@digitaldefiance/ecies-lib 4.4.2 → 4.4.4

package/src/member.ts

@@ -0,0 +1,495 @@
+import { Wallet } from '@ethereumjs/wallet';
+import { Constants, ECIES } from './constants';
+import { EmailString } from './email-string';
+import MemberErrorType from './enumerations/member-error-type';
+import MemberType from './enumerations/member-type';
+import { MemberError } from './errors/member';
+import { IECIESConstants } from './interfaces/ecies-consts';
+import { IEncryptedChunk } from './interfaces/encrypted-chunk';
+import { IFrontendMemberOperational } from './interfaces/frontend-member-operational';
+import { IMember } from './interfaces/member';
+import { IMemberStorageData } from './interfaces/member-storage';
+import { IMemberWithMnemonic } from './interfaces/member-with-mnemonic';
+import { SecureBuffer } from './secure-buffer';
+import { SecureString } from './secure-string';
+import { ECIESService } from './services/ecies/service';
+import { EncryptionStream } from './services/encryption-stream';
+import { SignatureUint8Array } from './types';
+import {
+  base64ToUint8Array,
+  uint8ArrayToBase64,
+  uint8ArrayToHex,
+} from './utils';
+
+/**
+ * Represents a member with cryptographic capabilities.
+ * This class provides methods for signing, verifying, encrypting, and decrypting data.
+ * It also manages the member's keys and wallet.
+ */
+export class Member implements IMember, IFrontendMemberOperational<Uint8Array> {
+  private readonly _eciesService: ECIESService;
+  private readonly _id: Uint8Array;
+  private readonly _type: MemberType;
+  private readonly _name: string;
+  private readonly _email: EmailString;
+  private readonly _publicKey: Uint8Array;
+  private readonly _creatorId: Uint8Array;
+  private readonly _dateCreated: Date;
+  private readonly _dateUpdated: Date;
+  private _privateKey?: SecureBuffer;
+  private _wallet?: Wallet;
+
+  constructor(
+    // Add injected services as parameters
+    eciesService: ECIESService,
+    // Original parameters
+    type: MemberType,
+    name: string,
+    email: EmailString,
+    publicKey: Uint8Array,
+    privateKey?: SecureBuffer,
+    wallet?: Wallet,
+    id?: Uint8Array,
+    dateCreated?: Date,
+    dateUpdated?: Date,
+    creatorId?: Uint8Array,
+  ) {
+    // Assign injected services
+    this._eciesService = eciesService;
+    // Assign original parameters
+    this._type = type;
+    this._id = id ?? Constants.idProvider.generate();
+    this._name = name;
+    if (!this._name || this._name.length == 0) {
+      throw new MemberError(MemberErrorType.MissingMemberName);
+    }
+    if (this._name.trim() != this._name) {
+      throw new MemberError(MemberErrorType.InvalidMemberNameWhitespace);
+    }
+    this._email = email;
+    this._publicKey = publicKey;
+    this._privateKey = privateKey;
+    this._wallet = wallet;
+
+    // don't create a new date object with nearly identical values to the existing one
+    let _now: null | Date = null;
+    const now = function () {
+      if (!_now) {
+        _now = new Date();
+      }
+      return _now;
+    };
+    this._dateCreated = dateCreated ?? now();
+    this._dateUpdated = dateUpdated ?? now();
+    this._creatorId = creatorId ?? this._id;
+  }
+
+  // Required getters
+  public get id(): Uint8Array {
+    return this._id;
+  }
+  public get type(): MemberType {
+    return this._type;
+  }
+  public get name(): string {
+    return this._name;
+  }
+  public get email(): EmailString {
+    return this._email;
+  }
+  public get publicKey(): Uint8Array {
+    return this._publicKey;
+  }
+  public get creatorId(): Uint8Array {
+    return this._creatorId;
+  }
+  public get dateCreated(): Date {
+    return this._dateCreated;
+  }
+  public get dateUpdated(): Date {
+    return this._dateUpdated;
+  }
+
+  // Optional private data getters
+  public get privateKey(): SecureBuffer | undefined {
+    return this._privateKey;
+  }
+  public get wallet(): Wallet {
+    if (!this._wallet) {
+      throw new MemberError(MemberErrorType.NoWallet);
+    }
+    return this._wallet;
+  }
+
+  // State getters
+  public get hasPrivateKey(): boolean {
+    return this._privateKey !== undefined;
+  }
+
+  public unloadPrivateKey(): void {
+    // Do not dispose here; tests expect the same SecureBuffer instance to remain usable
+    // when reloaded into another member in the same process.
+    this._privateKey = undefined;
+  }
+
+  public unloadWallet(): void {
+    this._wallet = undefined;
+  }
+
+  public unloadWalletAndPrivateKey(): void {
+    this.unloadWallet();
+    this.unloadPrivateKey();
+  }
+
+  public loadWallet(
+    mnemonic: SecureString,
+    eciesParams?: IECIESConstants,
+  ): void {
+    if (this._wallet) {
+      throw new MemberError(MemberErrorType.WalletAlreadyLoaded);
+    }
+    const eciesConsts = eciesParams ?? ECIES;
+    const { wallet } = this._eciesService.walletAndSeedFromMnemonic(mnemonic);
+    const privateKey = wallet.getPrivateKey();
