@metamask/profile-sync-controller 0.0.0 → 0.1.0

package/dist/chunk-772MKTIO.mjs

@@ -0,0 +1,25 @@
+import {
+  createSHA256Hash
+} from "./chunk-QE2F5AZL.mjs";
+
+// src/controllers/user-storage/schema.ts
+var USER_STORAGE_ENTRIES = {
+  notificationSettings: {
+    path: "notifications",
+    entryName: "notificationSettings"
+  }
+};
+function createEntryPath(entryKey, storageKey) {
+  const entry = USER_STORAGE_ENTRIES[entryKey];
+  if (!entry) {
+    throw new Error(`user-storage - invalid entry provided: ${entryKey}`);
+  }
+  const hashedKey = createSHA256Hash(entry.entryName + storageKey);
+  return `/${entry.path}/${hashedKey}`;
+}
+
+export {
+  USER_STORAGE_ENTRIES,
+  createEntryPath
+};
+//# sourceMappingURL=chunk-772MKTIO.mjs.map

package/dist/chunk-772MKTIO.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"sourcesContent":["import { createSHA256Hash } from './encryption';\n\ntype UserStorageEntry = { path: string; entryName: string };\n\n/**\n * The User Storage Endpoint requires a path and an entry name.\n * Developers can provide additional paths by extending this variable below\n */\nexport const USER_STORAGE_ENTRIES = {\n  notificationSettings: {\n    path: 'notifications',\n    entryName: 'notificationSettings',\n  },\n} satisfies Record<string, UserStorageEntry>;\n\nexport type UserStorageEntryKeys = keyof typeof USER_STORAGE_ENTRIES;\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param entryKey - storage schema entry key\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n  entryKey: UserStorageEntryKeys,\n  storageKey: string,\n): string {\n  const entry = USER_STORAGE_ENTRIES[entryKey];\n  if (!entry) {\n    throw new Error(`user-storage - invalid entry provided: ${entryKey}`);\n  }\n\n  const hashedKey = createSHA256Hash(entry.entryName + storageKey);\n  return `/${entry.path}/${hashedKey}`;\n}\n"],"mappings":";;;;;AAQO,IAAM,uBAAuB;AAAA,EAClC,sBAAsB;AAAA,IACpB,MAAM;AAAA,IACN,WAAW;AAAA,EACb;AACF;AAaO,SAAS,gBACd,UACA,YACQ;AACR,QAAM,QAAQ,qBAAqB,QAAQ;AAC3C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,0CAA0C,QAAQ,EAAE;AAAA,EACtE;AAEA,QAAM,YAAY,iBAAiB,MAAM,YAAY,UAAU;AAC/D,SAAO,IAAI,MAAM,IAAI,IAAI,SAAS;AACpC;","names":[]}

package/dist/chunk-7FCK4BY3.js

@@ -0,0 +1,25 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkJWTNHCVGjs = require('./chunk-JWTNHCVG.js');
+
+// src/controllers/user-storage/schema.ts
+var USER_STORAGE_ENTRIES = {
+  notificationSettings: {
+    path: "notifications",
+    entryName: "notificationSettings"
+  }
+};
+function createEntryPath(entryKey, storageKey) {
+  const entry = USER_STORAGE_ENTRIES[entryKey];
+  if (!entry) {
+    throw new Error(`user-storage - invalid entry provided: ${entryKey}`);
+  }
+  const hashedKey = _chunkJWTNHCVGjs.createSHA256Hash.call(void 0, entry.entryName + storageKey);
+  return `/${entry.path}/${hashedKey}`;
+}
+
+
+
+
+exports.USER_STORAGE_ENTRIES = USER_STORAGE_ENTRIES; exports.createEntryPath = createEntryPath;
+//# sourceMappingURL=chunk-7FCK4BY3.js.map

package/dist/chunk-7FCK4BY3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"names":[],"mappings":";;;;;AAQO,IAAM,uBAAuB;AAAA,EAClC,sBAAsB;AAAA,IACpB,MAAM;AAAA,IACN,WAAW;AAAA,EACb;AACF;AAaO,SAAS,gBACd,UACA,YACQ;AACR,QAAM,QAAQ,qBAAqB,QAAQ;AAC3C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,0CAA0C,QAAQ,EAAE;AAAA,EACtE;AAEA,QAAM,YAAY,iBAAiB,MAAM,YAAY,UAAU;AAC/D,SAAO,IAAI,MAAM,IAAI,IAAI,SAAS;AACpC","sourcesContent":["import { createSHA256Hash } from './encryption';\n\ntype UserStorageEntry = { path: string; entryName: string };\n\n/**\n * The User Storage Endpoint requires a path and an entry name.\n * Developers can provide additional paths by extending this variable below\n */\nexport const USER_STORAGE_ENTRIES = {\n  notificationSettings: {\n    path: 'notifications',\n    entryName: 'notificationSettings',\n  },\n} satisfies Record<string, UserStorageEntry>;\n\nexport type UserStorageEntryKeys = keyof typeof USER_STORAGE_ENTRIES;\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param entryKey - storage schema entry key\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n  entryKey: UserStorageEntryKeys,\n  storageKey: string,\n): string {\n  const entry = USER_STORAGE_ENTRIES[entryKey];\n  if (!entry) {\n    throw new Error(`user-storage - invalid entry provided: ${entryKey}`);\n  }\n\n  const hashedKey = createSHA256Hash(entry.entryName + storageKey);\n  return `/${entry.path}/${hashedKey}`;\n}\n"]}

package/dist/{chunk-CYGZ4WLJ.mjs → chunk-7VMXBDXN.mjs}

@@ -1,15 +1,17 @@
 import {
   getEnvUrls,
   getOidcClientId
-} from "./chunk-WJRV2JCX.mjs";
+} from "./chunk-GLS4QZF6.mjs";
 import {
   NonceRetrievalError,
+  PairError,
   SignInError,
   ValidationError
-} from "./chunk-BHVT2QEA.mjs";
+} from "./chunk-TFFQFIJV.mjs";
 
