWallet);
+        expect(certificateWithMismatch.certifier).toBe(certifierPubKey);
+        expect(await certificateWithMismatch.verify()).toBe(true);
+    });
+});
+//# sourceMappingURL=Certificate.test.js.map

package/dist/esm/src/auth/certificates/__tests/Certificate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Certificate.test.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/Certificate.test.ts"],"names":[],"mappings":";;AAAA,+CAAkD;AAClD,kGAA+F;AAC/F,qDAA8D;AAE9D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,0BAA0B;IAC1B,MAAM,UAAU,GAAG,aAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,kBAAkB,GAAG,aAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,uBAAuB,GAAG,kBAAU,CAAC,UAAU,EAAE,CAAC;IACxD,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC7E,MAAM,yBAAyB,GAAG,kBAAU,CAAC,UAAU,EAAE,CAAC;IAC1D,MAAM,qBAAqB,GAAG,yBAAyB;SACpD,WAAW,EAAE;SACb,QAAQ,EAAE,CAAC;IACd,MAAM,wBAAwB,GAC5B,oEAAoE,CAAC;IACvE,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE,cAAc;KAC7B,CAAC;IACF,MAAM,iBAAiB,GAAG,EAAE,CAAC;IAE7B,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;QACpE,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzE,MAAM,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,OAAO,CACxD,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExC,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB;QACnE,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzE,MAAM,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,OAAO,CACxD,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExC,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExC,+CAA+C;QAC/C,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,sBAAsB,CAAC;QAElD,uBAAuB;QACvB,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,gJAAgJ,CAAC,sBAAsB;SACxK,CAAC;QAEF,uBAAuB;QACvB,MAAM,MAAM,CACV,WAAW,CAAC,MAAM,EAAE,CACrB,CAAC,OAAO,CAAC,kCAAkC,CAAC,0BAA0B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,iBAAiB,EACjB,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExC,4BAA4B;QAC5B,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAElE,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,cAAc,CAAC,wBAAwB;SACxC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,4BAA4B;QACvF,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAQ,CAAC,CAAC,4BAA4B;QACtF,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG;YACb,CAAC,aAAa,CAAC,EAAE,cAAc;SAChC,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,MAAM,EACN,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExC,4BAA4B;QAC5B,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEvD,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,OAAO,CACxD,wBAAwB,CACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,EAAE,EAAE,YAAY;QAChB,SAAS,CAAC,eAAe;SAC1B,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExC,4BAA4B;QAC5B,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,uBAAuB,GAAG,mBAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEnD,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kHAAkH,EAAE,KAAK,IAAI,EAAE;QAChI,kDAAkD;QAClD,MAAM,oBAAoB,GAAG,IAAI,mBAAW,CAC1C,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EAAE,wCAAwC;QAC/D,wBAAwB,EACxB,YAAY,EACZ,UAAU,CAAC,sCAAsC;SAClD,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,yBAAyB,CAAC,CAAC;QAE5E,oCAAoC;QACpC,MAAM,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,sCAAsC,CACvC,CAAC;QAEF,gGAAgG;QAChG,MAAM,yBAAyB,GAAG,kBAAU,CAAC,UAAU,EAAE;aACtD,WAAW,EAAE;aACb,QAAQ,EAAE,CAAC;QACd,MAAM,uBAAuB,GAAG,IAAI,mBAAW,CAC7C,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EAAE,mCAAmC;QAC9D,wBAAwB,EACxB,YAAY,CACb,CAAC;QAEF,uDAAuD;QACvD,8DAA8D;QAC9D,MAAM,eAAe,GAAG,CACtB,MAAM,eAAe,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAC1D,CAAC,SAAS,CAAC;QACZ,MAAM,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/src/auth/certificates/__tests/MasterCertificate.test.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const MasterCertificate_1 = require("../../../auth/certificates/MasterCertificate");
+const VerifiableCertificate_1 = require("../../../auth/certificates/VerifiableCertificate");
+const mod_1 = require("../../../../mod");
+const CompletedProtoWallet_1 = require("../../../auth/certificates/__tests/CompletedProtoWallet");
+describe('MasterCertificate', () => {
+    const subjectPrivateKey = mod_1.PrivateKey.fromRandom();
+    const certifierPrivateKey = mod_1.PrivateKey.fromRandom();
+    // A mock revocation outpoint for testing
+    const mockRevocationOutpoint = 'deadbeefdeadbeefdeadbeefdeadbeef00000000000000000000000000000000.1';
+    // Arbitrary certificate data (in plaintext)
+    const plaintextFields = {
+        name: 'Alice',
+        email: 'alice@example.com',
+        department: 'Engineering'
+    };
+    const subjectWallet = new CompletedProtoWallet_1.CompletedProtoWallet(subjectPrivateKey);
+    const certifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(certifierPrivateKey);
+    let subjectIdentityKey;
+    let certifierIdentityKey;
+    beforeAll(async () => {
+        subjectIdentityKey = (await subjectWallet.getPublicKey({ identityKey: true })).publicKey;
+        certifierIdentityKey = (await certifierWallet.getPublicKey({ identityKey: true })).publicKey;
+    });
+    describe('constructor', () => {
+        it('should construct a MasterCertificate successfully when masterKeyring is valid', () => {
+            // Prepare a minimal valid MasterCertificate
+            const fieldSymKey = mod_1.SymmetricKey.fromRandom();
+            const encryptedFieldValue = mod_1.Utils.toBase64(fieldSymKey.encrypt(mod_1.Utils.toArray('Alice', 'utf8')));
+            const encryptedKeyForSubject = mod_1.Utils.toBase64([0, 1, 2, 3]);
+            // We assume we have the same fieldName in both `fields` and `masterKeyring`.
