@metamask/profile-sync-controller 0.0.0 → 0.1.1

package/CHANGELOG.md

@@ -7,4 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-[Unreleased]: https://github.com/MetaMask/core/
+## [0.1.1]
+
+### Added
+
+- export `defaultState` for `AuthenticationController` and `UserStorageController`. ([#4441](https://github.com/MetaMask/core/pull/4441))
+
+### Changed
+
+- `AuthType`, `Env`, `Platform` are changed from const enums to enums ([#4441](https://github.com/MetaMask/core/pull/4441))
+
+## [0.1.0]
+
+### Added
+
+- Initial release
+
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.1...HEAD
+[0.1.1]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.0...@metamask/profile-sync-controller@0.1.1
+[0.1.0]: https://github.com/MetaMask/core/releases/tag/@metamask/profile-sync-controller@0.1.0

package/dist/chunk-2XGRQBXI.mjs

@@ -0,0 +1,70 @@
+import {
+  createEntryPath
+} from "./chunk-AUFUOKJW.mjs";
+import {
+  encryption_default
+} from "./chunk-5TOWF6UW.mjs";
+import {
+  getEnvUrls
+} from "./chunk-FQ5SDMRE.mjs";
+
+// src/controllers/user-storage/services.ts
+import log from "loglevel";
+var ENV_URLS = getEnvUrls("prd" /* PRD */);
+var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
+var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
+async function getUserStorage(opts) {
+  try {
+    const path = createEntryPath(opts.entryKey, opts.storageKey);
+    const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);
+    const userStorageResponse = await fetch(url.toString(), {
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${opts.bearerToken}`
+      }
+    });
+    if (userStorageResponse.status === 404) {
+      return null;
+    }
+    if (userStorageResponse.status !== 200) {
+      throw new Error("Unable to get User Storage");
+    }
+    const userStorage = await userStorageResponse.json();
+    const encryptedData = userStorage?.Data ?? null;
+    if (!encryptedData) {
+      return null;
+    }
+    const decryptedData = encryption_default.decryptString(
+      encryptedData,
+      opts.storageKey
+    );
+    return decryptedData;
+  } catch (e) {
+    log.error("Failed to get user storage", e);
+    return null;
+  }
+}
+async function upsertUserStorage(data, opts) {
+  const encryptedData = encryption_default.encryptString(data, opts.storageKey);
+  const path = createEntryPath(opts.entryKey, opts.storageKey);
+  const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);
+  const res = await fetch(url.toString(), {
+    method: "PUT",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${opts.bearerToken}`
+    },
+    body: JSON.stringify({ data: encryptedData })
+  });
+  if (!res.ok) {
+    throw new Error("user-storage - unable to upsert data");
+  }
+}
+
+export {
+  USER_STORAGE_API,
+  USER_STORAGE_ENDPOINT,
+  getUserStorage,
+  upsertUserStorage
+};
+//# sourceMappingURL=chunk-2XGRQBXI.mjs.map

package/dist/chunk-2XGRQBXI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/services.ts"],"sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk';\nimport encryption from './encryption';\nimport type { UserStorageEntryKeys } from './schema';\nimport { createEntryPath } from './schema';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape\n */\nexport type GetUserStorageResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  HashedKey: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  Data: string;\n};\n\nexport type UserStorageOptions = {\n  bearerToken: string;\n  entryKey: UserStorageEntryKeys;\n  storageKey: string;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n  opts: UserStorageOptions,\n): Promise<string | null> {\n  try {\n    const path = createEntryPath(opts.entryKey, opts.storageKey);\n    const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${opts.bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates entry does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error('Unable to get User Storage');\n    }\n\n    const userStorage: GetUserStorageResponse | null =\n      await userStorageResponse.json();\n    const encryptedData = userStorage?.Data ?? null;\n\n    if (!encryptedData) {\n      return null;\n    }\n\n    const decryptedData = encryption.decryptString(\n      encryptedData,\n      opts.storageKey,\n    );\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n  data: string,\n  opts: UserStorageOptions,\n): Promise<void> {\n  const encryptedData = encryption.encryptString(data, opts.storageKey);\n  const path = createEntryPath(opts.entryKey, opts.storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${opts.bearerToken}`,\n    },\n    body: JSON.stringify({ data: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error('user-storage - unable to upsert data');\n  }\n}\n"],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAOhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwBxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,OAAO,gBAAgB,KAAK,UAAU,KAAK,UAAU;AAC3D,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,IAAI,EAAE;AAErD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK,WAAW;AAAA,MAC3C;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,mBAAW;AAAA,MAC/B;AAAA,MACA,KAAK;AAAA,IACP;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,gBAAgB,mBAAW,cAAc,MAAM,KAAK,UAAU;AACpE,QAAM,OAAO,gBAAgB,KAAK,UAAU,KAAK,UAAU;AAC3D,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,IAAI,EAAE;AAErD,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK,WAAW;AAAA,IAC3C;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF;","names":[]}

