@coinbase/cdp-api-client 0.0.92 → 0.0.94

package/dist/esm/index7.js

@@ -1,59 +1,93 @@
 import { Analytics as o } from "./index2.js";
 import "./index3.js";
-import h from "axios";
+import l from "axios";
 import { ERROR_DOCS_PAGE_URL as c } from "./index9.js";
-import { UnknownApiError as v, HttpErrorType as u, isOpenAPIError as R, APIError as d, UnknownError as g } from "./index8.js";
-const l = () => typeof window < "u" && typeof document < "u";
-let n = h.create({
+import { UnknownApiError as y, HttpErrorType as u, isOpenAPIError as g, APIError as d, UnknownError as k } from "./index8.js";
+const w = () => typeof window < "u" && typeof document < "u";
+let n = l.create({
   baseURL: "https://api.cdp.coinbase.com/platform"
 }), i = null;
-const x = (r) => {
-  n = h.create({
-    baseURL: r.basePath || "https://api.cdp.coinbase.com/platform",
+const O = (t) => {
+  if (n = l.create({
+    baseURL: t.basePath || "https://api.cdp.coinbase.com/platform",
     // Only enable cookies in browser environments where they're supported
-    withCredentials: l()
-  }), n.interceptors.request.use(async (t) => {
-    const e = T(t), s = p(t);
-    if (!i || f(s.pathname) || m(s.pathname) && !await i.isSignedIn() || !S(s.pathname))
-      return t;
+    withCredentials: w()
+  }), n.interceptors.request.use(async (r) => {
+    const e = U(r), s = f(r);
+    if (!i || v(s.pathname) || A(s.pathname) && !await i.isSignedIn() || !I(s.pathname))
+      return r;
     const a = await i.getXWalletAuth({
       requestMethod: e,
       requestHost: s.host,
       requestPath: s.pathname,
-      requestData: t.data
+      requestData: r.data
     });
-    return a && (t.headers["X-Wallet-Auth"] = a), t;
-  }), n.interceptors.request.use(async (t) => {
-    const e = p(t);
-    if (!i || f(e.pathname) || m(e.pathname) && !await i.isSignedIn())
-      return t;
+    return a && (r.headers["X-Wallet-Auth"] = a), r;
+  }), n.interceptors.request.use(async (r) => {
+    const e = f(r);
+    if (!i || v(e.pathname) || A(e.pathname) && !await i.isSignedIn())
+      return r;
     const s = await i.getToken();
-    return s && s !== "" && (t.headers.Authorization = `Bearer ${s}`), t;
-  }), l() || n.interceptors.request.use(async (t) => {
-    let e = t.headers["User-Agent"];
-    return e = e ? `${e} CDP/reactnative` : "CDP/reactnative", t.headers["User-Agent"] = e, t;
-  }), r.refreshTokenStorage && _(r.refreshTokenStorage), r.debugging && (n.interceptors.request.use((t) => (console.log("Request:", t), t)), n.interceptors.response.use((t) => (console.log("Response:", t), t)));
-}, j = (r) => {
-  i = r;
-}, k = (r, t) => ({
-  ...r,
+    return s && s !== "" && (r.headers.Authorization = `Bearer ${s}`), r;
+  }), !w()) {
+    const r = t.platform ? `CDP/reactnative/${t.platform}` : "CDP/reactnative";
+    n.interceptors.request.use(async (e) => {
+      let s = e.headers["User-Agent"];
+      return s = s ? `${s} ${r}` : r, e.headers["User-Agent"] = s, e;
+    });
+  }
+  t.refreshTokenStorage && P(t.refreshTokenStorage), t.appAttestation && E(t.appAttestation, t.platform), t.debugging && (n.interceptors.request.use((r) => (console.log("Request:", r), r)), n.interceptors.response.use((r) => (console.log("Response:", r), r)));
+}, D = (t) => {
+  i = t;
+}, E = (t, r) => {
+  n.interceptors.request.use(async (e) => {
+    const s = f(e);
+    if (!q(s.pathname) || !t.isEnabled())
+      return e;
+    try {
+      if (r === "ios") {
+        const a = s.pathname.match(/\/projects\/([^/]+)\//);
+        if (!a || !a[1])
+          return e;
+        const R = `/v2/embedded-wallet-api/projects/${a[1]}/attestation/challenge`, h = (await n.post(R)).data.challenge;
+        if (!h)
+          return console.warn("Failed to fetch assertion challenge"), e;
+        const p = await t.generateAssertion(h);
+        if (!p)
+          return e;
+        e.headers["X-App-Attestation-Assertion"] = p.assertion, e.headers["X-App-Attestation-Key-ID"] = p.keyId, e.headers["X-App-Attestation-Challenge"] = h;
+      } else {
+        const a = await t.generateAssertion(JSON.stringify(e.data));
+        if (!a)
+          return e;
+        e.headers["X-Integrity-Token"] = a.assertion, e.headers["X-Package-Name"] = t.appIdentifier;
+      }
+      return e;
+    } catch (a) {
+      throw new Error(
+        `App attestation required but assertion generation failed: ${a instanceof Error ? a.message : String(a)}`
+      );
+    }
+  });
+}, _ = (t, r) => ({
+  ...t,
   headers: {
-    ...r.headers || {},
-    "X-Idempotency-Key": t
+    ...t.headers || {},
+    "X-Idempotency-Key": r
   }
-}), I = async (r, t) => {
-  P(r), t && t !== "" && (r = k(r, t));
+}), z = async (t, r) => {
+  S(t), r && r !== "" && (t = _(t, r));
   try {
-    return (await n(r)).data;
+    return (await n(t)).data;
   } catch (e) {
-    if (h.isAxiosError(e) && !e.response)
-      throw new v(
+    if (l.isAxiosError(e) && !e.response)
+      throw new y(
         u.unknown,
         e.cause instanceof Error ? e.cause.message : e.message,
         e.cause
       );
-    if (h.isAxiosError(e) && e.response) {
-      if (R(e.response.data))
+    if (l.isAxiosError(e) && e.response) {
+      if (g(e.response.data))
         throw new d(
           e.response.status,