+            const fields = { name: encryptedFieldValue };
+            const masterKeyring = { name: encryptedKeyForSubject };
+            const certificate = new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), // type
+            mod_1.Utils.toBase64((0, mod_1.Random)(16)), // serialNumber
+            subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, fields, masterKeyring);
+            expect(certificate).toBeInstanceOf(MasterCertificate_1.MasterCertificate);
+            expect(certificate.fields).toEqual(fields);
+            expect(certificate.masterKeyring).toEqual(masterKeyring);
+            expect(certificate.subject).toEqual(subjectIdentityKey);
+            expect(certificate.certifier).toEqual(certifierIdentityKey);
+        });
+        it('should throw if masterKeyring is missing a key for any field', () => {
+            const fields = { name: 'encrypted_value' };
+            const masterKeyring = {}; // intentionally empty
+            expect(() => {
+                new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), // type
+                mod_1.Utils.toBase64((0, mod_1.Random)(16)), // serialNumber
+                subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, fields, masterKeyring);
+            }).toThrowError(/Master keyring must contain a value for every field/);
+        });
+    });
+    describe('decryptFields (static)', () => {
+        it('should decrypt all fields correctly using subject wallet', async () => {
+            // Issue a certificate for the subject, which includes a valid masterKeyring
+            const certificate = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, plaintextFields, 'TEST_CERT');
+            // Now subject should be able to decrypt all fields via static method
+            const decrypted = await MasterCertificate_1.MasterCertificate.decryptFields(subjectWallet, certificate.masterKeyring, certificate.fields, certificate.certifier // because certifier was the encryption counterparty
+            );
+            expect(decrypted).toEqual(plaintextFields);
+        });
+        it('should throw if masterKeyring is empty or invalid', async () => {
+            // Manually create a MasterCertificate with an empty masterKeyring
+            expect(() => new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), mod_1.Utils.toBase64((0, mod_1.Random)(16)), subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, { name: mod_1.Utils.toBase64([1, 2, 3]) }, {})).toThrow('Master keyring must contain a value for every field. Missing key for field: "name"');
+        });
+        it('should throw if decryption fails for any field', async () => {
+            // Manually craft a scenario where the key is incorrect
+            const badKeyMasterKeyring = mod_1.Utils.toBase64([9, 9, 9, 9]); // Not the correct key
+            const badKeyCertificate = new MasterCertificate_1.MasterCertificate(mod_1.Utils.toBase64((0, mod_1.Random)(16)), mod_1.Utils.toBase64((0, mod_1.Random)(16)), subjectIdentityKey, certifierIdentityKey, mockRevocationOutpoint, {
+                name: mod_1.Utils.toBase64(mod_1.SymmetricKey.fromRandom().encrypt(mod_1.Utils.toArray('Alice', 'utf8')))
+            }, { name: badKeyMasterKeyring });
+            await expect(MasterCertificate_1.MasterCertificate.decryptFields(subjectWallet, badKeyCertificate.masterKeyring, badKeyCertificate.fields, badKeyCertificate.certifier)).rejects.toThrow('Failed to decrypt all master certificate fields.');
+        });
+    });
+    describe('createKeyringForVerifier (static)', () => {
+        const verifierPrivateKey = mod_1.PrivateKey.fromRandom();
+        const verifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(verifierPrivateKey);
+        let verifierIdentityKey;
+        let issuedCert;
+        beforeAll(async () => {
+            verifierIdentityKey = (await verifierWallet.getPublicKey({ identityKey: true })).publicKey;
+            // Issue a certificate to reuse in tests
+            issuedCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, plaintextFields, 'TEST_CERT');
+        });
+        it('should create a verifier keyring for specified fields', async () => {
+            // We only want to share "name" with the verifier
+            const fieldsToReveal = ['name'];
+            const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, // the original certifier
+            verifierIdentityKey, // the new verifier
+            issuedCert.fields, // encrypted fields
+            fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber);
+            // The new keyring should only contain "name"
+            expect(Object.keys(keyringForVerifier)).toHaveLength(1);
+            expect(keyringForVerifier).toHaveProperty('name');
+            // Now let's create a VerifiableCertificate for the verifier
+            const verifiableCert = new VerifiableCertificate_1.VerifiableCertificate(issuedCert.type, issuedCert.serialNumber, issuedCert.subject, issuedCert.certifier, issuedCert.revocationOutpoint, issuedCert.fields, keyringForVerifier, issuedCert.signature);
+            // The verifier should successfully decrypt the "name" field
+            const decrypted = await verifiableCert.decryptFields(verifierWallet);
+            expect(decrypted).toEqual({ name: plaintextFields.name });
+        });
+        it('should throw if fields to reveal are not a subset of the certificate fields', async () => {
