@metamask-previews/profile-sync-controller 8.1.1-preview-0ae65d9e → 8.1.1-preview-1b0ea93a

package/dist/controllers/authentication/services.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.d.mts","sourceRoot":"","sources":["../../../src/controllers/authentication/services.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,mBAAmB,QAAkC,CAAC;AACnE,eAAO,MAAM,mBAAmB,QAAsC,CAAC;AAGvE,eAAO,MAAM,oBAAoB,QAAkC,CAAC;AAapE,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBxE;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IAEd,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QAEtB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,KAAK,CACzB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,iBAAiB,GACnC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CA+B/B;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiCxB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,YAAY,MAAM,IAAI,MAAM,EAAE,CAEhC"}

package/dist/controllers/authentication/services.mjs

@@ -1,129 +0,0 @@
-function $importDefault(module) {
-    if (module?.__esModule) {
-        return module.default;
-    }
-    return module;
-}
-import $log from "loglevel";
-const log = $importDefault($log);
-import { Env, Platform, getEnvUrls, getOidcClientId } from "../../shared/env.mjs";
-const ENV_URLS = getEnvUrls(Env.PRD);
-const AUTH_ENDPOINT = ENV_URLS.authApiUrl;
-export const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;
-export const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;
-const OIDC_ENDPOINT = ENV_URLS.oidcApiUrl || '';
-export const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;
-const OIDC_CLIENT_ID = (platform) => {
-    if (platform === 'extension') {
-        return getOidcClientId(Env.PRD, Platform.EXTENSION);
-    }
-    if (platform === 'mobile') {
-        return getOidcClientId(Env.PRD, Platform.MOBILE);
-    }
-    throw new Error(`Unsupported platform - ${platform}`);
-};
-const OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';
-/**
- * Auth Service - Get Nonce. Used for the initial JWTBearer flow
- *
- * @param publicKey - public key to associate a nonce with
- * @returns the nonce or null if failed
- */
-export async function getNonce(publicKey) {
-    const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);
-    nonceUrl.searchParams.set('identifier', publicKey);
-    try {
-        const nonceResponse = await fetch(nonceUrl.toString());
-        if (!nonceResponse.ok) {
-            log.error(`authentication-controller/services: unable to get nonce - HTTP ${nonceResponse.status}`);
-            return null;
-        }
-        const nonceJson = await nonceResponse.json();
-        return nonceJson?.nonce ?? null;
-    }
-    catch (e) {
-        log.error('authentication-controller/services: unable to get nonce', e);
-        return null;
-    }
-}
-/**
- * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.
- *
- * @param rawMessage - the original message before signing
- * @param signature - the signed message
- * @param clientMetaMetrics - optional client metametrics id (to associate on backend)
- * @returns The Login Response
- */
-export async function login(rawMessage, signature, clientMetaMetrics) {
-    try {
-        const response = await fetch(AUTH_LOGIN_ENDPOINT, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({
-                signature,
-                raw_message: rawMessage,
-                metametrics: {
-                    metametrics_id: clientMetaMetrics.metametricsId,
-                    agent: clientMetaMetrics.agent,
-                },
-            }),
-        });
-        if (!response.ok) {
-            log.error(`authentication-controller/services: unable to login - HTTP ${response.status}`);
-            return null;
-        }
-        const loginResponse = await response.json();
-        return loginResponse ?? null;
-    }
-    catch (e) {
-        log.error('authentication-controller/services: unable to login', e);
-        return null;
-    }
-}
-/**
- * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)
- * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints
- *
- * @param jwtToken - the JWT Auth Token, received from `/login`
- * @param platform - the OIDC platform to retrieve access token
- * @returns JWT Access token to store and use on authorized endpoints.
- */
-export async function getAccessToken(jwtToken, platform) {
-    const headers = new Headers({
-        'Content-Type': 'application/x-www-form-urlencoded',
-    });
-    const urlEncodedBody = new URLSearchParams();
-    urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);
-    urlEncodedBody.append('client_id', OIDC_CLIENT_ID(platform));
-    urlEncodedBody.append('assertion', jwtToken);
-    try {
-        const response = await fetch(OIDC_TOKENS_ENDPOINT, {
-            method: 'POST',
-            headers,
-            body: urlEncodedBody.toString(),
-        });
-        if (!response.ok) {
-            log.error(`authentication-controller/services: unable to get access token - HTTP ${response.status}`);
-            return null;
-        }
-        const accessTokenResponse = await response.json();
-        return accessTokenResponse?.access_token ?? null;
-    }
-    catch (e) {
-        log.error('authentication-controller/services: unable to get access token', e);
-        return null;
-    }
-}
-/**
- * Utility to create the raw login message for the JWT bearer flow (via SRP)
- *
- * @param nonce - nonce received from `/nonce` endpoint
- * @param publicKey - public key used to retrieve nonce and for message signing
- * @returns Raw Message which will be used for signing & logging in.
