@metamask/profile-sync-controller 0.2.1 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +42 -1
- package/auth/mocks/package.json +9 -0
- package/auth/package.json +9 -0
- package/dist/{chunk-JENTMRXO.js → chunk-246Z6L5V.js} +245 -16
- package/dist/chunk-246Z6L5V.js.map +1 -0
- package/dist/chunk-2677XY6G.mjs +107 -0
- package/dist/chunk-2677XY6G.mjs.map +1 -0
- package/dist/{chunk-BDO3VJEU.mjs → chunk-2CWF7ZTL.mjs} +2 -2
- package/dist/{chunk-ILIZJQ6X.mjs → chunk-2VEMA6OE.mjs} +11 -4
- package/dist/chunk-2VEMA6OE.mjs.map +1 -0
- package/dist/chunk-4LMFZDL4.js +114 -0
- package/dist/chunk-4LMFZDL4.js.map +1 -0
- package/dist/{chunk-VD2IGTS3.js → chunk-4ZGRRVMI.js} +5 -5
- package/dist/{chunk-SLHAVOTE.js → chunk-5MQUI24U.js} +13 -6
- package/dist/chunk-5MQUI24U.js.map +1 -0
- package/dist/chunk-6DAK2U35.mjs +11 -0
- package/dist/chunk-6DAK2U35.mjs.map +1 -0
- package/dist/{chunk-FU7PSGFP.mjs → chunk-76NMME23.mjs} +51 -9
- package/dist/chunk-76NMME23.mjs.map +1 -0
- package/dist/{chunk-7KMONAQI.mjs → chunk-7MSQV43P.mjs} +7 -9
- package/dist/{chunk-7KMONAQI.mjs.map → chunk-7MSQV43P.mjs.map} +1 -1
- package/dist/{chunk-T3FNDVE3.js → chunk-BKQE7DB5.js} +30 -18
- package/dist/chunk-BKQE7DB5.js.map +1 -0
- package/dist/chunk-CHUZGCDV.js +107 -0
- package/dist/chunk-CHUZGCDV.js.map +1 -0
- package/dist/{chunk-K5UKU454.mjs → chunk-COBJUBZE.mjs} +31 -19
- package/dist/chunk-COBJUBZE.mjs.map +1 -0
- package/dist/{chunk-WWQ65CZY.mjs → chunk-D4SNJOID.mjs} +2 -2
- package/dist/chunk-D4SNJOID.mjs.map +1 -0
- package/dist/{chunk-SMKTWM6I.js → chunk-DF24ZX4H.js} +2 -3
- package/dist/chunk-DF24ZX4H.js.map +1 -0
- package/dist/chunk-EHZFPUJH.mjs +53 -0
- package/dist/chunk-EHZFPUJH.mjs.map +1 -0
- package/dist/{chunk-KW3X4TT5.js → chunk-F6BAOSH2.js} +6 -6
- package/dist/chunk-F6BAOSH2.js.map +1 -0
- package/dist/chunk-GQXYWBFK.js +28 -0
- package/dist/chunk-GQXYWBFK.js.map +1 -0
- package/dist/{chunk-DRD22DR5.mjs → chunk-J7NSK6BO.mjs} +2 -2
- package/dist/chunk-JAQ5TPSZ.js +53 -0
- package/dist/chunk-JAQ5TPSZ.js.map +1 -0
- package/dist/{chunk-5TOWF6UW.mjs → chunk-KHASG4H3.mjs} +2 -2
- package/dist/{chunk-G4NU4KP7.js → chunk-KIVBL6OM.js} +6 -6
- package/dist/{chunk-FQ5SDMRE.mjs → chunk-KTCSRECK.mjs} +2 -3
- package/dist/{chunk-FQ5SDMRE.mjs.map → chunk-KTCSRECK.mjs.map} +1 -1
- package/dist/{chunk-7SW3CC66.mjs → chunk-LGXQBALM.mjs} +2 -2
- package/dist/{chunk-5C53GKTU.js.map → chunk-LGXQBALM.mjs.map} +1 -1
- package/dist/{chunk-BOET676P.js → chunk-LLG4D2SC.js} +8 -8
- package/dist/{chunk-NPH5AHLH.mjs → chunk-MK7ABX2V.mjs} +54 -6
- package/dist/chunk-MK7ABX2V.mjs.map +1 -0
- package/dist/{chunk-AK7OTIWA.js → chunk-NIUQ34PY.js} +3 -3
- package/dist/{chunk-MNVUKRZC.js → chunk-PRYLTXW4.js} +15 -9
- package/dist/chunk-PRYLTXW4.js.map +1 -0
- package/dist/{chunk-XSSIP3PJ.js → chunk-Q5KTSMRE.js} +8 -8
- package/dist/{chunk-QE5X2BT3.mjs → chunk-SZ6WMC6C.mjs} +242 -13
- package/dist/chunk-SZ6WMC6C.mjs.map +1 -0
- package/dist/{chunk-PSR2V3R4.js → chunk-T2YURW25.js} +17 -19
- package/dist/chunk-T2YURW25.js.map +1 -0
- package/dist/{chunk-CJLDMVV3.mjs → chunk-UHP2Y32K.mjs} +9 -3
- package/dist/chunk-UHP2Y32K.mjs.map +1 -0
- package/dist/chunk-UHX7HJAI.js +11 -0
- package/dist/chunk-UHX7HJAI.js.map +1 -0
- package/dist/{chunk-FUPEFLXB.js → chunk-UIRAMHNM.js} +60 -12
- package/dist/chunk-UIRAMHNM.js.map +1 -0
- package/dist/{chunk-VYZPOR47.mjs → chunk-YKOMKXG4.mjs} +4 -4
- package/dist/{chunk-WB6MUIML.mjs → chunk-YLURF2PF.mjs} +2 -2
- package/dist/chunk-ZUPTMFEA.mjs +28 -0
- package/dist/chunk-ZUPTMFEA.mjs.map +1 -0
- package/dist/{chunk-5C53GKTU.js → chunk-ZX2KHPXG.js} +5 -5
- package/dist/chunk-ZX2KHPXG.js.map +1 -0
- package/dist/controllers/authentication/AuthenticationController.js +4 -21
- package/dist/controllers/authentication/AuthenticationController.mjs +3 -20
- package/dist/controllers/authentication/index.js +7 -22
- package/dist/controllers/authentication/index.mjs +6 -21
- package/dist/controllers/authentication/services.js +3 -20
- package/dist/controllers/authentication/services.mjs +2 -19
- package/dist/controllers/index.js +13 -23
- package/dist/controllers/index.mjs +12 -22
- package/dist/controllers/user-storage/UserStorageController.js +9 -19
- package/dist/controllers/user-storage/UserStorageController.mjs +8 -18
- package/dist/controllers/user-storage/accounts/constants.js +12 -0
- package/dist/controllers/user-storage/accounts/constants.js.map +1 -0
- package/dist/controllers/user-storage/accounts/constants.mjs +12 -0
- package/dist/controllers/user-storage/accounts/constants.mjs.map +1 -0
- package/dist/controllers/user-storage/accounts/user-storage.js +11 -0
- package/dist/controllers/user-storage/accounts/user-storage.js.map +1 -0
- package/dist/controllers/user-storage/accounts/user-storage.mjs +11 -0
- package/dist/controllers/user-storage/accounts/user-storage.mjs.map +1 -0
- package/dist/controllers/user-storage/encryption/encryption.js +2 -2
- package/dist/controllers/user-storage/encryption/encryption.mjs +1 -1
- package/dist/controllers/user-storage/encryption/index.js +3 -3
- package/dist/controllers/user-storage/encryption/index.mjs +2 -2
- package/dist/controllers/user-storage/index.js +15 -23
- package/dist/controllers/user-storage/index.mjs +12 -20
- package/dist/controllers/user-storage/schema.js +6 -4
- package/dist/controllers/user-storage/schema.mjs +7 -5
- package/dist/controllers/user-storage/services.js +8 -18
- package/dist/controllers/user-storage/services.mjs +7 -17
- package/dist/index.js +20 -18
- package/dist/index.mjs +19 -17
- package/dist/sdk/authentication-jwt-bearer/flow-siwe.js +4 -4
- package/dist/sdk/authentication-jwt-bearer/flow-siwe.mjs +3 -3
- package/dist/sdk/authentication-jwt-bearer/flow-srp.js +4 -4
- package/dist/sdk/authentication-jwt-bearer/flow-srp.mjs +3 -3
- package/dist/sdk/authentication-jwt-bearer/services.js +3 -3
- package/dist/sdk/authentication-jwt-bearer/services.mjs +2 -2
- package/dist/sdk/authentication.js +6 -6
- package/dist/sdk/authentication.mjs +5 -5
- package/dist/sdk/encryption.js +5 -3
- package/dist/sdk/encryption.mjs +6 -4
- package/dist/sdk/env.js +2 -2
- package/dist/sdk/env.mjs +1 -1
- package/dist/sdk/index.js +14 -16
- package/dist/sdk/index.mjs +13 -15
- package/dist/sdk/user-storage.js +7 -7
- package/dist/sdk/user-storage.mjs +6 -6
- package/dist/tsconfig.build.tsbuildinfo +1 -1
- package/dist/types/controllers/authentication/AuthenticationController.d.ts +6 -3
- package/dist/types/controllers/authentication/AuthenticationController.d.ts.map +1 -1
- package/dist/types/controllers/authentication/__fixtures__/mockResponses.d.ts +1 -1
- package/dist/types/controllers/authentication/__fixtures__/mockResponses.d.ts.map +1 -1
