@learncard/sss-key-manager 0.2.4 → 0.2.5

package/dist/sss-key-manager.esm.js

@@ -27790,6 +27790,15 @@ var EscrowRequestError = class extends Error {
     __name(this, "EscrowRequestError");
   }
 };
+var DuplicateShareCoordinateError = class extends Error {
+  static {
+    __name(this, "DuplicateShareCoordinateError");
+  }
+  constructor() {
+    super("Stored shares have the same coordinate and cannot be combined");
+    this.name = "DuplicateShareCoordinateError";
+  }
+};
 var fetchAuthShareRaw = /* @__PURE__ */ __name(async (serverUrl, token, providerType, shareVersion, tenantId) => {
   const response = await fetch(`${serverUrl}/keys/auth-share`, {
     method: "POST",
@@ -28729,6 +28738,10 @@ function createSSSStrategy(config) {
       };
     },
     async reconstructKey(localKey, remoteKey) {
+      const coordinate = localKey.slice(-2).toLowerCase();
+      if (localKey.length === remoteKey.length && /^(?:[0-9a-f]{2}){2,}$/i.test(localKey) && /^(?:[0-9a-f]{2}){2,}$/i.test(remoteKey) && coordinate !== "00" && coordinate === remoteKey.slice(-2).toLowerCase()) {
+        throw new DuplicateShareCoordinateError();
+      }
       return reconstructFromShares([localKey, remoteKey]);
     },
     async verifyKeys(localKey, remoteKey, expectedDid, didFromPrivateKey) {
@@ -30423,6 +30436,7 @@ export {
   AtomicUpdateError,
   export_AuthSessionError as AuthSessionError,
   DEFAULT_KDF_PARAMS,
+  DuplicateShareCoordinateError,
   EMAIL_RELAY_ALGORITHM,
   EMAIL_RELAY_ENVELOPE_VERSION,
   ESCROW_ALGORITHM,