@factset/frontgate-js-sdk 6.11.1 → 7.0.1

package/dist/lib/node/connection/util/functions.js

@@ -1,24 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FetchConnectionConfigurationResponseHeaders = void 0;
 exports.getBytesFromBuffer = getBytesFromBuffer;
-exports.parseConnectionConfiguration = parseConnectionConfiguration;
-exports.objectFromFetchHeaders = objectFromFetchHeaders;
-exports.fetchConnectionConfiguration = fetchConnectionConfiguration;
-exports.createConnection = createConnection;
-exports.setConnectionConfiguration = setConnectionConfiguration;
-exports.getConnectionConfiguration = getConnectionConfiguration;
-const authentication_1 = require("../../authentication");
-const FrontgateWSConnection_1 = require("../FrontgateWSConnection");
-var FetchConnectionConfigurationResponseHeaders;
-(function (FetchConnectionConfigurationResponseHeaders) {
-    FetchConnectionConfigurationResponseHeaders["FRONTGATE_HOST"] = "frontgate-host";
-    FetchConnectionConfigurationResponseHeaders["FRONTGATE_PATH_PREFIX"] = "frontgate-path-prefix";
-    FetchConnectionConfigurationResponseHeaders["FRONTGATE_SPLIT_AUTHENTICATION_TOKEN_SECOND_FACTOR"] = "frontgate-split-authentication-token-second-factor";
-    FetchConnectionConfigurationResponseHeaders["FRONTGATE_AUTHENTICATION_TYPE"] = "frontgate-authentication-type";
-    FetchConnectionConfigurationResponseHeaders["FRONTGATE_AUTHENTICATION_TOKEN"] = "frontgate-authentication-token";
-    FetchConnectionConfigurationResponseHeaders["FRONTGATE_WEBSOCKET_PROTOCOL"] = "frontgate-websocket-protocol";
-})(FetchConnectionConfigurationResponseHeaders || (exports.FetchConnectionConfigurationResponseHeaders = FetchConnectionConfigurationResponseHeaders = {}));
 function getBytesFromBuffer(buf) {
     const res = [];
     if (buf) {
@@ -28,48 +10,3 @@ function getBytesFromBuffer(buf) {
     }
     return res;
 }
-function parseConnectionConfiguration(headers) {
-    const config = {};
-    const providedHeaders = Object.keys(headers);
-    [
-        FetchConnectionConfigurationResponseHeaders.FRONTGATE_HOST,
-        FetchConnectionConfigurationResponseHeaders.FRONTGATE_PATH_PREFIX,
-        FetchConnectionConfigurationResponseHeaders.FRONTGATE_SPLIT_AUTHENTICATION_TOKEN_SECOND_FACTOR,
-        FetchConnectionConfigurationResponseHeaders.FRONTGATE_AUTHENTICATION_TYPE,
-        FetchConnectionConfigurationResponseHeaders.FRONTGATE_AUTHENTICATION_TOKEN,
-        FetchConnectionConfigurationResponseHeaders.FRONTGATE_WEBSOCKET_PROTOCOL,
-    ].forEach((key) => {
-        if (providedHeaders.includes(key)) {
-            config[key.replace(/-([a-z])/g, (g) => g[1].toUpperCase())] = headers[key];
-        }
-    });
-    return config;
-}
-function objectFromFetchHeaders(providedHeaders) {
-    const obj = {};
-    providedHeaders.forEach((value, key) => {
-        obj[key] = value;
-    });
-    return obj;
-}
-async function fetchConnectionConfiguration(input, init) {
-    const response = await fetch(input, init);
-    const headersAsObject = objectFromFetchHeaders(response.headers);
-    const config = parseConnectionConfiguration(headersAsObject);
-    return { config, response };
-}
-function createConnection(options = {}, input, init) {
-    const auth = options.frontgateAuthenticationType === 'token' ? new authentication_1.TokenAuthentication(options.frontgateAuthenticationToken) : new authentication_1.CookieTokenAuthentication();
-    auth.setFetchConfiguration(input, init);
-    return new FrontgateWSConnection_1.FrontgateWSConnection(auth, options);
-}
-function setConnectionConfiguration({ frontgateHost, frontgateWebsocketProtocol }) {
-    localStorage.setItem('mdg2config', JSON.stringify({ frontgateHost, frontgateWebsocketProtocol }));
-}
-function getConnectionConfiguration() {
-    const item = localStorage.getItem('mdg2config');
-    if (!item) {
-        return null;
-    }
-    return JSON.parse(item);
-}

