@lacrous/omnicloud 0.2.7 → 0.2.8

package/dist/index.cjs

@@ -3158,10 +3158,13 @@ var TelegramStorageProvider = class {
 };
 
 // ../telegram/src/connection.ts
+var import_node_crypto6 = require("crypto");
 var import_telegram3 = require("telegram");
 var import_Password = require("telegram/Password.js");
 var TELEGRAM_PROVIDER = "telegram";
 var LOGIN_FLOW_TTL_MS = 5 * 60 * 1e3;
+var QR_FLOW_TTL_MS = 5 * 60 * 1e3;
+var QR_APPROVAL_POLL_MS = 2e3;
 var TelegramConnectionService = class {
   constructor(repos, clientManager, credentials) {
     this.repos = repos;
@@ -3172,6 +3175,7 @@ var TelegramConnectionService = class {
   clientManager;
   credentials;
   flows = /* @__PURE__ */ new Map();
+  qrFlows = /* @__PURE__ */ new Map();
   /** Sends the Telegram confirmation code for the phone number. */
   async startLogin(phone) {
     this.sweepExpiredFlows();
@@ -3220,6 +3224,167 @@ var TelegramConnectionService = class {
     }
     return this.finalizeLogin(flow);
   }
+  /**
+   * Starts a QR sign-in. Returns a flow id and the first login token. The phone
+   * approves the token in the Telegram app; `pollQrLogin` reports the result.
+   */
+  async startQrLogin() {
+    this.sweepExpiredQrFlows();
+    const client = newTelegramClient(this.credentials);
+    try {
+      await client.connect();
+      const flow = {
+        client,
+        createdAt: Date.now(),
+        approved: false,
+        needsPassword: false,
+        failure: null
+      };
+      const flowId = (0, import_node_crypto6.randomUUID)();
+      const token = await this.exportQrToken(client);
+      this.qrFlows.set(flowId, flow);
+      this.watchQrApproval(flowId, flow);
+      return { flowId, token };
+    } catch (error) {
+      await this.disconnectQuietly(client);
+      throw mapTelegramError(error, "Could not start Telegram QR sign-in");
+    }
+  }
+  /**
+   * Reports where a QR sign-in stands. While waiting, returns a fresh token
+   * (Telegram rotates them every few seconds). On approval, completes the login.
+   */
+  async pollQrLogin(flowId) {
+    const flow = this.requireQrFlow(flowId);
+    if (flow.failure) {
+      this.qrFlows.delete(flowId);
+      await this.disconnectQuietly(flow.client);
+      throw new TelegramConnectionError(flow.failure);
+    }
+    if (flow.needsPassword) return { status: "password_required" };
+    if (!flow.approved) {
+      const token = await this.exportQrToken(flow.client).catch((error) => {
+        this.qrFlows.delete(flowId);
+        void this.disconnectQuietly(flow.client);
+        throw mapTelegramError(error, "Could not refresh the Telegram QR code");
+      });
+      return { status: "waiting", token };
+    }
+    return this.completeQrLogin(flowId, flow);
+  }
+  /** Completes a QR sign-in for an account with two-factor authentication. */
+  async submitQrPassword(flowId, password) {
+    const flow = this.requireQrFlow(flowId);
+    try {
+      const passwordInfo = await flow.client.invoke(new import_telegram3.Api.account.GetPassword());
+      const check = await (0, import_Password.computeCheck)(passwordInfo, password);
+      await flow.client.invoke(new import_telegram3.Api.auth.CheckPassword({ password: check }));
+    } catch (error) {
+      throw mapTelegramError(error, "Telegram sign-in failed");
+    }
+    return this.completeQrLogin(flowId, flow);
+  }
+  async exportQrToken(client) {
+    const result = await client.invoke(
+      new import_telegram3.Api.auth.ExportLoginToken({
+        apiId: this.credentials.apiId,
+        apiHash: this.credentials.apiHash,
+        exceptIds: []
+      })
+    );
+    if (!(result instanceof import_telegram3.Api.auth.LoginToken)) {
+      throw new TelegramConnectionError("Telegram did not issue a QR login token");
+    }
+    const tokenBase64 = Buffer.from(result.token).toString("base64url");
+    return {
+      url: `tg://login?token=${tokenBase64}`,
+      expiresAt: result.expires * 1e3
+    };
+  }
+  /** Waits for the phone to approve the token, then marks the flow approved. */
+  watchQrApproval(flowId, flow) {
+    const timer = setInterval(() => {
+      if (Date.now() - flow.createdAt > QR_FLOW_TTL_MS) {
+        clearInterval(timer);
+        this.qrFlows.delete(flowId);
+        void this.disconnectQuietly(flow.client);
+        return;
+      }
+      if (flow.approved || flow.needsPassword || flow.failure) {
+        clearInterval(timer);
