@metamask-previews/seedless-onboarding-controller 7.1.0-preview-bc3c2ef97 → 7.1.0-preview-0bb0ab8a7

package/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- **BREAKING** The `encryptor` constructor param requires `encryptWithKey` method. ([#7800](https://github.com/MetaMask/core/pull/7800))
+  - The method is to encrypt the vault with cached encryption key while the wallet is unlocked.
+- Added new public method, `getAccessToken`. ([#7800](https://github.com/MetaMask/core/pull/7800))
+  - Clients can use this method to get `accessToken` from the controller, instead of directly accessing from the state.
+  - This method also adds refresh token mechanism when `accessToken` is expired, hence preventing expired token usage in the clients.
+
 ### Changed
 
 - Update StateMetadata's `includeInStateLogs` property. ([#7750](https://github.com/MetaMask/core/pull/7750))
@@ -14,6 +22,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bump `@metamask/keyring-controller` from `^25.0.0` to `^25.1.0` ([#7713](https://github.com/MetaMask/core/pull/7713))
 - Upgrade `@metamask/utils` from `^11.8.1` to `^11.9.0` ([#7511](https://github.com/MetaMask/core/pull/7511))
 
+### Fixed
+
+- Fixed new `accessToken` not being persisted in the vault after the token refresh. ([#7800](https://github.com/MetaMask/core/pull/7800))
+
 ## [7.1.0]
 
 ### Added

package/dist/SeedlessOnboardingController.cjs

@@ -10,7 +10,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _SeedlessOnboardingController_instances, _SeedlessOnboardingController_vaultEncryptor, _SeedlessOnboardingController_controllerOperationMutex, _SeedlessOnboardingController_vaultOperationMutex, _SeedlessOnboardingController_refreshJWTToken, _SeedlessOnboardingController_revokeRefreshToken, _SeedlessOnboardingController_renewRefreshToken, _SeedlessOnboardingController_passwordOutdatedCacheTTL, _SeedlessOnboardingController_isUnlocked, _SeedlessOnboardingController_cachedDecryptedVaultData, _SeedlessOnboardingController_submitGlobalPassword, _SeedlessOnboardingController_setUnlocked, _SeedlessOnboardingController_persistOprfKey, _SeedlessOnboardingController_persistAuthPubKey, _SeedlessOnboardingController_storeKeyringEncryptionKey, _SeedlessOnboardingController_loadKeyringEncryptionKey, _SeedlessOnboardingController_loadSeedlessEncryptionKey, _SeedlessOnboardingController_recoverAuthPubKey, _SeedlessOnboardingController_recoverEncKey, _SeedlessOnboardingController_fetchAllSecretDataFromMetadataStore, _SeedlessOnboardingController_changeEncryptionKey, _SeedlessOnboardingController_encryptAndStoreSecretData, _SeedlessOnboardingController_unlockVaultAndGetVaultData, _SeedlessOnboardingController_decryptAndParseVaultData, _SeedlessOnboardingController_withPersistedSecretMetadataBackupsState, _SeedlessOnboardingController_filterDupesAndUpdateSocialBackupsMetadata, _SeedlessOnboardingController_createNewVaultWithAuthData, _SeedlessOnboardingController_updateVault, _SeedlessOnboardingController_getAccessTokenAndRevokeToken, _SeedlessOnboardingController_withControllerLock, _SeedlessOnboardingController_withVaultLock, _SeedlessOnboardingController_parseVaultData, _SeedlessOnboardingController_assertIsUnlocked, _SeedlessOnboardingController_assertIsAuthenticatedUser, _SeedlessOnboardingController_assertPasswordInSync, _SeedlessOnboardingController_resetPasswordOutdatedCache, _SeedlessOnboardingController_addRefreshTokenToRevokeList, _SeedlessOnboardingController_isAuthTokenError, _SeedlessOnboardingController_isMaxKeyChainLengthError, _SeedlessOnboardingController_executeWithTokenRefresh;
+var _SeedlessOnboardingController_instances, _SeedlessOnboardingController_vaultEncryptor, _SeedlessOnboardingController_controllerOperationMutex, _SeedlessOnboardingController_vaultOperationMutex, _SeedlessOnboardingController_refreshJWTToken, _SeedlessOnboardingController_revokeRefreshToken, _SeedlessOnboardingController_renewRefreshToken, _SeedlessOnboardingController_passwordOutdatedCacheTTL, _SeedlessOnboardingController_isUnlocked, _SeedlessOnboardingController_cachedDecryptedVaultData, _SeedlessOnboardingController_submitGlobalPassword, _SeedlessOnboardingController_setUnlocked, _SeedlessOnboardingController_pickLatestAccessToken, _SeedlessOnboardingController_persistOprfKey, _SeedlessOnboardingController_persistAuthPubKey, _SeedlessOnboardingController