@metamask/profile-sync-controller 0.4.0 → 0.6.0

package/dist/chunk-J7NSK6BO.mjs

@@ -1,133 +0,0 @@
-import {
-  authenticate,
-  authorizeOIDC,
-  getNonce
-} from "./chunk-YLURF2PF.mjs";
-import {
-  getMetaMaskProviderEIP6963
-} from "./chunk-5XSXZTED.mjs";
-import {
-  MESSAGE_SIGNING_SNAP
-} from "./chunk-5EBUFNAN.mjs";
-import {
-  validateLoginResponse
-} from "./chunk-QDGLIUUS.mjs";
-import {
-  ValidationError
-} from "./chunk-TFFQFIJV.mjs";
-import {
-  __privateAdd,
-  __privateGet,
-  __privateMethod,
-  __privateSet
-} from "./chunk-U5UIDVOO.mjs";
-
-// src/sdk/authentication-jwt-bearer/flow-srp.ts
-var defaultEIP6963SigningOptions = {
-  getIdentifier: async () => {
-    const provider = await getMetaMaskProviderEIP6963();
-    if (!provider) {
-      throw new ValidationError("No MetaMask wallet connected");
-    }
-    return await MESSAGE_SIGNING_SNAP.getPublicKey(provider);
-  },
-  signMessage: async (message) => {
-    const provider = await getMetaMaskProviderEIP6963();
-    if (!provider) {
-      throw new ValidationError("No MetaMask wallet connected");
-    }
-    if (!message.startsWith("metamask:")) {
-      throw new ValidationError('message must start with "metamask:"');
-    }
-    const formattedMessage = message;
-    return await MESSAGE_SIGNING_SNAP.signMessage(provider, formattedMessage);
-  }
-};
-var _config, _options, _getAuthSession, getAuthSession_fn, _login, login_fn, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn;
-var SRPJwtBearerAuth = class {
-  constructor(config, options) {
-    // convert expiresIn from seconds to milliseconds and use 90% of expiresIn
-    __privateAdd(this, _getAuthSession);
-    __privateAdd(this, _login);
-    __privateAdd(this, _createSrpLoginRawMessage);
-    __privateAdd(this, _config, void 0);
-    __privateAdd(this, _options, void 0);
-    __privateSet(this, _config, config);
-    __privateSet(this, _options, {
-      storage: options.storage,
-      signing: options.signing ?? defaultEIP6963SigningOptions
-    });
-  }
-  async getAccessToken() {
-    const session = await __privateMethod(this, _getAuthSession, getAuthSession_fn).call(this);
-    if (session) {
-      return session.token.accessToken;
-    }
-    const loginResponse = await __privateMethod(this, _login, login_fn).call(this);
-    return loginResponse.token.accessToken;
-  }
-  async getUserProfile() {
-    const session = await __privateMethod(this, _getAuthSession, getAuthSession_fn).call(this);
-    if (session) {
-      return session.profile;
-    }
-    const loginResponse = await __privateMethod(this, _login, login_fn).call(this);
-    return loginResponse.profile;
-  }
-  async getIdentifier() {
-    return await __privateGet(this, _options).signing.getIdentifier();
-  }
-  async signMessage(message) {
-    return await __privateGet(this, _options).signing.signMessage(message);
-  }
-};
-_config = new WeakMap();
-_options = new WeakMap();
-_getAuthSession = new WeakSet();
-getAuthSession_fn = async function() {
-  const auth = await __privateGet(this, _options).storage.getLoginResponse();
-  if (!validateLoginResponse(auth)) {
-    return null;
-  }
-  const currentTime = Date.now();
-  const sessionAge = currentTime - auth.token.obtainedAt;
-  const refreshThreshold = auth.token.expiresIn * 1e3 * 0.9;
-  if (sessionAge < refreshThreshold) {
-    return auth;
-  }
-  return null;
-};
-_login = new WeakSet();
-login_fn = async function() {
-  const address = await this.getIdentifier();
-  const nonceRes = await getNonce(address, __privateGet(this, _config).env);
-  const publicKey = await __privateGet(this, _options).signing.getIdentifier();
-  const rawMessage = __privateMethod(this, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn).call(this, nonceRes.nonce, publicKey);
-  const signature = await this.signMessage(rawMessage);
-  const authResponse = await authenticate(
-    rawMessage,
-    signature,
-    __privateGet(this, _config).type,
-    __privateGet(this, _config).env
-  );
-  const tokenResponse = await authorizeOIDC(
-    authResponse.token,
-    __privateGet(this, _config).env,
-    __privateGet(this, _config).platform
-  );
-  const result = {
-    profile: authResponse.profile,
-    token: tokenResponse
-  };
-  await __privateGet(this, _options).storage.setLoginResponse(result);
-  return result;
-};
-_createSrpLoginRawMessage = new WeakSet();
-createSrpLoginRawMessage_fn = function(nonce, publicKey) {
-  return `metamask:${nonce}:${publicKey}`;
-};
-
-export {
-  SRPJwtBearerAuth
-};
-//# sourceMappingURL=chunk-J7NSK6BO.mjs.map

