@metamask/profile-sync-controller 0.0.0 → 0.1.0

package/dist/chunk-V46WVGWN.js

@@ -0,0 +1,70 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined")
+    return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __accessCheck = (obj, member, msg) => {
+  if (!member.has(obj))
+    throw TypeError("Cannot " + msg);
+};
+var __privateGet = (obj, member, getter) => {
+  __accessCheck(obj, member, "read from private field");
+  return getter ? getter.call(obj) : member.get(obj);
+};
+var __privateAdd = (obj, member, value) => {
+  if (member.has(obj))
+    throw TypeError("Cannot add the same private member more than once");
+  member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
+};
+var __privateSet = (obj, member, value, setter) => {
+  __accessCheck(obj, member, "write to private field");
+  setter ? setter.call(obj, value) : member.set(obj, value);
+  return value;
+};
+var __privateMethod = (obj, member, method) => {
+  __accessCheck(obj, member, "access private method");
+  return method;
+};
+
+
+
+
+
+
+
+
+
+
+exports.__require = __require; exports.__commonJS = __commonJS; exports.__export = __export; exports.__toESM = __toESM; exports.__privateGet = __privateGet; exports.__privateAdd = __privateAdd; exports.__privateSet = __privateSet; exports.__privateMethod = __privateMethod;
+//# sourceMappingURL=chunk-V46WVGWN.js.map

package/dist/{chunk-UMKBFFZ5.mjs → chunk-VTM5T7Y4.mjs}

@@ -2,7 +2,7 @@ import {
   __privateAdd,
   __privateGet,
   __privateMethod
-} from "./chunk-XUI43LEZ.mjs";
+} from "./chunk-26CCETCM.mjs";
 
 // src/sdk/encryption.ts
 import { gcm } from "@noble/ciphers/aes";
@@ -27,12 +27,20 @@ var EncryptorDecryptor = class {
     __privateAdd(this, _decryptStringV1);
     __privateAdd(this, _encrypt);
     __privateAdd(this, _decrypt);
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
     __privateAdd(this, _ALGORITHM_NONCE_SIZE, 12);
     // 12 bytes
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
     __privateAdd(this, _ALGORITHM_KEY_SIZE, 16);
     // 16 bytes
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
     __privateAdd(this, _PBKDF2_SALT_SIZE, 16);
     // 16 bytes
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
     __privateAdd(this, _PBKDF2_ITERATIONS, 9e5);
   }
   encryptString(plaintext, password) {
@@ -117,15 +125,16 @@ decrypt_fn = function(ciphertextAndNonce, key) {
   );
   return gcm(key, nonce).decrypt(ciphertext);
 };
-var encryption = new EncryptorDecryptor();
-var encryption_default = encryption;
+var Encryption = new EncryptorDecryptor();
+var encryption_default = Encryption;
 function createSHA256Hash(data) {
   const hashedData = sha256(data);
   return bytesToHex(hashedData);
 }
 
 export {
+  Encryption,
   encryption_default,
   createSHA256Hash
 };
-//# sourceMappingURL=chunk-UMKBFFZ5.mjs.map
+//# sourceMappingURL=chunk-VTM5T7Y4.mjs.map