package/dist/lib/node/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.useTimeout = exports.FrontgateClient = exports.FrontgateClientBuilder = exports.Mdg2Client = void 0;
+exports.useTimeout = exports.FrontgateClient = exports.FrontgateClientBuilder = void 0;
 __exportStar(require("./authentication"), exports);
 __exportStar(require("./connection"), exports);
 __exportStar(require("./message"), exports);
@@ -22,8 +22,6 @@ __exportStar(require("./common/interfaces"), exports);
 __exportStar(require("./common/types"), exports);
 __exportStar(require("./logger"), exports);
 __exportStar(require("./mixins"), exports);
-var Mdg2Client_1 = require("./Mdg2Client");
-Object.defineProperty(exports, "Mdg2Client", { enumerable: true, get: function () { return Mdg2Client_1.Mdg2Client; } });
 var FrontgateClient_1 = require("./FrontgateClient");
 Object.defineProperty(exports, "FrontgateClientBuilder", { enumerable: true, get: function () { return FrontgateClient_1.FrontgateClientBuilder; } });
 Object.defineProperty(exports, "FrontgateClient", { enumerable: true, get: function () { return FrontgateClient_1.FrontgateClient; } });

package/dist/lib/node/message/index.js

@@ -14,9 +14,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./guards"), exports);
+exports.FLAG_HAS_NEXT_CHUNK = void 0;
 __exportStar(require("./types"), exports);
 __exportStar(require("./interfaces"), exports);
 __exportStar(require("./request"), exports);
 __exportStar(require("./response"), exports);
 __exportStar(require("./update"), exports);
+exports.FLAG_HAS_NEXT_CHUNK = 8;

package/dist/lib/node/message/interfaces/index.js

@@ -17,4 +17,3 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./HighLevelRequestMethod"), exports);
 __exportStar(require("./HighLevelRequestOptions"), exports);
 __exportStar(require("./HTTPProxyRequestOptions"), exports);
-__exportStar(require("./JobObservable"), exports);

package/dist/lib/node/message/request/TransportLayerClientRequestHeader.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TransportLayerClientRequestHeader = void 0;
-const constants_1 = require("../../common/constants");
+exports.TransportLayerClientRequestHeader = exports.DEFAULT_TIMEOUT_IN_MS = void 0;
 const functions_1 = require("../../util/functions");
+exports.DEFAULT_TIMEOUT_IN_MS = 6000;
 class TransportLayerClientRequestHeader {
     constructor() {
         this.headerMembers = {
@@ -10,7 +10,7 @@ class TransportLayerClientRequestHeader {
             id_job: 0,
             flags_r2: 0,
             resend_counter: 0,
-            timeout: constants_1.DEFAULT_TIMEOUT_IN_MS,
+            timeout: exports.DEFAULT_TIMEOUT_IN_MS,
             authentication_identifiers: {
                 id_application: 0,
                 id_user: 0,

package/dist/lib/node/message/request/raw/example/CreateNotationSearchRequest.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createNotationSearchRequest = void 0;
-const AbstractAuthentication_1 = require("../../../../authentication/AbstractAuthentication");
+const authentication_1 = require("../../../../authentication");
 const createNotationSearchRequest = () => ({
     Message: 'NotationSearchRequest',
     Version: 13,
@@ -14,8 +14,8 @@ const createNotationSearchRequest = () => ({
         resend_counter: 0,
         timeout: 5809,
         authentication_identifiers: {
-            id_application: AbstractAuthentication_1.ID_APP_AUTHENTICATED,
-            id_user: AbstractAuthentication_1.ID_USER_AUTHENTICATED,
+            id_application: authentication_1.ID_APP_AUTHENTICATED,
+            id_user: authentication_1.ID_USER_AUTHENTICATED,
         },
         cache_key: {
             value: [],