package/dist/chunk-32HAX3MW.mjs

@@ -0,0 +1,224 @@
+import {
+  createLoginRawMessage,
+  getAccessToken,
+  getNonce,
+  login
+} from "./chunk-KBCXN3YW.mjs";
+import {
+  createSnapPublicKeyRequest,
+  createSnapSignMessageRequest
+} from "./chunk-6P6CUKKI.mjs";
+import {
+  __privateAdd,
+  __privateGet,
+  __privateMethod,
+  __privateSet
+} from "./chunk-U5UIDVOO.mjs";
+
+// src/controllers/authentication/AuthenticationController.ts
+import { BaseController } from "@metamask/base-controller";
+var THIRTY_MIN_MS = 1e3 * 60 * 30;
+var controllerName = "AuthenticationController";
+var defaultState = {
+  isSignedIn: false
+};
+var metadata = {
+  isSignedIn: {
+    persist: true,
+    anonymous: true
+  },
+  sessionData: {
+    persist: true,
+    anonymous: false
+  }
+};
+var _metametrics, _registerMessageHandlers, registerMessageHandlers_fn, _assertLoggedIn, assertLoggedIn_fn, _performAuthenticationFlow, performAuthenticationFlow_fn, _hasValidSession, hasValidSession_fn, _snapGetPublicKey, snapGetPublicKey_fn, _snapSignMessage, snapSignMessage_fn;
+var AuthenticationController = class extends BaseController {
+  constructor({
+    messenger,
+    state,
+    metametrics
+  }) {
+    super({
+      messenger,
+      metadata,
+      name: controllerName,
+      state: { ...defaultState, ...state }
+    });
+    /**
+     * Constructor helper for registering this controller's messaging system
+     * actions.
+     */
+    __privateAdd(this, _registerMessageHandlers);
+    __privateAdd(this, _assertLoggedIn);
+    __privateAdd(this, _performAuthenticationFlow);
+    __privateAdd(this, _hasValidSession);
+    /**
+     * Returns the auth snap public key.
+     *
+     * @returns The snap public key.
+     */
+    __privateAdd(this, _snapGetPublicKey);
+    /**
+     * Signs a specific message using an underlying auth snap.
+     *
+     * @param message - A specific tagged message to sign.
+     * @returns A Signature created by the snap.
+     */
+    __privateAdd(this, _snapSignMessage);
+    __privateAdd(this, _metametrics, void 0);
+    __privateSet(this, _metametrics, metametrics);
+    __privateMethod(this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+  }
+  async performSignIn() {
+    const { accessToken } = await __privateMethod(this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return accessToken;
+  }
+  performSignOut() {
+    __privateMethod(this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    this.update((state) => {
+      state.isSignedIn = false;
+      state.sessionData = void 0;
+    });
+  }
+  async getBearerToken() {
+    __privateMethod(this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    if (__privateMethod(this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
+      return this.state.sessionData.accessToken;
+    }
+    const { accessToken } = await __privateMethod(this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return accessToken;
+  }
+  /**
+   * Will return a session profile.
+   * Throws if a user is not logged in.
+   *
+   * @returns profile for the session.
+   */
+  async getSessionProfile() {
+    __privateMethod(this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    if (__privateMethod(this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
+      return this.state.sessionData.profile;
+    }
+    const { profile } = await __privateMethod(this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return profile;
+  }
+  isSignedIn() {
+    return this.state.isSignedIn;
+  }
+};
+_metametrics = new WeakMap();
+_registerMessageHandlers = new WeakSet();
+registerMessageHandlers_fn = function() {
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:getBearerToken",
+    this.getBearerToken.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:getSessionProfile",
+    this.getSessionProfile.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:isSignedIn",
+    this.isSignedIn.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:performSignIn",
+    this.performSignIn.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:performSignOut",
+    this.performSignOut.bind(this)
+  );
+};
+_assertLoggedIn = new WeakSet();
+assertLoggedIn_fn = function() {
+  if (!this.state.isSignedIn) {
+    throw new Error(
+      `${controllerName}: Unable to call method, user is not authenticated`
+    );
+  }
+};
+_performAuthenticationFlow = new WeakSet();
+performAuthenticationFlow_fn = async function() {
+  try {
+    const publicKey = await __privateMethod(this, _snapGetPublicKey, snapGetPublicKey_fn).call(this);
+    const nonce = await getNonce(publicKey);
+    if (!nonce) {
+      throw new Error(`Unable to get nonce`);
+    }
+    const rawMessage = createLoginRawMessage(nonce, publicKey);
+    const signature = await __privateMethod(this, _snapSignMessage, snapSignMessage_fn).call(this, rawMessage);
+    const loginResponse = await login(rawMessage, signature, {
+      metametricsId: __privateGet(this, _metametrics).getMetaMetricsId(),
+      agent: __privateGet(this, _metametrics).agent
+    });
+    if (!loginResponse?.token) {
+      throw new Error(`Unable to login`);
+    }
+    const profile = {
+      identifierId: loginResponse.profile.identifier_id,
+      profileId: loginResponse.profile.profile_id
+    };
+    const accessToken = await getAccessToken(loginResponse.token);
+    if (!accessToken) {
+      throw new Error(`Unable to get Access Token`);
+    }
+    this.update((state) => {
+      state.isSignedIn = true;
+      const expiresIn = /* @__PURE__ */ new Date();
+      expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);
+      state.sessionData = {
+        profile,
+        accessToken,
+        expiresIn: expiresIn.toString()
+      };
+    });
+    return {
+      profile,
+      accessToken
+    };
+  } catch (e) {
+    console.error("Failed to authenticate", e);
+    await this.messagingSystem.call(
+      "UserStorageController:disableProfileSyncing"
+    );
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new Error(
+      `${controllerName}: Failed to authenticate - ${errorMessage}`
+    );
+  }
+};
+_hasValidSession = new WeakSet();
+hasValidSession_fn = function(sessionData) {
+  if (!sessionData) {
+    return false;
+  }
+  const prevDate = Date.parse(sessionData.expiresIn);
+  if (isNaN(prevDate)) {
+    return false;
+  }
+  const currentDate = /* @__PURE__ */ new Date();
+  const diffMs = Math.abs(currentDate.getTime() - prevDate);
+  return THIRTY_MIN_MS > diffMs;
+};
+_snapGetPublicKey = new WeakSet();
+snapGetPublicKey_fn = function() {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    createSnapPublicKeyRequest()
+  );
+};
+_snapSignMessage = new WeakSet();
+snapSignMessage_fn = function(message) {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    createSnapSignMessageRequest(message)
+  );
+};
+
+export {
+  defaultState,
+  AuthenticationController
+};
+//# sourceMappingURL=chunk-32HAX3MW.mjs.map