package/dist/chunk-VTM5T7Y4.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/encryption.ts"],"sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { pbkdf2 } from '@noble/hashes/pbkdf2';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nexport type EncryptedPayload = {\n  v: '1'; // version\n  d: string; // data\n  iterations: number;\n};\n\n/**\n * Converts Byte Array to Base64 String\n *\n * @param byteArray - array of bytes\n * @returns base64 string\n */\nfunction byteArrayToBase64(byteArray: Uint8Array): string {\n  return Buffer.from(byteArray).toString('base64');\n}\n\n/**\n * Converts Base64 String into Byte Array\n *\n * @param base64 - base64 encoded string\n * @returns byte array\n */\nfunction base64ToByteArray(base64: string): Uint8Array {\n  return new Uint8Array(Buffer.from(base64, 'base64'));\n}\n\n/**\n * Converts Bytes into UTF-8 Encoded String\n * @param byteArray - array of bytes\n * @returns uft-8 encoded string\n */\nfunction bytesToUtf8(byteArray: Uint8Array): string {\n  const decoder = new TextDecoder('utf-8');\n  return decoder.decode(byteArray);\n}\n\nclass EncryptorDecryptor {\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #ALGORITHM_NONCE_SIZE = 12; // 12 bytes\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #PBKDF2_SALT_SIZE = 16; // 16 bytes\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #PBKDF2_ITERATIONS = 900_000;\n\n  encryptString(plaintext: string, password: string): string {\n    try {\n      if (plaintext.trim().length === 0) {\n        throw new Error('No plain text provided');\n      }\n\n      return this.#encryptStringV1(plaintext, password);\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage = e instanceof Error ? e.message : String(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  decryptString(encryptedDataStr: string, password: string): string {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        return this.#decryptStringV1(encryptedData, password);\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${JSON.stringify(encryptedData)}`,\n      );\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage = e instanceof Error ? e.message : String(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  #encryptStringV1(plaintext: string, password: string): string {\n    const salt = randomBytes(this.#PBKDF2_SALT_SIZE);\n\n    // Derive a key using PBKDF2.\n    const key = pbkdf2(sha256, password, salt, {\n      c: this.#PBKDF2_ITERATIONS,\n      dkLen: this.#ALGORITHM_KEY_SIZE,\n    });\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      d: encryptedData,\n      iterations: this.#PBKDF2_ITERATIONS,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  #decryptStringV1(data: EncryptedPayload, password: string): string {\n    const { iterations, d: base64CiphertextAndNonceAndSalt } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, this.#PBKDF2_SALT_SIZE);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      this.#PBKDF2_SALT_SIZE,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key using PBKDF2.\n    const key = pbkdf2(sha256, password, salt, {\n      c: iterations,\n      dkLen: this.#ALGORITHM_KEY_SIZE,\n    });\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(this.#ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, this.#ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      this.#ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n}\n\nexport const Encryption = new EncryptorDecryptor();\nexport default Encryption;\n\n/**\n * Create a SHA-256 hash from a given string.\n *\n * @param data - input\n * @returns hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"],"mappings":";;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AAcrD,SAAS,kBAAkB,WAA+B;AACxD,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,QAAQ;AACjD;AAQA,SAAS,kBAAkB,QAA4B;AACrD,SAAO,IAAI,WAAW,OAAO,KAAK,QAAQ,QAAQ,CAAC;AACrD;AAOA,SAAS,YAAY,WAA+B;AAClD,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,SAAO,QAAQ,OAAO,SAAS;AACjC;AAxCA;AA0CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA+CE;AA4BA;AAyBA;AASA;AA1GA;AAAA;AAAA,8CAAwB;AAIxB;AAAA;AAAA;AAAA,4CAAsB;AAItB;AAAA;AAAA;AAAA,0CAAoB;AAIpB;AAAA;AAAA;AAAA,2CAAqB;AAAA;AAAA,EAErB,cAAc,WAAmB,UAA0B;AACzD,QAAI;AACF,UAAI,UAAU,KAAK,EAAE,WAAW,GAAG;AACjC,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAEA,aAAO,sBAAK,sCAAL,WAAsB,WAAW;AAAA,IAC1C,SAAS,GAAG;AAEV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAC9D,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,cAAc,kBAA0B,UAA0B;AAChE,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,eAAO,sBAAK,sCAAL,WAAsB,eAAe;AAAA,MAC9C;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,KAAK,UAAU,aAAa,CAAC;AAAA,MACvE;AAAA,IACF,SAAS,GAAG;AAEV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAC9D,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AA2EF;AArHE;AAIA;AAIA;AAIA;AAgCA;AAAA,qBAAgB,SAAC,WAAmB,UAA0B;AAC5D,QAAM,OAAO,YAAY,mBAAK,kBAAiB;AAG/C,QAAM,MAAM,OAAO,QAAQ,UAAU,MAAM;AAAA,IACzC,GAAG,mBAAK;AAAA,IACR,OAAO,mBAAK;AAAA,EACd,CAAC;AAGD,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,YAAY,mBAAK;AAAA,EACnB;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEA;AAAA,qBAAgB,SAAC,MAAwB,UAA0B;AACjE,QAAM,EAAE,YAAY,GAAG,gCAAgC,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,mBAAK,kBAAiB;AACtE,QAAM,qBAAqB,0BAA0B;AAAA,IACnD,mBAAK;AAAA,IACL,0BAA0B;AAAA,EAC5B;AAGA,QAAM,MAAM,OAAO,QAAQ,UAAU,MAAM;AAAA,IACzC,GAAG;AAAA,IACH,OAAO,mBAAK;AAAA,EACd,CAAC;AAGD,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,mBAAK,sBAAqB;AAGpD,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,mBAAK,sBAAqB;AACpE,QAAM,aAAa,mBAAmB;AAAA,IACpC,mBAAK;AAAA,IACL,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAGK,IAAM,aAAa,IAAI,mBAAmB;AACjD,IAAO,qBAAQ;AAQR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B;","names":[]}

