@docknetwork/wallet-sdk-wasm 1.7.6 → 1.9.0

package/lib/services/edv/service-rpc.mjs

@@ -1,74 +0,0 @@
-import { RpcService } from '../rpc-service-client.mjs';
-import { serviceName, validation } from './configs.mjs';
-import 'assert';
-import '../../rpc-client.mjs';
-import 'json-rpc-2.0';
-import '../../core/crypto.mjs';
-import 'crypto';
-import '../../core/logger.mjs';
-import '../../logger.mjs';
-import '../../rpc-util.mjs';
-
-class EDVServiceRpc extends RpcService {
-  constructor() {
-    super(serviceName);
-  }
-
-  initialize(params                     ) {
-    validation.initialize(params);
-    return this.call('initialize', params);
-  }
-
-  generateKeys() {
-    return this.call('generateKeys');
-  }
-
-  deriveKeys() {
-    return this.call('deriveKeys');
-  }
-
-  getController() {
-    return this.call('getController');
-  }
-
-  find(params     ) {
-    return this.call('find', params);
-  }
-
-  update(params     ) {
-    return this.call('update', params);
-  }
-
-  insert(params     ) {
-    return this.call('insert', params);
-  }
-
-  delete(params     ) {
-    return this.call('delete', params);
-  }
-
-  deriveBiometricKey(biometricData        , identifier        ) {
-    return this.call('deriveBiometricKey', {biometricData, identifier});
-  }
-
-  deriveBiometricEncryptionKey(biometricData        , identifier        ) {
-    return this.call('deriveBiometricEncryptionKey', {
-      biometricData,
-      identifier,
-    });
-  }
-
-  encryptMasterKey(masterKey            , encryptionKey        , iv        ) {
-    return this.call('encryptMasterKey', {masterKey, encryptionKey, iv});
-  }
-
-  decryptMasterKey(
-    encryptedKey            ,
-    decryptionKey        ,
-    iv        ,
-  ) {
-    return this.call('decryptMasterKey', {encryptedKey, decryptionKey, iv});
-  }
-}
-
-export { EDVServiceRpc };

package/lib/services/edv/service.js

@@ -1,370 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var services_edv_configs = require('./configs.js');
-var EDVHTTPStorageInterface = require('@docknetwork/universal-wallet/storage/edv-http-storage');
-var services_edv_hmac = require('./hmac.js');
-var ed25519VerificationKey2018 = require('@digitalbazaar/ed25519-verification-key-2018');
-var ed25519VerificationKey2020 = require('@digitalbazaar/ed25519-verification-key-2020');
-var x25519KeyAgreementKey2020 = require('@digitalbazaar/x25519-key-agreement-key-2020');
-var keypairs = require('@docknetwork/universal-wallet/methods/keypairs');
-var logger = require('@docknetwork/wallet-sdk-data-store/lib/logger');
-var services_dids_service = require('../dids/service.js');
-var keypairs$1 = require('@docknetwork/credential-sdk/keypairs');
-var hkdf = require('futoin-hkdf');
-var crypto = require('@docknetwork/universal-wallet/crypto');
-require('assert');
-require('base64url-universal');
-require('@docknetwork/wallet-sdk-dids/lib');
-require('../dids/config.js');
-require('base64url');
-require('../credential/utils.js');
-require('base58-universal');
-require('@docknetwork/credential-sdk/vc/crypto');
-require('@docknetwork/credential-sdk/utils');
-require('@digitalbazaar/x25519-key-agreement-key-2019');
-require('../dids/keypair-utils.js');
-
-function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
-
-var EDVHTTPStorageInterface__default = /*#__PURE__*/_interopDefaultLegacy(EDVHTTPStorageInterface);
-var hkdf__default = /*#__PURE__*/_interopDefaultLegacy(hkdf);
-var crypto__default = /*#__PURE__*/_interopDefaultLegacy(crypto);
-
-// @ts-nocheck
-const HKDF_LENGTH = 32;
-const HKDF_HASH = 'SHA-256';
-/**
- * Service class for managing Encrypted Data Vaults
- * @class
- * @description Provides methods for creating, managing, and interacting with
- * encrypted data vaults for secure storage of sensitive wallet data
- */
-class EDVService {
-    storageInterface;
-    insertQueue = Promise.resolve();
-    controller;
-    rpcMethods = [
-        EDVService.prototype.generateKeys,
-        EDVService.prototype.deriveKeys,
-        EDVService.prototype.getController,
-        EDVService.prototype.initialize,
-        EDVService.prototype.find,
-        EDVService.prototype.update,
-        EDVService.prototype.insert,
-        EDVService.prototype.delete,
-        EDVService.prototype.deriveBiometricKey,