package/dist/lib/node/message/request/raw/index.js

@@ -14,5 +14,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./RawRequestFactory"), exports);
 __exportStar(require("./RawRequest"), exports);

package/dist/lib/node/message/response/index.js

@@ -15,15 +15,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./AuthenticationTokenResponse"), exports);
-__exportStar(require("./AuthenticationByTokenResponse"), exports);
-__exportStar(require("./CancelSubscriptionResponse"), exports);
 __exportStar(require("./ConfigurationResponse"), exports);
 __exportStar(require("./DisconnectionMessage"), exports);
 __exportStar(require("./ErrorResponse"), exports);
 __exportStar(require("./HighLevelResponse"), exports);
 __exportStar(require("./HTTPProxyResponse"), exports);
-__exportStar(require("./LoadNotificationMessage"), exports);
 __exportStar(require("./Mdg2Response"), exports);
-__exportStar(require("./PermissionDeniedResponse"), exports);
 __exportStar(require("./PingResponse"), exports);
-__exportStar(require("./RejectResponse"), exports);

package/dist/lib/node/message/update/index.js

@@ -15,4 +15,3 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./HighLevelUpdate"), exports);
-__exportStar(require("./SubscriptionLossMessage"), exports);

package/dist/lib/node/mixins/EndpointRequestMixin.js

@@ -8,7 +8,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.endpointRequest = void 0;
 const _1 = require(".");
 const message_1 = require("../message");
-const MessageFactory_1 = require("../message/MessageFactory");
+const message_2 = require("../message");
 const functions_1 = require("../util/functions");
 const endpointRequest = (config) => {
     const mixinEndpointRequestable = (Base) => {
@@ -78,7 +78,7 @@ const endpointRequest = (config) => {
             },
             _instances = new WeakSet(),
             _hasNextChunk = function _hasNextChunk(msg) {
-                return ((msg.header?.flags ?? 0) & MessageFactory_1.FLAG_HAS_NEXT_CHUNK) === MessageFactory_1.FLAG_HAS_NEXT_CHUNK;
+                return ((msg.header?.flags ?? 0) & message_2.FLAG_HAS_NEXT_CHUNK) === message_2.FLAG_HAS_NEXT_CHUNK;
             },
             _a;
     };

package/dist/lib/node/mixins/RemoteLoggerMixin.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.remotelogger = void 0;
+const _1 = require(".");
+const message_1 = require("../message");
+const remotelogger = (identifier) => {
+    const mixinRemoteLogger = (Base) => {
+        return class extends Base {
+            async logRemotely(message) {
+                const request = new message_1.RawRequest({
+                    Message: 'LogMessage',
+                    timestamp: { microseconds: Date.now() * 1000 },
+                    uuid: { id_1: identifier ?? 0, id_2: 0 },
+                    level: { value: 4 },
+                    area: 61,
+                    Version: 1,
+                    message,
+                });
+                const msg = {
+                    message: request.getPtlMessage(),
+                    callbackType: 'job',
+                    callbackId: '',
+                };
+                return this.hooks.callHook('frontgateConnection:sendMessage', msg);
+            }
+        };
+    };
+    return (0, _1.createExtendedMixinFactory)(mixinRemoteLogger, {
+        featureName: 'RemoteLogger',
+        featureGroups: ['Misc'],
+    });
+};
+exports.remotelogger = remotelogger;