package/dist/chunk-VYE2DKST.js

@@ -0,0 +1,102 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkGJJT2CALjs = require('./chunk-GJJT2CAL.js');
+
+
+var _chunkARWL2LBBjs = require('./chunk-ARWL2LBB.js');
+
+
+var _chunkK6G7X6PXjs = require('./chunk-K6G7X6PX.js');
+
+
+var _chunk7FCK4BY3js = require('./chunk-7FCK4BY3.js');
+
+
+var _chunkJTDFOATGjs = require('./chunk-JTDFOATG.js');
+
+
+
+var _chunkJWTNHCVGjs = require('./chunk-JWTNHCVG.js');
+
+
+
+var _chunkV46WVGWNjs = require('./chunk-V46WVGWN.js');
+
+// src/controllers/user-storage/index.ts
+var user_storage_exports = {};
+_chunkV46WVGWNjs.__export.call(void 0, user_storage_exports, {
+  Controller: () => _chunkARWL2LBBjs.UserStorageController,
+  Encryption: () => _chunkJWTNHCVGjs.encryption_default,
+  Mocks: () => fixtures_exports,
+  createSHA256Hash: () => _chunkJWTNHCVGjs.createSHA256Hash
+});
+
+// src/controllers/user-storage/__fixtures__/index.ts
+var fixtures_exports = {};
+_chunkV46WVGWNjs.__export.call(void 0, fixtures_exports, {
+  MOCK_ENCRYPTED_STORAGE_DATA: () => MOCK_ENCRYPTED_STORAGE_DATA,
+  MOCK_STORAGE_DATA: () => MOCK_STORAGE_DATA,
+  MOCK_STORAGE_KEY: () => MOCK_STORAGE_KEY,
+  MOCK_STORAGE_KEY_SIGNATURE: () => MOCK_STORAGE_KEY_SIGNATURE,
+  MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT: () => MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT,
+  getMockUserStorageGetResponse: () => getMockUserStorageGetResponse,
+  getMockUserStoragePutResponse: () => getMockUserStoragePutResponse,
+  mockEndpointGetUserStorage: () => mockEndpointGetUserStorage,
+  mockEndpointUpsertUserStorage: () => mockEndpointUpsertUserStorage
+});
+
+// src/controllers/user-storage/__fixtures__/mockStorage.ts
+var MOCK_STORAGE_KEY_SIGNATURE = "mockStorageKey";
+var MOCK_STORAGE_KEY = _chunkJWTNHCVGjs.createSHA256Hash.call(void 0, MOCK_STORAGE_KEY_SIGNATURE);
+var MOCK_STORAGE_DATA = JSON.stringify({ hello: "world" });
+var MOCK_ENCRYPTED_STORAGE_DATA = _chunkJTDFOATGjs.encryption_default.encryptString(
+  MOCK_STORAGE_DATA,
+  MOCK_STORAGE_KEY
+);
+
+// src/controllers/user-storage/__fixtures__/mockResponses.ts
+var MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT = `${_chunkK6G7X6PXjs.USER_STORAGE_ENDPOINT}${_chunk7FCK4BY3js.createEntryPath.call(void 0, 
+  "notificationSettings",
+  MOCK_STORAGE_KEY
+)}`;
+var MOCK_GET_USER_STORAGE_RESPONSE = {
+  HashedKey: "HASHED_KEY",
+  Data: MOCK_ENCRYPTED_STORAGE_DATA
+};
+var getMockUserStorageGetResponse = () => {
+  return {
+    url: MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT,
+    requestMethod: "GET",
+    response: MOCK_GET_USER_STORAGE_RESPONSE
+  };
+};
+var getMockUserStoragePutResponse = () => {
+  return {
+    url: MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT,
+    requestMethod: "PUT",
+    response: null
+  };
+};
+
+// src/controllers/user-storage/__fixtures__/mockServices.ts
+var import_nock = _chunkV46WVGWNjs.__toESM.call(void 0, _chunkGJJT2CALjs.require_nock.call(void 0, ));
+var mockEndpointGetUserStorage = (mockReply) => {
+  const mockResponse = getMockUserStorageGetResponse();
+  const reply = mockReply ?? {
+    status: 200,
+    body: mockResponse.response
+  };
+  const mockEndpoint = (0, import_nock.default)(mockResponse.url).get("").reply(reply.status, reply.body);
+  return mockEndpoint;
+};
+var mockEndpointUpsertUserStorage = (mockReply) => {
+  const mockResponse = getMockUserStoragePutResponse();
+  const mockEndpoint = (0, import_nock.default)(mockResponse.url).put("").reply(mockReply?.status ?? 204);
+  return mockEndpoint;
+};
+
+
+
+
+exports.fixtures_exports = fixtures_exports; exports.user_storage_exports = user_storage_exports;
+//# sourceMappingURL=chunk-VYE2DKST.js.map

