@metamask/profile-sync-controller 0.0.0 → 0.1.1

package/dist/chunk-YASNOFBV.js

@@ -0,0 +1,274 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkIPSBQ3MSjs = require('./chunk-IPSBQ3MS.js');
+
+
+
+var _chunk5SXXO4MVjs = require('./chunk-5SXXO4MV.js');
+
+
+var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
+
+
+
+
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
+
+// src/controllers/user-storage/UserStorageController.ts
+var _basecontroller = require('@metamask/base-controller');
+var controllerName = "UserStorageController";
+var defaultState = {
+  isProfileSyncingEnabled: true,
+  isProfileSyncingUpdateLoading: false
+};
+var metadata = {
+  isProfileSyncingEnabled: {
+    persist: true,
+    anonymous: true
+  },
+  isProfileSyncingUpdateLoading: {
+    persist: false,
+    anonymous: false
+  }
+};
+var _auth, _notificationServices, _registerMessageHandlers, registerMessageHandlers_fn, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn, _createStorageKey, createStorageKey_fn, _snapSignMessage, snapSignMessage_fn, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn;
+var UserStorageController = class extends _basecontroller.BaseController {
+  constructor(params) {
+    super({
+      messenger: params.messenger,
+      metadata,
+      name: controllerName,
+      state: { ...defaultState, ...params.state }
+    });
+    /**
+     * Constructor helper for registering this controller's messaging system
+     * actions.
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _registerMessageHandlers);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _assertProfileSyncingEnabled);
+    /**
+     * Utility to get the bearer token and storage key
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getStorageKeyAndBearerToken);
+    /**
+     * Rather than storing the storage key, we can compute the storage key when needed.
+     *
+     * @returns the storage key
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _createStorageKey);
+    /**
+     * Signs a specific message using an underlying auth snap.
+     *
+     * @param message - A specific tagged message to sign.
+     * @returns A Signature created by the snap.
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _snapSignMessage);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _setIsProfileSyncingUpdateLoading);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _auth, {
+      getBearerToken: async () => {
+        return await this.messagingSystem.call(
+          "AuthenticationController:getBearerToken"
+        );
+      },
+      getProfileId: async () => {
+        const sessionProfile = await this.messagingSystem.call(
+          "AuthenticationController:getSessionProfile"
+        );
+        return sessionProfile?.profileId;
+      },
+      isAuthEnabled: () => {
+        return this.messagingSystem.call("AuthenticationController:isSignedIn");
+      },
+      signIn: async () => {
+        return await this.messagingSystem.call(
+          "AuthenticationController:performSignIn"
+        );
+      },
+      signOut: async () => {
+        return this.messagingSystem.call(
+          "AuthenticationController:performSignOut"
+        );
+      }
+    });
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _notificationServices, {
+      disableNotificationServices: async () => {
+        return await this.messagingSystem.call(
+          "NotificationServicesController:disableNotificationServices"
+        );
+      },
+      selectIsNotificationServicesEnabled: async () => {
+        return this.messagingSystem.call(
+          "NotificationServicesController:selectIsNotificationServicesEnabled"
+        );
+      }
+    });
+    this.getMetaMetricsState = params.getMetaMetricsState;
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+  }
+  async enableProfileSyncing() {
+    try {
+      _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, true);
+      const authEnabled = _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _auth).isAuthEnabled();
+      if (!authEnabled) {
+        await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _auth).signIn();
+      }
+      this.update((state) => {
+        state.isProfileSyncingEnabled = true;
+      });
+      _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+    } catch (e) {
+      _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(
+        `${controllerName} - failed to enable profile syncing - ${errorMessage}`
+      );
+    }
+  }
+  async setIsProfileSyncingEnabled(isProfileSyncingEnabled) {
+    this.update((state) => {
+      state.isProfileSyncingEnabled = isProfileSyncingEnabled;
+    });
+  }
+  async disableProfileSyncing() {
+    const isAlreadyDisabled = !this.state.isProfileSyncingEnabled;
+    if (isAlreadyDisabled) {
+      return;
+    }
+    try {
+      _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, true);
+      const isNotificationServicesEnabled = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _notificationServices).selectIsNotificationServicesEnabled();
+      if (isNotificationServicesEnabled) {
+        await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _notificationServices).disableNotificationServices();
+      }
+      const isMetaMetricsParticipation = this.getMetaMetricsState();
+      if (!isMetaMetricsParticipation) {
+        this.messagingSystem.call("AuthenticationController:performSignOut");
+      }
+      _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      this.update((state) => {
+        state.isProfileSyncingEnabled = false;
+      });
+    } catch (e) {
+      _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(
+        `${controllerName} - failed to disable profile syncing - ${errorMessage}`
+      );
+    }
+  }
+  /**
+   * Allows retrieval of stored data. Data stored is string formatted.
+   * Developers can extend the entry path and entry name through the `schema.ts` file.
+   *
+   * @param entryKey - entry key that matches schema
+   * @returns the decrypted string contents found from user storage (or null if not found)
+   */
+  async performGetStorage(entryKey) {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const { bearerToken, storageKey } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn).call(this);
+    const result = await _chunk5SXXO4MVjs.getUserStorage.call(void 0, {
+      entryKey,
+      bearerToken,
+      storageKey
+    });
+    return result;
+  }
+  /**
+   * Allows storage of user data. Data stored must be string formatted.
+   * Developers can extend the entry path and entry name through the `schema.ts` file.
+   *
+   * @param entryKey - entry key that matches schema
+   * @param value - The string data you want to store.
+   * @returns nothing. NOTE that an error is thrown if fails to store data.
+   */
+  async performSetStorage(entryKey, value) {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const { bearerToken, storageKey } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn).call(this);
+    await _chunk5SXXO4MVjs.upsertUserStorage.call(void 0, value, {
+      entryKey,
+      bearerToken,
+      storageKey
+    });
+  }
+  /**
+   * Retrieves the storage key, for internal use only!
+   *
+   * @returns the storage key
+   */
+  async getStorageKey() {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const storageKey = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createStorageKey, createStorageKey_fn).call(this);
+    return storageKey;
+  }
+};
+_auth = new WeakMap();
+_notificationServices = new WeakMap();
+_registerMessageHandlers = new WeakSet();
+registerMessageHandlers_fn = function() {
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:performGetStorage",
+    this.performGetStorage.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:performSetStorage",
+    this.performSetStorage.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:getStorageKey",
+    this.getStorageKey.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:enableProfileSyncing",
+    this.enableProfileSyncing.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:disableProfileSyncing",
+    this.disableProfileSyncing.bind(this)
+  );
+};
+_assertProfileSyncingEnabled = new WeakSet();
+assertProfileSyncingEnabled_fn = function() {
+  if (!this.state.isProfileSyncingEnabled) {
+    throw new Error(
+      `${controllerName}: Unable to call method, user is not authenticated`
+    );
+  }
+};
+_getStorageKeyAndBearerToken = new WeakSet();
+getStorageKeyAndBearerToken_fn = async function() {
+  const bearerToken = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _auth).getBearerToken();
+  if (!bearerToken) {
+    throw new Error("UserStorageController - unable to get bearer token");
+  }
+  const storageKey = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createStorageKey, createStorageKey_fn).call(this);
+  return { bearerToken, storageKey };
+};
+_createStorageKey = new WeakSet();
+createStorageKey_fn = async function() {
+  const id = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _auth).getProfileId();
+  if (!id) {
+    throw new Error("UserStorageController - unable to create storage key");
+  }
+  const storageKeySignature = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _snapSignMessage, snapSignMessage_fn).call(this, `metamask:${id}`);
+  const storageKey = _chunkT3FNDVE3js.createSHA256Hash.call(void 0, storageKeySignature);
+  return storageKey;
+};
+_snapSignMessage = new WeakSet();
+snapSignMessage_fn = function(message) {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    _chunkIPSBQ3MSjs.createSnapSignMessageRequest.call(void 0, message)
+  );
+};
+_setIsProfileSyncingUpdateLoading = new WeakSet();
+setIsProfileSyncingUpdateLoading_fn = function(isProfileSyncingUpdateLoading) {
+  this.update((state) => {
+    state.isProfileSyncingUpdateLoading = isProfileSyncingUpdateLoading;
+  });
+};
+
+
+
+
+exports.defaultState = defaultState; exports.UserStorageController = UserStorageController;
+//# sourceMappingURL=chunk-YASNOFBV.js.map

