@internxt/sdk 1.11.12 → 1.11.13

package/dist/auth/index.d.ts

@@ -1,7 +1,7 @@
 import { ApiSecurity, ApiUrl, AppDetails } from '../shared';
 import { TeamsSettings } from '../shared/types/teams';
 import { UserSettings, UUID } from '../shared/types/userSettings';
-import { ChangePasswordWithLinkPayload, CryptoProvider, Keys, LoginDetails, PrivateKeys, RegisterDetails, RegisterPreCreatedUser, RegisterPreCreatedUserResponse, SecurityDetails, Token, TwoFactorAuthQR } from './types';
+import { ChangePasswordWithLinkPayload, CryptoProvider, Keys, LoginDetails, PrivateKeys, RegisterDetails, RegisterOpaqueDetails, RegisterPreCreatedUser, RegisterPreCreatedUserResponse, SecurityDetails, Token, TwoFactorAuthQR } from './types';
 import { paths } from '../schema';
 export * from './types';
 export declare class Auth {
@@ -11,6 +11,25 @@ export declare class Auth {
     private readonly apiUrl;
     static client(apiUrl: ApiUrl, appDetails: AppDetails, apiSecurity?: ApiSecurity): Auth;
     private constructor();
+    /**
+     * Runs the first phase (out of 2) of opaque registation of a new user
+     * @param email - The user email.
+     * @param registrationRequest - The opaque registration request.
+     * @returns The opaque sign up response.
+     */
+    registerOpaqueStart(email: string, registrationRequest: string): Promise<{
+        signUpResponse: string;
+    }>;
+    /**
+     * Runs the second phase (out of 2) of opaque registation of a new user
+     * @param registrationRecord - The opaque registration record.
+     * @param registerDetails - The user registration details.
+     * @param startLoginRequest - The opaque start login request.
+     * @returns The opaque login response.
+     */
+    registerOpaqueFinish(registrationRecord: string, registerDetails: RegisterOpaqueDetails, startLoginRequest: string): Promise<{
+        loginResponse: string;
+    }>;
     /**
      * Tries to register a new user
      * @param registerDetails
@@ -61,6 +80,25 @@ export declare class Auth {
      * @returns {Promise<void>} - Resolves successfuly when account is unblocked
      */
     unblockAccount(token: string): Promise<void>;
+    /**
+     * Runs the first phase (out of 2) of opaque log for the given user
+     * @param email - The user email.
+     * @param startLoginRequest - The opaque start login request.
+     * @param tfa - The two factor auth code.
+     * @returns The opaque login response.
+     */
+    loginOpaqueStart(email: string, startLoginRequest: string, tfa: string | undefined): Promise<{
+        loginResponse: string;
+    }>;
+    /**
+     * Runs the second phase (out of 2) of opaque log for the given user
+     * @param email
+     * @param finishLoginRequest
+     */
+    loginOpaqueFinish(email: string, finishLoginRequest: string): Promise<{
+        sessionID: string;
+        user: UserSettings;
+    }>;
     /**
      * Tries to log in a user given its login details
      * @param details

package/dist/auth/index.js

@@ -64,6 +64,44 @@ var Auth = /** @class */ (function () {
     Auth.client = function (apiUrl, appDetails, apiSecurity) {
         return new Auth(apiUrl, appDetails, apiSecurity);
     };
+    /**
+     * Runs the first phase (out of 2) of opaque registation of a new user
+     * @param email - The user email.
+     * @param registrationRequest - The opaque registration request.
+     * @returns The opaque sign up response.
+     */
+    Auth.prototype.registerOpaqueStart = function (email, registrationRequest) {
+        return this.client.post('/register-opaque/start', {
+            email: email,
+            registrationRequest: registrationRequest,
+        }, this.basicHeaders());
+    };
+    /**
+     * Runs the second phase (out of 2) of opaque registation of a new user
+     * @param registrationRecord - The opaque registration record.
+     * @param registerDetails - The user registration details.
+     * @param startLoginRequest - The opaque start login request.
+     * @returns The opaque login response.
+     */
+    Auth.prototype.registerOpaqueFinish = function (registrationRecord, registerDetails, startLoginRequest) {
+        return this.client.post('/register-opaque/finish', {
+            name: registerDetails.name,
+            lastname: registerDetails.lastname,
+            email: registerDetails.email,
+            registrationRecord: registrationRecord,
+            keys: {
+                ecc: {
+                    publicKey: registerDetails.keys.ecc.publicKey,
+                    privateKey: registerDetails.keys.ecc.privateKey,
+                },
+                kyber: {
+                    publicKey: registerDetails.keys.kyber.publicKey,
+                    privateKey: registerDetails.keys.kyber.privateKey,
+                },
+            },
+            startLoginRequest: startLoginRequest,
+        }, this.basicHeaders());
+    };
     /**
      * Tries to register a new user
      * @param registerDetails
@@ -189,6 +227,39 @@ var Auth = /** @class */ (function () {
     Auth.prototype.unblockAccount = function (token) {
         return this.client.put('users/unblock-account', { token: token }, this.basicHeaders());
     };
+    /**
+     * Runs the first phase (out of 2) of opaque log for the given user
+     * @param email - The user email.
+     * @param startLoginRequest - The opaque start login request.
+     * @param tfa - The two factor auth code.
+     * @returns The opaque login response.
+     */
+    Auth.prototype.loginOpaqueStart = function (email, startLoginRequest, tfa) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.client.post('/auth/login-opaque/start', {
+                        email: email,
+                        startLoginRequest: startLoginRequest,
+                        tfa: tfa,
+                    }, this.basicHeaders())];
+            });
+        });
+    };
+    /**
+     * Runs the second phase (out of 2) of opaque log for the given user
+     * @param email
+     * @param finishLoginRequest
+     */
+    Auth.prototype.loginOpaqueFinish = function (email, finishLoginRequest) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.client.post('/auth/login-opaque/finish', {
+                        email: email,
+                        finishLoginRequest: finishLoginRequest,
+                    }, this.basicHeaders())];
+            });
+        });
+    };
     /**
      * Tries to log in a user given its login details
      * @param details
@@ -343,6 +414,7 @@ var Auth = /** @class */ (function () {
             return {
                 encryptedSalt: data.sKey,
                 tfaEnabled: data.tfa === true,
+                useOpaqueLogin: data.useOpaqueLogin === true,
             };
         });
     };

