@metamask/profile-sync-controller 0.2.1 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (189) hide show
  1. package/CHANGELOG.md +42 -1
  2. package/auth/mocks/package.json +9 -0
  3. package/auth/package.json +9 -0
  4. package/dist/{chunk-JENTMRXO.js → chunk-246Z6L5V.js} +245 -16
  5. package/dist/chunk-246Z6L5V.js.map +1 -0
  6. package/dist/chunk-2677XY6G.mjs +107 -0
  7. package/dist/chunk-2677XY6G.mjs.map +1 -0
  8. package/dist/{chunk-BDO3VJEU.mjs → chunk-2CWF7ZTL.mjs} +2 -2
  9. package/dist/{chunk-ILIZJQ6X.mjs → chunk-2VEMA6OE.mjs} +11 -4
  10. package/dist/chunk-2VEMA6OE.mjs.map +1 -0
  11. package/dist/chunk-4LMFZDL4.js +114 -0
  12. package/dist/chunk-4LMFZDL4.js.map +1 -0
  13. package/dist/{chunk-VD2IGTS3.js → chunk-4ZGRRVMI.js} +5 -5
  14. package/dist/{chunk-SLHAVOTE.js → chunk-5MQUI24U.js} +13 -6
  15. package/dist/chunk-5MQUI24U.js.map +1 -0
  16. package/dist/chunk-6DAK2U35.mjs +11 -0
  17. package/dist/chunk-6DAK2U35.mjs.map +1 -0
  18. package/dist/{chunk-FU7PSGFP.mjs → chunk-76NMME23.mjs} +51 -9
  19. package/dist/chunk-76NMME23.mjs.map +1 -0
  20. package/dist/{chunk-7KMONAQI.mjs → chunk-7MSQV43P.mjs} +7 -9
  21. package/dist/{chunk-7KMONAQI.mjs.map → chunk-7MSQV43P.mjs.map} +1 -1
  22. package/dist/{chunk-T3FNDVE3.js → chunk-BKQE7DB5.js} +30 -18
  23. package/dist/chunk-BKQE7DB5.js.map +1 -0
  24. package/dist/chunk-CHUZGCDV.js +107 -0
  25. package/dist/chunk-CHUZGCDV.js.map +1 -0
  26. package/dist/{chunk-K5UKU454.mjs → chunk-COBJUBZE.mjs} +31 -19
  27. package/dist/chunk-COBJUBZE.mjs.map +1 -0
  28. package/dist/{chunk-WWQ65CZY.mjs → chunk-D4SNJOID.mjs} +2 -2
  29. package/dist/chunk-D4SNJOID.mjs.map +1 -0
  30. package/dist/{chunk-SMKTWM6I.js → chunk-DF24ZX4H.js} +2 -3
  31. package/dist/chunk-DF24ZX4H.js.map +1 -0
  32. package/dist/chunk-EHZFPUJH.mjs +53 -0
  33. package/dist/chunk-EHZFPUJH.mjs.map +1 -0
  34. package/dist/{chunk-KW3X4TT5.js → chunk-F6BAOSH2.js} +6 -6
  35. package/dist/chunk-F6BAOSH2.js.map +1 -0
  36. package/dist/chunk-GQXYWBFK.js +28 -0
  37. package/dist/chunk-GQXYWBFK.js.map +1 -0
  38. package/dist/{chunk-DRD22DR5.mjs → chunk-J7NSK6BO.mjs} +2 -2
  39. package/dist/chunk-JAQ5TPSZ.js +53 -0
  40. package/dist/chunk-JAQ5TPSZ.js.map +1 -0
  41. package/dist/{chunk-5TOWF6UW.mjs → chunk-KHASG4H3.mjs} +2 -2
  42. package/dist/{chunk-G4NU4KP7.js → chunk-KIVBL6OM.js} +6 -6
  43. package/dist/{chunk-FQ5SDMRE.mjs → chunk-KTCSRECK.mjs} +2 -3
  44. package/dist/{chunk-FQ5SDMRE.mjs.map → chunk-KTCSRECK.mjs.map} +1 -1
  45. package/dist/{chunk-7SW3CC66.mjs → chunk-LGXQBALM.mjs} +2 -2
  46. package/dist/{chunk-5C53GKTU.js.map → chunk-LGXQBALM.mjs.map} +1 -1
  47. package/dist/{chunk-BOET676P.js → chunk-LLG4D2SC.js} +8 -8
  48. package/dist/{chunk-NPH5AHLH.mjs → chunk-MK7ABX2V.mjs} +54 -6
  49. package/dist/chunk-MK7ABX2V.mjs.map +1 -0
  50. package/dist/{chunk-AK7OTIWA.js → chunk-NIUQ34PY.js} +3 -3
  51. package/dist/{chunk-MNVUKRZC.js → chunk-PRYLTXW4.js} +15 -9
  52. package/dist/chunk-PRYLTXW4.js.map +1 -0
  53. package/dist/{chunk-XSSIP3PJ.js → chunk-Q5KTSMRE.js} +8 -8
  54. package/dist/{chunk-QE5X2BT3.mjs → chunk-SZ6WMC6C.mjs} +242 -13
  55. package/dist/chunk-SZ6WMC6C.mjs.map +1 -0
  56. package/dist/{chunk-PSR2V3R4.js → chunk-T2YURW25.js} +17 -19
  57. package/dist/chunk-T2YURW25.js.map +1 -0
  58. package/dist/{chunk-CJLDMVV3.mjs → chunk-UHP2Y32K.mjs} +9 -3
  59. package/dist/chunk-UHP2Y32K.mjs.map +1 -0
  60. package/dist/chunk-UHX7HJAI.js +11 -0
  61. package/dist/chunk-UHX7HJAI.js.map +1 -0
  62. package/dist/{chunk-FUPEFLXB.js → chunk-UIRAMHNM.js} +60 -12
  63. package/dist/chunk-UIRAMHNM.js.map +1 -0
  64. package/dist/{chunk-VYZPOR47.mjs → chunk-YKOMKXG4.mjs} +4 -4
  65. package/dist/{chunk-WB6MUIML.mjs → chunk-YLURF2PF.mjs} +2 -2
  66. package/dist/chunk-ZUPTMFEA.mjs +28 -0
  67. package/dist/chunk-ZUPTMFEA.mjs.map +1 -0
  68. package/dist/{chunk-5C53GKTU.js → chunk-ZX2KHPXG.js} +5 -5
  69. package/dist/chunk-ZX2KHPXG.js.map +1 -0
  70. package/dist/controllers/authentication/AuthenticationController.js +4 -21
  71. package/dist/controllers/authentication/AuthenticationController.mjs +3 -20
  72. package/dist/controllers/authentication/index.js +7 -22
  73. package/dist/controllers/authentication/index.mjs +6 -21
  74. package/dist/controllers/authentication/services.js +3 -20
  75. package/dist/controllers/authentication/services.mjs +2 -19
  76. package/dist/controllers/index.js +13 -23
  77. package/dist/controllers/index.mjs +12 -22
  78. package/dist/controllers/user-storage/UserStorageController.js +9 -19
  79. package/dist/controllers/user-storage/UserStorageController.mjs +8 -18
  80. package/dist/controllers/user-storage/accounts/constants.js +12 -0
  81. package/dist/controllers/user-storage/accounts/constants.js.map +1 -0
  82. package/dist/controllers/user-storage/accounts/constants.mjs +12 -0
  83. package/dist/controllers/user-storage/accounts/constants.mjs.map +1 -0
  84. package/dist/controllers/user-storage/accounts/user-storage.js +11 -0
  85. package/dist/controllers/user-storage/accounts/user-storage.js.map +1 -0
  86. package/dist/controllers/user-storage/accounts/user-storage.mjs +11 -0
  87. package/dist/controllers/user-storage/accounts/user-storage.mjs.map +1 -0
  88. package/dist/controllers/user-storage/encryption/encryption.js +2 -2
  89. package/dist/controllers/user-storage/encryption/encryption.mjs +1 -1
  90. package/dist/controllers/user-storage/encryption/index.js +3 -3
  91. package/dist/controllers/user-storage/encryption/index.mjs +2 -2
  92. package/dist/controllers/user-storage/index.js +15 -23
  93. package/dist/controllers/user-storage/index.mjs +12 -20
  94. package/dist/controllers/user-storage/schema.js +6 -4
  95. package/dist/controllers/user-storage/schema.mjs +7 -5
  96. package/dist/controllers/user-storage/services.js +8 -18
  97. package/dist/controllers/user-storage/services.mjs +7 -17
  98. package/dist/index.js +20 -18