package/dist/chunk-YASNOFBV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/UserStorageController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIA,SAAS,sBAAsB;AA4B/B,IAAM,iBAAiB;AAchB,IAAM,eAA2C;AAAA,EACtD,yBAAyB;AAAA,EACzB,+BAA+B;AACjC;AAEA,IAAM,WAAsD;AAAA,EAC1D,yBAAyB;AAAA,IACvB,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,+BAA+B;AAAA,IAC7B,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AA5DA;AAsHA,IAAqB,wBAArB,cAAmD,eAIjD;AAAA,EA2CA,YAAY,QAIT;AACD,UAAM;AAAA,MACJ,WAAW,OAAO;AAAA,MAClB;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,OAAO,MAAM;AAAA,IAC5C,CAAC;AAUH;AAAA;AAAA;AAAA;AAAA;AAsJA;AAWA;AAAA;AAAA;AAAA,uBAAM;AAkBN;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAiBN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA;AAzQA,8BAAQ;AAAA,MACN,gBAAgB,YAAY;AAC1B,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,cAAc,YAAY;AACxB,cAAM,iBAAiB,MAAM,KAAK,gBAAgB;AAAA,UAChD;AAAA,QACF;AACA,eAAO,gBAAgB;AAAA,MACzB;AAAA,MACA,eAAe,MAAM;AACnB,eAAO,KAAK,gBAAgB,KAAK,qCAAqC;AAAA,MACxE;AAAA,MACA,QAAQ,YAAY;AAClB,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS,YAAY;AACnB,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,8CAAwB;AAAA,MACtB,6BAA6B,YAAY;AACvC,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,qCAAqC,YAAY;AAC/C,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAgBE,SAAK,sBAAsB,OAAO;AAClC,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,uBAAsC;AACjD,QAAI;AACF,4BAAK,wEAAL,WAAuC;AAEvC,YAAM,cAAc,mBAAK,OAAM,cAAc;AAC7C,UAAI,CAAC,aAAa;AAChB,cAAM,mBAAK,OAAM,OAAO;AAAA,MAC1B;AAEA,WAAK,OAAO,CAAC,UAAU;AACrB,cAAM,0BAA0B;AAAA,MAClC,CAAC;AAED,4BAAK,wEAAL,WAAuC;AAAA,IACzC,SAAS,GAAG;AACV,4BAAK,wEAAL,WAAuC;AACvC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,yCAAyC,YAAY;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,2BACX,yBACe;AACf,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,0BAA0B;AAAA,IAClC,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,wBAAuC;AAClD,UAAM,oBAAoB,CAAC,KAAK,MAAM;AACtC,QAAI,mBAAmB;AACrB;AAAA,IACF;AAEA,QAAI;AACF,4BAAK,wEAAL,WAAuC;AAEvC,YAAM,gCACJ,MAAM,mBAAK,uBAAsB,oCAAoC;AAEvE,UAAI,+BAA+B;AACjC,cAAM,mBAAK,uBAAsB,4BAA4B;AAAA,MAC/D;AAEA,YAAM,6BAA6B,KAAK,oBAAoB;AAE5D,UAAI,CAAC,4BAA4B;AAC/B,aAAK,gBAAgB,KAAK,yCAAyC;AAAA,MACrE;AAEA,4BAAK,wEAAL,WAAuC;AAEvC,WAAK,OAAO,CAAC,UAAU;AACrB,cAAM,0BAA0B;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,GAAG;AACV,4BAAK,wEAAL,WAAuC;AACvC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,0CAA0C,YAAY;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,kBACX,UACwB;AACxB,0BAAK,8DAAL;AACA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AACR,UAAM,SAAS,MAAM,eAAe;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,kBACX,UACA,OACe;AACf,0BAAK,8DAAL;AACA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AAER,UAAM,kBAAkB,OAAO;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAa,gBAAiC;AAC5C,0BAAK,8DAAL;AACA,UAAM,aAAa,MAAM,sBAAK,wCAAL;AACzB,WAAO;AAAA,EACT;AA8DF;AAhRE;AA2BA;AAmCA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,qBAAqB,KAAK,IAAI;AAAA,EACrC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,sBAAsB,KAAK,IAAI;AAAA,EACtC;AACF;AA6HA;AAAA,iCAA4B,WAAS;AACnC,MAAI,CAAC,KAAK,MAAM,yBAAyB;AACvC,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAKM;AAAA,iCAA4B,iBAG/B;AACD,QAAM,cAAc,MAAM,mBAAK,OAAM,eAAe;AACpD,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,aAAa,MAAM,sBAAK,wCAAL;AAEzB,SAAO,EAAE,aAAa,WAAW;AACnC;AAOM;AAAA,sBAAiB,iBAAoB;AACzC,QAAM,KAAa,MAAM,mBAAK,OAAM,aAAa;AACjD,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AAEA,QAAM,sBAAsB,MAAM,sBAAK,sCAAL,WAAsB,YAAY,EAAE;AACtE,QAAM,aAAa,iBAAiB,mBAAmB;AACvD,SAAO;AACT;AAQA;AAAA,qBAAgB,SAAC,SAAgD;AAC/D,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AACF;AAEA;AAAA,sCAAiC,SAC/B,+BACM;AACN,OAAK,OAAO,CAAC,UAAU;AACrB,UAAM,gCAAgC;AAAA,EACxC,CAAC;AACH","sourcesContent":["import type {\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport { createSnapSignMessageRequest } from '../authentication/auth-snap-requests';\nimport type {\n  AuthenticationControllerGetBearerToken,\n  AuthenticationControllerGetSessionProfile,\n  AuthenticationControllerIsSignedIn,\n  AuthenticationControllerPerformSignIn,\n  AuthenticationControllerPerformSignOut,\n} from '../authentication/AuthenticationController';\nimport { createSHA256Hash } from './encryption';\nimport type { UserStorageEntryKeys } from './schema';\nimport { getUserStorage, upsertUserStorage } from './services';\n\n// TODO: fix external dependencies\nexport declare type NotificationServicesControllerDisableNotificationServices =\n  {\n    type: `NotificationServicesController:disableNotificationServices`;\n    handler: () => Promise<void>;\n  };\n\nexport declare type NotificationServicesControllerSelectIsNotificationServicesEnabled =\n  {\n    type: `NotificationServicesController:selectIsNotificationServicesEnabled`;\n    handler: () => boolean;\n  };\n\nconst controllerName = 'UserStorageController';\n\n// State\nexport type UserStorageControllerState = {\n  /**\n   * Condition used by UI and to determine if we can use some of the User Storage methods.