- */
-export function createLoginRawMessage(nonce, publicKey) {
-    return `metamask:${nonce}:${publicKey}`;
-}
-//# sourceMappingURL=services.mjs.map

package/dist/controllers/authentication/services.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.mjs","sourceRoot":"","sources":["../../../src/controllers/authentication/services.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,IAAG,iBAAiB;;AAE3B,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,6BAAyB;AAE9E,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAErC,MAAM,aAAa,GAAW,QAAQ,CAAC,UAAU,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,aAAa,eAAe,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,aAAa,mBAAmB,CAAC;AAEvE,MAAM,aAAa,GAAW,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,aAAa,eAAe,CAAC;AACpE,MAAM,cAAc,GAAG,CAAC,QAAgC,EAAE,EAAE;IAC1D,IAAI,QAAQ,KAAK,WAAW,EAAE;QAC5B,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;KACrD;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE;QACzB,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;KAClD;IAED,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAkB,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,MAAM,eAAe,GAAG,6CAA6C,CAAC;AAMtE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEnD,IAAI;QACF,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE;YACrB,GAAG,CAAC,KAAK,CACP,kEAAkE,aAAa,CAAC,MAAM,EAAE,CACzF,CAAC;YACF,OAAO,IAAI,CAAC;SACb;QAED,MAAM,SAAS,GAAkB,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,SAAS,EAAE,KAAK,IAAI,IAAI,CAAC;KACjC;IAAC,OAAO,CAAC,EAAE;QACV,GAAG,CAAC,KAAK,CAAC,yDAAyD,EAAE,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AA8BD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,UAAkB,EAClB,SAAiB,EACjB,iBAAoC;IAEpC,IAAI;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS;gBAET,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE;oBACX,cAAc,EAAE,iBAAiB,CAAC,aAAa;oBAC/C,KAAK,EAAE,iBAAiB,CAAC,KAAK;iBAC/B;aACF,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,GAAG,CAAC,KAAK,CACP,8DAA8D,QAAQ,CAAC,MAAM,EAAE,CAChF,CAAC;YACF,OAAO,IAAI,CAAC;SACb;QAED,MAAM,aAAa,GAAkB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3D,OAAO,aAAa,IAAI,IAAI,CAAC;KAC9B;IAAC,OAAO,CAAC,EAAE;QACV,GAAG,CAAC,KAAK,CAAC,qDAAqD,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,QAAoC;IAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,cAAc,EAAE,mCAAmC;KACpD,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;IAC7C,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE7C,IAAI;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChB,GAAG,CAAC,KAAK,CACP,yEAAyE,QAAQ,CAAC,MAAM,EAAE,CAC3F,CAAC;YACF,OAAO,IAAI,CAAC;SACb;QAED,MAAM,mBAAmB,GAAuB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtE,OAAO,mBAAmB,EAAE,YAAY,IAAI,IAAI,CAAC;KAClD;IAAC,OAAO,CAAC,EAAE;QACV,GAAG,CAAC,KAAK,CACP,gEAAgE,EAChE,CAAC,CACF,CAAC;QACF,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,SAAiB;IAEjB,OAAO,YAAY,KAAK,IAAI,SAAS,EAAW,CAAC;AACnD,CAAC","sourcesContent":["import log from 'loglevel';\n\nimport { Env, Platform, getEnvUrls, getOidcClientId } from '../../shared/env';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nconst AUTH_ENDPOINT: string = ENV_URLS.authApiUrl;\nexport const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;\nexport const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;\n\nconst OIDC_ENDPOINT: string = ENV_URLS.oidcApiUrl || '';\nexport const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;\nconst OIDC_CLIENT_ID = (platform: 'mobile' | 'extension') => {\n  if (platform === 'extension') {\n    return getOidcClientId(Env.PRD, Platform.EXTENSION);\n  }\n  if (platform === 'mobile') {\n    return getOidcClientId(Env.PRD, Platform.MOBILE);\n  }\n\n  throw new Error(`Unsupported platform - ${platform as string}`);\n};\nconst OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n\nexport type NonceResponse = {\n  nonce: string;\n};\n\n/**\n * Auth Service - Get Nonce. Used for the initial JWTBearer flow\n *\n * @param publicKey - public key to associate a nonce with\n * @returns the nonce or null if failed\n */\nexport async function getNonce(publicKey: string): Promise<string | null> {\n  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);\n  nonceUrl.searchParams.set('identifier', publicKey);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      log.error(\n        `authentication-controller/services: unable to get nonce - HTTP ${nonceResponse.status}`,\n      );\n      return null;\n    }\n\n    const nonceJson: NonceResponse = await nonceResponse.json();\n    return nonceJson?.nonce ?? null;\n  } catch (e) {\n    log.error('authentication-controller/services: unable to get nonce', e);\n    return null;\n  }\n}\n\n/**\n * The Login API Server Response Shape\n */\nexport type LoginResponse = {\n  token: string;\n\n  expires_in: string;\n  /**\n   * Contains anonymous information about the logged in profile.