package/dist/chunk-32HAX3MW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/AuthenticationController.ts"],"sourcesContent":["import type {\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport type { UserStorageControllerDisableProfileSyncing } from '../user-storage/UserStorageController';\nimport {\n  createSnapPublicKeyRequest,\n  createSnapSignMessageRequest,\n} from './auth-snap-requests';\nimport {\n  createLoginRawMessage,\n  getAccessToken,\n  getNonce,\n  login,\n} from './services';\n\nconst THIRTY_MIN_MS = 1000 * 60 * 30;\n\nconst controllerName = 'AuthenticationController';\n\n// State\ntype SessionProfile = {\n  identifierId: string;\n  profileId: string;\n};\n\ntype SessionData = {\n  /** profile - anonymous profile data for the given logged in user */\n  profile: SessionProfile;\n  /** accessToken - used to make requests authorized endpoints */\n  accessToken: string;\n  /** expiresIn - string date to determine if new access token is required  */\n  expiresIn: string;\n};\n\ntype MetaMetricsAuth = {\n  getMetaMetricsId: () => string;\n  agent: 'extension' | 'mobile';\n};\n\nexport type AuthenticationControllerState = {\n  /**\n   * Global isSignedIn state.\n   * Can be used to determine if \"Profile Syncing\" is enabled.\n   */\n  isSignedIn: boolean;\n  sessionData?: SessionData;\n};\nexport const defaultState: AuthenticationControllerState = {\n  isSignedIn: false,\n};\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    persist: true,\n    anonymous: true,\n  },\n  sessionData: {\n    persist: true,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof AuthenticationController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: AuthenticationController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performSignIn'\n  | 'performSignOut'\n  | 'getBearerToken'\n  | 'getSessionProfile'\n  | 'isSignedIn'\n>;\nexport type Actions = ActionsObj[keyof ActionsObj];\nexport type AuthenticationControllerPerformSignIn = ActionsObj['performSignIn'];\nexport type AuthenticationControllerPerformSignOut =\n  ActionsObj['performSignOut'];\nexport type AuthenticationControllerGetBearerToken =\n  ActionsObj['getBearerToken'];\nexport type AuthenticationControllerGetSessionProfile =\n  ActionsObj['getSessionProfile'];\nexport type AuthenticationControllerIsSignedIn = ActionsObj['isSignedIn'];\n\n// Allowed Actions\nexport type AllowedActions =\n  | HandleSnapRequest\n  | UserStorageControllerDisableProfileSyncing;\n\n// Messenger\nexport type AuthenticationControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  never,\n  AllowedActions['type'],\n  never\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Global Profile Syncing and Notifications\n */\nexport default class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  #metametrics: MetaMetricsAuth;\n\n  constructor({\n    messenger,\n    state,\n    metametrics,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    this.#metametrics = metametrics;\n\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getBearerToken',\n      this.getBearerToken.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getSessionProfile',\n      this.getSessionProfile.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:isSignedIn',\n      this.isSignedIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignIn',\n      this.performSignIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignOut',\n      this.performSignOut.bind(this),\n    );\n  }\n\n  public async performSignIn(): Promise<string> {\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  public performSignOut(): void {\n    this.#assertLoggedIn();\n\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.sessionData = undefined;\n    });\n  }\n\n  public async getBearerToken(): Promise<string> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.accessToken;\n    }\n\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  /**\n   * Will return a session profile.\n   * Throws if a user is not logged in.\n   *\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(): Promise<SessionProfile> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.profile;\n    }\n\n    const { profile } = await this.#performAuthenticationFlow();\n    return profile;\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  #assertLoggedIn(): void {\n    if (!this.state.isSignedIn) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  async #performAuthenticationFlow(): Promise<{\n    profile: SessionProfile;\n    accessToken: string;\n  }> {\n    try {\n      // 1. Nonce\n      const publicKey = await this.#snapGetPublicKey();\n      const nonce = await getNonce(publicKey);\n      if (!nonce) {\n        throw new Error(`Unable to get nonce`);\n      }\n\n      // 2. Login\n      const rawMessage = createLoginRawMessage(nonce, publicKey);\n      const signature = await this.