package/dist/chunk-VYE2DKST.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/index.ts","../src/controllers/user-storage/__fixtures__/index.ts","../src/controllers/user-storage/__fixtures__/mockStorage.ts","../src/controllers/user-storage/__fixtures__/mockResponses.ts","../src/controllers/user-storage/__fixtures__/mockServices.ts"],"names":["encryption_default","nock"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEO,IAAM,6BAA6B;AACnC,IAAM,mBAAmB,iBAAiB,0BAA0B;AACpE,IAAM,oBAAoB,KAAK,UAAU,EAAE,OAAO,QAAQ,CAAC;AAC3D,IAAM,8BAA8BA,oBAAW;AAAA,EACpD;AAAA,EACA;AACF;;;ACGO,IAAM,2CAA2C,GAAG,qBAAqB,GAAG;AAAA,EACjF;AAAA,EACA;AACF,CAAC;AAED,IAAM,iCAAyD;AAAA,EAC7D,WAAW;AAAA,EACX,MAAM;AACR;AAEO,IAAM,gCAAgC,MAAM;AACjD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,gCAAgC,MAAM;AACjD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;;;ACnCA,kBAAiB;AAYV,IAAM,6BAA6B,CAAC,cAA0B;AACnE,QAAM,eAAe,8BAA8B;AACnD,QAAM,QAAQ,aAAa;AAAA,IACzB,QAAQ;AAAA,IACR,MAAM,aAAa;AAAA,EACrB;AAEA,QAAM,mBAAe,YAAAC,SAAK,aAAa,GAAG,EACvC,IAAI,EAAE,EACN,MAAM,MAAM,QAAQ,MAAM,IAAI;AAEjC,SAAO;AACT;AAEO,IAAM,gCAAgC,CAC3C,cACG;AACH,QAAM,eAAe,8BAA8B;AACnD,QAAM,mBAAe,YAAAA,SAAK,aAAa,GAAG,EACvC,IAAI,EAAE,EACN,MAAM,WAAW,UAAU,GAAG;AACjC,SAAO;AACT","sourcesContent":["import Controller from './UserStorageController';\n\nexport { Controller };\nexport * from './UserStorageController';\nexport * from './encryption';\nexport * as Mocks from './__fixtures__';\n","export * from './mockResponses';\nexport * from './mockServices';\nexport * from './mockStorage';\n","import encryption, { createSHA256Hash } from '../encryption';\n\nexport const MOCK_STORAGE_KEY_SIGNATURE = 'mockStorageKey';\nexport const MOCK_STORAGE_KEY = createSHA256Hash(MOCK_STORAGE_KEY_SIGNATURE);\nexport const MOCK_STORAGE_DATA = JSON.stringify({ hello: 'world' });\nexport const MOCK_ENCRYPTED_STORAGE_DATA = encryption.encryptString(\n  MOCK_STORAGE_DATA,\n  MOCK_STORAGE_KEY,\n);\n","import { createEntryPath } from '../schema';\nimport type { GetUserStorageResponse } from '../services';\nimport { USER_STORAGE_ENDPOINT } from '../services';\nimport { MOCK_ENCRYPTED_STORAGE_DATA, MOCK_STORAGE_KEY } from './mockStorage';\n\ntype MockResponse = {\n  url: string;\n  requestMethod: 'GET' | 'POST' | 'PUT';\n  response: unknown;\n};\n\nexport const MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT = `${USER_STORAGE_ENDPOINT}${createEntryPath(\n  'notificationSettings',\n  MOCK_STORAGE_KEY,\n)}`;\n\nconst MOCK_GET_USER_STORAGE_RESPONSE: GetUserStorageResponse = {\n  HashedKey: 'HASHED_KEY',\n  Data: MOCK_ENCRYPTED_STORAGE_DATA,\n};\n\nexport const getMockUserStorageGetResponse = () => {\n  return {\n    url: MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT,\n    requestMethod: 'GET',\n    response: MOCK_GET_USER_STORAGE_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const getMockUserStoragePutResponse = () => {\n  return {\n    url: MOCK_USER_STORAGE_NOTIFICATIONS_ENDPOINT,\n    requestMethod: 'PUT',\n    response: null,\n  } satisfies MockResponse;\n};\n","import nock from 'nock';\n\nimport {\n  getMockUserStorageGetResponse,\n  getMockUserStoragePutResponse,\n} from './mockResponses';\n\ntype MockReply = {\n  status: nock.StatusCode;\n  body?: nock.Body;\n};\n\nexport const mockEndpointGetUserStorage = (mockReply?: MockReply) => {\n  const mockResponse = getMockUserStorageGetResponse();\n  const reply = mockReply ?? {\n    status: 200,\n    body: mockResponse.response,\n  };\n\n  const mockEndpoint = nock(mockResponse.url)\n    .get('')\n    .reply(reply.status, reply.body);\n\n  return mockEndpoint;\n};\n\nexport const mockEndpointUpsertUserStorage = (\n  mockReply?: Pick<MockReply, 'status'>,\n) => {\n  const mockResponse = getMockUserStoragePutResponse();\n  const mockEndpoint = nock(mockResponse.url)\n    .put('')\n    .reply(mockReply?.status ?? 204);\n  return mockEndpoint;\n};\n"]}