 // src/sdk/authentication-jwt-bearer/services.ts
 var NONCE_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/nonce`;
+var PAIR_IDENTIFIERS = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/identifiers/pair`;
 var OIDC_TOKEN_URL = (env) => `${getEnvUrls(env).oidcApiUrl}/oauth2/token`;
 var SRP_LOGIN_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/srp/login`;
 var SIWE_LOGIN_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/siwe/login`;
@@ -25,6 +27,31 @@ var getAuthenticationUrl = (authType, env) => {
       );
   }
 };
+async function pairIdentifiers(nonce, logins, accessToken, env) {
+  const pairUrl = new URL(PAIR_IDENTIFIERS(env));
+  try {
+    const response = await fetch(pairUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${accessToken}`
+      },
+      body: JSON.stringify({
+        nonce,
+        logins
+      })
+    });
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new PairError(`unable to pair identifiers: ${errorMessage}`);
+  }
+}
 async function getNonce(id, env) {
   const nonceUrl = new URL(NONCE_URL(env));
   nonceUrl.searchParams.set("identifier", id);
@@ -47,14 +74,14 @@ async function getNonce(id, env) {
     throw new NonceRetrievalError(`failed to generate nonce: ${errorMessage}`);
   }
 }
-async function authorizeOIDC(jwtToken, env) {
+async function authorizeOIDC(jwtToken, env, platform) {
   const grantType = "urn:ietf:params:oauth:grant-type:jwt-bearer";
   const headers = new Headers({
     "Content-Type": "application/x-www-form-urlencoded"
   });
   const urlEncodedBody = new URLSearchParams();
   urlEncodedBody.append("grant_type", grantType);
-  urlEncodedBody.append("client_id", getOidcClientId(env));
+  urlEncodedBody.append("client_id", getOidcClientId(env, platform));
   urlEncodedBody.append("assertion", jwtToken);
   try {
     const response = await fetch(OIDC_TOKEN_URL(env), {
@@ -89,6 +116,8 @@ async function authenticate(rawMessage, signature, authType, env) {
       },
       body: JSON.stringify({
         signature,
+        // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+        // eslint-disable-next-line @typescript-eslint/naming-convention
         raw_message: rawMessage
       })
     });
@@ -116,11 +145,13 @@ async function authenticate(rawMessage, signature, authType, env) {
 
 export {
   NONCE_URL,
+  PAIR_IDENTIFIERS,
   OIDC_TOKEN_URL,
   SRP_LOGIN_URL,
   SIWE_LOGIN_URL,
+  pairIdentifiers,
   getNonce,
   authorizeOIDC,
   authenticate
 };
-//# sourceMappingURL=chunk-CYGZ4WLJ.mjs.map
+//# sourceMappingURL=chunk-7VMXBDXN.mjs.map

package/dist/chunk-7VMXBDXN.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/services.ts"],"sourcesContent":["import type { Env, Platform } from '../env';\nimport { getEnvUrls, getOidcClientId } from '../env';\nimport {\n  NonceRetrievalError,\n  PairError,\n  SignInError,\n  ValidationError,\n} from '../errors';\nimport type { AccessToken, ErrorMessage, UserProfile } from './types';\nimport { AuthType } from './types';\n\nexport const NONCE_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/nonce`;\n\nexport const PAIR_IDENTIFIERS = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/identifiers/pair`;\n\nexport const OIDC_TOKEN_URL = (env: Env) =>\n  `${getEnvUrls(env).oidcApiUrl}/oauth2/token`;\n\nexport const SRP_LOGIN_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/srp/login`;\n\nexport const SIWE_LOGIN_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/siwe/login`;\n\nconst getAuthenticationUrl = (authType: AuthType, env: Env): string => {\n  switch (authType) {\n    case AuthType.SRP:\n      return SRP_LOGIN_URL(env);\n    case AuthType.SiWE:\n      return SIWE_LOGIN_URL(env);\n    /* istanbul ignore next */\n    default:\n      throw new ValidationError(\n        `Invalid AuthType: ${authType as number} - unable to create Auth URL`,\n      );\n  }\n};\n\ntype NonceResponse = {\n  nonce: string;\n  identifier: string;\n  expiresIn: number;\n};\n\ntype PairRequest = {\n  signature: string;\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  raw_message: string;\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  encrypted_storage_key: string;\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  identifier_type: 'SIWE' | 'SRP';\n};\n\n/**\n * Pair multiple identifiers under a single profile\n *\n * @param nonce - session nonce\n * @param logins - pairing request payload\n * @param accessToken - JWT access token used to access protected resources\n * @param env - server environment\n * @returns void.\n */\nexport async function pairIdentifiers(\n  nonce: string,\n  logins: PairRequest[],\n  accessToken: string,\n  env: Env,\n): Promise<void> {\n  const pairUrl = new URL(PAIR_IDENTIFIERS(env));\n\n  try {\n    const response = await fetch(pairUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${accessToken}`,\n      },\n      body: JSON.stringify({\n        nonce,\n        logins,\n      }),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as ErrorMessage;\n      throw new Error(\n        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n      );\n    }\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new PairError(`unable to pair identifiers: ${errorMessage}`);\n  }\n}\n\n/**\n * Service to Get Nonce for JWT Bearer Flow\n *\n * @param id - identifier ID\n * @param env - server environment\n * @returns the nonce.