\n   */\n  isProfileSyncingEnabled: boolean;\n  /**\n   * Loading state for the profile syncing update\n   */\n  isProfileSyncingUpdateLoading: boolean;\n};\n\nexport const defaultState: UserStorageControllerState = {\n  isProfileSyncingEnabled: true,\n  isProfileSyncingUpdateLoading: false,\n};\n\nconst metadata: StateMetadata<UserStorageControllerState> = {\n  isProfileSyncingEnabled: {\n    persist: true,\n    anonymous: true,\n  },\n  isProfileSyncingUpdateLoading: {\n    persist: false,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof UserStorageController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: UserStorageController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performGetStorage'\n  | 'performSetStorage'\n  | 'getStorageKey'\n  | 'enableProfileSyncing'\n  | 'disableProfileSyncing'\n>;\nexport type Actions = ActionsObj[keyof ActionsObj];\nexport type UserStorageControllerPerformGetStorage =\n  ActionsObj['performGetStorage'];\nexport type UserStorageControllerPerformSetStorage =\n  ActionsObj['performSetStorage'];\nexport type UserStorageControllerGetStorageKey = ActionsObj['getStorageKey'];\nexport type UserStorageControllerEnableProfileSyncing =\n  ActionsObj['enableProfileSyncing'];\nexport type UserStorageControllerDisableProfileSyncing =\n  ActionsObj['disableProfileSyncing'];\n\n// Allowed Actions\nexport type AllowedActions =\n  // Snap Requests\n  | HandleSnapRequest\n  // Auth Requests\n  | AuthenticationControllerGetBearerToken\n  | AuthenticationControllerGetSessionProfile\n  | AuthenticationControllerPerformSignIn\n  | AuthenticationControllerIsSignedIn\n  | AuthenticationControllerPerformSignOut\n  // Metamask Notifications\n  | NotificationServicesControllerDisableNotificationServices\n  | NotificationServicesControllerSelectIsNotificationServicesEnabled;\n\n// Messenger\nexport type UserStorageControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  never,\n  AllowedActions['type'],\n  never\n>;\n\n/**\n * Reusable controller that allows any team to store synchronized data for a given user.\n * These can be settings shared cross MetaMask clients, or data we want to persist when uninstalling/reinstalling.\n *\n * NOTE:\n * - data stored on UserStorage is FULLY encrypted, with the only keys stored/managed on the client.\n * - No one can access this data unless they are have the SRP and are able to run the signing snap.\n */\nexport default class UserStorageController extends BaseController<\n  typeof controllerName,\n  UserStorageControllerState,\n  UserStorageControllerMessenger\n> {\n  #auth = {\n    getBearerToken: async () => {\n      return await this.messagingSystem.call(\n        'AuthenticationController:getBearerToken',\n      );\n    },\n    getProfileId: async () => {\n      const sessionProfile = await this.messagingSystem.call(\n        'AuthenticationController:getSessionProfile',\n      );\n      return sessionProfile?.profileId;\n    },\n    isAuthEnabled: () => {\n      return this.messagingSystem.call('AuthenticationController:isSignedIn');\n    },\n    signIn: async () => {\n      return await this.messagingSystem.call(\n        'AuthenticationController:performSignIn',\n      );\n    },\n    signOut: async () => {\n      return this.messagingSystem.call(\n        'AuthenticationController:performSignOut',\n      );\n    },\n  };\n\n  #notificationServices = {\n    disableNotificationServices: async () => {\n      return await this.messagingSystem.call(\n        'NotificationServicesController:disableNotificationServices',\n      );\n    },\n    selectIsNotificationServicesEnabled: async () => {\n      return this.messagingSystem.call(\n        'NotificationServicesController:selectIsNotificationServicesEnabled',\n      );\n    },\n  };\n\n  getMetaMetricsState: () => boolean;\n\n  constructor(params: {\n    messenger: UserStorageControllerMessenger;\n    state?: UserStorageControllerState;\n    getMetaMetricsState: () => boolean;\n  }) {\n    super({\n      messenger: params.messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...params.state },\n    });\n\n    this.getMetaMetricsState = params.getMetaMetricsState;\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performGetStorage',\n      this.performGetStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performSetStorage',\n      this.performSetStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:getStorageKey',\n      this.getStorageKey.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:enableProfileSyncing',\n      this.enableProfileSyncing.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:disableProfileSyncing',\n      this.disableProfileSyncing.bind(this),\n    );\n  }\n\n  public async enableProfileSyncing(): Promise<void> {\n    try {\n      this.