@coderoftime/fints 0.0.0-stage → 0.1.0

package/dist/tan/challenge.js

@@ -0,0 +1,185 @@
+import { latin1Decode } from '../util/bytes.js';
+import { challengeInstruction, FlickerCode, hasEmbeddedFlickerCode } from './flicker.js';
+import { TanImage } from './tan-image.js';
+/** Challenge text banks send when there is nothing to show. */
+const noChallenge = 'nochallenge';
+/** `message`, or `undefined` where it is empty or the filler banks send when there is nothing to show. */
+export function challengeText(message) {
+    return message === undefined || message === '' || message === noChallenge ? undefined : message;
+}
+const printableAscii = /^[\x20-\x7E]+$/;
+const lineBreak = /<br\b[^<>]*>/gi;
+const blockTag = /<\/?(?:p|li)\b[^<>]*>/gi;
+/**
+ * The formatting tags a structured challenge may carry besides line breaks, paragraphs and list items (PIN/TAN, Data
+ * Dictionary "Challenge"). Angle brackets around anything else, such as `<50 EUR>`, are part of the text the user
+ * approves, so they stay. Excluding `<` and `>` from the tag keeps the search linear.
+ */
+const formattingTag = /<\/?(?:b|i|u|ul|ol)\b[^<>]*>/gi;
+const entityReference = /&(#x?[0-9a-fA-F]+|[a-zA-Z]+);/g;
+const blankLines = /\n{3,}/g;
+const namedEntities = {
+    amp: '&',
+    lt: '<',
+    gt: '>',
+    quot: '"',
+    apos: "'",
+    nbsp: ' ',
+    auml: 'ä',
+    ouml: 'ö',
+    uuml: 'ü',
+    Auml: 'Ä',
+    Ouml: 'Ö',
+    Uuml: 'Ü',
+    szlig: 'ß',
+    euro: '€',
+};
+/**
+ * The character `name` refers to; `undefined` for an unknown name and for a number that is not a character, as XML
+ * defines them: `NUL`, half a surrogate pair, or beyond Unicode.
+ */
+function decodeEntity(name) {
+    if (name.startsWith('#')) {
+        const isHex = name.startsWith('#x') || name.startsWith('#X');
+        const digits = name.substring(isHex ? 2 : 1);
+        const code = (isHex ? /^[0-9a-fA-F]+$/ : /^[0-9]+$/).test(digits) ? parseInt(digits, isHex ? 16 : 10) : NaN;
+        const isCharacter = code > 0 && (code < 0xd800 || code > 0xdfff) && code <= 0x10ffff;
+        return isCharacter ? String.fromCodePoint(code) : undefined;
+    }
+    return Object.hasOwn(namedEntities, name) ? namedEntities[name] : undefined;
+}
+/** A request from the bank to authorize an action with a TAN or an app approval. */
+export class TanChallenge {
+    /** The TAN method the challenge is for. */
+    method;
+    /** Bank reference of the pending action. */
+    reference;
+    /** Challenge text as sent by the bank; may contain simple HTML. See `plainMessage`. */
+    message;
+    /** Raw challenge data for TAN generators (HHD_UC). */
+    hhdUc;
+    /** chipTAN optical flicker code, if the challenge contains one. */
+    flickerCode;
+    /** photoTAN / QR-TAN image, if the challenge contains one. */
+    image;
+    /** Approval happens in a separate app; see `TanCallback` for what to answer. */
+    isDecoupled;
+    /** The exact moment until which the bank accepts the TAN or the approval, where it states date and time of day. */
+    validUntil;
+    /** Name of the TAN medium the bank sent the challenge to. */
+    tanMediumName;
+    /** Counts repeated prompts for the same decoupled approval. */
+    attempt;
+    /**
+     * Settles when the client needs no more answer to this challenge: the bank confirmed the approval, or the approval
+     * failed, timed out or was cancelled. Set where the client asks the bank by itself while the callback shows the
+     * challenge (`TanCallback`), `undefined` otherwise. It never rejects.