  99. package/dist/index.mjs +19 -17
  100. package/dist/sdk/authentication-jwt-bearer/flow-siwe.js +4 -4
  101. package/dist/sdk/authentication-jwt-bearer/flow-siwe.mjs +3 -3
  102. package/dist/sdk/authentication-jwt-bearer/flow-srp.js +4 -4
  103. package/dist/sdk/authentication-jwt-bearer/flow-srp.mjs +3 -3
  104. package/dist/sdk/authentication-jwt-bearer/services.js +3 -3
  105. package/dist/sdk/authentication-jwt-bearer/services.mjs +2 -2
  106. package/dist/sdk/authentication.js +6 -6
  107. package/dist/sdk/authentication.mjs +5 -5
  108. package/dist/sdk/encryption.js +5 -3
  109. package/dist/sdk/encryption.mjs +6 -4
  110. package/dist/sdk/env.js +2 -2
  111. package/dist/sdk/env.mjs +1 -1
  112. package/dist/sdk/index.js +14 -16
  113. package/dist/sdk/index.mjs +13 -15
  114. package/dist/sdk/user-storage.js +7 -7
  115. package/dist/sdk/user-storage.mjs +6 -6
  116. package/dist/tsconfig.build.tsbuildinfo +1 -1
  117. package/dist/types/controllers/authentication/AuthenticationController.d.ts +6 -3
  118. package/dist/types/controllers/authentication/AuthenticationController.d.ts.map +1 -1
  119. package/dist/types/controllers/authentication/__fixtures__/mockResponses.d.ts +1 -1
  120. package/dist/types/controllers/authentication/__fixtures__/mockResponses.d.ts.map +1 -1
  121. package/dist/types/controllers/authentication/index.d.ts +2 -0
  122. package/dist/types/controllers/authentication/index.d.ts.map +1 -1
  123. package/dist/types/controllers/user-storage/UserStorageController.d.ts +52 -11
  124. package/dist/types/controllers/user-storage/UserStorageController.d.ts.map +1 -1
  125. package/dist/types/controllers/user-storage/__fixtures__/mockAccounts.d.ts +63 -0
  126. package/dist/types/controllers/user-storage/__fixtures__/mockAccounts.d.ts.map +1 -0
  127. package/dist/types/controllers/user-storage/__fixtures__/mockResponses.d.ts +11 -5
  128. package/dist/types/controllers/user-storage/__fixtures__/mockResponses.d.ts.map +1 -1
  129. package/dist/types/controllers/user-storage/__fixtures__/mockServices.d.ts +4 -2
  130. package/dist/types/controllers/user-storage/__fixtures__/mockServices.d.ts.map +1 -1
  131. package/dist/types/controllers/user-storage/__fixtures__/mockStorage.d.ts +1 -1
  132. package/dist/types/controllers/user-storage/__fixtures__/mockStorage.d.ts.map +1 -1
  133. package/dist/types/controllers/user-storage/accounts/constants.d.ts +4 -0
  134. package/dist/types/controllers/user-storage/accounts/constants.d.ts.map +1 -0
  135. package/dist/types/controllers/user-storage/accounts/user-storage.d.ts +32 -0
  136. package/dist/types/controllers/user-storage/accounts/user-storage.d.ts.map +1 -0
  137. package/dist/types/controllers/user-storage/encryption/encryption.d.ts +3 -2
  138. package/dist/types/controllers/user-storage/encryption/encryption.d.ts.map +1 -1
  139. package/dist/types/controllers/user-storage/index.d.ts +2 -0
  140. package/dist/types/controllers/user-storage/index.d.ts.map +1 -1
  141. package/dist/types/controllers/user-storage/schema.d.ts +13 -6
  142. package/dist/types/controllers/user-storage/schema.d.ts.map +1 -1
  143. package/dist/types/controllers/user-storage/services.d.ts +23 -4
  144. package/dist/types/controllers/user-storage/services.d.ts.map +1 -1
  145. package/dist/types/sdk/__fixtures__/mock-userstorage.d.ts +5 -4
  146. package/dist/types/sdk/__fixtures__/mock-userstorage.d.ts.map +1 -1
  147. package/dist/types/sdk/encryption.d.ts +3 -19
  148. package/dist/types/sdk/encryption.d.ts.map +1 -1
  149. package/dist/types/sdk/user-storage.d.ts +4 -3
  150. package/dist/types/sdk/user-storage.d.ts.map +1 -1
  151. package/package.json +37 -6
  152. package/user-storage/mocks/package.json +9 -0
  153. package/user-storage/package.json +9 -0
  154. package/dist/chunk-3TE6M5TV.js +0 -72
  155. package/dist/chunk-3TE6M5TV.js.map +0 -1
  156. package/dist/chunk-4DQF2YNS.js +0 -78
  157. package/dist/chunk-4DQF2YNS.js.map +0 -1
  158. package/dist/chunk-7SW3CC66.mjs.map +0 -1
  159. package/dist/chunk-B5DBQDB3.mjs +0 -140
  160. package/dist/chunk-B5DBQDB3.mjs.map +0 -1
  161. package/dist/chunk-CJLDMVV3.mjs.map +0 -1
  162. package/dist/chunk-FU7PSGFP.mjs.map +0 -1
  163. package/dist/chunk-FUPEFLXB.js.map +0 -1
  164. package/dist/chunk-ILIZJQ6X.mjs.map +0 -1
  165. package/dist/chunk-JENTMRXO.js.map +0 -1
  166. package/dist/chunk-K5UKU454.mjs.map +0 -1
  167. package/dist/chunk-KW3X4TT5.js.map +0 -1
  168. package/dist/chunk-MNVUKRZC.js.map +0 -1
  169. package/dist/chunk-NPH5AHLH.mjs.map +0 -1
  170. package/dist/chunk-P4DUDLMY.js +0 -140
  171. package/dist/chunk-P4DUDLMY.js.map +0 -1
  172. package/dist/chunk-PSR2V3R4.js.map +0 -1
  173. package/dist/chunk-QE5X2BT3.mjs.map +0 -1
  174. package/dist/chunk-SLHAVOTE.js.map +0 -1
  175. package/dist/chunk-SMKTWM6I.js.map +0 -1
  176. package/dist/chunk-T3FNDVE3.js.map +0 -1
  177. package/dist/chunk-WWQ65CZY.mjs.map +0 -1
  178. package/dist/chunk-XMYWJQNH.mjs +0 -78
  179. package/dist/chunk-XMYWJQNH.mjs.map +0 -1
  180. /package/dist/{chunk-BDO3VJEU.mjs.map → chunk-2CWF7ZTL.mjs.map} +0 -0
  181. /package/dist/{chunk-VD2IGTS3.js.map → chunk-4ZGRRVMI.js.map} +0 -0
  182. /package/dist/{chunk-DRD22DR5.mjs.map → chunk-J7NSK6BO.mjs.map} +0 -0
  183. /package/dist/{chunk-5TOWF6UW.mjs.map → chunk-KHASG4H3.mjs.map} +0 -0
  184. /package/dist/{chunk-G4NU4KP7.js.map → chunk-KIVBL6OM.js.map} +0 -0
  185. /package/dist/{chunk-BOET676P.js.map → chunk-LLG4D2SC.js.map} +0 -0
  186. /package/dist/{chunk-AK7OTIWA.js.map → chunk-NIUQ34PY.js.map} +0 -0
  187. /package/dist/{chunk-XSSIP3PJ.js.map → chunk-Q5KTSMRE.js.map} +0 -0
  188. /package/dist/{chunk-VYZPOR47.mjs.map → chunk-YKOMKXG4.mjs.map} +0 -0
  189. /package/dist/{chunk-WB6MUIML.mjs.map → chunk-YLURF2PF.mjs.map} +0 -0
@@ -1,10 +1,12 @@
1
1
  import {
2
2
  createSHA256Hash
3
- } from "./chunk-K5UKU454.mjs";
3
+ } from "./chunk-COBJUBZE.mjs";
4
4
 