\n */\nexport async function getNonce(id: string, env: Env): Promise<NonceResponse> {\n  const nonceUrl = new URL(NONCE_URL(env));\n  nonceUrl.searchParams.set('identifier', id);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      const responseBody = (await nonceResponse.json()) as ErrorMessage;\n      throw new Error(\n        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n      );\n    }\n\n    const nonceJson = await nonceResponse.json();\n    return {\n      nonce: nonceJson.nonce,\n      identifier: nonceJson.identifier,\n      expiresIn: nonceJson.expires_in,\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new NonceRetrievalError(`failed to generate nonce: ${errorMessage}`);\n  }\n}\n\n/**\n * Service to Authorize And perform OIDC Flow to get the Access Token\n *\n * @param jwtToken - The original token received from Authentication. This is traded for the Access Token. (the authentication token is single-use)\n * @param env - server environment\n * @param platform - SDK platform\n * @returns Access Token from Authorization server\n */\nexport async function authorizeOIDC(\n  jwtToken: string,\n  env: Env,\n  platform: Platform,\n): Promise<AccessToken> {\n  const grantType = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', grantType);\n  urlEncodedBody.append('client_id', getOidcClientId(env, platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKEN_URL(env), {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as {\n        // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        error_description: string;\n        error: string;\n      };\n      throw new Error(\n        `HTTP error: ${responseBody.error_description}, error code: ${responseBody.error}`,\n      );\n    }\n\n    const accessTokenResponse = await response.json();\n    return {\n      accessToken: accessTokenResponse.access_token,\n      expiresIn: accessTokenResponse.expires_in,\n      obtainedAt: Date.now(),\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new SignInError(`unable to get access token: ${errorMessage}`);\n  }\n}\n\ntype Authentication = {\n  token: string;\n  expiresIn: number;\n  profile: UserProfile;\n};\n/**\n * Service to Authenticate/Login a user via SIWE or SRP derived key.\n *\n * @param rawMessage - raw message for validation when authenticating\n * @param signature - signed raw message\n * @param authType - authentication type/flow used\n * @param env - server environment\n * @returns Authentication Token\n */\nexport async function authenticate(\n  rawMessage: string,\n  signature: string,\n  authType: AuthType,\n  env: Env,\n): Promise<Authentication> {\n  const authenticationUrl = getAuthenticationUrl(authType, env);\n\n  try {\n    const response = await fetch(authenticationUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n      }),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as ErrorMessage;\n      throw new Error(\n        `${authType} login HTTP error: ${responseBody.message}, error code: ${responseBody.error}`,\n      );\n    }\n\n    const loginResponse = await response.json();\n    return {\n      token: loginResponse.token,\n      expiresIn: loginResponse.expires_in,\n      profile: {\n        identifierId: loginResponse.profile.identifier_id,\n        metaMetricsId: loginResponse.profile.metametrics_id,\n        profileId: loginResponse.profile.profile_id,\n      },\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new SignInError(`unable to perform SRP login: ${errorMessage}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAWO,IAAM,YAAY,CAAC,QACxB,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,mBAAmB,CAAC,QAC/B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,iBAAiB,CAAC,QAC7B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,gBAAgB,CAAC,QAC5B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,iBAAiB,CAAC,QAC7B,GAAG,WAAW,GAAG,EAAE,UAAU;AAE/B,IAAM,uBAAuB,CAAC,UAAoB,QAAqB;AACrE,UAAQ,UAAU;AAAA,IAChB;AACE,aAAO,cAAc,GAAG;AAAA,IAC1B;AACE,aAAO,eAAe,GAAG;AAAA,IAE3B;AACE,YAAM,IAAI;AAAA,QACR,qBAAqB,QAAkB;AAAA,MACzC;AAAA,EACJ;AACF;AA8BA,eAAsB,gBACpB,OACA,QACA,aACA,KACe;AACf,QAAM,UAAU,IAAI,IAAI,iBAAiB,GAAG,CAAC;AAE7C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,SAAS;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,UAAU,+BAA+B,YAAY,EAAE;AAAA,EACnE;AACF;AASA,eAAsB,SAAS,IAAY,KAAkC;AAC3E,QAAM,WAAW,IAAI,IAAI,UAAU,GAAG,CAAC;AACvC,WAAS,aAAa,IAAI,cAAc,EAAE;AAE1C,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,eAAgB,MAAM,cAAc,KAAK;AAC/C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,cAAc,KAAK;AAC3C,WAAO;AAAA,MACL,OAAO,UAAU;AAAA,MACjB,YAAY,UAAU;AAAA,MACtB,WAAW,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,oBAAoB,6BAA6B,YAAY,EAAE;AAAA,EAC3E;AACF;AAUA,eAAsB,cACpB,UACA,KACA,UACsB;AACtB,QAAM,YAAY;AAClB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,SAAS;AAC7C,iBAAe,OAAO,aAAa,gBAAgB,KAAK,QAAQ,CAAC;AACjE,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,eAAe,GAAG,GAAG;AAAA,MAChD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAM1C,YAAM,IAAI;AAAA,QACR,eAAe,aAAa,iBAAiB,iBAAiB,aAAa,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,sBAAsB,MAAM,SAAS,KAAK;AAChD,WAAO;AAAA,MACL,aAAa,oBAAoB;AAAA,MACjC,WAAW,oBAAoB;AAAA,MAC/B,YAAY,KAAK,IAAI;AAAA,IACvB;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,YAAY,+BAA+B,YAAY,EAAE;AAAA,EACrE;AACF;AAgBA,eAAsB,aACpB,YACA,WACA,UACA,KACyB;AACzB,QAAM,oBAAoB,qBAAqB,UAAU,GAAG;AAE5D,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA;AAAA,QAGA,aAAa;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,GAAG,QAAQ,sBAAsB,aAAa,OAAO,iBAAiB,aAAa,KAAK;AAAA,MAC1F;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,WAAO;AAAA,MACL,OAAO,cAAc;AAAA,MACrB,WAAW,cAAc;AAAA,MACzB,SAAS;AAAA,QACP,cAAc,cAAc,QAAQ;AAAA,QACpC,eAAe,cAAc,QAAQ;AAAA,QACrC,WAAW,cAAc,QAAQ;AAAA,MACnC;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,YAAY,gCAAgC,YAAY,EAAE;AAAA,EACtE;AACF;","names":[]}