           e.response.data.errorType,
@@ -109,11 +143,11 @@ const x = (r) => {
               } catch {
                 a = String(e.response.data);
               }
-            const w = a ? `An unexpected error occurred: ${a}` : "An unexpected error occurred.";
+            const m = a ? `An unexpected error occurred: ${a}` : "An unexpected error occurred.";
             throw new d(
               s,
               u.unexpected_error,
-              w,
+              m,
               void 0,
               `${c}`,
               e.cause
@@ -122,24 +156,21 @@ const x = (r) => {
         }
       }
     }
-    throw new g(
-      "Something went wrong. Please reach out at https://discord.com/channels/1220414409550336183/1271495764580896789 for help.",
-      e instanceof Error ? e : void 0
-    );
+    throw new k("Something went wrong.", e instanceof Error ? e : void 0);
   }
-}, _ = (r) => {
+}, P = (t) => {
   n.interceptors.response.use(
-    async (t) => {
+    async (r) => {
       try {
-        if (E(t)) {
+        if ($(r)) {
           o.sendSessionRefreshEvent({
             name: "refresh_token_response"
           });
-          const e = t.data?.refreshToken;
+          const e = r.data?.refreshToken;
           e && (o.sendSessionRefreshEvent({
             name: "refresh_token_received"
           }), await Promise.race([
-            r.setRefreshToken(e),
+            t.setRefreshToken(e),
             new Promise(
               (s, a) => setTimeout(() => a(new Error("setRefreshToken timed out after 5000ms")), 5e3)
             )
@@ -154,23 +185,23 @@ const x = (r) => {
           error_message: s
         }), console.warn("Failed to store refresh token:", e);
       }
-      return t;
+      return r;
     },
-    (t) => Promise.reject(t)
-  ), n.interceptors.request.use(async (t) => {
+    (r) => Promise.reject(r)
+  ), n.interceptors.request.use(async (r) => {
     try {
-      if (A(t.url)) {
-        const e = await r.getRefreshToken();
+      if (T(r.url)) {
+        const e = await t.getRefreshToken();
         e ? (o.sendSessionRefreshEvent({
           name: "refresh_token_retrieved"
-        }), t.data = {
-          ...t.data,
+        }), r.data = {
+          ...r.data,
           refreshToken: e
         }) : o.sendSessionRefreshEvent({
           name: "refresh_token_missing"
         });
       }
-      y(t.url) && await r.removeRefreshToken();
+      b(r.url) && await t.removeRefreshToken();
     } catch (e) {
       const s = e instanceof Error ? e.message : String(e);
       o.sendSessionRefreshEvent({
@@ -178,34 +209,40 @@ const x = (r) => {
         error_message: s
       }), console.warn("Failed to retrieve refresh token:", e);
     }
-    return t;
+    return r;
   });
-}, y = (r) => r ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(r) : !1, A = (r) => r ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(r) : !1, E = (r) => {
-  const t = r.config.url;
-  return t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|oauth\/.*)|refresh)$/.test(
-    t
+}, b = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(t) : !1, T = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(t) : !1, $ = (t) => {
+  const r = t.config.url;
+  return r ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|oauth\/.*)|refresh)$/.test(
+    r
   ) : !1;
-}, P = (r) => {
+}, S = (t) => {
   if (!n.getUri() || n.getUri() === "")
     throw new Error("CDP client URI not configured. Call configure() first.");
-  if (!r.url || r.url === "")
+  if (!t.url || t.url === "")
     throw new Error("AxiosRequestConfig URL is empty. This should never happen.");
-  if (!r.method || r.method === "")
+  if (!t.method || t.method === "")
     throw new Error("AxiosRequestConfig method is empty. This should never happen.");
-}, T = (r) => r.method?.toString().toUpperCase() || "GET", p = (r) => {
-  if (!r.url)
+}, U = (t) => t.method?.toString().toUpperCase() || "GET", f = (t) => {
+  if (!t.url)
     throw new Error("URL is required for authentication");
-  const t = n.getUri() + r.url;
-  return new URL(t);
-}, f = (r) => {
-  const t = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/;
-  return t.test(r) || e.test(r) || s.test(r);
-}, S = (r) => !/^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(r), m = (r) => {
-  const t = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
-  return t.test(r) || e.test(r);
-};
+  const r = n.getUri() + t.url;
+  return new URL(r);
+}, v = (t) => {
+  const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, a = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
+  return r.test(t) || e.test(t) || s.test(t) || a.test(t);
+}, I = (t) => !/^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(t), A = (t) => {
+  const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
+  return r.test(t) || e.test(t);
+}, q = (t) => [
+  // Auth flows: prevent account takeover on mobile clients
+  /\/auth\/verify\//,
+  // VerifyEmailAuthentication, VerifySmsAuthentication, VerifyOAuthCode, VerifyOAuthEndUserIdentity
+  /\/auth\/refresh$/
+  // RefreshAccessToken
+].some((e) => e.test(t));
 export {
-  I as cdpApiClient,
-  x as configureCdpApiClient,
-  j as setAuthManager
+  z as cdpApiClient,
+  O as configureCdpApiClient,
+  D as setAuthManager
 };