package/dist/chunk-J7NSK6BO.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/flow-srp.ts"],"sourcesContent":["import { ValidationError } from '../errors';\nimport { getMetaMaskProviderEIP6963 } from '../utils/eip-6963-metamask-provider';\nimport { MESSAGE_SIGNING_SNAP } from '../utils/messaging-signing-snap-requests';\nimport { validateLoginResponse } from '../utils/validate-login-response';\nimport { authenticate, authorizeOIDC, getNonce } from './services';\nimport type {\n  AuthConfig,\n  AuthSigningOptions,\n  AuthStorageOptions,\n  AuthType,\n  IBaseAuth,\n  LoginResponse,\n  UserProfile,\n} from './types';\n\n// TODO: Either fix this lint violation or explain why it's necessary to ignore.\n// eslint-disable-next-line @typescript-eslint/naming-convention\ntype JwtBearerAuth_SRP_Options = {\n  storage: AuthStorageOptions;\n  signing?: AuthSigningOptions;\n};\n\nconst defaultEIP6963SigningOptions: AuthSigningOptions = {\n  getIdentifier: async (): Promise<string> => {\n    const provider = await getMetaMaskProviderEIP6963();\n    if (!provider) {\n      throw new ValidationError('No MetaMask wallet connected');\n    }\n    return await MESSAGE_SIGNING_SNAP.getPublicKey(provider);\n  },\n  signMessage: async (message: string): Promise<string> => {\n    const provider = await getMetaMaskProviderEIP6963();\n    if (!provider) {\n      throw new ValidationError('No MetaMask wallet connected');\n    }\n    if (!message.startsWith('metamask:')) {\n      throw new ValidationError('message must start with \"metamask:\"');\n    }\n    const formattedMessage = message as `metamask:${string}`;\n    return await MESSAGE_SIGNING_SNAP.signMessage(provider, formattedMessage);\n  },\n};\n\nexport class SRPJwtBearerAuth implements IBaseAuth {\n  #config: AuthConfig;\n\n  #options: Required<JwtBearerAuth_SRP_Options>;\n\n  constructor(\n    config: AuthConfig & { type: AuthType.SRP },\n    options: JwtBearerAuth_SRP_Options,\n  ) {\n    this.#config = config;\n    this.#options = {\n      storage: options.storage,\n      signing: options.signing ?? defaultEIP6963SigningOptions,\n    };\n  }\n\n  async getAccessToken(): Promise<string> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.token.accessToken;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.token.accessToken;\n  }\n\n  async getUserProfile(): Promise<UserProfile> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.profile;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.profile;\n  }\n\n  async getIdentifier(): Promise<string> {\n    return await this.#options.signing.getIdentifier();\n  }\n\n  async signMessage(message: string): Promise<string> {\n    return await this.#options.signing.signMessage(message);\n  }\n\n  // convert expiresIn from seconds to milliseconds and use 90% of expiresIn\n  async #getAuthSession(): Promise<LoginResponse | null> {\n    const auth = await this.#options.storage.getLoginResponse();\n    if (!validateLoginResponse(auth)) {\n      return null;\n    }\n\n    const currentTime = Date.now();\n    const sessionAge = currentTime - auth.token.obtainedAt;\n    const refreshThreshold = auth.token.expiresIn * 1000 * 0.9;\n\n    if (sessionAge < refreshThreshold) {\n      return auth;\n    }\n    return null;\n  }\n\n  async #login(): Promise<LoginResponse> {\n    // Nonce\n    const address = await this.getIdentifier();\n    const nonceRes = await getNonce(address, this.