@metamask-previews/seedless-onboarding-controller 2.5.1-preview-eb8c7b7a → 2.6.0-preview-2fd8e984

package/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.6.0]
+
+### Added
+
+- Added new persisted state value, `isSeedlessOnboardingUserAuthenticated`. ([#6288](https://github.com/MetaMask/core/pull/6288))
+  - This is for the UI state in the clients, to avoid querying sensistive controller state data to determine the social login authentication state.
+
 ### Changed
 
 - Bump `@metamask/base-controller` from `^8.0.1` to `^8.1.0` ([#6284](https://github.com/MetaMask/core/pull/6284))
@@ -142,7 +149,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
     - `checkIsPasswordOutdated`: Check if the password is current device is outdated, i.e. user changed password in another device.
     - `clearState`: Reset the state of the controller to the defaults.
 
-[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/seedless-onboarding-controller@2.5.1...HEAD
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/seedless-onboarding-controller@2.6.0...HEAD
+[2.6.0]: https://github.com/MetaMask/core/compare/@metamask/seedless-onboarding-controller@2.5.1...@metamask/seedless-onboarding-controller@2.6.0
 [2.5.1]: https://github.com/MetaMask/core/compare/@metamask/seedless-onboarding-controller@2.5.0...@metamask/seedless-onboarding-controller@2.5.1
 [2.5.0]: https://github.com/MetaMask/core/compare/@metamask/seedless-onboarding-controller@2.4.0...@metamask/seedless-onboarding-controller@2.5.0
 [2.4.0]: https://github.com/MetaMask/core/compare/@metamask/seedless-onboarding-controller@2.3.0...@metamask/seedless-onboarding-controller@2.4.0