package/dist/chunk-W7JFFMEZ.mjs

@@ -0,0 +1,98 @@
+import {
+  getEnvUrls,
+  getOidcClientId
+} from "./chunk-GLS4QZF6.mjs";
+
+// src/controllers/authentication/services.ts
+var ENV_URLS = getEnvUrls("prd" /* PRD */);
+var AUTH_ENDPOINT = ENV_URLS.authApiUrl;
+var AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;
+var AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;
+var OIDC_ENDPOINT = ENV_URLS.oidcApiUrl || "";
+var OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;
+var OIDC_CLIENT_ID = getOidcClientId("prd" /* PRD */, "extension" /* EXTENSION */);
+var OIDC_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:jwt-bearer";
+async function getNonce(publicKey) {
+  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);
+  nonceUrl.searchParams.set("identifier", publicKey);
+  try {
+    const nonceResponse = await fetch(nonceUrl.toString());
+    if (!nonceResponse.ok) {
+      return null;
+    }
+    const nonceJson = await nonceResponse.json();
+    return nonceJson?.nonce ?? null;
+  } catch (e) {
+    console.error("authentication-controller/services: unable to get nonce", e);
+    return null;
+  }
+}
+async function login(rawMessage, signature, clientMetaMetrics) {
+  try {
+    const response = await fetch(AUTH_LOGIN_ENDPOINT, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        signature,
+        // eslint-disable-next-line @typescript-eslint/naming-convention
+        raw_message: rawMessage,
+        metametrics: {
+          // eslint-disable-next-line @typescript-eslint/naming-convention
+          metametrics_id: clientMetaMetrics.metametricsId,
+          agent: clientMetaMetrics.agent
+        }
+      })
+    });
+    if (!response.ok) {
+      return null;
+    }
+    const loginResponse = await response.json();
+    return loginResponse ?? null;
+  } catch (e) {
+    console.error("authentication-controller/services: unable to login", e);
+    return null;
+  }
+}
+async function getAccessToken(jwtToken) {
+  const headers = new Headers({
+    "Content-Type": "application/x-www-form-urlencoded"
+  });
+  const urlEncodedBody = new URLSearchParams();
+  urlEncodedBody.append("grant_type", OIDC_GRANT_TYPE);
+  urlEncodedBody.append("client_id", OIDC_CLIENT_ID);
+  urlEncodedBody.append("assertion", jwtToken);
+  try {
+    const response = await fetch(OIDC_TOKENS_ENDPOINT, {
+      method: "POST",
+      headers,
+      body: urlEncodedBody.toString()
+    });
+    if (!response.ok) {
+      return null;
+    }
+    const accessTokenResponse = await response.json();
+    return accessTokenResponse?.access_token ?? null;
+  } catch (e) {
+    console.error(
+      "authentication-controller/services: unable to get access token",
+      e
+    );
+    return null;
+  }
+}
+function createLoginRawMessage(nonce, publicKey) {
+  return `metamask:${nonce}:${publicKey}`;
+}
+
+export {
+  AUTH_NONCE_ENDPOINT,
+  AUTH_LOGIN_ENDPOINT,
+  OIDC_TOKENS_ENDPOINT,
+  getNonce,
+  login,
+  getAccessToken,
+  createLoginRawMessage
+};
+//# sourceMappingURL=chunk-W7JFFMEZ.mjs.map