package/dist/chunk-ARWL2LBB.js

@@ -0,0 +1,273 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkIPSBQ3MSjs = require('./chunk-IPSBQ3MS.js');
+
+
+
+var _chunkK6G7X6PXjs = require('./chunk-K6G7X6PX.js');
+
+
+var _chunkJWTNHCVGjs = require('./chunk-JWTNHCVG.js');
+
+
+
+
+var _chunkV46WVGWNjs = require('./chunk-V46WVGWN.js');
+
+// src/controllers/user-storage/UserStorageController.ts
+var _basecontroller = require('@metamask/base-controller');
+var controllerName = "UserStorageController";
+var defaultState = {
+  isProfileSyncingEnabled: true,
+  isProfileSyncingUpdateLoading: false
+};
+var metadata = {
+  isProfileSyncingEnabled: {
+    persist: true,
+    anonymous: true
+  },
+  isProfileSyncingUpdateLoading: {
+    persist: false,
+    anonymous: false
+  }
+};
+var _auth, _notificationServices, _registerMessageHandlers, registerMessageHandlers_fn, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn, _createStorageKey, createStorageKey_fn, _snapSignMessage, snapSignMessage_fn, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn;
+var UserStorageController = class extends _basecontroller.BaseController {
+  constructor(params) {
+    super({
+      messenger: params.messenger,
+      metadata,
+      name: controllerName,
+      state: { ...defaultState, ...params.state }
+    });
+    /**
+     * Constructor helper for registering this controller's messaging system
+     * actions.
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _registerMessageHandlers);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _assertProfileSyncingEnabled);
+    /**
+     * Utility to get the bearer token and storage key
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _getStorageKeyAndBearerToken);
+    /**
+     * Rather than storing the storage key, we can compute the storage key when needed.
+     *
+     * @returns the storage key
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _createStorageKey);
+    /**
+     * Signs a specific message using an underlying auth snap.
+     *
+     * @param message - A specific tagged message to sign.
+     * @returns A Signature created by the snap.
+     */
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _snapSignMessage);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _setIsProfileSyncingUpdateLoading);
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _auth, {
+      getBearerToken: async () => {
+        return await this.messagingSystem.call(
+          "AuthenticationController:getBearerToken"
+        );
+      },
+      getProfileId: async () => {
+        const sessionProfile = await this.messagingSystem.call(
+          "AuthenticationController:getSessionProfile"
+        );
+        return sessionProfile?.profileId;
+      },
+      isAuthEnabled: () => {
+        return this.messagingSystem.call("AuthenticationController:isSignedIn");
+      },
+      signIn: async () => {
+        return await this.messagingSystem.call(
+          "AuthenticationController:performSignIn"
+        );
+      },
+      signOut: async () => {
+        return this.messagingSystem.call(
+          "AuthenticationController:performSignOut"
+        );
+      }
+    });
+    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _notificationServices, {
+      disableNotificationServices: async () => {
+        return await this.messagingSystem.call(
+          "NotificationServicesController:disableNotificationServices"
+        );
+      },
+      selectIsNotificationServicesEnabled: async () => {
+        return this.messagingSystem.call(
+          "NotificationServicesController:selectIsNotificationServicesEnabled"
+        );
+      }
+    });
+    this.getMetaMetricsState = params.getMetaMetricsState;
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+  }
+  async enableProfileSyncing() {
+    try {
+      _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, true);
+      const authEnabled = _chunkV46WVGWNjs.__privateGet.call(void 0, this, _auth).isAuthEnabled();
+      if (!authEnabled) {
+        await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _auth).signIn();
+      }
+      this.update((state) => {
+        state.isProfileSyncingEnabled = true;
+      });
+      _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+    } catch (e) {
+      _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(
+        `${controllerName} - failed to enable profile syncing - ${errorMessage}`
+      );
+    }
+  }
+  async setIsProfileSyncingEnabled(isProfileSyncingEnabled) {
+    this.update((state) => {
+      state.isProfileSyncingEnabled = isProfileSyncingEnabled;
+    });
+  }
+  async disableProfileSyncing() {
+    const isAlreadyDisabled = !this.state.isProfileSyncingEnabled;
+    if (isAlreadyDisabled) {
+      return;
+    }
+    try {
+      _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, true);
+      const isNotificationServicesEnabled = await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _notificationServices).selectIsNotificationServicesEnabled();
+      if (isNotificationServicesEnabled) {
+        await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _notificationServices).disableNotificationServices();
+      }
+      const isMetaMetricsParticipation = this.getMetaMetricsState();
+      if (!isMetaMetricsParticipation) {
+        this.messagingSystem.call("AuthenticationController:performSignOut");
+      }
+      _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      this.update((state) => {
+        state.isProfileSyncingEnabled = false;
+      });
+    } catch (e) {
+      _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(
+        `${controllerName} - failed to disable profile syncing - ${errorMessage}`
+      );
+    }
+  }
+  /**
+   * Allows retrieval of stored data. Data stored is string formatted.
+   * Developers can extend the entry path and entry name through the `schema.ts` file.
+   *
+   * @param entryKey - entry key that matches schema
+   * @returns the decrypted string contents found from user storage (or null if not found)
+   */
+  async performGetStorage(entryKey) {
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const { bearerToken, storageKey } = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn).call(this);
+    const result = await _chunkK6G7X6PXjs.getUserStorage.call(void 0, {
+      entryKey,
+      bearerToken,
+      storageKey
+    });
+    return result;
+  }
+  /**
+   * Allows storage of user data. Data stored must be string formatted.
+   * Developers can extend the entry path and entry name through the `schema.ts` file.
+   *
+   * @param entryKey - entry key that matches schema
+   * @param value - The string data you want to store.
+   * @returns nothing. NOTE that an error is thrown if fails to store data.
+   */
+  async performSetStorage(entryKey, value) {
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const { bearerToken, storageKey } = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn).call(this);
+    await _chunkK6G7X6PXjs.upsertUserStorage.call(void 0, value, {
+      entryKey,
+      bearerToken,
+      storageKey
+    });
+  }
+  /**
+   * Retrieves the storage key, for internal use only!
+   *
+   * @returns the storage key
+   */
+  async getStorageKey() {
+    _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const storageKey = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _createStorageKey, createStorageKey_fn).call(this);
+    return storageKey;
+  }
+};
+_auth = new WeakMap();
+_notificationServices = new WeakMap();
+_registerMessageHandlers = new WeakSet();
+registerMessageHandlers_fn = function() {
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:performGetStorage",
+    this.performGetStorage.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:performSetStorage",
+    this.performSetStorage.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:getStorageKey",
+    this.getStorageKey.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:enableProfileSyncing",
+    this.enableProfileSyncing.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:disableProfileSyncing",
+    this.disableProfileSyncing.bind(this)
+  );
+};
+_assertProfileSyncingEnabled = new WeakSet();
+assertProfileSyncingEnabled_fn = function() {
+  if (!this.state.isProfileSyncingEnabled) {
+    throw new Error(
+      `${controllerName}: Unable to call method, user is not authenticated`
+    );
+  }
+};
+_getStorageKeyAndBearerToken = new WeakSet();
+getStorageKeyAndBearerToken_fn = async function() {
+  const bearerToken = await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _auth).getBearerToken();
+  if (!bearerToken) {
+    throw new Error("UserStorageController - unable to get bearer token");
+  }
+  const storageKey = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _createStorageKey, createStorageKey_fn).call(this);
+  return { bearerToken, storageKey };
+};
+_createStorageKey = new WeakSet();
+createStorageKey_fn = async function() {
+  const id = await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _auth).getProfileId();
+  if (!id) {
+    throw new Error("UserStorageController - unable to create storage key");
+  }
+  const storageKeySignature = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _snapSignMessage, snapSignMessage_fn).call(this, `metamask:${id}`);
+  const storageKey = _chunkJWTNHCVGjs.createSHA256Hash.call(void 0, storageKeySignature);
+  return storageKey;
+};
+_snapSignMessage = new WeakSet();
+snapSignMessage_fn = function(message) {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    _chunkIPSBQ3MSjs.createSnapSignMessageRequest.call(void 0, message)
+  );
+};
+_setIsProfileSyncingUpdateLoading = new WeakSet();
+setIsProfileSyncingUpdateLoading_fn = function(isProfileSyncingUpdateLoading) {
+  this.update((state) => {
+    state.isProfileSyncingUpdateLoading = isProfileSyncingUpdateLoading;
+  });
+};
+
+
+
+exports.UserStorageController = UserStorageController;
+//# sourceMappingURL=chunk-ARWL2LBB.js.map