\n   *\n   * identifier_id - a deterministic unique identifier on the method used to sign in\n   *\n   * profile_id - a unique id for a given profile\n   *\n   * metametrics_id - an anonymous server id\n   */\n  profile: {\n    identifier_id: string;\n\n    profile_id: string;\n  };\n};\n\ntype ClientMetaMetrics = {\n  metametricsId: string;\n  agent: 'extension' | 'mobile';\n};\n\n/**\n * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.\n *\n * @param rawMessage - the original message before signing\n * @param signature - the signed message\n * @param clientMetaMetrics - optional client metametrics id (to associate on backend)\n * @returns The Login Response\n */\nexport async function login(\n  rawMessage: string,\n  signature: string,\n  clientMetaMetrics: ClientMetaMetrics,\n): Promise<LoginResponse | null> {\n  try {\n    const response = await fetch(AUTH_LOGIN_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n\n        raw_message: rawMessage,\n        metametrics: {\n          metametrics_id: clientMetaMetrics.metametricsId,\n          agent: clientMetaMetrics.agent,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      log.error(\n        `authentication-controller/services: unable to login - HTTP ${response.status}`,\n      );\n      return null;\n    }\n\n    const loginResponse: LoginResponse = await response.json();\n    return loginResponse ?? null;\n  } catch (e) {\n    log.error('authentication-controller/services: unable to login', e);\n    return null;\n  }\n}\n\n/**\n * The Auth API Token Response Shape\n */\nexport type OAuthTokenResponse = {\n  access_token: string;\n\n  expires_in: number;\n};\n\n/**\n * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)\n * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints\n *\n * @param jwtToken - the JWT Auth Token, received from `/login`\n * @param platform - the OIDC platform to retrieve access token\n * @returns JWT Access token to store and use on authorized endpoints.\n */\nexport async function getAccessToken(\n  jwtToken: string,\n  platform: ClientMetaMetrics['agent'],\n): Promise<string | null> {\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);\n  urlEncodedBody.append('client_id', OIDC_CLIENT_ID(platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKENS_ENDPOINT, {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      log.error(\n        `authentication-controller/services: unable to get access token - HTTP ${response.status}`,\n      );\n      return null;\n    }\n\n    const accessTokenResponse: OAuthTokenResponse = await response.json();\n    return accessTokenResponse?.access_token ?? null;\n  } catch (e) {\n    log.error(\n      'authentication-controller/services: unable to get access token',\n      e,\n    );\n    return null;\n  }\n}\n\n/**\n * Utility to create the raw login message for the JWT bearer flow (via SRP)\n *\n * @param nonce - nonce received from `/nonce` endpoint\n * @param publicKey - public key used to retrieve nonce and for message signing\n * @returns Raw Message which will be used for signing & logging in.\n */\nexport function createLoginRawMessage(\n  nonce: string,\n  publicKey: string,\n): `metamask:${string}:${string}` {\n  return `metamask:${nonce}:${publicKey}` as const;\n}\n"]}

package/dist/controllers/user-storage/services.cjs

@@ -1,306 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteUserStorageAllFeatureEntries = exports.batchDeleteUserStorage = exports.deleteUserStorage = exports.batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries = exports.batchUpsertUserStorage = exports.upsertUserStorage = exports.getUserStorageAllFeatureEntries = exports.getUserStorage = exports.USER_STORAGE_ENDPOINT = exports.USER_STORAGE_API = void 0;
-const loglevel_1 = __importDefault(require("loglevel"));
-const encryption_1 = __importStar(require("../../shared/encryption/index.cjs"));
-const constants_1 = require("../../shared/encryption/constants.cjs");
-const env_1 = require("../../shared/env.cjs");
-const storage_schema_1 = require("../../shared/storage-schema.cjs");
-const ENV_URLS = (0, env_1.getEnvUrls)(env_1.Env.PRD);
-exports.USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
-exports.USER_STORAGE_ENDPOINT = `${exports.USER_STORAGE_API}/api/v1/userstorage`;
-/**
- * User Storage Service - Get Storage Entry.
- *
- * @param opts - User Storage Options
- * @returns The storage entry, or null if fails to find entry
- */
-async function getUserStorage(opts) {
-    try {
-        const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
-        const encryptedPath = (0, storage_schema_1.createEntryPath)(path, storageKey);
-        const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${encryptedPath}`);
-        const userStorageResponse = await fetch(url.toString(), {
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${bearerToken}`,
-            },
-        });
-        // Acceptable error - since indicates entry does not exist.