_storeKeyringEncryptionKey, _SeedlessOnboardingController_loadKeyringEncryptionKey, _SeedlessOnboardingController_loadSeedlessEncryptionKey, _SeedlessOnboardingController_recoverAuthPubKey, _SeedlessOnboardingController_recoverEncKey, _SeedlessOnboardingController_fetchAllSecretDataFromMetadataStore, _SeedlessOnboardingController_changeEncryptionKey, _SeedlessOnboardingController_encryptAndStoreSecretData, _SeedlessOnboardingController_unlockVaultAndGetVaultData, _SeedlessOnboardingController_decryptAndParseVaultData, _SeedlessOnboardingController_withPersistedSecretMetadataBackupsState, _SeedlessOnboardingController_filterDupesAndUpdateSocialBackupsMetadata, _SeedlessOnboardingController_createNewVaultWithAuthData, _SeedlessOnboardingController_updateVault, _SeedlessOnboardingController_encryptSeedlessEncryptionKey, _SeedlessOnboardingController_getAccessTokenAndRevokeToken, _SeedlessOnboardingController_withControllerLock, _SeedlessOnboardingController_withVaultLock, _SeedlessOnboardingController_parseVaultData, _SeedlessOnboardingController_assertIsUnlocked, _SeedlessOnboardingController_assertIsAuthenticatedUser, _SeedlessOnboardingController_assertPasswordInSync, _SeedlessOnboardingController_resetPasswordOutdatedCache, _SeedlessOnboardingController_addRefreshTokenToRevokeList, _SeedlessOnboardingController_isAuthTokenError, _SeedlessOnboardingController_isMaxKeyChainLengthError, _SeedlessOnboardingController_executeWithTokenRefresh, _SeedlessOnboardingController_checkTokensExpired;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SeedlessOnboardingController = exports.getInitialSeedlessOnboardingControllerStateWithDefaults = void 0;
 const auth_network_utils_1 = require("@metamask/auth-network-utils");
@@ -242,6 +242,7 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
         __classPrivateFieldSet(this, _SeedlessOnboardingController_refreshJWTToken, refreshJWTToken, "f");
         __classPrivateFieldSet(this, _SeedlessOnboardingController_revokeRefreshToken, revokeRefreshToken, "f");
         __classPrivateFieldSet(this, _SeedlessOnboardingController_renewRefreshToken, renewRefreshToken, "f");
+        this.messenger.registerActionHandler(`${constants_1.controllerName}:getAccessToken`, this.getAccessToken.bind(this));
     }
     async fetchMetadataAccessCreds() {
         const { metadataAccessToken } = this.state;
@@ -552,7 +553,7 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
     /**
      * Submit the password to the controller, verify the password validity and unlock the controller.
      *
-     * This method will be used especially when user rehydrate/unlock the wallet.
+     * This method will be used especially when user unlock the wallet.
      * The provided password will be verified against the encrypted vault, encryption key will be derived and saved in the controller state.
      *
      * This operation is useful when user performs some actions that requires the user password/encryption key. e.g. add new srp backup
@@ -562,7 +563,27 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
      */
     async submitPassword(password) {
         return await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_withControllerLock).call(this, async () => {
-            await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_unlockVaultAndGetVaultData).call(this, { password });
+            // get the access token from the state before unlocking, it might be the new token set from the `refreshAuthTokens` method.
+            const { accessToken: accessTokenBeforeUnlock } = this.state;
+            const deserializedVaultData = await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_unlockVaultAndGetVaultData).call(this, {
+                password,
+            });
+            const accessTokenFromDecryptedVault = deserializedVaultData.accessToken;
+            // Pick the latest access token - the token from state might be newer (from refreshAuthTokens)
+            // than the token stored in the vault.
+            const latestAccessToken = __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_pickLatestAccessToken).call(this, accessTokenBeforeUnlock, accessTokenFromDecryptedVault);
+            // update the state and vault with the latest access token `ONLY` if it's different from the current access token in the state.