#setIsProfileSyncingUpdateLoading(true);\n\n      const authEnabled = this.#auth.isAuthEnabled();\n      if (!authEnabled) {\n        await this.#auth.signIn();\n      }\n\n      this.update((state) => {\n        state.isProfileSyncingEnabled = true;\n      });\n\n      this.#setIsProfileSyncingUpdateLoading(false);\n    } catch (e) {\n      this.#setIsProfileSyncingUpdateLoading(false);\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to enable profile syncing - ${errorMessage}`,\n      );\n    }\n  }\n\n  public async setIsProfileSyncingEnabled(\n    isProfileSyncingEnabled: boolean,\n  ): Promise<void> {\n    this.update((state) => {\n      state.isProfileSyncingEnabled = isProfileSyncingEnabled;\n    });\n  }\n\n  public async disableProfileSyncing(): Promise<void> {\n    const isAlreadyDisabled = !this.state.isProfileSyncingEnabled;\n    if (isAlreadyDisabled) {\n      return;\n    }\n\n    try {\n      this.#setIsProfileSyncingUpdateLoading(true);\n\n      const isNotificationServicesEnabled =\n        await this.#notificationServices.selectIsNotificationServicesEnabled();\n\n      if (isNotificationServicesEnabled) {\n        await this.#notificationServices.disableNotificationServices();\n      }\n\n      const isMetaMetricsParticipation = this.getMetaMetricsState();\n\n      if (!isMetaMetricsParticipation) {\n        this.messagingSystem.call('AuthenticationController:performSignOut');\n      }\n\n      this.#setIsProfileSyncingUpdateLoading(false);\n\n      this.update((state) => {\n        state.isProfileSyncingEnabled = false;\n      });\n    } catch (e) {\n      this.#setIsProfileSyncingUpdateLoading(false);\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to disable profile syncing - ${errorMessage}`,\n      );\n    }\n  }\n\n  /**\n   * Allows retrieval of stored data. Data stored is string formatted.\n   * Developers can extend the entry path and entry name through the `schema.ts` file.\n   *\n   * @param entryKey - entry key that matches schema\n   * @returns the decrypted string contents found from user storage (or null if not found)\n   */\n  public async performGetStorage(\n    entryKey: UserStorageEntryKeys,\n  ): Promise<string | null> {\n    this.#assertProfileSyncingEnabled();\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n    const result = await getUserStorage({\n      entryKey,\n      bearerToken,\n      storageKey,\n    });\n\n    return result;\n  }\n\n  /**\n   * Allows storage of user data. Data stored must be string formatted.\n   * Developers can extend the entry path and entry name through the `schema.ts` file.\n   *\n   * @param entryKey - entry key that matches schema\n   * @param value - The string data you want to store.\n   * @returns nothing. NOTE that an error is thrown if fails to store data.\n   */\n  public async performSetStorage(\n    entryKey: UserStorageEntryKeys,\n    value: string,\n  ): Promise<void> {\n    this.#assertProfileSyncingEnabled();\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n\n    await upsertUserStorage(value, {\n      entryKey,\n      bearerToken,\n      storageKey,\n    });\n  }\n\n  /**\n   * Retrieves the storage key, for internal use only!\n   *\n   * @returns the storage key\n   */\n  public async getStorageKey(): Promise<string> {\n    this.#assertProfileSyncingEnabled();\n    const storageKey = await this.#createStorageKey();\n    return storageKey;\n  }\n\n  #assertProfileSyncingEnabled(): void {\n    if (!this.state.isProfileSyncingEnabled) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  /**\n   * Utility to get the bearer token and storage key\n   */\n  async #getStorageKeyAndBearerToken(): Promise<{\n    bearerToken: string;\n    storageKey: string;\n  }> {\n    const bearerToken = await this.#auth.getBearerToken();\n    if (!bearerToken) {\n      throw new Error('UserStorageController - unable to get bearer token');\n    }\n    const storageKey = await this.#createStorageKey();\n\n    return { bearerToken, storageKey };\n  }\n\n  /**\n   * Rather than storing the storage key, we can compute the storage key when needed.\n   *\n   * @returns the storage key\n   */\n  async #createStorageKey(): Promise<string> {\n    const id: string = await this.#auth.getProfileId();\n    if (!id) {\n      throw new Error('UserStorageController - unable to create storage key');\n    }\n\n    const storageKeySignature = await this.#snapSignMessage(`metamask:${id}`);\n    const storageKey = createSHA256Hash(storageKeySignature);\n    return storageKey;\n  }\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    ) as Promise<string>;\n  }\n\n  #setIsProfileSyncingUpdateLoading(\n    isProfileSyncingUpdateLoading: boolean,\n  ): void {\n    this.update((state) => {\n      state.isProfileSyncingUpdateLoading = isProfileSyncingUpdateLoading;\n    });\n  }\n}\n"]}

