@metamask/profile-sync-controller 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -7,11 +7,34 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.2]
+
+### Added
+
+- added platform field when logging in to receive correct OIDC access token ([#4480](https://github.com/MetaMask/core/pull/4480))
+- added metametrics validation in constructor ([#4480](https://github.com/MetaMask/core/pull/4480))
+
+### Changed
+
+- updated the `getMetaMetricsId` interface to support async calls to metametrics ID ([#4477](https://github.com/MetaMask/core/pull/4477))
+
+## [0.1.1]
+
+### Added
+
+- export `defaultState` for `AuthenticationController` and `UserStorageController`. ([#4441](https://github.com/MetaMask/core/pull/4441))
+
+### Changed
+
+- `AuthType`, `Env`, `Platform` are changed from const enums to enums ([#4441](https://github.com/MetaMask/core/pull/4441))
+
 ## [0.1.0]
 
 ### Added
 
 - Initial release
 
-[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.0...HEAD
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.2...HEAD
+[0.1.2]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.1...@metamask/profile-sync-controller@0.1.2
+[0.1.1]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.0...@metamask/profile-sync-controller@0.1.1
 [0.1.0]: https://github.com/MetaMask/core/releases/tag/@metamask/profile-sync-controller@0.1.0

package/dist/{chunk-DHHBHLVN.mjs → chunk-2XGRQBXI.mjs}

@@ -1,12 +1,12 @@
 import {
   createEntryPath
-} from "./chunk-772MKTIO.mjs";
+} from "./chunk-AUFUOKJW.mjs";
 import {
   encryption_default
-} from "./chunk-BFE6TB7Y.mjs";
+} from "./chunk-5TOWF6UW.mjs";
 import {
   getEnvUrls
-} from "./chunk-GLS4QZF6.mjs";
+} from "./chunk-FQ5SDMRE.mjs";
 
 // src/controllers/user-storage/services.ts
 import log from "loglevel";
@@ -67,4 +67,4 @@ export {
   getUserStorage,
   upsertUserStorage
 };
-//# sourceMappingURL=chunk-DHHBHLVN.mjs.map
+//# sourceMappingURL=chunk-2XGRQBXI.mjs.map

package/dist/{chunk-2MVOZPBN.js → chunk-5C53GKTU.js}

@@ -1,16 +1,24 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunk4OMJ7A6Ajs = require('./chunk-4OMJ7A6A.js');
+var _chunkSMKTWM6Ijs = require('./chunk-SMKTWM6I.js');
 
 // src/controllers/authentication/services.ts
-var ENV_URLS = _chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, "prd" /* PRD */);
+var ENV_URLS = _chunkSMKTWM6Ijs.getEnvUrls.call(void 0, "prd" /* PRD */);
 var AUTH_ENDPOINT = ENV_URLS.authApiUrl;
 var AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;
 var AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;
 var OIDC_ENDPOINT = ENV_URLS.oidcApiUrl || "";
 var OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;
-var OIDC_CLIENT_ID = _chunk4OMJ7A6Ajs.getOidcClientId.call(void 0, "prd" /* PRD */, "extension" /* EXTENSION */);
+var OIDC_CLIENT_ID = (platform) => {
+  if (platform === "extension") {
+    return _chunkSMKTWM6Ijs.getOidcClientId.call(void 0, "prd" /* PRD */, "extension" /* EXTENSION */);
+  }
+  if (platform === "mobile") {
+    return _chunkSMKTWM6Ijs.getOidcClientId.call(void 0, "prd" /* PRD */, "mobile" /* MOBILE */);
+  }
+  throw new Error(`Unsupported platform - ${platform}`);
+};
 var OIDC_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:jwt-bearer";
 async function getNonce(publicKey) {
   const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);
@@ -55,13 +63,13 @@ async function login(rawMessage, signature, clientMetaMetrics) {
     return null;
   }
 }
-async function getAccessToken(jwtToken) {
+async function getAccessToken(jwtToken, platform) {
   const headers = new Headers({
     "Content-Type": "application/x-www-form-urlencoded"
   });
   const urlEncodedBody = new URLSearchParams();
   urlEncodedBody.append("grant_type", OIDC_GRANT_TYPE);
-  urlEncodedBody.append("client_id", OIDC_CLIENT_ID);
+  urlEncodedBody.append("client_id", OIDC_CLIENT_ID(platform));
   urlEncodedBody.append("assertion", jwtToken);
   try {
     const response = await fetch(OIDC_TOKENS_ENDPOINT, {
@@ -95,4 +103,4 @@ function createLoginRawMessage(nonce, publicKey) {
 
 
 exports.AUTH_NONCE_ENDPOINT = AUTH_NONCE_ENDPOINT; exports.AUTH_LOGIN_ENDPOINT = AUTH_LOGIN_ENDPOINT; exports.OIDC_TOKENS_ENDPOINT = OIDC_TOKENS_ENDPOINT; exports.getNonce = getNonce; exports.login = login; exports.getAccessToken = getAccessToken; exports.createLoginRawMessage = createLoginRawMessage;
-//# sourceMappingURL=chunk-2MVOZPBN.js.map
+//# sourceMappingURL=chunk-5C53GKTU.js.map