+     */
+    resolved;
+    /** A challenge as the bank sent it. Use `TanChallenge.create` to have a flicker code or image detected in the data. */
+    constructor(init) {
+        this.method = init.method;
+        this.reference = init.reference;
+        this.message = init.message;
+        this.hhdUc = init.hhdUc;
+        this.flickerCode = init.flickerCode;
+        this.image = init.image;
+        this.isDecoupled = init.isDecoupled ?? false;
+        this.validUntil = init.validUntil;
+        this.tanMediumName = init.tanMediumName;
+        this.attempt = init.attempt ?? 1;
+        this.resolved = init.resolved;
+    }
+    /** Builds a challenge and detects a photoTAN image or chipTAN flicker code in `hhdUc` or `message`. */
+    static create(init) {
+        let image;
+        let flicker;
+        const data = init.hhdUc !== undefined && init.hhdUc.length > 0 ? init.hhdUc : undefined;
+        if (data !== undefined) {
+            image = TanImage.tryParse(data);
+            if (image === undefined) {
+                const text = latin1Decode(data);
+                if (printableAscii.test(text))
+                    flicker = FlickerCode.tryParse(text);
+            }
+        }
+        else if (init.message !== undefined && hasEmbeddedFlickerCode(init.message)) {
+            flicker = FlickerCode.tryParse(init.message);
+        }
+        return new TanChallenge({
+            ...init,
+            message: challengeText(init.message),
+            hhdUc: data,
+            flickerCode: flicker,
+            image,
+        });
+    }
+    /**
+     * Whether the user can report the approval in the banking app; `false` where only the bank's confirmation completes
+     * it, which `TanCallback` tells how to handle.
+     */
+    get manualConfirmation() {
+        return !this.isDecoupled || this.method.decoupledManualConfirmation;
+    }
+    /**
+     * `message` as the user reads it.
+     *
+     * A method with structured challenges (`TanMethod.structuredChallenge`) may use the formatting tags the specification
+     * defines. Line breaks, paragraphs and list items become new lines. Bold, italics, underlining and list tags are
+     * removed, and the entity references of such markup are resolved. Any other challenge stays as the bank sent it,
+     * which is how the specification wants it shown.
+     */
+    get plainMessage() {
+        const text = this.message;
+        if (text === undefined)
+            return undefined;
+        const instruction = challengeInstruction(text);
+        if (!this.method.structuredChallenge)
+            return instruction;
+        return instruction
+            .replace(lineBreak, '\n')
+            .replace(blockTag, '\n')
+            .replace(formattingTag, '')
+            .replace(entityReference, (match, name) => decodeEntity(name) ?? match)
+            .replace(blankLines, '\n\n')
+            .trim();
+    }
+}
+// Copies of a challenge for the prompts of one approval. Not methods of `TanChallenge`, so that they are not part of its
+// API; they stand beside the class, so that a field added to it is added here as well.