#config.env);\n    const publicKey = await this.#options.signing.getIdentifier();\n    const rawMessage = this.#createSrpLoginRawMessage(\n      nonceRes.nonce,\n      publicKey,\n    );\n    const signature = await this.signMessage(rawMessage);\n\n    // Authenticate\n    const authResponse = await authenticate(\n      rawMessage,\n      signature,\n      this.#config.type,\n      this.#config.env,\n    );\n\n    // Authorize\n    const tokenResponse = await authorizeOIDC(\n      authResponse.token,\n      this.#config.env,\n      this.#config.platform,\n    );\n\n    // Save\n    const result: LoginResponse = {\n      profile: authResponse.profile,\n      token: tokenResponse,\n    };\n\n    await this.#options.storage.setLoginResponse(result);\n\n    return result;\n  }\n\n  #createSrpLoginRawMessage(\n    nonce: string,\n    publicKey: string,\n  ): `metamask:${string}:${string}` {\n    return `metamask:${nonce}:${publicKey}` as const;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,IAAM,+BAAmD;AAAA,EACvD,eAAe,YAA6B;AAC1C,UAAM,WAAW,MAAM,2BAA2B;AAClD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,gBAAgB,8BAA8B;AAAA,IAC1D;AACA,WAAO,MAAM,qBAAqB,aAAa,QAAQ;AAAA,EACzD;AAAA,EACA,aAAa,OAAO,YAAqC;AACvD,UAAM,WAAW,MAAM,2BAA2B;AAClD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,gBAAgB,8BAA8B;AAAA,IAC1D;AACA,QAAI,CAAC,QAAQ,WAAW,WAAW,GAAG;AACpC,YAAM,IAAI,gBAAgB,qCAAqC;AAAA,IACjE;AACA,UAAM,mBAAmB;AACzB,WAAO,MAAM,qBAAqB,YAAY,UAAU,gBAAgB;AAAA,EAC1E;AACF;AAzCA;AA2CO,IAAM,mBAAN,MAA4C;AAAA,EAKjD,YACE,QACA,SACA;AAqCF;AAAA,uBAAM;AAgBN,uBAAM;AAqCN;AAjGA;AAEA;AAME,uBAAK,SAAU;AACf,uBAAK,UAAW;AAAA,MACd,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ,WAAW;AAAA,IAC9B;AAAA,EACF;AAAA,EAEA,MAAM,iBAAkC;AACtC,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ,MAAM;AAAA,IACvB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,iBAAuC;AAC3C,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc;AAAA,EACvB;AAAA,EAEA,MAAM,gBAAiC;AACrC,WAAO,MAAM,mBAAK,UAAS,QAAQ,cAAc;AAAA,EACnD;AAAA,EAEA,MAAM,YAAY,SAAkC;AAClD,WAAO,MAAM,mBAAK,UAAS,QAAQ,YAAY,OAAO;AAAA,EACxD;AA8DF;AAvGE;AAEA;AA0CM;AAAA,oBAAe,iBAAkC;AACrD,QAAM,OAAO,MAAM,mBAAK,UAAS,QAAQ,iBAAiB;AAC1D,MAAI,CAAC,sBAAsB,IAAI,GAAG;AAChC,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,aAAa,cAAc,KAAK,MAAM;AAC5C,QAAM,mBAAmB,KAAK,MAAM,YAAY,MAAO;AAEvD,MAAI,aAAa,kBAAkB;AACjC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEM;AAAA,WAAM,iBAA2B;AAErC,QAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAM,WAAW,MAAM,SAAS,SAAS,mBAAK,SAAQ,GAAG;AACzD,QAAM,YAAY,MAAM,mBAAK,UAAS,QAAQ,cAAc;AAC5D,QAAM,aAAa,sBAAK,wDAAL,WACjB,SAAS,OACT;AAEF,QAAM,YAAY,MAAM,KAAK,YAAY,UAAU;AAGnD,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,aAAa;AAAA,IACb,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,SAAwB;AAAA,IAC5B,SAAS,aAAa;AAAA,IACtB,OAAO;AAAA,EACT;AAEA,QAAM,mBAAK,UAAS,QAAQ,iBAAiB,MAAM;AAEnD,SAAO;AACT;AAEA;AAAA,8BAAyB,SACvB,OACA,WACgC;AAChC,SAAO,YAAY,KAAK,IAAI,SAAS;AACvC;","names":[]}