+            if (latestAccessToken !== accessTokenFromDecryptedVault) {
+                const updatedVaultData = {
+                    ...deserializedVaultData,
+                    accessToken: latestAccessToken,
+                };
+                await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_updateVault).call(this, {
+                    password,
+                    vaultData: updatedVaultData,
+                    pwEncKey: deserializedVaultData.toprfPwEncryptionKey,
+                });
+            }
             __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_setUnlocked).call(this);
         });
     }
@@ -768,6 +789,18 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
                 refreshToken,
                 skipLock: true,
             });
+            // update the vault with new access token if wallet is unlocked
+            if (__classPrivateFieldGet(this, _SeedlessOnboardingController_isUnlocked, "f") && __classPrivateFieldGet(this, _SeedlessOnboardingController_cachedDecryptedVaultData, "f")) {
+                const updatedVaultData = {
+                    ...__classPrivateFieldGet(this, _SeedlessOnboardingController_cachedDecryptedVaultData, "f"),
+                    accessToken,
+                };
+                const pwEncKey = __classPrivateFieldGet(this, _SeedlessOnboardingController_cachedDecryptedVaultData, "f").toprfPwEncryptionKey;
+                await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_updateVault).call(this, {
+                    vaultData: updatedVaultData,
+                    pwEncKey,
+                });
+            }
         }
         catch (error) {
             log('Error refreshing node auth tokens', error);
@@ -858,6 +891,21 @@ class SeedlessOnboardingController extends base_controller_1.BaseController {
             }
         });
     }
+    /**
+     * Get the access token from the state.
+     *
+     * If the tokens are expired, the method will refresh them and return the new access token.
+     *
+     * @returns The access token.
+     */
+    async getAccessToken() {
+        return __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_withControllerLock).call(this, async () => {
+            __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_assertIsAuthenticatedUser).call(this, this.state);
+            return __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_executeWithTokenRefresh).call(this, async () => {
+                return this.state.accessToken;
+            }, 'getAccessToken');
+        });
+    }
     /**
      * Check if the current node auth token is expired.
      *
@@ -926,22 +974,28 @@ _SeedlessOnboardingController_vaultEncryptor = new WeakMap(), _SeedlessOnboardin
  * corresponding to the current authPubKey in state.
  */
 async function _SeedlessOnboardingController_submitGlobalPassword({ targetAuthPubKey, globalPassword, maxKeyChainLength, }) {
-    const { pwEncKey: curPwEncKey, authKeyPair: curAuthKeyPair } = await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_recoverEncKey).call(this, globalPassword);
+    const { pwEncKey: globalPwEncKey, authKeyPair: globalAuthKeyPair } = await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_recoverEncKey).call(this, globalPassword);
     try {
         // Recover vault encryption key.
         const res = await this.toprfClient.recoverPwEncKey({
             targetAuthPubKey,
-            curPwEncKey,
-            curAuthKeyPair,
+            curPwEncKey: globalPwEncKey,
+            curAuthKeyPair: globalAuthKeyPair,
             maxPwChainLength: maxKeyChainLength,
         });
         const { pwEncKey } = res;
         const vaultKey = await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_loadSeedlessEncryptionKey).call(this, pwEncKey);
+        // accessToken before unlocking vault and flooding the state with values from the decrypted vault
+        // it might be the new token set from the `refreshAuthTokens` method.
+        const { accessToken: accessTokenBeforeUnlock } = this.state;
         // Unlock the controller
-        await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_unlockVaultAndGetVaultData).call(this, {
+        const decryptedVaultData = await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_unlockVaultAndGetVaultData).call(this, {
             encryptionKey: vaultKey,
         });
         __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_setUnlocked).call(this);
+        // Pick the latest access token - the token from state might be newer (from refreshAuthTokens)
+        // than the token stored in the vault. The vault will be updated later by syncLatestGlobalPassword.
+        __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_pickLatestAccessToken).call(this, accessTokenBeforeUnlock, decryptedVaultData.accessToken);
     }
     catch (error) {
         if (__classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_isAuthTokenError).call(this, error)) {
@@ -954,6 +1008,18 @@ async function _SeedlessOnboardingController_submitGlobalPassword({ targetAuthPu
     }
 }, _SeedlessOnboardingController_setUnlocked = function _SeedlessOnboardingController_setUnlocked() {
     __classPrivateFieldSet(this, _SeedlessOnboardingController_isUnlocked, true, "f");
+}, _SeedlessOnboardingController_pickLatestAccessToken = function _SeedlessOnboardingController_pickLatestAccessToken(tokenBeforeUnlock, tokenAfterUnlock) {
+    let latestToken = tokenAfterUnlock;
+    if (tokenBeforeUnlock &&
+        tokenAfterUnlock &&
+        tokenBeforeUnlock !== tokenAfterUnlock) {
+        latestToken = (0, utils_3.compareAndGetLatestToken)(tokenBeforeUnlock, tokenAfterUnlock);
+        // Update the access token in the state with the latest access token
+        this.update((state) => {
+            state.accessToken = latestToken;
+        });
+    }
+    return latestToken;
 }, _SeedlessOnboardingController_persistOprfKey = 
 /**
  * Persist the encryption key for the seedless onboarding flow.