package/dist/chunk-5C53GKTU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/services.ts"],"names":[],"mappings":";;;;;;AAEA,IAAM,WAAW,0BAAkB;AAEnC,IAAM,gBAAwB,SAAS;AAChC,IAAM,sBAAsB,GAAG,aAAa;AAC5C,IAAM,sBAAsB,GAAG,aAAa;AAEnD,IAAM,gBAAwB,SAAS,cAAc;AAC9C,IAAM,uBAAuB,GAAG,aAAa;AACpD,IAAM,iBAAiB,CAAC,aAAqC;AAC3D,MAAI,aAAa,aAAa;AAC5B,WAAO,4DAA2C;AAAA,EACpD;AACA,MAAI,aAAa,UAAU;AACzB,WAAO,sDAAwC;AAAA,EACjD;AAEA,QAAM,IAAI,MAAM,0BAA0B,QAAkB,EAAE;AAChE;AACA,IAAM,kBAAkB;AAYxB,eAAsB,SAAS,WAA2C;AACxE,QAAM,WAAW,IAAI,IAAI,mBAAmB;AAC5C,WAAS,aAAa,IAAI,cAAc,SAAS;AAEjD,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,YAA2B,MAAM,cAAc,KAAK;AAC1D,WAAO,WAAW,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,YAAQ,MAAM,2DAA2D,CAAC;AAC1E,WAAO;AAAA,EACT;AACF;AAqCA,eAAsB,MACpB,YACA,WACA,mBAC+B;AAC/B,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,qBAAqB;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA,QAEA,aAAa;AAAA,QACb,aAAa;AAAA;AAAA,UAEX,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,kBAAkB;AAAA,QAC3B;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,gBAA+B,MAAM,SAAS,KAAK;AACzD,WAAO,iBAAiB;AAAA,EAC1B,SAAS,GAAG;AACV,YAAQ,MAAM,uDAAuD,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAoBA,eAAsB,eACpB,UACA,UACwB;AACxB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,eAAe;AACnD,iBAAe,OAAO,aAAa,eAAe,QAAQ,CAAC;AAC3D,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,sBAAsB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,sBAA0C,MAAM,SAAS,KAAK;AACpE,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C,SAAS,GAAG;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,sBACd,OACA,WACgC;AAChC,SAAO,YAAY,KAAK,IAAI,SAAS;AACvC","sourcesContent":["import { Env, Platform, getEnvUrls, getOidcClientId } from '../../sdk';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nconst AUTH_ENDPOINT: string = ENV_URLS.authApiUrl;\nexport const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;\nexport const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;\n\nconst OIDC_ENDPOINT: string = ENV_URLS.oidcApiUrl || '';\nexport const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;\nconst OIDC_CLIENT_ID = (platform: 'mobile' | 'extension') => {\n  if (platform === 'extension') {\n    return getOidcClientId(Env.PRD, Platform.EXTENSION);\n  }\n  if (platform === 'mobile') {\n    return getOidcClientId(Env.PRD, Platform.MOBILE);\n  }\n\n  throw new Error(`Unsupported platform - ${platform as string}`);\n};\nconst OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n\nexport type NonceResponse = {\n  nonce: string;\n};\n\n/**\n * Auth Service - Get Nonce. Used for the initial JWTBearer flow\n *\n * @param publicKey - public key to associate a nonce with\n * @returns the nonce or null if failed\n */\nexport async function getNonce(publicKey: string): Promise<string | null> {\n  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);\n  nonceUrl.searchParams.set('identifier', publicKey);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      return null;\n    }\n\n    const nonceJson: NonceResponse = await nonceResponse.json();\n    return nonceJson?.nonce ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to get nonce', e);\n    return null;\n  }\n}\n\n/**\n * The Login API Server Response Shape\n */\nexport type LoginResponse = {\n  token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: string;\n  /**\n   * Contains anonymous information about the logged in profile.\n   *\n   * @property identifier_id - a deterministic unique identifier on the method used to sign in\n   * @property profile_id - a unique id for a given profile\n   * @property metametrics_id - an anonymous server id\n   */\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: string;\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: string;\n  };\n};\n\ntype ClientMetaMetrics = {\n  metametricsId: string;\n  agent: 'extension' | 'mobile';\n};\n\n/**\n * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.\n *\n * @param rawMessage - the original message before signing\n * @param signature - the signed message\n * @param clientMetaMetrics - optional client metametrics id (to associate on backend)\n * @returns The Login Response\n */\nexport async function login(\n  rawMessage: string,\n  signature: string,\n  clientMetaMetrics: ClientMetaMetrics,\n): Promise<LoginResponse | null> {\n  try {\n    const response = await fetch(AUTH_LOGIN_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n        metametrics: {\n          // eslint-disable-next-line @typescript-eslint/naming-convention\n          metametrics_id: clientMetaMetrics.metametricsId,\n          agent: clientMetaMetrics.agent,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const loginResponse: LoginResponse = await response.json();\n    return loginResponse ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to login', e);\n    return null;\n  }\n}\n\n/**\n * The Auth API Token Response Shape\n */\nexport type OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: number;\n};\n\n/**\n * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)\n * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints\n *\n * @param jwtToken - the JWT Auth Token, received from `/login`\n * @param platform - the OIDC platform to retrieve access token\n * @returns JWT Access token to store and use on authorized endpoints.\n */\nexport async function getAccessToken(\n  jwtToken: string,\n  platform: ClientMetaMetrics['agent'],\n): Promise<string | null> {\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);\n  urlEncodedBody.append('client_id', OIDC_CLIENT_ID(platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKENS_ENDPOINT, {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const accessTokenResponse: OAuthTokenResponse = await response.json();\n    return accessTokenResponse?.access_token ?? null;\n  } catch (e) {\n    console.error(\n      'authentication-controller/services: unable to get access token',\n      e,\n    );\n    return null;\n  }\n}\n\n/**\n * Utility to create the raw login message for the JWT bearer flow (via SRP)\n *\n * @param nonce - nonce received from `/nonce` endpoint\n * @param publicKey - public key used to retrieve nonce and for message signing\n * @returns Raw Message which will be used for signing & logging in.\n */\nexport function createLoginRawMessage(\n  nonce: string,\n  publicKey: string,\n): `metamask:${string}:${string}` {\n  return `metamask:${nonce}:${publicKey}` as const;\n}\n"]}

package/dist/{chunk-K6G7X6PX.js → chunk-5SXXO4MV.js}

@@ -1,21 +1,21 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-var _chunk7FCK4BY3js = require('./chunk-7FCK4BY3.js');
+var _chunkB6CSNLGEjs = require('./chunk-B6CSNLGE.js');
 