-        if (userStorageResponse.status === 404) {
-            return null;
-        }
-        if (userStorageResponse.status !== 200) {
-            throw new Error(`Unable to get User Storage - HTTP ${userStorageResponse.status}`);
-        }
-        const userStorage = await userStorageResponse.json();
-        const encryptedData = userStorage?.Data ?? null;
-        /* istanbul ignore if - this is an edge case where our endpoint returns invalid JSON payload */
-        if (!encryptedData) {
-            return null;
-        }
-        const decryptedData = await encryption_1.default.decryptString(encryptedData, opts.storageKey, nativeScryptCrypto);
-        // Re-encrypt and re-upload the entry if the salt is random
-        const salt = encryption_1.default.getSalt(encryptedData);
-        if (salt.toString() !== constants_1.SHARED_SALT.toString()) {
-            await upsertUserStorage(decryptedData, opts);
-        }
-        return decryptedData;
-    }
-    catch (e) {
-        loglevel_1.default.error('Failed to get user storage', e);
-        return null;
-    }
-}
-exports.getUserStorage = getUserStorage;
-/**
- * User Storage Service - Get all storage entries for a specific feature.
- *
- * @param opts - User Storage Options
- * @returns The storage entry, or null if fails to find entry
- */
-async function getUserStorageAllFeatureEntries(opts) {
-    try {
-        const { bearerToken, path, nativeScryptCrypto } = opts;
-        const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${path}`);
-        const userStorageResponse = await fetch(url.toString(), {
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${bearerToken}`,
-            },
-        });
-        // Acceptable error - since indicates feature does not exist.
-        if (userStorageResponse.status === 404) {
-            return null;
-        }
-        if (userStorageResponse.status !== 200) {
-            throw new Error(`Unable to get User Storage - HTTP ${userStorageResponse.status}`);
-        }
-        const userStorage = await userStorageResponse.json();
-        if (!Array.isArray(userStorage)) {
-            return null;
-        }
-        const decryptedData = [];
-        const reEncryptedEntries = [];
-        for (const entry of userStorage) {
-            /* istanbul ignore if - unreachable if statement, but kept as edge case */
-            if (!entry.Data) {
-                continue;
-            }
-            try {
-                const data = await encryption_1.default.decryptString(entry.Data, opts.storageKey, nativeScryptCrypto);
-                decryptedData.push(data);
-                // Re-encrypt the entry if the salt is different from the shared one
-                const salt = encryption_1.default.getSalt(entry.Data);
-                if (salt.toString() !== constants_1.SHARED_SALT.toString()) {
-                    reEncryptedEntries.push([
-                        entry.HashedKey,
-                        await encryption_1.default.encryptString(data, opts.storageKey, nativeScryptCrypto),
-                    ]);
-                }
-            }
-            catch {
-                // do nothing
-            }
-        }
-        // Re-upload the re-encrypted entries
-        if (reEncryptedEntries.length) {
-            await batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(reEncryptedEntries, opts);
-        }
-        return decryptedData;
-    }
-    catch (e) {
-        loglevel_1.default.error('Failed to get user storage', e);
-        return null;
-    }
-}
-exports.getUserStorageAllFeatureEntries = getUserStorageAllFeatureEntries;
-/**
- * User Storage Service - Set Storage Entry.
- *
- * @param data - data to store
- * @param opts - storage options
- */
-async function upsertUserStorage(data, opts) {
-    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
-    const encryptedData = await encryption_1.default.encryptString(data, opts.storageKey, nativeScryptCrypto);
-    const encryptedPath = (0, storage_schema_1.createEntryPath)(path, storageKey);
-    const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${encryptedPath}`);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ data: encryptedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to upsert data - HTTP ${res.status}`);
-    }
-}
-exports.upsertUserStorage = upsertUserStorage;
-/**
- * User Storage Service - Set multiple storage entries for one specific feature.
- * You cannot use this method to set multiple features at once.
- *
- * @param data - data to store, in the form of an array of [entryKey, entryValue] pairs
- * @param opts - storage options
- */
-async function batchUpsertUserStorage(data, opts) {
-    if (!data.length) {
-        return;
-    }
-    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
-    const encryptedData = [];
-    for (const d of data) {
-        encryptedData.push([
-            (0, encryption_1.createSHA256Hash)(d[0] + storageKey),
-            await encryption_1.default.encryptString(d[1], opts.storageKey, nativeScryptCrypto),
-        ]);
-    }
-    const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${path}`);
-    const formattedData = Object.fromEntries(encryptedData);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ data: formattedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to batch upsert data - HTTP ${res.status}`);
-    }
-}
-exports.batchUpsertUserStorage = batchUpsertUserStorage;
-/**
- * User Storage Service - Set multiple storage entries for one specific feature.
- * You cannot use this method to set multiple features at once.
- *
- * @param encryptedData - data to store, in the form of an array of [hashedKey, encryptedData] pairs
- * @param opts - storage options
- */
-async function batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(encryptedData, opts) {
-    if (!encryptedData.length) {
-        return;
-    }
-    const { bearerToken, path } = opts;
-    const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${path}`);
-    const formattedData = Object.fromEntries(encryptedData);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ data: formattedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to batch upsert data - HTTP ${res.status}`);
-    }
-}
-exports.batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries = batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries;
-/**
- * User Storage Service - Delete Storage Entry.