+            await expect(MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, verifierIdentityKey, issuedCert.fields, ['nonexistent_field'], issuedCert.masterKeyring, issuedCert.serialNumber)).rejects.toThrow(/Fields to reveal must be a subset of the certificate fields\. Missing the "nonexistent_field" field\./);
+        });
+        it('should throw if the master key fails to decrypt the corresponding field', async () => {
+            // We'll tamper with the certificate's masterKeyring so that a field key is invalid
+            const tamperedCert = new MasterCertificate_1.MasterCertificate(issuedCert.type, issuedCert.serialNumber, issuedCert.subject, issuedCert.certifier, issuedCert.revocationOutpoint, issuedCert.fields, {
+                // Tamper: replace 'name' field with nonsense
+                name: mod_1.Utils.toBase64([66, 66, 66]),
+                email: issuedCert.masterKeyring.email,
+                department: issuedCert.masterKeyring.department
+            }, issuedCert.signature);
+            await expect(MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, tamperedCert.certifier, verifierIdentityKey, tamperedCert.fields, ['name'], tamperedCert.masterKeyring, tamperedCert.serialNumber)).rejects.toThrow('Failed to decrypt certificate field!');
+        });
+        it('should support optional originator parameter', async () => {
+            const fieldsToReveal = ['name'];
+            const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, verifierIdentityKey, issuedCert.fields, fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber, 'my-originator');
+            expect(keyringForVerifier).toHaveProperty('name');
+        });
+        it('should support counterparty of "anyone" or "self"', async () => {
+            const fieldsToReveal = ['name'];
+            // "anyone"
+            const anyoneKeyring = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, 'anyone', issuedCert.fields, fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber, 'my-originator');
+            expect(anyoneKeyring).toHaveProperty('name');
+            // "self"
+            const selfKeyring = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, issuedCert.certifier, 'self', issuedCert.fields, fieldsToReveal, issuedCert.masterKeyring, issuedCert.serialNumber, 'my-originator');
+            expect(selfKeyring).toHaveProperty('name');
+        });
+    });
+    describe('issueCertificateForSubject (static)', () => {
+        it('should issue a valid MasterCertificate for the given subject', async () => {
+            const newPlaintextFields = {
+                project: 'Top Secret',
+                clearanceLevel: 'High'
+            };
+            const revocationFn = jest.fn().mockResolvedValue(mockRevocationOutpoint);
+            const newCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, newPlaintextFields, 'TEST_CERT', revocationFn);
+            expect(newCert).toBeInstanceOf(MasterCertificate_1.MasterCertificate);
+            // The certificate's fields should be encrypted base64
+            for (const fieldName in newPlaintextFields) {
+                expect(newCert.fields[fieldName]).toMatch(/^[A-Za-z0-9+/]+=*$/); // quick base64 check
+            }
+            // The masterKeyring should also contain base64 strings
+            for (const fieldName in newPlaintextFields) {
+                expect(newCert.masterKeyring[fieldName]).toMatch(/^[A-Za-z0-9+/]+=*$/);
+            }
+            // Check revocation outpoint is from mock
+            expect(newCert.revocationOutpoint).toEqual(mockRevocationOutpoint);
+            // Check we have a signature
+            expect(newCert.signature).toBeDefined();
+            // Check that the revocationFn was called
+            expect(revocationFn).toHaveBeenCalledWith(newCert.serialNumber);
+        });
+        it('should allow passing a custom serial number when issuing the certificate', async () => {
+            const customSerialNumber = mod_1.Utils.toBase64((0, mod_1.Random)(32));
+            const newPlaintextFields = { status: 'Approved' };
+            const newCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(certifierWallet, subjectIdentityKey, newPlaintextFields, 'TEST_CERT', undefined, // No custom revocation function
+            customSerialNumber // Pass our custom serial number
+            );
+            expect(newCert).toBeInstanceOf(MasterCertificate_1.MasterCertificate);
+            expect(newCert.serialNumber).toEqual(customSerialNumber); // Must match exactly
+            // Check encryption
+            for (const fieldName in newPlaintextFields) {
+                expect(newCert.fields[fieldName]).toMatch(/^[A-Za-z0-9+/]+=*$/);
+            }
+        });
+        it('should allow issuing a self-signed certificate and decrypt it with the same wallet', async () => {
+            // In a self-signed scenario, the subject and certifier are the same
+            const subjectWallet = new CompletedProtoWallet_1.CompletedProtoWallet(mod_1.PrivateKey.fromRandom());
+            // Some sample fields
+            const selfSignedFields = {
+                owner: 'Bob',
+                organization: 'SelfCo'
+            };
+            // Issue the certificate for "self"
+            const selfSignedCert = await MasterCertificate_1.MasterCertificate.issueCertificateForSubject(subjectWallet, // act as certifier
+            'self', selfSignedFields, 'SELF_SIGNED_TEST');
+            // Now we attempt to decrypt the fields with the same wallet