 
-var _chunkJTDFOATGjs = require('./chunk-JTDFOATG.js');
+var _chunkAK7OTIWAjs = require('./chunk-AK7OTIWA.js');
 
 
-var _chunk4OMJ7A6Ajs = require('./chunk-4OMJ7A6A.js');
+var _chunkSMKTWM6Ijs = require('./chunk-SMKTWM6I.js');
 
 // src/controllers/user-storage/services.ts
 var _loglevel = require('loglevel'); var _loglevel2 = _interopRequireDefault(_loglevel);
-var ENV_URLS = _chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, "prd" /* PRD */);
+var ENV_URLS = _chunkSMKTWM6Ijs.getEnvUrls.call(void 0, "prd" /* PRD */);
 var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
 var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
 async function getUserStorage(opts) {
   try {
-    const path = _chunk7FCK4BY3js.createEntryPath.call(void 0, opts.entryKey, opts.storageKey);
+    const path = _chunkB6CSNLGEjs.createEntryPath.call(void 0, opts.entryKey, opts.storageKey);
     const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);
     const userStorageResponse = await fetch(url.toString(), {
       headers: {
@@ -34,7 +34,7 @@ async function getUserStorage(opts) {
     if (!encryptedData) {
       return null;
     }
-    const decryptedData = _chunkJTDFOATGjs.encryption_default.decryptString(
+    const decryptedData = _chunkAK7OTIWAjs.encryption_default.decryptString(
       encryptedData,
       opts.storageKey
     );
@@ -45,8 +45,8 @@ async function getUserStorage(opts) {
   }
 }
 async function upsertUserStorage(data, opts) {
-  const encryptedData = _chunkJTDFOATGjs.encryption_default.encryptString(data, opts.storageKey);
-  const path = _chunk7FCK4BY3js.createEntryPath.call(void 0, opts.entryKey, opts.storageKey);
+  const encryptedData = _chunkAK7OTIWAjs.encryption_default.encryptString(data, opts.storageKey);
+  const path = _chunkB6CSNLGEjs.createEntryPath.call(void 0, opts.entryKey, opts.storageKey);
   const url = new URL(`${USER_STORAGE_ENDPOINT}${path}`);
   const res = await fetch(url.toString(), {
     method: "PUT",
@@ -67,4 +67,4 @@ async function upsertUserStorage(data, opts) {
 
 
 exports.USER_STORAGE_API = USER_STORAGE_API; exports.USER_STORAGE_ENDPOINT = USER_STORAGE_ENDPOINT; exports.getUserStorage = getUserStorage; exports.upsertUserStorage = upsertUserStorage;
-//# sourceMappingURL=chunk-K6G7X6PX.js.map
+//# sourceMappingURL=chunk-5SXXO4MV.js.map

package/dist/{chunk-BFE6TB7Y.mjs → chunk-5TOWF6UW.mjs}

@@ -1,6 +1,6 @@
 import {
   encryption_default
-} from "./chunk-QE2F5AZL.mjs";
+} from "./chunk-K5UKU454.mjs";
 
 // src/controllers/user-storage/encryption/index.ts
 var encryption_default2 = encryption_default;
@@ -8,4 +8,4 @@ var encryption_default2 = encryption_default;
 export {
   encryption_default2 as encryption_default
 };
-//# sourceMappingURL=chunk-BFE6TB7Y.mjs.map
+//# sourceMappingURL=chunk-5TOWF6UW.mjs.map

package/dist/{chunk-W7JFFMEZ.mjs → chunk-7SW3CC66.mjs}

@@ -1,7 +1,7 @@
 import {
   getEnvUrls,
   getOidcClientId
-} from "./chunk-GLS4QZF6.mjs";
+} from "./chunk-FQ5SDMRE.mjs";
 
 // src/controllers/authentication/services.ts
 var ENV_URLS = getEnvUrls("prd" /* PRD */);
@@ -10,7 +10,15 @@ var AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;
 var AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;
 var OIDC_ENDPOINT = ENV_URLS.oidcApiUrl || "";
 var OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;
-var OIDC_CLIENT_ID = getOidcClientId("prd" /* PRD */, "extension" /* EXTENSION */);
+var OIDC_CLIENT_ID = (platform) => {
+  if (platform === "extension") {
+    return getOidcClientId("prd" /* PRD */, "extension" /* EXTENSION */);
+  }
+  if (platform === "mobile") {
+    return getOidcClientId("prd" /* PRD */, "mobile" /* MOBILE */);
+  }
+  throw new Error(`Unsupported platform - ${platform}`);
+};
 var OIDC_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:jwt-bearer";
 async function getNonce(publicKey) {
   const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);
@@ -55,13 +63,13 @@ async function login(rawMessage, signature, clientMetaMetrics) {
     return null;
   }
 }
-async function getAccessToken(jwtToken) {
+async function getAccessToken(jwtToken, platform) {
   const headers = new Headers({
     "Content-Type": "application/x-www-form-urlencoded"
   });
   const urlEncodedBody = new URLSearchParams();
   urlEncodedBody.append("grant_type", OIDC_GRANT_TYPE);
-  urlEncodedBody.append("client_id", OIDC_CLIENT_ID);
+  urlEncodedBody.append("client_id", OIDC_CLIENT_ID(platform));
   urlEncodedBody.append("assertion", jwtToken);
   try {
     const response = await fetch(OIDC_TOKENS_ENDPOINT, {
@@ -95,4 +103,4 @@ export {
   getAccessToken,
   createLoginRawMessage
 };
-//# sourceMappingURL=chunk-W7JFFMEZ.mjs.map
+//# sourceMappingURL=chunk-7SW3CC66.mjs.map