package/dist/auth/types.d.ts

@@ -7,6 +7,26 @@ export interface LoginDetails {
     password: Password;
     tfaCode: string | undefined;
 }
+export type UserKeys = {
+    ecc: {
+        publicKey: string;
+        privateKey: string;
+    };
+    kyber: {
+        publicKey: string;
+        privateKey: string;
+    };
+};
+export interface RegisterOpaqueDetails {
+    name: string;
+    lastname: string;
+    email: Email;
+    mnemonic: string;
+    keys: UserKeys;
+    captcha: string;
+    referrer?: string;
+    referral?: string;
+}
 export interface RegisterDetails {
     name: string;
     lastname: string;
@@ -52,6 +72,7 @@ export declare class UserAccessError extends Error {
 export interface SecurityDetails {
     encryptedSalt: string;
     tfaEnabled: boolean;
+    useOpaqueLogin: boolean;
 }
 export interface TwoFactorAuthQR {
     qr: string;

package/dist/drive/users/index.d.ts

@@ -2,6 +2,7 @@ import { paths } from '../../schema';
 import { ApiSecurity, ApiUrl, AppDetails } from '../../shared';
 import { UserSettings } from '../../shared/types/userSettings';
 import { ChangePasswordPayload, ChangePasswordPayloadNew, CheckChangeEmailExpirationResponse, FriendInvite, InitializeUserResponse, PreCreateUserResponse, Token, UpdateProfilePayload, UserPublicKeyResponse, UserPublicKeyWithCreationResponse, VerifyEmailChangeResponse } from './types';
+import { UserKeys } from '../../auth/types';
 export * as UserTypes from './types';
 export declare class Users {
     private readonly client;
@@ -67,6 +68,29 @@ export declare class Users {
         token: string;
         newToken: string;
     }>;
+    /**
+     * Runs the first phase (out of 2) of the password change.
+     * @param hmac - The HMAC to authenticate request.
+     * @param sessionID - The current session ID.
+     * @param registrationRequest - The opaque registration request.
+     * @returns {Promise<string>} A promise that returns opaque registration response.
+     */
+    changePwdOpaqueStart(hmac: string, sessionID: string, registrationRequest: string): Promise<{
+        registrationResponse: string;
+    }>;
+    /**
+     * Runs the second phase (out of 2) of the password change.
+     * @param hmac - The HMAC to authenticate request.
+     * @param sessionID - The current session ID.
+     * @param registrationRecord - The opaque registration record.
+     * @param mnemonic - The user's encrypted mnemonic.
+     * @param keys - The user's encrypted keys.
+     * @param startLoginRequest - The opaque start login request.
+     * @returns {Promise<string>} A promise that returns opaque login response.
+     */
+    changePwdOpaqueFinish(hmac: string, sessionID: string, registrationRecord: string, mnemonic: string, keys: UserKeys, startLoginRequest: string): Promise<{
+        loginResponse: string;
+    }>;
     /**
      * Pre registers an email
      * @param email

package/dist/drive/users/index.js

@@ -164,6 +164,40 @@ var Users = /** @class */ (function () {
             encryptVersion: payload.encryptVersion,
         }, this.headers());
     };
+    /**
+     * Runs the first phase (out of 2) of the password change.
+     * @param hmac - The HMAC to authenticate request.
+     * @param sessionID - The current session ID.
+     * @param registrationRequest - The opaque registration request.
+     * @returns {Promise<string>} A promise that returns opaque registration response.
+     */
+    Users.prototype.changePwdOpaqueStart = function (hmac, sessionID, registrationRequest) {
+        return this.client.patch('/users/password-opaque/start', {
+            hmac: hmac,
+            sessionID: sessionID,
+            registrationRequest: registrationRequest,
+        }, this.headers());
+    };
+    /**
+     * Runs the second phase (out of 2) of the password change.
+     * @param hmac - The HMAC to authenticate request.
+     * @param sessionID - The current session ID.
+     * @param registrationRecord - The opaque registration record.
+     * @param mnemonic - The user's encrypted mnemonic.
+     * @param keys - The user's encrypted keys.
+     * @param startLoginRequest - The opaque start login request.
+     * @returns {Promise<string>} A promise that returns opaque login response.
+     */
+    Users.prototype.changePwdOpaqueFinish = function (hmac, sessionID, registrationRecord, mnemonic, keys, startLoginRequest) {
+        return this.client.patch('/users/password-opaque/finish', {
+            hmac: hmac,
+            sessionID: sessionID,
+            keys: keys,
+            mnemonic: mnemonic,
+            registrationRecord: registrationRecord,
+            startLoginRequest: startLoginRequest,
+        }, this.headers());
+    };
     /**
      * Pre registers an email
      * @param email

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@internxt/sdk",
   "author": "Internxt <hello@internxt.com>",
-  "version": "1.11.12",
+  "version": "1.11.13",
   "description": "An sdk for interacting with Internxt's services",
   "repository": {
     "type": "git",