-        EDVService.prototype.deriveBiometricEncryptionKey,
-        EDVService.prototype.encryptMasterKey,
-        EDVService.prototype.decryptMasterKey,
-    ];
-    /**
-     * Creates a new EDVService instance
-     * @constructor
-     */
-    constructor() {
-        this.name = services_edv_configs.serviceName;
-    }
-    /**
-     * Initializes the EDV service with encryption keys and connection parameters
-     * @param {InitializeEDVParams} params - Initialization parameters
-     * @param {Object} params.hmacKey - HMAC key for document indexing
-     * @param {Object} params.agreementKey - Key agreement key for encryption
-     * @param {Object} params.verificationKey - Verification key for authentication
-     * @param {string} params.edvUrl - URL of the EDV server
-     * @param {string} params.authKey - Authentication key for the EDV server
-     * @returns {Promise<void>}
-     * @throws {Error} If unable to create or connect to EDV
-     * @example
-     * await edvService.initialize({
-     *   hmacKey: hmacKeyData,
-     *   agreementKey: agreementKeyData,
-     *   verificationKey: verificationKeyData,
-     *   edvUrl: 'https://edv.example.com',
-     *   authKey: 'auth-token-123'
-     * });
-     */
-    async initialize({ hmacKey, agreementKey, verificationKey, edvUrl, authKey, }) {
-        const hmac = await services_edv_hmac.create({
-            key: hmacKey,
-        });
-        const keyAgreementKey = await x25519KeyAgreementKey2020.X25519KeyAgreementKey2020.from(agreementKey);
-        const keys = {
-            keyAgreementKey,
-            hmac,
-        };
-        const { controller } = verificationKey;
-        this.controller = controller;
-        const invocationSigner = keypairs.getKeypairFromDoc(verificationKey);
-        invocationSigner.sign = invocationSigner.signer().sign;
-        this.storageInterface = new EDVHTTPStorageInterface__default["default"]({
-            url: edvUrl,
-            keys,
-            invocationSigner,
-            defaultHeaders: {
-                DockAuth: authKey,
-            },
-        });
-        let edvId;
-        try {
-            console.log('Creating EDV with controller:', controller);
-            edvId = await this.storageInterface.createEdv({
-                sequence: 0,
-                controller,
-            });
-        }
-        catch (e) {
-            const existingConfig = await this.storageInterface.findConfigFor(controller);
-            edvId = existingConfig && existingConfig.id;
-            if (!edvId) {
-                logger.logger.error('Unable to create or find primary EDV:');
-                throw e;
-            }
-        }
-        logger.logger.log(`EDV found/created: ${edvId} - connecting to it`);
-        this.storageInterface.connectTo(edvId);
-        await this.storageInterface.client.ensureIndex({
-            attribute: 'content.id',
-            unique: true,
-        });
-        await this.storageInterface.client.ensureIndex({
-            attribute: 'content.type',
-        });
-    }
-    /**
-     * Generates new cryptographic keys for EDV operations
-     * @returns {Promise<Object>} Generated keys
-     * @returns {Object} returns.verificationKey - Ed25519 verification key for authentication
-     * @returns {Object} returns.agreementKey - X25519 key agreement key for encryption
-     * @returns {Object} returns.hmacKey - HMAC key for indexing
-     * @example
-     * const keys = await edvService.generateKeys();
-     * // Use keys for EDV initialization
-     * await edvService.initialize({
-     *   ...keys,
-     *   edvUrl: 'https://edv.example.com',
-     *   authKey: 'auth-token'
-     * });
-     */
-    async generateKeys() {
-        const keyPair = await services_dids_service.didService.generateKeyDoc({});
-        const verificationKey = await ed25519VerificationKey2018.Ed25519VerificationKey2018.generate({
-            controller: keyPair.controller,
-            id: keyPair.id,
-        });
-        const agreementKey = await x25519KeyAgreementKey2020.X25519KeyAgreementKey2020.generate({
-            controller: keyPair.controller,
-        });
-        const hmacKey = await services_edv_hmac.exportKey(await services_edv_hmac.generateKey());
-        return { verificationKey, agreementKey, hmacKey };
-    }
-    /**