+/** `challenge` again, counted as the next prompt for the same approval, with the bank's new instructions `message`. */
+export function nextAttempt(challenge, message) {
+    return copyChallenge(challenge, { attempt: challenge.attempt + 1, message: message ?? challenge.message });
+}
+/** `challenge` with `TanChallenge.resolved` set to `resolved`. */
+export function withResolved(challenge, resolved) {
+    return copyChallenge(challenge, { resolved });
+}
+function copyChallenge(challenge, changes) {
+    return new TanChallenge({
+        method: challenge.method,
+        reference: challenge.reference,
+        message: challenge.message,
+        hhdUc: challenge.hhdUc,
+        flickerCode: challenge.flickerCode,
+        image: challenge.image,
+        isDecoupled: challenge.isDecoupled,
+        validUntil: challenge.validUntil,
+        tanMediumName: challenge.tanMediumName,
+        attempt: challenge.attempt,
+        resolved: challenge.resolved,
+        ...changes,
+    });
+}
+const approvedAnswer = Object.freeze({ kind: 'approved' });
+const cancelledAnswer = Object.freeze({ kind: 'cancelled' });
+/** The answers a `TanCallback` returns. */
+export const TanAnswer = Object.freeze({
+    /** The TAN the user entered; an empty one cancels. */
+    tan: (tan) => Object.freeze({ kind: 'tan', tan }),
+    /** The user reports the approval in the banking app (`TanChallenge.isDecoupled`); the client then asks the bank. */
+    approved: approvedAnswer,
+    /** The user cancels: the client ends the bank dialog, and the call fails with `FinTsTanCancelledError`. */
+    cancelled: cancelledAnswer,
+});
+//# sourceMappingURL=challenge.js.map

package/dist/tan/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/tan/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,+DAA+D;AAC/D,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,OAA2B;IACvD,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAClG,CAAC;AAED,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,aAAa,GAAG,gCAAgC,CAAC;AACvD,MAAM,eAAe,GAAG,gCAAgC,CAAC;AACzD,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,MAAM,aAAa,GAA2B;IAC5C,GAAG,EAAE,GAAG;IACR,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;IACP,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,GAAG;CACV,CAAC;AAEF;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5G,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC;QACrF,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAiBD,oFAAoF;AACpF,MAAM,OAAO,YAAY;IACvB,2CAA2C;IAClC,MAAM,CAAY;IAE3B,4CAA4C;IACnC,SAAS,CAAS;IAE3B,uFAAuF;IAC9E,OAAO,CAAqB;IAErC,sDAAsD;IAC7C,KAAK,CAAyB;IAEvC,mEAAmE;IAC1D,WAAW,CAA0B;IAE9C,8DAA8D;IACrD,KAAK,CAAuB;IAErC,gFAAgF;IACvE,WAAW,CAAU;IAE9B,mHAAmH;IAC1G,UAAU,CAAmB;IAEtC,6DAA6D;IACpD,aAAa,CAAqB;IAE3C,+DAA+D;IACtD,OAAO,CAAS;IAEzB;;;;OAIG;IACM,QAAQ,CAA4B;IAE7C,uHAAuH;IACvH,YAAY,IAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,uGAAuG;IACvG,MAAM,CAAC,MAAM,CAAC,IAAkE;QAC9E,IAAI,KAA2B,CAAC;QAChC,IAAI,OAAgC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,YAAY,CAAC;YACtB,GAAG,IAAI;YACP,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,OAAO;YACpB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,IAAI,kBAAkB;QACpB,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,YAAY;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,OAAO,WAAW,CAAC;QACzD,OAAO,WAAW;aACf,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;aACxB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;aACvB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;aAC1B,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;aAC9E,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;aAC3B,IAAI,EAAE,CAAC;IACZ,CAAC;CACF;AAED,yHAAyH;AACzH,uFAAuF;AAEvF,uHAAuH;AACvH,MAAM,UAAU,WAAW,CAAC,SAAuB,EAAE,OAAgB;IACnE,OAAO,aAAa,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,SAAuB,EAAE,QAAuB;IAC3E,OAAO,aAAa,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,SAAuB,EAAE,OAAkC;IAChF,OAAO,IAAI,YAAY,CAAC;QACtB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,cAAc,GAAc,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AACtE,MAAM,eAAe,GAAc,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAExE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,sDAAsD;IACtD,GAAG,EAAE,CAAC,GAAW,EAAa,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACpE,oHAAoH;IACpH,QAAQ,EAAE,cAAc;IACxB,2GAA2G;IAC3G,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC"}