package/dist/chunk-W7JFFMEZ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/services.ts"],"sourcesContent":["import { Env, Platform, getEnvUrls, getOidcClientId } from '../../sdk';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nconst AUTH_ENDPOINT: string = ENV_URLS.authApiUrl;\nexport const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;\nexport const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;\n\nconst OIDC_ENDPOINT: string = ENV_URLS.oidcApiUrl || '';\nexport const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;\nconst OIDC_CLIENT_ID = getOidcClientId(Env.PRD, Platform.EXTENSION);\nconst OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n\nexport type NonceResponse = {\n  nonce: string;\n};\n\n/**\n * Auth Service - Get Nonce. Used for the initial JWTBearer flow\n *\n * @param publicKey - public key to associate a nonce with\n * @returns the nonce or null if failed\n */\nexport async function getNonce(publicKey: string): Promise<string | null> {\n  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);\n  nonceUrl.searchParams.set('identifier', publicKey);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      return null;\n    }\n\n    const nonceJson: NonceResponse = await nonceResponse.json();\n    return nonceJson?.nonce ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to get nonce', e);\n    return null;\n  }\n}\n\n/**\n * The Login API Server Response Shape\n */\nexport type LoginResponse = {\n  token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: string;\n  /**\n   * Contains anonymous information about the logged in profile.\n   *\n   * @property identifier_id - a deterministic unique identifier on the method used to sign in\n   * @property profile_id - a unique id for a given profile\n   * @property metametrics_id - an anonymous server id\n   */\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: string;\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: string;\n  };\n};\n\ntype ClientMetaMetrics = {\n  metametricsId: string;\n  agent: 'extension' | 'mobile';\n};\n\n/**\n * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.\n *\n * @param rawMessage - the original message before signing\n * @param signature - the signed message\n * @param clientMetaMetrics - optional client metametrics id (to associate on backend)\n * @returns The Login Response\n */\nexport async function login(\n  rawMessage: string,\n  signature: string,\n  clientMetaMetrics: ClientMetaMetrics,\n): Promise<LoginResponse | null> {\n  try {\n    const response = await fetch(AUTH_LOGIN_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n        metametrics: {\n          // eslint-disable-next-line @typescript-eslint/naming-convention\n          metametrics_id: clientMetaMetrics.metametricsId,\n          agent: clientMetaMetrics.agent,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const loginResponse: LoginResponse = await response.json();\n    return loginResponse ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to login', e);\n    return null;\n  }\n}\n\n/**\n * The Auth API Token Response Shape\n */\nexport type OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: number;\n};\n\n/**\n * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)\n * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints\n *\n * @param jwtToken - the JWT Auth Token, received from `/login`\n * @returns JWT Access token to store and use on authorized endpoints.\n */\nexport async function getAccessToken(jwtToken: string): Promise<string | null> {\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);\n  urlEncodedBody.append('client_id', OIDC_CLIENT_ID);\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKENS_ENDPOINT, {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const accessTokenResponse: OAuthTokenResponse = await response.json();\n    return accessTokenResponse?.access_token ?? null;\n  } catch (e) {\n    console.error(\n      'authentication-controller/services: unable to get access token',\n      e,\n    );\n    return null;\n  }\n}\n\n/**\n * Utility to create the raw login message for the JWT bearer flow (via SRP)\n *\n * @param nonce - nonce received from `/nonce` endpoint\n * @param publicKey - public key used to retrieve nonce and for message signing\n * @returns Raw Message which will be used for signing & logging in.\n */\nexport function createLoginRawMessage(\n  nonce: string,\n  publicKey: string,\n): `metamask:${string}:${string}` {\n  return `metamask:${nonce}:${publicKey}` as const;\n}\n"],"mappings":";;;;;;AAEA,IAAM,WAAW,0BAAkB;AAEnC,IAAM,gBAAwB,SAAS;AAChC,IAAM,sBAAsB,GAAG,aAAa;AAC5C,IAAM,sBAAsB,GAAG,aAAa;AAEnD,IAAM,gBAAwB,SAAS,cAAc;AAC9C,IAAM,uBAAuB,GAAG,aAAa;AACpD,IAAM,iBAAiB,4DAA2C;AAClE,IAAM,kBAAkB;AAYxB,eAAsB,SAAS,WAA2C;AACxE,QAAM,WAAW,IAAI,IAAI,mBAAmB;AAC5C,WAAS,aAAa,IAAI,cAAc,SAAS;AAEjD,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,YAA2B,MAAM,cAAc,KAAK;AAC1D,WAAO,WAAW,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,YAAQ,MAAM,2DAA2D,CAAC;AAC1E,WAAO;AAAA,EACT;AACF;AAqCA,eAAsB,MACpB,YACA,WACA,mBAC+B;AAC/B,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,qBAAqB;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA,QAEA,aAAa;AAAA,QACb,aAAa;AAAA;AAAA,UAEX,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,kBAAkB;AAAA,QAC3B;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,gBAA+B,MAAM,SAAS,KAAK;AACzD,WAAO,iBAAiB;AAAA,EAC1B,SAAS,GAAG;AACV,YAAQ,MAAM,uDAAuD,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAmBA,eAAsB,eAAe,UAA0C;AAC7E,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,eAAe;AACnD,iBAAe,OAAO,aAAa,cAAc;AACjD,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,sBAAsB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,sBAA0C,MAAM,SAAS,KAAK;AACpE,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C,SAAS,GAAG;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,sBACd,OACA,WACgC;AAChC,SAAO,YAAY,KAAK,IAAI,SAAS;AACvC;","names":[]}