package/dist/chunk-ARWL2LBB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/UserStorageController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIA,SAAS,sBAAsB;AA4B/B,IAAM,iBAAiB;AAcvB,IAAM,eAA2C;AAAA,EAC/C,yBAAyB;AAAA,EACzB,+BAA+B;AACjC;AAEA,IAAM,WAAsD;AAAA,EAC1D,yBAAyB;AAAA,IACvB,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,+BAA+B;AAAA,IAC7B,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AA5DA;AAsHA,IAAqB,wBAArB,cAAmD,eAIjD;AAAA,EA2CA,YAAY,QAIT;AACD,UAAM;AAAA,MACJ,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,OAAO,MAAM;AAAA,IAC5C,CAAC;AAUH;AAAA;AAAA;AAAA;AAAA;AAsJA;AAWA;AAAA;AAAA;AAAA,uBAAM;AAkBN;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAiBN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA;AAzQA,8BAAQ;AAAA,MACN,gBAAgB,YAAY;AAC1B,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,cAAc,YAAY;AACxB,cAAM,iBAAiB,MAAM,KAAK,gBAAgB;AAAA,UAChD;AAAA,QACF;AACA,eAAO,gBAAgB;AAAA,MACzB;AAAA,MACA,eAAe,MAAM;AACnB,eAAO,KAAK,gBAAgB,KAAK,qCAAqC;AAAA,MACxE;AAAA,MACA,QAAQ,YAAY;AAClB,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS,YAAY;AACnB,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,8CAAwB;AAAA,MACtB,6BAA6B,YAAY;AACvC,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,qCAAqC,YAAY;AAC/C,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAgBE,SAAK,sBAAsB,OAAO;AAClC,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,uBAAsC;AACjD,QAAI;AACF,4BAAK,wEAAL,WAAuC;AAEvC,YAAM,cAAc,mBAAK,OAAM,cAAc;AAC7C,UAAI,CAAC,aAAa;AAChB,cAAM,mBAAK,OAAM,OAAO;AAAA,MAC1B;AAEA,WAAK,OAAO,CAAC,UAAU;AACrB,cAAM,0BAA0B;AAAA,MAClC,CAAC;AAED,4BAAK,wEAAL,WAAuC;AAAA,IACzC,SAAS,GAAG;AACV,4BAAK,wEAAL,WAAuC;AACvC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,yCAAyC,YAAY;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,2BACX,yBACe;AACf,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,0BAA0B;AAAA,IAClC,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,wBAAuC;AAClD,UAAM,oBAAoB,CAAC,KAAK,MAAM;AACtC,QAAI,mBAAmB;AACrB;AAAA,IACF;AAEA,QAAI;AACF,4BAAK,wEAAL,WAAuC;AAEvC,YAAM,gCACJ,MAAM,mBAAK,uBAAsB,oCAAoC;AAEvE,UAAI,+BAA+B;AACjC,cAAM,mBAAK,uBAAsB,4BAA4B;AAAA,MAC/D;AAEA,YAAM,6BAA6B,KAAK,oBAAoB;AAE5D,UAAI,CAAC,4BAA4B;AAC/B,aAAK,gBAAgB,KAAK,yCAAyC;AAAA,MACrE;AAEA,4BAAK,wEAAL,WAAuC;AAEvC,WAAK,OAAO,CAAC,UAAU;AACrB,cAAM,0BAA0B;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,GAAG;AACV,4BAAK,wEAAL,WAAuC;AACvC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,0CAA0C,YAAY;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,kBACX,UACwB;AACxB,0BAAK,8DAAL;AACA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AACR,UAAM,SAAS,MAAM,eAAe;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,kBACX,UACA,OACe;AACf,0BAAK,8DAAL;AACA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AAER,UAAM,kBAAkB,OAAO;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAa,gBAAiC;AAC5C,0BAAK,8DAAL;AACA,UAAM,aAAa,MAAM,sBAAK,wCAAL;AACzB,WAAO;AAAA,EACT;AA8DF;AAhRE;AA2BA;AAmCA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,qBAAqB,KAAK,IAAI;AAAA,EACrC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,sBAAsB,KAAK,IAAI;AAAA,EACtC;AACF;AA6HA;AAAA,iCAA4B,WAAS;AACnC,MAAI,CAAC,KAAK,MAAM,yBAAyB;AACvC,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAKM;AAAA,iCAA4B,iBAG/B;AACD,QAAM,cAAc,MAAM,mBAAK,OAAM,eAAe;AACpD,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,aAAa,MAAM,sBAAK,wCAAL;AAEzB,SAAO,EAAE,aAAa,WAAW;AACnC;AAOM;AAAA,sBAAiB,iBAAoB;AACzC,QAAM,KAAa,MAAM,mBAAK,OAAM,aAAa;AACjD,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AAEA,QAAM,sBAAsB,MAAM,sBAAK,sCAAL,WAAsB,YAAY,EAAE;AACtE,QAAM,aAAa,iBAAiB,mBAAmB;AACvD,SAAO;AACT;AAQA;AAAA,qBAAgB,SAAC,SAAgD;AAC/D,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AACF;AAEA;AAAA,sCAAiC,SAC/B,+BACM;AACN,OAAK,OAAO,CAAC,UAAU;AACrB,UAAM,gCAAgC;AAAA,EACxC,CAAC;AACH","sourcesContent":["import type {\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport { createSnapSignMessageRequest } from '../authentication/auth-snap-requests';\nimport type {\n  AuthenticationControllerGetBearerToken,\n  AuthenticationControllerGetSessionProfile,\n  AuthenticationControllerIsSignedIn,\n  AuthenticationControllerPerformSignIn,\n  AuthenticationControllerPerformSignOut,\n} from '../authentication/AuthenticationController';\nimport { createSHA256Hash } from './encryption';\nimport type { UserStorageEntryKeys } from './schema';\nimport { getUserStorage, upsertUserStorage } from './services';\n\n// TODO: fix external dependencies\nexport declare type NotificationServicesControllerDisableNotificationServices =\n  {\n    type: `NotificationServicesController:disableNotificationServices`;\n    handler: () => Promise<void>;\n  };\n\nexport declare type NotificationServicesControllerSelectIsNotificationServicesEnabled =\n  {\n    type: `NotificationServicesController:selectIsNotificationServicesEnabled`;\n    handler: () => boolean;\n  };\n\nconst controllerName = 'UserStorageController';\n\n// State\nexport type UserStorageControllerState = {\n  /**\n   * Condition used by UI and to determine if we can use some of the User Storage methods.\n   */\n  isProfileSyncingEnabled: boolean;\n  /**\n   * Loading state for the profile syncing update\n   */\n  isProfileSyncingUpdateLoading: boolean;\n};\n\nconst defaultState: UserStorageControllerState = {\n  isProfileSyncingEnabled: true,\n  isProfileSyncingUpdateLoading: false,\n};\n\nconst metadata: StateMetadata<UserStorageControllerState> = {\n  isProfileSyncingEnabled: {\n    persist: true,\n    anonymous: true,\n  },\n  isProfileSyncingUpdateLoading: {\n    persist: false,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof UserStorageController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: UserStorageController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performGetStorage'\n  | 'performSetStorage'\n  | 'getStorageKey'\n  | 'enableProfileSyncing'\n  | 'disableProfileSyncing'\n>;\nexport type Actions = ActionsObj[keyof ActionsObj];\nexport type UserStorageControllerPerformGetStorage =\n  ActionsObj['performGetStorage'];\nexport type UserStorageControllerPerformSetStorage =\n  ActionsObj['performSetStorage'];\nexport type UserStorageControllerGetStorageKey = ActionsObj['getStorageKey'];\nexport type UserStorageControllerEnableProfileSyncing =\n  ActionsObj['enableProfileSyncing'];\nexport type UserStorageControllerDisableProfileSyncing =\n  ActionsObj['disableProfileSyncing'];\n\n// Allowed Actions\nexport type AllowedActions =\n  // Snap Requests\n  | HandleSnapRequest\n  // Auth Requests\n  | AuthenticationControllerGetBearerToken\n  | AuthenticationControllerGetSessionProfile\n  | AuthenticationControllerPerformSignIn\n  | AuthenticationControllerIsSignedIn\n  | AuthenticationControllerPerformSignOut\n  // Metamask Notifications\n  | NotificationServicesControllerDisableNotificationServices\n  | NotificationServicesControllerSelectIsNotificationServicesEnabled;\n\n// Messenger\nexport type UserStorageControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  never,\n  AllowedActions['type'],\n  never\n>;\n\n/**\n * Reusable controller that allows any team to store synchronized data for a given user.\n * These can be settings shared cross MetaMask clients, or data we want to persist when uninstalling/reinstalling.\n *\n * NOTE:\n * - data stored on UserStorage is FULLY encrypted, with the only keys stored/managed on the client.