@metamask/profile-sync-controller 0.0.0

package/dist/chunk-CYGZ4WLJ.mjs

@@ -0,0 +1,126 @@
+import {
+  getEnvUrls,
+  getOidcClientId
+} from "./chunk-WJRV2JCX.mjs";
+import {
+  NonceRetrievalError,
+  SignInError,
+  ValidationError
+} from "./chunk-BHVT2QEA.mjs";
+
+// src/sdk/authentication-jwt-bearer/services.ts
+var NONCE_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/nonce`;
+var OIDC_TOKEN_URL = (env) => `${getEnvUrls(env).oidcApiUrl}/oauth2/token`;
+var SRP_LOGIN_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/srp/login`;
+var SIWE_LOGIN_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/siwe/login`;
+var getAuthenticationUrl = (authType, env) => {
+  switch (authType) {
+    case "SRP" /* SRP */:
+      return SRP_LOGIN_URL(env);
+    case "SiWE" /* SiWE */:
+      return SIWE_LOGIN_URL(env);
+    default:
+      throw new ValidationError(
+        `Invalid AuthType: ${authType} - unable to create Auth URL`
+      );
+  }
+};
+async function getNonce(id, env) {
+  const nonceUrl = new URL(NONCE_URL(env));
+  nonceUrl.searchParams.set("identifier", id);
+  try {
+    const nonceResponse = await fetch(nonceUrl.toString());
+    if (!nonceResponse.ok) {
+      const responseBody = await nonceResponse.json();
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+    const nonceJson = await nonceResponse.json();
+    return {
+      nonce: nonceJson.nonce,
+      identifier: nonceJson.identifier,
+      expiresIn: nonceJson.expires_in
+    };
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new NonceRetrievalError(`failed to generate nonce: ${errorMessage}`);
+  }
+}
+async function authorizeOIDC(jwtToken, env) {
+  const grantType = "urn:ietf:params:oauth:grant-type:jwt-bearer";
+  const headers = new Headers({
+    "Content-Type": "application/x-www-form-urlencoded"
+  });
+  const urlEncodedBody = new URLSearchParams();
+  urlEncodedBody.append("grant_type", grantType);
+  urlEncodedBody.append("client_id", getOidcClientId(env));
+  urlEncodedBody.append("assertion", jwtToken);
+  try {
+    const response = await fetch(OIDC_TOKEN_URL(env), {
+      method: "POST",
+      headers,
+      body: urlEncodedBody.toString()
+    });
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `HTTP error: ${responseBody.error_description}, error code: ${responseBody.error}`
+      );
+    }
+    const accessTokenResponse = await response.json();
+    return {
+      accessToken: accessTokenResponse.access_token,
+      expiresIn: accessTokenResponse.expires_in,
+      obtainedAt: Date.now()
+    };
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new SignInError(`unable to get access token: ${errorMessage}`);
+  }
+}
+async function authenticate(rawMessage, signature, authType, env) {
+  const authenticationUrl = getAuthenticationUrl(authType, env);
+  try {
+    const response = await fetch(authenticationUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        signature,
+        raw_message: rawMessage
+      })
+    });
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `${authType} login HTTP error: ${responseBody.message}, error code: ${responseBody.error}`
+      );
+    }
+    const loginResponse = await response.json();
+    return {
+      token: loginResponse.token,
+      expiresIn: loginResponse.expires_in,
+      profile: {
+        identifierId: loginResponse.profile.identifier_id,
+        metaMetricsId: loginResponse.profile.metametrics_id,
+        profileId: loginResponse.profile.profile_id
+      }
+    };
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new SignInError(`unable to perform SRP login: ${errorMessage}`);
+  }
+}
+
+export {
+  NONCE_URL,
+  OIDC_TOKEN_URL,
+  SRP_LOGIN_URL,
+  SIWE_LOGIN_URL,
+  getNonce,
+  authorizeOIDC,
+  authenticate
+};
+//# sourceMappingURL=chunk-CYGZ4WLJ.mjs.map