package/dist/chunk-YUXN5GSW.js

@@ -0,0 +1,224 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunkELHJSRS2js = require('./chunk-ELHJSRS2.js');
+
+
+
+var _chunkIPSBQ3MSjs = require('./chunk-IPSBQ3MS.js');
+
+
+
+
+
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
+
+// src/controllers/authentication/AuthenticationController.ts
+var _basecontroller = require('@metamask/base-controller');
+var THIRTY_MIN_MS = 1e3 * 60 * 30;
+var controllerName = "AuthenticationController";
+var defaultState = {
+  isSignedIn: false
+};
+var metadata = {
+  isSignedIn: {
+    persist: true,
+    anonymous: true
+  },
+  sessionData: {
+    persist: true,
+    anonymous: false
+  }
+};
+var _metametrics, _registerMessageHandlers, registerMessageHandlers_fn, _assertLoggedIn, assertLoggedIn_fn, _performAuthenticationFlow, performAuthenticationFlow_fn, _hasValidSession, hasValidSession_fn, _snapGetPublicKey, snapGetPublicKey_fn, _snapSignMessage, snapSignMessage_fn;
+var AuthenticationController = class extends _basecontroller.BaseController {
+  constructor({
+    messenger,
+    state,
+    metametrics
+  }) {
+    super({
+      messenger,
+      metadata,
+      name: controllerName,
+      state: { ...defaultState, ...state }
+    });
+    /**
+     * Constructor helper for registering this controller's messaging system
+     * actions.
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _registerMessageHandlers);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _assertLoggedIn);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _performAuthenticationFlow);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _hasValidSession);
+    /**
+     * Returns the auth snap public key.
+     *
+     * @returns The snap public key.
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _snapGetPublicKey);
+    /**
+     * Signs a specific message using an underlying auth snap.
+     *
+     * @param message - A specific tagged message to sign.
+     * @returns A Signature created by the snap.
+     */
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _snapSignMessage);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _metametrics, void 0);
+    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _metametrics, metametrics);
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+  }
+  async performSignIn() {
+    const { accessToken } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return accessToken;
+  }
+  performSignOut() {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    this.update((state) => {
+      state.isSignedIn = false;
+      state.sessionData = void 0;
+    });
+  }
+  async getBearerToken() {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    if (_chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
+      return this.state.sessionData.accessToken;
+    }
+    const { accessToken } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return accessToken;
+  }
+  /**
+   * Will return a session profile.
+   * Throws if a user is not logged in.
+   *
+   * @returns profile for the session.
+   */
+  async getSessionProfile() {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertLoggedIn, assertLoggedIn_fn).call(this);
+    if (_chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
+      return this.state.sessionData.profile;
+    }
+    const { profile } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
+    return profile;
+  }
+  isSignedIn() {
+    return this.state.isSignedIn;
+  }
+};
+_metametrics = new WeakMap();
+_registerMessageHandlers = new WeakSet();
+registerMessageHandlers_fn = function() {
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:getBearerToken",
+    this.getBearerToken.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:getSessionProfile",
+    this.getSessionProfile.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:isSignedIn",
+    this.isSignedIn.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:performSignIn",
+    this.performSignIn.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "AuthenticationController:performSignOut",
+    this.performSignOut.bind(this)
+  );
+};
+_assertLoggedIn = new WeakSet();
+assertLoggedIn_fn = function() {
+  if (!this.state.isSignedIn) {
+    throw new Error(
+      `${controllerName}: Unable to call method, user is not authenticated`
+    );
+  }
+};
+_performAuthenticationFlow = new WeakSet();
+performAuthenticationFlow_fn = async function() {
+  try {
+    const publicKey = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _snapGetPublicKey, snapGetPublicKey_fn).call(this);
+    const nonce = await _chunkELHJSRS2js.getNonce.call(void 0, publicKey);
+    if (!nonce) {
+      throw new Error(`Unable to get nonce`);
+    }
+    const rawMessage = _chunkELHJSRS2js.createLoginRawMessage.call(void 0, nonce, publicKey);
+    const signature = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _snapSignMessage, snapSignMessage_fn).call(this, rawMessage);
+    const loginResponse = await _chunkELHJSRS2js.login.call(void 0, rawMessage, signature, {
+      metametricsId: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _metametrics).getMetaMetricsId(),
+      agent: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _metametrics).agent
+    });
+    if (!loginResponse?.token) {
+      throw new Error(`Unable to login`);
+    }
+    const profile = {
+      identifierId: loginResponse.profile.identifier_id,
+      profileId: loginResponse.profile.profile_id
+    };
+    const accessToken = await _chunkELHJSRS2js.getAccessToken.call(void 0, loginResponse.token);
+    if (!accessToken) {
+      throw new Error(`Unable to get Access Token`);
+    }
+    this.update((state) => {
+      state.isSignedIn = true;
+      const expiresIn = /* @__PURE__ */ new Date();
+      expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);
+      state.sessionData = {
+        profile,
+        accessToken,
+        expiresIn: expiresIn.toString()
+      };
+    });
+    return {
+      profile,
+      accessToken
+    };
+  } catch (e) {
+    console.error("Failed to authenticate", e);
+    await this.messagingSystem.call(
+      "UserStorageController:disableProfileSyncing"
+    );
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new Error(
+      `${controllerName}: Failed to authenticate - ${errorMessage}`
+    );
+  }
+};
+_hasValidSession = new WeakSet();
+hasValidSession_fn = function(sessionData) {
+  if (!sessionData) {
+    return false;
+  }
+  const prevDate = Date.parse(sessionData.expiresIn);
+  if (isNaN(prevDate)) {
+    return false;
+  }
+  const currentDate = /* @__PURE__ */ new Date();
+  const diffMs = Math.abs(currentDate.getTime() - prevDate);
+  return THIRTY_MIN_MS > diffMs;
+};
+_snapGetPublicKey = new WeakSet();
+snapGetPublicKey_fn = function() {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    _chunkIPSBQ3MSjs.createSnapPublicKeyRequest.call(void 0, )
+  );
+};
+_snapSignMessage = new WeakSet();
+snapSignMessage_fn = function(message) {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    _chunkIPSBQ3MSjs.createSnapSignMessageRequest.call(void 0, message)
+  );
+};
+
+
+
+
+exports.defaultState = defaultState; exports.AuthenticationController = AuthenticationController;
+//# sourceMappingURL=chunk-YUXN5GSW.js.map