5
5
  // src/controllers/user-storage/schema.ts
6
+ var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
6
7
  var USER_STORAGE_SCHEMA = {
7
- notifications: ["notificationSettings"]
8
+ notifications: ["notificationSettings"],
9
+ accounts: [ALLOW_ARBITRARY_KEYS]
8
10
  };
9
11
  var getFeatureAndKeyFromPath = (path) => {
10
12
  const pathRegex = /^\w+\.\w+$/u;
@@ -18,7 +20,7 @@ var getFeatureAndKeyFromPath = (path) => {
18
20
  throw new Error(`user-storage - invalid feature provided: ${feature}`);
19
21
  }
20
22
  const validFeature = USER_STORAGE_SCHEMA[feature];
21
- if (!validFeature.includes(key)) {
23
+ if (!validFeature.includes(key) && !validFeature.includes(ALLOW_ARBITRARY_KEYS)) {
22
24
  const validKeys = USER_STORAGE_SCHEMA[feature].join(", ");
23
25
  throw new Error(
24
26
  `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`
@@ -26,6 +28,10 @@ var getFeatureAndKeyFromPath = (path) => {
26
28
  }
27
29
  return { feature, key };
28
30
  };
31
+ var isPathWithFeatureAndKey = (path) => {
32
+ const pathRegex = /^\w+\.\w+$/u;
33
+ return pathRegex.test(path);
34
+ };
29
35
  function createEntryPath(path, storageKey) {
30
36
  const { feature, key } = getFeatureAndKeyFromPath(path);
31
37
  const hashedKey = createSHA256Hash(key + storageKey);
@@ -35,6 +41,7 @@ function createEntryPath(path, storageKey) {
35
41
  export {
36
42
  USER_STORAGE_SCHEMA,
37
43
  getFeatureAndKeyFromPath,
44
+ isPathWithFeatureAndKey,
38
45
  createEntryPath
39
46
  };
40
- //# sourceMappingURL=chunk-ILIZJQ6X.mjs.map
47
+ //# sourceMappingURL=chunk-2VEMA6OE.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"sourcesContent":["import { createSHA256Hash } from './encryption';\n\n/**\n * The User Storage Endpoint requires a feature name and a namespace key.\n * Developers can provide additional features and keys by extending these types below.\n *\n * Adding ALLOW_ARBITRARY_KEYS as the first key in the array allows for any key to be used for this feature.\n * This can be useful for features where keys are not deterministic (eg. accounts addresses).\n */\nconst ALLOW_ARBITRARY_KEYS = 'ALLOW_ARBITRARY_KEYS' as const;\n\nexport const USER_STORAGE_SCHEMA = {\n notifications: ['notificationSettings'],\n accounts: [ALLOW_ARBITRARY_KEYS],\n} as const;\n\ntype UserStorageSchema = typeof USER_STORAGE_SCHEMA;\n\ntype UserStorageFeatures = keyof UserStorageSchema;\ntype UserStorageFeatureKeys<Feature extends UserStorageFeatures> =\n UserStorageSchema[Feature][0] extends typeof ALLOW_ARBITRARY_KEYS\n ? string\n : UserStorageSchema[Feature][number];\n\ntype UserStorageFeatureAndKey = {\n feature: UserStorageFeatures;\n key: UserStorageFeatureKeys<UserStorageFeatures>;\n};\n\nexport type UserStoragePathWithFeatureOnly = keyof UserStorageSchema;\nexport type UserStoragePathWithFeatureAndKey = {\n [K in UserStorageFeatures]: `${K}.${UserStorageFeatureKeys<K>}`;\n}[UserStoragePathWithFeatureOnly];\n\nexport const getFeatureAndKeyFromPath = (\n path: UserStoragePathWithFeatureAndKey,\n): UserStorageFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n if (!pathRegex.test(path)) {\n throw new Error(\n `user-storage - path is not in the correct format. Correct format: 'feature.key'`,\n );\n }\n\n const [feature, key] = path.split('.') as [\n UserStorageFeatures,\n UserStorageFeatureKeys<UserStorageFeatures>,\n ];\n\n if (!(feature in USER_STORAGE_SCHEMA)) {\n throw new Error(`user-storage - invalid feature provided: ${feature}`);\n }\n\n const validFeature = USER_STORAGE_SCHEMA[feature] as readonly string[];\n\n if (\n !validFeature.includes(key) &&\n !validFeature.includes(ALLOW_ARBITRARY_KEYS)\n ) {\n const validKeys = USER_STORAGE_SCHEMA[feature].join(', ');\n\n throw new Error(\n `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`,\n );\n }\n\n return { feature, key };\n};\n\nexport const isPathWithFeatureAndKey = (\n path: string,\n): path is UserStoragePathWithFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n return pathRegex.test(path);\n};\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param path - string in the form of `${feature}.${key}` that matches schema\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n path: UserStoragePathWithFeatureAndKey,\n storageKey: string,\n): string {\n const { feature, key } = getFeatureAndKeyFromPath(path);\n const hashedKey = createSHA256Hash(key + storageKey);\n\n return `/${feature}/${hashedKey}`;\n}\n"],"mappings":";;;;;AASA,IAAM,uBAAuB;AAEtB,IAAM,sBAAsB;AAAA,EACjC,eAAe,CAAC,sBAAsB;AAAA,EACtC,UAAU,CAAC,oBAAoB;AACjC;AAoBO,IAAM,2BAA2B,CACtC,SAC6B;AAC7B,QAAM,YAAY;AAElB,MAAI,CAAC,UAAU,KAAK,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG;AAKrC,MAAI,EAAE,WAAW,sBAAsB;AACrC,UAAM,IAAI,MAAM,4CAA4C,OAAO,EAAE;AAAA,EACvE;AAEA,QAAM,eAAe,oBAAoB,OAAO;AAEhD,MACE,CAAC,aAAa,SAAS,GAAG,KAC1B,CAAC,aAAa,SAAS,oBAAoB,GAC3C;AACA,UAAM,YAAY,oBAAoB,OAAO,EAAE,KAAK,IAAI;AAExD,UAAM,IAAI;AAAA,MACR,yDAAyD,GAAG,iBAAiB,SAAS;AAAA,IACxF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,IAAI;AACxB;AAEO,IAAM,0BAA0B,CACrC,SAC6C;AAC7C,QAAM,YAAY;AAElB,SAAO,UAAU,KAAK,IAAI;AAC5B;AAWO,SAAS,gBACd,MACA,YACQ;AACR,QAAM,EAAE,SAAS,IAAI,IAAI,yBAAyB,IAAI;AACtD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AAEnD,SAAO,IAAI,OAAO,IAAI,SAAS;AACjC;","names":[]}
@@ -0,0 +1,114 @@
1
+ "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
2
+
3
+ var _chunk5MQUI24Ujs = require('./chunk-5MQUI24U.js');
4
+
5
+
6
+ var _chunkNIUQ34PYjs = require('./chunk-NIUQ34PY.js');
7
+
8
+
9
+ var _chunkDF24ZX4Hjs = require('./chunk-DF24ZX4H.js');
10
+
11
+ // src/controllers/user-storage/services.ts
12
+ var _loglevel = require('loglevel'); var _loglevel2 = _interopRequireDefault(_loglevel);
13
+ var ENV_URLS = _chunkDF24ZX4Hjs.getEnvUrls.call(void 0, "prd" /* PRD */);
14
+ var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
15
+ var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
16
+ async function getUserStorage(opts) {
17
+ try {
18
+ const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
19
+ const encryptedPath = _chunk5MQUI24Ujs.createEntryPath.call(void 0, path, storageKey);
20
+ const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
21
+ const userStorageResponse = await fetch(url.toString(), {
22
+ headers: {
23
+ "Content-Type": "application/json",
24
+ Authorization: `Bearer ${bearerToken}`
25
+ }
26
+ });
27
+ if (userStorageResponse.status === 404) {
28
+ return null;
29
+ }
30
+ if (userStorageResponse.status !== 200) {
31
+ throw new Error("Unable to get User Storage");
32
+ }
33
+ const userStorage = await userStorageResponse.json();
34
+ const encryptedData = userStorage?.Data ?? null;
35
+ if (!encryptedData) {
36
+ return null;
37
+ }
38
+ const decryptedData = await _chunkNIUQ34PYjs.encryption_default.decryptString(
39
+ encryptedData,
40
+ opts.storageKey,
41
+ nativeScryptCrypto
42
+ );
43
+ return decryptedData;
44
+ } catch (e) {
45
+ _loglevel2.default.error("Failed to get user storage", e);
46
+ return null;
47
+ }
48
+ }
49
+ async function getUserStorageAllFeatureEntries(opts) {
50
+ try {
51
+ const { bearerToken, path, nativeScryptCrypto } = opts;
52
+ const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
53
+ const userStorageResponse = await fetch(url.toString(), {
54
+ headers: {
55
+ "Content-Type": "application/json",
56
+ Authorization: `Bearer ${bearerToken}`
57
+ }
58
+ });
59
+ if (userStorageResponse.status === 404) {
60
+ return null;
61
+ }
62
+ if (userStorageResponse.status !== 200) {
63
+ throw new Error("Unable to get User Storage");
64
+ }
65
+ const userStorage = await userStorageResponse.json();
66
+ if (!Array.isArray(userStorage)) {
67
+ return null;
68
+ }
69
+ const decryptedData = userStorage?.flatMap((entry) => {
70
+ if (!entry.Data) {
71
+ return [];
72
+ }
73
+ return _chunkNIUQ34PYjs.encryption_default.decryptString(
74
+ entry.Data,
75
+ opts.storageKey,
76
+ nativeScryptCrypto
77
+ );
78
+ });
79
+ return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
80
+ } catch (e) {
81
+ _loglevel2.default.error("Failed to get user storage", e);
82
+ return null;
83
+ }
84
+ }
85
+ async function upsertUserStorage(data, opts) {
86
+ const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
87
+ const encryptedData = await _chunkNIUQ34PYjs.encryption_default.encryptString(
88
+ data,
89
+ opts.storageKey,
90
+ nativeScryptCrypto
91
+ );
92
+ const encryptedPath = _chunk5MQUI24Ujs.createEntryPath.call(void 0, path, storageKey);
93
+ const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
94
+ const res = await fetch(url.toString(), {
95
+ method: "PUT",
96
+ headers: {
97
+ "Content-Type": "application/json",
98
+ Authorization: `Bearer ${bearerToken}`
99
+ },
100
+ body: JSON.stringify({ data: encryptedData })
101
+ });
102
+ if (!res.ok) {
103
+ throw new Error("user-storage - unable to upsert data");
104
+ }
105
+ }
106
+
107
+
108
+
109
+
110
+
111
+
112
+
113
+ exports.USER_STORAGE_API = USER_STORAGE_API; exports.USER_STORAGE_ENDPOINT = USER_STORAGE_ENDPOINT; exports.getUserStorage = getUserStorage; exports.getUserStorageAllFeatureEntries = getUserStorageAllFeatureEntries; exports.upsertUserStorage = upsertUserStorage;
114
+ //# sourceMappingURL=chunk-4LMFZDL4.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/controllers/user-storage/services.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAWhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwCxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,MAAM,mBAAW;AAAA,MACrC;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,gCACpB,MAC0B;AAC1B,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,mBAAmB,IAAI;AAClD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,IAAI,IAAI,EAAE;AAEtD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AAEjC,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,aAAa,QAAQ,CAAC,UAAU;AACpD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW;AAAA,QAChB,MAAM;AAAA,QACN,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,QAAM,gBAAgB,MAAM,mBAAW;AAAA,IACrC;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AACA,QAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF","sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk/env';\nimport encryption from './encryption';\nimport type {\n UserStoragePathWithFeatureAndKey,\n UserStoragePathWithFeatureOnly,\n} from './schema';\nimport { createEntryPath } from './schema';\nimport type { NativeScrypt } from './UserStorageController';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n bearerToken: string;\n storageKey: string;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureAndKey;\n nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureOnly;\n nativeScryptCrypto?: NativeScrypt;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n opts: UserStorageOptions,\n): Promise<string | null> {\n try {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates entry does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageResponse | null =\n await userStorageResponse.json();\n const encryptedData = userStorage?.Data ?? null;\n\n if (!encryptedData) {\n return null;\n }\n\n const decryptedData = await encryption.decryptString(\n encryptedData,\n opts.storageKey,\n nativeScryptCrypto,\n );\n\n return decryptedData;\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n try {\n const { bearerToken, path, nativeScryptCrypto } = opts;\n const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates feature does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n await userStorageResponse.json();\n\n if (!Array.isArray(userStorage)) {\n return null;\n }\n\n const decryptedData = userStorage?.flatMap((entry) => {\n if (!entry.Data) {\n return [];\n }\n\n return encryption.decryptString(\n entry.Data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n });\n\n return (await Promise.allSettled(decryptedData))\n .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n .filter((d): d is string => d !== undefined);\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n data: string,\n opts: UserStorageOptions,\n): Promise<void> {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedData = await encryption.encryptString(\n data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const res = await fetch(url.toString(), {\n method: 'PUT',\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n body: JSON.stringify({ data: encryptedData }),\n });\n\n if (!res.ok) {\n throw new Error('user-storage - unable to upsert data');\n }\n}\n"]}
@@ -2,7 +2,7 @@
2
2
 
