@ledgerhq/ledger-key-ring-protocol 0.5.1-fix-build-number-pre.0

package/lib/qrcode/cipher.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeMessageCipher = exports.makeCipher = void 0;
+const base64_js_1 = __importDefault(require("base64-js"));
+const hw_ledger_key_ring_protocol_1 = require("@ledgerhq/hw-ledger-key-ring-protocol");
+const errors_1 = require("../errors");
+function makeCipher(sessionEncryptionKey) {
+    function encrypt(obj) {
+        const plaintext = JSON.stringify(obj);
+        const data = new TextEncoder().encode(plaintext);
+        const nonce = hw_ledger_key_ring_protocol_1.crypto.randomBytes(16);
+        const ciphertext = hw_ledger_key_ring_protocol_1.crypto.encrypt(sessionEncryptionKey, nonce, data);
+        const blob = new Uint8Array(nonce.length + ciphertext.length);
+        blob.set(nonce);
+        blob.set(ciphertext, nonce.length);
+        return base64_js_1.default.fromByteArray(blob);
+    }
+    function decrypt(data) {
+        const blob = base64_js_1.default.toByteArray(data);
+        const nonce = blob.slice(0, 16);
+        const ciphertext = blob.slice(16);
+        try {
+            const plaintext = hw_ledger_key_ring_protocol_1.crypto.decrypt(sessionEncryptionKey, nonce, ciphertext);
+            const text = new TextDecoder().decode(plaintext);
+            return JSON.parse(text);
+        }
+        catch (e) {
+            throw new errors_1.InvalidEncryptionKeyError("data can't be decrypted");
+        }
+    }
+    return { encrypt, decrypt };
+}
+exports.makeCipher = makeCipher;
+function makeMessageCipher(cipher) {
+    function encryptMessagePayload(payload) {
+        const encrypted = cipher.encrypt(payload);
+        return { encrypted };
+    }
+    function decryptMessage(message) {
+        if (message.message === "InitiateHandshake" || message.message === "Failure") {
+            throw new Error(message.message + " is not encrypted");
+        }
+        const decrypted = cipher.decrypt(message.payload.encrypted);
+        return decrypted;
+    }
+    return { encryptMessagePayload, decryptMessage };
+}
+exports.makeMessageCipher = makeMessageCipher;
+//# sourceMappingURL=cipher.js.map

package/lib/qrcode/cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cipher.js","sourceRoot":"","sources":["../../src/qrcode/cipher.ts"],"names":[],"mappings":";;;;;;AAAA,0DAA+B;AAC/B,uFAA+D;AAE/D,sCAAsD;AAYtD,SAAgB,UAAU,CAAC,oBAAgC;IACzD,SAAS,OAAO,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,oCAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,oCAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,mBAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,OAAO,CAAC,IAAY;QAC3B,MAAM,IAAI,GAAG,mBAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,oCAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,kCAAyB,CAAC,yBAAyB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AA1BD,gCA0BC;AAED,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,SAAS,qBAAqB,CAC5B,OAAU;QAEV,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC;IAED,SAAS,cAAc,CAAoB,OAAU;QACnD,IAAI,OAAO,CAAC,OAAO,KAAK,mBAAmB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,mBAAmB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAwB,CAAC;QACnF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,CAAC;AACnD,CAAC;AAjBD,8CAiBC"}

package/lib/qrcode/cipher.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cipher.test.d.ts.map

package/lib/qrcode/cipher.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cipher.test.d.ts","sourceRoot":"","sources":["../../src/qrcode/cipher.test.ts"],"names":[],"mappings":""}

package/lib/qrcode/cipher.test.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const hw_ledger_key_ring_protocol_1 = require("@ledgerhq/hw-ledger-key-ring-protocol");
+const cipher_1 = require("./cipher");
+const errors_1 = require("../errors");
+describe("makeCipher", () => {
+    it("should encrypt and decrypt correctly", () => {
+        const ephemeralKey = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const candidate = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const sessionEncryptionKey = hw_ledger_key_ring_protocol_1.crypto.ecdh(ephemeralKey, candidate.publicKey);
+        const cipher = (0, cipher_1.makeCipher)(sessionEncryptionKey);
+        const plaintext = { message: "Hello, World!" };
+        const encrypted = cipher.encrypt(plaintext);
+        expect(typeof encrypted).toBe("string");
+        const decrypted = cipher.decrypt(encrypted);
+        expect(decrypted).toEqual(plaintext);
+    });
+    it("should throw InvalidEncryptionKeyError if key changes", () => {
+        const ephemeralKey = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const candidate = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const sessionEncryptionKey = hw_ledger_key_ring_protocol_1.crypto.ecdh(ephemeralKey, candidate.publicKey);
+        const cipher = (0, cipher_1.makeCipher)(sessionEncryptionKey);
+        const plaintext = { message: "Hello, World!" };
+        const encrypted = cipher.encrypt(plaintext);
+        const ephemeralKey2 = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const otherSessionEncryptionKey = hw_ledger_key_ring_protocol_1.crypto.ecdh(ephemeralKey2, candidate.publicKey);
+        const cipher2 = (0, cipher_1.makeCipher)(otherSessionEncryptionKey);
+        expect(() => cipher2.decrypt(encrypted)).toThrow(errors_1.InvalidEncryptionKeyError);
+    });
+});
+//# sourceMappingURL=cipher.test.js.map