package/dist/tan/flicker.d.ts

@@ -0,0 +1,36 @@
+/** Version of the chipTAN HHD specification a flicker code follows: 1.3, or 1.4, which adds control bytes. */
+export type HhdVersion = 'hhd13' | 'hhd14';
+/** Whether `message` is a combined challenge with an embedded flicker code. */
+export declare function hasEmbeddedFlickerCode(message: string): boolean;
+/** The instruction text of a combined challenge; `message` itself if it is none. */
+export declare function challengeInstruction(message: string): string;
+/** A chipTAN optical challenge (flicker code) in HHD 1.3 or 1.4 format. */
+export declare class FlickerCode {
+    /** The HHD version the code follows, told by the control bytes of its start code. */
+    readonly version: HhdVersion;
+    /** Length of the challenge (LC) as stated at the start of the code. */
+    readonly lc: number;
+    private readonly startCode;
+    private readonly dataElements;
+    private constructor();
+    /** Parses the challenge data sent by the bank; throws `FormatError` if it is not a flicker code. */
+    static parse(code: string): FlickerCode;
+    /** Parses `code`, or returns `undefined` if it is not a flicker code. */
+    static tryParse(code: string): FlickerCode | undefined;
+    private static parseLayout;
+    /** The data of the start code, which opens the challenge. */
+    get startCodeData(): string;
+    /** The first data element of the challenge; `undefined` if the code leaves it out. */
+    get dataElement1(): string | undefined;
+    /** The second data element of the challenge; `undefined` if the code leaves it out. */
+    get dataElement2(): string | undefined;
+    /** The third data element of the challenge; `undefined` if the code leaves it out. */
+    get dataElement3(): string | undefined;
+    /** The hex string transmitted to the TAN generator, including checksums. */
+    render(): string;
+    private payload;
+    private luhnChecksum;
+    /** Frames to animate: each is `[clock, bit0, bit1, bit2, bit3]` for the five bars. */
+    frames(): boolean[][];
+}
+//# sourceMappingURL=flicker.d.ts.map

package/dist/tan/flicker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flicker.d.ts","sourceRoot":"","sources":["../../src/tan/flicker.ts"],"names":[],"mappings":"AAGA,8GAA8G;AAC9G,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAQ3C,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK5D;AAiBD,2EAA2E;AAC3E,qBAAa,WAAW;IAEpB,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,UAAU;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAN/B,OAAO;IASP,oGAAoG;IACpG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAavC,yEAAyE;IACzE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAStD,OAAO,CAAC,MAAM,CAAC,WAAW;IAwB1B,6DAA6D;IAC7D,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,sFAAsF;IACtF,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,uFAAuF;IACvF,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,sFAAsF;IACtF,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,4EAA4E;IAC5E,MAAM,IAAI,MAAM;IAKhB,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,YAAY;IAapB,sFAAsF;IACtF,MAAM,IAAI,OAAO,EAAE,EAAE;CAatB"}

package/dist/tan/flicker.js

@@ -0,0 +1,262 @@
+import { FormatError } from '../util/errors.js';
+import { withoutWhitespace } from '../util/text.js';
+// A combined challenge embeds the flicker code in the challenge text:
+// `CHLGUC` + four-digit length + code + `CHLGTEXT` + four digits + instruction text.
+const codeMarker = 'CHLGUC';
+const textMarker = 'CHLGTEXT';
+const markerLengthDigits = 4;
+/** Whether `message` is a combined challenge with an embedded flicker code. */
+export function hasEmbeddedFlickerCode(message) {
+    return message.includes(codeMarker);
+}
+/** The instruction text of a combined challenge; `message` itself if it is none. */
+export function challengeInstruction(message) {
+    const start = message.indexOf(textMarker);
+    if (start < 0)
+        return message;
+    const textStart = start + textMarker.length + markerLengthDigits;
+    return textStart < message.length ? message.substring(textStart) : '';
+}
+/**
+ * Digit counts of the challenge length (LC) and of the data element lengths (LDE) to try when parsing.
+ *
+ * HHD 1.4 states the LC with three digits, HHD 1.3 with two.