\n * - No one can access this data unless they are have the SRP and are able to run the signing snap.\n */\nexport default class UserStorageController extends BaseController<\n  typeof controllerName,\n  UserStorageControllerState,\n  UserStorageControllerMessenger\n> {\n  #auth = {\n    getBearerToken: async () => {\n      return await this.messagingSystem.call(\n        'AuthenticationController:getBearerToken',\n      );\n    },\n    getProfileId: async () => {\n      const sessionProfile = await this.messagingSystem.call(\n        'AuthenticationController:getSessionProfile',\n      );\n      return sessionProfile?.profileId;\n    },\n    isAuthEnabled: () => {\n      return this.messagingSystem.call('AuthenticationController:isSignedIn');\n    },\n    signIn: async () => {\n      return await this.messagingSystem.call(\n        'AuthenticationController:performSignIn',\n      );\n    },\n    signOut: async () => {\n      return this.messagingSystem.call(\n        'AuthenticationController:performSignOut',\n      );\n    },\n  };\n\n  #notificationServices = {\n    disableNotificationServices: async () => {\n      return await this.messagingSystem.call(\n        'NotificationServicesController:disableNotificationServices',\n      );\n    },\n    selectIsNotificationServicesEnabled: async () => {\n      return this.messagingSystem.call(\n        'NotificationServicesController:selectIsNotificationServicesEnabled',\n      );\n    },\n  };\n\n  getMetaMetricsState: () => boolean;\n\n  constructor(params: {\n    messenger: UserStorageControllerMessenger;\n    state?: UserStorageControllerState;\n    getMetaMetricsState: () => boolean;\n  }) {\n    super({\n      messenger: params.messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...params.state },\n    });\n\n    this.getMetaMetricsState = params.getMetaMetricsState;\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performGetStorage',\n      this.performGetStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performSetStorage',\n      this.performSetStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:getStorageKey',\n      this.getStorageKey.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:enableProfileSyncing',\n      this.enableProfileSyncing.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:disableProfileSyncing',\n      this.disableProfileSyncing.bind(this),\n    );\n  }\n\n  public async enableProfileSyncing(): Promise<void> {\n    try {\n      this.#setIsProfileSyncingUpdateLoading(true);\n\n      const authEnabled = this.#auth.isAuthEnabled();\n      if (!authEnabled) {\n        await this.#auth.signIn();\n      }\n\n      this.update((state) => {\n        state.isProfileSyncingEnabled = true;\n      });\n\n      this.#setIsProfileSyncingUpdateLoading(false);\n    } catch (e) {\n      this.#setIsProfileSyncingUpdateLoading(false);\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to enable profile syncing - ${errorMessage}`,\n      );\n    }\n  }\n\n  public async setIsProfileSyncingEnabled(\n    isProfileSyncingEnabled: boolean,\n  ): Promise<void> {\n    this.update((state) => {\n      state.isProfileSyncingEnabled = isProfileSyncingEnabled;\n    });\n  }\n\n  public async disableProfileSyncing(): Promise<void> {\n    const isAlreadyDisabled = !this.state.isProfileSyncingEnabled;\n    if (isAlreadyDisabled) {\n      return;\n    }\n\n    try {\n      this.#setIsProfileSyncingUpdateLoading(true);\n\n      const isNotificationServicesEnabled =\n        await this.#notificationServices.selectIsNotificationServicesEnabled();\n\n      if (isNotificationServicesEnabled) {\n        await this.#notificationServices.disableNotificationServices();\n      }\n\n      const isMetaMetricsParticipation = this.getMetaMetricsState();\n\n      if (!isMetaMetricsParticipation) {\n        this.messagingSystem.call('AuthenticationController:performSignOut');\n      }\n\n      this.#setIsProfileSyncingUpdateLoading(false);\n\n      this.update((state) => {\n        state.isProfileSyncingEnabled = false;\n      });\n    } catch (e) {\n      this.#setIsProfileSyncingUpdateLoading(false);\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to disable profile syncing - ${errorMessage}`,\n      );\n    }\n  }\n\n  /**\n   * Allows retrieval of stored data. Data stored is string formatted.\n   * Developers can extend the entry path and entry name through the `schema.ts` file.\n   *\n   * @param entryKey - entry key that matches schema\n   * @returns the decrypted string contents found from user storage (or null if not found)\n   */\n  public async performGetStorage(\n    entryKey: UserStorageEntryKeys,\n  ): Promise<string | null> {\n    this.#assertProfileSyncingEnabled();\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n    const result = await getUserStorage({\n      entryKey,\n      bearerToken,\n      storageKey,\n    });\n\n    return result;\n  }\n\n  /**\n   * Allows storage of user data. Data stored must be string formatted.\n   * Developers can extend the entry path and entry name through the `schema.ts` file.\n   *\n   * @param entryKey - entry key that matches schema\n   * @param value - The string data you want to store.\n   * @returns nothing. NOTE that an error is thrown if fails to store data.\n   */\n  public async performSetStorage(\n    entryKey: UserStorageEntryKeys,\n    value: string,\n  ): Promise<void> {\n    this.#assertProfileSyncingEnabled();\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n\n    await upsertUserStorage(value, {\n      entryKey,\n      bearerToken,\n      storageKey,\n    });\n  }\n\n  /**\n   * Retrieves the storage key, for internal use only!\n   *\n   * @returns the storage key\n   */\n  public async getStorageKey(): Promise<string> {\n    this.#assertProfileSyncingEnabled();\n    const storageKey = await this.#createStorageKey();\n    return storageKey;\n  }\n\n  #assertProfileSyncingEnabled(): void {\n    if (!this.state.isProfileSyncingEnabled) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  /**\n   * Utility to get the bearer token and storage key\n   */\n  async #getStorageKeyAndBearerToken(): Promise<{\n    bearerToken: string;\n    storageKey: string;\n  }> {\n    const bearerToken = await this.#auth.getBearerToken();\n    if (!bearerToken) {\n      throw new Error('UserStorageController - unable to get bearer token');\n    }\n    const storageKey = await this.#createStorageKey();\n\n    return { bearerToken, storageKey };\n  }\n\n  /**\n   * Rather than storing the storage key, we can compute the storage key when needed.\n   *\n   * @returns the storage key\n   */\n  async #createStorageKey(): Promise<string> {\n    const id: string = await this.#auth.getProfileId();\n    if (!id) {\n      throw new Error('UserStorageController - unable to create storage key');\n    }\n\n    const storageKeySignature = await this.#snapSignMessage(`metamask:${id}`);\n    const storageKey = createSHA256Hash(storageKeySignature);\n    return storageKey;\n  }\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    ) as Promise<string>;\n  }\n\n  #setIsProfileSyncingUpdateLoading(\n    isProfileSyncingUpdateLoading: boolean,\n  ): void {\n    this.update((state) => {\n      state.isProfileSyncingUpdateLoading = isProfileSyncingUpdateLoading;\n    });\n  }\n}\n"]}