+    // Use service to get compressed public key
+    const publicKey = this._eciesService.getPublicKey(privateKey);
+
+    if (uint8ArrayToHex(publicKey) !== uint8ArrayToHex(this._publicKey)) {
+      throw new MemberError(MemberErrorType.InvalidMnemonic);
+    }
+    this._wallet = wallet;
+    this._privateKey?.dispose();
+    this._privateKey = new SecureBuffer(privateKey);
+  }
+
+  /**
+   * Loads the private key and optionally the voting private key.
+   *
+   * @param privateKey The private key to load.
+   * @param votingPrivateKey The voting private key to load.
+   */
+  public loadPrivateKey(privateKey: SecureBuffer): void {
+    this._privateKey = privateKey;
+  }
+
+  public sign(data: Uint8Array): SignatureUint8Array {
+    if (!this._privateKey) {
+      throw new MemberError(MemberErrorType.MissingPrivateKey);
+    }
+    return this._eciesService.signMessage(this._privateKey.value, data);
+  }
+
+  public signData(data: Uint8Array): SignatureUint8Array {
+    if (!this._privateKey) {
+      throw new MemberError(MemberErrorType.MissingPrivateKey);
+    }
+    return this._eciesService.signMessage(
+      new Uint8Array(this._privateKey.value),
+      data,
+    );
+  }
+
+  public verify(signature: SignatureUint8Array, data: Uint8Array): boolean {
+    return this._eciesService.verifyMessage(this._publicKey, data, signature);
+  }
+
+  public verifySignature(
+    data: Uint8Array,
+    signature: Uint8Array,
+    publicKey: Uint8Array,
+  ): boolean {
+    return this._eciesService.verifyMessage(
+      publicKey,
+      data,
+      signature as SignatureUint8Array,
+    );
+  }
+
+  private static readonly MAX_ENCRYPTION_SIZE = 1024 * 1024 * 10; // 10MB limit
+  private static readonly VALID_STRING_REGEX = /^[\x20-\x7E\n\r\t]*$/; // Printable ASCII + common whitespace
+
+  /**
+   * Encrypt data stream (for large data)
+   */
+  async *encryptDataStream(
+    source: AsyncIterable<Uint8Array> | ReadableStream<Uint8Array>,
+    options?: {
+      recipientPublicKey?: Uint8Array;
+      onProgress?: (progress: {
+        bytesProcessed: number;
+        chunksProcessed: number;
+      }) => void;
+      signal?: AbortSignal;
+    },
+  ): AsyncGenerator<IEncryptedChunk, void, unknown> {
+    if (!this._privateKey && !options?.recipientPublicKey) {
+      throw new MemberError(MemberErrorType.MissingPrivateKey);
+    }
+
+    const targetPublicKey = options?.recipientPublicKey || this._publicKey;
+    const stream = new EncryptionStream(this._eciesService);
+
+    // Convert ReadableStream to AsyncIterable if needed
+    const asyncSource =
+      'getReader' in source
+        ? this.readableStreamToAsyncIterable(
+            source as ReadableStream<Uint8Array>,
+          )
+        : (source as AsyncIterable<Uint8Array>);
+
+    let bytesProcessed = 0;
+    let chunksProcessed = 0;
+
+    for await (const chunk of stream.encryptStream(
+      asyncSource,
+      targetPublicKey,
+      {
+        signal: options?.signal,
+      },
+    )) {
+      bytesProcessed += chunk.metadata?.originalSize || 0;
+      chunksProcessed++;
+
+      if (options?.onProgress) {
+        options.onProgress({ bytesProcessed, chunksProcessed });
+      }
+
+      yield chunk;
+    }
+  }
+
+  /**
+   * Decrypt data stream (for large data)
+   */
+  async *decryptDataStream(
+    source: AsyncIterable<Uint8Array> | ReadableStream<Uint8Array>,
+    options?: {
+      onProgress?: (progress: {
+        bytesProcessed: number;
+        chunksProcessed: number;
+      }) => void;
+      signal?: AbortSignal;
+    },
+  ): AsyncGenerator<Uint8Array, void, unknown> {
+    if (!this._privateKey) {
+      throw new MemberError(MemberErrorType.MissingPrivateKey);
+    }
+
+    const stream = new EncryptionStream(this._eciesService);
+
+    // Convert ReadableStream to AsyncIterable if needed
+    const asyncSource =
+      'getReader' in source
+        ? this.readableStreamToAsyncIterable(
+            source as ReadableStream<Uint8Array>,
+          )
+        : (source as AsyncIterable<Uint8Array>);
+
+    let bytesProcessed = 0;
+    let chunksProcessed = 0;
+
+    for await (const chunk of stream.decryptStream(
+      asyncSource,
+      new Uint8Array(this._privateKey.value),
+      { signal: options?.signal },
+    )) {
+      bytesProcessed += chunk.length;
+      chunksProcessed++;
+
+      if (options?.onProgress) {
+        options.onProgress({ bytesProcessed, chunksProcessed });
+      }
+
+      yield chunk;
+    }
+  }
+
+  /**
+   * Convert ReadableStream to AsyncIterable
+   */
+  private async *readableStreamToAsyncIterable(
+    stream: ReadableStream<Uint8Array>,
+  ): AsyncIterable<Uint8Array> {
+    const reader = stream.getReader();
+    try {
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        yield value;
+      }
+    } finally {
+      reader.releaseLock();
+    }
+  }
+
+  public async encryptData(
+    data: string | Uint8Array,
+    recipientPublicKey?: Uint8Array,