package/dist/chunk-7SW3CC66.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/services.ts"],"sourcesContent":["import { Env, Platform, getEnvUrls, getOidcClientId } from '../../sdk';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nconst AUTH_ENDPOINT: string = ENV_URLS.authApiUrl;\nexport const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;\nexport const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;\n\nconst OIDC_ENDPOINT: string = ENV_URLS.oidcApiUrl || '';\nexport const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;\nconst OIDC_CLIENT_ID = (platform: 'mobile' | 'extension') => {\n  if (platform === 'extension') {\n    return getOidcClientId(Env.PRD, Platform.EXTENSION);\n  }\n  if (platform === 'mobile') {\n    return getOidcClientId(Env.PRD, Platform.MOBILE);\n  }\n\n  throw new Error(`Unsupported platform - ${platform as string}`);\n};\nconst OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n\nexport type NonceResponse = {\n  nonce: string;\n};\n\n/**\n * Auth Service - Get Nonce. Used for the initial JWTBearer flow\n *\n * @param publicKey - public key to associate a nonce with\n * @returns the nonce or null if failed\n */\nexport async function getNonce(publicKey: string): Promise<string | null> {\n  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);\n  nonceUrl.searchParams.set('identifier', publicKey);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      return null;\n    }\n\n    const nonceJson: NonceResponse = await nonceResponse.json();\n    return nonceJson?.nonce ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to get nonce', e);\n    return null;\n  }\n}\n\n/**\n * The Login API Server Response Shape\n */\nexport type LoginResponse = {\n  token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: string;\n  /**\n   * Contains anonymous information about the logged in profile.\n   *\n   * @property identifier_id - a deterministic unique identifier on the method used to sign in\n   * @property profile_id - a unique id for a given profile\n   * @property metametrics_id - an anonymous server id\n   */\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: string;\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: string;\n  };\n};\n\ntype ClientMetaMetrics = {\n  metametricsId: string;\n  agent: 'extension' | 'mobile';\n};\n\n/**\n * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.\n *\n * @param rawMessage - the original message before signing\n * @param signature - the signed message\n * @param clientMetaMetrics - optional client metametrics id (to associate on backend)\n * @returns The Login Response\n */\nexport async function login(\n  rawMessage: string,\n  signature: string,\n  clientMetaMetrics: ClientMetaMetrics,\n): Promise<LoginResponse | null> {\n  try {\n    const response = await fetch(AUTH_LOGIN_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n        metametrics: {\n          // eslint-disable-next-line @typescript-eslint/naming-convention\n          metametrics_id: clientMetaMetrics.metametricsId,\n          agent: clientMetaMetrics.agent,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const loginResponse: LoginResponse = await response.json();\n    return loginResponse ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to login', e);\n    return null;\n  }\n}\n\n/**\n * The Auth API Token Response Shape\n */\nexport type OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: number;\n};\n\n/**\n * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)\n * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints\n *\n * @param jwtToken - the JWT Auth Token, received from `/login`\n * @param platform - the OIDC platform to retrieve access token\n * @returns JWT Access token to store and use on authorized endpoints.\n */\nexport async function getAccessToken(\n  jwtToken: string,\n  platform: ClientMetaMetrics['agent'],\n): Promise<string | null> {\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);\n  urlEncodedBody.append('client_id', OIDC_CLIENT_ID(platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKENS_ENDPOINT, {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const accessTokenResponse: OAuthTokenResponse = await response.json();\n    return accessTokenResponse?.access_token ?? null;\n  } catch (e) {\n    console.error(\n      'authentication-controller/services: unable to get access token',\n      e,\n    );\n    return null;\n  }\n}\n\n/**\n * Utility to create the raw login message for the JWT bearer flow (via SRP)\n *\n * @param nonce - nonce received from `/nonce` endpoint\n * @param publicKey - public key used to retrieve nonce and for message signing\n * @returns Raw Message which will be used for signing & logging in.\n */\nexport function createLoginRawMessage(\n  nonce: string,\n  publicKey: string,\n): `metamask:${string}:${string}` {\n  return `metamask:${nonce}:${publicKey}` as const;\n}\n"],"mappings":";;;;;;AAEA,IAAM,WAAW,0BAAkB;AAEnC,IAAM,gBAAwB,SAAS;AAChC,IAAM,sBAAsB,GAAG,aAAa;AAC5C,IAAM,sBAAsB,GAAG,aAAa;AAEnD,IAAM,gBAAwB,SAAS,cAAc;AAC9C,IAAM,uBAAuB,GAAG,aAAa;AACpD,IAAM,iBAAiB,CAAC,aAAqC;AAC3D,MAAI,aAAa,aAAa;AAC5B,WAAO,4DAA2C;AAAA,EACpD;AACA,MAAI,aAAa,UAAU;AACzB,WAAO,sDAAwC;AAAA,EACjD;AAEA,QAAM,IAAI,MAAM,0BAA0B,QAAkB,EAAE;AAChE;AACA,IAAM,kBAAkB;AAYxB,eAAsB,SAAS,WAA2C;AACxE,QAAM,WAAW,IAAI,IAAI,mBAAmB;AAC5C,WAAS,aAAa,IAAI,cAAc,SAAS;AAEjD,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,YAA2B,MAAM,cAAc,KAAK;AAC1D,WAAO,WAAW,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,YAAQ,MAAM,2DAA2D,CAAC;AAC1E,WAAO;AAAA,EACT;AACF;AAqCA,eAAsB,MACpB,YACA,WACA,mBAC+B;AAC/B,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,qBAAqB;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA,QAEA,aAAa;AAAA,QACb,aAAa;AAAA;AAAA,UAEX,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,kBAAkB;AAAA,QAC3B;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,gBAA+B,MAAM,SAAS,KAAK;AACzD,WAAO,iBAAiB;AAAA,EAC1B,SAAS,GAAG;AACV,YAAQ,MAAM,uDAAuD,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAoBA,eAAsB,eACpB,UACA,UACwB;AACxB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,eAAe;AACnD,iBAAe,OAAO,aAAa,eAAe,QAAQ,CAAC;AAC3D,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,sBAAsB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,sBAA0C,MAAM,SAAS,KAAK;AACpE,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C,SAAS,GAAG;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,sBACd,OACA,WACgC;AAChC,SAAO,YAAY,KAAK,IAAI,SAAS;AACvC;","names":[]}