+            const decrypted = await MasterCertificate_1.MasterCertificate.decryptFields(subjectWallet, selfSignedCert.masterKeyring, selfSignedCert.fields, 'self');
+            expect(decrypted).toEqual(selfSignedFields);
+        });
+    });
+});
+//# sourceMappingURL=MasterCertificate.test.js.map

package/dist/esm/src/auth/certificates/__tests/MasterCertificate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MasterCertificate.test.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/MasterCertificate.test.ts"],"names":[],"mappings":";;AAAA,oFAAgF;AAChF,4FAAwF;AACxF,yCAKwB;AACxB,kGAA8F;AAE9F,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,iBAAiB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IACjD,MAAM,mBAAmB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IAEnD,yCAAyC;IACzC,MAAM,sBAAsB,GAC1B,oEAAoE,CAAA;IAEtE,4CAA4C;IAC5C,MAAM,eAAe,GAAG;QACtB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,mBAAmB;QAC1B,UAAU,EAAE,aAAa;KAC1B,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,2CAAoB,CAAC,iBAAiB,CAAC,CAAA;IACjE,MAAM,eAAe,GAAG,IAAI,2CAAoB,CAAC,mBAAmB,CAAC,CAAA;IACrE,IAAI,kBAA0B,CAAA;IAC9B,IAAI,oBAA4B,CAAA;IAEhC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,kBAAkB,GAAG,CACnB,MAAM,aAAa,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACxD,CAAC,SAAS,CAAA;QACX,oBAAoB,GAAG,CACrB,MAAM,eAAe,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAC1D,CAAC,SAAS,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;YACvF,4CAA4C;YAC5C,MAAM,WAAW,GAAG,kBAAY,CAAC,UAAU,EAAE,CAAA;YAC7C,MAAM,mBAAmB,GAAG,WAAK,CAAC,QAAQ,CACxC,WAAW,CAAC,OAAO,CAAC,WAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAa,CAChE,CAAA;YAED,MAAM,sBAAsB,GAAG,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC3D,6EAA6E;YAC7E,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAA;YAC5C,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAA;YAEtD,MAAM,WAAW,GAAG,IAAI,qCAAiB,CACvC,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,OAAO;YACnC,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,eAAe;YAC3C,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,MAAM,EACN,aAAa,CACd,CAAA;YAED,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,qCAAiB,CAAC,CAAA;YACrD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YACxD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YACvD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAA;YAC1C,MAAM,aAAa,GAAG,EAAE,CAAA,CAAC,sBAAsB;YAE/C,MAAM,CAAC,GAAG,EAAE;gBACV,IAAI,qCAAiB,CACnB,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,OAAO;gBACnC,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAAE,eAAe;gBAC3C,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,MAAM,EACN,aAAa,CACd,CAAA;YACH,CAAC,CAAC,CAAC,YAAY,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,4EAA4E;YAC5E,MAAM,WAAW,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CACpE,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,WAAW,CACZ,CAAA;YAED,qEAAqE;YACrE,MAAM,SAAS,GAAG,MAAM,qCAAiB,CAAC,aAAa,CACrD,aAAa,EACb,WAAW,CAAC,aAAa,EACzB,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,SAAS,CAAC,oDAAoD;aAC3E,CAAA;YACD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,kEAAkE;YAClE,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,qCAAiB,CACnB,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,EAAE,IAAI,EAAE,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EACnC,EAAE,CACH,CACJ,CAAC,OAAO,CACP,oFAAoF,CACrF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,uDAAuD;YACvD,MAAM,mBAAmB,GAAG,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,sBAAsB;YAC/E,MAAM,iBAAiB,GAAG,IAAI,qCAAiB,CAC7C,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB;gBACE,IAAI,EAAE,WAAK,CAAC,QAAQ,CAClB,kBAAY,CAAC,UAAU,EAAE,CAAC,OAAO,CAC/B,WAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CACnB,CACd;aACF,EACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAC9B,CAAA;YAED,MAAM,MAAM,CACV,qCAAiB,CAAC,aAAa,CAC7B,aAAa,EACb,iBAAiB,CAAC,aAAa,EAC/B,iBAAiB,CAAC,MAAM,EACxB,iBAAiB,CAAC,SAAS,CAC5B,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,MAAM,kBAAkB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;QAClD,MAAM,cAAc,GAAG,IAAI,2CAAoB,CAAC,kBAAkB,CAAC,CAAA;QACnE,IAAI,mBAA2B,CAAA;QAE/B,IAAI,UAA6B,CAAA;QAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,mBAAmB,GAAG,CACpB,MAAM,cAAc,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACzD,CAAC,SAAS,CAAA;YACX,wCAAwC;YACxC,UAAU,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CAC7D,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,iDAAiD;YACjD,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAA;YAE/B,MAAM,kBAAkB,GACtB,MAAM,qCAAiB,CAAC,wBAAwB,CAC9C,aAAa,EACb,UAAU,CAAC,SAAS,EAAE,yBAAyB;YAC/C,mBAAmB,EAAE,mBAAmB;YACxC,UAAU,CAAC,MAAM,EAAE,mBAAmB;YACtC,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,CACxB,CAAA;YAEH,6CAA6C;YAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,kBAAkB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAEjD,4DAA4D;YAC5D,MAAM,cAAc,GAAG,IAAI,6CAAqB,CAC9C,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,kBAAkB,EAC7B,UAAU,CAAC,MAAM,EACjB,kBAAkB,EAClB,UAAU,CAAC,SAAS,CACrB,CAAA;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;YACpE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;YAC3F,MAAM,MAAM,CACV,qCAAiB,CAAC,wBAAwB,CACxC,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,mBAAmB,EACnB,UAAU,CAAC,MAAM,EACjB,CAAC,mBAAmB,CAAC,EACrB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,CACxB,CACF,CAAC,OAAO,CAAC,OAAO,CACf,uGAAuG,CACxG,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,mFAAmF;YACnF,MAAM,YAAY,GAAG,IAAI,qCAAiB,CACxC,