package/dist/chunk-JAQ5TPSZ.js

@@ -1,53 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/controllers/user-storage/accounts/constants.ts
-var USER_STORAGE_VERSION = "1";
-var USER_STORAGE_VERSION_KEY = "v";
-var LOCALIZED_DEFAULT_ACCOUNT_NAMES = [
-  "Account",
-  "\u1218\u1208\u12EB",
-  "\u0627\u0644\u062D\u0633\u0627\u0628",
-  "\u041F\u0440\u043E\u0444\u0438\u043B",
-  "\u0985\u09CD\u09AF\u09BE\u0995\u09BE\u0989\u09A8\u09CD\u099F",
-  "Compte",
-  "\xDA\u010Det",
-  "Konto",
-  "\u039B\u03BF\u03B3\u03B1\u03C1\u03B9\u03B1\u03C3\u03BC\u03CC\u03C2",
-  "Cuenta",
-  "\u062D\u0633\u0627\u0628",
-  "Tili",
-  "\u0A8F\u0A95\u0ABE\u0A89\u0AA8\u0ACD\u0A9F",
-  "\u05D7\u05E9\u05D1\u05D5\u05DF",
-  "\u0905\u0915\u093E\u0909\u0902\u091F",
-  "\u0916\u093E\u0924\u093E",
-  "Ra\u010Dun",
-  "Kont",
-  "Fi\xF3k",
-  "Akun",
-  "\u30A2\u30AB\u30A6\u30F3\u30C8",
-  "\u0C96\u0CBE\u0CA4\u0CC6",
-  "\uACC4\uC815",
-  "Paskyra",
-  "Konts",
-  "\u0D05\u0D15\u0D4D\u0D15\u0D57\u0D23\u0D4D\u0D1F\u0D4D",
-  "\u0916\u093E\u0924\u0947",
-  "Akaun",
-  "Conta",
-  "Cont",
-  "\u0421\u0447\u0435\u0442",
-  "\u043D\u0430\u043B\u043E\u0433",
-  "Akaunti",
-  "\u0B95\u0BA3\u0B95\u0BCD\u0B95\u0BC1",
-  "\u0C16\u0C3E\u0C24\u0C3E",
-  "\u0E1A\u0E31\u0E0D\u0E0A\u0E35",
-  "Hesap",
-  "\u041E\u0431\u043B\u0456\u043A\u043E\u0432\u0438\u0439 \u0437\u0430\u043F\u0438\u0441",
-  "T\xE0i kho\u1EA3n",
-  "\u8D26\u6237",
-  "\u5E33\u6236"
-];
-
-
-
-
-
-exports.USER_STORAGE_VERSION = USER_STORAGE_VERSION; exports.USER_STORAGE_VERSION_KEY = USER_STORAGE_VERSION_KEY; exports.LOCALIZED_DEFAULT_ACCOUNT_NAMES = LOCALIZED_DEFAULT_ACCOUNT_NAMES;
-//# sourceMappingURL=chunk-JAQ5TPSZ.js.map

package/dist/chunk-JAQ5TPSZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/user-storage/accounts/constants.ts"],"names":[],"mappings":";AAAO,IAAM,uBAAuB;AAG7B,IAAM,2BAA0C;AAGhD,IAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF","sourcesContent":["export const USER_STORAGE_VERSION = '1';\n\n// Force cast. We don't really care about the type here since we treat it as a unique symbol\nexport const USER_STORAGE_VERSION_KEY: unique symbol = 'v' as never;\n\n// We need this in order to know if an account is a default account or not when we do account syncing\nexport const LOCALIZED_DEFAULT_ACCOUNT_NAMES = [\n  'Account',\n  'መለያ',\n  'الحساب',\n  'Профил',\n  'অ্যাকাউন্ট',\n  'Compte',\n  'Účet',\n  'Konto',\n  'Λογαριασμός',\n  'Cuenta',\n  'حساب',\n  'Tili',\n  'એકાઉન્ટ',\n  'חשבון',\n  'अकाउंट',\n  'खाता',\n  'Račun',\n  'Kont',\n  'Fiók',\n  'Akun',\n  'アカウント',\n  'ಖಾತೆ',\n  '계정',\n  'Paskyra',\n  'Konts',\n  'അക്കൗണ്ട്',\n  'खाते',\n  'Akaun',\n  'Conta',\n  'Cont',\n  'Счет',\n  'налог',\n  'Akaunti',\n  'கணக்கு',\n  'ఖాతా',\n  'บัญชี',\n  'Hesap',\n  'Обліковий запис',\n  'Tài khoản',\n  '账户',\n  '帳戶',\n] as const;\n"]}

package/dist/chunk-KHASG4H3.mjs

@@ -1,11 +0,0 @@
-import {
-  encryption_default
-} from "./chunk-COBJUBZE.mjs";
-
-// src/controllers/user-storage/encryption/index.ts
-var encryption_default2 = encryption_default;
-
-export {
-  encryption_default2 as encryption_default
-};
-//# sourceMappingURL=chunk-KHASG4H3.mjs.map

package/dist/chunk-KHASG4H3.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/user-storage/encryption/index.ts"],"sourcesContent":["import Encryption from './encryption';\n\nexport { Encryption };\nexport * from './encryption';\nexport default Encryption;\n"],"mappings":";;;;;AAIA,IAAOA,sBAAQ;","names":["encryption_default"]}