package/dist/chunk-BFE6TB7Y.mjs

@@ -0,0 +1,11 @@
+import {
+  encryption_default
+} from "./chunk-QE2F5AZL.mjs";
+
+// src/controllers/user-storage/encryption/index.ts
+var encryption_default2 = encryption_default;
+
+export {
+  encryption_default2 as encryption_default
+};
+//# sourceMappingURL=chunk-BFE6TB7Y.mjs.map

package/dist/chunk-BFE6TB7Y.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/index.ts"],"sourcesContent":["import Encryption from './encryption';\n\nexport { Encryption };\nexport * from './encryption';\nexport default Encryption;\n"],"mappings":";;;;;AAIA,IAAOA,sBAAQ;","names":["encryption_default"]}

package/dist/chunk-BVM4HBM4.js

@@ -0,0 +1,112 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkWAS6V24Hjs = require('./chunk-WAS6V24H.js');
+
+
+
+
+var _chunk2MVOZPBNjs = require('./chunk-2MVOZPBN.js');
+
+
+var _chunkGJJT2CALjs = require('./chunk-GJJT2CAL.js');
+
+
+
+var _chunkV46WVGWNjs = require('./chunk-V46WVGWN.js');
+
+// src/controllers/authentication/index.ts
+var authentication_exports = {};
+_chunkV46WVGWNjs.__export.call(void 0, authentication_exports, {
+  Controller: () => _chunkWAS6V24Hjs.AuthenticationController,
+  Mocks: () => fixtures_exports
+});
+
+// src/controllers/authentication/__fixtures__/index.ts
+var fixtures_exports = {};
+_chunkV46WVGWNjs.__export.call(void 0, fixtures_exports, {
+  MOCK_ACCESS_TOKEN: () => MOCK_ACCESS_TOKEN,
+  MOCK_JWT: () => MOCK_JWT,
+  MOCK_LOGIN_RESPONSE: () => MOCK_LOGIN_RESPONSE,
+  MOCK_NONCE: () => MOCK_NONCE,
+  MOCK_NONCE_RESPONSE: () => MOCK_NONCE_RESPONSE,
+  MOCK_OATH_TOKEN_RESPONSE: () => MOCK_OATH_TOKEN_RESPONSE,
+  getMockAuthAccessTokenResponse: () => getMockAuthAccessTokenResponse,
+  getMockAuthLoginResponse: () => getMockAuthLoginResponse,
+  getMockAuthNonceResponse: () => getMockAuthNonceResponse,
+  mockEndpointAccessToken: () => mockEndpointAccessToken,
+  mockEndpointGetNonce: () => mockEndpointGetNonce,
+  mockEndpointLogin: () => mockEndpointLogin
+});
+
+// src/controllers/authentication/__fixtures__/mockResponses.ts
+var MOCK_NONCE = "4cbfqzoQpcNxVImGv";
+var MOCK_NONCE_RESPONSE = {
+  nonce: MOCK_NONCE
+};
+var getMockAuthNonceResponse = () => {
+  return {
+    url: _chunk2MVOZPBNjs.AUTH_NONCE_ENDPOINT,
+    requestMethod: "GET",
+    response: MOCK_NONCE_RESPONSE
+  };
+};
+var MOCK_JWT = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c";
+var MOCK_LOGIN_RESPONSE = {
+  token: MOCK_JWT,
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  expires_in: (/* @__PURE__ */ new Date()).toString(),
+  profile: {
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    identifier_id: "MOCK_IDENTIFIER",
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    profile_id: "MOCK_PROFILE_ID"
+  }
+};
+var getMockAuthLoginResponse = () => {
+  return {
+    url: _chunk2MVOZPBNjs.AUTH_LOGIN_ENDPOINT,
+    requestMethod: "POST",
+    response: MOCK_LOGIN_RESPONSE
+  };
+};
+var MOCK_ACCESS_TOKEN = `MOCK_ACCESS_TOKEN-${MOCK_JWT}`;
+var MOCK_OATH_TOKEN_RESPONSE = {
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  access_token: MOCK_ACCESS_TOKEN,
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  expires_in: (/* @__PURE__ */ new Date()).getTime()
+};
+var getMockAuthAccessTokenResponse = () => {
+  return {
+    url: _chunk2MVOZPBNjs.OIDC_TOKENS_ENDPOINT,
+    requestMethod: "POST",
+    response: MOCK_OATH_TOKEN_RESPONSE
+  };
+};
+
+// src/controllers/authentication/__fixtures__/mockServices.ts
+var import_nock = _chunkV46WVGWNjs.__toESM.call(void 0, _chunkGJJT2CALjs.require_nock.call(void 0, ));
+var mockEndpointGetNonce = (mockReply) => {
+  const mockResponse = getMockAuthNonceResponse();
+  const reply = mockReply ?? { status: 200, body: mockResponse.response };
+  const mockNonceEndpoint = (0, import_nock.default)(mockResponse.url).get("").query(true).reply(reply.status, reply.body);
+  return mockNonceEndpoint;
+};
+var mockEndpointLogin = (mockReply) => {
+  const mockResponse = getMockAuthLoginResponse();
+  const reply = mockReply ?? { status: 200, body: mockResponse.response };
+  const mockLoginEndpoint = (0, import_nock.default)(mockResponse.url).post("").reply(reply.status, reply.body);
+  return mockLoginEndpoint;
+};
+var mockEndpointAccessToken = (mockReply) => {
+  const mockResponse = getMockAuthAccessTokenResponse();
+  const reply = mockReply ?? { status: 200, body: mockResponse.response };
+  const mockOidcTokensEndpoint = (0, import_nock.default)(mockResponse.url).post("").reply(reply.status, reply.body);
+  return mockOidcTokensEndpoint;
+};
+
+
+
+
+exports.fixtures_exports = fixtures_exports; exports.authentication_exports = authentication_exports;
+//# sourceMappingURL=chunk-BVM4HBM4.js.map