#snapSignMessage(rawMessage);\n      const loginResponse = await login(rawMessage, signature, {\n        metametricsId: this.#metametrics.getMetaMetricsId(),\n        agent: this.#metametrics.agent,\n      });\n      if (!loginResponse?.token) {\n        throw new Error(`Unable to login`);\n      }\n\n      const profile: SessionProfile = {\n        identifierId: loginResponse.profile.identifier_id,\n        profileId: loginResponse.profile.profile_id,\n      };\n\n      // 3. Trade for Access Token\n      const accessToken = await getAccessToken(loginResponse.token);\n      if (!accessToken) {\n        throw new Error(`Unable to get Access Token`);\n      }\n\n      // Update Internal State\n      this.update((state) => {\n        state.isSignedIn = true;\n        const expiresIn = new Date();\n        expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);\n        state.sessionData = {\n          profile,\n          accessToken,\n          expiresIn: expiresIn.toString(),\n        };\n      });\n\n      return {\n        profile,\n        accessToken,\n      };\n    } catch (e) {\n      console.error('Failed to authenticate', e);\n      // Disable Profile Syncing\n      await this.messagingSystem.call(\n        'UserStorageController:disableProfileSyncing',\n      );\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new Error(\n        `${controllerName}: Failed to authenticate - ${errorMessage}`,\n      );\n    }\n  }\n\n  #hasValidSession(\n    sessionData: SessionData | undefined,\n  ): sessionData is SessionData {\n    if (!sessionData) {\n      return false;\n    }\n\n    const prevDate = Date.parse(sessionData.expiresIn);\n    if (isNaN(prevDate)) {\n      return false;\n    }\n\n    const currentDate = new Date();\n    const diffMs = Math.abs(currentDate.getTime() - prevDate);\n\n    return THIRTY_MIN_MS > diffMs;\n  }\n\n  /**\n   * Returns the auth snap public key.\n   *\n   * @returns The snap public key.\n   */\n  #snapGetPublicKey(): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapPublicKeyRequest(),\n    ) as Promise<string>;\n  }\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    ) as Promise<string>;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAIA,SAAS,sBAAsB;AAe/B,IAAM,gBAAgB,MAAO,KAAK;AAElC,IAAM,iBAAiB;AA8BhB,IAAM,eAA8C;AAAA,EACzD,YAAY;AACd;AACA,IAAM,WAAyD;AAAA,EAC7D,YAAY;AAAA,IACV,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AA/DA;AA2GA,IAAqB,2BAArB,cAAsD,eAIpD;AAAA,EAGA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAQG;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM;AAAA,IACrC,CAAC;AAWH;AAAA;AAAA;AAAA;AAAA;AAyEA;AAQA,uBAAM;AAgEN;AAuBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AApNA;AAsBE,uBAAK,cAAe;AAEpB,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,gBAAiC;AAC5C,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA,EAEO,iBAAuB;AAC5B,0BAAK,oCAAL;AAEA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,iBAAkC;AAC7C,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,oBAA6C;AACxD,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,sBAAK,0DAAL;AAC1B,WAAO;AAAA,EACT;AAAA,EAEO,aAAsB;AAC3B,WAAO,KAAK,MAAM;AAAA,EACpB;AAoHF;AA1NE;AA+BA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,WAAW,KAAK,IAAI;AAAA,EAC3B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AACF;AAgDA;AAAA,oBAAe,WAAS;AACtB,MAAI,CAAC,KAAK,MAAM,YAAY;AAC1B,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAEM;AAAA,+BAA0B,iBAG7B;AACD,MAAI;AAEF,UAAM,YAAY,MAAM,sBAAK,wCAAL;AACxB,UAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAGA,UAAM,aAAa,sBAAsB,OAAO,SAAS;AACzD,UAAM,YAAY,MAAM,sBAAK,sCAAL,WAAsB;AAC9C,UAAM,gBAAgB,MAAM,MAAM,YAAY,WAAW;AAAA,MACvD,eAAe,mBAAK,cAAa,iBAAiB;AAAA,MAClD,OAAO,mBAAK,cAAa;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,eAAe,OAAO;AACzB,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAM,UAA0B;AAAA,MAC9B,cAAc,cAAc,QAAQ;AAAA,MACpC,WAAW,cAAc,QAAQ;AAAA,IACnC;AAGA,UAAM,cAAc,MAAM,eAAe,cAAc,KAAK;AAC5D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAGA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,YAAY,oBAAI,KAAK;AAC3B,gBAAU,QAAQ,UAAU,QAAQ,IAAI,aAAa;AACrD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,WAAW,UAAU,SAAS;AAAA,MAChC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,MAAM,0BAA0B,CAAC;AAEzC,UAAM,KAAK,gBAAgB;AAAA,MACzB;AAAA,IACF;AACA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,GAAG,cAAc,8BAA8B,YAAY;AAAA,IAC7D;AAAA,EACF;AACF;AAEA;AAAA,qBAAgB,SACd,aAC4B;AAC5B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,SAAS;AACjD,MAAI,MAAM,QAAQ,GAAG;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAI,KAAK;AAC7B,QAAM,SAAS,KAAK,IAAI,YAAY,QAAQ,IAAI,QAAQ;AAExD,SAAO,gBAAgB;AACzB;AAOA;AAAA,sBAAiB,WAAoB;AACnC,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,2BAA2B;AAAA,EAC7B;AACF;AAQA;AAAA,qBAAgB,SAAC,SAAgD;AAC/D,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AACF;","names":[]}