@@ -1248,7 +1314,7 @@ async function _SeedlessOnboardingController_decryptAndParseVaultData(params) {
     }
     else {
         // if the encryption key is not available, we will use the password to decrypt the vault
-        assertIsValidPassword(params?.password);
+        (0, assertions_1.assertIsValidPassword)(params?.password);
         // Note that vault decryption using the password is a very costly operation as it involves deriving the encryption key
         // from the password using an intentionally slow key derivation function.
         // We should make sure that we only call it very intentionally.
@@ -1356,31 +1422,66 @@ async function _SeedlessOnboardingController_createNewVaultWithAuthData({ passwo
  * Encrypt and update the vault with the given authentication data.
  *
  * @param params - The parameters for updating the vault.
- * @param params.password - The password to encrypt the vault.
+ * @param params.password - The optional password to encrypt the vault. If not provided, the vault will be encrypted with the encryption key in the state.
  * @param params.vaultData - The raw vault data to update the vault with.
  * @param params.pwEncKey - The global password encryption key.
  * @returns A promise that resolves to the updated vault.
  */
 async function _SeedlessOnboardingController_updateVault({ password, vaultData, pwEncKey, }) {
     await __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_withVaultLock).call(this, async () => {
-        assertIsValidPassword(password);
-        // cache the vault data to avoid decrypting the vault data multiple times
-        __classPrivateFieldSet(this, _SeedlessOnboardingController_cachedDecryptedVaultData, vaultData, "f");
         const serializedVaultData = (0, utils_3.serializeVaultData)(vaultData);
-        // Note that vault encryption using the password is a very costly operation as it involves deriving the encryption key
-        // from the password using an intentionally slow key derivation function.
-        // We should make sure that we only call it very intentionally.
-        const { vault, exportedKeyString } = await __classPrivateFieldGet(this, _SeedlessOnboardingController_vaultEncryptor, "f").encryptWithDetail(password, serializedVaultData);
-        // Encrypt vault key.
-        const aes = (0, webcrypto_1.managedNonce)(aes_1.gcm)(pwEncKey);
-        const encryptedKey = aes.encrypt((0, utils_2.utf8ToBytes)(exportedKeyString));
+        const { vaultEncryptionKey, vaultEncryptionSalt, vault } = this.state;
+        const updatedState = {
+            vault,
+            vaultEncryptionKey,
+            vaultEncryptionSalt,
+            encryptedSeedlessEncryptionKey: this.state.encryptedSeedlessEncryptionKey,
+        };
+        // if the password is provided (not undefined), encrypt the vault with the password
+        // We gonna prioritize the password encryption here, in case of the operation is `Change Password`.
+        // We don't wanna re-use the old encryption key from the state.
+        if (password !== undefined) {
+            (0, assertions_1.assertIsValidPassword)(password);
+            // Note that vault encryption using the password is a very costly operation as it involves deriving the encryption key
+            // from the password using an intentionally slow key derivation function.
+            // We should make sure that we only call it very intentionally.
+            const { vault: updatedEncVault, exportedKeyString } = await __classPrivateFieldGet(this, _SeedlessOnboardingController_vaultEncryptor, "f").encryptWithDetail(password, serializedVaultData);
+            updatedState.vault = updatedEncVault;
+            updatedState.vaultEncryptionKey = exportedKeyString;
+            updatedState.vaultEncryptionSalt = JSON.parse(updatedEncVault).salt;
+            // encrypt the seedless encryption key with the password encryption key from TOPRF network
+            updatedState.encryptedSeedlessEncryptionKey =
+                __classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_encryptSeedlessEncryptionKey).call(this, exportedKeyString, pwEncKey);
+        }
+        else if (vaultEncryptionKey && vaultEncryptionSalt) {
+            const encryptionKey = await __classPrivateFieldGet(this, _SeedlessOnboardingController_vaultEncryptor, "f").importKey(vaultEncryptionKey);
+            const updatedEncVault = await __classPrivateFieldGet(this, _SeedlessOnboardingController_vaultEncryptor, "f").encryptWithKey(encryptionKey, serializedVaultData);
+            // NOTE: Referenced from keyring-controller!
+            // We need to include the salt used to derive the encryption key, to be able to derive it from password again.