+ */
+const layouts = [
+    { lcDigits: 3, lengthDigits: 2 },
+    { lcDigits: 3, lengthDigits: 3 },
+    { lcDigits: 2, lengthDigits: 2 },
+];
+function hex(value, width) {
+    return value.toString(16).toUpperCase().padStart(width, '0');
+}
+/** A chipTAN optical challenge (flicker code) in HHD 1.3 or 1.4 format. */
+export class FlickerCode {
+    version;
+    lc;
+    startCode;
+    dataElements;
+    constructor(
+    /** The HHD version the code follows, told by the control bytes of its start code. */
+    version, 
+    /** Length of the challenge (LC) as stated at the start of the code. */
+    lc, startCode, dataElements) {
+        this.version = version;
+        this.lc = lc;
+        this.startCode = startCode;
+        this.dataElements = dataElements;
+    }
+    /** Parses the challenge data sent by the bank; throws `FormatError` if it is not a flicker code. */
+    static parse(code) {
+        const cleaned = extractCode(code);
+        for (const layout of layouts) {
+            try {
+                return FlickerCode.parseLayout(new Reader(cleaned), layout.lcDigits, layout.lengthDigits);
+            }
+            catch (error) {
+                // Not this layout; try the next one.
+                if (!(error instanceof FormatError))
+                    throw error;
+            }
+        }
+        throw new FormatError('Invalid flicker code', code);
+    }
+    /** Parses `code`, or returns `undefined` if it is not a flicker code. */
+    static tryParse(code) {
+        try {
+            return FlickerCode.parse(code);
+        }
+        catch (error) {
+            if (error instanceof FormatError)
+                return undefined;
+            throw error;
+        }
+    }
+    static parseLayout(code, lcDigits, lengthDigits) {
+        const lc = code.decimal(lcDigits);
+        const challenge = new Reader(code.take(lc));
+        // The start code has a hex length field whose top bit announces control bytes (HHD 1.4); the top bit of each
+        // control byte announces another one.
+        const startLength = challenge.hex(2);
+        const controlBytes = [];
+        if ((startLength & 0x80) !== 0) {
+            do {
+                controlBytes.push(challenge.hex(2));
+            } while ((controlBytes.at(-1) & 0x80) !== 0 && controlBytes.length < 10);
+        }
+        const startCode = new StartCode(challenge.take(startLength & 0x3f), controlBytes);
+        const dataElements = [];
+        for (let i = 0; i < 3; i++) {
+            dataElements.push(new DataElement(challenge.isAtEnd ? undefined : challenge.take(challenge.decimal(lengthDigits) & 0x3f)));
+        }
+        // The fields fill exactly the LC characters; a layout that reads them otherwise is the wrong one.
+        if (!challenge.isAtEnd)
+            throw new FormatError('Flicker code fields do not match its length');
+        return new FlickerCode(controlBytes.length === 0 ? 'hhd13' : 'hhd14', lc, startCode, dataElements);
+    }
+    /** The data of the start code, which opens the challenge. */
+    get startCodeData() {
+        return this.startCode.data ?? '';
+    }
+    /** The first data element of the challenge; `undefined` if the code leaves it out. */
+    get dataElement1() {
+        return this.dataElements[0]?.data;
+    }
+    /** The second data element of the challenge; `undefined` if the code leaves it out. */
+    get dataElement2() {
+        return this.dataElements[1]?.data;
+    }
+    /** The third data element of the challenge; `undefined` if the code leaves it out. */
+    get dataElement3() {
+        return this.dataElements[2]?.data;
+    }