package/dist/chunk-CYGZ4WLJ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/services.ts"],"sourcesContent":["import type { Env } from '../env';\nimport { getEnvUrls, getOidcClientId } from '../env';\nimport { NonceRetrievalError, SignInError, ValidationError } from '../errors';\nimport type { AccessToken, ErrorMessage, UserProfile } from './types';\nimport { AuthType } from './types';\n\nexport const NONCE_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/nonce`;\n\nexport const OIDC_TOKEN_URL = (env: Env) =>\n  `${getEnvUrls(env).oidcApiUrl}/oauth2/token`;\n\nexport const SRP_LOGIN_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/srp/login`;\n\nexport const SIWE_LOGIN_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/siwe/login`;\n\nconst getAuthenticationUrl = (authType: AuthType, env: Env): string => {\n  switch (authType) {\n    case AuthType.SRP:\n      return SRP_LOGIN_URL(env);\n    case AuthType.SiWE:\n      return SIWE_LOGIN_URL(env);\n    /* istanbul ignore next */\n    default:\n      throw new ValidationError(\n        `Invalid AuthType: ${authType as number} - unable to create Auth URL`,\n      );\n  }\n};\n\ntype NonceResponse = {\n  nonce: string;\n  identifier: string;\n  expiresIn: number;\n};\n\n/**\n * Service to Get Nonce for JWT Bearer Flow\n *\n * @param id - identifier ID\n * @param env - server environment\n * @returns the nonce.\n */\nexport async function getNonce(id: string, env: Env): Promise<NonceResponse> {\n  const nonceUrl = new URL(NONCE_URL(env));\n  nonceUrl.searchParams.set('identifier', id);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      const responseBody = (await nonceResponse.json()) as ErrorMessage;\n      throw new Error(\n        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n      );\n    }\n\n    const nonceJson = await nonceResponse.json();\n    return {\n      nonce: nonceJson.nonce,\n      identifier: nonceJson.identifier,\n      expiresIn: nonceJson.expires_in,\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new NonceRetrievalError(`failed to generate nonce: ${errorMessage}`);\n  }\n}\n\n/**\n * Service to Authorize And perform OIDC Flow to get the Access Token\n *\n * @param jwtToken - The original token received from Authentication. This is traded for the Access Token. (the authentication token is single-use)\n * @param env - server environment\n * @returns Access Token from Authorization server\n */\nexport async function authorizeOIDC(\n  jwtToken: string,\n  env: Env,\n): Promise<AccessToken> {\n  const grantType = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', grantType);\n  urlEncodedBody.append('client_id', getOidcClientId(env));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKEN_URL(env), {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as {\n        error_description: string;\n        error: string;\n      };\n      throw new Error(\n        `HTTP error: ${responseBody.error_description}, error code: ${responseBody.error}`,\n      );\n    }\n\n    const accessTokenResponse = await response.json();\n    return {\n      accessToken: accessTokenResponse.access_token,\n      expiresIn: accessTokenResponse.expires_in,\n      obtainedAt: Date.now(),\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new SignInError(`unable to get access token: ${errorMessage}`);\n  }\n}\n\ntype Authentication = {\n  token: string;\n  expiresIn: number;\n  profile: UserProfile;\n};\n/**\n * Service to Authenticate/Login a user via SIWE or SRP derived key.\n *\n * @param rawMessage - raw message for validation when authenticating\n * @param signature - signed raw message\n * @param authType - authentication type/flow used\n * @param env - server environment\n * @returns Authentication Token\n */\nexport async function authenticate(\n  rawMessage: string,\n  signature: string,\n  authType: AuthType,\n  env: Env,\n): Promise<Authentication> {\n  const authenticationUrl = getAuthenticationUrl(authType, env);\n\n  try {\n    const response = await fetch(authenticationUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        raw_message: rawMessage,\n      }),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as ErrorMessage;\n      throw new Error(\n        `${authType} login HTTP error: ${responseBody.message}, error code: ${responseBody.error}`,\n      );\n    }\n\n    const loginResponse = await response.json();\n    return {\n      token: loginResponse.token,\n      expiresIn: loginResponse.expires_in,\n      profile: {\n        identifierId: loginResponse.profile.identifier_id,\n        metaMetricsId: loginResponse.profile.metametrics_id,\n        profileId: loginResponse.profile.profile_id,\n      },\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new SignInError(`unable to perform SRP login: ${errorMessage}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;AAMO,IAAM,YAAY,CAAC,QACxB,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,iBAAiB,CAAC,QAC7B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,gBAAgB,CAAC,QAC5B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,iBAAiB,CAAC,QAC7B,GAAG,WAAW,GAAG,EAAE,UAAU;AAE/B,IAAM,uBAAuB,CAAC,UAAoB,QAAqB;AACrE,UAAQ,UAAU;AAAA,IAChB;AACE,aAAO,cAAc,GAAG;AAAA,IAC1B;AACE,aAAO,eAAe,GAAG;AAAA,IAE3B;AACE,YAAM,IAAI;AAAA,QACR,qBAAqB,QAAkB;AAAA,MACzC;AAAA,EACJ;AACF;AAeA,eAAsB,SAAS,IAAY,KAAkC;AAC3E,QAAM,WAAW,IAAI,IAAI,UAAU,GAAG,CAAC;AACvC,WAAS,aAAa,IAAI,cAAc,EAAE;AAE1C,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,eAAgB,MAAM,cAAc,KAAK;AAC/C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,cAAc,KAAK;AAC3C,WAAO;AAAA,MACL,OAAO,UAAU;AAAA,MACjB,YAAY,UAAU;AAAA,MACtB,WAAW,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,oBAAoB,6BAA6B,YAAY,EAAE;AAAA,EAC3E;AACF;AASA,eAAsB,cACpB,UACA,KACsB;AACtB,QAAM,YAAY;AAClB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,SAAS;AAC7C,iBAAe,OAAO,aAAa,gBAAgB,GAAG,CAAC;AACvD,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,eAAe,GAAG,GAAG;AAAA,MAChD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAI1C,YAAM,IAAI;AAAA,QACR,eAAe,aAAa,iBAAiB,iBAAiB,aAAa,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,sBAAsB,MAAM,SAAS,KAAK;AAChD,WAAO;AAAA,MACL,aAAa,oBAAoB;AAAA,MACjC,WAAW,oBAAoB;AAAA,MAC/B,YAAY,KAAK,IAAI;AAAA,IACvB;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,YAAY,+BAA+B,YAAY,EAAE;AAAA,EACrE;AACF;AAgBA,eAAsB,aACpB,YACA,WACA,UACA,KACyB;AACzB,QAAM,oBAAoB,qBAAqB,UAAU,GAAG;AAE5D,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA,aAAa;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,GAAG,QAAQ,sBAAsB,aAAa,OAAO,iBAAiB,aAAa,KAAK;AAAA,MAC1F;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,WAAO;AAAA,MACL,OAAO,cAAc;AAAA,MACrB,WAAW,cAAc;AAAA,MACzB,SAAS;AAAA,QACP,cAAc,cAAc,QAAQ;AAAA,QACpC,eAAe,cAAc,QAAQ;AAAA,QACrC,WAAW,cAAc,QAAQ;AAAA,MACnC;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,YAAY,gCAAgC,YAAY,EAAE;AAAA,EACtE;AACF;","names":[]}