-     * Derives cryptographic keys from a master key
-     * @param {Uint8Array} masterKey - Master key for derivation
-     * @returns {Promise<Object>} Derived keys
-     * @returns {Object} returns.verificationKey - Derived Ed25519 verification key
-     * @returns {Object} returns.agreementKey - Derived X25519 key agreement key
-     * @returns {Object} returns.hmacKey - Derived HMAC key
-     * @example
-     * const masterKey = new Uint8Array(32); // Your master key
-     * const keys = await edvService.deriveKeys(masterKey);
-     */
-    async deriveKeys(masterKey) {
-        const { keyPair: pair } = new keypairs$1.Ed25519Keypair(masterKey, 'seed');
-        const keyPair = await services_dids_service.didService.deriveKeyDoc({ pair });
-        const verificationKey = await ed25519VerificationKey2018.Ed25519VerificationKey2018.from(keyPair);
-        const verificationKey2020 = await ed25519VerificationKey2020.Ed25519VerificationKey2020.fromEd25519VerificationKey2018({ keyPair });
-        const agreementKey = await x25519KeyAgreementKey2020.X25519KeyAgreementKey2020.fromEd25519VerificationKey2020({ keyPair: verificationKey2020 });
-        const hmacKey = await services_edv_hmac.exportKey(await services_edv_hmac.deriveKey(masterKey));
-        return { verificationKey, agreementKey, hmacKey };
-    }
-    /**
-     * Gets the controller identifier for the current EDV
-     * @returns {Promise<string>} The controller DID or identifier
-     * @example
-     * const controller = await edvService.getController();
-     * console.log('EDV Controller:', controller);
-     */
-    async getController() {
-        return this.controller;
-    }
-    /**
-     * Finds documents in the EDV based on query parameters
-     * @param {Object} params - Query parameters
-     * @param {Object} [params.equals] - Equality-based query conditions
-     * @param {boolean} [params.has] - Existence-based query conditions
-     * @param {number} [params.limit] - Maximum number of results
-     * @returns {Promise<Array>} Array of matching documents
-     * @example
-     * const documents = await edvService.find({
-     *   equals: { 'content.type': 'VerifiableCredential' },
-     *   limit: 10
-     * });
-     */
-    find(params) {
-        return this.storageInterface.find(params);
-    }
-    /**
-     * Updates a document in the EDV
-     * @param {Object} params - Update parameters
-     * @param {string} params.id - Document ID to update
-     * @param {Object} params.content - New document content
-     * @returns {Promise<Object>} Updated document
-     * @example
-     * const updated = await edvService.update({
-     *   id: 'doc-123',
-     *   content: { ...existingContent, updated: true }
-     * });
-     */
-    update(params) {
-        return this.storageInterface.update(params);
-    }
-    /**
-     * Inserts a new document into the EDV
-     * @param {Object} params - Insert parameters
-     * @param {string} params.id - Document ID
-     * @param {Object} params.content - Document content to store
-     * @returns {Promise<Object>} The inserted document
-     * @throws {Error} If insertion fails
-     * @example
-     * const document = await edvService.insert({
-     *   id: 'doc-456',
-     *   content: {
-     *     type: 'VerifiableCredential',
-     *     data: credentialData
-     *   }
-     * });
-     */
-    insert(params) {
-        this.insertQueue = this.insertQueue.then(() => {
-            return this.storageInterface.insert(params).catch(error => {
-                logger.logger.error('Insert failed:', error);
-                throw error;
-            });
-        });
-        return this.insertQueue;
-    }
-    /**
-     * Deletes a document from the EDV
-     * @param {Object} params - Deletion parameters
-     * @param {string} params.id - Document ID to delete
-     * @returns {Promise<boolean>} True if deletion successful
-     * @example
-     * const deleted = await edvService.delete({
-     *   id: 'doc-123'
-     * });
-     */
-    delete(params) {
-        return this.storageInterface.delete(params);
-    }
-    /**
-     * Derives a key from biometric data using HKDF
-     * @param {Buffer} biometricData - Biometric data from provider
-     * @param {string} identifier - User's identifier as salt (email, phone number, etc.)