+    /** The hex string transmitted to the TAN generator, including checksums. */
+    render() {
+        const payload = this.payload();
+        return `${payload}${this.luhnChecksum()}${xorChecksum(payload)}`;
+    }
+    payload() {
+        let s = this.startCode.renderLength(this.version);
+        for (const c of this.startCode.controlBytes)
+            s += hex(c, 2);
+        s += this.startCode.renderData();
+        for (const element of this.dataElements) {
+            s += element.renderLength(this.version);
+            s += element.renderData();
+        }
+        return `${hex(Math.floor((s.length + 2) / 2), 2)}${s}`;
+    }
+    luhnChecksum() {
+        let s = '';
+        for (const c of this.startCode.controlBytes)
+            s += hex(c, 2);
+        s += this.startCode.renderData();
+        for (const element of this.dataElements)
+            if (element.data !== undefined)
+                s += element.renderData();
+        let sum = 0;
+        for (let i = 0; i + 1 < s.length; i += 2) {
+            sum += parseInt(s[i], 16) + digitSum(2 * parseInt(s[i + 1], 16));
+        }
+        const mod = sum % 10;
+        return mod === 0 ? '0' : hex(10 - mod, 1);
+    }
+    /** Frames to animate: each is `[clock, bit0, bit1, bit2, bit3]` for the five bars. */
+    frames() {
+        const code = `0FFF${this.render()}`;
+        const result = [];
+        for (let i = 0; i + 1 < code.length; i += 2) {
+            for (const nibble of [code[i + 1], code[i]]) {
+                const v = parseInt(nibble, 16);
+                const bits = [(v & 1) !== 0, (v & 2) !== 0, (v & 4) !== 0, (v & 8) !== 0];
+                result.push([true, ...bits]);
+                result.push([false, ...bits]);
+            }
+        }
+        return result;
+    }
+}
+/** The code of a combined challenge, or `code` itself without whitespace. */
+function extractCode(code) {
+    const compact = withoutWhitespace(code);
+    const start = compact.indexOf(codeMarker);
+    const codeStart = start + codeMarker.length + markerLengthDigits;
+    const end = compact.indexOf(textMarker);
+    return start >= 0 && end >= codeStart ? compact.substring(codeStart, end) : compact;
+}
+function xorChecksum(payload) {
+    let x = 0;
+    for (const c of payload)
+        x ^= parseInt(c, 16);
+    return hex(x, 1);
+}
+function digitSum(n) {
+    let sum = 0;
+    while (n !== 0) {
+        sum += n % 10;
+        n = Math.floor(n / 10);
+    }
+    return sum;
+}
+/** Reads the fields of a flicker code from left to right; throws `FormatError` when a field is missing or malformed. */
+class Reader {
+    code;
+    position = 0;
+    constructor(code) {
+        this.code = code;
+    }
+    get remaining() {
+        return this.code.length - this.position;
+    }
+    get isAtEnd() {
+        return this.remaining === 0;
+    }
+    take(length) {
+        if (length > this.remaining)
+            throw new FormatError('Flicker code too short');
+        const field = this.code.substring(this.position, this.position + length);
+        this.position += length;
+        return field;
+    }
+    decimal(digits) {
+        return parseInt(Reader.match(/^[0-9]+$/, this.take(digits)), 10);
+    }
+    hex(digits) {
+        return parseInt(Reader.match(/^[0-9A-Fa-f]+$/, this.take(digits)), 16);
+    }
+    static match(pattern, field) {
+        if (!pattern.test(field))
+            throw new FormatError('Invalid length field', field);
+        return field;
+    }
+}
+/**
+ * A data element of the flicker code: a length field (LDE) followed by the data; `undefined` data if the code leaves
+ * the element out.