package/dist/chunk-CZ7YK35S.mjs

@@ -0,0 +1,142 @@
+import {
+  createSHA256Hash,
+  encryption_default
+} from "./chunk-UMKBFFZ5.mjs";
+import {
+  getEnvUrls
+} from "./chunk-WJRV2JCX.mjs";
+import {
+  NotFoundError,
+  UserStorageError,
+  ValidationError
+} from "./chunk-BHVT2QEA.mjs";
+import {
+  __privateAdd,
+  __privateMethod
+} from "./chunk-XUI43LEZ.mjs";
+
+// src/sdk/user-storage.ts
+var STORAGE_URL = (env, feature, entry) => `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;
+var _upsertUserStorage, upsertUserStorage_fn, _getUserStorage, getUserStorage_fn, _createEntryKey, createEntryKey_fn, _getAuthorizationHeader, getAuthorizationHeader_fn;
+var UserStorage = class {
+  constructor(config, options) {
+    __privateAdd(this, _upsertUserStorage);
+    __privateAdd(this, _getUserStorage);
+    __privateAdd(this, _createEntryKey);
+    __privateAdd(this, _getAuthorizationHeader);
+    this.env = config.env;
+    this.config = config;
+    this.options = options;
+  }
+  async setItem(feature, key, value) {
+    if (!feature.trim() || !key.trim()) {
+      throw new ValidationError("feature or key cannot be empty strings");
+    }
+    await __privateMethod(this, _upsertUserStorage, upsertUserStorage_fn).call(this, feature, key, value);
+  }
+  async getItem(feature, key) {
+    if (!feature.trim() || !key.trim()) {
+      throw new ValidationError("feature or key cannot be empty strings");
+    }
+    return __privateMethod(this, _getUserStorage, getUserStorage_fn).call(this, feature, key);
+  }
+  async getStorageKey() {
+    const storageKey = await this.options.storage?.getStorageKey();
+    if (storageKey) {
+      return storageKey;
+    }
+    const userProfile = await this.config.auth.getUserProfile();
+    const storageKeySignature = await this.config.auth.signMessage(
+      `metamask:${userProfile.profileId}`
+    );
+    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);
+    await this.options.storage?.setStorageKey(hashedStorageKeySignature);
+    return hashedStorageKeySignature;
+  }
+};
+_upsertUserStorage = new WeakSet();
+upsertUserStorage_fn = async function(feature, key, data) {
+  try {
+    const headers = await __privateMethod(this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const storageKey = await this.getStorageKey();
+    const encryptedData = encryption_default.encryptString(data, storageKey);
+    const url = new URL(
+      STORAGE_URL(this.env, feature, __privateMethod(this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
+    );
+    const response = await fetch(url.toString(), {
+      method: "PUT",
+      headers: {
+        "Content-Type": "application/json",
+        ...headers
+      },
+      body: JSON.stringify({ data: encryptedData })
+    });
+    if (!response.ok) {
+      const responseBody = await response.json().catch(() => ({
+        message: "unknown",
+        error: "unknown"
+      }));
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new UserStorageError(
+      `failed to upsert user storage for feature '${feature}' and key '${key}'. ${errorMessage}`
+    );
+  }
+};
+_getUserStorage = new WeakSet();
+getUserStorage_fn = async function(feature, key) {
+  try {
+    const headers = await __privateMethod(this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const storageKey = await this.getStorageKey();
+    const url = new URL(
+      STORAGE_URL(this.env, feature, __privateMethod(this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
+    );
+    const response = await fetch(url.toString(), {
+      headers: {
+        "Content-Type": "application/json",
+        ...headers
+      }
+    });
+    if (response.status === 404) {
+      throw new NotFoundError(
+        `feature/key set not found for feature '${feature}' and key '${key}'.`
+      );
+    }
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+    const { Data: encryptedData } = await response.json();
+    return encryption_default.decryptString(encryptedData, storageKey);
+  } catch (e) {
+    if (e instanceof NotFoundError) {
+      throw e;
+    }
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new UserStorageError(
+      `failed to get user storage for feature '${feature}' and key '${key}'. ${errorMessage}`
+    );
+  }
+};
+_createEntryKey = new WeakSet();
+createEntryKey_fn = function(key, storageKey) {
+  const hashedKey = createSHA256Hash(key + storageKey);
+  return hashedKey;
+};
+_getAuthorizationHeader = new WeakSet();
+getAuthorizationHeader_fn = async function() {
+  const accessToken = await this.config.auth.getAccessToken();
+  return { Authorization: `Bearer ${accessToken}` };
+};
+
+export {
+  STORAGE_URL,
+  UserStorage
+};
+//# sourceMappingURL=chunk-CZ7YK35S.mjs.map