package/lib/qrcode/cipher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cipher.test.js","sourceRoot":"","sources":["../../src/qrcode/cipher.test.ts"],"names":[],"mappings":";;AAAA,uFAA+D;AAC/D,qCAAsC;AACtC,sCAAsD;AAEtD,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,YAAY,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,oBAAoB,GAAG,oCAAM,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,oBAAoB,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,YAAY,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,oBAAoB,GAAG,oCAAM,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,oBAAoB,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,yBAAyB,GAAG,oCAAM,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAyB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/lib/qrcode/index.d.ts

@@ -0,0 +1,70 @@
+import { MemberCredentials, Trustchain, TrustchainMember } from "../types";
+/**
+ * establish a channel to be able to add a member to the trustchain after displaying the QR Code
+ * @returns a promise that resolves when this is done
+ */
+export declare function createQRCodeHostInstance({ trustchainApiBaseUrl, onDisplayQRCode, onDisplayDigits, addMember, memberCredentials, memberName, initialTrustchainId, }: {
+    /**
+     * the base URL of the trustchain API
+     */
+    trustchainApiBaseUrl: string;
+    /**
+     * this function will need to display a UI to show the QR Code
+     */
+    onDisplayQRCode: (url: string) => void;
+    /**
+     * this function will need to display a UI to show the digits
+     */
+    onDisplayDigits: (digits: string) => void;
+    /**
+     * this function will need to using the TrustchainSDK (and use sdk.addMember)
+     */
+    addMember: (member: TrustchainMember) => Promise<Trustchain>;
+    /**
+     * the client credentials of the instance (given by TrustchainSDK)
+     */
+    memberCredentials: MemberCredentials;
+    /**
+     * the name of the member
+     */
+    memberName: string;
+    /**
+     * if the member already has a trustchain, this will be defined
+     */
+    initialTrustchainId?: string;
+}): Promise<Trustchain | void>;
+/**
+ * establish a channel to be able to add myself to the trustchain after scanning the QR Code
+ * @returns a promise that resolves a Trustchain when this is done
+ */
+export declare function createQRCodeCandidateInstance({ memberCredentials, memberName, addMember, initialTrustchainId, scannedUrl, onRequestQRCodeInput, }: {
+    /**
+     * the client credentials of the instance (given by TrustchainSDK)
+     */
+    memberCredentials: MemberCredentials;
+    /**
+     * the name of the member
+     */
+    memberName: string;
+    /**
+     * if the member already has a trustchain, this will be defined
+     */
+    initialTrustchainId?: string;
+    /**
+     * this function will need to using the TrustchainSDK (and use sdk.addMember)
+     */
+    addMember: (member: TrustchainMember) => Promise<Trustchain>;
+    /**
+     * the scanned URL that contains the host public key
+     */
+    scannedUrl: string;
+    /**
+     * this function will need to display a UI to ask the user to input the digits
+     * and then call the callback with the digits
+     */
+    onRequestQRCodeInput: (config: {
+        digits: number;
+        connected: boolean;
+    }, callback: (digits: string) => void) => void;
+}): Promise<Trustchain | void>;
+//# sourceMappingURL=index.d.ts.map

package/lib/qrcode/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/qrcode/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AA8F3E;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,mBAAmB,GACpB,EAAE;IACD;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC;;OAEG;IACH,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C;;OAEG;IACH,SAAS,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D;;OAEG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAsF7B;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,UAAU,EACV,oBAAoB,GACrB,EAAE;IACD;;OAEG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,SAAS,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,oBAAoB,EAAE,CACpB,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,OAAO,CAAC;KACpB,EACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,KAC/B,IAAI,CAAC;CACX,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA6E7B"}