3
3
 
4
4
 
5
- var _chunkBOET676Pjs = require('./chunk-BOET676P.js');
5
+ var _chunkLLG4D2SCjs = require('./chunk-LLG4D2SC.js');
6
6
 
7
7
 
8
8
  var _chunkRG4II6WHjs = require('./chunk-RG4II6WH.js');
@@ -100,17 +100,17 @@ getAuthSession_fn = async function() {
100
100
  _login = new WeakSet();
101
101
  login_fn = async function() {
102
102
  const address = await this.getIdentifier();
103
- const nonceRes = await _chunkBOET676Pjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
103
+ const nonceRes = await _chunkLLG4D2SCjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
104
104
  const publicKey = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
105
105
  const rawMessage = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn).call(this, nonceRes.nonce, publicKey);
106
106
  const signature = await this.signMessage(rawMessage);
107
- const authResponse = await _chunkBOET676Pjs.authenticate.call(void 0,
107
+ const authResponse = await _chunkLLG4D2SCjs.authenticate.call(void 0,
108
108
  rawMessage,
109
109
  signature,
110
110
  _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).type,
111
111
  _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env
112
112
  );
113
- const tokenResponse = await _chunkBOET676Pjs.authorizeOIDC.call(void 0,
113
+ const tokenResponse = await _chunkLLG4D2SCjs.authorizeOIDC.call(void 0,
114
114
  authResponse.token,
115
115
  _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env,
116
116
  _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).platform
@@ -130,4 +130,4 @@ createSrpLoginRawMessage_fn = function(nonce, publicKey) {
130
130
 