package/dist/chunk-CZ7YK35S.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/user-storage.ts"],"sourcesContent":["import type { IBaseAuth } from './authentication-jwt-bearer/types';\nimport encryption, { createSHA256Hash } from './encryption';\nimport type { Env } from './env';\nimport { getEnvUrls } from './env';\nimport { NotFoundError, UserStorageError, ValidationError } from './errors';\n\nexport const STORAGE_URL = (env: Env, feature: string, entry: string) =>\n  `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;\n\nexport type UserStorageConfig = {\n  env: Env;\n  auth: Pick<IBaseAuth, 'getAccessToken' | 'getUserProfile' | 'signMessage'>;\n};\n\nexport type StorageOptions = {\n  getStorageKey: () => Promise<string | null>;\n  setStorageKey: (val: string) => Promise<void>;\n};\n\nexport type UserStorageOptions = {\n  storage?: StorageOptions;\n};\n\ntype ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport class UserStorage {\n  protected config: UserStorageConfig;\n\n  protected options: UserStorageOptions;\n\n  protected env: Env;\n\n  constructor(config: UserStorageConfig, options: UserStorageOptions) {\n    this.env = config.env;\n    this.config = config;\n    this.options = options;\n  }\n\n  async setItem(feature: string, key: string, value: string): Promise<void> {\n    if (!feature.trim() || !key.trim()) {\n      throw new ValidationError('feature or key cannot be empty strings');\n    }\n    await this.#upsertUserStorage(feature, key, value);\n  }\n\n  async getItem(feature: string, key: string): Promise<string> {\n    if (!feature.trim() || !key.trim()) {\n      throw new ValidationError('feature or key cannot be empty strings');\n    }\n    return this.#getUserStorage(feature, key);\n  }\n\n  async getStorageKey(): Promise<string> {\n    const storageKey = await this.options.storage?.getStorageKey();\n    if (storageKey) {\n      return storageKey;\n    }\n\n    const userProfile = await this.config.auth.getUserProfile();\n    const storageKeySignature = await this.config.auth.signMessage(\n      `metamask:${userProfile.profileId}`,\n    );\n    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);\n    await this.options.storage?.setStorageKey(hashedStorageKeySignature);\n    return hashedStorageKeySignature;\n  }\n\n  async #upsertUserStorage(\n    feature: string,\n    key: string,\n    data: string,\n  ): Promise<void> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedData = encryption.encryptString(data, storageKey);\n      const url = new URL(\n        STORAGE_URL(this.env, feature, this.#createEntryKey(key, storageKey)),\n      );\n\n      const response = await fetch(url.toString(), {\n        method: 'PUT',\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: JSON.stringify({ data: encryptedData }),\n      });\n\n      if (!response.ok) {\n        const responseBody: ErrorMessage = await response.json().catch(() => ({\n          message: 'unknown',\n          error: 'unknown',\n        }));\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new UserStorageError(\n        `failed to upsert user storage for feature '${feature}' and key '${key}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorage(feature: string, key: string): Promise<string> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const url = new URL(\n        STORAGE_URL(this.env, feature, this.#createEntryKey(key, storageKey)),\n      );\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(\n          `feature/key set not found for feature '${feature}' and key '${key}'.`,\n        );\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const { Data: encryptedData } = await response.json();\n      return encryption.decryptString(encryptedData, storageKey);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for feature '${feature}' and key '${key}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  #createEntryKey(key: string, storageKey: string): string {\n    const hashedKey = createSHA256Hash(key + storageKey);\n    return hashedKey;\n  }\n\n  async #getAuthorizationHeader(): Promise<{ Authorization: string }> {\n    const accessToken = await this.config.auth.getAccessToken();\n    return { Authorization: `Bearer ${accessToken}` };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAMO,IAAM,cAAc,CAAC,KAAU,SAAiB,UACrD,GAAG,WAAW,GAAG,EAAE,iBAAiB,uBAAuB,OAAO,IAAI,KAAK;AAP7E;AA4BO,IAAM,cAAN,MAAkB;AAAA,EAOvB,YAAY,QAA2B,SAA6B;AAmCpE,uBAAM;AAyCN,uBAAM;AA6CN;AAKA,uBAAM;AA7HJ,SAAK,MAAM,OAAO;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,MAAM,QAAQ,SAAiB,KAAa,OAA8B;AACxE,QAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG;AAClC,YAAM,IAAI,gBAAgB,wCAAwC;AAAA,IACpE;AACA,UAAM,sBAAK,0CAAL,WAAwB,SAAS,KAAK;AAAA,EAC9C;AAAA,EAEA,MAAM,QAAQ,SAAiB,KAA8B;AAC3D,QAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG;AAClC,YAAM,IAAI,gBAAgB,wCAAwC;AAAA,IACpE;AACA,WAAO,sBAAK,oCAAL,WAAqB,SAAS;AAAA,EACvC;AAAA,EAEA,MAAM,gBAAiC;AACrC,UAAM,aAAa,MAAM,KAAK,QAAQ,SAAS,cAAc;AAC7D,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,UAAM,sBAAsB,MAAM,KAAK,OAAO,KAAK;AAAA,MACjD,YAAY,YAAY,SAAS;AAAA,IACnC;AACA,UAAM,4BAA4B,iBAAiB,mBAAmB;AACtE,UAAM,KAAK,QAAQ,SAAS,cAAc,yBAAyB;AACnE,WAAO;AAAA,EACT;AAiGF;AA/FQ;AAAA,uBAAkB,eACtB,SACA,KACA,MACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,mBAAW,cAAc,MAAM,UAAU;AAC/D,UAAM,MAAM,IAAI;AAAA,MACd,YAAY,KAAK,KAAK,SAAS,sBAAK,oCAAL,WAAqB,KAAK,WAAW;AAAA,IACtE;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAA6B,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO;AAAA,QACpE,SAAS;AAAA,QACT,OAAO;AAAA,MACT,EAAE;AACF,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,8CAA8C,OAAO,cAAc,GAAG,MAAM,YAAY;AAAA,IAC1F;AAAA,EACF;AACF;AAEM;AAAA,oBAAe,eAAC,SAAiB,KAA8B;AACnE,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,MAAM,IAAI;AAAA,MACd,YAAY,KAAK,KAAK,SAAS,sBAAK,oCAAL,WAAqB,KAAK,WAAW;AAAA,IACtE;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI;AAAA,QACR,0CAA0C,OAAO,cAAc,GAAG;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,KAAK;AACpD,WAAO,mBAAW,cAAc,eAAe,UAAU;AAAA,EAC3D,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,2CAA2C,OAAO,cAAc,GAAG,MAAM,YAAY;AAAA,IACvF;AAAA,EACF;AACF;AAEA;AAAA,oBAAe,SAAC,KAAa,YAA4B;AACvD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AACnD,SAAO;AACT;AAEM;AAAA,4BAAuB,iBAAuC;AAClE,QAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,SAAO,EAAE,eAAe,UAAU,WAAW,GAAG;AAClD;","names":[]}