package/dist/chunk-WAS6V24H.js

@@ -0,0 +1,221 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunk2MVOZPBNjs = require('./chunk-2MVOZPBN.js');
+
+
+
+var _chunkIPSBQ3MSjs = require('./chunk-IPSBQ3MS.js');
+
+
+
+
+
+var _chunkV46WVGWNjs = require('./chunk-V46WVGWN.js');
+
+// src/controllers/authentication/AuthenticationController.ts
+var _basecontroller = require('@metamask/base-controller');
+var THIRTY_MIN_MS = 1e3 * 60 * 30;
+var controllerName = "AuthenticationController";
+var defaultState = { isSignedIn: false };
+var metadata = {
+  isSignedIn: {
+    persist: true,
+    anonymous: true
+  },
+  sessionData: {
+    persist: true,
+    anonymous: false
+  }
+};
+var _metametrics, _registerMessageHandlers, registerMessageHandlers_fn, _assertLoggedIn, assertLoggedIn_fn, _performAuthenticationFlow, performAuthenticationFlow_fn, _hasValidSession, hasValidSession_fn, _snapGetPublicKey, snapGetPublicKey_fn, _snapSignMessage, snapSignMessage_fn;
+var AuthenticationController = class extends _basecontroller.BaseController {
+  constructor({
+    messenger,
+    state,
+    metametrics
+  }) {
+    super({
+      messenger,
+      metadata,
+      name: controllerName,
+      state: { ...defaultState, ...state }
+    });
+    /**
+     * Constructor helper for registering this controller's messaging system
+     * actions.
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _registerMessageHandlers);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _assertLoggedIn);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _performAuthenticationFlow);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _hasValidSession);
+    /**
+     * Returns the auth snap public key.
+     *
+     * @returns The snap public key.
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _snapGetPublicKey);
+    /**
+     * Signs a specific message using an underlying auth snap.
+     *
+     * @param message - A specific tagged message to sign.
+     * @returns A Signature created by the snap.
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _snapSignMessage);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _metametrics, void 0);
+    _chunkV46WVGWNjs.__privateSet.call(void 0, this, _metametrics, metametrics);
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+  }
+  async performSignIn() {
+    const { accessToken } = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return accessToken;
+  }
+  performSignOut() {
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    this.update((state) => {
+      state.isSignedIn = false;
+      state.sessionData = void 0;
+    });
+  }
+  async getBearerToken() {
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    if (_chunkV46WVGWNjs.__privateMethod.call(void 0, this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
+      return this.state.sessionData.accessToken;
+    }
+    const { accessToken } = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return accessToken;
+  }
+  /**
+   * Will return a session profile.
+   * Throws if a user is not logged in.
+   *
+   * @returns profile for the session.
+   */
+  async getSessionProfile() {
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    if (_chunkV46WVGWNjs.__privateMethod.call(void 0, this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
+      return this.state.sessionData.profile;
+    }
+    const { profile } = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return profile;
+  }
+  isSignedIn() {
+    return this.state.isSignedIn;
+  }
+};
+_metametrics = new WeakMap();
+_registerMessageHandlers = new WeakSet();
+registerMessageHandlers_fn = function() {
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:getBearerToken",
+    this.getBearerToken.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:getSessionProfile",
+    this.getSessionProfile.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:isSignedIn",
+    this.isSignedIn.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:performSignIn",
+    this.performSignIn.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:performSignOut",
+    this.performSignOut.bind(this)
+  );
+};
+_assertLoggedIn = new WeakSet();
+assertLoggedIn_fn = function() {
+  if (!this.state.isSignedIn) {
+    throw new Error(
+      `${controllerName}: Unable to call method, user is not authenticated`
+    );
+  }
+};
+_performAuthenticationFlow = new WeakSet();
+performAuthenticationFlow_fn = async function() {
+  try {
+    const publicKey = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _snapGetPublicKey, snapGetPublicKey_fn).call(this);
+    const nonce = await _chunk2MVOZPBNjs.getNonce.call(void 0, publicKey);
+    if (!nonce) {
+      throw new Error(`Unable to get nonce`);
+    }
+    const rawMessage = _chunk2MVOZPBNjs.createLoginRawMessage.call(void 0, nonce, publicKey);
+    const signature = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _snapSignMessage, snapSignMessage_fn).call(this, rawMessage);
+    const loginResponse = await _chunk2MVOZPBNjs.login.call(void 0, rawMessage, signature, {
+      metametricsId: _chunkV46WVGWNjs.__privateGet.call(void 0, this, _metametrics).getMetaMetricsId(),
+      agent: _chunkV46WVGWNjs.__privateGet.call(void 0, this, _metametrics).agent
+    });
+    if (!loginResponse?.token) {
+      throw new Error(`Unable to login`);
+    }
+    const profile = {
+      identifierId: loginResponse.profile.identifier_id,
+      profileId: loginResponse.profile.profile_id
+    };
+    const accessToken = await _chunk2MVOZPBNjs.getAccessToken.call(void 0, loginResponse.token);
+    if (!accessToken) {
+      throw new Error(`Unable to get Access Token`);
+    }
+    this.update((state) => {
+      state.isSignedIn = true;
+      const expiresIn = /* @__PURE__ */ new Date();
+      expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);
+      state.sessionData = {
+        profile,
+        accessToken,
+        expiresIn: expiresIn.toString()
+      };
+    });
+    return {
+      profile,
+      accessToken
+    };
+  } catch (e) {
+    console.error("Failed to authenticate", e);
+    await this.messagingSystem.call(
+      "UserStorageController:disableProfileSyncing"
+    );
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new Error(
+      `${controllerName}: Failed to authenticate - ${errorMessage}`
+    );
+  }
+};
+_hasValidSession = new WeakSet();
+hasValidSession_fn = function(sessionData) {
+  if (!sessionData) {
+    return false;
+  }
+  const prevDate = Date.parse(sessionData.expiresIn);
+  if (isNaN(prevDate)) {
+    return false;
+  }
+  const currentDate = /* @__PURE__ */ new Date();
+  const diffMs = Math.abs(currentDate.getTime() - prevDate);
+  return THIRTY_MIN_MS > diffMs;
+};
+_snapGetPublicKey = new WeakSet();
+snapGetPublicKey_fn = function() {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    _chunkIPSBQ3MSjs.createSnapPublicKeyRequest.call(void 0, )
+  );
+};
+_snapSignMessage = new WeakSet();
+snapSignMessage_fn = function(message) {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    _chunkIPSBQ3MSjs.createSnapSignMessageRequest.call(void 0, message)
+  );
+};
+
+
+
+exports.AuthenticationController = AuthenticationController;
+//# sourceMappingURL=chunk-WAS6V24H.js.map