package/dist/chunk-5SXXO4MV.js

@@ -0,0 +1,70 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+var _chunkB6CSNLGEjs = require('./chunk-B6CSNLGE.js');
+
+
+var _chunkAK7OTIWAjs = require('./chunk-AK7OTIWA.js');
+
+
+var _chunkSMKTWM6Ijs = require('./chunk-SMKTWM6I.js');
+
+// src/controllers/user-storage/services.ts
+var _loglevel = require('loglevel'); var _loglevel2 = _interopRequireDefault(_loglevel);
+var ENV_URLS = _chunkSMKTWM6Ijs.getEnvUrls.call(void 0, "prd" /* PRD */);
+var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
+var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
+async function getUserStorage(opts) {
+  try {
+    const path = _chunkB6CSNLGEjs.createEntryPath.call(void 0, opts.entryKey, opts.storageKey);
+    const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);
+    const userStorageResponse = await fetch(url.toString(), {
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${opts.bearerToken}`
+      }
+    });
+    if (userStorageResponse.status === 404) {
+      return null;
+    }
+    if (userStorageResponse.status !== 200) {
+      throw new Error("Unable to get User Storage");
+    }
+    const userStorage = await userStorageResponse.json();
+    const encryptedData = userStorage?.Data ?? null;
+    if (!encryptedData) {
+      return null;
+    }
+    const decryptedData = _chunkAK7OTIWAjs.encryption_default.decryptString(
+      encryptedData,
+      opts.storageKey
+    );
+    return decryptedData;
+  } catch (e) {
+    _loglevel2.default.error("Failed to get user storage", e);
+    return null;
+  }
+}
+async function upsertUserStorage(data, opts) {
+  const encryptedData = _chunkAK7OTIWAjs.encryption_default.encryptString(data, opts.storageKey);
+  const path = _chunkB6CSNLGEjs.createEntryPath.call(void 0, opts.entryKey, opts.storageKey);
+  const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);
+  const res = await fetch(url.toString(), {
+    method: "PUT",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${opts.bearerToken}`
+    },
+    body: JSON.stringify({ data: encryptedData })
+  });
+  if (!res.ok) {
+    throw new Error("user-storage - unable to upsert data");
+  }
+}
+
+
+
+
+
+
+exports.USER_STORAGE_API = USER_STORAGE_API; exports.USER_STORAGE_ENDPOINT = USER_STORAGE_ENDPOINT; exports.getUserStorage = getUserStorage; exports.upsertUserStorage = upsertUserStorage;
+//# sourceMappingURL=chunk-5SXXO4MV.js.map

package/dist/chunk-5SXXO4MV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/services.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAOhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwBxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,OAAO,gBAAgB,KAAK,UAAU,KAAK,UAAU;AAC3D,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,IAAI,EAAE;AAErD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK,WAAW;AAAA,MAC3C;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,mBAAW;AAAA,MAC/B;AAAA,MACA,KAAK;AAAA,IACP;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,gBAAgB,mBAAW,cAAc,MAAM,KAAK,UAAU;AACpE,QAAM,OAAO,gBAAgB,KAAK,UAAU,KAAK,UAAU;AAC3D,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,IAAI,EAAE;AAErD,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK,WAAW;AAAA,IAC3C;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF","sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk';\nimport encryption from './encryption';\nimport type { UserStorageEntryKeys } from './schema';\nimport { createEntryPath } from './schema';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape\n */\nexport type GetUserStorageResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  HashedKey: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  Data: string;\n};\n\nexport type UserStorageOptions = {\n  bearerToken: string;\n  entryKey: UserStorageEntryKeys;\n  storageKey: string;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n  opts: UserStorageOptions,\n): Promise<string | null> {\n  try {\n    const path = createEntryPath(opts.entryKey, opts.storageKey);\n    const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${opts.bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates entry does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error('Unable to get User Storage');\n    }\n\n    const userStorage: GetUserStorageResponse | null =\n      await userStorageResponse.json();\n    const encryptedData = userStorage?.Data ?? null;\n\n    if (!encryptedData) {\n      return null;\n    }\n\n    const decryptedData = encryption.decryptString(\n      encryptedData,\n      opts.storageKey,\n    );\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n  data: string,\n  opts: UserStorageOptions,\n): Promise<void> {\n  const encryptedData = encryption.encryptString(data, opts.storageKey);\n  const path = createEntryPath(opts.entryKey, opts.storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${opts.bearerToken}`,\n    },\n    body: JSON.stringify({ data: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error('user-storage - unable to upsert data');\n  }\n}\n"]}