package/dist/chunk-DEATIRII.js

@@ -0,0 +1 @@
+"use strict";//# sourceMappingURL=chunk-DEATIRII.js.map

package/dist/chunk-DEATIRII.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/chunk-GQLHSQGZ.js

@@ -0,0 +1,47 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/errors.ts
+var NonceRetrievalError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "NonceRetrievalError";
+  }
+};
+var SignInError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SignInError";
+  }
+};
+var UserStorageError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "UserStorageError";
+  }
+};
+var ValidationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ValidationError";
+  }
+};
+var UnsupportedAuthTypeError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "UnsupportedAuthTypeError";
+  }
+};
+var NotFoundError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "NotFoundError";
+  }
+};
+
+
+
+
+
+
+
+
+exports.NonceRetrievalError = NonceRetrievalError; exports.SignInError = SignInError; exports.UserStorageError = UserStorageError; exports.ValidationError = ValidationError; exports.UnsupportedAuthTypeError = UnsupportedAuthTypeError; exports.NotFoundError = NotFoundError;
+//# sourceMappingURL=chunk-GQLHSQGZ.js.map

package/dist/chunk-GQLHSQGZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/errors.ts"],"names":[],"mappings":";AAAO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,cAAN,cAA0B,MAAM;AAAA,EACrC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF","sourcesContent":["export class NonceRetrievalError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'NonceRetrievalError';\n  }\n}\n\nexport class SignInError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'SignInError';\n  }\n}\n\nexport class UserStorageError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'UserStorageError';\n  }\n}\n\nexport class ValidationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ValidationError';\n  }\n}\n\nexport class UnsupportedAuthTypeError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'UnsupportedAuthTypeError';\n  }\n}\n\nexport class NotFoundError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'NotFoundError';\n  }\n}\n"]}

package/dist/chunk-GVMIXMYB.mjs

@@ -0,0 +1,67 @@
+import {
+  SIWEJwtBearerAuth
+} from "./chunk-4NGEEDGV.mjs";
+import {
+  SRPJwtBearerAuth
+} from "./chunk-VXPVURGH.mjs";
+import {
+  UnsupportedAuthTypeError
+} from "./chunk-BHVT2QEA.mjs";
+import {
+  __privateAdd,
+  __privateGet,
+  __privateMethod,
+  __privateSet
+} from "./chunk-XUI43LEZ.mjs";
+
+// src/sdk/authentication.ts
+var _type, _sdk, _assertSIWE, assertSIWE_fn;
+var JwtBearerAuth = class {
+  constructor(...args) {
+    __privateAdd(this, _assertSIWE);
+    __privateAdd(this, _type, void 0);
+    __privateAdd(this, _sdk, void 0);
+    __privateSet(this, _type, args[0].type);
+    if (args[0].type === "SRP" /* SRP */) {
+      __privateSet(this, _sdk, new SRPJwtBearerAuth(args[0], args[1]));
+      return;
+    }
+    if (args[0].type === "SiWE" /* SiWE */) {
+      __privateSet(this, _sdk, new SIWEJwtBearerAuth(args[0], args[1]));
+      return;
+    }
+    throw new UnsupportedAuthTypeError("unsupported auth type");
+  }
+  async getAccessToken() {
+    return await __privateGet(this, _sdk).getAccessToken();
+  }
+  async getUserProfile() {
+    return await __privateGet(this, _sdk).getUserProfile();
+  }
+  async getIdentifier() {
+    return await __privateGet(this, _sdk).getIdentifier();
+  }
+  async signMessage(message) {
+    return await __privateGet(this, _sdk).signMessage(message);
+  }
+  prepare(signer) {
+    __privateMethod(this, _assertSIWE, assertSIWE_fn).call(this, __privateGet(this, _type), __privateGet(this, _sdk));
+    __privateGet(this, _sdk).prepare(signer);
+  }
+};
+_type = new WeakMap();
+_sdk = new WeakMap();
+_assertSIWE = new WeakSet();
+assertSIWE_fn = function(type, sdk) {
+  if (type === "SiWE" /* SiWE */) {
+    return;
+  }
+  throw new UnsupportedAuthTypeError(
+    "This method is only available via SIWE auth type"
+  );
+};
+
+export {
+  JwtBearerAuth
+};
+//# sourceMappingURL=chunk-GVMIXMYB.mjs.map