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,kBAAkB,EAC7B,UAAU,CAAC,MAAM,EACjB;gBACE,6CAA6C;gBAC7C,IAAI,EAAE,WAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClC,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,KAAK;gBACrC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,UAAU;aAChD,EACD,UAAU,CAAC,SAAS,CACrB,CAAA;YAED,MAAM,MAAM,CACV,qCAAiB,CAAC,wBAAwB,CACxC,aAAa,EACb,YAAY,CAAC,SAAS,EACtB,mBAAmB,EACnB,YAAY,CAAC,MAAM,EACnB,CAAC,MAAM,CAAC,EACR,YAAY,CAAC,aAAa,EAC1B,YAAY,CAAC,YAAY,CAC1B,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAA;YAC/B,MAAM,kBAAkB,GACtB,MAAM,qCAAiB,CAAC,wBAAwB,CAC9C,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,mBAAmB,EACnB,UAAU,CAAC,MAAM,EACjB,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,EACvB,eAAe,CAChB,CAAA;YACH,MAAM,CAAC,kBAAkB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,CAAA;YAE/B,WAAW;YACX,MAAM,aAAa,GAAG,MAAM,qCAAiB,CAAC,wBAAwB,CACpE,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,QAAQ,EACR,UAAU,CAAC,MAAM,EACjB,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,EACvB,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,aAAa,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAE5C,SAAS;YACT,MAAM,WAAW,GAAG,MAAM,qCAAiB,CAAC,wBAAwB,CAClE,aAAa,EACb,UAAU,CAAC,SAAS,EACpB,MAAM,EACN,UAAU,CAAC,MAAM,EACjB,cAAc,EACd,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,YAAY,EACvB,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,kBAAkB,GAAG;gBACzB,OAAO,EAAE,YAAY;gBACrB,cAAc,EAAE,MAAM;aACvB,CAAA;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAA;YAExE,MAAM,OAAO,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CAChE,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,YAAY,CACb,CAAA;YAED,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,qCAAiB,CAAC,CAAA;YACjD,sDAAsD;YACtD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA,CAAC,qBAAqB;YACvF,CAAC;YACD,uDAAuD;YACvD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACxE,CAAC;YACD,yCAAyC;YACzC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;YAClE,4BAA4B;YAC5B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;YACvC,yCAAyC;YACzC,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,kBAAkB,GAAG,WAAK,CAAC,QAAQ,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,CAAA;YACrD,MAAM,kBAAkB,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;YACjD,MAAM,OAAO,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CAChE,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,SAAS,EAAE,gCAAgC;YAC3C,kBAAkB,CAAC,gCAAgC;aACpD,CAAA;YAED,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,qCAAiB,CAAC,CAAA;YACjD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA,CAAC,qBAAqB;YAC9E,mBAAmB;YACnB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACjE,CAAC;QACH,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;YAClG,oEAAoE;YACpE,MAAM,aAAa,GAAG,IAAI,2CAAoB,CAAC,gBAAU,CAAC,UAAU,EAAE,CAAC,CAAA;YAEvE,qBAAqB;YACrB,MAAM,gBAAgB,GAAG;gBACvB,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,QAAQ;aACvB,CAAA;YAED,mCAAmC;YACnC,MAAM,cAAc,GAAG,MAAM,qCAAiB,CAAC,0BAA0B,CACvE,aAAa,EAAE,mBAAmB;YAClC,MAAM,EACN,gBAAgB,EAChB,kBAAkB,CACnB,CAAA;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,qCAAiB,CAAC,aAAa,CACrD,aAAa,EACb,cAAc,CAAC,aAAa,EAC5B,cAAc,CAAC,MAAM,EACrB,MAAM,CACP,CAAA;YAED,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/esm/src/auth/certificates/__tests/VerifiableCertificate.test.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const VerifiableCertificate_1 = require("../../../auth/certificates/VerifiableCertificate");
+const mod_1 = require("../../../../mod");
+const CompletedProtoWallet_1 = require("../../../auth/certificates/__tests/CompletedProtoWallet");
+const MasterCertificate_1 = require("../../../auth/certificates/MasterCertificate");
+const index_1 = require("../../../wallet/index");
+describe('VerifiableCertificate', () => {
+    const subjectPrivateKey = mod_1.PrivateKey.fromRandom();
+    const subjectIdentityKey = subjectPrivateKey.toPublicKey().toString();
+    const certifierPrivateKey = mod_1.PrivateKey.fromRandom();
+    const certifierIdentityKey = certifierPrivateKey.toPublicKey().toString();
+    const verifierPrivateKey = mod_1.PrivateKey.fromRandom();
+    const verifierIdentityKey = verifierPrivateKey.toPublicKey().toString();
+    const subjectWallet = new CompletedProtoWallet_1.CompletedProtoWallet(subjectPrivateKey);
+    const verifierWallet = new CompletedProtoWallet_1.CompletedProtoWallet(verifierPrivateKey);
+    const sampleType = mod_1.Utils.toBase64(new Array(32).fill(1));
+    const sampleSerialNumber = mod_1.Utils.toBase64(new Array(32).fill(2));
+    const sampleRevocationOutpoint = 'deadbeefdeadbeefdeadbeefdeadbeef00000000000000000000000000000000.1';
+    const plaintextFields = {
+        name: 'Alice',
+        email: 'alice@example.com',
+        organization: 'Example Corp'
+    };
+    let verifiableCert;
+    beforeEach(async () => {
+        // For each test, we'll build a fresh VerifiableCertificate with valid encryption
+        const { certificateFields, masterKeyring } = await MasterCertificate_1.MasterCertificate.createCertificateFields(subjectWallet, certifierIdentityKey, plaintextFields);
+        const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, certifierIdentityKey, verifierIdentityKey, certificateFields, Object.keys(certificateFields), masterKeyring, sampleSerialNumber);
+        verifiableCert = new VerifiableCertificate_1.VerifiableCertificate(sampleType, sampleSerialNumber, subjectIdentityKey, certifierIdentityKey, sampleRevocationOutpoint, certificateFields, keyringForVerifier);