package/dist/{chunk-JTDFOATG.js → chunk-AK7OTIWA.js}

@@ -1,11 +1,11 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkJWTNHCVGjs = require('./chunk-JWTNHCVG.js');
+var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
 
 // src/controllers/user-storage/encryption/index.ts
-var encryption_default2 = _chunkJWTNHCVGjs.encryption_default;
+var encryption_default2 = _chunkT3FNDVE3js.encryption_default;
 
 
 
 exports.encryption_default = encryption_default2;
-//# sourceMappingURL=chunk-JTDFOATG.js.map
+//# sourceMappingURL=chunk-AK7OTIWA.js.map

package/dist/{chunk-772MKTIO.mjs → chunk-AUFUOKJW.mjs}

@@ -1,6 +1,6 @@
 import {
   createSHA256Hash
-} from "./chunk-QE2F5AZL.mjs";
+} from "./chunk-K5UKU454.mjs";
 
 // src/controllers/user-storage/schema.ts
 var USER_STORAGE_ENTRIES = {
@@ -22,4 +22,4 @@ export {
   USER_STORAGE_ENTRIES,
   createEntryPath
 };
-//# sourceMappingURL=chunk-772MKTIO.mjs.map
+//# sourceMappingURL=chunk-AUFUOKJW.mjs.map

package/dist/{chunk-6TK7544L.js → chunk-AVOOINGJ.js}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkXUPRRLBIjs = require('./chunk-XUPRRLBI.js');
+var _chunkBOET676Pjs = require('./chunk-BOET676P.js');
 
 
 var _chunkRG4II6WHjs = require('./chunk-RG4II6WH.js');
@@ -17,7 +17,7 @@ var _chunkMBTBE4P5js = require('./chunk-MBTBE4P5.js');
 
 
 
-var _chunkV46WVGWNjs = require('./chunk-V46WVGWN.js');
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
 
 // src/sdk/authentication-jwt-bearer/flow-srp.ts
 var defaultEIP6963SigningOptions = {
@@ -44,45 +44,45 @@ var _config, _options, _getAuthSession, getAuthSession_fn, _login, login_fn, _cr
 var SRPJwtBearerAuth = class {
   constructor(config, options) {
     // convert expiresIn from seconds to milliseconds and use 90% of expiresIn
-    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _getAuthSession);
-    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _login);
-    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _createSrpLoginRawMessage);
-    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _config, void 0);
-    _chunkV46WVGWNjs.__privateAdd.call(void 0, this, _options, void 0);
-    _chunkV46WVGWNjs.__privateSet.call(void 0, this, _config, config);
-    _chunkV46WVGWNjs.__privateSet.call(void 0, this, _options, {
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getAuthSession);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _login);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _createSrpLoginRawMessage);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _config, void 0);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _options, void 0);
+    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _config, config);
+    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _options, {
       storage: options.storage,
       signing: options.signing ?? defaultEIP6963SigningOptions
     });
   }
   async getAccessToken() {
-    const session = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
+    const session = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
     if (session) {
       return session.token.accessToken;
     }
-    const loginResponse = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
+    const loginResponse = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
     return loginResponse.token.accessToken;
   }
   async getUserProfile() {
-    const session = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
+    const session = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
     if (session) {
       return session.profile;
     }
-    const loginResponse = await _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
+    const loginResponse = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
     return loginResponse.profile;
   }
   async getIdentifier() {
-    return await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
+    return await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
   }
   async signMessage(message) {
-    return await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _options).signing.signMessage(message);
+    return await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).signing.signMessage(message);
   }
 };
 _config = new WeakMap();
 _options = new WeakMap();
 _getAuthSession = new WeakSet();
 getAuthSession_fn = async function() {
-  const auth = await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _options).storage.getLoginResponse();
+  const auth = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).storage.getLoginResponse();
   if (!auth) {
     return null;
   }
@@ -97,26 +97,26 @@ getAuthSession_fn = async function() {
 _login = new WeakSet();
 login_fn = async function() {
   const address = await this.getIdentifier();
-  const nonceRes = await _chunkXUPRRLBIjs.getNonce.call(void 0, address, _chunkV46WVGWNjs.__privateGet.call(void 0, this, _config).env);
-  const publicKey = await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
-  const rawMessage = _chunkV46WVGWNjs.__privateMethod.call(void 0, this, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn).call(this, nonceRes.nonce, publicKey);
+  const nonceRes = await _chunkBOET676Pjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
+  const publicKey = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
+  const rawMessage = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn).call(this, nonceRes.nonce, publicKey);
   const signature = await this.signMessage(rawMessage);
-  const authResponse = await _chunkXUPRRLBIjs.authenticate.call(void 0, 
+  const authResponse = await _chunkBOET676Pjs.authenticate.call(void 0, 
     rawMessage,
     signature,
-    _chunkV46WVGWNjs.__privateGet.call(void 0, this, _config).type,
-    _chunkV46WVGWNjs.__privateGet.call(void 0, this, _config).env
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).type,
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env
   );
-  const tokenResponse = await _chunkXUPRRLBIjs.authorizeOIDC.call(void 0, 
+  const tokenResponse = await _chunkBOET676Pjs.authorizeOIDC.call(void 0, 
     authResponse.token,
-    _chunkV46WVGWNjs.__privateGet.call(void 0, this, _config).env,
-    _chunkV46WVGWNjs.__privateGet.call(void 0, this, _config).platform
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env,
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).platform
   );
   const result = {
     profile: authResponse.profile,
     token: tokenResponse
   };
-  await _chunkV46WVGWNjs.__privateGet.call(void 0, this, _options).storage.setLoginResponse(result);
+  await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).storage.setLoginResponse(result);
   return result;
 };
 _createSrpLoginRawMessage = new WeakSet();
@@ -127,4 +127,4 @@ createSrpLoginRawMessage_fn = function(nonce, publicKey) {
 