package/lib/qrcode/index.js

@@ -0,0 +1,309 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createQRCodeCandidateInstance = exports.createQRCodeHostInstance = void 0;
+const hw_ledger_key_ring_protocol_1 = require("@ledgerhq/hw-ledger-key-ring-protocol");
+const isomorphic_ws_1 = __importDefault(require("isomorphic-ws"));
+const cipher_1 = require("./cipher");
+const errors_1 = require("../errors");
+const logs_1 = require("@ledgerhq/logs");
+const version = 1;
+const CLOSE_TIMEOUT = 100; // just enough time for the onerror to appear before onclose
+const commonSwitch = (_a) => __awaiter(void 0, [_a], void 0, function* ({ data, cipher, addMember, send, publisher, resolve, memberCredentials, memberName, reject, ws, setFinished, initialTrustchainId, }) {
+    switch (data.message) {
+        case "TrustchainShareCredential": {
+            if (!initialTrustchainId) {
+                const payload = {
+                    type: "UNEXPECTED_SHARE_CREDENTIAL",
+                    message: "unexpected share credential",
+                };
+                send({ version, publisher, message: "Failure", payload });
+                throw new errors_1.NoTrustchainInitialized("unexpected share credential");
+            }
+            setFinished(true);
+            if (!cipher) {
+                throw new Error("sessionEncryptionKey not set");
+            }
+            const { id, name } = cipher.decryptMessage(data);
+            const trustchain = yield addMember({ id, name, permissions: hw_ledger_key_ring_protocol_1.Permissions.OWNER });
+            const payload = cipher.encryptMessagePayload({ trustchain });
+            send({ version, publisher, message: "TrustchainAddedMember", payload });
+            resolve();
+            break;
+        }
+        case "TrustchainRequestCredential": {
+            if (initialTrustchainId) {
+                const payload = {
+                    type: "UNEXPECTED_REQUEST_CREDENTIAL",
+                    message: initialTrustchainId,
+                };
+                send({ version, publisher, message: "Failure", payload });
+                throw new errors_1.TrustchainAlreadyInitialized(initialTrustchainId);
+            }
+            const payload = cipher.encryptMessagePayload({
+                id: memberCredentials.pubkey,
+                name: memberName,
+            });
+            send({ version, publisher, message: "TrustchainShareCredential", payload });
+            break;
+        }
+        case "TrustchainAddedMember": {
+            setFinished(true);
+            const { trustchain } = cipher.decryptMessage(data);
+            resolve(trustchain);
+            ws.close();
+            break;
+        }
+        case "Failure": {
+            setFinished(true);
+            (0, logs_1.log)("trustchain/qrcode", "Failure", { data });
+            const error = fromErrorMessage(data.payload);
+            reject(error);
+            ws.close();
+            break;
+        }
+        case "HandshakeChallenge":
+        case "HandshakeCompletionSucceeded":
+        case "InitiateHandshake":
+        case "CompleteHandshakeChallenge":
+            break;
+        default:
+            throw new Error("unexpected message");
+    }
+});
+/**
+ * establish a channel to be able to add a member to the trustchain after displaying the QR Code
+ * @returns a promise that resolves when this is done
+ */
+function createQRCodeHostInstance(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ trustchainApiBaseUrl, onDisplayQRCode, onDisplayDigits, addMember, memberCredentials, memberName, initialTrustchainId, }) {
+        const ephemeralKey = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const publisher = hw_ledger_key_ring_protocol_1.crypto.to_hex(ephemeralKey.publicKey);
+        const url = `${trustchainApiBaseUrl.replace("http", "ws")}/v1/qr?host=${publisher}`;
+        const ws = new isomorphic_ws_1.default(url);
+        function send(message) {
+            ws.send(JSON.stringify(message));
+        }
+        let sessionEncryptionKey;
+        let cipher;
+        let expectedDigits;
+        let finished = false;
+        const setFinished = newValue => (finished = newValue);
+        onDisplayQRCode(url);
+        return new Promise((resolve, reject) => {
+            const startedAt = Date.now();
+            ws.addEventListener("error", reject);
+            ws.addEventListener("close", () => {
+                if (finished)
+                    return;
+                // this error would reflect a protocol error. because otherwise, we would get the "error" event.
+                const time = Date.now() - startedAt;