package/dist/lib/node/mixins/auth/AppAuthMixin.js

@@ -13,28 +13,96 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.appAuth = void 0;
 const _1 = require("../.");
-const AppAuthentication_1 = require("../../authentication/AppAuthentication");
+const compat_1 = require("../../compat");
+const connection_1 = require("../../connection");
+const logger_1 = require("../../logger");
+const crypto_1 = require("crypto");
 const appAuth = (idApplication, idUser, clientCredentials, deploymentStage) => {
     const mixinAppAuth = (Base) => {
-        var _auth, _a;
+        var _instances, _sharedSecret, _clientSecret, _createAuthenticationRequest, _createConfigurationRequest, _createTransportLayerRequestHeaderConfigurationRequest, _submit, _a;
         return _a = class extends Base {
                 constructor(...args) {
                     super(...args);
-                    _auth.set(this, void 0);
-                    __classPrivateFieldSet(this, _auth, new AppAuthentication_1.AppAuthentication(idApplication, idUser, clientCredentials), "f");
+                    _instances.add(this);
+                    _sharedSecret.set(this, void 0);
+                    _clientSecret.set(this, void 0);
+                    if (typeof clientCredentials !== 'string') {
+                        throw new Error('clientCredentials not provided or not a string. Client credentials must have the form "{server_secret}-{shared_secret}-{client_secret}".');
+                    }
+                    const secrets = clientCredentials.split('-');
+                    if (secrets.length !== 3) {
+                        throw new Error('Invalid clientCredentials. Client credentials must have the form "{server_secret}-{shared_secret}-{client_secret}".');
+                    }
+                    if (secrets[0] === '*') {
+                        throw new Error('Invalid clientCredentials. Client credentials first part must be a hashed server secret.');
+                    }
+                    __classPrivateFieldSet(this, _sharedSecret, Buffer.from(secrets[1], 'base64'), "f");
+                    __classPrivateFieldSet(this, _clientSecret, Buffer.from(secrets[2], 'base64'), "f");
                     this.hooks.hook('frontgateConnection:connected', async (conf) => {
                         void this.hooks.callHook('frontgateConnection:setIdApp', idApplication);
                         void this.hooks.callHook('frontgateConnection:setIdUser', idUser);
-                        await __classPrivateFieldGet(this, _auth, "f").authenticate((0, _1.createConnectionInterface)({
-                            payload_content: conf.payloadContent,
-                            deployment_stage: deploymentStage,
-                            maximum_idle_interval: conf.maximumIdleInterval,
-                        }, this));
+                        const authResponse = await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createAuthenticationRequest).call(this).toJson());
+                        await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createConfigurationRequest).call(this, authResponse, conf).toJson());
+                        await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createTransportLayerRequestHeaderConfigurationRequest).call(this));
                         await this.hooks.callHook('frontgateConnection:authenticated');
                     });
                 }
             },
-            _auth = new WeakMap(),
+            _sharedSecret = new WeakMap(),
+            _clientSecret = new WeakMap(),
+            _instances = new WeakSet(),
+            _createAuthenticationRequest = function _createAuthenticationRequest() {
+                const salt = (0, crypto_1.randomBytes)(16);
+                const options = {
+                    idApplication,
+                    salt: (0, connection_1.getBytesFromBuffer)(salt),
+                    challenge: (0, connection_1.getBytesFromBuffer)((0, crypto_1.randomBytes)(16)),
+                    encryptedSecrets: [{ encrypted_secret: compat_1.SecretGenerator.createEncryptedSecret(salt, __classPrivateFieldGet(this, _sharedSecret, "f"), __classPrivateFieldGet(this, _clientSecret, "f")) }],
+                };
+                return new compat_1.AuthenticationRequest(options);
+            },
+            _createConfigurationRequest = function _createConfigurationRequest(msg, conf) {
+                const expectedMessage = 'Foundation::AuthenticationResponse';
+                if (msg.Message !== expectedMessage) {
+                    throw new Error(`Expected message "${expectedMessage}" but received "${msg.Message}"`);
+                }
+                const { challenge } = msg.challenge;
+                const options = {
+                    shared_secret: __classPrivateFieldGet(this, _sharedSecret, "f"),
+                    payload_content: conf.payloadContent,
+                    deployment_stage: deploymentStage,
+                    maximum_idle_interval: conf.maximumIdleInterval,
+                };
+                return new compat_1.ConfigurationRequest(challenge, options);
+            },
+            _createTransportLayerRequestHeaderConfigurationRequest = function _createTransportLayerRequestHeaderConfigurationRequest() {
+                return {
+                    Message: 'TransportLayerClientConfigurationRequest',
+                    Version: 1,
+                    flags: 0,
+                };
+            },
+            _submit = async function _submit(message) {
+                this.log(logger_1.LogLevel.INFO, 'Sending message', message);
+                const msg = {
+                    message,
+                    callbackType: 'response',
+                    callbackId: message.Message.replace('Request', 'Response'),
+                };
+                await this.hooks.callHook('frontgateConnection:sendMessage', msg);
+                let timeout;
+                return new Promise((resolve, reject) => {
+                    const unsubMessage = this.hooks.hookOnce(`frontgateConnection:response:${msg.callbackId}`, (response) => {
+                        clearTimeout(timeout);
+                        this.log(logger_1.LogLevel.INFO, 'Received response', response);
+                        resolve(response);
+                    });
+                    timeout = setTimeout(() => {
+                        unsubMessage();
+                        reject(new Error('Authentication message timeout'));
+                    }, 3000);
+                });
+            },
             _a;
     };
     return (0, _1.createExtendedMixinFactory)(mixinAppAuth, {