131
131
 
132
132
  exports.SRPJwtBearerAuth = SRPJwtBearerAuth;
133
- //# sourceMappingURL=chunk-VD2IGTS3.js.map
133
+ //# sourceMappingURL=chunk-4ZGRRVMI.js.map
@@ -1,10 +1,12 @@
1
1
  "use strict";Object.defineProperty(exports, "__esModule", {value: true});
2
2
 
3
- var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
3
+ var _chunkBKQE7DB5js = require('./chunk-BKQE7DB5.js');
4
4
 
5
5
  // src/controllers/user-storage/schema.ts
6
+ var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
6
7
  var USER_STORAGE_SCHEMA = {
7
- notifications: ["notificationSettings"]
8
+ notifications: ["notificationSettings"],
9
+ accounts: [ALLOW_ARBITRARY_KEYS]
8
10
  };
9
11
  var getFeatureAndKeyFromPath = (path) => {
10
12
  const pathRegex = /^\w+\.\w+$/u;
@@ -18,7 +20,7 @@ var getFeatureAndKeyFromPath = (path) => {
18
20
  throw new Error(`user-storage - invalid feature provided: ${feature}`);
19
21
  }
20
22
  const validFeature = USER_STORAGE_SCHEMA[feature];
21
- if (!validFeature.includes(key)) {
23
+ if (!validFeature.includes(key) && !validFeature.includes(ALLOW_ARBITRARY_KEYS)) {
22
24
  const validKeys = USER_STORAGE_SCHEMA[feature].join(", ");
23
25
  throw new Error(
24
26
  `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`
@@ -26,9 +28,13 @@ var getFeatureAndKeyFromPath = (path) => {
26
28
  }
27
29
  return { feature, key };
28
30
  };
31
+ var isPathWithFeatureAndKey = (path) => {
32
+ const pathRegex = /^\w+\.\w+$/u;
33
+ return pathRegex.test(path);
34
+ };
29
35
  function createEntryPath(path, storageKey) {
30
36
  const { feature, key } = getFeatureAndKeyFromPath(path);
31
- const hashedKey = _chunkT3FNDVE3js.createSHA256Hash.call(void 0, key + storageKey);
37
+ const hashedKey = _chunkBKQE7DB5js.createSHA256Hash.call(void 0, key + storageKey);
32
38
  return `/${feature}/${hashedKey}`;
33
39
  }
34
40
 
@@ -36,5 +42,6 @@ function createEntryPath(path, storageKey) {
36
42
 
37
43
 
38
44
 
39
- exports.USER_STORAGE_SCHEMA = USER_STORAGE_SCHEMA; exports.getFeatureAndKeyFromPath = getFeatureAndKeyFromPath; exports.createEntryPath = createEntryPath;
40
- //# sourceMappingURL=chunk-SLHAVOTE.js.map
45
+
46
+ exports.USER_STORAGE_SCHEMA = USER_STORAGE_SCHEMA; exports.getFeatureAndKeyFromPath = getFeatureAndKeyFromPath; exports.isPathWithFeatureAndKey = isPathWithFeatureAndKey; exports.createEntryPath = createEntryPath;
47
+ //# sourceMappingURL=chunk-5MQUI24U.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"names":[],"mappings":";;;;;AASA,IAAM,uBAAuB;AAEtB,IAAM,sBAAsB;AAAA,EACjC,eAAe,CAAC,sBAAsB;AAAA,EACtC,UAAU,CAAC,oBAAoB;AACjC;AAoBO,IAAM,2BAA2B,CACtC,SAC6B;AAC7B,QAAM,YAAY;AAElB,MAAI,CAAC,UAAU,KAAK,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG;AAKrC,MAAI,EAAE,WAAW,sBAAsB;AACrC,UAAM,IAAI,MAAM,4CAA4C,OAAO,EAAE;AAAA,EACvE;AAEA,QAAM,eAAe,oBAAoB,OAAO;AAEhD,MACE,CAAC,aAAa,SAAS,GAAG,KAC1B,CAAC,aAAa,SAAS,oBAAoB,GAC3C;AACA,UAAM,YAAY,oBAAoB,OAAO,EAAE,KAAK,IAAI;AAExD,UAAM,IAAI;AAAA,MACR,yDAAyD,GAAG,iBAAiB,SAAS;AAAA,IACxF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,IAAI;AACxB;AAEO,IAAM,0BAA0B,CACrC,SAC6C;AAC7C,QAAM,YAAY;AAElB,SAAO,UAAU,KAAK,IAAI;AAC5B;AAWO,SAAS,gBACd,MACA,YACQ;AACR,QAAM,EAAE,SAAS,IAAI,IAAI,yBAAyB,IAAI;AACtD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AAEnD,SAAO,IAAI,OAAO,IAAI,SAAS;AACjC","sourcesContent":["import { createSHA256Hash } from './encryption';\n\n/**\n * The User Storage Endpoint requires a feature name and a namespace key.\n * Developers can provide additional features and keys by extending these types below.\n *\n * Adding ALLOW_ARBITRARY_KEYS as the first key in the array allows for any key to be used for this feature.\n * This can be useful for features where keys are not deterministic (eg. accounts addresses).\n */\nconst ALLOW_ARBITRARY_KEYS = 'ALLOW_ARBITRARY_KEYS' as const;\n\nexport const USER_STORAGE_SCHEMA = {\n notifications: ['notificationSettings'],\n accounts: [ALLOW_ARBITRARY_KEYS],\n} as const;\n\ntype UserStorageSchema = typeof USER_STORAGE_SCHEMA;\n\ntype UserStorageFeatures = keyof UserStorageSchema;\ntype UserStorageFeatureKeys<Feature extends UserStorageFeatures> =\n UserStorageSchema[Feature][0] extends typeof ALLOW_ARBITRARY_KEYS\n ? string\n : UserStorageSchema[Feature][number];\n\ntype UserStorageFeatureAndKey = {\n feature: UserStorageFeatures;\n key: UserStorageFeatureKeys<UserStorageFeatures>;\n};\n\nexport type UserStoragePathWithFeatureOnly = keyof UserStorageSchema;\nexport type UserStoragePathWithFeatureAndKey = {\n [K in UserStorageFeatures]: `${K}.${UserStorageFeatureKeys<K>}`;\n}[UserStoragePathWithFeatureOnly];\n\nexport const getFeatureAndKeyFromPath = (\n path: UserStoragePathWithFeatureAndKey,\n): UserStorageFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n if (!pathRegex.test(path)) {\n throw new Error(\n `user-storage - path is not in the correct format. Correct format: 'feature.key'`,\n );\n }\n\n const [feature, key] = path.split('.') as [\n UserStorageFeatures,\n UserStorageFeatureKeys<UserStorageFeatures>,\n ];\n\n if (!(feature in USER_STORAGE_SCHEMA)) {\n throw new Error(`user-storage - invalid feature provided: ${feature}`);\n }\n\n const validFeature = USER_STORAGE_SCHEMA[feature] as readonly string[];\n\n if (\n !validFeature.includes(key) &&\n !validFeature.includes(ALLOW_ARBITRARY_KEYS)\n ) {\n const validKeys = USER_STORAGE_SCHEMA[feature].join(', ');\n\n throw new Error(\n `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`,\n );\n }\n\n return { feature, key };\n};\n\nexport const isPathWithFeatureAndKey = (\n path: string,\n): path is UserStoragePathWithFeatureAndKey => {\n const pathRegex = /^\\w+\\.\\w+$/u;\n\n return pathRegex.test(path);\n};\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param path - string in the form of `${feature}.${key}` that matches schema\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n path: UserStoragePathWithFeatureAndKey,\n storageKey: string,\n): string {\n const { feature, key } = getFeatureAndKeyFromPath(path);\n const hashedKey = createSHA256Hash(key + storageKey);\n\n return `/${feature}/${hashedKey}`;\n}\n"]}
@@ -0,0 +1,11 @@
1
+ import {
2
+ encryption_default
3
+ } from "./chunk-COBJUBZE.mjs";
4
+
5
+ // src/sdk/encryption.ts
6
+ var encryption_default2 = encryption_default;
7
+
8
+ export {
9
+ encryption_default2 as encryption_default
10
+ };
11
+ //# sourceMappingURL=chunk-6DAK2U35.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/sdk/encryption.ts"],"sourcesContent":["import encryption from '../controllers/user-storage/encryption/encryption';\n\nexport * from '../controllers/user-storage/encryption/encryption';\nexport default encryption;\n"],"mappings":";;;;;AAGA,IAAOA,sBAAQ;","names":["encryption_default"]}
@@ -1,12 +1,12 @@
1
1
  import {
2
2
  createEntryPath
3
- } from "./chunk-ILIZJQ6X.mjs";
3
+ } from "./chunk-2VEMA6OE.mjs";
4
4
  import {
5
5
  encryption_default
6
- } from "./chunk-5TOWF6UW.mjs";
6
+ } from "./chunk-KHASG4H3.mjs";
7
7
  import {
8
8
  getEnvUrls
9
- } from "./chunk-FQ5SDMRE.mjs";
9
+ } from "./chunk-KTCSRECK.mjs";
10
10
 