+ */
+class DataElement {
+    data;
+    constructor(data) {
+        this.data = data;
+    }
+    get isBcd() {
+        return this.data === undefined || /^[0-9]+$/.test(this.data);
+    }
+    renderData() {
+        const d = this.data;
+        if (d === undefined)
+            return '';
+        if (!this.isBcd) {
+            let ascii = '';
+            for (let i = 0; i < d.length; i++)
+                ascii += hex(d.charCodeAt(i), 2);
+            return ascii;
+        }
+        return d.length % 2 === 1 ? `${d}F` : d;
+    }
+    renderLength(version) {
+        if (this.data === undefined)
+            return '';
+        const length = Math.floor(this.renderData().length / 2);
+        if (this.isBcd)
+            return hex(length, 2);
+        if (version === 'hhd14')
+            return hex(length + 0x40, 2);
+        return `1${hex(length, 1)}`;
+    }
+}
+/** The start code: a data element whose length field may announce control bytes (HHD 1.4). */
+class StartCode extends DataElement {
+    controlBytes;
+    constructor(data, controlBytes) {
+        super(data);
+        this.controlBytes = controlBytes;
+    }
+    renderLength(version) {
+        const s = super.renderLength(version);
+        if (version === 'hhd13' || this.controlBytes.length === 0)
+            return s;
+        return hex(parseInt(s, 16) + 0x80, 2);
+    }
+}
+//# sourceMappingURL=flicker.js.map

package/dist/tan/flicker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flicker.js","sourceRoot":"","sources":["../../src/tan/flicker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKpD,sEAAsE;AACtE,qFAAqF;AACrF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9B,MAAM,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,kBAAkB,CAAC;IACjE,OAAO,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,GAAG;IACd,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;IAChC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;IAChC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;CACjC,CAAC;AAEF,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa;IACvC,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,WAAW;IAGX;IAEA;IACQ;IACA;IANnB;IACE,qFAAqF;IAC5E,OAAmB;IAC5B,uEAAuE;IAC9D,EAAU,EACF,SAAoB,EACpB,YAAoC;QAJ5C,YAAO,GAAP,OAAO,CAAY;QAEnB,OAAE,GAAF,EAAE,CAAQ;QACF,cAAS,GAAT,SAAS,CAAW;QACpB,iBAAY,GAAZ,YAAY,CAAwB;IACpD,CAAC;IAEJ,oGAAoG;IACpG,MAAM,CAAC,KAAK,CAAC,IAAY;QACvB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qCAAqC;gBACrC,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;oBAAE,MAAM,KAAK,CAAC;YACnD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,QAAQ,CAAC,IAAY;QAC1B,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,WAAW;gBAAE,OAAO,SAAS,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,YAAoB;QAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,6GAA6G;QAC7G,sCAAsC;QACtC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC;gBACF,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,EAAE,EAAE;QAC5E,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QAClF,MAAM,YAAY,GAAkB,EAAE,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,YAAY,CAAC,IAAI,CACf,IAAI,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CACxG,CAAC;QACJ,CAAC;QACD,kGAAkG;QAClG,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,6CAA6C,CAAC,CAAC;QAC7F,OAAO,IAAI,WAAW,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACrG,CAAC;IAED,6DAA6D;IAC7D,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,sFAAsF;IACtF,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACpC,CAAC;IAED,uFAAuF;IACvF,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACpC,CAAC;IAED,sFAAsF;IACtF,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACpC,CAAC;IAED,4EAA4E;IAC5E,MAAM;QACJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,GAAG,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY;YAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY;YAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY;YAAE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACnG,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;QACrB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,sFAAsF;IACtF,MAAM;QACJ,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1E,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,kBAAkB,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACtF,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACf,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wHAAwH;AACxH,MAAM,MAAM;IAGmB;IAFrB,QAAQ,GAAG,CAAC,CAAC;IAErB,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,OAAe,EAAE,KAAa;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,WAAW;IACM;IAArB,YAAqB,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;IAAG,CAAC;IAEjD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,UAAU;QACR,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY,CAAC,OAAmB;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9B,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,SAAU,SAAQ,WAAW;IAGtB;IAFX,YACE,IAAwB,EACf,YAA+B;QAExC,KAAK,CAAC,IAAI,CAAC,CAAC;QAFH,iBAAY,GAAZ,YAAY,CAAmB;IAG1C,CAAC;IAEQ,YAAY,CAAC,OAAmB;QACvC,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/tan/tan-image.d.ts

@@ -0,0 +1,21 @@
+/** An image challenge (photoTAN, QR-TAN) with its MIME type. */
+export declare class TanImage {
+    /** The media type of `bytes`, for example `image/png`. */
+    readonly mimeType: string;
+    /** The encoded image. */
+    readonly bytes: Uint8Array;
+    constructor(
+    /** The media type of `bytes`, for example `image/png`. */
+    mimeType: string, 
+    /** The encoded image. */
+    bytes: Uint8Array);
+    /**
+     * Reads the bank's image container: a two-byte length and the MIME type, then a two-byte length and the image.