- package/dist/types/controllers/authentication/index.d.ts +2 -0
- package/dist/types/controllers/authentication/index.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/UserStorageController.d.ts +52 -11
- package/dist/types/controllers/user-storage/UserStorageController.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/__fixtures__/mockAccounts.d.ts +63 -0
- package/dist/types/controllers/user-storage/__fixtures__/mockAccounts.d.ts.map +1 -0
- package/dist/types/controllers/user-storage/__fixtures__/mockResponses.d.ts +11 -5
- package/dist/types/controllers/user-storage/__fixtures__/mockResponses.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/__fixtures__/mockServices.d.ts +4 -2
- package/dist/types/controllers/user-storage/__fixtures__/mockServices.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/__fixtures__/mockStorage.d.ts +1 -1
- package/dist/types/controllers/user-storage/__fixtures__/mockStorage.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/accounts/constants.d.ts +4 -0
- package/dist/types/controllers/user-storage/accounts/constants.d.ts.map +1 -0
- package/dist/types/controllers/user-storage/accounts/user-storage.d.ts +32 -0
- package/dist/types/controllers/user-storage/accounts/user-storage.d.ts.map +1 -0
- package/dist/types/controllers/user-storage/encryption/encryption.d.ts +3 -2
- package/dist/types/controllers/user-storage/encryption/encryption.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/index.d.ts +2 -0
- package/dist/types/controllers/user-storage/index.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/schema.d.ts +13 -6
- package/dist/types/controllers/user-storage/schema.d.ts.map +1 -1
- package/dist/types/controllers/user-storage/services.d.ts +23 -4
- package/dist/types/controllers/user-storage/services.d.ts.map +1 -1
- package/dist/types/sdk/__fixtures__/mock-userstorage.d.ts +5 -4
- package/dist/types/sdk/__fixtures__/mock-userstorage.d.ts.map +1 -1
- package/dist/types/sdk/encryption.d.ts +3 -19
- package/dist/types/sdk/encryption.d.ts.map +1 -1
- package/dist/types/sdk/user-storage.d.ts +4 -3
- package/dist/types/sdk/user-storage.d.ts.map +1 -1
- package/package.json +37 -6
- package/user-storage/mocks/package.json +9 -0
- package/user-storage/package.json +9 -0
- package/dist/chunk-3TE6M5TV.js +0 -72
- package/dist/chunk-3TE6M5TV.js.map +0 -1
- package/dist/chunk-4DQF2YNS.js +0 -78
- package/dist/chunk-4DQF2YNS.js.map +0 -1
- package/dist/chunk-7SW3CC66.mjs.map +0 -1
- package/dist/chunk-B5DBQDB3.mjs +0 -140
- package/dist/chunk-B5DBQDB3.mjs.map +0 -1
- package/dist/chunk-CJLDMVV3.mjs.map +0 -1
- package/dist/chunk-FU7PSGFP.mjs.map +0 -1
- package/dist/chunk-FUPEFLXB.js.map +0 -1
- package/dist/chunk-ILIZJQ6X.mjs.map +0 -1
- package/dist/chunk-JENTMRXO.js.map +0 -1
- package/dist/chunk-K5UKU454.mjs.map +0 -1
- package/dist/chunk-KW3X4TT5.js.map +0 -1
- package/dist/chunk-MNVUKRZC.js.map +0 -1
- package/dist/chunk-NPH5AHLH.mjs.map +0 -1
- package/dist/chunk-P4DUDLMY.js +0 -140
- package/dist/chunk-P4DUDLMY.js.map +0 -1
- package/dist/chunk-PSR2V3R4.js.map +0 -1
- package/dist/chunk-QE5X2BT3.mjs.map +0 -1
- package/dist/chunk-SLHAVOTE.js.map +0 -1
- package/dist/chunk-SMKTWM6I.js.map +0 -1
- package/dist/chunk-T3FNDVE3.js.map +0 -1
- package/dist/chunk-WWQ65CZY.mjs.map +0 -1
- package/dist/chunk-XMYWJQNH.mjs +0 -78
- package/dist/chunk-XMYWJQNH.mjs.map +0 -1
- /package/dist/{chunk-BDO3VJEU.mjs.map → chunk-2CWF7ZTL.mjs.map} +0 -0
- /package/dist/{chunk-VD2IGTS3.js.map → chunk-4ZGRRVMI.js.map} +0 -0
- /package/dist/{chunk-DRD22DR5.mjs.map → chunk-J7NSK6BO.mjs.map} +0 -0
- /package/dist/{chunk-5TOWF6UW.mjs.map → chunk-KHASG4H3.mjs.map} +0 -0
- /package/dist/{chunk-G4NU4KP7.js.map → chunk-KIVBL6OM.js.map} +0 -0
- /package/dist/{chunk-BOET676P.js.map → chunk-LLG4D2SC.js.map} +0 -0
- /package/dist/{chunk-AK7OTIWA.js.map → chunk-NIUQ34PY.js.map} +0 -0
- /package/dist/{chunk-XSSIP3PJ.js.map → chunk-Q5KTSMRE.js.map} +0 -0
- /package/dist/{chunk-VYZPOR47.mjs.map → chunk-YKOMKXG4.mjs.map} +0 -0
- /package/dist/{chunk-WB6MUIML.mjs.map → chunk-YLURF2PF.mjs.map} +0 -0
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
import {
|
|
2
2
|
createSHA256Hash
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-COBJUBZE.mjs";
|
|
4
4
|
|
|
5
5
|
// src/controllers/user-storage/schema.ts
|
|
6
|
+
var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
|
|
6
7
|
var USER_STORAGE_SCHEMA = {
|
|
7
|
-
notifications: ["notificationSettings"]
|
|
8
|
+
notifications: ["notificationSettings"],
|
|
9
|
+
accounts: [ALLOW_ARBITRARY_KEYS]
|
|
8
10
|
};
|
|
9
11
|
var getFeatureAndKeyFromPath = (path) => {
|
|
10
12
|
const pathRegex = /^\w+\.\w+$/u;
|
|
@@ -18,7 +20,7 @@ var getFeatureAndKeyFromPath = (path) => {
|
|
|
18
20
|
throw new Error(`user-storage - invalid feature provided: ${feature}`);
|
|
19
21
|
}
|
|
20
22
|
const validFeature = USER_STORAGE_SCHEMA[feature];
|
|
21
|
-
if (!validFeature.includes(key)) {
|
|
23
|
+
if (!validFeature.includes(key) && !validFeature.includes(ALLOW_ARBITRARY_KEYS)) {
|
|
22
24
|
const validKeys = USER_STORAGE_SCHEMA[feature].join(", ");
|
|
23
25
|
throw new Error(
|
|
24
26
|
`user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`
|
|
@@ -26,6 +28,10 @@ var getFeatureAndKeyFromPath = (path) => {
|
|
|
26
28
|
}
|
|
27
29
|
return { feature, key };
|
|
28
30
|
};
|
|
31
|
+
var isPathWithFeatureAndKey = (path) => {
|
|
32
|
+
const pathRegex = /^\w+\.\w+$/u;
|
|
33
|
+
return pathRegex.test(path);
|
|
34
|
+
};
|
|
29
35
|
function createEntryPath(path, storageKey) {
|
|
30
36
|
const { feature, key } = getFeatureAndKeyFromPath(path);
|
|
31
37
|
const hashedKey = createSHA256Hash(key + storageKey);
|
|
@@ -35,6 +41,7 @@ function createEntryPath(path, storageKey) {
|
|
|
35
41
|
export {
|
|
36
42
|
USER_STORAGE_SCHEMA,
|
|
37
43
|
getFeatureAndKeyFromPath,
|
|
44
|
+
isPathWithFeatureAndKey,
|
|
38
45
|
createEntryPath
|
|
39
46
|
};
|
|
40
|
-
//# sourceMappingURL=chunk-
|
|
47
|
+