+    });
+    describe('constructor', () => {
+        it('should create a VerifiableCertificate with all required properties', () => {
+            expect(verifiableCert).toBeInstanceOf(VerifiableCertificate_1.VerifiableCertificate);
+            expect(verifiableCert.type).toEqual(sampleType);
+            expect(verifiableCert.serialNumber).toEqual(sampleSerialNumber);
+            expect(verifiableCert.subject).toEqual(subjectIdentityKey);
+            expect(verifiableCert.certifier).toEqual(certifierIdentityKey);
+            expect(verifiableCert.revocationOutpoint).toEqual(sampleRevocationOutpoint);
+            expect(verifiableCert.fields).toBeDefined();
+            expect(verifiableCert.keyring).toBeDefined();
+        });
+    });
+    describe('decryptFields', () => {
+        it('should decrypt fields successfully when provided the correct verifier wallet and keyring', async () => {
+            const decrypted = await verifiableCert.decryptFields(verifierWallet);
+            expect(decrypted).toEqual(plaintextFields);
+        });
+        it('should fail if the verifier wallet does not have the correct private key (wrong key)', async () => {
+            const wrongPrivateKey = mod_1.PrivateKey.fromRandom();
+            const wrongWallet = new CompletedProtoWallet_1.CompletedProtoWallet(wrongPrivateKey);
+            await expect(verifiableCert.decryptFields(wrongWallet)).rejects.toThrow(/Failed to decrypt selectively revealed certificate fields using keyring/);
+        });
+        it('should fail if the keyring is empty or missing keys', async () => {
+            // Create a new VerifiableCertificate but with an empty keyring
+            const fields = verifiableCert.fields;
+            const emptyKeyringCert = new VerifiableCertificate_1.VerifiableCertificate(verifiableCert.type, verifiableCert.serialNumber, verifiableCert.subject, verifiableCert.certifier, verifiableCert.revocationOutpoint, fields, {}, // empty
+            verifiableCert.signature);
+            await expect(emptyKeyringCert.decryptFields(verifierWallet)).rejects.toThrow('A keyring is required to decrypt certificate fields for the verifier.');
+        });
+        it('should fail if the encrypted field or its key is tampered', async () => {
+            // Tamper the keyring so it doesn't match the field encryption
+            verifiableCert.keyring.name = mod_1.Utils.toBase64([9, 9, 9, 9]);
+            await expect(verifiableCert.decryptFields(verifierWallet)).rejects.toThrow(/Failed to decrypt selectively revealed certificate fields using keyring/);
+        });
+        it('should be able to decrypt fields using the anyone wallet', async () => {
+            const { certificateFields, masterKeyring } = await MasterCertificate_1.MasterCertificate.createCertificateFields(subjectWallet, certifierIdentityKey, plaintextFields);
+            const keyringForVerifier = await MasterCertificate_1.MasterCertificate.createKeyringForVerifier(subjectWallet, certifierIdentityKey, 'anyone', certificateFields, Object.keys(certificateFields), masterKeyring, sampleSerialNumber);
+            verifiableCert = new VerifiableCertificate_1.VerifiableCertificate(sampleType, sampleSerialNumber, subjectIdentityKey, 'anyone', sampleRevocationOutpoint, certificateFields, keyringForVerifier);
+            const decrypted = await verifiableCert.decryptFields(new index_1.ProtoWallet('anyone'));
+            expect(decrypted).toEqual(plaintextFields);
+        });
+    });
+});
+//# sourceMappingURL=VerifiableCertificate.test.js.map

package/dist/esm/src/auth/certificates/__tests/VerifiableCertificate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerifiableCertificate.test.js","sourceRoot":"","sources":["../../../../../../src/auth/certificates/__tests/VerifiableCertificate.test.ts"],"names":[],"mappings":";;AAAA,4FAAwF;AACxF,yCAIwB;AACxB,kGAA8F;AAE9F,oFAAgF;AAChF,iDAAmD;AAEnD,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,iBAAiB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IACjD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAA;IACrE,MAAM,mBAAmB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IACnD,MAAM,oBAAoB,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAA;IACzE,MAAM,kBAAkB,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;IAClD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAA;IAEvE,MAAM,aAAa,GAAG,IAAI,2CAAoB,CAAC,iBAAiB,CAAC,CAAA;IACjE,MAAM,cAAc,GAAG,IAAI,2CAAoB,CAAC,kBAAkB,CAAC,CAAA;IAEnE,MAAM,UAAU,GAAG,WAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACxD,MAAM,kBAAkB,GAAG,WAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,wBAAwB,GAC5B,oEAAoE,CAAA;IAEtE,MAAM,eAAe,GAAG;QACtB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE,cAAc;KAC7B,CAAA;IAED,IAAI,cAAqC,CAAA;IAEzC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,iFAAiF;QACjF,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,GACxC,MAAM,qCAAiB,CAAC,uBAAuB,CAC7C,aAAa,EACb,oBAAoB,EACpB,eAAe,CAChB,CAAA;QACH,MAAM,kBAAkB,GAAG,MAAM,qCAAiB,CAAC,wBAAwB,CACzE,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,aAAa,EACb,kBAAkB,CACnB,CAAA;QACD,cAAc,GAAG,IAAI,6CAAqB,CACxC,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,6CAAqB,CAAC,CAAA;YAC5D,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YAC/C,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAC/D,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAC1D,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YAC