package/dist/lib/node/mixins/auth/SessionAuthMixin.js

@@ -16,21 +16,29 @@ const FrontgateWSMixin_1 = require("../connection/FrontgateWSMixin");
 const _1 = require("../.");
 const authentication_1 = require("../../authentication");
 const compat_1 = require("../../compat");
+const connection_1 = require("../../connection");
 const logger_1 = require("../../logger");
 const message_1 = require("../../message");
-const TimeOutWrapper_1 = require("../../util/TimeOutWrapper");
+const crypto_1 = require("crypto");
+const functions_1 = require("../../util/functions");
 const sessionAuth = (config, idApplication, username, password, deploymentStage) => {
     const mixinSessionAuth = (Base) => {
-        var _instances, _auth, _tokenConnectionAttempt, _logOut, _mdg2wstoken, _requestOtpAuthenticationTokenForSessionHandling, _toUrlBase64, _a;
+        var _instances, _tokenConnectionAttempt, _logOut, _mdg2wstoken, _sharedSecret, _clientSecret, _requestOtpAuthenticationTokenForSessionHandling, _toUrlBase64, _createAuthenticationRequest, _createConfigurationRequest, _createTransportLayerRequestHeaderConfigurationRequest, _submit, _a;
         return _a = class extends (0, FrontgateWSMixin_1.wsConnection)(config)(Base) {
                 constructor(...args) {
                     super(...args);
                     _instances.add(this);
-                    _auth.set(this, void 0);
                     _tokenConnectionAttempt.set(this, true);
                     _logOut.set(this, false);
                     _mdg2wstoken.set(this, void 0);
-                    __classPrivateFieldSet(this, _auth, new compat_1.UserPasswordAuthentication(idApplication, username, password), "f");
+                    _sharedSecret.set(this, void 0);
+                    _clientSecret.set(this, void 0);
+                    const plainSharedSecret = compat_1.SecretGenerator.generateSharedSecret(username, password);
+                    const plainClientSecret = compat_1.SecretGenerator.generateClientSecret(username, password);
+                    if (plainSharedSecret && plainClientSecret) {
+                        __classPrivateFieldSet(this, _sharedSecret, Buffer.from(plainSharedSecret), "f");
+                        __classPrivateFieldSet(this, _clientSecret, Buffer.from(plainClientSecret), "f");
+                    }
                     this.hooks.hook('frontgateConnection:beforeConnect', (settings) => {
                         void this.hooks.callHook('frontgateConnection:setIdApp', authentication_1.ID_APP_AUTHENTICATED);
                         void this.hooks.callHook('frontgateConnection:setIdUser', authentication_1.ID_USER_AUTHENTICATED);
@@ -72,35 +80,9 @@ const sessionAuth = (config, idApplication, username, password, deploymentStage)
                             });
                             return;
                         }
-                        await __classPrivateFieldGet(this, _auth, "f").authenticate({
-                            options: {
-                                payload_content: conf.payloadContent,
-                                deployment_stage: deploymentStage,
-                                maximum_idle_interval: conf.maximumIdleInterval,
-                            },
-                            submit: async (message) => {
-                                this.log(logger_1.LogLevel.INFO, 'Sending message', message);
-                                const msg = {
-                                    message,
-                                    callbackType: 'response',
-                                    callbackId: message.Message.replace('Request', 'Response'),
-                                };
-                                await this.hooks.callHook('frontgateConnection:sendMessage', msg);
-                                return new Promise((resolve) => {
-                                    this.hooks.hookOnce(`frontgateConnection:response:${msg.callbackId}`, (response) => {
-                                        this.log(logger_1.LogLevel.INFO, 'Received response', response);
-                                        resolve(response);
-                                    });
-                                });
-                            },
-                            setPeerInfo: (peerInfo) => {
-                                this.log(logger_1.LogLevel.INFO, 'Peer info:', peerInfo);
-                            },
-                            auth: {
-                                idApplication: undefined,
-                                idUser: undefined,
-                            },
-                        });
+                        const authResponse = await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createAuthenticationRequest).call(this).toJson());
+                        await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createConfigurationRequest).call(this, authResponse, conf).toJson());
+                        await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createTransportLayerRequestHeaderConfigurationRequest).call(this));