//# sourceMappingURL=chunk-2VEMA6OE.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"sourcesContent":["import { createSHA256Hash } from './encryption';\n\n/**\n * The User Storage Endpoint requires a feature name and a namespace key.\n * Developers can provide additional features and keys by extending these types below.\n *\n * Adding ALLOW_ARBITRARY_KEYS as the first key in the array allows for any key to be used for this feature.\n * This can be useful for features where keys are not deterministic (eg. accounts addresses).\n */\nconst ALLOW_ARBITRARY_KEYS = 'ALLOW_ARBITRARY_KEYS' as const;\n\nexport const USER_STORAGE_SCHEMA = {\n notifications: ['notificationSettings'],\n accounts: [ALLOW_ARBITRARY_KEYS],\n} as const;\n\ntype UserStorageSchema = typeof USER_STORAGE_SCHEMA;\n\ntype UserStorageFeatures = keyof UserStorageSchema;\ntype UserStorageFeatureKeys<Feature extends UserStorageFeatures> =\n UserStorageSchema[Feature][0] extends typeof ALLOW_ARBITRARY_KEYS\n ? string\n : UserStorageSchema[Feature][number];\n\ntype UserStorageFeatureAndKey = {\n feature: UserStorageFeatures;\n key: UserStorageFeatureKeys<UserStorageFeatures>;\n};\n\nexport type UserStoragePathWithFeatureOnly = keyof UserStorageSchema;\nexport type UserStoragePathWithFeatureAndKey = {\n [K in UserStorageFeatures]: `${K}.${UserStorageFeatureKeys<K>}`;\n}[UserStoragePathWithFeatureOnly];\n\nexport const getFeatureAndKeyFromPath = (\n path: UserStoragePathWithFeatureAndKey,\n): UserStorageFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n if (!pathRegex.test(path)) {\n throw new Error(\n `user-storage - path is not in the correct format. Correct format: 'feature.key'`,\n );\n }\n\n const [feature, key] = path.split('.') as [\n UserStorageFeatures,\n UserStorageFeatureKeys<UserStorageFeatures>,\n ];\n\n if (!(feature in USER_STORAGE_SCHEMA)) {\n throw new Error(`user-storage - invalid feature provided: ${feature}`);\n }\n\n const validFeature = USER_STORAGE_SCHEMA[feature] as readonly string[];\n\n if (\n !validFeature.includes(key) &&\n !validFeature.includes(ALLOW_ARBITRARY_KEYS)\n ) {\n const validKeys = USER_STORAGE_SCHEMA[feature].join(', ');\n\n throw new Error(\n `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`,\n );\n }\n\n return { feature, key };\n};\n\nexport const isPathWithFeatureAndKey = (\n path: string,\n): path is UserStoragePathWithFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n return pathRegex.test(path);\n};\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param path - string in the form of `${feature}.${key}` that matches schema\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n path: UserStoragePathWithFeatureAndKey,\n storageKey: string,\n): string {\n const { feature, key } = getFeatureAndKeyFromPath(path);\n const hashedKey = createSHA256Hash(key + storageKey);\n\n return `/${feature}/${hashedKey}`;\n}\n"],"mappings":";;;;;AASA,IAAM,uBAAuB;AAEtB,IAAM,sBAAsB;AAAA,EACjC,eAAe,CAAC,sBAAsB;AAAA,EACtC,UAAU,CAAC,oBAAoB;AACjC;AAoBO,IAAM,2BAA2B,CACtC,SAC6B;AAC7B,QAAM,YAAY;AAElB,MAAI,CAAC,UAAU,KAAK,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG;AAKrC,MAAI,EAAE,WAAW,sBAAsB;AACrC,UAAM,IAAI,MAAM,4CAA4C,OAAO,EAAE;AAAA,EACvE;AAEA,QAAM,eAAe,oBAAoB,OAAO;AAEhD,MACE,CAAC,aAAa,SAAS,GAAG,KAC1B,CAAC,aAAa,SAAS,oBAAoB,GAC3C;AACA,UAAM,YAAY,oBAAoB,OAAO,EAAE,KAAK,IAAI;AAExD,UAAM,IAAI;AAAA,MACR,yDAAyD,GAAG,iBAAiB,SAAS;AAAA,IACxF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,IAAI;AACxB;AAEO,IAAM,0BAA0B,CACrC,SAC6C;AAC7C,QAAM,YAAY;AAElB,SAAO,UAAU,KAAK,IAAI;AAC5B;AAWO,SAAS,gBACd,MACA,YACQ;AACR,QAAM,EAAE,SAAS,IAAI,IAAI,yBAAyB,IAAI;AACtD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AAEnD,SAAO,IAAI,OAAO,IAAI,SAAS;AACjC;","names":[]}
|
|
@@ -0,0 +1,114 @@
|
|
|
1
|
+
"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
2
|
+
|
|
3
|
+
var _chunk5MQUI24Ujs = require('./chunk-5MQUI24U.js');
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
var _chunkNIUQ34PYjs = require('./chunk-NIUQ34PY.js');
|
|
7
|
+
|
|
8
|
+
|
|
9
|
+
var _chunkDF24ZX4Hjs = require('./chunk-DF24ZX4H.js');
|
|
10
|
+
|
|
11
|
+
// src/controllers/user-storage/services.ts
|
|
12
|
+
var _loglevel = require('loglevel'); var _loglevel2 = _interopRequireDefault(_loglevel);
|
|
13
|
+
var ENV_URLS = _chunkDF24ZX4Hjs.getEnvUrls.call(void 0, "prd" /* PRD */);
|
|
14
|
+
var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
|
|
15
|
+
var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
|
|
16
|
+
async function getUserStorage(opts) {
|
|
17
|
+
try {
|
|
18
|
+
const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
|
|
19
|
+
const encryptedPath = _chunk5MQUI24Ujs.createEntryPath.call(void 0, path, storageKey);
|
|
20
|
+
const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
|
|
21
|
+
const userStorageResponse = await fetch(url.toString(), {
|
|
22
|
+
headers: {
|
|
23
|
+
"Content-Type": "application/json",
|
|
24
|
+
Authorization: `Bearer ${bearerToken}`
|
|
25
|
+
}
|
|
26
|
+
});
|
|
27
|
+
if (userStorageResponse.status === 404) {
|
|
28
|
+
return null;
|
|
29
|
+
}
|
|
30
|
+
if (userStorageResponse.status !== 200) {
|
|
31
|
+
throw new Error("Unable to get User Storage");
|
|
32
|
+
}
|
|
33
|
+
const userStorage = await userStorageResponse.json();
|
|
34
|
+
const encryptedData = userStorage?.Data ?? null;
|
|
35
|
+
if (!encryptedData) {
|
|
36
|
+
return null;
|
|
37
|
+
}
|
|
38
|
+
const decryptedData = await _chunkNIUQ34PYjs.encryption_default.decryptString(
|
|
39
|
+
encryptedData,
|
|
40
|
+
opts.storageKey,
|
|
41
|
+
nativeScryptCrypto
|
|
42
|
+
);
|
|
43
|
+
return decryptedData;
|
|
44
|
+
} catch (e) {
|
|
45
|
+
_loglevel2.default.error("Failed to get user storage", e);
|
|
46
|
+
return null;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
async function getUserStorageAllFeatureEntries(opts) {
|
|
50
|
+
try {
|
|
51
|
+
const { bearerToken, path, nativeScryptCrypto } = opts;
|
|
52
|
+
const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
|
|
53
|
+
const userStorageResponse = await fetch(url.toString(), {
|
|
54
|
+
headers: {
|
|
55
|
+
"Content-Type": "application/json",
|
|
56
|
+
Authorization: `Bearer ${bearerToken}`
|
|
57
|
+
}
|
|
58
|
+
});
|
|
59
|
+
if (userStorageResponse.status === 404) {
|
|
60
|
+
return null;
|
|
61
|
+
}
|
|
62
|
+
if (userStorageResponse.status !== 200) {
|
|
63
|
+
throw new Error("Unable to get User Storage");
|
|
64
|
+
}
|
|
65
|
+
const userStorage = await userStorageResponse.json();
|
|
66
|
+
if (!Array.isArray(userStorage)) {
|
|
67
|
+
return null;
|
|
68
|
+
}
|
|
69
|
+
const decryptedData = userStorage?.flatMap((entry) => {
|
|
70
|
+
if (!entry.Data) {
|
|
71
|
+
return [];
|
|
72
|
+
}
|
|
73
|
+
return _chunkNIUQ34PYjs.encryption_default.decryptString(
|
|
74
|
+
entry.Data,
|
|
75
|
+
opts.storageKey,
|
|
76
|
+
nativeScryptCrypto
|
|
77
|
+
);
|
|
78
|
+
});
|
|
79
|
+
return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
|
|
80
|
+
} catch (e) {
|
|
81
|
+
_loglevel2.default.error("Failed to get user storage", e);
|
|
82
|
+
return null;
|
|
83
|
+
}
|
|
84
|
+
}
|
|
85
|
+
async function upsertUserStorage(data, opts) {
|
|
86
|
+
const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
|
|
87
|
+
const encryptedData = await _chunkNIUQ34PYjs.encryption_default.encryptString(
|
|
88
|
+
data,
|
|
89
|
+
opts.storageKey,
|
|
90
|
+
nativeScryptCrypto
|
|
91
|
+
);
|
|
92
|
+
const encryptedPath = _chunk5MQUI24Ujs.createEntryPath.call(void 0, path, storageKey);