package/dist/chunk-KIVBL6OM.js

@@ -1,129 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-
-
-var _chunkLLG4D2SCjs = require('./chunk-LLG4D2SC.js');
-
-
-var _chunkDRB2MN4Tjs = require('./chunk-DRB2MN4T.js');
-
-
-var _chunkMBTBE4P5js = require('./chunk-MBTBE4P5.js');
-
-
-
-
-
-var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
-
-// src/sdk/authentication-jwt-bearer/flow-siwe.ts
-var _siwe = require('siwe');
-var _config, _options, _signer, _getAuthSession, getAuthSession_fn, _login, login_fn, _createSiWELoginRawMessage, createSiWELoginRawMessage_fn, _assertSigner, assertSigner_fn;
-var SIWEJwtBearerAuth = class {
-  constructor(config, options) {
-    // convert expiresIn from seconds to milliseconds and use 90% of expiresIn
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getAuthSession);
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _login);
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _createSiWELoginRawMessage);
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _assertSigner);
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _config, void 0);
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _options, void 0);
-    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _signer, void 0);
-    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _config, config);
-    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _options, options);
-  }
-  async getAccessToken() {
-    const session = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
-    if (session) {
-      return session.token.accessToken;
-    }
-    const loginResponse = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
-    return loginResponse.token.accessToken;
-  }
-  async getUserProfile() {
-    const session = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
-    if (session) {
-      return session.profile;
-    }
-    const loginResponse = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
-    return loginResponse.profile;
-  }
-  async getIdentifier() {
-    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
-    return _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer).address;
-  }
-  async signMessage(message) {
-    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
-    return await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer).signMessage(message);
-  }
-  prepare(signer) {
-    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _signer, signer);
-  }
-};
-_config = new WeakMap();
-_options = new WeakMap();
-_signer = new WeakMap();
-_getAuthSession = new WeakSet();
-getAuthSession_fn = async function() {
-  const auth = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).storage.getLoginResponse();
-  if (!_chunkDRB2MN4Tjs.validateLoginResponse.call(void 0, auth)) {
-    return null;
-  }
-  const currentTime = Date.now();
-  const sessionAge = currentTime - auth.token.obtainedAt;
-  const refreshThreshold = auth.token.expiresIn * 1e3 * 0.9;
-  if (sessionAge < refreshThreshold) {
-    return auth;
-  }
-  return null;
-};
-_login = new WeakSet();
-login_fn = async function() {
-  _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
-  const address = await this.getIdentifier();
-  const nonceRes = await _chunkLLG4D2SCjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
-  const rawMessage = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createSiWELoginRawMessage, createSiWELoginRawMessage_fn).call(this, nonceRes.nonce);
-  const signature = await this.signMessage(rawMessage);
-  const authResponse = await _chunkLLG4D2SCjs.authenticate.call(void 0, 
-    rawMessage,
-    signature,
-    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).type,
-    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env
-  );
-  const tokenResponse = await _chunkLLG4D2SCjs.authorizeOIDC.call(void 0, 
-    authResponse.token,
-    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env,
-    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).platform
-  );
-  const result = {
-    profile: authResponse.profile,
-    token: tokenResponse
-  };
-  await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).storage.setLoginResponse(result);
-  return result;
-};
-_createSiWELoginRawMessage = new WeakSet();
-createSiWELoginRawMessage_fn = function(nonce) {
-  _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
-  return new (0, _siwe.SiweMessage)({
-    domain: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer)?.domain,
-    address: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer)?.address,
-    uri: _chunkLLG4D2SCjs.SIWE_LOGIN_URL.call(void 0, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env),
-    version: "1",
-    chainId: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer)?.chainId,
-    nonce,
-    issuedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }).prepareMessage();
-};
-_assertSigner = new WeakSet();
-assertSigner_fn = function(signer) {
-  if (!signer) {
-    throw new (0, _chunkMBTBE4P5js.ValidationError)(`you must call 'prepare()' before logging in`);
-  }
-};
-
-
-
-exports.SIWEJwtBearerAuth = SIWEJwtBearerAuth;
-//# sourceMappingURL=chunk-KIVBL6OM.js.map

