@getstep/sdk 0.0.1-security → 982.649.0

package/dist/internal.js

@@ -0,0 +1,118 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthLevel = exports.TxHistoryUpdate = exports.UserProto = exports.UserAdminProto = exports.TxactivityProto = exports.TransferProto = exports.TransferAdminProto = exports.TestapiProto = exports.StripeProto = exports.ServiceInfra = exports.ReferralProto = exports.ReconciliationProto = exports.ProfileProto = exports.NotificationProto = exports.MerchantProto = exports.LimitProto = exports.LedgerProto = exports.LedgerInternalProto = exports.IssuingInternalProto = exports.IntercomProto = exports.IdentityProto = exports.GoogleProtobuf = exports.FeatureProto = exports.ContactsProto = exports.CommonTransactionProto = exports.CommonProto = exports.AuthProto = exports.AuthAdminProto = exports.AuditlogProto = exports.AdminbatchProto = exports.AdminProto = exports.AcquiringProto = exports.AchProto = exports.AchAdminProto = exports.AccountProto = exports.AccountInternalProto = exports.AccountAdminProto = void 0;
+// Models
+__exportStar(require("./http/models/Alias"), exports);
+__exportStar(require("./http/models/Amount"), exports);
+__exportStar(require("./http/models/AuthResult"), exports);
+__exportStar(require("./http/models/AuthToken"), exports);
+__exportStar(require("./http/models/DebitCard"), exports);
+__exportStar(require("./http/models/FeatureDescriptor"), exports);
+__exportStar(require("./http/models/JwtToken"), exports);
+__exportStar(require("./http/models/OtpSession"), exports);
+__exportStar(require("./http/models/Page"), exports);
+__exportStar(require("./http/models/Profile"), exports);
+__exportStar(require("./http/models/Referrals"), exports);
+__exportStar(require("./http/models/SubAccount"), exports);
+__exportStar(require("./http/models/User"), exports);
+__exportStar(require("./http/models/VerificationMethod"), exports);
+__exportStar(require("./http/models/FeatureDescriptor"), exports);
+__exportStar(require("./http/models/ScheduleDatePair"), exports);
+// Key Store
+__exportStar(require("./keystore/InMemoryKeySet"), exports);
+__exportStar(require("./keystore/KeySet"), exports);
+// Authentication
+__exportStar(require("./http/auth"), exports);
+// API
+__exportStar(require("./http"), exports);
+// Store
+__exportStar(require("./store/AccountListStore"), exports);
+__exportStar(require("./store/AccountStore"), exports);
+__exportStar(require("./store/ActivityStore"), exports);
+__exportStar(require("./store/AuthStore"), exports);
+__exportStar(require("./store/CardTemplateStore"), exports);
+__exportStar(require("./store/ExternalAccountsStore"), exports);
+__exportStar(require("./store/FamilyStore"), exports);
+__exportStar(require("./store/FeatureStore"), exports);
+__exportStar(require("./store/MerchantStore"), exports);
+__exportStar(require("./store/PublicProfileStore"), exports);
+__exportStar(require("./store/ReferralStore"), exports);
+__exportStar(require("./store/StatementStore"), exports);
+__exportStar(require("./store/StripeAcquiring"), exports);
+__exportStar(require("./store/TestApiStore"), exports);
+__exportStar(require("./store/TransactionsStore"), exports);
+__exportStar(require("./store/TransferStore"), exports);
+__exportStar(require("./store/UserStore"), exports);
+__exportStar(require("./store/Util"), exports);
+__exportStar(require("./store/common"), exports);
+__exportStar(require("./store/intercom/Screens"), exports);
+__exportStar(require("./store/testing"), exports);
+__exportStar(require("./store/txhistory/TxHistory"), exports);
+__exportStar(require("./store/txhistory/TxHistoryItem"), exports);
+__exportStar(require("./store/txhistory/TxItemType"), exports);
+// Util
+__exportStar(require("./util"), exports);
+// Generated
+__exportStar(require("./api/generated"), exports);
+exports.AccountAdminProto = __importStar(require("./api/generated/AccountAdminProto"));
+exports.AccountInternalProto = __importStar(require("./api/generated/AccountInternalProto"));
+exports.AccountProto = __importStar(require("./api/generated/AccountProto"));
+exports.AchAdminProto = __importStar(require("./api/generated/AchAdminProto"));