package/dist/chunk-5TOWF6UW.mjs

@@ -0,0 +1,11 @@
+import {
+  encryption_default
+} from "./chunk-K5UKU454.mjs";
+
+// src/controllers/user-storage/encryption/index.ts
+var encryption_default2 = encryption_default;
+
+export {
+  encryption_default2 as encryption_default
+};
+//# sourceMappingURL=chunk-5TOWF6UW.mjs.map

package/dist/chunk-5TOWF6UW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/index.ts"],"sourcesContent":["import Encryption from './encryption';\n\nexport { Encryption };\nexport * from './encryption';\nexport default Encryption;\n"],"mappings":";;;;;AAIA,IAAOA,sBAAQ;","names":["encryption_default"]}

package/dist/chunk-6P6CUKKI.mjs

@@ -0,0 +1,30 @@
+// src/controllers/authentication/auth-snap-requests.ts
+import { HandlerType } from "@metamask/snaps-utils";
+var snapId = "npm:@metamask/message-signing-snap";
+function createSnapPublicKeyRequest() {
+  return {
+    snapId,
+    origin: "",
+    handler: HandlerType.OnRpcRequest,
+    request: {
+      method: "getPublicKey"
+    }
+  };
+}
+function createSnapSignMessageRequest(message) {
+  return {
+    snapId,
+    origin: "",
+    handler: HandlerType.OnRpcRequest,
+    request: {
+      method: "signMessage",
+      params: { message }
+    }
+  };
+}
+
+export {
+  createSnapPublicKeyRequest,
+  createSnapSignMessageRequest
+};
+//# sourceMappingURL=chunk-6P6CUKKI.mjs.map

package/dist/chunk-6P6CUKKI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/auth-snap-requests.ts"],"sourcesContent":["import type { HandleSnapRequest } from '@metamask/snaps-controllers';\nimport type { SnapId } from '@metamask/snaps-sdk';\nimport { HandlerType } from '@metamask/snaps-utils';\n\ntype SnapRPCRequest = Parameters<HandleSnapRequest['handler']>[0];\n\nconst snapId = 'npm:@metamask/message-signing-snap' as SnapId;\n\n/**\n * Constructs Request to Message Signing Snap to get Public Key\n *\n * @returns Snap Public Key Request\n */\nexport function createSnapPublicKeyRequest(): SnapRPCRequest {\n  return {\n    snapId,\n    origin: '',\n    handler: HandlerType.OnRpcRequest,\n    request: {\n      method: 'getPublicKey',\n    },\n  };\n}\n\n/**\n * Constructs Request to get Message Signing Snap to sign a message.\n *\n * @param message - message to sign\n * @returns Snap Sign Message Request\n */\nexport function createSnapSignMessageRequest(\n  message: `metamask:${string}`,\n): SnapRPCRequest {\n  return {\n    snapId,\n    origin: '',\n    handler: HandlerType.OnRpcRequest,\n    request: {\n      method: 'signMessage',\n      params: { message },\n    },\n  };\n}\n"],"mappings":";AAEA,SAAS,mBAAmB;AAI5B,IAAM,SAAS;AAOR,SAAS,6BAA6C;AAC3D,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,SAAS,YAAY;AAAA,IACrB,SAAS;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAQO,SAAS,6BACd,SACgB;AAChB,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,SAAS,YAAY;AAAA,IACrB,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ,EAAE,QAAQ;AAAA,IACpB;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-76VRE4BI.mjs

@@ -0,0 +1,18 @@
+// src/controllers/user-storage/encryption/utils.ts
+var byteArrayToBase64 = (byteArray) => {
+  return Buffer.from(byteArray).toString("base64");
+};
+var base64ToByteArray = (base64) => {
+  return new Uint8Array(Buffer.from(base64, "base64"));
+};
+var bytesToUtf8 = (byteArray) => {
+  const decoder = new TextDecoder("utf-8");
+  return decoder.decode(byteArray);
+};
+
+export {
+  byteArrayToBase64,
+  base64ToByteArray,
+  bytesToUtf8
+};
+//# sourceMappingURL=chunk-76VRE4BI.mjs.map

package/dist/chunk-76VRE4BI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/utils.ts"],"sourcesContent":["export const byteArrayToBase64 = (byteArray: Uint8Array) => {\n  return Buffer.from(byteArray).toString('base64');\n};\n\nexport const base64ToByteArray = (base64: string) => {\n  return new Uint8Array(Buffer.from(base64, 'base64'));\n};\n\nexport const bytesToUtf8 = (byteArray: Uint8Array) => {\n  const decoder = new TextDecoder('utf-8');\n  return decoder.decode(byteArray);\n};\n"],"mappings":";AAAO,IAAM,oBAAoB,CAAC,cAA0B;AAC1D,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,QAAQ;AACjD;AAEO,IAAM,oBAAoB,CAAC,WAAmB;AACnD,SAAO,IAAI,WAAW,OAAO,KAAK,QAAQ,QAAQ,CAAC;AACrD;AAEO,IAAM,cAAc,CAAC,cAA0B;AACpD,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,SAAO,QAAQ,OAAO,SAAS;AACjC;","names":[]}