package/dist/chunk-KIVBL6OM.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/flow-siwe.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,mBAAmB;AAA5B;AAkCO,IAAM,oBAAN,MAA6C;AAAA,EAOlD,YACE,QACA,SACA;AAwCF;AAAA,uBAAM;AAgBN,uBAAM;AAmCN;AAcA;AAlHA;AAEA;AAEA;AAME,uBAAK,SAAU;AACf,uBAAK,UAAW;AAAA,EAClB;AAAA,EAEA,MAAM,iBAAkC;AACtC,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ,MAAM;AAAA,IACvB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,iBAAuC;AAC3C,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc;AAAA,EACvB;AAAA,EAEA,MAAM,gBAAiC;AACrC,0BAAK,gCAAL,WAAmB,mBAAK;AACxB,WAAO,mBAAK,SAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,YAAY,SAAkC;AAClD,0BAAK,gCAAL,WAAmB,mBAAK;AACxB,WAAO,MAAM,mBAAK,SAAQ,YAAY,OAAO;AAAA,EAC/C;AAAA,EAEA,QAAQ,QAAmC;AACzC,uBAAK,SAAU;AAAA,EACjB;AA2EF;AAzHE;AAEA;AAEA;AA6CM;AAAA,oBAAe,iBAAkC;AACrD,QAAM,OAAO,MAAM,mBAAK,UAAS,QAAQ,iBAAiB;AAC1D,MAAI,CAAC,sBAAsB,IAAI,GAAG;AAChC,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,aAAa,cAAc,KAAK,MAAM;AAC5C,QAAM,mBAAmB,KAAK,MAAM,YAAY,MAAO;AAEvD,MAAI,aAAa,kBAAkB;AACjC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEM;AAAA,WAAM,iBAA2B;AACrC,wBAAK,gCAAL,WAAmB,mBAAK;AAGxB,QAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAM,WAAW,MAAM,SAAS,SAAS,mBAAK,SAAQ,GAAG;AACzD,QAAM,aAAa,sBAAK,0DAAL,WAAgC,SAAS;AAC5D,QAAM,YAAY,MAAM,KAAK,YAAY,UAAU;AAGnD,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,aAAa;AAAA,IACb,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,SAAwB;AAAA,IAC5B,SAAS,aAAa;AAAA,IACtB,OAAO;AAAA,EACT;AAEA,QAAM,mBAAK,UAAS,QAAQ,iBAAiB,MAAM;AAEnD,SAAO;AACT;AAEA;AAAA,+BAA0B,SAAC,OAAuB;AAChD,wBAAK,gCAAL,WAAmB,mBAAK;AAExB,SAAO,IAAI,YAAY;AAAA,IACrB,QAAQ,mBAAK,UAAS;AAAA,IACtB,SAAS,mBAAK,UAAS;AAAA,IACvB,KAAK,eAAe,mBAAK,SAAQ,GAAG;AAAA,IACpC,SAAS;AAAA,IACT,SAAS,mBAAK,UAAS;AAAA,IACvB;AAAA,IACA,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC,CAAC,EAAE,eAAe;AACpB;AAEA;AAAA,kBAAa,SACX,QAC6C;AAC7C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,gBAAgB,6CAA6C;AAAA,EACzE;AACF","sourcesContent":["import { SiweMessage } from 'siwe';\n\nimport { ValidationError } from '../errors';\nimport { validateLoginResponse } from '../utils/validate-login-response';\nimport {\n  SIWE_LOGIN_URL,\n  authenticate,\n  authorizeOIDC,\n  getNonce,\n} from './services';\nimport type {\n  AuthConfig,\n  AuthStorageOptions,\n  AuthType,\n  IBaseAuth,\n  LoginResponse,\n  UserProfile,\n} from './types';\n\n// TODO: Either fix this lint violation or explain why it's necessary to ignore.\n// eslint-disable-next-line @typescript-eslint/naming-convention\ntype JwtBearerAuth_SIWE_Options = {\n  storage: AuthStorageOptions;\n};\n\n// TODO: Either fix this lint violation or explain why it's necessary to ignore.\n// eslint-disable-next-line @typescript-eslint/naming-convention\ntype JwtBearerAuth_SIWE_Signer = {\n  address: string;\n  chainId: number;\n  signMessage: (message: string) => Promise<string>;\n  domain: string;\n};\n\nexport class SIWEJwtBearerAuth implements IBaseAuth {\n  #config: AuthConfig;\n\n  #options: JwtBearerAuth_SIWE_Options;\n\n  #signer: JwtBearerAuth_SIWE_Signer | undefined;\n\n  constructor(\n    config: AuthConfig & { type: AuthType.SiWE },\n    options: JwtBearerAuth_SIWE_Options,\n  ) {\n    this.#config = config;\n    this.#options = options;\n  }\n\n  async getAccessToken(): Promise<string> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.token.accessToken;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.token.accessToken;\n  }\n\n  async getUserProfile(): Promise<UserProfile> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.profile;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.profile;\n  }\n\n  async getIdentifier(): Promise<string> {\n    this.#assertSigner(this.#signer);\n    return this.#signer.address;\n  }\n\n  async signMessage(message: string): Promise<string> {\n    this.#assertSigner(this.#signer);\n    return await this.#signer.signMessage(message);\n  }\n\n  prepare(signer: JwtBearerAuth_SIWE_Signer) {\n    this.#signer = signer;\n  }\n\n  // convert expiresIn from seconds to milliseconds and use 90% of expiresIn\n  async #getAuthSession(): Promise<LoginResponse | null> {\n    const auth = await this.#options.storage.getLoginResponse();\n    if (!validateLoginResponse(auth)) {\n      return null;\n    }\n\n    const currentTime = Date.now();\n    const sessionAge = currentTime - auth.token.obtainedAt;\n    const refreshThreshold = auth.token.expiresIn * 1000 * 0.9;\n\n    if (sessionAge < refreshThreshold) {\n      return auth;\n    }\n    return null;\n  }\n\n  async #login(): Promise<LoginResponse> {\n    this.#assertSigner(this.#signer);\n\n    // Nonce\n    const address = await this.getIdentifier();\n    const nonceRes = await getNonce(address, this.#config.env);\n    const rawMessage = this.#createSiWELoginRawMessage(nonceRes.nonce);\n    const signature = await this.signMessage(rawMessage);\n\n    // Authenticate\n    const authResponse = await authenticate(\n      rawMessage,\n      signature,\n      this.#config.type,\n      this.#config.env,\n    );\n\n    // Authorize\n    const tokenResponse = await authorizeOIDC(\n      authResponse.token,\n      this.#config.env,\n      this.#config.platform,\n    );\n\n    // Save\n    const result: LoginResponse = {\n      profile: authResponse.profile,\n      token: tokenResponse,\n    };\n\n    await this.#options.storage.setLoginResponse(result);\n\n    return result;\n  }\n\n  #createSiWELoginRawMessage(nonce: string): string {\n    this.#assertSigner(this.#signer);\n\n    return new SiweMessage({\n      domain: this.#signer?.domain,\n      address: this.#signer?.address,\n      uri: SIWE_LOGIN_URL(this.#config.env),\n      version: '1',\n      chainId: this.#signer?.chainId,\n      nonce,\n      issuedAt: new Date().toISOString(),\n    }).prepareMessage();\n  }\n\n  #assertSigner(\n    signer?: JwtBearerAuth_SIWE_Signer,\n  ): asserts signer is JwtBearerAuth_SIWE_Signer {\n    if (!signer) {\n      throw new ValidationError(`you must call 'prepare()' before logging in`);\n    }\n  }\n}\n"]}