package/dist/chunk-YUXN5GSW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/AuthenticationController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA,SAAS,sBAAsB;AAe/B,IAAM,gBAAgB,MAAO,KAAK;AAElC,IAAM,iBAAiB;AA8BhB,IAAM,eAA8C;AAAA,EACzD,YAAY;AACd;AACA,IAAM,WAAyD;AAAA,EAC7D,YAAY;AAAA,IACV,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AA/DA;AA2GA,IAAqB,2BAArB,cAAsD,eAIpD;AAAA,EAGA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAQG;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM;AAAA,IACrC,CAAC;AAWH;AAAA;AAAA;AAAA;AAAA;AAyEA;AAQA,uBAAM;AAgEN;AAuBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AApNA;AAsBE,uBAAK,cAAe;AAEpB,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,gBAAiC;AAC5C,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA,EAEO,iBAAuB;AAC5B,0BAAK,oCAAL;AAEA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,iBAAkC;AAC7C,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,oBAA6C;AACxD,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,sBAAK,0DAAL;AAC1B,WAAO;AAAA,EACT;AAAA,EAEO,aAAsB;AAC3B,WAAO,KAAK,MAAM;AAAA,EACpB;AAoHF;AA1NE;AA+BA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,WAAW,KAAK,IAAI;AAAA,EAC3B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AACF;AAgDA;AAAA,oBAAe,WAAS;AACtB,MAAI,CAAC,KAAK,MAAM,YAAY;AAC1B,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAEM;AAAA,+BAA0B,iBAG7B;AACD,MAAI;AAEF,UAAM,YAAY,MAAM,sBAAK,wCAAL;AACxB,UAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAGA,UAAM,aAAa,sBAAsB,OAAO,SAAS;AACzD,UAAM,YAAY,MAAM,sBAAK,sCAAL,WAAsB;AAC9C,UAAM,gBAAgB,MAAM,MAAM,YAAY,WAAW;AAAA,MACvD,eAAe,mBAAK,cAAa,iBAAiB;AAAA,MAClD,OAAO,mBAAK,cAAa;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,eAAe,OAAO;AACzB,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAM,UAA0B;AAAA,MAC9B,cAAc,cAAc,QAAQ;AAAA,MACpC,WAAW,cAAc,QAAQ;AAAA,IACnC;AAGA,UAAM,cAAc,MAAM,eAAe,cAAc,KAAK;AAC5D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAGA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,YAAY,oBAAI,KAAK;AAC3B,gBAAU,QAAQ,UAAU,QAAQ,IAAI,aAAa;AACrD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,WAAW,UAAU,SAAS;AAAA,MAChC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,MAAM,0BAA0B,CAAC;AAEzC,UAAM,KAAK,gBAAgB;AAAA,MACzB;AAAA,IACF;AACA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,GAAG,cAAc,8BAA8B,YAAY;AAAA,IAC7D;AAAA,EACF;AACF;AAEA;AAAA,qBAAgB,SACd,aAC4B;AAC5B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,SAAS;AACjD,MAAI,MAAM,QAAQ,GAAG;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAI,KAAK;AAC7B,QAAM,SAAS,KAAK,IAAI,YAAY,QAAQ,IAAI,QAAQ;AAExD,SAAO,gBAAgB;AACzB;AAOA;AAAA,sBAAiB,WAAoB;AACnC,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,2BAA2B;AAAA,EAC7B;AACF;AAQA;AAAA,qBAAgB,SAAC,SAAgD;AAC/D,SAAO,KAAK,gBAAgB;AAAA,IAC1B;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AACF","sourcesContent":["import type {\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport type { UserStorageControllerDisableProfileSyncing } from '../user-storage/UserStorageController';\nimport {\n  createSnapPublicKeyRequest,\n  createSnapSignMessageRequest,\n} from './auth-snap-requests';\nimport {\n  createLoginRawMessage,\n  getAccessToken,\n  getNonce,\n  login,\n} from './services';\n\nconst THIRTY_MIN_MS = 1000 * 60 * 30;\n\nconst controllerName = 'AuthenticationController';\n\n// State\ntype SessionProfile = {\n  identifierId: string;\n  profileId: string;\n};\n\ntype SessionData = {\n  /** profile - anonymous profile data for the given logged in user */\n  profile: SessionProfile;\n  /** accessToken - used to make requests authorized endpoints */\n  accessToken: string;\n  /** expiresIn - string date to determine if new access token is required  */\n  expiresIn: string;\n};\n\ntype MetaMetricsAuth = {\n  getMetaMetricsId: () => string;\n  agent: 'extension' | 'mobile';\n};\n\nexport type AuthenticationControllerState = {\n  /**\n   * Global isSignedIn state.\n   * Can be used to determine if \"Profile Syncing\" is enabled.\n   */\n  isSignedIn: boolean;\n  sessionData?: SessionData;\n};\nexport const defaultState: AuthenticationControllerState = {\n  isSignedIn: false,\n};\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    persist: true,\n    anonymous: true,\n  },\n  sessionData: {\n    persist: true,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof AuthenticationController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: AuthenticationController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performSignIn'\n  | 'performSignOut'\n  | 'getBearerToken'\n  | 'getSessionProfile'\n  | 'isSignedIn'\n>;\nexport type Actions = ActionsObj[keyof ActionsObj];\nexport type AuthenticationControllerPerformSignIn = ActionsObj['performSignIn'];\nexport type AuthenticationControllerPerformSignOut =\n  ActionsObj['performSignOut'];\nexport type AuthenticationControllerGetBearerToken =\n  ActionsObj['getBearerToken'];\nexport type