package/dist/chunk-AARMY5TW.mjs

@@ -0,0 +1,86 @@
+import {
+  AuthenticationController,
+  defaultState
+} from "./chunk-32HAX3MW.mjs";
+import {
+  AUTH_LOGIN_ENDPOINT,
+  AUTH_NONCE_ENDPOINT,
+  OIDC_TOKENS_ENDPOINT
+} from "./chunk-KBCXN3YW.mjs";
+import {
+  __export
+} from "./chunk-U5UIDVOO.mjs";
+
+// src/controllers/authentication/index.ts
+var authentication_exports = {};
+__export(authentication_exports, {
+  Controller: () => AuthenticationController,
+  Mocks: () => fixtures_exports,
+  defaultState: () => defaultState
+});
+
+// src/controllers/authentication/__fixtures__/index.ts
+var fixtures_exports = {};
+__export(fixtures_exports, {
+  MOCK_ACCESS_TOKEN: () => MOCK_ACCESS_TOKEN,
+  MOCK_JWT: () => MOCK_JWT,
+  MOCK_LOGIN_RESPONSE: () => MOCK_LOGIN_RESPONSE,
+  MOCK_NONCE: () => MOCK_NONCE,
+  MOCK_NONCE_RESPONSE: () => MOCK_NONCE_RESPONSE,
+  MOCK_OATH_TOKEN_RESPONSE: () => MOCK_OATH_TOKEN_RESPONSE,
+  getMockAuthAccessTokenResponse: () => getMockAuthAccessTokenResponse,
+  getMockAuthLoginResponse: () => getMockAuthLoginResponse,
+  getMockAuthNonceResponse: () => getMockAuthNonceResponse
+});
+
+// src/controllers/authentication/__fixtures__/mockResponses.ts
+var MOCK_NONCE = "4cbfqzoQpcNxVImGv";
+var MOCK_NONCE_RESPONSE = {
+  nonce: MOCK_NONCE
+};
+var getMockAuthNonceResponse = () => {
+  return {
+    url: AUTH_NONCE_ENDPOINT,
+    requestMethod: "GET",
+    response: MOCK_NONCE_RESPONSE
+  };
+};
+var MOCK_JWT = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c";
+var MOCK_LOGIN_RESPONSE = {
+  token: MOCK_JWT,
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  expires_in: (/* @__PURE__ */ new Date()).toString(),
+  profile: {
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    identifier_id: "MOCK_IDENTIFIER",
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    profile_id: "MOCK_PROFILE_ID"
+  }
+};
+var getMockAuthLoginResponse = () => {
+  return {
+    url: AUTH_LOGIN_ENDPOINT,
+    requestMethod: "POST",
+    response: MOCK_LOGIN_RESPONSE
+  };
+};
+var MOCK_ACCESS_TOKEN = `MOCK_ACCESS_TOKEN-${MOCK_JWT}`;
+var MOCK_OATH_TOKEN_RESPONSE = {
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  access_token: MOCK_ACCESS_TOKEN,
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  expires_in: (/* @__PURE__ */ new Date()).getTime()
+};
+var getMockAuthAccessTokenResponse = () => {
+  return {
+    url: OIDC_TOKENS_ENDPOINT,
+    requestMethod: "POST",
+    response: MOCK_OATH_TOKEN_RESPONSE
+  };
+};
+
+export {
+  fixtures_exports,
+  authentication_exports
+};
+//# sourceMappingURL=chunk-AARMY5TW.mjs.map