+                reject(new errors_1.QRCodeWSClosed("qrcode websocket prematurely closed", { time }));
+            });
+            ws.addEventListener("message", (e) => __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const data = parseMessage(e.data);
+                    switch (data.message) {
+                        case "InitiateHandshake": {
+                            const candidatePublicKey = hw_ledger_key_ring_protocol_1.crypto.from_hex(data.payload.ephemeral_public_key);
+                            sessionEncryptionKey = hw_ledger_key_ring_protocol_1.crypto.ecdh(ephemeralKey, candidatePublicKey);
+                            cipher = (0, cipher_1.makeMessageCipher)((0, cipher_1.makeCipher)(sessionEncryptionKey));
+                            // --- end of handshake first phase ---
+                            const digitsCount = 3;
+                            const digits = randomDigits(digitsCount);
+                            expectedDigits = digits;
+                            onDisplayDigits(digits);
+                            const payload = cipher.encryptMessagePayload({
+                                digits: digitsCount,
+                                connected: false,
+                            });
+                            send({ version, publisher, message: "HandshakeChallenge", payload });
+                            break;
+                        }
+                        case "CompleteHandshakeChallenge": {
+                            if (!cipher) {
+                                throw new Error("sessionEncryptionKey not set");
+                            }
+                            const { digits } = cipher.decryptMessage(data);
+                            if (digits !== expectedDigits) {
+                                console.warn("User invalid digits", { digits, expectedDigits });
+                                const payload = {
+                                    type: "HANDSHAKE_COMPLETION_FAILED",
+                                    message: "invalid digits",
+                                };
+                                send({ version, publisher, message: "Failure", payload });
+                                throw new errors_1.InvalidDigitsError("invalid digits");
+                            }
+                            const payload = cipher.encryptMessagePayload({});
+                            send({ version, publisher, message: "HandshakeCompletionSucceeded", payload });
+                            break;
+                        }
+                    }
+                    yield commonSwitch({
+                        data,
+                        cipher,
+                        addMember,
+                        send,
+                        publisher,
+                        resolve,
+                        memberCredentials,
+                        memberName,
+                        reject,
+                        ws,
+                        setFinished,
+                        initialTrustchainId,
+                    });
+                }
+                catch (e) {
+                    console.error("socket error", e);
+                    ws.close();
+                    reject(e);
+                }
+            }));
+        });
+    });
+}
+exports.createQRCodeHostInstance = createQRCodeHostInstance;
+/**
+ * establish a channel to be able to add myself to the trustchain after scanning the QR Code
+ * @returns a promise that resolves a Trustchain when this is done
+ */
+function createQRCodeCandidateInstance(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ memberCredentials, memberName, addMember, initialTrustchainId, scannedUrl, onRequestQRCodeInput, }) {
+        const m = scannedUrl.match(/host=([0-9A-Fa-f]+)/);
+        if (!m) {
+            if (isFromOldAccountsImport(scannedUrl))
+                throw new errors_1.ScannedOldImportQrCode();
+            throw new errors_1.ScannedInvalidQrCode();
+        }
+        const hostPublicKey = hw_ledger_key_ring_protocol_1.crypto.from_hex(m[1]);
+        const ephemeralKey = hw_ledger_key_ring_protocol_1.crypto.randomKeypair();
+        const publisher = hw_ledger_key_ring_protocol_1.crypto.to_hex(ephemeralKey.publicKey);
+        const sessionEncryptionKey = hw_ledger_key_ring_protocol_1.crypto.ecdh(ephemeralKey, hostPublicKey);
+        const cipher = (0, cipher_1.makeMessageCipher)((0, cipher_1.makeCipher)(sessionEncryptionKey));
+        const ws = new isomorphic_ws_1.default(scannedUrl);
+        function send(message) {
+            ws.send(JSON.stringify(message));
+        }
+        let finished = false;
+        const setFinished = newValue => (finished = newValue);