AuthenticationControllerGetSessionProfile =\n  ActionsObj['getSessionProfile'];\nexport type AuthenticationControllerIsSignedIn = ActionsObj['isSignedIn'];\n\n// Allowed Actions\nexport type AllowedActions =\n  | HandleSnapRequest\n  | UserStorageControllerDisableProfileSyncing;\n\n// Messenger\nexport type AuthenticationControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  never,\n  AllowedActions['type'],\n  never\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Global Profile Syncing and Notifications\n */\nexport default class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  #metametrics: MetaMetricsAuth;\n\n  constructor({\n    messenger,\n    state,\n    metametrics,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    this.#metametrics = metametrics;\n\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getBearerToken',\n      this.getBearerToken.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getSessionProfile',\n      this.getSessionProfile.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:isSignedIn',\n      this.isSignedIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignIn',\n      this.performSignIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignOut',\n      this.performSignOut.bind(this),\n    );\n  }\n\n  public async performSignIn(): Promise<string> {\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  public performSignOut(): void {\n    this.#assertLoggedIn();\n\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.sessionData = undefined;\n    });\n  }\n\n  public async getBearerToken(): Promise<string> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.accessToken;\n    }\n\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  /**\n   * Will return a session profile.\n   * Throws if a user is not logged in.\n   *\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(): Promise<SessionProfile> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.profile;\n    }\n\n    const { profile } = await this.#performAuthenticationFlow();\n    return profile;\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  #assertLoggedIn(): void {\n    if (!this.state.isSignedIn) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  async #performAuthenticationFlow(): Promise<{\n    profile: SessionProfile;\n    accessToken: string;\n  }> {\n    try {\n      // 1. Nonce\n      const publicKey = await this.#snapGetPublicKey();\n      const nonce = await getNonce(publicKey);\n      if (!nonce) {\n        throw new Error(`Unable to get nonce`);\n      }\n\n      // 2. Login\n      const rawMessage = createLoginRawMessage(nonce, publicKey);\n      const signature = await this.#snapSignMessage(rawMessage);\n      const loginResponse = await login(rawMessage, signature, {\n        metametricsId: this.#metametrics.getMetaMetricsId(),\n        agent: this.#metametrics.agent,\n      });\n      if (!loginResponse?.token) {\n        throw new Error(`Unable to login`);\n      }\n\n      const profile: SessionProfile = {\n        identifierId: loginResponse.profile.identifier_id,\n        profileId: loginResponse.profile.profile_id,\n      };\n\n      // 3. Trade for Access Token\n      const accessToken = await getAccessToken(loginResponse.token);\n      if (!accessToken) {\n        throw new Error(`Unable to get Access Token`);\n      }\n\n      // Update Internal State\n      this.update((state) => {\n        state.isSignedIn = true;\n        const expiresIn = new Date();\n        expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);\n        state.sessionData = {\n          profile,\n          accessToken,\n          expiresIn: expiresIn.toString(),\n        };\n      });\n\n      return {\n        profile,\n        accessToken,\n      };\n    } catch (e) {\n      console.error('Failed to authenticate', e);\n      // Disable Profile Syncing\n      await this.messagingSystem.call(\n        'UserStorageController:disableProfileSyncing',\n      );\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new Error(\n        `${controllerName}: Failed to authenticate - ${errorMessage}`,\n      );\n    }\n  }\n\n  #hasValidSession(\n    sessionData: SessionData | undefined,\n  ): sessionData is SessionData {\n    if (!sessionData) {\n      return false;\n    }\n\n    const prevDate = Date.parse(sessionData.expiresIn);\n    if (isNaN(prevDate)) {\n      return false;\n    }\n\n    const currentDate = new Date();\n    const diffMs = Math.abs(currentDate.getTime() - prevDate);\n\n    return THIRTY_MIN_MS > diffMs;\n  }\n\n  /**\n   * Returns the auth snap public key.\n   *\n   * @returns The snap public key.\n   */\n  #snapGetPublicKey(): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapPublicKeyRequest(),\n    ) as Promise<string>;\n  }\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    return this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    ) as Promise<string>;\n  }\n}\n"]}