 
 exports.SRPJwtBearerAuth = SRPJwtBearerAuth;
-//# sourceMappingURL=chunk-6TK7544L.js.map
+//# sourceMappingURL=chunk-AVOOINGJ.js.map

package/dist/{chunk-UEZI2POO.mjs → chunk-AXWK4Y23.mjs}

@@ -1,10 +1,10 @@
 import {
   createSHA256Hash,
   encryption_default
-} from "./chunk-VTM5T7Y4.mjs";
+} from "./chunk-B5DBQDB3.mjs";
 import {
   getEnvUrls
-} from "./chunk-GLS4QZF6.mjs";
+} from "./chunk-FQ5SDMRE.mjs";
 import {
   NotFoundError,
   UserStorageError,
@@ -13,7 +13,7 @@ import {
 import {
   __privateAdd,
   __privateMethod
-} from "./chunk-26CCETCM.mjs";
+} from "./chunk-U5UIDVOO.mjs";
 
 // src/sdk/user-storage.ts
 var STORAGE_URL = (env, feature, entry) => `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;
@@ -141,4 +141,4 @@ export {
   STORAGE_URL,
   UserStorage
 };
-//# sourceMappingURL=chunk-UEZI2POO.mjs.map
+//# sourceMappingURL=chunk-AXWK4Y23.mjs.map

package/dist/{chunk-VTM5T7Y4.mjs → chunk-B5DBQDB3.mjs}

@@ -2,7 +2,7 @@ import {
   __privateAdd,
   __privateGet,
   __privateMethod
-} from "./chunk-26CCETCM.mjs";
+} from "./chunk-U5UIDVOO.mjs";
 
 // src/sdk/encryption.ts
 import { gcm } from "@noble/ciphers/aes";
@@ -137,4 +137,4 @@ export {
   encryption_default,
   createSHA256Hash
 };
-//# sourceMappingURL=chunk-VTM5T7Y4.mjs.map
+//# sourceMappingURL=chunk-B5DBQDB3.mjs.map

package/dist/{chunk-7FCK4BY3.js → chunk-B6CSNLGE.js}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkJWTNHCVGjs = require('./chunk-JWTNHCVG.js');
+var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
 
 // src/controllers/user-storage/schema.ts
 var USER_STORAGE_ENTRIES = {
@@ -14,7 +14,7 @@ function createEntryPath(entryKey, storageKey) {
   if (!entry) {
     throw new Error(`user-storage - invalid entry provided: ${entryKey}`);
   }
-  const hashedKey = _chunkJWTNHCVGjs.createSHA256Hash.call(void 0, entry.entryName + storageKey);
+  const hashedKey = _chunkT3FNDVE3js.createSHA256Hash.call(void 0, entry.entryName + storageKey);
   return `/${entry.path}/${hashedKey}`;
 }
 
@@ -22,4 +22,4 @@ function createEntryPath(entryKey, storageKey) {
 
 
 exports.USER_STORAGE_ENTRIES = USER_STORAGE_ENTRIES; exports.createEntryPath = createEntryPath;
-//# sourceMappingURL=chunk-7FCK4BY3.js.map
+//# sourceMappingURL=chunk-B6CSNLGE.js.map

package/dist/{chunk-XUPRRLBI.js → chunk-BOET676P.js}

@@ -1,7 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunk4OMJ7A6Ajs = require('./chunk-4OMJ7A6A.js');
+var _chunkSMKTWM6Ijs = require('./chunk-SMKTWM6I.js');
 
 
 
@@ -10,11 +10,11 @@ var _chunk4OMJ7A6Ajs = require('./chunk-4OMJ7A6A.js');
 var _chunkMBTBE4P5js = require('./chunk-MBTBE4P5.js');
 