|
|
93
|
+
const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
|
|
94
|
+
const res = await fetch(url.toString(), {
|
|
95
|
+
method: "PUT",
|
|
96
|
+
headers: {
|
|
97
|
+
"Content-Type": "application/json",
|
|
98
|
+
Authorization: `Bearer ${bearerToken}`
|
|
99
|
+
},
|
|
100
|
+
body: JSON.stringify({ data: encryptedData })
|
|
101
|
+
});
|
|
102
|
+
if (!res.ok) {
|
|
103
|
+
throw new Error("user-storage - unable to upsert data");
|
|
104
|
+
}
|
|
105
|
+
}
|
|
106
|
+
|
|
107
|
+
|
|
108
|
+
|
|
109
|
+
|
|
110
|
+
|
|
111
|
+
|
|
112
|
+
|
|
113
|
+
exports.USER_STORAGE_API = USER_STORAGE_API; exports.USER_STORAGE_ENDPOINT = USER_STORAGE_ENDPOINT; exports.getUserStorage = getUserStorage; exports.getUserStorageAllFeatureEntries = getUserStorageAllFeatureEntries; exports.upsertUserStorage = upsertUserStorage;
|
|
114
|
+
//# sourceMappingURL=chunk-4LMFZDL4.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/controllers/user-storage/services.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAWhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwCxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,MAAM,mBAAW;AAAA,MACrC;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,gCACpB,MAC0B;AAC1B,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,mBAAmB,IAAI;AAClD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,IAAI,IAAI,EAAE;AAEtD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AAEjC,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,aAAa,QAAQ,CAAC,UAAU;AACpD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW;AAAA,QAChB,MAAM;AAAA,QACN,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,QAAM,gBAAgB,MAAM,mBAAW;AAAA,IACrC;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AACA,QAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF","sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk/env';\nimport encryption from './encryption';\nimport type {\n UserStoragePathWithFeatureAndKey,\n UserStoragePathWithFeatureOnly,\n} from './schema';\nimport { createEntryPath } from './schema';\nimport type { NativeScrypt } from './UserStorageController';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n bearerToken: string;\n storageKey: string;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureAndKey;\n nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureOnly;\n nativeScryptCrypto?: NativeScrypt;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n opts: UserStorageOptions,\n): Promise<string | null> {\n try {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates entry does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageResponse | null =\n await userStorageResponse.json();\n const encryptedData = userStorage?.Data ?? null;\n\n if (!encryptedData) {\n return null;\n }\n\n const decryptedData = await encryption.decryptString(\n encryptedData,\n opts.storageKey,\n nativeScryptCrypto,\n );\n\n return decryptedData;\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n try {\n const { bearerToken, path, nativeScryptCrypto } = opts;\n const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates feature does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n await userStorageResponse.json();\n\n if (!Array.isArray(userStorage)) {\n return null;\n }\n\n const decryptedData = userStorage?.flatMap((entry) => {\n if (!entry.Data) {\n return [];\n }\n\n return encryption.decryptString(\n entry.Data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n });\n\n return (await Promise.allSettled(decryptedData))\n .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n .filter((d): d is string => d !== undefined);\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n data: string,\n opts: UserStorageOptions,\n): Promise<void> {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedData = await encryption.encryptString(\n data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const res = await fetch(url.toString(), {\n method: 'PUT',\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n body: JSON.stringify({ data: encryptedData }),\n });\n\n if (!res.ok) {\n throw new Error('user-storage - unable to upsert data');\n }\n}\n"]}
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
|
|
4
4
|
|
|
5
|
-
var
|
|
5
|
+
var _chunkLLG4D2SCjs = require('./chunk-LLG4D2SC.js');
|
|
6
6
|
|
|
7
7
|
|
|
8
8
|
var _chunkRG4II6WHjs = require('./chunk-RG4II6WH.js');
|
|
@@ -100,17 +100,17 @@ getAuthSession_fn = async function() {
|
|
|
100
100
|
_login = new WeakSet();
|
|
101
101
|
login_fn = async function() {
|
|
102
102
|
const address = await this.getIdentifier();
|
|
103
|
-
const nonceRes = await
|
|
103
|
+
const nonceRes = await _chunkLLG4D2SCjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
|
|
104
104
|
const publicKey = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
|
|
105
105
|
const rawMessage = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn).call(this, nonceRes.nonce, publicKey);
|
|
106
106
|
const signature = await this.signMessage(rawMessage);
|
|
107
|
-
const authResponse = await
|
|
107
|
+
const authResponse = await _chunkLLG4D2SCjs.authenticate.call(void 0,
|
|
108
108
|
rawMessage,
|
|
109
109
|
signature,
|
|
110
110
|
_chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).type,
|
|
111
111
|
_chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env
|
|
112
112
|
);
|
|
113
|
-
const tokenResponse = await
|
|
113
|
+
const tokenResponse = await _chunkLLG4D2SCjs.authorizeOIDC.call(void 0,
|
|
114
114
|
authResponse.token,
|
|
115
115
|
_chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env,
|
|
116
116
|
_chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).platform
|
|
@@ -130,4 +130,4 @@ createSrpLoginRawMessage_fn = function(nonce, publicKey) {
|
|
|
130
130
|
|
|
131
131
|
|
|
132
132
|
exports.SRPJwtBearerAuth = SRPJwtBearerAuth;
|
|
133
|
-
//# sourceMappingURL=chunk-
|
|
133
|
+
//# sourceMappingURL=chunk-4ZGRRVMI.js.map
|
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
"use strict";Object.defineProperty(exports, "__esModule", {value: true});
|
|
2
2
|
|
|
3
|
-
var
|
|
3
|
+
var _chunkBKQE7DB5js = require('./chunk-BKQE7DB5.js');
|
|
4
4
|
|
|
5
5
|
// src/controllers/user-storage/schema.ts
|
|
6
|
+
var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
|
|
6
7
|
var USER_STORAGE_SCHEMA = {
|
|
7
|
-
notifications: ["notificationSettings"]
|
|
8
|
+
notifications: ["notificationSettings"],
|
|
9
|
+
accounts: [ALLOW_ARBITRARY_KEYS]
|
|
8
10
|
};
|
|
9
11
|
var getFeatureAndKeyFromPath = (path) => {
|
|
10
12
|
const pathRegex = /^\w+\.\w+$/u;
|
|
@@ -18,7 +20,7 @@ var getFeatureAndKeyFromPath = (path) => {
|
|
|
18
20
|
throw new Error(`user-storage - invalid feature provided: ${feature}`);