package/dist/chunk-GVMIXMYB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication.ts"],"sourcesContent":["import { SIWEJwtBearerAuth } from './authentication-jwt-bearer/flow-siwe';\nimport { SRPJwtBearerAuth } from './authentication-jwt-bearer/flow-srp';\nimport type { UserProfile } from './authentication-jwt-bearer/types';\nimport { AuthType } from './authentication-jwt-bearer/types';\nimport { UnsupportedAuthTypeError } from './errors';\n\n// Computing the Classes, so we only get back the public methods for the interface.\ntype Compute<T> = T extends infer U ? { [K in keyof U]: U[K] } : never;\ntype SIWEInterface = Compute<SIWEJwtBearerAuth>;\ntype SRPInterface = Compute<SRPJwtBearerAuth>;\n\ntype SiweParams = ConstructorParameters<typeof SIWEJwtBearerAuth>;\ntype SRPParams = ConstructorParameters<typeof SRPJwtBearerAuth>;\ntype JwtBearerAuthParams = SiweParams | SRPParams;\n\nexport class JwtBearerAuth implements SIWEInterface, SRPInterface {\n  #type: AuthType;\n\n  #sdk: SIWEJwtBearerAuth | SRPJwtBearerAuth;\n\n  constructor(...args: JwtBearerAuthParams) {\n    this.#type = args[0].type;\n\n    if (args[0].type === AuthType.SRP) {\n      this.#sdk = new SRPJwtBearerAuth(args[0], args[1]);\n      return;\n    }\n\n    if (args[0].type === AuthType.SiWE) {\n      this.#sdk = new SIWEJwtBearerAuth(args[0], args[1]);\n      return;\n    }\n\n    throw new UnsupportedAuthTypeError('unsupported auth type');\n  }\n\n  async getAccessToken(): Promise<string> {\n    return await this.#sdk.getAccessToken();\n  }\n\n  async getUserProfile(): Promise<UserProfile> {\n    return await this.#sdk.getUserProfile();\n  }\n\n  async getIdentifier(): Promise<string> {\n    return await this.#sdk.getIdentifier();\n  }\n\n  async signMessage(message: string): Promise<string> {\n    return await this.#sdk.signMessage(message);\n  }\n\n  prepare(signer: {\n    address: string;\n    chainId: number;\n    signMessage: (message: string) => Promise<string>;\n    domain: string;\n  }): void {\n    this.#assertSIWE(this.#type, this.#sdk);\n    this.#sdk.prepare(signer);\n  }\n\n  #assertSIWE(\n    type: AuthType,\n    sdk: SIWEJwtBearerAuth | SRPJwtBearerAuth,\n  ): asserts sdk is SIWEJwtBearerAuth {\n    if (type === AuthType.SiWE) {\n      return;\n    }\n\n    throw new UnsupportedAuthTypeError(\n      'This method is only available via SIWE auth type',\n    );\n  }\n}\n\nexport { SIWEJwtBearerAuth } from './authentication-jwt-bearer/flow-siwe';\nexport { SRPJwtBearerAuth } from './authentication-jwt-bearer/flow-srp';\nexport * from './authentication-jwt-bearer/types';\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA;AAeO,IAAM,gBAAN,MAA2D;AAAA,EAKhE,eAAe,MAA2B;AA0C1C;AA9CA;AAEA;AAGE,uBAAK,OAAQ,KAAK,CAAC,EAAE;AAErB,QAAI,KAAK,CAAC,EAAE,0BAAuB;AACjC,yBAAK,MAAO,IAAI,iBAAiB,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;AACjD;AAAA,IACF;AAEA,QAAI,KAAK,CAAC,EAAE,4BAAwB;AAClC,yBAAK,MAAO,IAAI,kBAAkB,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;AAClD;AAAA,IACF;AAEA,UAAM,IAAI,yBAAyB,uBAAuB;AAAA,EAC5D;AAAA,EAEA,MAAM,iBAAkC;AACtC,WAAO,MAAM,mBAAK,MAAK,eAAe;AAAA,EACxC;AAAA,EAEA,MAAM,iBAAuC;AAC3C,WAAO,MAAM,mBAAK,MAAK,eAAe;AAAA,EACxC;AAAA,EAEA,MAAM,gBAAiC;AACrC,WAAO,MAAM,mBAAK,MAAK,cAAc;AAAA,EACvC;AAAA,EAEA,MAAM,YAAY,SAAkC;AAClD,WAAO,MAAM,mBAAK,MAAK,YAAY,OAAO;AAAA,EAC5C;AAAA,EAEA,QAAQ,QAKC;AACP,0BAAK,4BAAL,WAAiB,mBAAK,QAAO,mBAAK;AAClC,uBAAK,MAAK,QAAQ,MAAM;AAAA,EAC1B;AAcF;AA1DE;AAEA;AA4CA;AAAA,gBAAW,SACT,MACA,KACkC;AAClC,MAAI,4BAAwB;AAC1B;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-KHFPE566.js