package/dist/chunk-KTCSRECK.mjs

@@ -1,76 +0,0 @@
-// src/sdk/env.ts
-var Env = /* @__PURE__ */ ((Env2) => {
-  Env2["DEV"] = "dev";
-  Env2["UAT"] = "uat";
-  Env2["PRD"] = "prd";
-  return Env2;
-})(Env || {});
-var Platform = /* @__PURE__ */ ((Platform2) => {
-  Platform2["MOBILE"] = "mobile";
-  Platform2["EXTENSION"] = "extension";
-  Platform2["PORTFOLIO"] = "portfolio";
-  Platform2["INFURA"] = "infura";
-  return Platform2;
-})(Platform || {});
-var ENV_URLS = {
-  dev: {
-    authApiUrl: "https://authentication.dev-api.cx.metamask.io",
-    oidcApiUrl: "https://oidc.dev-api.cx.metamask.io",
-    userStorageApiUrl: "https://user-storage.dev-api.cx.metamask.io"
-  },
-  uat: {
-    authApiUrl: "https://authentication.uat-api.cx.metamask.io",
-    oidcApiUrl: "https://oidc.uat-api.cx.metamask.io",
-    userStorageApiUrl: "https://user-storage.uat-api.cx.metamask.io"
-  },
-  prd: {
-    authApiUrl: "https://authentication.api.cx.metamask.io",
-    oidcApiUrl: "https://oidc.api.cx.metamask.io",
-    userStorageApiUrl: "https://user-storage.api.cx.metamask.io"
-  }
-};
-function getEnvUrls(env) {
-  if (!ENV_URLS[env]) {
-    throw new Error("invalid environment configuration");
-  }
-  return ENV_URLS[env];
-}
-function getOidcClientId(env, platform) {
-  const clientIds = {
-    ["dev" /* DEV */]: {
-      ["portfolio" /* PORTFOLIO */]: "c7ca94a0-5d52-4635-9502-1a50a9c410cc",
-      ["mobile" /* MOBILE */]: "e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e",
-      ["extension" /* EXTENSION */]: "f1a963d7-50dc-4cb5-8d81-f1f3654f0df3",
-      ["infura" /* INFURA */]: "bd887006-0d55-481a-a395-5ff9a0dc52c9"
-    },
-    ["uat" /* UAT */]: {
-      ["portfolio" /* PORTFOLIO */]: "8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1",
-      ["mobile" /* MOBILE */]: "c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53",
-      ["extension" /* EXTENSION */]: "a9de167c-c9a6-43d8-af39-d301fd44c485",
-      ["infura" /* INFURA */]: "01929890-7002-4c97-9913-8f6c09a6d674"
-    },
-    ["prd" /* PRD */]: {
-      ["portfolio" /* PORTFOLIO */]: "35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb",
-      ["mobile" /* MOBILE */]: "75fa62a3-9ca0-4b91-9fe5-76bec86b0257",
-      ["extension" /* EXTENSION */]: "1132f10a-b4e5-4390-a5f2-d9c6022db564",
-      ["infura" /* INFURA */]: "fdde9417-e193-4d23-9943-a8346b18d097"
-    }
-  };
-  if (!clientIds[env]) {
-    throw new Error(`invalid env ${env}: cannot determine oidc client id`);
-  }
-  if (!clientIds[env][platform]) {
-    throw new Error(
-      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`
-    );
-  }
-  return clientIds[env][platform];
-}
-
-export {
-  Env,
-  Platform,
-  getEnvUrls,
-  getOidcClientId
-};
-//# sourceMappingURL=chunk-KTCSRECK.mjs.map