|
|
19
21
|
}
|
|
20
22
|
const validFeature = USER_STORAGE_SCHEMA[feature];
|
|
21
|
-
if (!validFeature.includes(key)) {
|
|
23
|
+
if (!validFeature.includes(key) && !validFeature.includes(ALLOW_ARBITRARY_KEYS)) {
|
|
22
24
|
const validKeys = USER_STORAGE_SCHEMA[feature].join(", ");
|
|
23
25
|
throw new Error(
|
|
24
26
|
`user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`
|
|
@@ -26,9 +28,13 @@ var getFeatureAndKeyFromPath = (path) => {
|
|
|
26
28
|
}
|
|
27
29
|
return { feature, key };
|
|
28
30
|
};
|
|
31
|
+
var isPathWithFeatureAndKey = (path) => {
|
|
32
|
+
const pathRegex = /^\w+\.\w+$/u;
|
|
33
|
+
return pathRegex.test(path);
|
|
34
|
+
};
|
|
29
35
|
function createEntryPath(path, storageKey) {
|
|
30
36
|
const { feature, key } = getFeatureAndKeyFromPath(path);
|
|
31
|
-
const hashedKey =
|
|
37
|
+
const hashedKey = _chunkBKQE7DB5js.createSHA256Hash.call(void 0, key + storageKey);
|
|
32
38
|
return `/${feature}/${hashedKey}`;
|
|
33
39
|
}
|
|
34
40
|
|
|
@@ -36,5 +42,6 @@ function createEntryPath(path, storageKey) {
|
|
|
36
42
|
|
|
37
43
|
|
|
38
44
|
|
|
39
|
-
|
|
40
|
-
|
|
45
|
+
|
|
46
|
+
exports.USER_STORAGE_SCHEMA = USER_STORAGE_SCHEMA; exports.getFeatureAndKeyFromPath = getFeatureAndKeyFromPath; exports.isPathWithFeatureAndKey = isPathWithFeatureAndKey; exports.createEntryPath = createEntryPath;
|
|
47
|
+
//# sourceMappingURL=chunk-5MQUI24U.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"names":[],"mappings":";;;;;AASA,IAAM,uBAAuB;AAEtB,IAAM,sBAAsB;AAAA,EACjC,eAAe,CAAC,sBAAsB;AAAA,EACtC,UAAU,CAAC,oBAAoB;AACjC;AAoBO,IAAM,2BAA2B,CACtC,SAC6B;AAC7B,QAAM,YAAY;AAElB,MAAI,CAAC,UAAU,KAAK,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG;AAKrC,MAAI,EAAE,WAAW,sBAAsB;AACrC,UAAM,IAAI,MAAM,4CAA4C,OAAO,EAAE;AAAA,EACvE;AAEA,QAAM,eAAe,oBAAoB,OAAO;AAEhD,MACE,CAAC,aAAa,SAAS,GAAG,KAC1B,CAAC,aAAa,SAAS,oBAAoB,GAC3C;AACA,UAAM,YAAY,oBAAoB,OAAO,EAAE,KAAK,IAAI;AAExD,UAAM,IAAI;AAAA,MACR,yDAAyD,GAAG,iBAAiB,SAAS;AAAA,IACxF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,IAAI;AACxB;AAEO,IAAM,0BAA0B,CACrC,SAC6C;AAC7C,QAAM,YAAY;AAElB,SAAO,UAAU,KAAK,IAAI;AAC5B;AAWO,SAAS,gBACd,MACA,YACQ;AACR,QAAM,EAAE,SAAS,IAAI,IAAI,yBAAyB,IAAI;AACtD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AAEnD,SAAO,IAAI,OAAO,IAAI,SAAS;AACjC","sourcesContent":["import { createSHA256Hash } from './encryption';\n\n/**\n * The User Storage Endpoint requires a feature name and a namespace key.\n * Developers can provide additional features and keys by extending these types below.\n *\n * Adding ALLOW_ARBITRARY_KEYS as the first key in the array allows for any key to be used for this feature.\n * This can be useful for features where keys are not deterministic (eg. accounts addresses).\n */\nconst ALLOW_ARBITRARY_KEYS = 'ALLOW_ARBITRARY_KEYS' as const;\n\nexport const USER_STORAGE_SCHEMA = {\n notifications: ['notificationSettings'],\n accounts: [ALLOW_ARBITRARY_KEYS],\n} as const;\n\ntype UserStorageSchema = typeof USER_STORAGE_SCHEMA;\n\ntype UserStorageFeatures = keyof UserStorageSchema;\ntype UserStorageFeatureKeys<Feature extends UserStorageFeatures> =\n UserStorageSchema[Feature][0] extends typeof ALLOW_ARBITRARY_KEYS\n ? string\n : UserStorageSchema[Feature][number];\n\ntype UserStorageFeatureAndKey = {\n feature: UserStorageFeatures;\n key: UserStorageFeatureKeys<UserStorageFeatures>;\n};\n\nexport type UserStoragePathWithFeatureOnly = keyof UserStorageSchema;\nexport type UserStoragePathWithFeatureAndKey = {\n [K in UserStorageFeatures]: `${K}.${UserStorageFeatureKeys<K>}`;\n}[UserStoragePathWithFeatureOnly];\n\nexport const getFeatureAndKeyFromPath = (\n path: UserStoragePathWithFeatureAndKey,\n): UserStorageFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n if (!pathRegex.test(path)) {\n throw new Error(\n `user-storage - path is not in the correct format. Correct format: 'feature.key'`,\n );\n }\n\n const [feature, key] = path.split('.') as [\n UserStorageFeatures,\n UserStorageFeatureKeys<UserStorageFeatures>,\n ];\n\n if (!(feature in USER_STORAGE_SCHEMA)) {\n throw new Error(`user-storage - invalid feature provided: ${feature}`);\n }\n\n const validFeature = USER_STORAGE_SCHEMA[feature] as readonly string[];\n\n if (\n !validFeature.includes(key) &&\n !validFeature.includes(ALLOW_ARBITRARY_KEYS)\n ) {\n const validKeys = USER_STORAGE_SCHEMA[feature].join(', ');\n\n throw new Error(\n `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`,\n );\n }\n\n return { feature, key };\n};\n\nexport const isPathWithFeatureAndKey = (\n path: string,\n): path is UserStoragePathWithFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n return pathRegex.test(path);\n};\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param path - string in the form of `${feature}.${key}` that matches schema\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n path: UserStoragePathWithFeatureAndKey,\n storageKey: string,\n): string {\n const { feature, key } = getFeatureAndKeyFromPath(path);\n const hashedKey = createSHA256Hash(key + storageKey);\n\n return `/${feature}/${hashedKey}`;\n}\n"]}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/sdk/encryption.ts"],"sourcesContent":["import encryption from '../controllers/user-storage/encryption/encryption';\n\nexport * from '../controllers/user-storage/encryption/encryption';\nexport default encryption;\n"],"mappings":";;;;;AAGA,IAAOA,sBAAQ;","names":["encryption_default"]}
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
import {
|
|
2
2
|
createEntryPath
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-2VEMA6OE.mjs";
|
|
4
4
|
import {
|
|
5
5
|
encryption_default
|
|
6
|
-
} from "./chunk-
|
|
6
|
+
} from "./chunk-KHASG4H3.mjs";
|
|
7
7
|
import {
|
|
8
8
|
getEnvUrls
|
|
9
|
-
} from "./chunk-
|
|
9
|
+
} from "./chunk-KTCSRECK.mjs";
|
|
10
10
|
|
|
11
11
|
// src/controllers/user-storage/services.ts
|
|
12
12
|
import log from "loglevel";
|
|
@@ -15,7 +15,7 @@ var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
|
|
|
15
15
|
var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
|
|
16
16
|
async function getUserStorage(opts) {
|
|
17
17
|
try {
|
|
18
|
-
const { bearerToken, path, storageKey } = opts;
|
|
18
|
+
const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
|
|
19
19
|
const encryptedPath = createEntryPath(path, storageKey);
|
|
20
20
|
const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
|
|
21
21
|
const userStorageResponse = await fetch(url.toString(), {
|
|
@@ -35,9 +35,10 @@ async function getUserStorage(opts) {
|
|
|
35
35
|
if (!encryptedData) {
|
|
36
36
|
return null;
|
|
37
37
|
}
|
|
38
|
-
const decryptedData = encryption_default.decryptString(
|
|
38
|
+