+            updatedEncVault.salt = vaultEncryptionSalt;
+            updatedState.vault = JSON.stringify(updatedEncVault);
+            updatedState.vaultEncryptionKey = vaultEncryptionKey;
+            updatedState.vaultEncryptionSalt = vaultEncryptionSalt;
+        }
+        else {
+            // neither password nor encryption key is provided
+            throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.MissingCredentials);
+        }
+        // update the state with the updated vault data
         this.update((state) => {
-            state.vault = vault;
-            state.vaultEncryptionKey = exportedKeyString;
-            state.vaultEncryptionSalt = JSON.parse(vault).salt;
-            state.encryptedSeedlessEncryptionKey = (0, utils_1.bytesToBase64)(encryptedKey);
+            state.vault = updatedState.vault;
+            state.vaultEncryptionKey = updatedState.vaultEncryptionKey;
+            state.vaultEncryptionSalt = updatedState.vaultEncryptionSalt;
+            state.encryptedSeedlessEncryptionKey =
+                updatedState.encryptedSeedlessEncryptionKey;
         });
+        // cache the vault data to avoid decrypting the vault data multiple times
+        __classPrivateFieldSet(this, _SeedlessOnboardingController_cachedDecryptedVaultData, vaultData, "f");
     });
+}, _SeedlessOnboardingController_encryptSeedlessEncryptionKey = function _SeedlessOnboardingController_encryptSeedlessEncryptionKey(vaultEncryptionKey, pwEncKey) {
+    const aes = (0, webcrypto_1.managedNonce)(aes_1.gcm)(pwEncKey);
+    const encryptedKey = aes.encrypt((0, utils_2.utf8ToBytes)(vaultEncryptionKey));
+    return (0, utils_1.bytesToBase64)(encryptedKey);
 }, _SeedlessOnboardingController_getAccessTokenAndRevokeToken = 
 /**
  * Get the access token and revoke token from the state or the vault.
@@ -1537,18 +1638,7 @@ async function _SeedlessOnboardingController_assertPasswordInSync(options) {
  */
 async function _SeedlessOnboardingController_executeWithTokenRefresh(operation, operationName) {
     try {
-        // proactively check for expired tokens and refresh them if needed
-        const isNodeAuthTokenExpired = this.checkNodeAuthTokenExpired();
-        const isMetadataAccessTokenExpired = this.checkMetadataAccessTokenExpired();
-        // access token is only accessible when the vault is unlocked
-        // so skip the check if the vault is locked
-        let isAccessTokenExpired = false;
-        if (__classPrivateFieldGet(this, _SeedlessOnboardingController_isUnlocked, "f")) {
-            isAccessTokenExpired = this.checkAccessTokenExpired();
-        }
-        if (isNodeAuthTokenExpired ||
-            isMetadataAccessTokenExpired ||
-            isAccessTokenExpired) {
+        if (__classPrivateFieldGet(this, _SeedlessOnboardingController_instances, "m", _SeedlessOnboardingController_checkTokensExpired).call(this)) {
             log(`JWT token expired during ${operationName}, attempting to refresh tokens`, 'node auth token exp check');
             await this.refreshAuthTokens();
         }
@@ -1574,21 +1664,20 @@ async function _SeedlessOnboardingController_executeWithTokenRefresh(operation,
             throw error;
         }
     }
+}, _SeedlessOnboardingController_checkTokensExpired = function _SeedlessOnboardingController_checkTokensExpired() {
+    // proactively check for expired tokens and refresh them if needed
+    const isNodeAuthTokenExpired = this.checkNodeAuthTokenExpired();
+    const isMetadataAccessTokenExpired = this.checkMetadataAccessTokenExpired();
+    // access token is only accessible when the vault is unlocked
+    // so skip the check if the vault is locked
+    let isAccessTokenExpired = false;
+    if (__classPrivateFieldGet(this, _SeedlessOnboardingController_isUnlocked, "f")) {
+        isAccessTokenExpired = this.checkAccessTokenExpired();
+    }
+    return (isNodeAuthTokenExpired ||
+        isMetadataAccessTokenExpired ||
+        isAccessTokenExpired);
 };
-/**
- * Assert that the provided password is a valid non-empty string.
- *
- * @param password - The password to check.
- * @throws If the password is not a valid string.
- */
-function assertIsValidPassword(password) {
-    if (typeof password !== 'string') {
-        throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.WrongPasswordType);
-    }
-    if (!password?.length) {
-        throw new Error(constants_1.SeedlessOnboardingControllerErrorMessage.InvalidEmptyPassword);
-    }
-}
 /**
  * Lock the given mutex before executing the given function,
  * and release it after the function is resolved or after an