+exports.AchProto = __importStar(require("./api/generated/AchProto"));
+exports.AcquiringProto = __importStar(require("./api/generated/AcquiringProto"));
+exports.AdminProto = __importStar(require("./api/generated/AdminProto"));
+exports.AdminbatchProto = __importStar(require("./api/generated/AdminbatchProto"));
+exports.AuditlogProto = __importStar(require("./api/generated/AuditlogProto"));
+exports.AuthAdminProto = __importStar(require("./api/generated/AuthAdminProto"));
+exports.AuthProto = __importStar(require("./api/generated/AuthProto"));
+exports.CommonProto = __importStar(require("./api/generated/CommonProto"));
+exports.CommonTransactionProto = __importStar(require("./api/generated/CommonTransactionProto"));
+exports.ContactsProto = __importStar(require("./api/generated/ContactsProto"));
+exports.FeatureProto = __importStar(require("./api/generated/FeatureProto"));
+exports.GoogleProtobuf = __importStar(require("./api/generated/GoogleProtobuf"));
+exports.IdentityProto = __importStar(require("./api/generated/IdentityProto"));
+exports.IntercomProto = __importStar(require("./api/generated/IntercomProto"));
+exports.IssuingInternalProto = __importStar(require("./api/generated/IssuingInternalProto"));
+exports.LedgerInternalProto = __importStar(require("./api/generated/LedgerInternalProto"));
+exports.LedgerProto = __importStar(require("./api/generated/LedgerProto"));
+exports.LimitProto = __importStar(require("./api/generated/LimitProto"));
+exports.MerchantProto = __importStar(require("./api/generated/MerchantProto"));
+exports.NotificationProto = __importStar(require("./api/generated/NotificationProto"));
+exports.ProfileProto = __importStar(require("./api/generated/ProfileProto"));
+exports.ReconciliationProto = __importStar(require("./api/generated/ReconciliationProto"));
+exports.ReferralProto = __importStar(require("./api/generated/ReferralProto"));
+exports.ServiceInfra = __importStar(require("./api/generated/ServiceInfra"));
+exports.StripeProto = __importStar(require("./api/generated/StripeProto"));
+exports.TestapiProto = __importStar(require("./api/generated/TestapiProto"));
+exports.TransferAdminProto = __importStar(require("./api/generated/TransferAdminProto"));
+exports.TransferProto = __importStar(require("./api/generated/TransferProto"));
+exports.TxactivityProto = __importStar(require("./api/generated/TxactivityProto"));
+exports.UserAdminProto = __importStar(require("./api/generated/UserAdminProto"));
+exports.UserProto = __importStar(require("./api/generated/UserProto"));
+var TxHistoryUpdate_1 = require("./store/txhistory/TxHistoryUpdate");
+Object.defineProperty(exports, "TxHistoryUpdate", { enumerable: true, get: function () { return TxHistoryUpdate_1.TxHistoryUpdate; } });
+var AuthLevel_1 = require("./keystore/AuthLevel");
+Object.defineProperty(exports, "AuthLevel", { enumerable: true, get: function () { return AuthLevel_1.AuthLevel; } });
+//# sourceMappingURL=internal.js.map

package/dist/keystore/AuthLevel.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthLevel = void 0;
+/**
+ * Authentication level.
+ */
+var AuthLevel;
+(function (AuthLevel) {
+    AuthLevel[AuthLevel["RESTRICTED"] = 0] = "RESTRICTED";
+    AuthLevel[AuthLevel["LOW"] = 1] = "LOW";
+    AuthLevel[AuthLevel["STRONG"] = 2] = "STRONG";
+})(AuthLevel = exports.AuthLevel || (exports.AuthLevel = {}));
+//# sourceMappingURL=AuthLevel.js.map

package/dist/keystore/InMemoryKeySet.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryKeySet = exports.DEVICE_CLOCK_PERMISSIBLE_SKEW_SEC = void 0;
+const buffer_1 = require("buffer");
+const jsrsasign_1 = require("jsrsasign");
+const AuthLevel_1 = require("./AuthLevel");
+const KEY_ALG = 'EC';
+const KEY_ALG_VER = 'secp256r1';
+const JWT_ALG = 'ES256';
+const ISS = 'step';
+// we want TTL to be high enough to cover the time needed to make a call and process the data
+exports.DEVICE_CLOCK_PERMISSIBLE_SKEW_SEC = 5 * 60;
+const JWT_TTL_SEC = 2 * exports.DEVICE_CLOCK_PERMISSIBLE_SKEW_SEC; // 10 min
+/**
+ * KeySet that keeps the keys in memory (as opposed to secure enclave).
