@darkauth/client 1.13.3 → 1.15.0

package/dist/index.d.ts

@@ -20,6 +20,10 @@ export interface AuthSession {
     idToken: string;
     accessToken?: string;
     drk: Uint8Array;
+    clientAppKey?: Uint8Array;
+    rootKey?: Uint8Array;
+    deliveredKeyKind?: "client_app_key" | "root_key";
+    keyDeliveryVersion?: "v1-drk" | "v2";
     refreshToken?: string;
 }
 export interface JwtClaims {

package/dist/index.js

@@ -190,6 +190,10 @@ function storeSession(session) {
         idToken: session.idToken,
         accessToken: session.accessToken,
         drk: session.drk,
+        clientAppKey: session.clientAppKey,
+        rootKey: session.rootKey,
+        deliveredKeyKind: session.deliveredKeyKind,
+        keyDeliveryVersion: session.keyDeliveryVersion,
         refreshToken: currentRefreshMode === "token" ? session.refreshToken : undefined,
     };
     memorySession = storedSession;
@@ -367,6 +371,10 @@ export async function handleCallback() {
             sessionStorage.removeItem("zk_eph_priv_jwk");
             const privateKey = await crypto.subtle.importKey("jwk", JSON.parse(privateJwkString), { name: "ECDH", namedCurve: "P-256" }, true, ["deriveBits", "deriveKey"]);
             let drk;
+            let clientAppKey;
+            let rootKey;
+            let deliveredKeyKind;
+            let keyDeliveryVersion;
             if (hasV2Artifacts) {
                 if (hasLegacyArtifacts)
                     throw new Error("Mixed key delivery metadata");
@@ -421,6 +429,9 @@ export async function handleCallback() {
                 drk = base64UrlToBytes(requireString(payload.cak, "client app key"));
                 if (drk.length === 0)
                     throw new Error("Invalid client app key");
+                clientAppKey = drk;
+                deliveredKeyKind = "client_app_key";
+                keyDeliveryVersion = "v2";
             }
             else {
                 if (!drkJwe || typeof drkJwe !== "string")
@@ -434,9 +445,21 @@ export async function handleCallback() {
                 if (protectedHeader.alg !== "ECDH-ES" || protectedHeader.enc !== "A256GCM")
                     throw new Error("Invalid DRK JWE header");
                 drk = new Uint8Array(plaintext);
+                rootKey = drk;
+                deliveredKeyKind = "root_key";
+                keyDeliveryVersion = "v1-drk";
             }
             clearCallbackUrl();
-            return storeSession({ idToken, accessToken, drk, refreshToken });
+            return storeSession({
+                idToken,
+                accessToken,
+                drk,
+                clientAppKey,
+                rootKey,
+                deliveredKeyKind,
+                keyDeliveryVersion,
+                refreshToken,
+            });
         }
         finally {
             clearCallbackStorage();
@@ -532,6 +555,10 @@ export async function refreshSession() {
         idToken,
         accessToken,
         drk,
+        clientAppKey: memorySession?.clientAppKey,
+        rootKey: memorySession?.rootKey,
+        deliveredKeyKind: memorySession?.deliveredKeyKind,
+        keyDeliveryVersion: memorySession?.keyDeliveryVersion,
         refreshToken: currentRefreshMode === "token" ? newRefreshToken || refreshToken || undefined : undefined,
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkauth/client",
-  "version": "1.13.3",
+  "version": "1.15.0",
   "license": "MIT",
   "repository": {
     "directory": "packages/darkauth-client",