                         await this.hooks.callHook('frontgateConnection:authenticated');
                     });
                 }
@@ -141,10 +123,11 @@ const sessionAuth = (config, idApplication, username, password, deploymentStage)
                     }
                 }
             },
-            _auth = new WeakMap(),
             _tokenConnectionAttempt = new WeakMap(),
             _logOut = new WeakMap(),
             _mdg2wstoken = new WeakMap(),
+            _sharedSecret = new WeakMap(),
+            _clientSecret = new WeakMap(),
             _instances = new WeakSet(),
             _requestOtpAuthenticationTokenForSessionHandling = async function _requestOtpAuthenticationTokenForSessionHandling(lifetimeSeconds = message_1.AuthenticationTokenRequest.LIFETIME_SECONDS_MAXIMUM, idUser = authentication_1.ID_USER_AUTHENTICATED, idApplication = authentication_1.ID_APP_AUTHENTICATED, timeOutInMs = this.defaultTimeoutInMs) {
                 const request = new message_1.AuthenticationTokenRequest(lifetimeSeconds, idUser, idApplication, timeOutInMs, true);
@@ -168,11 +151,68 @@ const sessionAuth = (config, idApplication, username, password, deploymentStage)
                     });
                 });
                 const rejectReason = `Request timeout reached (${timeOutInMs} ms) for ${msg.message.Message}`;
-                return TimeOutWrapper_1.TimeoutWrapper.wrap(promise, timeOutInMs, rejectReason);
+                return (0, functions_1.useTimeout)(timeOutInMs, rejectReason, promise);
             },
             _toUrlBase64 = function _toUrlBase64(strInBase64) {
                 return strInBase64.replace(/[=]/g, '').replace(/\//g, '_').replace(/\+/g, '-');
             },
+            _createAuthenticationRequest = function _createAuthenticationRequest() {
+                const salt = (0, crypto_1.randomBytes)(16);
+                const options = {
+                    idApplication,
+                    username,
+                    salt: (0, connection_1.getBytesFromBuffer)(salt),
+                    challenge: (0, connection_1.getBytesFromBuffer)((0, crypto_1.randomBytes)(16)),
+                    encryptedSecrets: [{ encrypted_secret: compat_1.SecretGenerator.createEncryptedSecret(salt, __classPrivateFieldGet(this, _sharedSecret, "f"), __classPrivateFieldGet(this, _clientSecret, "f")) }],
+                };
+                return new compat_1.AuthenticationRequest(options);
+            },
+            _createConfigurationRequest = function _createConfigurationRequest(msg, conf) {
+                const expectedMessage = 'Foundation::AuthenticationResponse';
+                if (msg.Message !== expectedMessage) {
+                    throw new Error(`Expected message "${expectedMessage}" but received "${msg.Message}"`);
+                }
+                if (msg.id_user === authentication_1.ID_USER_AUTHENTICATED) {
+                    void this.hooks.callHook('frontgateConnection:setIdApp', authentication_1.ID_APP_AUTHENTICATED);
+                    void this.hooks.callHook('frontgateConnection:setIdUser', authentication_1.ID_USER_AUTHENTICATED);
+                }
+                const { challenge } = msg.challenge;
+                const options = {
+                    shared_secret: __classPrivateFieldGet(this, _sharedSecret, "f"),
+                    payload_content: conf.payloadContent,
+                    deployment_stage: deploymentStage,
+                    maximum_idle_interval: conf.maximumIdleInterval,
+                };
+                return new compat_1.ConfigurationRequest(challenge, options);
+            },
+            _createTransportLayerRequestHeaderConfigurationRequest = function _createTransportLayerRequestHeaderConfigurationRequest() {
+                return {
+                    Message: 'TransportLayerClientConfigurationRequest',
+                    Version: 1,
+                    flags: 0,
+                };
+            },
+            _submit = async function _submit(message) {
+                this.log(logger_1.LogLevel.INFO, 'Sending message', message);
+                const msg = {
+                    message,
+                    callbackType: 'response',
+                    callbackId: message.Message.replace('Request', 'Response'),
+                };
+                await this.hooks.callHook('frontgateConnection:sendMessage', msg);
+                let timeout;
+                return new Promise((resolve, reject) => {
+                    const unsubMessage = this.hooks.hookOnce(`frontgateConnection:response:${msg.callbackId}`, (response) => {
+                        clearTimeout(timeout);
+                        this.log(logger_1.LogLevel.INFO, 'Received response', response);
+                        resolve(response);
+                    });
+                    timeout = setTimeout(() => {
+                        unsubMessage();
+                        reject(new Error('Authentication message timeout'));
+                    }, 3000);
+                });
+            },
             _a;
     };
     return (0, _1.createExtendedMixinFactory)(mixinSessionAuth, {