+        return;
+      }
+      this.probeQrApproval(flow).then(
+        (state) => {
+          if (state === "approved") {
+            flow.approved = true;
+            clearInterval(timer);
+          } else if (state === "password") {
+            flow.needsPassword = true;
+            clearInterval(timer);
+          }
+        },
+        (error) => {
+          flow.failure = mapTelegramError(error, "Telegram QR sign-in failed").message;
+          clearInterval(timer);
+        }
+      );
+    }, QR_APPROVAL_POLL_MS);
+    timer.unref();
+  }
+  /**
+   * Asks Telegram whether the token was approved. Approval is observed by
+   * `ExportLoginToken` returning `LoginTokenSuccess` (or a DC migration).
+   */
+  async probeQrApproval(flow) {
+    try {
+      const result = await flow.client.invoke(
+        new import_telegram3.Api.auth.ExportLoginToken({
+          apiId: this.credentials.apiId,
+          apiHash: this.credentials.apiHash,
+          exceptIds: []
+        })
+      );
+      if (result instanceof import_telegram3.Api.auth.LoginTokenSuccess) return "approved";
+      if (result instanceof import_telegram3.Api.auth.LoginTokenMigrateTo) {
+        await flow.client._switchDC(result.dcId);
+        const migrated = await flow.client.invoke(
+          new import_telegram3.Api.auth.ImportLoginToken({ token: result.token })
+        );
+        if (migrated instanceof import_telegram3.Api.auth.LoginTokenSuccess) return "approved";
+      }
+      return "pending";
+    } catch (error) {
+      if (isPasswordRequiredError(error)) return "password";
+      throw error;
+    }
+  }
+  async completeQrLogin(flowId, flow) {
+    this.qrFlows.delete(flowId);
+    const user = await this.finalizeConnectedClient(flow.client, null);
+    return { status: "approved", user };
+  }
+  requireQrFlow(flowId) {
+    const flow = this.qrFlows.get(flowId);
+    if (!flow) {
+      throw new NotFoundError("This Telegram QR sign-in has ended. Start again.");
+    }
+    if (Date.now() - flow.createdAt > QR_FLOW_TTL_MS) {
+      this.qrFlows.delete(flowId);
+      void this.disconnectQuietly(flow.client);
+      throw new ValidationError("The QR sign-in expired. Start again.");
+    }
+    return flow;
+  }
+  sweepExpiredQrFlows() {
+    const now = Date.now();
+    for (const [flowId, flow] of this.qrFlows) {
+      if (now - flow.createdAt > QR_FLOW_TTL_MS) {
+        this.qrFlows.delete(flowId);
+        void this.disconnectQuietly(flow.client);
+      }
+    }
+  }
   /** Aborts a pending login flow (disconnects the client). */
   async cancelLogin(phone) {
     const flow = this.flows.get(phone);
@@ -3281,11 +3446,20 @@ var TelegramConnectionService = class {
   }
   async finalizeLogin(flow) {
     this.flows.delete(flow.phone);
+    const user = await this.finalizeConnectedClient(flow.client, flow.phone);
+    return { status: "ok", user };
+  }
+  /**
+   * Saves an authorized client's session, upserts the user and creates storage.
+   * `phone` is the number the user typed; QR sign-in passes null and relies on
+   * the number Telegram reports.
+   */
+  async finalizeConnectedClient(client, phone) {
     let stringSession;
     let user;
     try {
-      stringSession = flow.client.session.save();
-      const me = await flow.client.getMe();
+      stringSession = client.session.save();
+      const me = await client.getMe();
       if (!(me instanceof import_telegram3.Api.User)) {
         throw new Error("Telegram did not return the authenticated user");
       }
@@ -3294,16 +3468,16 @@ var TelegramConnectionService = class {
         username: me.username ?? null,
         firstName: me.firstName ?? null,
         lastName: me.lastName ?? null,
-        phone: me.phone ?? flow.phone
+        phone: me.phone ?? phone ?? ""
       });
     } catch (error) {
-      await this.disconnectQuietly(flow.client);
+      await this.disconnectQuietly(client);
       throw mapTelegramError(error, "Could not complete the Telegram connection");
     }
     await this.repos.sessions.save(user.id, stringSession);
-    await this.ensureStorageForClient(user.id, flow.client);
-    this.clientManager.cacheClient(user.id, flow.client);
-    return { status: "ok", user };
+    await this.ensureStorageForClient(user.id, client);
+    this.clientManager.cacheClient(user.id, client);
+    return user;
   }
   sweepExpiredFlows() {
     const now = Date.now();