-     * @returns {Buffer} Derived key
-     * @example
-     * const key = edvService.deriveBiometricKey(biometricData, 'user@example.com');
-     */
-    deriveBiometricKey(biometricData, identifier) {
-        const salt = identifier;
-        return hkdf__default["default"](biometricData, HKDF_LENGTH, { salt, hash: HKDF_HASH });
-    }
-    /**
-     * Generates a key for encrypting/decrypting the master key
-     * @param {Buffer} biometricData - Biometric data from provider
-     * @param {string} identifier - User's identifier as salt (email, phone number, etc.)
-     * @returns {Promise<Object>} Encryption key and IV for AES encryption
-     * @returns {Buffer} returns.key - Encryption key
-     * @returns {Buffer} returns.iv - Initialization vector
-     * @example
-     * const { key, iv } = await edvService.deriveBiometricEncryptionKey(biometricData, 'user@example.com');
-     */
-    async deriveBiometricEncryptionKey(biometricData, identifier) {
-        const key = this.deriveBiometricKey(biometricData, identifier);
-        const randomBytes = crypto__default["default"].getRandomValues(new Uint8Array(16));
-        const iv = Buffer.from(randomBytes);
-        return {
-            key,
-            iv
-        };
-    }
-    /**
-     * Encrypts the master key using a key derived from biometric data
-     * @param {Uint8Array} masterKey - The CloudWalletVault master key to encrypt
-     * @param {Buffer} encryptionKey - Key derived from biometric data
-     * @param {Buffer} iv - Initialization vector
-     * @returns {Promise<Uint8Array>} Encrypted master key
-     * @example
-     * const encrypted = await edvService.encryptMasterKey(masterKey, encryptionKey, iv);
-     */
-    async encryptMasterKey(masterKey, encryptionKey, iv) {
-        const keyData = new Uint8Array(encryptionKey);
-        const ivData = new Uint8Array(iv);
-        const key = await crypto__default["default"].subtle.importKey('raw', keyData, { name: 'AES-GCM' }, false, ['encrypt']);
-        const encryptedBuffer = await crypto__default["default"].subtle.encrypt({ name: 'AES-GCM', iv: ivData }, key, masterKey);
-        return new Uint8Array(encryptedBuffer);
-    }
-    /**
-     * Decrypts the master key using biometric-derived key
-     * @param {Uint8Array} encryptedKey - The encrypted master key
-     * @param {Buffer} decryptionKey - Key derived from biometric data
-     * @param {Buffer} iv - Initialization vector
-     * @returns {Promise<Uint8Array>} The decrypted master key
-     * @throws {Error} If decryption fails
-     * @example
-     * const masterKey = await edvService.decryptMasterKey(encryptedKey, decryptionKey, iv);
-     */
-    async decryptMasterKey(encryptedKey, decryptionKey, iv) {
-        try {
-            const keyData = new Uint8Array(decryptionKey);
-            const ivData = new Uint8Array(iv);
-            const key = await crypto__default["default"].subtle.importKey('raw', keyData, { name: 'AES-GCM' }, false, ['decrypt']);
-            const decryptedBuffer = await crypto__default["default"].subtle.decrypt({ name: 'AES-GCM', iv: ivData }, key, encryptedKey);
-            return new Uint8Array(decryptedBuffer);
-        }
-        catch (error) {
-            throw new Error('Decryption failed: Invalid key or corrupted data');
-        }
-    }
-}
-/**
- * Singleton instance of the EDV service
- * @type {EDVService}
- * @example
- * import { edvService } from '@docknetwork/wallet-sdk-wasm/services/edv';
- *
- * // Generate keys and initialize
- * const keys = await edvService.generateKeys();
- * await edvService.initialize({
- *   ...keys,
- *   edvUrl: 'https://edv.example.com',
- *   authKey: 'auth-token'
- * });
- *
- * // Store encrypted data
- * await edvService.insert({
- *   id: 'credential-1',
- *   content: {
- *     type: 'VerifiableCredential',
- *     data: credentialData
- *   }
- * });
- *
- * // Query encrypted data
- * const credentials = await edvService.find({
- *   equals: { 'content.type': 'VerifiableCredential' }
- * });
- *
- * // Update encrypted data
- * await edvService.update({
- *   id: 'credential-1',
- *   content: updatedData
- * });
- */
-const edvService = new EDVService();
-
-exports.EDVService = EDVService;
-exports.HKDF_HASH = HKDF_HASH;
-exports.HKDF_LENGTH = HKDF_LENGTH;
-exports.edvService = edvService;