11
11
  // src/controllers/user-storage/services.ts
12
12
  import log from "loglevel";
@@ -15,7 +15,7 @@ var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
15
15
  var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
16
16
  async function getUserStorage(opts) {
17
17
  try {
18
- const { bearerToken, path, storageKey } = opts;
18
+ const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
19
19
  const encryptedPath = createEntryPath(path, storageKey);
20
20
  const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
21
21
  const userStorageResponse = await fetch(url.toString(), {
@@ -35,9 +35,10 @@ async function getUserStorage(opts) {
35
35
  if (!encryptedData) {
36
36
  return null;
37
37
  }
38
- const decryptedData = encryption_default.decryptString(
38
+ const decryptedData = await encryption_default.decryptString(
39
39
  encryptedData,
40
- opts.storageKey
40
+ opts.storageKey,
41
+ nativeScryptCrypto
41
42
  );
42
43
  return decryptedData;
43
44
  } catch (e) {
@@ -45,9 +46,49 @@ async function getUserStorage(opts) {
45
46
  return null;
46
47
  }
47
48
  }
49
+ async function getUserStorageAllFeatureEntries(opts) {
50
+ try {
51
+ const { bearerToken, path, nativeScryptCrypto } = opts;
52
+ const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
53
+ const userStorageResponse = await fetch(url.toString(), {
54
+ headers: {
55
+ "Content-Type": "application/json",
56
+ Authorization: `Bearer ${bearerToken}`
57
+ }
58
+ });
59
+ if (userStorageResponse.status === 404) {
60
+ return null;
61
+ }
62
+ if (userStorageResponse.status !== 200) {
63
+ throw new Error("Unable to get User Storage");
64
+ }
65
+ const userStorage = await userStorageResponse.json();
66
+ if (!Array.isArray(userStorage)) {
67
+ return null;
68
+ }
69
+ const decryptedData = userStorage?.flatMap((entry) => {
70
+ if (!entry.Data) {
71
+ return [];
72
+ }
73
+ return encryption_default.decryptString(
74
+ entry.Data,
75
+ opts.storageKey,
76
+ nativeScryptCrypto
77
+ );
78
+ });
79
+ return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
80
+ } catch (e) {
81
+ log.error("Failed to get user storage", e);
82
+ return null;
83
+ }
84
+ }
48
85
  async function upsertUserStorage(data, opts) {
49
- const { bearerToken, path, storageKey } = opts;
50
- const encryptedData = encryption_default.encryptString(data, opts.storageKey);
86
+ const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
87
+ const encryptedData = await encryption_default.encryptString(
88
+ data,
89
+ opts.storageKey,
90
+ nativeScryptCrypto
91
+ );
51
92
  const encryptedPath = createEntryPath(path, storageKey);
52
93
  const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
53
94
  const res = await fetch(url.toString(), {
@@ -67,6 +108,7 @@ export {
67
108
  USER_STORAGE_API,
68
109
  USER_STORAGE_ENDPOINT,
69
110
  getUserStorage,
111
+ getUserStorageAllFeatureEntries,
70
112
  upsertUserStorage
71
113
  };
72
- //# sourceMappingURL=chunk-FU7PSGFP.mjs.map
114
+ //# sourceMappingURL=chunk-76NMME23.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/controllers/user-storage/services.ts"],"sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk/env';\nimport encryption from './encryption';\nimport type {\n UserStoragePathWithFeatureAndKey,\n UserStoragePathWithFeatureOnly,\n} from './schema';\nimport { createEntryPath } from './schema';\nimport type { NativeScrypt } from './UserStorageController';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n HashedKey: string;\n // eslint-disable-next-line @typescript-eslint/naming-convention\n Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n bearerToken: string;\n storageKey: string;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureAndKey;\n nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n path: UserStoragePathWithFeatureOnly;\n nativeScryptCrypto?: NativeScrypt;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n opts: UserStorageOptions,\n): Promise<string | null> {\n try {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates entry does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageResponse | null =\n await userStorageResponse.json();\n const encryptedData = userStorage?.Data ?? null;\n\n if (!encryptedData) {\n return null;\n }\n\n const decryptedData = await encryption.decryptString(\n encryptedData,\n opts.storageKey,\n nativeScryptCrypto,\n );\n\n return decryptedData;\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n try {\n const { bearerToken, path, nativeScryptCrypto } = opts;\n const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n const userStorageResponse = await fetch(url.toString(), {\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n });\n\n // Acceptable error - since indicates feature does not exist.\n if (userStorageResponse.status === 404) {\n return null;\n }\n\n if (userStorageResponse.status !== 200) {\n throw new Error('Unable to get User Storage');\n }\n\n const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n await userStorageResponse.json();\n\n if (!Array.isArray(userStorage)) {\n return null;\n }\n\n const decryptedData = userStorage?.flatMap((entry) => {\n if (!entry.Data) {\n return [];\n }\n\n return encryption.decryptString(\n entry.Data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n });\n\n return (await Promise.allSettled(decryptedData))\n .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n .filter((d): d is string => d !== undefined);\n } catch (e) {\n log.error('Failed to get user storage', e);\n return null;\n }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n data: string,\n opts: UserStorageOptions,\n): Promise<void> {\n const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n const encryptedData = await encryption.encryptString(\n data,\n opts.storageKey,\n nativeScryptCrypto,\n );\n const encryptedPath = createEntryPath(path, storageKey);\n const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n const res = await fetch(url.toString(), {\n method: 'PUT',\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${bearerToken}`,\n },\n body: JSON.stringify({ data: encryptedData }),\n });\n\n if (!res.ok) {\n throw new Error('user-storage - unable to upsert data');\n }\n}\n"],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAWhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwCxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,MAAM,mBAAW;AAAA,MACrC;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,gCACpB,MAC0B;AAC1B,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,mBAAmB,IAAI;AAClD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,IAAI,IAAI,EAAE;AAEtD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AAEjC,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,aAAa,QAAQ,CAAC,UAAU;AACpD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW;AAAA,QAChB,MAAM;AAAA,QACN,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,QAAM,gBAAgB,MAAM,mBAAW;AAAA,IACrC;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AACA,QAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF;","names":[]}