+     *
+     * `undefined` unless the MIME type is an image type and the container holds the whole image.
+     */
+    static tryParse(data: Uint8Array): TanImage | undefined;
+    /** The image as a `data:` URL, ready for the `src` of an `<img>`. */
+    toDataUrl(): string;
+}
+//# sourceMappingURL=tan-image.d.ts.map

package/dist/tan/tan-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tan-image.d.ts","sourceRoot":"","sources":["../../src/tan/tan-image.ts"],"names":[],"mappings":"AAIA,gEAAgE;AAChE,qBAAa,QAAQ;IAEjB,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU;;IAH1B,0DAA0D;IACjD,QAAQ,EAAE,MAAM;IACzB,yBAAyB;IAChB,KAAK,EAAE,UAAU;IAG5B;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS;IAavD,qEAAqE;IACrE,SAAS,IAAI,MAAM;CAGpB"}

package/dist/tan/tan-image.js

@@ -0,0 +1,41 @@
+import { base64Encode, latin1Decode } from '../util/bytes.js';
+const imageMimeType = /^image\/[a-zA-Z0-9.+-]+$/;
+/** An image challenge (photoTAN, QR-TAN) with its MIME type. */
+export class TanImage {
+    mimeType;
+    bytes;
+    constructor(
+    /** The media type of `bytes`, for example `image/png`. */
+    mimeType, 
+    /** The encoded image. */
+    bytes) {
+        this.mimeType = mimeType;
+        this.bytes = bytes;
+    }
+    /**
+     * Reads the bank's image container: a two-byte length and the MIME type, then a two-byte length and the image.
+     *
+     * `undefined` unless the MIME type is an image type and the container holds the whole image.
+     */
+    static tryParse(data) {
+        if (data.length < 4)
+            return undefined;
+        const mimeLength = (data[0] << 8) | data[1];
+        if (mimeLength === 0 || data.length < 2 + mimeLength + 2)
+            return undefined;
+        const mime = latin1Decode(data.subarray(2, 2 + mimeLength));
+        if (!imageMimeType.test(mime))
+            return undefined;
+        const offset = 2 + mimeLength;
+        const imageLength = (data[offset] << 8) | data[offset + 1];
+        const start = offset + 2;
+        if (start + imageLength > data.length)
+            return undefined;
+        return new TanImage(mime, data.subarray(start, start + imageLength));
+    }
+    /** The image as a `data:` URL, ready for the `src` of an `<img>`. */
+    toDataUrl() {
+        return `data:${this.mimeType};base64,${base64Encode(this.bytes)}`;
+    }
+}
+//# sourceMappingURL=tan-image.js.map

package/dist/tan/tan-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tan-image.js","sourceRoot":"","sources":["../../src/tan/tan-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAEjD,gEAAgE;AAChE,MAAM,OAAO,QAAQ;IAGR;IAEA;IAJX;IACE,0DAA0D;IACjD,QAAgB;IACzB,yBAAyB;IAChB,KAAiB;QAFjB,aAAQ,GAAR,QAAQ,CAAQ;QAEhB,UAAK,GAAL,KAAK,CAAY;IACzB,CAAC;IAEJ;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAgB;QAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QAC9C,IAAI,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,GAAG,WAAW,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,qEAAqE;IACrE,SAAS;QACP,OAAO,QAAQ,IAAI,CAAC,QAAQ,WAAW,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;CACF"}