 // src/sdk/authentication-jwt-bearer/services.ts
-var NONCE_URL = (env) => `${_chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/nonce`;
-var PAIR_IDENTIFIERS = (env) => `${_chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/identifiers/pair`;
-var OIDC_TOKEN_URL = (env) => `${_chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, env).oidcApiUrl}/oauth2/token`;
-var SRP_LOGIN_URL = (env) => `${_chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/srp/login`;
-var SIWE_LOGIN_URL = (env) => `${_chunk4OMJ7A6Ajs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/siwe/login`;
+var NONCE_URL = (env) => `${_chunkSMKTWM6Ijs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/nonce`;
+var PAIR_IDENTIFIERS = (env) => `${_chunkSMKTWM6Ijs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/identifiers/pair`;
+var OIDC_TOKEN_URL = (env) => `${_chunkSMKTWM6Ijs.getEnvUrls.call(void 0, env).oidcApiUrl}/oauth2/token`;
+var SRP_LOGIN_URL = (env) => `${_chunkSMKTWM6Ijs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/srp/login`;
+var SIWE_LOGIN_URL = (env) => `${_chunkSMKTWM6Ijs.getEnvUrls.call(void 0, env).authApiUrl}/api/v2/siwe/login`;
 var getAuthenticationUrl = (authType, env) => {
   switch (authType) {
     case "SRP" /* SRP */:
@@ -81,7 +81,7 @@ async function authorizeOIDC(jwtToken, env, platform) {
   });
   const urlEncodedBody = new URLSearchParams();
   urlEncodedBody.append("grant_type", grantType);
-  urlEncodedBody.append("client_id", _chunk4OMJ7A6Ajs.getOidcClientId.call(void 0, env, platform));
+  urlEncodedBody.append("client_id", _chunkSMKTWM6Ijs.getOidcClientId.call(void 0, env, platform));
   urlEncodedBody.append("assertion", jwtToken);
   try {
     const response = await fetch(OIDC_TOKEN_URL(env), {
@@ -154,4 +154,4 @@ async function authenticate(rawMessage, signature, authType, env) {
 
 
 exports.NONCE_URL = NONCE_URL; exports.PAIR_IDENTIFIERS = PAIR_IDENTIFIERS; exports.OIDC_TOKEN_URL = OIDC_TOKEN_URL; exports.SRP_LOGIN_URL = SRP_LOGIN_URL; exports.SIWE_LOGIN_URL = SIWE_LOGIN_URL; exports.pairIdentifiers = pairIdentifiers; exports.getNonce = getNonce; exports.authorizeOIDC = authorizeOIDC; exports.authenticate = authenticate;
-//# sourceMappingURL=chunk-XUPRRLBI.js.map
+//# sourceMappingURL=chunk-BOET676P.js.map

package/dist/{chunk-YWA77VMP.mjs → chunk-CAIIVJAO.mjs}

@@ -8,4 +8,4 @@ var AuthType = /* @__PURE__ */ ((AuthType2) => {
 export {
   AuthType
 };
-//# sourceMappingURL=chunk-YWA77VMP.mjs.map
+//# sourceMappingURL=chunk-CAIIVJAO.mjs.map

package/dist/chunk-CAIIVJAO.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/types.ts"],"sourcesContent":["import type { Env, Platform } from '../env';\n\nexport enum AuthType {\n  /* sign in using a private key derived from your secret recovery phrase (SRP). \n       Uses message signing snap to perform this operation */\n  SRP = 'SRP',\n\n  /* sign in with Ethereum */\n  SiWE = 'SiWE',\n}\n\nexport type AuthConfig = {\n  env: Env;\n  platform: Platform;\n  type: AuthType;\n};\n\nexport type AccessToken = {\n  /**\n   * The JWT Access Token\n   */\n  accessToken: string;\n  /**\n   * Expiration in seconds\n   */\n  expiresIn: number;\n  /**\n   * Date in milliseconds\n   */\n  obtainedAt: number;\n};\n\nexport type UserProfile = {\n  /**\n   * The \"Identifier\" used to log in with.\n   */\n  identifierId: string;\n  /**\n   * The Unique profile for a logged in user. A Profile can be logged in via multiple Identifiers\n   */\n  profileId: string;\n  /**\n   * Server MetaMetrics ID. Allows grouping of user events cross platform.\n   */\n  metaMetricsId: string;\n};\n\nexport type LoginResponse = {\n  token: AccessToken;\n  profile: UserProfile;\n};\n\nexport type IBaseAuth = {\n  getAccessToken: () => Promise<string>;\n  getUserProfile: () => Promise<UserProfile>;\n  getIdentifier: () => Promise<string>;\n  signMessage: (message: string) => Promise<string>;\n};\n\nexport type AuthStorageOptions = {\n  getLoginResponse: () => Promise<LoginResponse | null>;\n  setLoginResponse: (val: LoginResponse) => Promise<void>;\n};\n\nexport type AuthSigningOptions = {\n  signMessage: (message: string) => Promise<string>;\n  getIdentifier: () => Promise<string>;\n};\n\nexport type ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport type Pair = {\n  identifier: string;\n  encryptedStorageKey: string;\n  identifierType: 'SIWE' | 'SRP';\n  signMessage: (message: string) => Promise<string>;\n};\n"],"mappings":";AAEO,IAAK,WAAL,kBAAKA,cAAL;AAGL,EAAAA,UAAA,SAAM;AAGN,EAAAA,UAAA,UAAO;AANG,SAAAA;AAAA,GAAA;","names":["AuthType"]}

package/dist/{chunk-3FJQHCCQ.mjs → chunk-FCT2LIGH.mjs}

@@ -1,13 +1,13 @@
 import {
   SIWEJwtBearerAuth
-} from "./chunk-UWRKMJBI.mjs";
+} from "./chunk-JLDFMYAH.mjs";
 import {
   SRPJwtBearerAuth
-} from "./chunk-LN2BY2QF.mjs";
+} from "./chunk-Y46NMA3V.mjs";
 import {
   getNonce,
   pairIdentifiers
-} from "./chunk-7VMXBDXN.mjs";
+} from "./chunk-WB6MUIML.mjs";
 import {
   PairError,
   UnsupportedAuthTypeError
@@ -17,7 +17,7 @@ import {
   __privateGet,
   __privateMethod,
   __privateSet
-} from "./chunk-26CCETCM.mjs";
+} from "./chunk-U5UIDVOO.mjs";
 
