@calimero-network/mero-js 27.2.0 → 27.3.0

package/dist/index.cjs

@@ -70,6 +70,7 @@ __export(index_exports, {
   claimedRelease: () => claimedRelease,
   cloudNodeReleaseUrl: () => cloudNodeReleaseUrl,
   compareVersions: () => compareVersions,
+  confirmationCode: () => confirmationCode,
   consentReturn: () => consentReturn,
   createQuoteVerifier: () => createQuoteVerifier,
   createSealedFetch: () => createSealedFetch,
@@ -1569,6 +1570,17 @@ ${generation}`;
 function publisherBindingBytes(cluster, org, signerId, generation) {
   return new TextEncoder().encode(publisherBindingMessage(cluster, org, signerId, generation));
 }
+var CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+async function confirmationCode(requestId) {
+  const h = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(requestId)));
+  const word = (h[0] << 24 | h[1] << 16 | h[2] << 8 | h[3]) >>> 0;
+  let code = "";
+  for (let i = 0; i < 6; i++) {
+    if (i === 3) code += "-";
+    code += CROCKFORD[word >>> 27 - 5 * i & 31];
+  }
+  return code;
+}
 function consentReturn(href) {
   const url2 = typeof href === "string" ? new URL(href) : href;
   const requestId = url2.searchParams.get("request_id");
@@ -2342,16 +2354,34 @@ var CalimeroClient = class {
   }
   /**
    * {@link requestConsent}, then send the browser to the consent page
-   * (`navigate`, by default `window.location.assign`). Answers the request
-   * once `navigate` returns: with a popup (`url => window.open(url)`), poll it
-   * with {@link waitForConsent}.
+   * (`navigate`, by default `window.location.assign`). Pass `navigate` itself
+   * or {@link OpenConsentOptions}, whose `confirm` runs first with the node's
+   * answer so the app can show the person its `code`; when it answers `false`
+   * the page is not opened. When the node sends a `code` that is not
+   * {@link confirmationCode} of `requestId`, it throws `CalimeroError`
+   * (`CONSENT_CODE_MISMATCH`) and does not navigate. Answers the request
+   * once `navigate` returns (or `confirm` declines): with a popup
+   * (`url => window.open(url)`), poll it with {@link waitForConsent}.
    */
-  async openConsentPage(request, navigate = (url2) => {
-    const w = globalThis.window;
-    if (!w) throw new Error("no window to open the consent page in; pass `navigate`");
-    w.location.assign(url2);
-  }) {
+  async openConsentPage(request, navigateOrOptions = {}) {
+    const options = typeof navigateOrOptions === "function" ? { navigate: navigateOrOptions } : navigateOrOptions;
+    const navigate = options.navigate ?? ((url2) => {
+      const w = globalThis.window;
+      if (!w) throw new Error("no window to open the consent page in; pass `navigate`");
+      w.location.assign(url2);
+    });
     const started = await this.requestConsent(request);
+    if (started.code !== void 0) {
+      const expected = await confirmationCode(started.requestId);
+      if (started.code !== expected) {
+        throw new CalimeroError(200, "CONSENT_CODE_MISMATCH", "the consent page code does not match the request", {
+          requestId: started.requestId,
+          code: started.code,
+          expected
+        });
+      }
+    }
+    if (options.confirm && !await options.confirm(started)) return started;
     navigate(started.url);
     return started;
   }