@@ -0,0 +1,49 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/env.ts
+var Env = /* @__PURE__ */ ((Env2) => {
+  Env2["DEV"] = "dev";
+  Env2["UAT"] = "uat";
+  Env2["PRD"] = "prd";
+  return Env2;
+})(Env || {});
+var ENV_URLS = {
+  dev: {
+    authApiUrl: "https://authentication.dev-api.cx.metamask.io",
+    oidcApiUrl: "https://oidc.dev-api.cx.metamask.io",
+    userStorageApiUrl: "https://user-storage.dev-api.cx.metamask.io"
+  },
+  uat: {
+    authApiUrl: "https://authentication.uat-api.cx.metamask.io",
+    oidcApiUrl: "https://oidc.uat-api.cx.metamask.io",
+    userStorageApiUrl: "https://user-storage.uat-api.cx.metamask.io"
+  },
+  prd: {
+    authApiUrl: "https://authentication.api.cx.metamask.io",
+    oidcApiUrl: "https://oidc.api.cx.metamask.io",
+    userStorageApiUrl: "https://user-storage.api.cx.metamask.io"
+  }
+};
+function getEnvUrls(env) {
+  if (!ENV_URLS[env]) {
+    throw new Error("invalid environment configuration");
+  }
+  return ENV_URLS[env];
+}
+function getOidcClientId(env) {
+  switch (env) {
+    case "dev" /* DEV */:
+      return "f1a963d7-50dc-4cb5-8d81-f1f3654f0df3";
+    case "uat" /* UAT */:
+      return "a9de167c-c9a6-43d8-af39-d301fd44c485";
+    case "prd" /* PRD */:
+      return "1132f10a-b4e5-4390-a5f2-d9c6022db564";
+    default:
+      throw new Error("invalid env: cannot determine oidc client id");
+  }
+}
+
+
+
+
+
+exports.Env = Env; exports.getEnvUrls = getEnvUrls; exports.getOidcClientId = getOidcClientId;
+//# sourceMappingURL=chunk-KHFPE566.js.map

package/dist/chunk-KHFPE566.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/env.ts"],"names":["Env"],"mappings":";AAAO,IAAW,MAAX,kBAAWA,SAAX;AACL,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AAHU,SAAAA;AAAA,GAAA;AAYlB,IAAM,WAAsC;AAAA,EAC1C,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AACF;AASO,SAAS,WAAW,KAAwB;AACjD,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,SAAS,GAAG;AACrB;AAQO,SAAS,gBAAgB,KAAkB;AAChD,UAAQ,KAAK;AAAA,IACX,KAAK;AACH,aAAO;AAAA,IAET,KAAK;AACH,aAAO;AAAA,IAET,KAAK;AACH,aAAO;AAAA,IAET;AACE,YAAM,IAAI,MAAM,8CAA8C;AAAA,EAClE;AACF","sourcesContent":["export const enum Env {\n  DEV = 'dev',\n  UAT = 'uat',\n  PRD = 'prd',\n}\n\ntype EnvUrlsEntry = {\n  authApiUrl: string;\n  oidcApiUrl: string;\n  userStorageApiUrl: string;\n};\n\nconst ENV_URLS: Record<Env, EnvUrlsEntry> = {\n  dev: {\n    authApiUrl: 'https://authentication.dev-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.dev-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.dev-api.cx.metamask.io',\n  },\n  uat: {\n    authApiUrl: 'https://authentication.uat-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.uat-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.uat-api.cx.metamask.io',\n  },\n  prd: {\n    authApiUrl: 'https://authentication.api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.api.cx.metamask.io',\n  },\n};\n\n/**\n * Validates and returns correct environment endpoints\n *\n * @param env - environment field\n * @returns the correct environment url\n * @throws on invalid environment passed\n */\nexport function getEnvUrls(env: Env): EnvUrlsEntry {\n  if (!ENV_URLS[env]) {\n    throw new Error('invalid environment configuration');\n  }\n  return ENV_URLS[env];\n}\n\n/**\n * Returns the valid OIDC Client ID (used during authorization)\n *\n * @param env - environment field\n * @returns the OIDC client id for the environment\n */\nexport function getOidcClientId(env: Env): string {\n  switch (env) {\n    case Env.DEV:\n      return 'f1a963d7-50dc-4cb5-8d81-f1f3654f0df3';\n    /* istanbul ignore next */\n    case Env.UAT:\n      return 'a9de167c-c9a6-43d8-af39-d301fd44c485';\n    /* istanbul ignore next */\n    case Env.PRD:\n      return '1132f10a-b4e5-4390-a5f2-d9c6022db564';\n    /* istanbul ignore next */\n    default:\n      throw new Error('invalid env: cannot determine oidc client id');\n  }\n}\n"]}