package/dist/controllers/authentication/AuthenticationController.js

@@ -0,0 +1,24 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkYUXN5GSWjs = require('../../chunk-YUXN5GSW.js');
+require('../../chunk-ELHJSRS2.js');
+require('../../chunk-IPSBQ3MS.js');
+require('../../chunk-PTR4DAX6.js');
+require('../../chunk-NLHLVVOO.js');
+require('../../chunk-Q5WIUNX5.js');
+require('../../chunk-AVOOINGJ.js');
+require('../../chunk-BOET676P.js');
+require('../../chunk-PBRUOBEQ.js');
+require('../../chunk-RG4II6WH.js');
+require('../../chunk-PQ5T4GHY.js');
+require('../../chunk-P52TG263.js');
+require('../../chunk-P4DUDLMY.js');
+require('../../chunk-SMKTWM6I.js');
+require('../../chunk-MBTBE4P5.js');
+require('../../chunk-IGY2S5BC.js');
+
+
+
+exports.default = _chunkYUXN5GSWjs.AuthenticationController; exports.defaultState = _chunkYUXN5GSWjs.defaultState;
+//# sourceMappingURL=AuthenticationController.js.map

package/dist/controllers/authentication/AuthenticationController.mjs

@@ -0,0 +1,24 @@
+import {
+  AuthenticationController,
+  defaultState
+} from "../../chunk-32HAX3MW.mjs";
+import "../../chunk-KBCXN3YW.mjs";
+import "../../chunk-6P6CUKKI.mjs";
+import "../../chunk-WJCKQLKK.mjs";
+import "../../chunk-FCT2LIGH.mjs";
+import "../../chunk-JLDFMYAH.mjs";
+import "../../chunk-Y46NMA3V.mjs";
+import "../../chunk-WB6MUIML.mjs";
+import "../../chunk-CAIIVJAO.mjs";
+import "../../chunk-5XSXZTED.mjs";
+import "../../chunk-5EBUFNAN.mjs";
+import "../../chunk-AXWK4Y23.mjs";
+import "../../chunk-B5DBQDB3.mjs";
+import "../../chunk-FQ5SDMRE.mjs";
+import "../../chunk-TFFQFIJV.mjs";
+import "../../chunk-U5UIDVOO.mjs";
+export {
+  AuthenticationController as default,
+  defaultState
+};
+//# sourceMappingURL=AuthenticationController.mjs.map

package/dist/controllers/authentication/auth-snap-requests.js

@@ -0,0 +1,10 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkIPSBQ3MSjs = require('../../chunk-IPSBQ3MS.js');
+require('../../chunk-IGY2S5BC.js');
+
+
+
+exports.createSnapPublicKeyRequest = _chunkIPSBQ3MSjs.createSnapPublicKeyRequest; exports.createSnapSignMessageRequest = _chunkIPSBQ3MSjs.createSnapSignMessageRequest;
+//# sourceMappingURL=auth-snap-requests.js.map

package/dist/controllers/authentication/auth-snap-requests.mjs

@@ -0,0 +1,10 @@
+import {
+  createSnapPublicKeyRequest,
+  createSnapSignMessageRequest
+} from "../../chunk-6P6CUKKI.mjs";
+import "../../chunk-U5UIDVOO.mjs";
+export {
+  createSnapPublicKeyRequest,
+  createSnapSignMessageRequest
+};
+//# sourceMappingURL=auth-snap-requests.mjs.map

package/dist/controllers/authentication/index.js

@@ -0,0 +1,28 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkRX5R6BUIjs = require('../../chunk-RX5R6BUI.js');
+
+
+
+var _chunkYUXN5GSWjs = require('../../chunk-YUXN5GSW.js');
+require('../../chunk-ELHJSRS2.js');
+require('../../chunk-IPSBQ3MS.js');
+require('../../chunk-PTR4DAX6.js');
+require('../../chunk-NLHLVVOO.js');
+require('../../chunk-Q5WIUNX5.js');
+require('../../chunk-AVOOINGJ.js');
+require('../../chunk-BOET676P.js');
+require('../../chunk-PBRUOBEQ.js');
+require('../../chunk-RG4II6WH.js');
+require('../../chunk-PQ5T4GHY.js');
+require('../../chunk-P52TG263.js');
+require('../../chunk-P4DUDLMY.js');
+require('../../chunk-SMKTWM6I.js');
+require('../../chunk-MBTBE4P5.js');
+require('../../chunk-IGY2S5BC.js');
+
+
+
+
+exports.Controller = _chunkYUXN5GSWjs.AuthenticationController; exports.Mocks = _chunkRX5R6BUIjs.fixtures_exports; exports.defaultState = _chunkYUXN5GSWjs.defaultState;
+//# sourceMappingURL=index.js.map

package/dist/controllers/authentication/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":""}