9D,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAC/C,wBAAwB,CACzB,CAAA;YACD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;YAC3C,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;YACxG,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;YACpE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;YACpG,MAAM,eAAe,GAAG,gBAAU,CAAC,UAAU,EAAE,CAAA;YAC/C,MAAM,WAAW,GAAG,IAAI,2CAAoB,CAAC,eAAe,CAAC,CAAA;YAE7D,MAAM,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACrE,yEAAyE,CAC1E,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAA;YACpC,MAAM,gBAAgB,GAAG,IAAI,6CAAqB,CAChD,cAAc,CAAC,IAAI,EACnB,cAAc,CAAC,YAAY,EAC3B,cAAc,CAAC,OAAO,EACtB,cAAc,CAAC,SAAS,EACxB,cAAc,CAAC,kBAAkB,EACjC,MAAM,EACN,EAAE,EAAE,QAAQ;YACZ,cAAc,CAAC,SAAS,CACzB,CAAA;YAED,MAAM,MAAM,CACV,gBAAgB,CAAC,aAAa,CAAC,cAAc,CAAC,CAC/C,CAAC,OAAO,CAAC,OAAO,CACf,uEAAuE,CACxE,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,8DAA8D;YAC9D,cAAc,CAAC,OAAO,CAAC,IAAI,GAAG,WAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1D,MAAM,MAAM,CACV,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC,CAC7C,CAAC,OAAO,CAAC,OAAO,CACf,yEAAyE,CAC1E,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,iBAAiB,EAAE,aAAa,EAAE,GACxC,MAAM,qCAAiB,CAAC,uBAAuB,CAC7C,aAAa,EACb,oBAAoB,EACpB,eAAe,CAChB,CAAA;YACH,MAAM,kBAAkB,GACtB,MAAM,qCAAiB,CAAC,wBAAwB,CAC9C,aAAa,EACb,oBAAoB,EACpB,QAAQ,EACR,iBAAiB,EACjB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,aAAa,EACb,kBAAkB,CACnB,CAAA;YACH,cAAc,GAAG,IAAI,6CAAqB,CACxC,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,CACnB,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,aAAa,CAClD,IAAI,mBAAW,CAAC,QAAQ,CAAC,CAC1B,CAAA;YACD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/esm/src/auth/utils/__tests/cryptononce.test.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("../../../primitives/index");
+const createNonce_1 = require("../../../auth/utils/createNonce");
+const verifyNonce_1 = require("../../../auth/utils/verifyNonce");
+const CompletedProtoWallet_1 = require("../../../auth/certificates/__tests/CompletedProtoWallet");
+describe('createNonce', () => {
+    let mockWallet;
+    beforeEach(() => {
+        mockWallet = {
+            createHmac: jest.fn().mockResolvedValue({ hmac: new Uint8Array(16) })
+        };
+    });
+    afterEach(() => {
+        jest.clearAllMocks();
+    });
+    it('throws an error if wallet fails to create HMAC', async () => {
+        // Mock failure of HMAC creation
+        ;
+        mockWallet.createHmac.mockRejectedValue(new Error('Failed to create HMAC'));
+        await expect((0, createNonce_1.createNonce)(mockWallet)).rejects.toThrow('Failed to create HMAC');
+    });
+    it('creates a 256-bit nonce', async () => {
+        const nonce = await (0, createNonce_1.createNonce)(mockWallet);
+        expect(Buffer.from(nonce, 'base64').byteLength).toEqual(32);
+    });
+});
+describe('verifyNonce', () => {
+    let mockWallet;
+    beforeEach(() => {
+        mockWallet = {
+            createHmac: jest.fn().mockResolvedValue({ hmac: new Uint8Array(16) }),
+            verifyHmac: jest.fn().mockResolvedValue({ valid: true })
+        };
+    });
+    afterEach(() => {
+        jest.clearAllMocks();
+    });
+    it('does not verify an invalid nonce', async () => {
+        ;
+        mockWallet.verifyHmac.mockResolvedValue({ valid: false });
+        const nonce = await (0, createNonce_1.createNonce)(mockWallet);
+        await expect((0, verifyNonce_1.verifyNonce)(nonce + 'ABC', mockWallet)).resolves.toEqual(false);
+        await expect((0, verifyNonce_1.verifyNonce)(nonce + '=', mockWallet)).resolves.toEqual(false);
+        await expect((0, verifyNonce_1.verifyNonce)(Buffer.from(nonce + Buffer.from('extra').toString('base64'), 'base64').toString('base64'), mockWallet)).resolves.toEqual(false);
+    });
+    it('returns false for an invalid HMAC verification', async () => {
+        ;
+        mockWallet.verifyHmac.mockResolvedValue({ valid: false });
+        const nonce = await (0, createNonce_1.createNonce)(mockWallet);
+        await expect((0, verifyNonce_1.verifyNonce)(nonce, mockWallet)).resolves.toEqual(false);
+    });
+    it('verifies a 256-bit nonce', async () => {
+        ;
+        mockWallet.verifyHmac.mockResolvedValue({ valid: true });
+        const nonce1 = await (0, createNonce_1.createNonce)(mockWallet);
+        const nonce2 = await (0, createNonce_1.createNonce)(mockWallet);
+        expect(Buffer.from(nonce1, 'base64').byteLength).toEqual(32);
+        expect(Buffer.from(nonce2, 'base64').byteLength).toEqual(32);
+        await expect((0, verifyNonce_1.verifyNonce)(nonce1, mockWallet)).resolves.toEqual(true);
+        await expect((0, verifyNonce_1.verifyNonce)(nonce2, mockWallet)).resolves.toEqual(true);
+    });
+    it('verifies nonce using real createHmac and verifyHmac', async () => {
+        const realWallet = new CompletedProtoWallet_1.CompletedProtoWallet(index_1.PrivateKey.fromRandom());
+        const nonce = await (0, createNonce_1.createNonce)(realWallet);
+        const isValid = await (0, verifyNonce_1.verifyNonce)(nonce, realWallet);
+        expect(isValid).toEqual(true);
+    });
+    it('SerialNumber use-case', async () => {
+        const clientWallet = new CompletedProtoWallet_1.CompletedProtoWallet(index_1.PrivateKey.fromRandom());
+        const serverWallet = new CompletedProtoWallet_1.CompletedProtoWallet(index_1.PrivateKey.fromRandom());
+        // Client creates a random nonce that the server can verify