const decryptedData = await encryption_default.decryptString(
|
|
39
39
|
encryptedData,
|
|
40
|
-
opts.storageKey
|
|
40
|
+
opts.storageKey,
|
|
41
|
+
nativeScryptCrypto
|
|
41
42
|
);
|
|
42
43
|
return decryptedData;
|
|
43
44
|
} catch (e) {
|
|
@@ -45,9 +46,49 @@ async function getUserStorage(opts) {
|
|
|
45
46
|
return null;
|
|
46
47
|
}
|
|
47
48
|
}
|
|
49
|
+
async function getUserStorageAllFeatureEntries(opts) {
|
|
50
|
+
try {
|
|
51
|
+
const { bearerToken, path, nativeScryptCrypto } = opts;
|
|
52
|
+
const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
|
|
53
|
+
const userStorageResponse = await fetch(url.toString(), {
|
|
54
|
+
headers: {
|
|
55
|
+
"Content-Type": "application/json",
|
|
56
|
+
Authorization: `Bearer ${bearerToken}`
|
|
57
|
+
}
|
|
58
|
+
});
|
|
59
|
+
if (userStorageResponse.status === 404) {
|
|
60
|
+
return null;
|
|
61
|
+
}
|
|
62
|
+
if (userStorageResponse.status !== 200) {
|
|
63
|
+
throw new Error("Unable to get User Storage");
|
|
64
|
+
}
|
|
65
|
+
const userStorage = await userStorageResponse.json();
|
|
66
|
+
if (!Array.isArray(userStorage)) {
|
|
67
|
+
return null;
|
|
68
|
+
}
|
|
69
|
+
const decryptedData = userStorage?.flatMap((entry) => {
|
|
70
|
+
if (!entry.Data) {
|
|
71
|
+
return [];
|
|
72
|
+
}
|
|
73
|
+
return encryption_default.decryptString(
|
|
74
|
+
entry.Data,
|
|
75
|
+
opts.storageKey,
|
|
76
|
+
nativeScryptCrypto
|
|
77
|
+
);
|
|
78
|
+
});
|
|
79
|
+
return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
|
|
80
|
+
} catch (e) {
|
|
81
|
+
log.error("Failed to get user storage", e);
|
|
82
|
+
return null;
|
|
83
|
+
}
|
|
84
|
+
}
|
|
48
85
|
async function upsertUserStorage(data, opts) {
|
|
49
|
-
const { bearerToken, path, storageKey } = opts;
|
|
50
|
-
const encryptedData = encryption_default.encryptString(
|
|
86
|
+
const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
|
|
87
|
+
const encryptedData = await encryption_default.encryptString(
|
|
88
|
+
data,
|
|
89
|
+
opts.storageKey,
|
|
90
|
+
nativeScryptCrypto
|
|
91
|
+
);
|
|
51
92
|
const encryptedPath = createEntryPath(path, storageKey);
|
|
52
93
|
const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
|
|
53
94
|
const res = await fetch(url.toString(), {
|
|
@@ -67,6 +108,7 @@ export {
|
|
|
67
108
|
USER_STORAGE_API,
|
|
68
109
|
USER_STORAGE_ENDPOINT,
|
|
69
110
|
getUserStorage,
|
|
111
|
+
getUserStorageAllFeatureEntries,
|
|
70
112
|
upsertUserStorage
|
|
71
113
|
};
|
|
72
|
-
//# sourceMappingURL=chunk-
|
|
114
|
+
//# sourceMappingURL=chunk-76NMME23.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/controllers/user-storage/services.ts"],"sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk/env';\nimport encryption from './encryption';\nimport type {\n UserStoragePathWithFeatureAndKey,\n UserStoragePathWithFeatureOnly,\n} from './schema';\nimport { createEntryPath } from './schema';\nimport type { NativeScrypt } from './UserStorageController';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n bearerToken: string;\n storageKey: string;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureAndKey;\n nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureOnly;\n nativeScryptCrypto?: NativeScrypt;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n opts: UserStorageOptions,\n): Promise<string | null> {\n try {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates entry does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageResponse | null =\n await userStorageResponse.json();\n const encryptedData = userStorage?.Data ?? null;\n\n if (!encryptedData) {\n return null;\n }\n\n const decryptedData = await encryption.decryptString(\n encryptedData,\n opts.storageKey,\n nativeScryptCrypto,\n );\n\n return decryptedData;\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n try {\n const { bearerToken, path, nativeScryptCrypto } = opts;\n const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates feature does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n await userStorageResponse.json();\n\n if (!Array.isArray(userStorage)) {\n return null;\n }\n\n const decryptedData = userStorage?.flatMap((entry) => {\n if (!entry.Data) {\n return [];\n }\n\n return encryption.decryptString(\n entry.Data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n });\n\n return (await Promise.allSettled(decryptedData))\n .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n .filter((d): d is string => d !== undefined);\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n data: string,\n opts: UserStorageOptions,\n): Promise<void> {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedData = await encryption.encryptString(\n data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const res = await fetch(url.toString(), {\n method: 'PUT',\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n body: JSON.stringify({ data: encryptedData }),\n });\n\n if (!res.ok) {\n throw new Error('user-storage - unable to upsert data');\n }\n}\n"],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAWhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwCxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,MAAM,mBAAW;AAAA,MACrC;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,gCACpB,MAC0B;AAC1B,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,mBAAmB,IAAI;AAClD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,IAAI,IAAI,EAAE;AAEtD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AAEjC,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,aAAa,QAAQ,CAAC,UAAU;AACpD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW;AAAA,QAChB,MAAM;AAAA,QACN,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,QAAM,gBAAgB,MAAM,mBAAW;AAAA,IACrC;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AACA,QAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF;","names":[]}
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
import {
|
|
2
2
|
JwtBearerAuth
|
|
3
|
-
} from "./chunk-
|
|
3
|
+
} from "./chunk-YKOMKXG4.mjs";
|
|
4
4
|
import {
|
|
5
5
|
SIWEJwtBearerAuth
|
|
6
|
-
} from "./chunk-
|
|
6
|
+
} from "./chunk-2CWF7ZTL.mjs";
|
|
7
7
|
import {
|
|
8
8
|
SRPJwtBearerAuth
|
|
9
|
-
} from "./chunk-
|
|
9
|
+
} from "./chunk-J7NSK6BO.mjs";
|
|
10
10
|
import {
|
|
11
11
|
AuthType
|
|
12
12
|
} from "./chunk-CAIIVJAO.mjs";
|
|
@@ -20,17 +20,16 @@ import {
|
|
|
20
20
|
import {
|
|
21
21
|
STORAGE_URL,
|
|
22
22
|
UserStorage
|
|
23
|
-
} from "./chunk-
|
|
23
|
+
} from "./chunk-MK7ABX2V.mjs";
|
|
24
24
|
import {
|
|
25
|
-
Encryption,
|
|
26
25
|
createSHA256Hash
|
|
27
|
-
} from "./chunk-
|
|
26
|
+
} from "./chunk-COBJUBZE.mjs";
|
|
28
27
|
import {
|
|
29
28
|
Env,
|
|
30
29
|
Platform,
|
|
31
30
|
getEnvUrls,
|