package/dist/lib/node/mixins/auth/UserCredentialAuthMixin.js

@@ -13,29 +13,99 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.userCredentialAuth = void 0;
 const _1 = require("../.");
+const connection_1 = require("../../connection");
 const compat_1 = require("../../compat");
 const authentication_1 = require("../../authentication");
+const crypto_1 = require("crypto");
+const logger_1 = require("../../logger");
 const userCredentialAuth = (idApplication, username, credentials, deploymentStage) => {
     const mixinUserCredentialAuth = (Base) => {
-        var _auth, _a;
+        var _instances, _sharedSecret, _clientSecret, _createAuthenticationRequest, _createConfigurationRequest, _createTransportLayerRequestHeaderConfigurationRequest, _submit, _a;
         return _a = class extends Base {
                 constructor(...args) {
                     super(...args);
-                    _auth.set(this, void 0);
-                    __classPrivateFieldSet(this, _auth, new compat_1.UserCredentialAuthentication(idApplication, username, credentials), "f");
+                    _instances.add(this);
+                    _sharedSecret.set(this, void 0);
+                    _clientSecret.set(this, void 0);
+                    const secrets = credentials.split('-');
+                    if (secrets.length !== 3) {
+                        throw new Error('Invalid clientCredentials. Client credentials must have the form "{server_secret}-{shared_secret}-{client_secret}".');
+                    }
+                    if (secrets[0] === '*') {
+                        throw new Error('Invalid clientCredentials. Client credentials first part must be a hashed server secret.');
+                    }
+                    __classPrivateFieldSet(this, _sharedSecret, Buffer.from(secrets[1], 'base64'), "f");
+                    __classPrivateFieldSet(this, _clientSecret, Buffer.from(secrets[2], 'base64'), "f");
                     this.hooks.hook('frontgateConnection:connected', async (conf) => {
-                        void this.hooks.callHook('frontgateConnection:setIdApp', authentication_1.ID_APP_AUTHENTICATED);
+                        void this.hooks.callHook('frontgateConnection:setIdApp', idApplication);
                         void this.hooks.callHook('frontgateConnection:setIdUser', authentication_1.ID_USER_AUTHENTICATED);
-                        await __classPrivateFieldGet(this, _auth, "f").authenticate((0, _1.createConnectionInterface)({
-                            payload_content: conf.payloadContent,
-                            deployment_stage: deploymentStage,
-                            maximum_idle_interval: conf.maximumIdleInterval,
-                        }, this));
+                        const authResponse = await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createAuthenticationRequest).call(this).toJson());
+                        await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createConfigurationRequest).call(this, authResponse, conf).toJson());
+                        await __classPrivateFieldGet(this, _instances, "m", _submit).call(this, __classPrivateFieldGet(this, _instances, "m", _createTransportLayerRequestHeaderConfigurationRequest).call(this));
                         await this.hooks.callHook('frontgateConnection:authenticated');
                     });
                 }
             },
-            _auth = new WeakMap(),
+            _sharedSecret = new WeakMap(),