+        return new Promise((resolve, reject) => {
+            ws.addEventListener("close", () => {
+                if (finished)
+                    return;
+                // this error would reflect a protocol error. because otherwise, we would get the "error" event. it shouldn't be visible to user, but we use it to ensure the promise ends.
+                setTimeout(() => reject(new Error("qrcode websocket prematurely closed")), CLOSE_TIMEOUT);
+            });
+            ws.addEventListener("message", (e) => __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const data = parseMessage(e.data);
+                    switch (data.message) {
+                        case "HandshakeChallenge": {
+                            const config = cipher.decryptMessage(data);
+                            onRequestQRCodeInput(config, digits => {
+                                const payload = cipher.encryptMessagePayload({ digits });
+                                send({ version, publisher, message: "CompleteHandshakeChallenge", payload });
+                            });
+                            break;
+                        }
+                        case "HandshakeCompletionSucceeded": {
+                            if (initialTrustchainId) {
+                                const payload = cipher.encryptMessagePayload({});
+                                send({ version, publisher, message: "TrustchainRequestCredential", payload });
+                            }
+                            else {
+                                const payload = cipher.encryptMessagePayload({
+                                    id: memberCredentials.pubkey,
+                                    name: memberName,
+                                });
+                                send({ version, publisher, message: "TrustchainShareCredential", payload });
+                            }
+                            break;
+                        }
+                    }
+                    yield commonSwitch({
+                        data,
+                        cipher,
+                        addMember,
+                        send,
+                        publisher,
+                        resolve,
+                        memberCredentials,
+                        memberName,
+                        reject,
+                        ws,
+                        setFinished,
+                        initialTrustchainId,
+                    });
+                }
+                catch (e) {
+                    console.error("socket error", e);
+                    ws.close();
+                    reject(e);
+                }
+            }));
+            ws.addEventListener("error", reject);
+            ws.addEventListener("open", () => {
+                const payload = { ephemeral_public_key: hw_ledger_key_ring_protocol_1.crypto.to_hex(ephemeralKey.publicKey) };
+                send({ version, publisher, message: "InitiateHandshake", payload });
+            });
+        });
+    });
+}
+exports.createQRCodeCandidateInstance = createQRCodeCandidateInstance;
+function randomDigits(count) {
+    const bytes = hw_ledger_key_ring_protocol_1.crypto.randomBytes(count);
+    let digits = "";
+    for (let i = 0; i < count; i++) {
+        digits += (bytes[i] % 10).toString();
+    }
+    return digits;
+}
+function parseMessage(e) {
+    const message = JSON.parse(e.toString());
+    if (!message || typeof message !== "object") {
+        throw new Error("invalid message");
+    }
+    if (message.version !== 1) {
+        throw new Error("invalid version");
+    }
+    if (typeof message.publisher !== "string") {
+        throw new Error("invalid publisher");
+    }
+    if (typeof message.message !== "string") {
+        throw new Error("invalid message");
+    }
+    if (typeof message.payload !== "object") {
+        throw new Error("invalid payload");
+    }
+    return message;
+}
+function fromErrorMessage(payload) {
+    if (payload.type === "HANDSHAKE_COMPLETION_FAILED") {
+        throw new errors_1.InvalidDigitsError(payload.message);
+    }
+    if (payload.type === "UNEXPECTED_SHARE_CREDENTIAL") {
+        throw new errors_1.NoTrustchainInitialized(payload.message);
+    }
+    if (payload.type === "UNEXPECTED_REQUEST_CREDENTIAL") {
+        throw new errors_1.TrustchainAlreadyInitialized(payload.message);
+    }
+    const error = new Error(payload.message);
+    error.name = "TrustchainQRCode-" + payload.type;
+    return error;
+}
+function isFromOldAccountsImport(scannedUrl) {
+    return !!scannedUrl.match(/^[A-Za-z0-9+/=]*$/);
+}
+//# sourceMappingURL=index.js.map