|
32
31
|
getOidcClientId
|
|
33
|
-
} from "./chunk-
|
|
32
|
+
} from "./chunk-KTCSRECK.mjs";
|
|
34
33
|
import {
|
|
35
34
|
NonceRetrievalError,
|
|
36
35
|
NotFoundError,
|
|
@@ -48,7 +47,6 @@ import {
|
|
|
48
47
|
var sdk_exports = {};
|
|
49
48
|
__export(sdk_exports, {
|
|
50
49
|
AuthType: () => AuthType,
|
|
51
|
-
Encryption: () => Encryption,
|
|
52
50
|
Env: () => Env,
|
|
53
51
|
JwtBearerAuth: () => JwtBearerAuth,
|
|
54
52
|
MESSAGE_SIGNING_SNAP: () => MESSAGE_SIGNING_SNAP,
|
|
@@ -76,4 +74,4 @@ __export(sdk_exports, {
|
|
|
76
74
|
export {
|
|
77
75
|
sdk_exports
|
|
78
76
|
};
|
|
79
|
-
//# sourceMappingURL=chunk-
|
|
77
|
+
//# sourceMappingURL=chunk-7MSQV43P.mjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":"
|
|
1
|
+
{"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}
|
|
@@ -34,20 +34,20 @@ var EncryptorDecryptor = class {
|
|
|
34
34
|
_chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decrypt);
|
|
35
35
|
_chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getOrGenerateScryptKey);
|
|
36
36
|
}
|
|
37
|
-
encryptString(plaintext, password) {
|
|
37
|
+
async encryptString(plaintext, password, nativeScryptCrypto) {
|
|
38
38
|
try {
|
|
39
|
-
return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
|
|
39
|
+
return await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password, nativeScryptCrypto);
|
|
40
40
|
} catch (e) {
|
|
41
41
|
const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
|
|
42
42
|
throw new Error(`Unable to encrypt string - ${errorMessage}`);
|
|
43
43
|
}
|
|
44
44
|
}
|
|
45
|
-
decryptString(encryptedDataStr, password) {
|
|
45
|
+
async decryptString(encryptedDataStr, password, nativeScryptCrypto) {
|
|
46
46
|
try {
|
|
47
47
|
const encryptedData = JSON.parse(encryptedDataStr);
|
|
48
48
|
if (encryptedData.v === "1") {
|
|
49
49
|
if (encryptedData.t === "scrypt") {
|
|
50
|
-
return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
|
|
50
|
+
return await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password, nativeScryptCrypto);
|
|
51
51
|
}
|
|
52
52
|
}
|
|
53
53
|
throw new Error(
|
|
@@ -60,13 +60,13 @@ var EncryptorDecryptor = class {
|
|
|
60
60
|
}
|
|
61
61
|
};
|
|
62
62
|
_encryptStringV1 = new WeakSet();
|
|
63
|
-
encryptStringV1_fn = function(plaintext, password) {
|
|
64
|
-
const { key, salt } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
|
|
63
|
+
encryptStringV1_fn = async function(plaintext, password, nativeScryptCrypto) {
|
|
64
|
+
const { key, salt } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
|
|
65
65
|
N: SCRYPT_N,
|
|
66
66
|
r: SCRYPT_r,
|
|
67
67
|
p: SCRYPT_p,
|
|
68
68
|
dkLen: ALGORITHM_KEY_SIZE
|
|
69
|
-
});
|
|
69
|
+
}, _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE), nativeScryptCrypto);
|
|
70
70
|
const plaintextRaw = _utils.utf8ToBytes.call(void 0, plaintext);
|
|
71
71
|
const ciphertextAndNonceAndSalt = _utils.concatBytes.call(void 0,
|
|
72
72
|
salt,
|
|
@@ -88,7 +88,7 @@ encryptStringV1_fn = function(plaintext, password) {
|
|
|
88
88
|
return JSON.stringify(encryptedPayload);
|
|
89
89
|
};
|
|
90
90
|
_decryptStringV1 = new WeakSet();
|
|
91
|
-
decryptStringV1_fn = function(data, password) {
|
|
91
|
+
decryptStringV1_fn = async function(data, password, nativeScryptCrypto) {
|
|
92
92
|
const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;
|
|
93
93
|
const ciphertextAndNonceAndSalt = _chunkPCOIRDTOjs.base64ToByteArray.call(void 0,
|
|
94
94
|
base64CiphertextAndNonceAndSalt
|
|
@@ -98,12 +98,12 @@ decryptStringV1_fn = function(data, password) {
|
|
|
98
98
|
saltLen,
|
|
99
99
|
ciphertextAndNonceAndSalt.length
|
|
100
100
|
);
|
|
101
|
-
const { key } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
|
|
101
|
+
const { key } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
|
|
102
102
|
N: o.N,
|
|
103
103
|
r: o.r,
|
|
104
104
|
p: o.p,
|
|
105
105
|
dkLen: o.dkLen
|
|
106
|
-
}, salt);
|
|
106
|
+
}, salt, nativeScryptCrypto);
|
|
107
107
|
return _chunkPCOIRDTOjs.bytesToUtf8.call(void 0, _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
|
|
108
108
|
};
|
|
109
109
|
_encrypt = new WeakSet();
|
|
@@ -122,7 +122,7 @@ decrypt_fn = function(ciphertextAndNonce, key) {
|
|
|
122
122
|
return _aes.gcm.call(void 0, key, nonce).decrypt(ciphertext);
|
|
123
123
|
};
|
|
124
124
|
_getOrGenerateScryptKey = new WeakSet();
|
|
125
|
-
getOrGenerateScryptKey_fn = function(password, o, salt) {
|
|
125
|
+
getOrGenerateScryptKey_fn = async function(password, o, salt, nativeScryptCrypto) {
|
|
126
126
|
const hashedPassword = createSHA256Hash(password);
|
|
127
127
|
const cachedKey = salt ? _chunkUAXWZN5Jjs.getCachedKeyBySalt.call(void 0, hashedPassword, salt) : _chunkUAXWZN5Jjs.getAnyCachedKey.call(void 0, hashedPassword);
|
|
128
128
|
if (cachedKey) {
|
|
@@ -132,12 +132,24 @@ getOrGenerateScryptKey_fn = function(password, o, salt) {
|
|
|
132
132
|
};
|
|
133
133
|
}
|
|
134
134
|
const newSalt = salt ?? _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE);
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
135
|
+
let newKey;
|
|
136
|
+
if (nativeScryptCrypto) {
|
|
137
|
+
newKey = await nativeScryptCrypto(
|
|
138
|
+
password,
|
|
139
|
+
newSalt,
|
|
140
|
+
o.N,
|
|
141
|
+
o.r,
|
|
142
|
+
o.p,
|
|
143
|
+
o.dkLen
|
|
144
|
+
);
|
|
145
|
+
} else {
|
|
146
|
+
newKey = await _scrypt.scryptAsync.call(void 0, password, newSalt, {
|
|
147
|
+
N: o.N,
|
|
148
|
+
r: o.r,
|
|
149
|
+
p: o.p,
|
|
150
|
+
dkLen: o.dkLen
|
|
151
|
+
});
|
|
152
|
+
}
|
|
141
153
|
_chunkUAXWZN5Jjs.setCachedKey.call(void 0, hashedPassword, newSalt, newKey);
|
|
142
154
|
return {
|
|
143
155
|
key: newKey,
|
|
@@ -155,4 +167,4 @@ function createSHA256Hash(data) {
|
|
|
155
167
|
|
|
156
168
|
|
|
157
169
|
exports.encryption_default = encryption_default; exports.createSHA256Hash = createSHA256Hash;
|
|
158
|
-
//# sourceMappingURL=chunk-
|
|
170
|
+