+            _clientSecret = new WeakMap(),
+            _instances = new WeakSet(),
+            _createAuthenticationRequest = function _createAuthenticationRequest() {
+                const salt = (0, crypto_1.randomBytes)(16);
+                const options = {
+                    idApplication,
+                    username,
+                    salt: (0, connection_1.getBytesFromBuffer)(salt),
+                    challenge: (0, connection_1.getBytesFromBuffer)((0, crypto_1.randomBytes)(16)),
+                    encryptedSecrets: [{ encrypted_secret: compat_1.SecretGenerator.createEncryptedSecret(salt, __classPrivateFieldGet(this, _sharedSecret, "f"), __classPrivateFieldGet(this, _clientSecret, "f")) }],
+                };
+                return new compat_1.AuthenticationRequest(options);
+            },
+            _createConfigurationRequest = function _createConfigurationRequest(msg, conf) {
+                const expectedMessage = 'Foundation::AuthenticationResponse';
+                if (msg.Message !== expectedMessage) {
+                    throw new Error(`Expected message "${expectedMessage}" but received "${msg.Message}"`);
+                }
+                if (msg.id_user === authentication_1.ID_USER_AUTHENTICATED) {
+                    void this.hooks.callHook('frontgateConnection:setIdApp', authentication_1.ID_APP_AUTHENTICATED);
+                    void this.hooks.callHook('frontgateConnection:setIdUser', authentication_1.ID_USER_AUTHENTICATED);
+                }
+                const { challenge } = msg.challenge;
+                const options = {
+                    shared_secret: __classPrivateFieldGet(this, _sharedSecret, "f"),
+                    payload_content: conf.payloadContent,
+                    deployment_stage: deploymentStage,
+                    maximum_idle_interval: conf.maximumIdleInterval,
+                };
+                return new compat_1.ConfigurationRequest(challenge, options);
+            },
+            _createTransportLayerRequestHeaderConfigurationRequest = function _createTransportLayerRequestHeaderConfigurationRequest() {
+                return {
+                    Message: 'TransportLayerClientConfigurationRequest',
+                    Version: 1,
+                    flags: 0,
+                };
+            },
+            _submit = async function _submit(message) {
+                this.log(logger_1.LogLevel.INFO, 'Sending message', message);
+                const msg = {
+                    message,
+                    callbackType: 'response',
+                    callbackId: message.Message.replace('Request', 'Response'),
+                };
+                await this.hooks.callHook('frontgateConnection:sendMessage', msg);
+                let timeout;
+                return new Promise((resolve, reject) => {
+                    const unsubMessage = this.hooks.hookOnce(`frontgateConnection:response:${msg.callbackId}`, (response) => {
+                        clearTimeout(timeout);
+                        this.log(logger_1.LogLevel.INFO, 'Received response', response);
+                        resolve(response);
+                    });
+                    timeout = setTimeout(() => {
+                        unsubMessage();
+                        reject(new Error('Authentication message timeout'));
+                    }, 3000);
+                });
+            },
             _a;
     };
     return (0, _1.createExtendedMixinFactory)(mixinUserCredentialAuth, {