package/dist/chunk-AARMY5TW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/index.ts","../src/controllers/authentication/__fixtures__/index.ts","../src/controllers/authentication/__fixtures__/mockResponses.ts"],"sourcesContent":["import Controller from './AuthenticationController';\n\nexport { Controller };\nexport * from './AuthenticationController';\nexport * as Mocks from './__fixtures__';\n","export * from './mockResponses';\n","import type {\n  LoginResponse,\n  NonceResponse,\n  OAuthTokenResponse,\n} from '../services';\nimport {\n  AUTH_LOGIN_ENDPOINT,\n  AUTH_NONCE_ENDPOINT,\n  OIDC_TOKENS_ENDPOINT,\n} from '../services';\n\ntype MockResponse = {\n  url: string;\n  requestMethod: 'GET' | 'POST' | 'PUT';\n  response: unknown;\n};\n\nexport const MOCK_NONCE = '4cbfqzoQpcNxVImGv';\nexport const MOCK_NONCE_RESPONSE: NonceResponse = {\n  nonce: MOCK_NONCE,\n};\n\nexport const getMockAuthNonceResponse = () => {\n  return {\n    url: AUTH_NONCE_ENDPOINT,\n    requestMethod: 'GET',\n    response: MOCK_NONCE_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const MOCK_JWT =\n  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';\nexport const MOCK_LOGIN_RESPONSE: LoginResponse = {\n  token: MOCK_JWT,\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: new Date().toString(),\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: 'MOCK_IDENTIFIER',\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: 'MOCK_PROFILE_ID',\n  },\n};\n\nexport const getMockAuthLoginResponse = () => {\n  return {\n    url: AUTH_LOGIN_ENDPOINT,\n    requestMethod: 'POST',\n    response: MOCK_LOGIN_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const MOCK_ACCESS_TOKEN = `MOCK_ACCESS_TOKEN-${MOCK_JWT}`;\nexport const MOCK_OATH_TOKEN_RESPONSE: OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: MOCK_ACCESS_TOKEN,\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: new Date().getTime(),\n};\n\nexport const getMockAuthAccessTokenResponse = () => {\n  return {\n    url: OIDC_TOKENS_ENDPOINT,\n    requestMethod: 'POST',\n    response: MOCK_OATH_TOKEN_RESPONSE,\n  } satisfies MockResponse;\n};\n"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACiBO,IAAM,aAAa;AACnB,IAAM,sBAAqC;AAAA,EAChD,OAAO;AACT;AAEO,IAAM,2BAA2B,MAAM;AAC5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,WACX;AACK,IAAM,sBAAqC;AAAA,EAChD,OAAO;AAAA;AAAA,EAEP,aAAY,oBAAI,KAAK,GAAE,SAAS;AAAA,EAChC,SAAS;AAAA;AAAA,IAEP,eAAe;AAAA;AAAA,IAEf,YAAY;AAAA,EACd;AACF;AAEO,IAAM,2BAA2B,MAAM;AAC5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,oBAAoB,qBAAqB,QAAQ;AACvD,IAAM,2BAA+C;AAAA;AAAA,EAE1D,cAAc;AAAA;AAAA,EAEd,aAAY,oBAAI,KAAK,GAAE,QAAQ;AACjC;AAEO,IAAM,iCAAiC,MAAM;AAClD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;","names":[]}

package/dist/chunk-AK7OTIWA.js

@@ -0,0 +1,11 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
+
+// src/controllers/user-storage/encryption/index.ts
+var encryption_default2 = _chunkT3FNDVE3js.encryption_default;
+
+
+
+exports.encryption_default = encryption_default2;
+//# sourceMappingURL=chunk-AK7OTIWA.js.map

package/dist/chunk-AK7OTIWA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/index.ts"],"names":["encryption_default"],"mappings":";;;;;AAIA,IAAOA,sBAAQ","sourcesContent":["import Encryption from './encryption';\n\nexport { Encryption };\nexport * from './encryption';\nexport default Encryption;\n"]}

package/dist/chunk-AUFUOKJW.mjs

@@ -0,0 +1,25 @@
+import {
+  createSHA256Hash
+} from "./chunk-K5UKU454.mjs";
+
+// src/controllers/user-storage/schema.ts
+var USER_STORAGE_ENTRIES = {
+  notificationSettings: {
+    path: "notifications",
+    entryName: "notificationSettings"
+  }
+};
+function createEntryPath(entryKey, storageKey) {
+  const entry = USER_STORAGE_ENTRIES[entryKey];
+  if (!entry) {
+    throw new Error(`user-storage - invalid entry provided: ${entryKey}`);
+  }
+  const hashedKey = createSHA256Hash(entry.entryName + storageKey);
+  return `/${entry.path}/${hashedKey}`;
+}
+
+export {
+  USER_STORAGE_ENTRIES,
+  createEntryPath
+};
+//# sourceMappingURL=chunk-AUFUOKJW.mjs.map

package/dist/chunk-AUFUOKJW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"sourcesContent":["import { createSHA256Hash } from './encryption';\n\ntype UserStorageEntry = { path: string; entryName: string };\n\n/**\n * The User Storage Endpoint requires a path and an entry name.\n * Developers can provide additional paths by extending this variable below\n */\nexport const USER_STORAGE_ENTRIES = {\n  notificationSettings: {\n    path: 'notifications',\n    entryName: 'notificationSettings',\n  },\n} satisfies Record<string, UserStorageEntry>;\n\nexport type UserStorageEntryKeys = keyof typeof USER_STORAGE_ENTRIES;\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param entryKey - storage schema entry key\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n  entryKey: UserStorageEntryKeys,\n  storageKey: string,\n): string {\n  const entry = USER_STORAGE_ENTRIES[entryKey];\n  if (!entry) {\n    throw new Error(`user-storage - invalid entry provided: ${entryKey}`);\n  }\n\n  const hashedKey = createSHA256Hash(entry.entryName + storageKey);\n  return `/${entry.path}/${hashedKey}`;\n}\n"],"mappings":";;;;;AAQO,IAAM,uBAAuB;AAAA,EAClC,sBAAsB;AAAA,IACpB,MAAM;AAAA,IACN,WAAW;AAAA,EACb;AACF;AAaO,SAAS,gBACd,UACA,YACQ;AACR,QAAM,QAAQ,qBAAqB,QAAQ;AAC3C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,0CAA0C,QAAQ,EAAE;AAAA,EACtE;AAEA,QAAM,YAAY,iBAAiB,MAAM,YAAY,UAAU;AAC/D,SAAO,IAAI,MAAM,IAAI,IAAI,SAAS;AACpC;","names":[]}