@corbado/observe 1.7.2 → 1.8.0

package/dist/analysis/utils/webauthn-payloads.mjs

@@ -0,0 +1,101 @@
+// src/utils/webauthn-payloads.ts
+var BLACKLIST = {
+  creationOptions: ["/user/name", "/user/displayName"],
+  creationResponse: ["/clientExtensionResults/prf/results"],
+  requestOptions: [],
+  assertionResponse: ["/response/signature", "/clientExtensionResults/prf/results"]
+};
+function sanitizeCreationOptions(value, projectors) {
+  return sanitize(value, "creationOptions", projectors);
+}
+function sanitizeCreationResponse(value, projectors) {
+  return sanitize(value, "creationResponse", projectors);
+}
+function sanitizeRequestOptions(value) {
+  return sanitize(value, "requestOptions");
+}
+function sanitizeAssertionResponse(value, projectors) {
+  return sanitize(value, "assertionResponse", projectors);
+}
+function sanitize(input, kind, projectors = {}) {
+  try {
+    const value = typeof input === "string" ? JSON.parse(input) : input;
+    if (!isRecord(value)) return void 0;
+    const blocked = new Set(BLACKLIST[kind]);
+    const ancestors = /* @__PURE__ */ new Set();
+    const clone = (item, path, depth = 0) => {
+      if (blocked.has(path)) return void 0;
+      if (kind === "creationOptions" && path === "/user/id" || (kind === "creationResponse" || kind === "assertionResponse") && path === "/response/userHandle") {
+        if (item === null) return null;
+        if (!projectors.userId) return void 0;
+        const identifier = typeof item === "string" ? item : item instanceof ArrayBuffer || ArrayBuffer.isView(item) ? base64url(item) : void 0;
+        if (identifier === void 0) return void 0;
+        try {
+          const output = projectors.userId(identifier);
+          return typeof output === "string" || output === null ? output : void 0;
+        } catch {
+          return void 0;
+        }
+      }
+      if (item === null || typeof item === "string" || typeof item === "boolean") return item;
+      if (typeof item === "number") return Number.isFinite(item) ? item : null;
+      if (typeof item !== "object") return void 0;
+      if (item instanceof ArrayBuffer || ArrayBuffer.isView(item)) return base64url(item);
+      if (depth > 64 || ancestors.has(item)) throw new TypeError("Invalid telemetry payload");
+      ancestors.add(item);
+      try {
+        if (Array.isArray(item)) {
+          return item.map((entry, i) => clone(entry, `${path}/${i}`, depth + 1));
+        }
+        const result = /* @__PURE__ */ Object.create(null);
+        for (const key in item) {
+          const childPath = `${path}/${key.replace(/~/g, "~0").replace(/\//g, "~1")}`;
+          if (blocked.has(childPath) || key === "toJSON") continue;
+          const child = clone(item[key], childPath, depth + 1);
+          if (child !== void 0) result[key] = child;
+        }
+        const source = item;
+        const readMethod = (method, field) => {
+          if (result[field] !== void 0 || typeof source[method] !== "function") return;
+          const childPath = `${path}/${field}`;
+          const child = clone(
+            Reflect.apply(source[method], item, []),
+            childPath,
+            depth + 1
+          );
+          if (child !== void 0) result[field] = child;
+        };
+        if (path === "" && (kind === "creationResponse" || kind === "assertionResponse")) {
+          readMethod("getClientExtensionResults", "clientExtensionResults");
+        }
+        if (path === "/response" && kind === "creationResponse") {
+          readMethod("getTransports", "transports");
+          readMethod("getAuthenticatorData", "authenticatorData");
+          readMethod("getPublicKey", "publicKey");
+          readMethod("getPublicKeyAlgorithm", "publicKeyAlgorithm");
+        }
+        return result;
+      } finally {
+        ancestors.delete(item);
+      }
+    };
+    return JSON.stringify(clone(value, ""));
+  } catch {
+    return void 0;
+  }
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) && !(value instanceof ArrayBuffer) && !ArrayBuffer.isView(value);
+}
+function base64url(value) {
+  const bytes = value instanceof ArrayBuffer ? new Uint8Array(value) : new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+export {
+  sanitizeAssertionResponse,
+  sanitizeCreationOptions,
+  sanitizeCreationResponse,
+  sanitizeRequestOptions
+};

package/dist/analysis/version.mjs

@@ -0,0 +1,7 @@
+// src/version.ts
+var SDK_NAME = "@corbado/observe";
+var SDK_VERSION = true ? "1.8.0" : "0.0.0-dev";
+export {
+  SDK_NAME,
+  SDK_VERSION
+};