package/lib/qrcode/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/qrcode/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uFAA4E;AAC5E,kEAAsC;AAEtC,qCAAyD;AAEzD,sCAOmB;AACnB,yCAAqC;AAErC,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,4DAA4D;AAEvF,MAAM,YAAY,GAAG,KAalB,EAAE,4CAbuB,EAC1B,IAAI,EACJ,MAAM,EACN,SAAS,EACT,IAAI,EACJ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,UAAU,EACV,MAAM,EACN,EAAE,EACF,WAAW,EACX,mBAAmB,GACpB;IACC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG;oBACd,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,6BAA6B;iBACvC,CAAC;gBACF,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC1D,MAAM,IAAI,gCAAuB,CAAC,6BAA6B,CAAC,CAAC;YACnE,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAW,CAAC,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QAED,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG;oBACd,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,mBAAmB;iBAC7B,CAAC;gBACF,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC1D,MAAM,IAAI,qCAA4B,CAAC,mBAAmB,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC;gBAC3C,EAAE,EAAE,iBAAiB,CAAC,MAAM;gBAC5B,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5E,MAAM;QACR,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,CAAC,UAAU,CAAC,CAAC;YACpB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,CAAC;YAClB,IAAA,UAAG,EAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM;QACR,CAAC;QACD,KAAK,oBAAoB,CAAC;QAC1B,KAAK,8BAA8B,CAAC;QACpC,KAAK,mBAAmB,CAAC;QACzB,KAAK,4BAA4B;YAC/B,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,CAAA,CAAC;AAEF;;;GAGG;AACH,SAAsB,wBAAwB;yDAAC,EAC7C,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,mBAAmB,GA8BpB;QACC,MAAM,YAAY,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,oCAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,SAAS,EAAE,CAAC;QACpF,MAAM,EAAE,GAAG,IAAI,uBAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,SAAS,IAAI,CAAC,OAAgB;YAC5B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,oBAA4C,CAAC;QACjD,IAAI,MAAwD,CAAC;QAC7D,IAAI,cAAkC,CAAC;QACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;QAEtD,eAAe,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAChC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,gGAAgG;gBAChG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACpC,MAAM,CAAC,IAAI,uBAAc,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;YACH,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAM,CAAC,EAAC,EAAE;gBACvC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAClC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;wBACrB,KAAK,mBAAmB,CAAC,CAAC,CAAC;4BACzB,MAAM,kBAAkB,GAAG,oCAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;4BAC9E,oBAAoB,GAAG,oCAAM,CAAC,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;4BACrE,MAAM,GAAG,IAAA,0BAAiB,EAAC,IAAA,mBAAU,EAAC,oBAAoB,CAAC,CAAC,CAAC;4BAC7D,uCAAuC;4BACvC,MAAM,WAAW,GAAG,CAAC,CAAC;4BACtB,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;4BACzC,cAAc,GAAG,MAAM,CAAC;4BACxB,eAAe,CAAC,MAAM,CAAC,CAAC;4BACxB,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC;gCAC3C,MAAM,EAAE,WAAW;gCACnB,SAAS,EAAE,KAAK;6BACjB,CAAC,CAAC;4BACH,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;4BACrE,MAAM;wBACR,CAAC;wBACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;4BAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;4BAClD,CAAC;4BACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;4BAC/C,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gCAC9B,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;gCAChE,MAAM,OAAO,GAAG;oCACd,IAAI,EAAE,6BAA6B;oCACnC,OAAO,EAAE,gBAAgB;iCAC1B,CAAC;gCACF,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gCAC1D,MAAM,IAAI,2BAAkB,CAAC,gBAAgB,CAAC,CAAC;4BACjD,CAAC;4BACD,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;4BACjD,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,CAAC;4BAC/E,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,MAAM,YAAY,CAAC;wBACjB,IAAI;wBACJ,MAAM;wBACN,SAAS;wBACT,IAAI;wBACJ,SAAS;wBACT,OAAO;wBACP,iBAAiB;wBACjB,UAAU;wBACV,MAAM;wBACN,EAAE;wBACF,WAAW;wBACX,mBAAmB;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBACjC,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CAAA;AA3HD,4DA2HC;AAED;;;GAGG;AACH,SAAsB,6BAA6B;yDAAC,EAClD,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,UAAU,EACV,oBAAoB,GAiCrB;QACC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAClD,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,uBAAuB,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,+BAAsB,EAAE,CAAC;YAC5E,MAAM,IAAI,6BAAoB,EAAE,CAAC;QACnC,CAAC;QACD,MAAM,aAAa,GAAG,oCAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,oCAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,oCAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,oBAAoB,GAAG,oCAAM,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAA,0BAAiB,EAAC,IAAA,mBAAU,EAAC,oBAAoB,CAAC,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,IAAI,uBAAS,CAAC,UAAU,CAAC,CAAC;QACrC,SAAS,IAAI,CAAC,OAAgB;YAC5B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;QAEtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAChC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,2KAA2K;gBAC3K,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAC5F,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAM,CAAC,EAAC,EAAE;gBACvC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAClC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;wBACrB,KAAK,oBAAoB,CAAC,CAAC,CAAC;4BAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;4BAC3C,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;gCACpC,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gCACzD,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,CAAC;4BAC/E,CAAC,CAAC,CAAC;4BACH,MAAM;wBACR,CAAC;wBACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;4BACpC,IAAI,mBAAmB,EAAE,CAAC;gCACxB,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gCACjD,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC,CAAC;4BAChF,CAAC;iCAAM,CAAC;gCACN,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC;oCAC3C,EAAE,EAAE,iBAAiB,CAAC,MAAM;oCAC5B,IAAI,EAAE,UAAU;iCACjB,CAAC,CAAC;gCACH,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAC,CAAC;4BAC9E,CAAC;4BACD,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,MAAM,YAAY,CAAC;wBACjB,IAAI;wBACJ,MAAM;wBACN,SAAS;wBACT,IAAI;wBACJ,SAAS;wBACT,OAAO;wBACP,iBAAiB;wBACjB,UAAU;wBACV,MAAM;wBACN,EAAE;wBACF,WAAW;wBACX,mBAAmB;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBACjC,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAA,CAAC,CAAC;YACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,MAAM,OAAO,GAAG,EAAE,oBAAoB,EAAE,oCAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChF,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CAAA;AApHD,sEAoHC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,oCAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA0C;IAClE,IAAI,OAAO,CAAC,IAAI,KAAK,6BAA6B,EAAE,CAAC;QACnD,MAAM,IAAI,2BAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,6BAA6B,EAAE,CAAC;QACnD,MAAM,IAAI,gCAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;QACrD,MAAM,IAAI,qCAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,GAAG,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC"}