+        const clientNonce = await (0, createNonce_1.createNonce)(clientWallet, (await serverWallet.getPublicKey({ identityKey: true })).publicKey);
+        // The server verifies the client created the nonce provided
+        await (0, verifyNonce_1.verifyNonce)(clientNonce, serverWallet, (await clientWallet.getPublicKey({ identityKey: true })).publicKey);
+        // Server creates a random nonce that the client can verify
+        const serverNonce = await (0, createNonce_1.createNonce)(serverWallet, (await clientWallet.getPublicKey({ identityKey: true })).publicKey);
+        // The server compute a serial number from the client and server nonce
+        const { hmac: serialNumber } = await serverWallet.createHmac({
+            data: index_1.Utils.toArray(clientNonce + serverNonce, 'utf8'),
+            protocolID: [2, 'certificate creation'],
+            keyID: serverNonce + clientNonce,
+            counterparty: (await clientWallet.getPublicKey({ identityKey: true }))
+                .publicKey
+        });
+        // Client verifies server's nonce
+        await (0, verifyNonce_1.verifyNonce)(serverNonce, clientWallet, (await serverWallet.getPublicKey({ identityKey: true })).publicKey);
+        // Client verifies the server included their nonce
+        const { valid } = await clientWallet.verifyHmac({
+            hmac: serialNumber,
+            data: index_1.Utils.toArray(clientNonce + serverNonce, 'utf8'),
+            protocolID: [2, 'certificate creation'],
+            keyID: serverNonce + clientNonce,
+            counterparty: (await serverWallet.getPublicKey({ identityKey: true }))
+                .publicKey
+        });
+        console.log(index_1.Utils.toBase64(serialNumber));
+        expect(valid).toEqual(true);
+    });
+});
+//# sourceMappingURL=cryptononce.test.js.map

package/dist/esm/src/auth/utils/__tests/cryptononce.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptononce.test.js","sourceRoot":"","sources":["../../../../../../src/auth/utils/__tests/cryptononce.test.ts"],"names":[],"mappings":";;AAAA,qDAA6D;AAE7D,iEAA6D;AAC7D,iEAA6D;AAC7D,kGAA8F;AAE9F,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,UAA2B,CAAA;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;SACxC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,gCAAgC;QAChC,CAAC;QAAC,UAAU,CAAC,UAAwB,CAAC,iBAAiB,CACrD,IAAI,KAAK,CAAC,uBAAuB,CAAC,CACnC,CAAA;QAED,MAAM,MAAM,CAAC,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACnD,uBAAuB,CACxB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,UAA2B,CAAA;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACrE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC3B,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,CAAC;QAAC,UAAU,CAAC,UAAwB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAEzE,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAA;QAC3C,MAAM,MAAM,CAAC,IAAA,yBAAW,EAAC,KAAK,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC5E,MAAM,MAAM,CAAC,IAAA,yBAAW,EAAC,KAAK,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC1E,MAAM,MAAM,CACV,IAAA,yBAAW,EACT,MAAM,CAAC,IAAI,CACT,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC/C,QAAQ,CACT,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACpB,UAAU,CACX,CACF,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,CAAC;QAAC,UAAU,CAAC,UAAwB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAEzE,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAA;QAC3C,MAAM,MAAM,CAAC,IAAA,yBAAW,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,CAAC;QAAC,UAAU,CAAC,UAAwB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAExE,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAA;QAE5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAE5D,MAAM,MAAM,CAAC,IAAA,yBAAW,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACpE,MAAM,MAAM,CAAC,IAAA,yBAAW,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,UAAU,GAAG,IAAI,2CAAoB,CAAC,kBAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QAEpE,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAA,yBAAW,EAAC,KAAK,EAAE,UAAU,CAAC,CAAA;QAEpD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,YAAY,GAAG,IAAI,2CAAoB,CAAC,kBAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QACtE,MAAM,YAAY,GAAG,IAAI,2CAAoB,CAAC,kBAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QAEtE,2DAA2D;QAC3D,MAAM,WAAW,GAAG,MAAM,IAAA,yBAAW,EACnC,YAAY,EACZ,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACnE,CAAA;QACD,4DAA4D;QAC5D,MAAM,IAAA,yBAAW,EACf,WAAW,EACX,YAAY,EACZ,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACnE,CAAA;QACD,2DAA2D;QAC3D,MAAM,WAAW,GAAG,MAAM,IAAA,yBAAW,EACnC,YAAY,EACZ,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACnE,CAAA;QACD,sEAAsE;QACtE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;YAC3D,IAAI,EAAE,aAAK,CAAC,OAAO,CAAC,WAAW,GAAG,WAAW,EAAE,MAAM,CAAC;YACtD,UAAU,EAAE,CAAC,CAAC,EAAE,sBAAsB,CAAC;YACvC,KAAK,EAAE,WAAW,GAAG,WAAW;YAChC,YAAY,EAAE,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;iBACnE,SAAS;SACb,CAAC,CAAA;QAEF,iCAAiC;QACjC,MAAM,IAAA,yBAAW,EACf,WAAW,EACX,YAAY,EACZ,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACnE,CAAA;QAED,kDAAkD;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;YAC9C,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,aAAK,CAAC,OAAO,CAAC,WAAW,GAAG,WAAW,EAAE,MAAM,CAAC;YACtD,UAAU,EAAE,CAAC,CAAC,EAAE,sBAAsB,CAAC;YACvC,KAAK,EAAE,WAAW,GAAG,WAAW;YAChC,YAAY,EAAE,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;iBACnE,SAAS;SACb,CAAC,CAAA;QAEF,OAAO,CAAC,GAAG,CAAC,aAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}