+ * Same key is used for LOW and STRONG privileged key.
+ */
+class InMemoryKeySet {
+    /**
+     * Creates a new key set. Use the create and parse methods to create or parse out a
+     * new instance.
+     *
+     * @param prvKey private key
+     * @param pubKey public key
+     * @param hasPassword does strong key have password
+     */
+    constructor(prvKey, pubKey, hasPassword) {
+        const idPrefix = pubKey.pubKeyHex.substring(0, 8);
+        this.keyLow = {
+            factors: 1,
+            id: `${idPrefix}:1`,
+            prvKeyObj: prvKey,
+            pubKeyObj: pubKey,
+        };
+        this.keyStrong = {
+            factors: 2,
+            id: `${idPrefix}:2`,
+            prvKeyObj: prvKey,
+            pubKeyObj: pubKey,
+            hasPassword,
+        };
+    }
+    /**
+     * Creates a new key set.
+     * @param password does strong key have a password
+     * @returns {InMemoryKeySet} new key set
+     */
+    static create(password) {
+        const keyPair = jsrsasign_1.KEYUTIL.generateKeypair(KEY_ALG, KEY_ALG_VER);
+        const keys = new InMemoryKeySet(
+        // @ts-ignore
+        keyPair.prvKeyObj, keyPair.pubKeyObj, !!password);
+        return { keys, password };
+    }
+    /**
+     * Parses a key set out of the the string which was previously produced by
+     * calling serialize method.
+     *
+     * @param serialized serialized key set
+     * @returns {*} parsed out key set
+     */
+    static parse(serialized) {
+        if (serialized) {
+            const keys = JSON.parse(serialized);
+            const prvKey = jsrsasign_1.KEYUTIL.getKey(keys.prv);
+            const pubKey = jsrsasign_1.KEYUTIL.getKey(keys.pub);
+            // @ts-ignore
+            return new InMemoryKeySet(prvKey, pubKey, keys.hasPassword);
+        }
+        return null;
+    }
+    static toJWTKey(keyPair) {
+        // @ts-ignore missing from @types/jsrsasign
+        const jwk = jsrsasign_1.KEYUTIL.getJWKFromKey(keyPair.pubKeyObj);
+        // @ts-ignore missing from @types/jsrsasign
+        jwk.alg = JWT_ALG;
+        // @ts-ignore missing from @types/jsrsasign
+        jwk.kid = keyPair.id;
+        const jwkBase64 = buffer_1.Buffer.from(JSON.stringify(jwk)).toString('base64');
+        return {
+            jwkBase64,
+            factors: keyPair.factors,
+            id: keyPair.id,
+            hasPassword: keyPair.hasPassword,
+        };
+    }
+    /**
+     * Serializes the key set into a string, so it can be persisted.
+     *
+     * @returns {string} serialized key set
+     */
+    serialize() {
+        // @ts-ignore
+        const privateKeyPem = jsrsasign_1.KEYUTIL.getPEM(this.keyLow.prvKeyObj, 'PKCS8PRV');
+        // @ts-ignore
+        const publicKeyPem = jsrsasign_1.KEYUTIL.getPEM(this.keyLow.pubKeyObj);
+        const serialized = {
+            // @ts-ignore missing from @types/jsrsasign
+            prv: privateKeyPem,
+            // @ts-ignore missing from @types/jsrsasign
+            pub: publicKeyPem,
+            hasPassword: this.keyStrong.hasPassword,
+        };
+        return JSON.stringify(serialized);
+    }
+    publicKeys() {
+        return [
+            InMemoryKeySet.toJWTKey(this.keyLow),
+            InMemoryKeySet.toJWTKey(this.keyStrong),
+        ];
+    }
+    async generateJwtToken(level = AuthLevel_1.AuthLevel.LOW, _prompt, clockSkew = 0) {
+        const clockSkewSec = clockSkew / 1000;
+        const keyPair = level === AuthLevel_1.AuthLevel.LOW ? this.keyLow : this.keyStrong;
+        const iat = Date.now() / 1000;
+        const exp = iat + JWT_TTL_SEC - clockSkewSec;
+        return jsrsasign_1.KJUR.jws.JWS.sign(JWT_ALG, 
+        // @ts-ignore
+        JSON.stringify({ alg: JWT_ALG, typ: 'JWT', kid: keyPair.id }), JSON.stringify({ iss: ISS, iat, exp }), keyPair.prvKeyObj);
+    }
+}
+exports.InMemoryKeySet = InMemoryKeySet;
+//# sourceMappingURL=InMemoryKeySet.js.map

package/dist/keystore/KeySet.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=KeySet.js.map

package/dist/store/AccountListStore.js

@@ -0,0 +1,227 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountListStore = void 0;
+const mobx_1 = require("mobx");
+const __1 = require("..");
+const CommonTransactionProto_1 = require("../api/generated/CommonTransactionProto");
+const SubAccountType_1 = require("../http/models/SubAccountType");
+const AccountStore_1 = require("./AccountStore");
+const common_1 = require("./common");
+class AccountListStore extends common_1.DataStore {
+    constructor(api, userId, includeClosedAccounts = false, transactionStatuses = [
+        CommonTransactionProto_1.TransactionStatus.PENDING,
+        CommonTransactionProto_1.TransactionStatus.COMMITTED,
+    ], loadActivity = false) {