package/lib/qrcode/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/lib/qrcode/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../src/qrcode/index.test.ts"],"names":[],"mappings":""}

package/lib/qrcode/index.test.js

@@ -0,0 +1,131 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const _1 = require(".");
+const ws_1 = __importDefault(require("ws"));
+const sdk_1 = require("../sdk");
+const hw_ledger_key_ring_protocol_1 = require("@ledgerhq/hw-ledger-key-ring-protocol");
+const errors_1 = require("../errors");
+describe("Trustchain QR Code", () => {
+    let server;
+    let a;
+    let b;
+    beforeAll(() => {
+        server = new ws_1.default.Server({ port: 1234 });
+        server.on("connection", ws => {
+            if (!a) {
+                a = ws;
+            }
+            else if (!b) {
+                b = ws;
+            }
+            ws.on("message", message => {
+                if (ws === a && b) {
+                    b.send(message);
+                }
+                else if (ws === b && a) {
+                    a.send(message);
+                }
+            });
+        });
+    });
+    afterAll(() => {
+        server.close();
+    });
+    test("digits matching scenario", () => __awaiter(void 0, void 0, void 0, function* () {
+        const onDisplayDigits = jest.fn();
+        const trustchain = {
+            rootId: "test-root-id",
+            walletSyncEncryptionKey: "test-wallet-sync-encryption-key",
+            applicationPath: "m/0'/16'/0'",
+        };
+        const addMember = jest.fn(() => Promise.resolve(trustchain));
+        const memberCredentials = (0, sdk_1.convertKeyPairToLiveCredentials)(yield hw_ledger_key_ring_protocol_1.crypto.randomKeypair());
+        const memberName = "foo";
+        let scannedUrlResolve;
+        const scannedUrlPromise = new Promise(resolve => {
+            scannedUrlResolve = resolve;
+        });
+        const onDisplayQRCode = (url) => {
+            scannedUrlResolve(url);
+        };
+        const onRequestQRCodeInput = jest.fn((config, callback) => callback(onDisplayDigits.mock.calls[0][0]));
+        const hostP = (0, _1.createQRCodeHostInstance)({
+            trustchainApiBaseUrl: "ws://localhost:1234",
+            onDisplayQRCode,
+            onDisplayDigits,
+            addMember,
+            memberCredentials,
+            memberName,
+            initialTrustchainId: trustchain.rootId,
+        });
+        const scannedUrl = yield scannedUrlPromise;
+        const candidateP = (0, _1.createQRCodeCandidateInstance)({
+            memberCredentials,
+            memberName,
+            initialTrustchainId: undefined,
+            addMember,
+            scannedUrl,
+            onRequestQRCodeInput,
+        });
+        const [_, res] = yield Promise.all([hostP, candidateP]);
+        expect(onDisplayDigits).toHaveBeenCalledWith(expect.any(String));
+        expect(addMember).toHaveBeenCalled();
+        expect(onRequestQRCodeInput).toHaveBeenCalledWith({ digits: 3, connected: false }, expect.any(Function));
+        expect(res).toEqual(trustchain);
+    }));
+    test("invalid qr code scanned", () => __awaiter(void 0, void 0, void 0, function* () {
+        const trustchain = {
+            rootId: "test-root-id",
+            walletSyncEncryptionKey: "test-wallet-sync-encryption-key",
+            applicationPath: "m/0'/16'/0'",
+        };
+        const addMember = jest.fn(() => Promise.resolve(trustchain));
+        const memberCredentials = (0, sdk_1.convertKeyPairToLiveCredentials)(yield hw_ledger_key_ring_protocol_1.crypto.randomKeypair());
+        const memberName = "foo";
+        const onRequestQRCodeInput = jest.fn();
+        const scannedUrl = "https://example.com";
+        const candidateP = (0, _1.createQRCodeCandidateInstance)({
+            memberCredentials,
+            memberName,
+            initialTrustchainId: undefined,
+            addMember,
+            scannedUrl,
+            onRequestQRCodeInput,
+        });
+        yield expect(candidateP).rejects.toThrow(new errors_1.ScannedInvalidQrCode());
+    }));
+    test("old accounts export qr code scanned", () => __awaiter(void 0, void 0, void 0, function* () {
+        const trustchain = {
+            rootId: "test-root-id",
+            walletSyncEncryptionKey: "test-wallet-sync-encryption-key",
+            applicationPath: "m/0'/16'/0'",
+        };
+        const addMember = jest.fn(() => Promise.resolve(trustchain));
+        const memberCredentials = (0, sdk_1.convertKeyPairToLiveCredentials)(yield hw_ledger_key_ring_protocol_1.crypto.randomKeypair());
+        const memberName = "foo";
+        const onRequestQRCodeInput = jest.fn();
+        const scannedUrl = "ZAADAAIAAAAEd2JXMpuoYdzvkNzFTlmQLPcGf2LSjDOgqaB3nQoZqlimcCX6HNkescWKyT1DCGuwO7IesD7oYg+fdZPkiIfFL3V9swfZRePkaNN09IjXsWLsim9hK/qi/RC1/ofX3hYNKUxUAgYVVG82WKXIk47siWfUlRZsCYSAARQ6ASpUgidPjMHaOMK6w53wTZplwo7Zjv1HrIyKwr3Ci8OmrFye5g==";
+        const candidateP = (0, _1.createQRCodeCandidateInstance)({
+            memberCredentials,
+            memberName,
+            initialTrustchainId: undefined,
+            addMember,
+            scannedUrl,
+            onRequestQRCodeInput,
+        });
+        yield expect(candidateP).rejects.toThrow(new errors_1.ScannedOldImportQrCode());
+    }));
+});
+//# sourceMappingURL=index.test.js.map