package/dist/SeedlessOnboardingController.cjs

@@ -12,7 +12,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 };
 var _SeedlessOnboardingController_instances, _SeedlessOnboardingController_vaultEncryptor, _SeedlessOnboardingController_controllerOperationMutex, _SeedlessOnboardingController_vaultOperationMutex, _SeedlessOnboardingController_refreshJWTToken, _SeedlessOnboardingController_revokeRefreshToken, _SeedlessOnboardingController_isUnlocked, _SeedlessOnboardingController_passwordOutdatedCacheTTL, _SeedlessOnboardingController_submitGlobalPassword, _SeedlessOnboardingController_getAccessToken, _SeedlessOnboardingController_setUnlocked, _SeedlessOnboardingController_persistOprfKey, _SeedlessOnboardingController_persistAuthPubKey, _SeedlessOnboardingController_storeKeyringEncryptionKey, _SeedlessOnboardingController_loadKeyringEncryptionKey, _SeedlessOnboardingController_loadSeedlessEncryptionKey, _SeedlessOnboardingController_recoverAuthPubKey, _SeedlessOnboardingController_recoverEncKey, _SeedlessOnboardingController_fetchAllSecretDataFromMetadataStore, _SeedlessOnboardingController_changeEncryptionKey, _SeedlessOnboardingController_encryptAndStoreSecretData, _SeedlessOnboardingController_unlockVaultAndGetVaultData, _SeedlessOnboardingController_decryptAndParseVaultData, _SeedlessOnboardingController_withPersistedSecretMetadataBackupsState, _SeedlessOnboardingController_filterDupesAndUpdateSocialBackupsMetadata, _SeedlessOnboardingController_createNewVaultWithAuthData, _SeedlessOnboardingController_updateVault, _SeedlessOnboardingController_withControllerLock, _SeedlessOnboardingController_withVaultLock, _SeedlessOnboardingController_serializeKeyData, _SeedlessOnboardingController_parseVaultData, _SeedlessOnboardingController_assertIsUnlocked, _SeedlessOnboardingController_assertIsAuthenticatedUser, _SeedlessOnboardingController_assertIsSRPBackedUpUser, _SeedlessOnboardingController_assertPasswordInSync, _SeedlessOnboardingController_resetPasswordOutdatedCache, _SeedlessOnboardingController_isTokenExpiredError, _SeedlessOnboardingController_isMaxKeyChainLengthError, _SeedlessOnboardingController_executeWithTokenRefresh;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SeedlessOnboardingController = exports.getDefaultSeedlessOnboardingControllerState = void 0;
+exports.SeedlessOnboardingController = exports.getInitialSeedlessOnboardingControllerStateWithDefaults = void 0;
 const auth_network_utils_1 = require("@metamask/auth-network-utils");
 const base_controller_1 = require("@metamask/base-controller");
 const toprf_secure_backup_1 = require("@metamask/toprf-secure-backup");
@@ -30,16 +30,28 @@ const SecretMetadata_1 = require("./SecretMetadata.cjs");
 const utils_3 = require("./utils.cjs");
 const log = (0, logger_1.createModuleLogger)(logger_1.projectLogger, constants_1.controllerName);
 /**
- * Get the default state for the Seedless Onboarding Controller.
+ * Get the initial state for the Seedless Onboarding Controller with defaults.
  *
- * @returns The default state for the Seedless Onboarding Controller.
+ * @param overrides - The overrides for the initial state.
+ * @returns The initial state for the Seedless Onboarding Controller.
  */
-function getDefaultSeedlessOnboardingControllerState() {
-    return {
+function getInitialSeedlessOnboardingControllerStateWithDefaults(overrides) {
+    const initialState = {
         socialBackupsMetadata: [],
+        isSeedlessOnboardingUserAuthenticated: false,
+        ...overrides,
     };
+    // Ensure authenticated flag is set correctly.
+    try {
+        (0, assertions_1.assertIsSeedlessOnboardingUserAuthenticated)(initialState);
+        initialState.isSeedlessOnboardingUserAuthenticated = true;
+    }
+    catch {
+        initialState.isSeedlessOnboardingUserAuthenticated = false;
+    }
+    return initialState;
 }
-exports.getDefaultSeedlessOnboardingControllerState = getDefaultSeedlessOnboardingControllerState;
+exports.getInitialSeedlessOnboardingControllerStateWithDefaults = getInitialSeedlessOnboardingControllerStateWithDefaults;
 /**
  * Seedless Onboarding Controller State Metadata.
  *
@@ -123,6 +135,10 @@ const seedlessOnboardingMetadata = {
         persist: true,
         anonymous: false,
     },
+    isSeedlessOnboardingUserAuthenticated: {
+        persist: true,
+        anonymous: true,
+    },
 };
 class SeedlessOnboardingController extends base_controller_1.BaseController {
     /**
@@ -142,10 +158,7 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
         super({
             name: constants_1.controllerName,
             metadata: seedlessOnboardingMetadata,
-            state: {
-                ...getDefaultSeedlessOnboardingControllerState(),
-                ...state,
-            },
+            state: getInitialSeedlessOnboardingControllerStateWithDefaults(state),
             messenger,
         });
         _SeedlessOnboardingController_instances.add(this);
@@ -237,6 +250,8 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
                     state.userId = userId;
                     state.authConnection = authConnection;
                     state.socialLoginEmail = socialLoginEmail;
+                    state.metadataAccessToken = metadataAccessToken;
+                    state.accessToken = accessToken;
                     if (refreshToken) {
                         state.refreshToken = refreshToken;
                     }
@@ -244,12 +259,10 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
                         // Temporarily store revoke token in state for later vault creation
                         state.revokeToken = revokeToken;
                     }
-                    if (accessToken) {
-                        state.accessToken = accessToken;
-                    }
-                    if (metadataAccessToken) {
-                        state.metadataAccessToken = metadataAccessToken;
-                    }
+                    // we will check if the controller state is properly set with the authenticated user info
+                    // before setting the isSeedlessOnboardingUserAuthenticated to true
+                    (0, assertions_1.assertIsSeedlessOnboardingUserAuthenticated)(state);
+                    state.isSeedlessOnboardingUserAuthenticated = true;
                 });
                 return authenticationResult;
             }
@@ -616,7 +629,7 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
      * Clears the current state of the SeedlessOnboardingController.
      */
     clearState() {
-        const defaultState = getDefaultSeedlessOnboardingControllerState();
+        const defaultState = getInitialSeedlessOnboardingControllerStateWithDefaults();
         this.update(() => {
             return defaultState;
         });
@@ -1322,27 +1335,14 @@ async function _SeedlessOnboardingController_withVaultLock(callback) {
         throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.ControllerLocked);
     }
 }, _SeedlessOnboardingController_assertIsAuthenticatedUser = function _SeedlessOnboardingController_assertIsAuthenticatedUser(value) {
-    if (!value ||
-        typeof value !== 'object' ||
-        !('authConnectionId' in value) ||
-        typeof value.authConnectionId !== 'string' ||
-        !('userId' in value) ||
-        typeof value.userId !== 'string') {
-        throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.MissingAuthUserInfo);
-    }
-    if (!('nodeAuthTokens' in value) ||
-        typeof value.nodeAuthTokens !== 'object' ||
-        !Array.isArray(value.nodeAuthTokens) ||
-        value.nodeAuthTokens.length < 3 // At least 3 auth tokens are required for Threshold OPRF service
-    ) {
-        throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.InsufficientAuthToken);
-    }
-    if (!('refreshToken' in value) || typeof value.refreshToken !== 'string') {
-        throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.InvalidRefreshToken);
+    try {
+        (0, assertions_1.assertIsSeedlessOnboardingUserAuthenticated)(value);
     }
-    if (!('metadataAccessToken' in value) ||
-        typeof value.metadataAccessToken !== 'string') {
-        throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.InvalidMetadataAccessToken);
+    catch (error) {
+        this.update((state) => {
+            state.isSeedlessOnboardingUserAuthenticated = false;
+        });
+        throw error;
     }
 }, _SeedlessOnboardingController_assertIsSRPBackedUpUser = function _SeedlessOnboardingController_assertIsSRPBackedUpUser(value) {
     if (!this.state.authPubKey) {