package/dist/chunk-KKRIOEXD.mjs

@@ -0,0 +1,7 @@
+// src/sdk/authentication-jwt-bearer/constants.ts
+var SESSION_LIFETIME_MS = 45 * 60 * 1e3;
+
+export {
+  SESSION_LIFETIME_MS
+};
+//# sourceMappingURL=chunk-KKRIOEXD.mjs.map

package/dist/chunk-KKRIOEXD.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/constants.ts"],"sourcesContent":["export const SESSION_LIFETIME_MS = 45 * 60 * 1000; // 45 minutes in milliseconds\n"],"mappings":";AAAO,IAAM,sBAAsB,KAAK,KAAK;","names":[]}

package/dist/chunk-MKJYSWME.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-MKJYSWME.mjs.map

package/dist/chunk-MKJYSWME.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-NRH6O4QZ.js

@@ -0,0 +1,126 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkKHFPE566js = require('./chunk-KHFPE566.js');
+
+
+
+
+var _chunkGQLHSQGZjs = require('./chunk-GQLHSQGZ.js');
+
+// src/sdk/authentication-jwt-bearer/services.ts
+var NONCE_URL = (env) => `${_chunkKHFPE566js.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/nonce`;
+var OIDC_TOKEN_URL = (env) => `${_chunkKHFPE566js.getEnvUrls.call(void 0, env).oidcApiUrl}/oauth2/token`;
+var SRP_LOGIN_URL = (env) => `${_chunkKHFPE566js.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/srp/login`;
+var SIWE_LOGIN_URL = (env) => `${_chunkKHFPE566js.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/siwe/login`;
+var getAuthenticationUrl = (authType, env) => {
+  switch (authType) {
+    case "SRP" /* SRP */:
+      return SRP_LOGIN_URL(env);
+    case "SiWE" /* SiWE */:
+      return SIWE_LOGIN_URL(env);
+    default:
+      throw new (0, _chunkGQLHSQGZjs.ValidationError)(
+        `Invalid AuthType: ${authType} - unable to create Auth URL`
+      );
+  }
+};
+async function getNonce(id, env) {
+  const nonceUrl = new URL(NONCE_URL(env));
+  nonceUrl.searchParams.set("identifier", id);
+  try {
+    const nonceResponse = await fetch(nonceUrl.toString());
+    if (!nonceResponse.ok) {
+      const responseBody = await nonceResponse.json();
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+    const nonceJson = await nonceResponse.json();
+    return {
+      nonce: nonceJson.nonce,
+      identifier: nonceJson.identifier,
+      expiresIn: nonceJson.expires_in
+    };
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new (0, _chunkGQLHSQGZjs.NonceRetrievalError)(`failed to generate nonce: ${errorMessage}`);
+  }
+}
+async function authorizeOIDC(jwtToken, env) {
+  const grantType = "urn:ietf:params:oauth:grant-type:jwt-bearer";
+  const headers = new Headers({
+    "Content-Type": "application/x-www-form-urlencoded"
+  });
+  const urlEncodedBody = new URLSearchParams();
+  urlEncodedBody.append("grant_type", grantType);
+  urlEncodedBody.append("client_id", _chunkKHFPE566js.getOidcClientId.call(void 0, env));
+  urlEncodedBody.append("assertion", jwtToken);
+  try {
+    const response = await fetch(OIDC_TOKEN_URL(env), {
+      method: "POST",
+      headers,
+      body: urlEncodedBody.toString()
+    });
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `HTTP error: ${responseBody.error_description}, error code: ${responseBody.error}`
+      );
+    }
+    const accessTokenResponse = await response.json();
+    return {
+      accessToken: accessTokenResponse.access_token,
+      expiresIn: accessTokenResponse.expires_in,
+      obtainedAt: Date.now()
+    };
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new (0, _chunkGQLHSQGZjs.SignInError)(`unable to get access token: ${errorMessage}`);
+  }
+}
+async function authenticate(rawMessage, signature, authType, env) {
+  const authenticationUrl = getAuthenticationUrl(authType, env);
+  try {
+    const response = await fetch(authenticationUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        signature,
+        raw_message: rawMessage
+      })
+    });
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `${authType} login HTTP error: ${responseBody.message}, error code: ${responseBody.error}`
+      );
+    }
+    const loginResponse = await response.json();
+    return {
+      token: loginResponse.token,
+      expiresIn: loginResponse.expires_in,
+      profile: {
+        identifierId: loginResponse.profile.identifier_id,
+        metaMetricsId: loginResponse.profile.metametrics_id,
+        profileId: loginResponse.profile.profile_id
+      }
+    };
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new (0, _chunkGQLHSQGZjs.SignInError)(`unable to perform SRP login: ${errorMessage}`);
+  }
+}
+
+
+
+
+
+
+
+
+
+exports.NONCE_URL = NONCE_URL; exports.OIDC_TOKEN_URL = OIDC_TOKEN_URL; exports.SRP_LOGIN_URL = SRP_LOGIN_URL; exports.SIWE_LOGIN_URL = SIWE_LOGIN_URL; exports.getNonce = getNonce; exports.authorizeOIDC = authorizeOIDC; exports.authenticate = authenticate;
+//# sourceMappingURL=chunk-NRH6O4QZ.js.map