@@ -1,12 +1,12 @@
1
1
  import {
2
2
  JwtBearerAuth
3
- } from "./chunk-VYZPOR47.mjs";
3
+ } from "./chunk-YKOMKXG4.mjs";
4
4
  import {
5
5
  SIWEJwtBearerAuth
6
- } from "./chunk-BDO3VJEU.mjs";
6
+ } from "./chunk-2CWF7ZTL.mjs";
7
7
  import {
8
8
  SRPJwtBearerAuth
9
- } from "./chunk-DRD22DR5.mjs";
9
+ } from "./chunk-J7NSK6BO.mjs";
10
10
  import {
11
11
  AuthType
12
12
  } from "./chunk-CAIIVJAO.mjs";
@@ -20,17 +20,16 @@ import {
20
20
  import {
21
21
  STORAGE_URL,
22
22
  UserStorage
23
- } from "./chunk-NPH5AHLH.mjs";
23
+ } from "./chunk-MK7ABX2V.mjs";
24
24
  import {
25
- Encryption,
26
25
  createSHA256Hash
27
- } from "./chunk-B5DBQDB3.mjs";
26
+ } from "./chunk-COBJUBZE.mjs";
28
27
  import {
29
28
  Env,
30
29
  Platform,
31
30
  getEnvUrls,
32
31
  getOidcClientId
33
- } from "./chunk-FQ5SDMRE.mjs";
32
+ } from "./chunk-KTCSRECK.mjs";
34
33
  import {
35
34
  NonceRetrievalError,
36
35
  NotFoundError,
@@ -48,7 +47,6 @@ import {
48
47
  var sdk_exports = {};
49
48
  __export(sdk_exports, {
50
49
  AuthType: () => AuthType,
51
- Encryption: () => Encryption,
52
50
  Env: () => Env,
53
51
  JwtBearerAuth: () => JwtBearerAuth,
54
52
  MESSAGE_SIGNING_SNAP: () => MESSAGE_SIGNING_SNAP,
@@ -76,4 +74,4 @@ __export(sdk_exports, {
76
74
  export {
77
75
  sdk_exports
78
76
  };
79
- //# sourceMappingURL=chunk-7KMONAQI.mjs.map
77
+ //# sourceMappingURL=chunk-7MSQV43P.mjs.map
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}
1
+ {"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}
@@ -34,20 +34,20 @@ var EncryptorDecryptor = class {
34
34
  _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decrypt);
35
35
  _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getOrGenerateScryptKey);
36
36
  }
37
- encryptString(plaintext, password) {
37
+ async encryptString(plaintext, password, nativeScryptCrypto) {
38
38
  try {
39
- return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
39
+ return await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password, nativeScryptCrypto);
40
40
  } catch (e) {
41
41
  const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
42
42
  throw new Error(`Unable to encrypt string - ${errorMessage}`);
43
43
  }
44
44
  }
45
- decryptString(encryptedDataStr, password) {
45
+ async decryptString(encryptedDataStr, password, nativeScryptCrypto) {
46
46
  try {
47
47
  const encryptedData = JSON.parse(encryptedDataStr);
48
48
  if (encryptedData.v === "1") {
49
49
  if (encryptedData.t === "scrypt") {
50
- return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
50
+ return await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password, nativeScryptCrypto);
51
51
  }
52
52
  }
53
53
  throw new Error(
@@ -60,13 +60,13 @@ var EncryptorDecryptor = class {
60
60
  }
61
61
  };
62
62
  _encryptStringV1 = new WeakSet();
63
- encryptStringV1_fn = function(plaintext, password) {
64
- const { key, salt } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
63
+ encryptStringV1_fn = async function(plaintext, password, nativeScryptCrypto) {
64
+ const { key, salt } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
65
65
  N: SCRYPT_N,
66
66
  r: SCRYPT_r,
67
67
  p: SCRYPT_p,
68
68
  dkLen: ALGORITHM_KEY_SIZE
69
- });
69
+ }, _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE), nativeScryptCrypto);
70
70
  const plaintextRaw = _utils.utf8ToBytes.call(void 0, plaintext);
71
71
  const ciphertextAndNonceAndSalt = _utils.concatBytes.call(void 0,
72
72
  salt,
@@ -88,7 +88,7 @@ encryptStringV1_fn = function(plaintext, password) {
88
88
  return JSON.stringify(encryptedPayload);
89
89
  };
90
90
  _decryptStringV1 = new WeakSet();
91
- decryptStringV1_fn = function(data, password) {
91
+ decryptStringV1_fn = async function(data, password, nativeScryptCrypto) {
92
92
  const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;
93
93
  const ciphertextAndNonceAndSalt = _chunkPCOIRDTOjs.base64ToByteArray.call(void 0,
94
94
  base64CiphertextAndNonceAndSalt
@@ -98,12 +98,12 @@ decryptStringV1_fn = function(data, password) {
98
98
  saltLen,
99
99
  ciphertextAndNonceAndSalt.length
100
100
  );
101
- const { key } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
101
+ const { key } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
102
102
  N: o.N,
103
103
  r: o.r,
104
104
  p: o.p,
105
105
  dkLen: o.dkLen
106
- }, salt);
106
+ }, salt, nativeScryptCrypto);
107
107
  return _chunkPCOIRDTOjs.bytesToUtf8.call(void 0, _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
108
108
  };
109
109
  _encrypt = new WeakSet();
@@ -122,7 +122,7 @@ decrypt_fn = function(ciphertextAndNonce, key) {
122
122
  return _aes.gcm.call(void 0, key, nonce).decrypt(ciphertext);
123
123
  };
124
124
  _getOrGenerateScryptKey = new WeakSet();
125
- getOrGenerateScryptKey_fn = function(password, o, salt) {
125
+ getOrGenerateScryptKey_fn = async function(password, o, salt, nativeScryptCrypto) {
126
126
  const hashedPassword = createSHA256Hash(password);
127
127
  const cachedKey = salt ? _chunkUAXWZN5Jjs.getCachedKeyBySalt.call(void 0, hashedPassword, salt) : _chunkUAXWZN5Jjs.getAnyCachedKey.call(void 0, hashedPassword);
128
128
  if (cachedKey) {
@@ -132,12 +132,24 @@ getOrGenerateScryptKey_fn = function(password, o, salt) {
132
132
  };
133
133
  }
134
134
  const newSalt = salt ?? _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE);
135
- const newKey = _scrypt.scrypt.call(void 0, password, newSalt, {
136
- N: o.N,
137
- r: o.r,
138
- p: o.p,
139
- dkLen: o.dkLen
140
- });
135
+ let newKey;
136
+ if (nativeScryptCrypto) {
137
+ newKey = await nativeScryptCrypto(
138
+ password,
139
+ newSalt,
140
+ o.N,
141
+ o.r,
142
+ o.p,
143
+ o.dkLen
144
+ );
145
+ } else {
146
+ newKey = await _scrypt.scryptAsync.call(void 0, password, newSalt, {
147
+ N: o.N,
148
+ r: o.r,
149
+ p: o.p,
150
+ dkLen: o.dkLen
151
+ });
152
+ }
141
153
  _chunkUAXWZN5Jjs.setCachedKey.call(void 0, hashedPassword, newSalt, newKey);
142
154
  return {
143
155
  key: newKey,
@@ -155,4 +167,4 @@ function createSHA256Hash(data) {
155
167
 