package/dist/chunk-WAS6V24H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/AuthenticationController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA,SAAS,sBAAsB;AAe/B,IAAM,gBAAgB,MAAO,KAAK;AAElC,IAAM,iBAAiB;AA8BvB,IAAM,eAA8C,EAAE,YAAY,MAAM;AACxE,IAAM,WAAyD;AAAA,EAC7D,YAAY;AAAA,IACV,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AA7DA;AAyGA,IAAqB,2BAArB,cAAsD,eAIpD;AAAA,EAGA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAQG;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM;AAAA,IACrC,CAAC;AAWH;AAAA;AAAA;AAAA;AAAA;AAyEA;AAQA,uBAAM;AAgEN;AAuBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AApNA;AAsBE,uBAAK,cAAe;AAEpB,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,gBAAiC;AAC5C,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA,EAEO,iBAAuB;AAC5B,0BAAK,oCAAL;AAEA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,iBAAkC;AAC7C,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,oBAA6C;AACxD,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,sBAAK,0DAAL;AAC1B,WAAO;AAAA,EACT;AAAA,EAEO,aAAsB;AAC3B,WAAO,KAAK,MAAM;AAAA,EACpB;AAoHF;AA1NE;AA+BA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,WAAW,KAAK,IAAI;AAAA,EAC3B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AACF;AAgDA;AAAA,oBAAe,WAAS;AACtB,MAAI,CAAC,KAAK,MAAM,YAAY;AAC1B,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAEM;AAAA,+BAA0B,iBAG7B;AACD,MAAI;AAEF,UAAM,YAAY,MAAM,sBAAK,wCAAL;AACxB,UAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAGA,UAAM,aAAa,sBAAsB,OAAO,SAAS;AACzD,UAAM,YAAY,MAAM,sBAAK,sCAAL,WAAsB;AAC9C,UAAM,gBAAgB,MAAM,MAAM,YAAY,WAAW;AAAA,MACvD,eAAe,mBAAK,cAAa,iBAAiB;AAAA,MAClD,OAAO,mBAAK,cAAa;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,eAAe,OAAO;AACzB,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAM,UAA0B;AAAA,MAC9B,cAAc,cAAc,QAAQ;AAAA,MACpC,WAAW,cAAc,QAAQ;AAAA,IACnC;AAGA,UAAM,cAAc,MAAM,eAAe,cAAc,KAAK;AAC5D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAGA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,YAAY,oBAAI,KAAK;AAC3B,gBAAU,QAAQ,UAAU,QAAQ,IAAI,aAAa;AACrD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,WAAW,UAAU,SAAS;AAAA,MAChC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,MAAM,0BAA0B,CAAC;AAEzC,UAAM,KAAK,gBAAgB;AAAA,MACzB;AAAA,IACF;AACA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,GAAG,cAAc,8BAA8B,YAAY;AAAA,IAC7D;AAAA,EACF;AACF;AAEA;AAAA,qBAAgB,SACd,aAC4B;AAC5B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,SAAS;AACjD,MAAI,MAAM,QAAQ,GAAG;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAI,KAAK;AAC7B,QAAM,SAAS,KAAK,IAAI,YAAY,QAAQ,IAAI,QAAQ;AAExD,SAAO,gBAAgB;AACzB;AAOA;AAAA,sBAAiB,WAAoB;AACnC,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,2BAA2B;AAAA,EAC7B;AACF;AAQA;AAAA,qBAAgB,SAAC,SAAgD;AAC/D,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AACF","sourcesContent":["import type {\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport type { UserStorageControllerDisableProfileSyncing } from '../user-storage/UserStorageController';\nimport {\n  createSnapPublicKeyRequest,\n  createSnapSignMessageRequest,\n} from './auth-snap-requests';\nimport {\n  createLoginRawMessage,\n  getAccessToken,\n  getNonce,\n  login,\n} from './services';\n\nconst THIRTY_MIN_MS = 1000 * 60 * 30;\n\nconst controllerName = 'AuthenticationController';\n\n// State\ntype SessionProfile = {\n  identifierId: string;\n  profileId: string;\n};\n\ntype SessionData = {\n  /** profile - anonymous profile data for the given logged in user */\n  profile: SessionProfile;\n  /** accessToken - used to make requests authorized endpoints */\n  accessToken: string;\n  /** expiresIn - string date to determine if new access token is required  */\n  expiresIn: string;\n};\n\ntype MetaMetricsAuth = {\n  getMetaMetricsId: () => string;\n  agent: 'extension' | 'mobile';\n};\n\nexport type AuthenticationControllerState = {\n  /**\n   * Global isSignedIn state.\n   * Can be used to determine if \"Profile Syncing\" is enabled.\n   */\n  isSignedIn: boolean;\n  sessionData?: SessionData;\n};\nconst defaultState: AuthenticationControllerState = { isSignedIn: false };\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    persist: true,\n    anonymous: true,\n  },\n  sessionData: {\n    persist: true,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof AuthenticationController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: AuthenticationController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performSignIn'\n  | 'performSignOut'\n  | 'getBearerToken'\n  | 'getSessionProfile'\n  | 'isSignedIn'\n>;\nexport type Actions = ActionsObj[keyof ActionsObj];\nexport type AuthenticationControllerPerformSignIn = ActionsObj['performSignIn'];\nexport type AuthenticationControllerPerformSignOut =\n  ActionsObj['performSignOut'];\nexport type AuthenticationControllerGetBearerToken =\n  ActionsObj['getBearerToken'];\nexport type AuthenticationControllerGetSessionProfile =\n  ActionsObj['getSessionProfile'];\nexport type AuthenticationControllerIsSignedIn = ActionsObj['isSignedIn'];\n\n// Allowed Actions\nexport type AllowedActions =\n  | HandleSnapRequest\n  | UserStorageControllerDisableProfileSyncing;\n\n// Messenger\nexport type AuthenticationControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  never,\n  AllowedActions['type'],\n  never\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Global Profile Syncing and Notifications\n */\nexport default class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  #metametrics: MetaMetricsAuth;\n\n  constructor({\n    messenger,\n    state,\n    metametrics,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    this.#metametrics = metametrics;\n\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getBearerToken',\n      this.getBearerToken.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getSessionProfile',\n      this.getSessionProfile.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:isSignedIn',\n      this.isSignedIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignIn',\n      this.performSignIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignOut',\n      this.performSignOut.bind(this),\n    );\n  }\n\n  public async performSignIn(): Promise<string> {\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  public performSignOut(): void {\n    this.#assertLoggedIn();\n\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.sessionData = undefined;\n    });\n  }\n\n  public async getBearerToken(): Promise<string> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.accessToken;\n    }\n\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  /**\n   * Will return a session profile.\n   * Throws if a user is not logged in.\n   *\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(): Promise<SessionProfile> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.profile;\n    }\n\n    const { profile } = await this.#performAuthenticationFlow();\n    return profile;\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  #assertLoggedIn(): void {\n    if (!this.state.isSignedIn) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  async #performAuthenticationFlow(): Promise<{\n    profile: SessionProfile;\n    accessToken: string;\n  }> {\n    try {\n      // 1. Nonce\n      const publicKey = await this.#snapGetPublicKey();\n      const nonce = await getNonce(publicKey);\n      if (!nonce) {\n        throw new Error(`Unable to get nonce`);\n      }\n\n      // 2. Login\n      const rawMessage = createLoginRawMessage(nonce, publicKey);\n      const signature = await this.#snapSignMessage(rawMessage);\n      const loginResponse = await login(rawMessage, signature, {\n        metametricsId: this.#metametrics.getMetaMetricsId(),\n        agent: this.#metametrics.agent,\n      });\n      if (!loginResponse?.token) {\n        throw new Error(`Unable to login`);\n      }\n\n      const profile: SessionProfile = {\n        identifierId: loginResponse.profile.identifier_id,\n        profileId: loginResponse.profile.profile_id,\n      };\n\n      // 3. Trade for Access Token\n      const accessToken = await getAccessToken(loginResponse.token);\n      if (!accessToken) {\n        throw new Error(`Unable to get Access Token`);\n      }\n\n      // Update Internal State\n      this.update((state) => {\n        state.isSignedIn = true;\n        const expiresIn = new Date();\n        expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);\n        state.sessionData = {\n          profile,\n          accessToken,\n          expiresIn: expiresIn.toString(),\n        };\n      });\n\n      return {\n        profile,\n        accessToken,\n      };\n    } catch (e) {\n      console.error('Failed to authenticate', e);\n      // Disable Profile Syncing\n      await this.messagingSystem.call(\n        'UserStorageController:disableProfileSyncing',\n      );\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new Error(\n        `${controllerName}: Failed to authenticate - ${errorMessage}`,\n      );\n    }\n  }\n\n  #hasValidSession(\n    sessionData: SessionData | undefined,\n  ): sessionData is SessionData {\n    if (!sessionData) {\n      return false;\n    }\n\n    const prevDate = Date.parse(sessionData.expiresIn);\n    if (isNaN(prevDate)) {\n      return false;\n    }\n\n    const currentDate = new Date();\n    const diffMs = Math.abs(currentDate.getTime() - prevDate);\n\n    return THIRTY_MIN_MS > diffMs;\n  }\n\n  /**\n   * Returns the auth snap public key.\n   *\n   * @returns The snap public key.\n   */\n  #snapGetPublicKey(): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapPublicKeyRequest(),\n    ) as Promise<string>;\n  }\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    ) as Promise<string>;\n  }\n}\n"]}