- *
- * @param opts - User Storage Options
- */
-async function deleteUserStorage(opts) {
-    const { bearerToken, path, storageKey } = opts;
-    const encryptedPath = (0, storage_schema_1.createEntryPath)(path, storageKey);
-    const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${encryptedPath}`);
-    const userStorageResponse = await fetch(url.toString(), {
-        method: 'DELETE',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-    });
-    if (userStorageResponse.status === 404) {
-        throw new Error(`user-storage - feature/entry not found - HTTP ${userStorageResponse.status}`);
-    }
-    if (!userStorageResponse.ok) {
-        throw new Error(`user-storage - unable to delete data - HTTP ${userStorageResponse.status}`);
-    }
-}
-exports.deleteUserStorage = deleteUserStorage;
-/**
- * User Storage Service - Delete multiple storage entries for one specific feature.
- * You cannot use this method to delete multiple features at once.
- *
- * @param data - data to delete, in the form of an array entryKey[]
- * @param opts - storage options
- */
-async function batchDeleteUserStorage(data, opts) {
-    if (!data.length) {
-        return;
-    }
-    const { bearerToken, path, storageKey } = opts;
-    const encryptedData = [];
-    for (const d of data) {
-        encryptedData.push((0, encryption_1.createSHA256Hash)(d + storageKey));
-    }
-    const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${path}`);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ batch_delete: encryptedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to batch delete data - HTTP ${res.status}`);
-    }
-}
-exports.batchDeleteUserStorage = batchDeleteUserStorage;
-/**
- * User Storage Service - Delete all storage entries for a specific feature.
- *
- * @param opts - User Storage Options
- */
-async function deleteUserStorageAllFeatureEntries(opts) {
-    const { bearerToken, path } = opts;
-    const url = new URL(`${exports.USER_STORAGE_ENDPOINT}/${path}`);
-    const userStorageResponse = await fetch(url.toString(), {
-        method: 'DELETE',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-    });
-    if (userStorageResponse.status === 404) {
-        throw new Error(`user-storage - feature not found - HTTP ${userStorageResponse.status}`);
-    }
-    if (!userStorageResponse.ok) {
-        throw new Error(`user-storage - unable to delete data - HTTP ${userStorageResponse.status}`);
-    }
-}
-exports.deleteUserStorageAllFeatureEntries = deleteUserStorageAllFeatureEntries;
-//# sourceMappingURL=services.cjs.map

package/dist/controllers/user-storage/services.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.cjs","sourceRoot":"","sources":["../../../src/controllers/user-storage/services.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wDAA2B;AAE3B,gFAAuE;AACvE,qEAAgE;AAChE,8CAAmD;AAKnD,oEAA8D;AAG9D,MAAM,QAAQ,GAAG,IAAA,gBAAU,EAAC,SAAG,CAAC,GAAG,CAAC,CAAC;AAExB,QAAA,gBAAgB,GAAW,QAAQ,CAAC,iBAAiB,CAAC;AACtD,QAAA,qBAAqB,GAAG,GAAG,wBAAgB,qBAAqB,CAAC;AA+B9E;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,IAAwB;IAExB,IAAI;QACF,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QAEnE,MAAM,aAAa,GAAG,IAAA,gCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,aAAa,EAAE,CAAC,CAAC;QAEjE,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtD,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,OAAO,IAAI,CAAC;SACb;QAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,MAAM,IAAI,KAAK,CACb,qCAAqC,mBAAmB,CAAC,MAAM,EAAE,CAClE,CAAC;SACH;QAED,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC;QAEhD,+FAA+F;QAC/F,IAAI,CAAC,aAAa,EAAE;YAClB,OAAO,IAAI,CAAC;SACb;QAED,MAAM,aAAa,GAAG,MAAM,oBAAU,CAAC,aAAa,CAClD,aAAa,EACb,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB,CAAC;QAEF,2DAA2D;QAC3D,MAAM,IAAI,GAAG,oBAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,uBAAW,CAAC,QAAQ,EAAE,EAAE;YAC9C,MAAM,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;SAC9C;QAED,OAAO,aAAa,CAAC;KACtB;IAAC,OAAO,CAAC,EAAE;QACV,kBAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AArDD,wCAqDC;AAED;;;;;GAKG;AACI,KAAK,UAAU,+BAA+B,CACnD,IAAyC;IAEzC,IAAI;QACF,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;QAExD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtD,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,6DAA6D;QAC7D,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,OAAO,IAAI,CAAC;SACb;QAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,MAAM,IAAI,KAAK,CACb,qCAAqC,mBAAmB,CAAC,MAAM,EAAE,CAClE,CAAC;SACH;QAED,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;YAC/B,OAAO,IAAI,CAAC;SACb;QAED,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,kBAAkB,GAAuB,EAAE,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE;YAC/B,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBACf,SAAS;aACV;YAED,IAAI;gBACF,MAAM,IAAI,GAAG,MAAM,oBAAU,CAAC,aAAa,CACzC,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB,CAAC;gBACF,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEzB,oEAAoE;gBACpE,MAAM,IAAI,GAAG,oBAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,uBAAW,CAAC,QAAQ,EAAE,EAAE;oBAC9C,kBAAkB,CAAC,IAAI,CAAC;wBACtB,KAAK,CAAC,SAAS;wBACf,MAAM,oBAAU,CAAC,aAAa,CAC5B,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB;qBACF,CAAC,CAAC;iBACJ;aACF;YAAC,MAAM;gBACN,aAAa;aACd;SACF;QAED,qCAAqC;QACrC,IAAI,kBAAkB,CAAC,MAAM,EAAE;YAC7B,MAAM,0DAA0D,CAC9D,kBAAkB,EAClB,IAAI,CACL,CAAC;SACH;QAED,OAAO,aAAa,CAAC;KACtB;IAAC,OAAO,CAAC,EAAE;QACV,kBAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AA/ED,0EA+EC;AAED;;;;;GAKG;AACI,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAAwB;IAExB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAEnE,MAAM,aAAa,GAAG,MAAM,oBAAU,CAAC,aAAa,CAClD,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB,CAAC;IACF,MAAM,aAAa,GAAG,IAAA,gCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,aAAa,EAAE,CAAC,CAAC;IAEjE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,+CAA+C,GAAG,CAAC,MAAM,EAAE,CAC5D,CAAC;KACH;AACH,CAAC;AA5BD,8CA4BC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAC1C,IAAwB,EACxB,IAAmC;IAEnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAChB,OAAO;KACR;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAEnE,MAAM,aAAa,GAAe,EAAE,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACpB,aAAa,CAAC,IAAI,CAAC;YACjB,IAAA,6BAAgB,EAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;YACnC,MAAM,oBAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC;SAC1E,CAAC,CAAC;KACJ;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,MAAM,EAAE,CAClE,CAAC;KACH;AACH,CAAC;AArCD,wDAqCC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,0DAA0D,CAC9E,aAAiC,EACjC,IAAmC;IAEnC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;QACzB,OAAO;KACR;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,MAAM,EAAE,CAClE,CAAC;KACH;AACH,CAAC;AA5BD,gIA4BC;AAED;;;;GAIG;AACI,KAAK,UAAU,iBAAiB,CACrC,IAAwB;IAExB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAA,gCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,aAAa,EAAE,CAAC,CAAC;IAEjE,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;QACtC,MAAM,IAAI,KAAK,CACb,iDAAiD,mBAAmB,CAAC,MAAM,EAAE,CAC9E,CAAC;KACH;IAED,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,KAAK,CACb,+CAA+C,mBAAmB,CAAC,MAAM,EAAE,CAC5E,CAAC;KACH;AACH,CAAC;AA1BD,8CA0BC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAC1C,IAAc,EACd,IAAmC;IAEnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAChB,OAAO;KACR;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE/C,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACpB,aAAa,CAAC,IAAI,CAAC,IAAA,6BAAgB,EAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;KACtD;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QAED,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;KACtD,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,MAAM,EAAE,CAClE,CAAC;KACH;AACH,CAAC;AAjCD,wDAiCC;AAED;;;;GAIG;AACI,KAAK,UAAU,kCAAkC,CACtD,IAAyC;IAEzC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,6BAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;QACtC,MAAM,IAAI,KAAK,CACb,2CAA2C,mBAAmB,CAAC,MAAM,EAAE,CACxE,CAAC;KACH;IAED,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,KAAK,CACb,+CAA+C,mBAAmB,CAAC,MAAM,EAAE,CAC5E,CAAC;KACH;AACH,CAAC;AAzBD,gFAyBC","sourcesContent":["import log from 'loglevel';\n\nimport encryption, { createSHA256Hash } from '../../shared/encryption';\nimport { SHARED_SALT } from '../../shared/encryption/constants';\nimport { Env, getEnvUrls } from '../../shared/env';\nimport type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from '../../shared/storage-schema';\nimport { createEntryPath } from '../../shared/storage-schema';\nimport type { NativeScrypt } from '../../shared/types/encryption';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n  HashedKey: string;\n  Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n  HashedKey: string;\n  Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n  bearerToken: string;\n  storageKey: string;\n  nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureAndKey;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureOnly;\n};\n\nexport type UserStorageBatchUpsertOptions = UserStorageAllFeatureEntriesOptions;\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n  opts: UserStorageOptions,\n): Promise<string | null> {\n  try {\n    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n    const encryptedPath = createEntryPath(path, storageKey);\n    const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates entry does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error(\n        `Unable to get User Storage - HTTP ${userStorageResponse.status}`,\n      );\n    }\n\n    const userStorage: GetUserStorageResponse | null =\n      await userStorageResponse.json();\n    const encryptedData = userStorage?.Data ?? null;\n\n    /* istanbul ignore if - this is an edge case where our endpoint returns invalid JSON payload */\n    if (!encryptedData) {\n      return null;\n    }\n\n    const decryptedData = await encryption.decryptString(\n      encryptedData,\n      opts.storageKey,\n      nativeScryptCrypto,\n    );\n\n    // Re-encrypt and re-upload the entry if the salt is random\n    const salt = encryption.getSalt(encryptedData);\n    if (salt.toString() !== SHARED_SALT.toString()) {\n      await upsertUserStorage(decryptedData, opts);\n    }\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n  opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n  try {\n    const { bearerToken, path, nativeScryptCrypto } = opts;\n    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates feature does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error(\n        `Unable to get User Storage - HTTP ${userStorageResponse.status}`,\n      );\n    }\n\n    const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n      await userStorageResponse.json();\n\n    if (!Array.isArray(userStorage)) {\n      return null;\n    }\n\n    const decryptedData: string[] = [];\n    const reEncryptedEntries: [string, string][] = [];\n\n    for (const entry of userStorage) {\n      /* istanbul ignore if - unreachable if statement, but kept as edge case */\n      if (!entry.Data) {\n        continue;\n      }\n\n      try {\n        const data = await encryption.decryptString(\n          entry.Data,\n          opts.storageKey,\n          nativeScryptCrypto,\n        );\n        decryptedData.push(data);\n\n        // Re-encrypt the entry if the salt is different from the shared one\n        const salt = encryption.getSalt(entry.Data);\n        if (salt.toString() !