156
168
 
157
169
  exports.encryption_default = encryption_default; exports.createSHA256Hash = createSHA256Hash;
158
- //# sourceMappingURL=chunk-T3FNDVE3.js.map
170
+ //# sourceMappingURL=chunk-BKQE7DB5.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/controllers/user-storage/encryption/encryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AA8BrD,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,WAAW,KAAK;AAEtB,IAAM,WAAW;AAEjB,IAAM,WAAW;AA5CjB;AA8CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2CE,uBAAM;AA2CN,uBAAM;AAoCN;AASA;AAYA,uBAAM;AAAA;AAAA,EA9IN,MAAM,cACJ,WACA,UACA,oBACiB;AACjB,QAAI;AACF,aAAO,MAAM,sBAAK,sCAAL,WACX,WACA,UACA;AAAA,IAEJ,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,kBACA,UACA,oBACiB;AACjB,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,YAAI,cAAc,MAAM,UAAU;AAChC,iBAAO,MAAM,sBAAK,sCAAL,WACX,eACA,UACA;AAAA,QAEJ;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB;AAAA,MAC1D;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAoJF;AAlJQ;AAAA,qBAAgB,eACpB,WACA,UACA,oBACiB;AACjB,QAAM,EAAE,KAAK,KAAK,IAAI,MAAM,sBAAK,oDAAL,WAC1B,UACA;AAAA,IACE,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,OAAO;AAAA,EACT,GACA,YAAY,gBAAgB,GAC5B;AAIF,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,MACD,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,IACT;AAAA,IACA,SAAS;AAAA,EACX;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEM;AAAA,qBAAgB,eACpB,MACA,UACA,oBACiB;AACjB,QAAM,EAAE,GAAG,GAAG,iCAAiC,QAAQ,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,OAAO;AACvD,QAAM,qBAAqB,0BAA0B;AAAA,IACnD;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAGA,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAK,oDAAL,WACpB,UACA;AAAA,IACE,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,GACA,MACA;AAIF,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,oBAAoB;AAG9C,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,oBAAoB;AAC9D,QAAM,aAAa,mBAAmB;AAAA,IACpC;AAAA,IACA,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAEM;AAAA,4BAAuB,eAC3B,UACA,GACA,MACA,oBACA;AACA,QAAM,iBAAiB,iBAAiB,QAAQ;AAChD,QAAM,YAAY,OACd,mBAAmB,gBAAgB,IAAI,IACvC,gBAAgB,cAAc;AAElC,MAAI,WAAW;AACb,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,MACf,MAAM,UAAU;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,YAAY,gBAAgB;AAEpD,MAAI;AAEJ,MAAI,oBAAoB;AACtB,aAAS,MAAM;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF,OAAO;AACL,aAAS,MAAM,YAAY,UAAU,SAAS;AAAA,MAC5C,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,OAAO,EAAE;AAAA,IACX,CAAC;AAAA,EACH;AACA,eAAa,gBAAgB,SAAS,MAAM;AAE5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAGF,IAAM,aAAa,IAAI,mBAAmB;AAC1C,IAAO,qBAAQ;AAOR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B","sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport type { NativeScrypt } from '../UserStorageController';\nimport { getAnyCachedKey, getCachedKeyBySalt, setCachedKey } from './cache';\nimport { base64ToByteArray, byteArrayToBase64, bytesToUtf8 } from './utils';\n\nexport type EncryptedPayload = {\n // version\n v: '1';\n\n // key derivation function algorithm - scrypt\n t: 'scrypt';\n\n // data\n d: string;\n\n // encryption options - scrypt\n o: {\n // eslint-disable-next-line @typescript-eslint/naming-convention\n N: number;\n r: number;\n p: number;\n dkLen: number;\n };\n\n // Salt options\n saltLen: number;\n};\n\n// Nonce/Key Sizes\nconst ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nconst ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nconst SCRYPT_SALT_SIZE = 16; // 16 bytes\nconst SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_r = 8; // Block size parameter\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_p = 1; // Parallelization parameter\n\nclass EncryptorDecryptor {\n async encryptString(\n plaintext: string,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n try {\n return await this.#encryptStringV1(\n plaintext,\n password,\n nativeScryptCrypto,\n );\n } catch (e) {\n const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n throw new Error(`Unable to encrypt string - ${errorMessage}`);\n }\n }\n\n async decryptString(\n encryptedDataStr: string,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n try {\n const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n if (encryptedData.v === '1') {\n if (encryptedData.t === 'scrypt') {\n return await this.#decryptStringV1(\n encryptedData,\n password,\n nativeScryptCrypto,\n );\n }\n }\n throw new Error(\n `Unsupported encrypted data payload - ${encryptedDataStr}`,\n );\n } catch (e) {\n const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n throw new Error(`Unable to decrypt string - ${errorMessage}`);\n }\n }\n\n async #encryptStringV1(\n plaintext: string,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n const { key, salt } = await this.#getOrGenerateScryptKey(\n password,\n {\n N: SCRYPT_N,\n r: SCRYPT_r,\n p: SCRYPT_p,\n dkLen: ALGORITHM_KEY_SIZE,\n },\n randomBytes(SCRYPT_SALT_SIZE),\n nativeScryptCrypto,\n );\n\n // Encrypt and prepend salt.\n const plaintextRaw = utf8ToBytes(plaintext);\n const ciphertextAndNonceAndSalt = concatBytes(\n salt,\n this.#encrypt(plaintextRaw, key),\n );\n\n // Convert to Base64\n const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n const encryptedPayload: EncryptedPayload = {\n v: '1',\n t: 'scrypt',\n d: encryptedData,\n o: {\n N: SCRYPT_N,\n r: SCRYPT_r,\n p: SCRYPT_p,\n dkLen: ALGORITHM_KEY_SIZE,\n },\n saltLen: SCRYPT_SALT_SIZE,\n };\n\n return JSON.stringify(encryptedPayload);\n }\n\n async #decryptStringV1(\n data: EncryptedPayload,\n password: string,\n nativeScryptCrypto?: NativeScrypt,\n ): Promise<string> {\n const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n // Decode the base64.\n const ciphertextAndNonceAndSalt = base64ToByteArray(\n base64CiphertextAndNonceAndSalt,\n );\n\n // Create buffers of salt and ciphertextAndNonce.\n const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n saltLen,\n ciphertextAndNonceAndSalt.length,\n );\n\n // Derive the key.\n const { key } = await this.#getOrGenerateScryptKey(\n password,\n {\n N: o.N,\n r: o.r,\n p: o.p,\n dkLen: o.dkLen,\n },\n salt,\n nativeScryptCrypto,\n );\n\n // Decrypt and return result.\n return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n }\n\n #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n // Encrypt and prepend nonce.\n const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n return concatBytes(nonce, ciphertext);\n }\n\n #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n // Create buffers of nonce and ciphertext.\n const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n const ciphertext = ciphertextAndNonce.slice(\n ALGORITHM_NONCE_SIZE,\n ciphertextAndNonce.length,\n );\n\n // Decrypt and return result.\n return gcm(key, nonce).decrypt(ciphertext);\n }\n\n async #getOrGenerateScryptKey(\n password: string,\n o: EncryptedPayload['o'],\n salt?: Uint8Array,\n nativeScryptCrypto?: NativeScrypt,\n ) {\n const hashedPassword = createSHA256Hash(password);\n const cachedKey = salt\n ? getCachedKeyBySalt(hashedPassword, salt)\n : getAnyCachedKey(hashedPassword);\n\n if (cachedKey) {\n return {\n key: cachedKey.key,\n salt: cachedKey.salt,\n };\n }\n\n const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);\n\n let newKey: Uint8Array;\n\n if (nativeScryptCrypto) {\n newKey = await nativeScryptCrypto(\n password,\n newSalt,\n o.N,\n o.r,\n o.p,\n o.dkLen,\n );\n } else {\n newKey = await scryptAsync(password, newSalt, {\n N: o.N,\n r: o.r,\n p: o.p,\n dkLen: o.dkLen,\n });\n }\n setCachedKey(hashedPassword, newSalt, newKey);\n\n return {\n key: newKey,\n salt: newSalt,\n };\n }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n const hashedData = sha256(data);\n return bytesToHex(hashedData);\n}\n"]}