package/lib/qrcode/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/qrcode/index.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,wBAA4E;AAC5E,4CAA2B;AAC3B,gCAAyD;AACzD,uFAA+D;AAC/D,sCAAyE;AAEzE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC,CAAC;IACN,IAAI,CAAC,CAAC;IAEN,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,GAAG,IAAI,YAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE;YAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,GAAG,EAAE,CAAC;YACT,CAAC;iBAAM,IAAI,CAAC,CAAC,EAAE,CAAC;gBACd,CAAC,GAAG,EAAE,CAAC;YACT,CAAC;YACD,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACzB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClB,CAAC;qBAAM,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0BAA0B,EAAE,GAAS,EAAE;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,cAAc;YACtB,uBAAuB,EAAE,iCAAiC;YAC1D,eAAe,EAAE,aAAa;SAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAA,qCAA+B,EAAC,MAAM,oCAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,KAAK,CAAC;QAEzB,IAAI,iBAAwC,CAAC;QAC7C,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAS,OAAO,CAAC,EAAE;YACtD,iBAAiB,GAAG,OAAO,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE;YACtC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CACxD,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;QAEF,MAAM,KAAK,GAAG,IAAA,2BAAwB,EAAC;YACrC,oBAAoB,EAAE,qBAAqB;YAC3C,eAAe;YACf,eAAe;YACf,SAAS;YACT,iBAAiB;YACjB,UAAU;YACV,mBAAmB,EAAE,UAAU,CAAC,MAAM;SACvC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;QAE3C,MAAM,UAAU,GAAG,IAAA,gCAA6B,EAAC;YAC/C,iBAAiB;YACjB,UAAU;YACV,mBAAmB,EAAE,SAAS;YAC9B,SAAS;YACT,UAAU;YACV,oBAAoB;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAExD,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAC/C,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAC/B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrB,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC,CAAA,CAAC,CAAC;IACH,IAAI,CAAC,yBAAyB,EAAE,GAAS,EAAE;QACzC,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,cAAc;YACtB,uBAAuB,EAAE,iCAAiC;YAC1D,eAAe,EAAE,aAAa;SAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAA,qCAA+B,EAAC,MAAM,oCAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,KAAK,CAAC;QAEzB,MAAM,oBAAoB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEvC,MAAM,UAAU,GAAG,qBAAqB,CAAC;QAEzC,MAAM,UAAU,GAAG,IAAA,gCAA6B,EAAC;YAC/C,iBAAiB;YACjB,UAAU;YACV,mBAAmB,EAAE,SAAS;YAC9B,SAAS;YACT,UAAU;YACV,oBAAoB;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,6BAAoB,EAAE,CAAC,CAAC;IACvE,CAAC,CAAA,CAAC,CAAC;IACH,IAAI,CAAC,qCAAqC,EAAE,GAAS,EAAE;QACrD,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,cAAc;YACtB,uBAAuB,EAAE,iCAAiC;YAC1D,eAAe,EAAE,aAAa;SAC/B,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAA,qCAA+B,EAAC,MAAM,oCAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,KAAK,CAAC;QAEzB,MAAM,oBAAoB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEvC,MAAM,UAAU,GACd,sOAAsO,CAAC;QAEzO,MAAM,UAAU,GAAG,IAAA,gCAA6B,EAAC;YAC/C,iBAAiB;YACjB,UAAU;YACV,mBAAmB,EAAE,SAAS;YAC9B,SAAS;YACT,UAAU;YACV,oBAAoB;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,+BAAsB,EAAE,CAAC,CAAC;IACzE,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}