== SHARED_SALT.toString()) {\n          reEncryptedEntries.push([\n            entry.HashedKey,\n            await encryption.encryptString(\n              data,\n              opts.storageKey,\n              nativeScryptCrypto,\n            ),\n          ]);\n        }\n      } catch {\n        // do nothing\n      }\n    }\n\n    // Re-upload the re-encrypted entries\n    if (reEncryptedEntries.length) {\n      await batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(\n        reEncryptedEntries,\n        opts,\n      );\n    }\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n  data: string,\n  opts: UserStorageOptions,\n): Promise<void> {\n  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n  const encryptedData = await encryption.encryptString(\n    data,\n    opts.storageKey,\n    nativeScryptCrypto,\n  );\n  const encryptedPath = createEntryPath(path, storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to upsert data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Set multiple storage entries for one specific feature.\n * You cannot use this method to set multiple features at once.\n *\n * @param data - data to store, in the form of an array of [entryKey, entryValue] pairs\n * @param opts - storage options\n */\nexport async function batchUpsertUserStorage(\n  data: [string, string][],\n  opts: UserStorageBatchUpsertOptions,\n): Promise<void> {\n  if (!data.length) {\n    return;\n  }\n\n  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n  const encryptedData: string[][] = [];\n\n  for (const d of data) {\n    encryptedData.push([\n      createSHA256Hash(d[0] + storageKey),\n      await encryption.encryptString(d[1], opts.storageKey, nativeScryptCrypto),\n    ]);\n  }\n\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const formattedData = Object.fromEntries(encryptedData);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: formattedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to batch upsert data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Set multiple storage entries for one specific feature.\n * You cannot use this method to set multiple features at once.\n *\n * @param encryptedData - data to store, in the form of an array of [hashedKey, encryptedData] pairs\n * @param opts - storage options\n */\nexport async function batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(\n  encryptedData: [string, string][],\n  opts: UserStorageBatchUpsertOptions,\n): Promise<void> {\n  if (!encryptedData.length) {\n    return;\n  }\n\n  const { bearerToken, path } = opts;\n\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const formattedData = Object.fromEntries(encryptedData);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: formattedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to batch upsert data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Delete Storage Entry.\n *\n * @param opts - User Storage Options\n */\nexport async function deleteUserStorage(\n  opts: UserStorageOptions,\n): Promise<void> {\n  const { bearerToken, path, storageKey } = opts;\n  const encryptedPath = createEntryPath(path, storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);\n\n  const userStorageResponse = await fetch(url.toString(), {\n    method: 'DELETE',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n  });\n\n  if (userStorageResponse.status === 404) {\n    throw new Error(\n      `user-storage - feature/entry not found - HTTP ${userStorageResponse.status}`,\n    );\n  }\n\n  if (!userStorageResponse.ok) {\n    throw new Error(\n      `user-storage - unable to delete data - HTTP ${userStorageResponse.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Delete multiple storage entries for one specific feature.\n * You cannot use this method to delete multiple features at once.\n *\n * @param data - data to delete, in the form of an array entryKey[]\n * @param opts - storage options\n */\nexport async function batchDeleteUserStorage(\n  data: string[],\n  opts: UserStorageBatchUpsertOptions,\n): Promise<void> {\n  if (!data.length) {\n    return;\n  }\n\n  const { bearerToken, path, storageKey } = opts;\n\n  const encryptedData: string[] = [];\n\n  for (const d of data) {\n    encryptedData.push(createSHA256Hash(d + storageKey));\n  }\n\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n\n    body: JSON.stringify({ batch_delete: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to batch delete data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Delete all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n */\nexport async function deleteUserStorageAllFeatureEntries(\n  opts: UserStorageAllFeatureEntriesOptions,\n): Promise<void> {\n  const { bearerToken, path } = opts;\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const userStorageResponse = await fetch(url.toString(), {\n    method: 'DELETE',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n  });\n\n  if (userStorageResponse.status === 404) {\n    throw new Error(\n      `user-storage - feature not found - HTTP ${userStorageResponse.status}`,\n    );\n  }\n\n  if (!userStorageResponse.ok) {\n    throw new Error(\n      `user-storage - unable to delete data - HTTP ${userStorageResponse.status}`,\n    );\n  }\n}\n"]}

package/dist/controllers/user-storage/services.d.cts

@@ -1,85 +0,0 @@
-import type { UserStoragePathWithFeatureAndKey, UserStoragePathWithFeatureOnly } from "../../shared/storage-schema.cjs";
-import type { NativeScrypt } from "../../shared/types/encryption.cjs";
-export declare const USER_STORAGE_API: string;
-export declare const USER_STORAGE_ENDPOINT: string;
-/**
- * This is the Server Response shape for a feature entry.