+        super();
+        this.api = api;
+        this.userId = userId;
+        this.includeClosedAccounts = includeClosedAccounts;
+        this.transactionStatuses = transactionStatuses;
+        this.loadActivity = loadActivity;
+        this.accounts = [];
+        this.userGeneratedSavingsGoal = undefined;
+        this.genericSavingsGoal = undefined;
+        this.suggestedSavingsGoals = [];
+    }
+    get totalBalance() {
+        return this.accounts
+            .map((accountStore) => accountStore.balance)
+            .reduce((previous, current) => __1.addAmounts(previous, current), __1.emptyAmount());
+    }
+    get defaultAccount() {
+        return this.getDefaultAccount(SubAccountType_1.SubAccountType.DEPOSIT, true);
+    }
+    get savingsAccount() {
+        return this.getDefaultAccount(SubAccountType_1.SubAccountType.SAVINGS, false);
+    }
+    async createSavingsGoal(savings) {
+        return this.execute(async () => {
+            const account = await this.api.createSavingsGoal(savings);
+            const existingAccount = this.accounts.find((e) => e.account.primaryId === account.primaryId);
+            const newAccount = new AccountStore_1.AccountStore(account, this.api, this.includeClosedAccounts, this.transactionStatuses, this.loadActivity);
+            if (existingAccount) {
+                await existingAccount.onSubAccountsUpdated(account);
+            }
+            else {
+                await newAccount.load();
+                this.accounts = this.accounts.concat(newAccount);
+            }
+            return existingAccount !== null && existingAccount !== void 0 ? existingAccount : newAccount;
+        });
+    }
+    async updateSavingsGoal(subAccountId, savings) {
+        return this.execute(async () => {
+            const savingsAccount = this.savingsAccount;
+            if (!savingsAccount ||
+                savingsAccount.account.subAccounts.find((subAccount) => subAccount.id === subAccountId) === undefined) {
+                throw Error(`Unknown savings account: ${subAccountId}`);
+            }
+            const account = await this.api.updateSavingsGoal(subAccountId, savings);
+            await savingsAccount.onSubAccountsUpdated(account);
+            return savingsAccount;
+        });
+    }
+    async closeSavingsGoal(subAccountId) {
+        return this.execute(async () => {
+            const savingsAccount = this.savingsAccount;
+            if (!savingsAccount ||
+                savingsAccount.account.subAccounts.find((subAccount) => subAccount.id === subAccountId) === undefined) {
+                throw Error(`Unknown savings account: ${subAccountId}`);
+            }
+            const account = await this.api.closeSavingsGoal(subAccountId);
+            await savingsAccount.onSubAccountsUpdated(account);
+            return savingsAccount;
+        });
+    }
+    async closeAccount(primaryAccountId) {
+        return this.execute(async () => {
+            const account = this.accounts.find((e) => e.account.primaryId === primaryAccountId);
+            if (!account) {
+                throw Error(`Unknown account: ${primaryAccountId}`);
+            }
+            await this.api.closeAccount(primaryAccountId);
+            if (this.includeClosedAccounts) {
+                account.account.closedAtMs = Date.now().toString();
+                await account.load();
+            }
+            else {
+                this.accounts = this.accounts.filter((e) => e.account.primaryId !== primaryAccountId);
+            }
+        });
+    }
+    async canCloseSavingsGoal(subAccountId) {
+        return this.execute(async () => {
+            const savingsAccount = this.savingsAccount;
+            if (!savingsAccount ||
+                savingsAccount.account.subAccounts.find((subAccount) => subAccount.id === subAccountId) === undefined) {
+                throw Error(`Unknown savings account: ${subAccountId}`);
+            }
+            return await this.api.canCloseSavingsGoal(subAccountId);
+        });
+    }
+    ownedBy(userId) {
+        return this.accounts.filter((store) => store.account.ownerUserId === userId);
+    }
+    sharedWith(userId) {
+        return this.accounts.filter((store) => {
+            const { account: { permissions }, } = store;
+            return permissions.find((p) => p.userId === userId);
+        });
+    }
+    accountFor(primaryAccountId) {
+        return this.accounts.find((s) => s.account.primaryId === primaryAccountId);
+    }
+    async performLoad() {
+        return this.execute(async () => {
+            const allAccounts = await this.api.getAccounts(this.includeClosedAccounts);
+            // Refresh all the accounts that we had in the list already.