 // src/sdk/authentication.ts
 var _type, _env, _sdk, _assertSIWE, assertSIWE_fn;
@@ -103,4 +103,4 @@ assertSIWE_fn = function(type, sdk) {
 export {
   JwtBearerAuth
 };
-//# sourceMappingURL=chunk-3FJQHCCQ.mjs.map
+//# sourceMappingURL=chunk-FCT2LIGH.mjs.map

package/dist/{chunk-GLS4QZF6.mjs → chunk-FQ5SDMRE.mjs}

@@ -74,4 +74,4 @@ export {
   getEnvUrls,
   getOidcClientId
 };
-//# sourceMappingURL=chunk-GLS4QZF6.mjs.map
+//# sourceMappingURL=chunk-FQ5SDMRE.mjs.map

package/dist/chunk-FQ5SDMRE.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/env.ts"],"sourcesContent":["export enum Env {\n  DEV = 'dev',\n  UAT = 'uat',\n  PRD = 'prd',\n}\n\nexport enum Platform {\n  MOBILE = 'mobile',\n  EXTENSION = 'extension',\n  PORTFOLIO = 'portfolio',\n  INFURA = 'infura',\n}\n\ntype EnvUrlsEntry = {\n  authApiUrl: string;\n  oidcApiUrl: string;\n  userStorageApiUrl: string;\n};\n\nconst ENV_URLS: Record<Env, EnvUrlsEntry> = {\n  dev: {\n    authApiUrl: 'https://authentication.dev-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.dev-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.dev-api.cx.metamask.io',\n  },\n  uat: {\n    authApiUrl: 'https://authentication.uat-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.uat-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.uat-api.cx.metamask.io',\n  },\n  prd: {\n    authApiUrl: 'https://authentication.api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.api.cx.metamask.io',\n  },\n};\n\n/**\n * Validates and returns correct environment endpoints\n *\n * @param env - environment field\n * @returns the correct environment url\n * @throws on invalid environment passed\n */\nexport function getEnvUrls(env: Env): EnvUrlsEntry {\n  if (!ENV_URLS[env]) {\n    throw new Error('invalid environment configuration');\n  }\n  return ENV_URLS[env];\n}\n\n/**\n * Returns the valid OIDC Client ID (used during authorization)\n *\n * @param env - environment field\n * @param platform - platform field\n * @returns the OIDC client id for the environment\n */\nexport function getOidcClientId(env: Env, platform: Platform): string {\n  const clientIds = {\n    [Env.DEV]: {\n      [Platform.PORTFOLIO]: 'c7ca94a0-5d52-4635-9502-1a50a9c410cc',\n      [Platform.MOBILE]: 'e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e',\n      [Platform.EXTENSION]: 'f1a963d7-50dc-4cb5-8d81-f1f3654f0df3',\n      [Platform.INFURA]: 'bd887006-0d55-481a-a395-5ff9a0dc52c9',\n    },\n    [Env.UAT]: {\n      [Platform.PORTFOLIO]: '8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1',\n      [Platform.MOBILE]: 'c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53',\n      [Platform.EXTENSION]: 'a9de167c-c9a6-43d8-af39-d301fd44c485',\n      [Platform.INFURA]: '01929890-7002-4c97-9913-8f6c09a6d674',\n    },\n    [Env.PRD]: {\n      [Platform.PORTFOLIO]: '35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb',\n      [Platform.MOBILE]: '75fa62a3-9ca0-4b91-9fe5-76bec86b0257',\n      [Platform.EXTENSION]: '1132f10a-b4e5-4390-a5f2-d9c6022db564',\n      [Platform.INFURA]: '', // unset\n    },\n  };\n\n  if (!clientIds[env]) {\n    throw new Error(`invalid env ${env}: cannot determine oidc client id`);\n  }\n\n  if (!clientIds[env][platform]) {\n    throw new Error(\n      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`,\n    );\n  }\n\n  return clientIds[env][platform];\n}\n"],"mappings":";AAAO,IAAK,MAAL,kBAAKA,SAAL;AACL,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AAHI,SAAAA;AAAA,GAAA;AAML,IAAK,WAAL,kBAAKC,cAAL;AACL,EAAAA,UAAA,YAAS;AACT,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAaZ,IAAM,WAAsC;AAAA,EAC1C,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AACF;AASO,SAAS,WAAW,KAAwB;AACjD,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,SAAS,GAAG;AACrB;AASO,SAAS,gBAAgB,KAAU,UAA4B;AACpE,QAAM,YAAY;AAAA,IAChB,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,IAAI,MAAM,eAAe,GAAG,mCAAmC;AAAA,EACvE;AAEA,MAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,eAAe,GAAG,iBAAiB,QAAQ;AAAA,IAC7C;AAAA,EACF;AAEA,SAAO,UAAU,GAAG,EAAE,QAAQ;AAChC;","names":["Env","Platform"]}