//# sourceMappingURL=chunk-BKQE7DB5.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/controllers/user-storage/encryption/encryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AA8BrD,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,WAAW,KAAK;AAEtB,IAAM,WAAW;AAEjB,IAAM,WAAW;AA5CjB;AA8CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2CE,uBAAM;AA2CN,uBAAM;AAoCN;AASA;AAYA,uBAAM;AAAA;AAAA,EA9IN,MAAM,cACJ,WACA,UACA,oBACiB;AACjB,QAAI;AACF,aAAO,MAAM,sBAAK,sCAAL,WACX,WACA,UACA;AAAA,IAEJ,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,kBACA,UACA,oBACiB;AACjB,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,YAAI,cAAc,MAAM,UAAU;AAChC,iBAAO,MAAM,sBAAK,sCAAL,WACX,eACA,UACA;AAAA,QAEJ;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB;AAAA,MAC1D;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAoJF;AAlJQ;AAAA,qBAAgB,eACpB,WACA,UACA,oBACiB;AACjB,QAAM,EAAE,KAAK,KAAK,IAAI,MAAM,sBAAK,oDAAL,WAC1B,UACA;AAAA,IACE,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,OAAO;AAAA,EACT,GACA,YAAY,gBAAgB,GAC5B;AAIF,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,MACD,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,IACT;AAAA,IACA,SAAS;AAAA,EACX;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEM;AAAA,qBAAgB,eACpB,MACA,UACA,oBACiB;AACjB,QAAM,EAAE,GAAG,GAAG,iCAAiC,QAAQ,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,OAAO;AACvD,QAAM,qBAAqB,0BAA0B;AAAA,IACnD;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAGA,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAK,oDAAL,WACpB,UACA;AAAA,IACE,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,GACA,MACA;AAIF,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,oBAAoB;AAG9C,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,oBAAoB;AAC9D,QAAM,aAAa,mBAAmB;AAAA,IACpC;AAAA,IACA,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAEM;AAAA,4BAAuB,eAC3B,UACA,GACA,MACA,oBACA;AACA,QAAM,iBAAiB,iBAAiB,QAAQ;AAChD,QAAM,YAAY,OACd,mBAAmB,gBAAgB,IAAI,IACvC,gBAAgB,cAAc;AAElC,MAAI,WAAW;AACb,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,MACf,MAAM,UAAU;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,YAAY,gBAAgB;AAEpD,MAAI;AAEJ,MAAI,oBAAoB;AACtB,aAAS,MAAM;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF,OAAO;AACL,aAAS,MAAM,YAAY,UAAU,SAAS;AAAA,MAC5C,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,OAAO,EAAE;AAAA,IACX,CAAC;AAAA,EACH;AACA,eAAa,gBAAgB,SAAS,MAAM;AAE5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAGF,IAAM,aAAa,IAAI,mBAAmB;AAC1C,IAAO,qBAAQ;AAOR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B","sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport type { NativeScrypt } from '../UserStorageController';\nimport { getAnyCachedKey, getCachedKeyBySalt, setCachedKey } from './cache';\nimport { base64ToByteArray, byteArrayToBase64, bytesToUtf8 } from './utils';\n\nexport type EncryptedPayload = {\n // version\n v: '1';\n\n // key derivation function algorithm - scrypt\n t: 'scrypt';\n\n // data\n d: string;\n\n // encryption options - scrypt\n o: {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n N: number;\n r: number;\n p: number;\n dkLen: number;\n };\n\n // Salt options\n saltLen: number;\n};\n\n// Nonce/Key Sizes\nconst ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nconst ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nconst SCRYPT_SALT_SIZE = 16; // 16 bytes\nconst SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_r = 8; // Block size parameter\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_p = 1; // Parallelization parameter\n\nclass EncryptorDecryptor {\n async encryptString(\n plaintext: string,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n try {\n return await this.#encryptStringV1(\n plaintext,\n password,\n nativeScryptCrypto,\n );\n } catch (e) {\n const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n throw new Error(`Unable to encrypt string - ${errorMessage}`);\n }\n }\n\n async decryptString(\n encryptedDataStr: string,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n try {\n const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n if (encryptedData.v === '1') {\n if (encryptedData.t === 'scrypt') {\n return await this.#decryptStringV1(\n encryptedData,\n password,\n nativeScryptCrypto,\n );\n }\n }\n throw new Error(\n `Unsupported encrypted data payload - ${encryptedDataStr}`,\n );\n } catch (e) {\n const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n throw new Error(`Unable to decrypt string - ${errorMessage}`);\n }\n }\n\n async #encryptStringV1(\n plaintext: string,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n const { key, salt } = await this.#getOrGenerateScryptKey(\n password,\n {\n N: SCRYPT_N,\n r: SCRYPT_r,\n p: SCRYPT_p,\n dkLen: ALGORITHM_KEY_SIZE,\n },\n randomBytes(SCRYPT_SALT_SIZE),\n nativeScryptCrypto,\n );\n\n // Encrypt and prepend salt.\n const plaintextRaw = utf8ToBytes(plaintext);\n const ciphertextAndNonceAndSalt = concatBytes(\n salt,\n this.#encrypt(plaintextRaw, key),\n );\n\n // Convert to Base64\n const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n const encryptedPayload: EncryptedPayload = {\n v: '1',\n t: 'scrypt',\n d: encryptedData,\n o: {\n N: SCRYPT_N,\n r: SCRYPT_r,\n p: SCRYPT_p,\n dkLen: ALGORITHM_KEY_SIZE,\n },\n saltLen: SCRYPT_SALT_SIZE,\n };\n\n return JSON.stringify(encryptedPayload);\n }\n\n async #decryptStringV1(\n data: EncryptedPayload,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n // Decode the base64.\n const ciphertextAndNonceAndSalt = base64ToByteArray(\n base64CiphertextAndNonceAndSalt,\n );\n\n // Create buffers of salt and ciphertextAndNonce.\n const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n saltLen,\n ciphertextAndNonceAndSalt.length,\n );\n\n // Derive the key.\n const { key } = await this.#getOrGenerateScryptKey(\n password,\n {\n N: o.N,\n r: o.r,\n p: o.p,\n dkLen: o.dkLen,\n },\n salt,\n nativeScryptCrypto,\n );\n\n // Decrypt and return result.\n return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n }\n\n #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n // Encrypt and prepend nonce.\n const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n return concatBytes(nonce, ciphertext);\n }\n\n #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n // Create buffers of nonce and ciphertext.\n const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n const ciphertext = ciphertextAndNonce.slice(\n ALGORITHM_NONCE_SIZE,\n ciphertextAndNonce.length,\n );\n\n // Decrypt and return result.\n return gcm(key, nonce).decrypt(ciphertext);\n }\n\n async #getOrGenerateScryptKey(\n password: string,\n o: EncryptedPayload['o'],\n salt?: Uint8Array,\n nativeScryptCrypto?: NativeScrypt,\n ) {\n const hashedPassword = createSHA256Hash(password);\n const cachedKey = salt\n ? getCachedKeyBySalt(hashedPassword, salt)\n : getAnyCachedKey(hashedPassword);\n\n if (cachedKey) {\n return {\n key: cachedKey.key,\n salt: cachedKey.salt,\n };\n }\n\n const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);\n\n let newKey: Uint8Array;\n\n if (nativeScryptCrypto) {\n newKey = await nativeScryptCrypto(\n password,\n newSalt,\n o.N,\n o.r,\n o.p,\n o.dkLen,\n );\n } else {\n newKey = await scryptAsync(password, newSalt, {\n N: o.N,\n r: o.r,\n p: o.p,\n dkLen: o.dkLen,\n });\n }\n setCachedKey(hashedPassword, newSalt, newKey);\n\n return {\n key: newKey,\n salt: newSalt,\n };\n }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n const hashedData = sha256(data);\n return bytesToHex(hashedData);\n}\n"]}
|