+            const existingAccounts = this.accounts.filter((accountStore) => allAccounts.find((account) => {
+                if (accountStore.account.primaryId === account.primaryId) {
+                    accountStore.account = account;
+                    return true;
+                }
+                else {
+                    return false;
+                }
+            }));
+            await Promise.all(existingAccounts.map((a) => a.refresh()));
+            // Compile the list of new accounts that we didn't have in the list yet.
+            const newAccounts = await Promise.all(allAccounts
+                .filter((a1) => !existingAccounts.find((a2) => a2.account.primaryId === a1.primaryId))
+                .map(async (a) => {
+                const store = new AccountStore_1.AccountStore(a, this.api, this.includeClosedAccounts, this.transactionStatuses, this.loadActivity);
+                await store.load();
+                return store;
+            }));
+            // Combine refreshed existing and loaded new accounts.
+            this.accounts = [...existingAccounts, ...newAccounts];
+            const response = await this.api.getSuggestedSavingsGoals();
+            this.userGeneratedSavingsGoal = response.userGenerated;
+            this.genericSavingsGoal = response.generic;
+            this.suggestedSavingsGoals = response.suggested;
+        });
+    }
+    getDefaultAccount(type, includeSharedAccounts) {
+        var _a;
+        if (this.accounts.length === 0) {
+            return;
+        }
+        const matchingAccounts = this.accounts.filter((store) => !store.account.closedAtMs && store.hasSubAccount(type));
+        // If the user owns any account, we attempt to pick the account that is
+        // not shared with another user.
+        const ownedAccounts = matchingAccounts.filter((store) => store.account.ownerUserId == this.userId);
+        if (ownedAccounts.length > 0) {
+            return ((_a = ownedAccounts.find((store) => store.account.permissions.length == 0)) !== null && _a !== void 0 ? _a : includeSharedAccounts)
+                ? ownedAccounts.find((store) => store !== undefined)
+                : undefined;
+        }
+        return matchingAccounts.find((store) => store !== undefined);
+    }
+}
+AccountListStore.className = 'AccountListStore';
+__decorate([
+    mobx_1.observable,
+    __metadata("design:type", Array)
+], AccountListStore.prototype, "accounts", void 0);
+__decorate([
+    mobx_1.observable,
+    __metadata("design:type", Object)
+], AccountListStore.prototype, "userGeneratedSavingsGoal", void 0);
+__decorate([
+    mobx_1.observable,
+    __metadata("design:type", Object)
+], AccountListStore.prototype, "genericSavingsGoal", void 0);
+__decorate([
+    mobx_1.observable,
+    __metadata("design:type", Array)
+], AccountListStore.prototype, "suggestedSavingsGoals", void 0);
+__decorate([
+    mobx_1.computed,
+    __metadata("design:type", Object),
+    __metadata("design:paramtypes", [])
+], AccountListStore.prototype, "totalBalance", null);
+__decorate([
+    mobx_1.computed,
+    __metadata("design:type", Object),
+    __metadata("design:paramtypes", [])
+], AccountListStore.prototype, "defaultAccount", null);
+__decorate([
+    mobx_1.computed,
+    __metadata("design:type", Object),
+    __metadata("design:paramtypes", [])
+], AccountListStore.prototype, "savingsAccount", null);
+__decorate([
+    mobx_1.action,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AccountListStore.prototype, "createSavingsGoal", null);
+__decorate([
+    mobx_1.action,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AccountListStore.prototype, "updateSavingsGoal", null);
+__decorate([
+    mobx_1.action,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], AccountListStore.prototype, "closeSavingsGoal", null);
+__decorate([
+    mobx_1.action,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], AccountListStore.prototype, "closeAccount", null);
+exports.AccountListStore = AccountListStore;
+//# sourceMappingURL=AccountListStore.js.map