+  ): Promise<Uint8Array> {
+    // Validate input
+    if (!data) {
+      throw new MemberError(MemberErrorType.MissingEncryptionData);
+    }
+
+    // Check size limit
+    const arr: Uint8Array =
+      data instanceof Uint8Array ? data : new TextEncoder().encode(data);
+    if (arr.length > Member.MAX_ENCRYPTION_SIZE) {
+      throw new MemberError(MemberErrorType.EncryptionDataTooLarge);
+    }
+
+    // Use recipient public key or self public key
+    const targetPublicKey = recipientPublicKey || this._publicKey;
+
+    return await this._eciesService.encryptSimpleOrSingle(
+      false,
+      targetPublicKey,
+      arr,
+    );
+  }
+
+  public async decryptData(encryptedData: Uint8Array): Promise<Uint8Array> {
+    if (!this._privateKey) {
+      throw new MemberError(MemberErrorType.MissingPrivateKey);
+    }
+    // decryptSingleWithHeader now returns the Uint8Array directly
+    return await this._eciesService.decryptSimpleOrSingleWithHeader(
+      false,
+      new Uint8Array(this._privateKey.value),
+      encryptedData,
+    );
+  }
+
+  public toJson(): string {
+    const storage: IMemberStorageData = {
+      id: Constants.idProvider.serialize(this._id),
+      type: this._type,
+      name: this._name,
+      email: this._email.toString(),
+      publicKey: uint8ArrayToBase64(this._publicKey),
+      creatorId: Constants.idProvider.serialize(this._creatorId),
+      dateCreated: this._dateCreated.toISOString(),
+      dateUpdated: this._dateUpdated.toISOString(),
+    };
+    return JSON.stringify(storage);
+  }
+
+  public dispose(): void {
+    // Ensure secret material is zeroized when disposing
+    try {
+      this._privateKey?.dispose();
+    } finally {
+      this.unloadWalletAndPrivateKey();
+    }
+  }
+
+  public static fromJson(
+    json: string,
+    // Add injected services as parameters
+    eciesService: ECIESService,
+  ): Member {
+    let storage: IMemberStorageData;
+    try {
+      storage = JSON.parse(json);
+    } catch (error) {
+      throw new MemberError(MemberErrorType.InvalidMemberData);
+    }
+    const email = new EmailString(storage.email);
+
+    // Pass injected services to constructor
+    const dateCreated = new Date(storage.dateCreated);
+    return new Member(
+      eciesService,
+      storage.type,
+      storage.name,
+      email,
+      base64ToUint8Array(storage.publicKey),
+      undefined,
+      undefined,
+      Constants.idProvider.deserialize(storage.id),
+      dateCreated,
+      new Date(storage.dateUpdated),
+      Constants.idProvider.deserialize(storage.creatorId),
+    );
+  }
+
+  public static fromMnemonic(
+    mnemonic: SecureString,
+    eciesService: ECIESService,
+    eciesParams?: IECIESConstants,
+    name = 'Test User',
+    email = new EmailString('test@example.com'),
+  ): Member {
+    const eciesConsts = eciesParams ?? ECIES;
+    const { wallet } = eciesService.walletAndSeedFromMnemonic(mnemonic);
+    const privateKey = wallet.getPrivateKey();
+    // Use service to get compressed public key
+    const publicKey = eciesService.getPublicKey(privateKey);
+
+    return new Member(
+      eciesService,
+      MemberType.User,
+      name,
+      email,
+      publicKey,
+      new SecureBuffer(privateKey),
+      wallet,
+    );
+  }
+
+  public static newMember(
+    // Add injected services as parameters
+    eciesService: ECIESService,
+    // Original parameters
+    type: MemberType,
+    name: string,
+    email: EmailString,
+    forceMnemonic?: SecureString,
+    createdBy?: Uint8Array,
+    eciesParams?: IECIESConstants,
+  ): IMemberWithMnemonic {
+    // Validate inputs first
+    if (!name || name.length == 0) {
+      throw new MemberError(MemberErrorType.MissingMemberName);
+    }
+    if (name.trim() != name) {
+      throw new MemberError(MemberErrorType.InvalidMemberNameWhitespace);
+    }
+    if (!email || email.toString().length == 0) {
+      throw new MemberError(MemberErrorType.MissingEmail);
+    }
+    if (email.toString().trim() != email.toString()) {
+      throw new MemberError(MemberErrorType.InvalidEmailWhitespace);
+    }
+
+    const eciesConsts = eciesParams ?? ECIES;
+    // Use injected services
+    const mnemonic = forceMnemonic ?? eciesService.generateNewMnemonic();
+    const { wallet } = eciesService.walletAndSeedFromMnemonic(mnemonic);
+
+    // Get private key from wallet
+    const privateKey = wallet.getPrivateKey();
+    // Get compressed public key
+    const publicKey = eciesService.getPublicKey(privateKey);
+
+    const newId = Constants.idProvider.generate();
+    const dateCreated = new Date();
+    return {
+      // Pass injected services to constructor
+      member: new Member(
+        eciesService,
+        type,
+        name,
+        email,
+        publicKey,
+        new SecureBuffer(privateKey),
+        wallet,
+        newId,
+        dateCreated,
+        dateCreated,
+        createdBy ?? newId,
+      ),
+      mnemonic,
+    };
+  }
+}