- */
-export type GetUserStorageResponse = {
-    HashedKey: string;
-    Data: string;
-};
-export type GetUserStorageAllFeatureEntriesResponse = {
-    HashedKey: string;
-    Data: string;
-}[];
-export type UserStorageBaseOptions = {
-    bearerToken: string;
-    storageKey: string;
-    nativeScryptCrypto?: NativeScrypt;
-};
-export type UserStorageOptions = UserStorageBaseOptions & {
-    path: UserStoragePathWithFeatureAndKey;
-};
-export type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {
-    path: UserStoragePathWithFeatureOnly;
-};
-export type UserStorageBatchUpsertOptions = UserStorageAllFeatureEntriesOptions;
-/**
- * User Storage Service - Get Storage Entry.
- *
- * @param opts - User Storage Options
- * @returns The storage entry, or null if fails to find entry
- */
-export declare function getUserStorage(opts: UserStorageOptions): Promise<string | null>;
-/**
- * User Storage Service - Get all storage entries for a specific feature.
- *
- * @param opts - User Storage Options
- * @returns The storage entry, or null if fails to find entry
- */
-export declare function getUserStorageAllFeatureEntries(opts: UserStorageAllFeatureEntriesOptions): Promise<string[] | null>;
-/**
- * User Storage Service - Set Storage Entry.
- *
- * @param data - data to store
- * @param opts - storage options
- */
-export declare function upsertUserStorage(data: string, opts: UserStorageOptions): Promise<void>;
-/**
- * User Storage Service - Set multiple storage entries for one specific feature.
- * You cannot use this method to set multiple features at once.
- *
- * @param data - data to store, in the form of an array of [entryKey, entryValue] pairs
- * @param opts - storage options
- */
-export declare function batchUpsertUserStorage(data: [string, string][], opts: UserStorageBatchUpsertOptions): Promise<void>;
-/**
- * User Storage Service - Set multiple storage entries for one specific feature.
- * You cannot use this method to set multiple features at once.
- *
- * @param encryptedData - data to store, in the form of an array of [hashedKey, encryptedData] pairs
- * @param opts - storage options
- */
-export declare function batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(encryptedData: [string, string][], opts: UserStorageBatchUpsertOptions): Promise<void>;
-/**
- * User Storage Service - Delete Storage Entry.
- *
- * @param opts - User Storage Options
- */
-export declare function deleteUserStorage(opts: UserStorageOptions): Promise<void>;
-/**
- * User Storage Service - Delete multiple storage entries for one specific feature.
- * You cannot use this method to delete multiple features at once.
- *
- * @param data - data to delete, in the form of an array entryKey[]
- * @param opts - storage options
- */
-export declare function batchDeleteUserStorage(data: string[], opts: UserStorageBatchUpsertOptions): Promise<void>;
-/**
- * User Storage Service - Delete all storage entries for a specific feature.
- *
- * @param opts - User Storage Options
- */
-export declare function deleteUserStorageAllFeatureEntries(opts: UserStorageAllFeatureEntriesOptions): Promise<void>;
-//# sourceMappingURL=services.d.cts.map

package/dist/controllers/user-storage/services.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.d.cts","sourceRoot":"","sources":["../../../src/controllers/user-storage/services.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,gCAAgC,EAChC,8BAA8B,EAC/B,wCAAoC;AAErC,OAAO,KAAK,EAAE,YAAY,EAAE,0CAAsC;AAIlE,eAAO,MAAM,gBAAgB,EAAE,MAAmC,CAAC;AACnE,eAAO,MAAM,qBAAqB,QAA2C,CAAC;AAE9E;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,EAAE,CAAC;AAEJ,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,YAAY,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG;IACxD,IAAI,EAAE,gCAAgC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG,sBAAsB,GAAG;IACzE,IAAI,EAAE,8BAA8B,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,mCAAmC,CAAC;AAEhF;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmDxB;AAED;;;;;GAKG;AACH,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,mCAAmC,GACxC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CA6E1B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EACxB,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;;;;GAMG;AACH,wBAAsB,0DAA0D,CAC9E,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EACjC,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED;;;;GAIG;AACH,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,mCAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAuBf"}