package/dist/chunk-BVM4HBM4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/index.ts","../src/controllers/authentication/__fixtures__/index.ts","../src/controllers/authentication/__fixtures__/mockResponses.ts","../src/controllers/authentication/__fixtures__/mockServices.ts"],"names":["nock"],"mappings":";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACiBO,IAAM,aAAa;AACnB,IAAM,sBAAqC;AAAA,EAChD,OAAO;AACT;AAEO,IAAM,2BAA2B,MAAM;AAC5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,WACX;AACK,IAAM,sBAAqC;AAAA,EAChD,OAAO;AAAA;AAAA,EAEP,aAAY,oBAAI,KAAK,GAAE,SAAS;AAAA,EAChC,SAAS;AAAA;AAAA,IAEP,eAAe;AAAA;AAAA,IAEf,YAAY;AAAA,EACd;AACF;AAEO,IAAM,2BAA2B,MAAM;AAC5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,oBAAoB,qBAAqB,QAAQ;AACvD,IAAM,2BAA+C;AAAA;AAAA,EAE1D,cAAc;AAAA;AAAA,EAEd,aAAY,oBAAI,KAAK,GAAE,QAAQ;AACjC;AAEO,IAAM,iCAAiC,MAAM;AAClD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;;;AClEA,kBAAiB;AAaV,IAAM,uBAAuB,CAAC,cAA0B;AAC7D,QAAM,eAAe,yBAAyB;AAC9C,QAAM,QAAQ,aAAa,EAAE,QAAQ,KAAK,MAAM,aAAa,SAAS;AACtE,QAAM,wBAAoB,YAAAA,SAAK,aAAa,GAAG,EAC5C,IAAI,EAAE,EACN,MAAM,IAAI,EACV,MAAM,MAAM,QAAQ,MAAM,IAAI;AAEjC,SAAO;AACT;AAEO,IAAM,oBAAoB,CAAC,cAA0B;AAC1D,QAAM,eAAe,yBAAyB;AAC9C,QAAM,QAAQ,aAAa,EAAE,QAAQ,KAAK,MAAM,aAAa,SAAS;AACtE,QAAM,wBAAoB,YAAAA,SAAK,aAAa,GAAG,EAC5C,KAAK,EAAE,EACP,MAAM,MAAM,QAAQ,MAAM,IAAI;AAEjC,SAAO;AACT;AAEO,IAAM,0BAA0B,CAAC,cAA0B;AAChE,QAAM,eAAe,+BAA+B;AACpD,QAAM,QAAQ,aAAa,EAAE,QAAQ,KAAK,MAAM,aAAa,SAAS;AACtE,QAAM,6BAAyB,YAAAA,SAAK,aAAa,GAAG,EACjD,KAAK,EAAE,EACP,MAAM,MAAM,QAAQ,MAAM,IAAI;AAEjC,SAAO;AACT","sourcesContent":["import Controller from './AuthenticationController';\n\nexport { Controller };\nexport * from './AuthenticationController';\nexport * as Mocks from './__fixtures__';\n","export * from './mockResponses';\nexport * from './mockServices';\n","import type {\n  LoginResponse,\n  NonceResponse,\n  OAuthTokenResponse,\n} from '../services';\nimport {\n  AUTH_LOGIN_ENDPOINT,\n  AUTH_NONCE_ENDPOINT,\n  OIDC_TOKENS_ENDPOINT,\n} from '../services';\n\ntype MockResponse = {\n  url: string;\n  requestMethod: 'GET' | 'POST' | 'PUT';\n  response: unknown;\n};\n\nexport const MOCK_NONCE = '4cbfqzoQpcNxVImGv';\nexport const MOCK_NONCE_RESPONSE: NonceResponse = {\n  nonce: MOCK_NONCE,\n};\n\nexport const getMockAuthNonceResponse = () => {\n  return {\n    url: AUTH_NONCE_ENDPOINT,\n    requestMethod: 'GET',\n    response: MOCK_NONCE_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const MOCK_JWT =\n  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';\nexport const MOCK_LOGIN_RESPONSE: LoginResponse = {\n  token: MOCK_JWT,\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: new Date().toString(),\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: 'MOCK_IDENTIFIER',\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: 'MOCK_PROFILE_ID',\n  },\n};\n\nexport const getMockAuthLoginResponse = () => {\n  return {\n    url: AUTH_LOGIN_ENDPOINT,\n    requestMethod: 'POST',\n    response: MOCK_LOGIN_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const MOCK_ACCESS_TOKEN = `MOCK_ACCESS_TOKEN-${MOCK_JWT}`;\nexport const MOCK_OATH_TOKEN_RESPONSE: OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: MOCK_ACCESS_TOKEN,\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: new Date().getTime(),\n};\n\nexport const getMockAuthAccessTokenResponse = () => {\n  return {\n    url: OIDC_TOKENS_ENDPOINT,\n    requestMethod: 'POST',\n    response: MOCK_OATH_TOKEN_RESPONSE,\n  } satisfies MockResponse;\n};\n","import nock from 'nock';\n\nimport {\n  getMockAuthAccessTokenResponse,\n  getMockAuthLoginResponse,\n  getMockAuthNonceResponse,\n} from './mockResponses';\n\ntype MockReply = {\n  status: nock.StatusCode;\n  body?: nock.Body;\n};\n\nexport const mockEndpointGetNonce = (mockReply?: MockReply) => {\n  const mockResponse = getMockAuthNonceResponse();\n  const reply = mockReply ?? { status: 200, body: mockResponse.response };\n  const mockNonceEndpoint = nock(mockResponse.url)\n    .get('')\n    .query(true)\n    .reply(reply.status, reply.body);\n\n  return mockNonceEndpoint;\n};\n\nexport const mockEndpointLogin = (mockReply?: MockReply) => {\n  const mockResponse = getMockAuthLoginResponse();\n  const reply = mockReply ?? { status: 200, body: mockResponse.response };\n  const mockLoginEndpoint = nock(mockResponse.url)\n    .post('')\n    .reply(reply.status, reply.body);\n\n  return mockLoginEndpoint;\n};\n\nexport const mockEndpointAccessToken = (mockReply?: MockReply) => {\n  const mockResponse = getMockAuthAccessTokenResponse();\n  const reply = mockReply ?? { status: 200, body: mockResponse.response };\n  const mockOidcTokensEndpoint = nock(mockResponse.url)\n    .post('')\n    .reply(reply.status, reply.body);\n\n  return mockOidcTokensEndpoint;\n};\n"]}