package/src/{pbkdf2-profiles.d.ts → pbkdf2-profiles.ts}

@@ -1,6 +1,6 @@
 import { Pbkdf2ProfileEnum } from './enumerations/pbkdf2-profile';
 import { IPbkdf2Config } from './interfaces/pbkdf2-config';
+
 export type Pbkdf2Profiles = {
-    [key in Pbkdf2ProfileEnum]: IPbkdf2Config;
+  [key in Pbkdf2ProfileEnum]: IPbkdf2Config;
 };
-//# sourceMappingURL=pbkdf2-profiles.d.ts.map

package/src/phone-number.ts

@@ -0,0 +1,18 @@
+import { EciesStringKey } from './enumerations';
+import { EciesComponentId, getEciesI18nEngine } from './i18n-setup';
+import { PhoneNumberRegex } from './regexes';
+
+export class PhoneNumber {
+  private readonly _number: string;
+  constructor(number: string) {
+    // make sure the phone number fits the regex
+    if (!PhoneNumberRegex.test(number)) {
+      const engine = getEciesI18nEngine();
+      throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_PhoneNumber_InvalidTemplate, { phoneNumber: number }));
+    }
+    this._number = number;
+  }
+  public get number(): string {
+    return this._number;
+  }
+}

package/src/regexes.ts

@@ -0,0 +1,10 @@
+export const PASSWORD_REGEX =
+  /^(?=.*[A-Za-z])(?=.*\d)(?=.*[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?])[A-Za-z\d!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]{8,}$/;
+
+export const MNEMONIC_REGEX =
+  /^(?:\w+\s){11}\w+$|^(?:\w+\s){14}\w+$|^(?:\w+\s){17}\w+$|^(?:\w+\s){20}\w+$|^(?:\w+\s){23}\w+$/i;
+
+/**
+ * Phone number regex to validate phone numbers
+ */
+export const PhoneNumberRegex = /^(\+\d{1,3}[- ]?)?\d{10}$/; // Matches international phone numbers with optional country code