package/dist/chunk-KTCSRECK.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/env.ts"],"sourcesContent":["export enum Env {\n  DEV = 'dev',\n  UAT = 'uat',\n  PRD = 'prd',\n}\n\nexport enum Platform {\n  MOBILE = 'mobile',\n  EXTENSION = 'extension',\n  PORTFOLIO = 'portfolio',\n  INFURA = 'infura',\n}\n\ntype EnvUrlsEntry = {\n  authApiUrl: string;\n  oidcApiUrl: string;\n  userStorageApiUrl: string;\n};\n\nconst ENV_URLS: Record<Env, EnvUrlsEntry> = {\n  dev: {\n    authApiUrl: 'https://authentication.dev-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.dev-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.dev-api.cx.metamask.io',\n  },\n  uat: {\n    authApiUrl: 'https://authentication.uat-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.uat-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.uat-api.cx.metamask.io',\n  },\n  prd: {\n    authApiUrl: 'https://authentication.api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.api.cx.metamask.io',\n  },\n};\n\n/**\n * Validates and returns correct environment endpoints\n *\n * @param env - environment field\n * @returns the correct environment url\n * @throws on invalid environment passed\n */\nexport function getEnvUrls(env: Env): EnvUrlsEntry {\n  if (!ENV_URLS[env]) {\n    throw new Error('invalid environment configuration');\n  }\n  return ENV_URLS[env];\n}\n\n/**\n * Returns the valid OIDC Client ID (used during authorization)\n *\n * @param env - environment field\n * @param platform - platform field\n * @returns the OIDC client id for the environment\n */\nexport function getOidcClientId(env: Env, platform: Platform): string {\n  const clientIds = {\n    [Env.DEV]: {\n      [Platform.PORTFOLIO]: 'c7ca94a0-5d52-4635-9502-1a50a9c410cc',\n      [Platform.MOBILE]: 'e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e',\n      [Platform.EXTENSION]: 'f1a963d7-50dc-4cb5-8d81-f1f3654f0df3',\n      [Platform.INFURA]: 'bd887006-0d55-481a-a395-5ff9a0dc52c9',\n    },\n    [Env.UAT]: {\n      [Platform.PORTFOLIO]: '8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1',\n      [Platform.MOBILE]: 'c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53',\n      [Platform.EXTENSION]: 'a9de167c-c9a6-43d8-af39-d301fd44c485',\n      [Platform.INFURA]: '01929890-7002-4c97-9913-8f6c09a6d674',\n    },\n    [Env.PRD]: {\n      [Platform.PORTFOLIO]: '35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb',\n      [Platform.MOBILE]: '75fa62a3-9ca0-4b91-9fe5-76bec86b0257',\n      [Platform.EXTENSION]: '1132f10a-b4e5-4390-a5f2-d9c6022db564',\n      [Platform.INFURA]: 'fdde9417-e193-4d23-9943-a8346b18d097',\n    },\n  };\n\n  if (!clientIds[env]) {\n    throw new Error(`invalid env ${env}: cannot determine oidc client id`);\n  }\n\n  if (!clientIds[env][platform]) {\n    throw new Error(\n      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`,\n    );\n  }\n\n  return clientIds[env][platform];\n}\n"],"mappings":";AAAO,IAAK,MAAL,kBAAKA,SAAL;AACL,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AAHI,SAAAA;AAAA,GAAA;AAML,IAAK,WAAL,kBAAKC,cAAL;AACL,EAAAA,UAAA,YAAS;AACT,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAaZ,IAAM,WAAsC;AAAA,EAC1C,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AACF;AASO,SAAS,WAAW,KAAwB;AACjD,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,SAAS,GAAG;AACrB;AASO,SAAS,gBAAgB,KAAU,UAA4B;AACpE,QAAM,YAAY;AAAA,IAChB,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,IAAI,MAAM,eAAe,GAAG,mCAAmC;AAAA,EACvE;AAEA,MAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,eAAe,GAAG,iBAAiB,QAAQ;AAAA,IAC7C;AAAA,EACF;AAEA,SAAO,UAAU,GAAG,EAAE,QAAQ;AAChC;","names":["Env","Platform"]}

package/dist/chunk-LGXQBALM.mjs

@@ -1,106 +0,0 @@
-import {
-  getEnvUrls,
-  getOidcClientId
-} from "./chunk-KTCSRECK.mjs";
-
-// src/controllers/authentication/services.ts
-var ENV_URLS = getEnvUrls("prd" /* PRD */);
-var AUTH_ENDPOINT = ENV_URLS.authApiUrl;
-var AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;
-var AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;
-var OIDC_ENDPOINT = ENV_URLS.oidcApiUrl || "";
-var OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;
-var OIDC_CLIENT_ID = (platform) => {
-  if (platform === "extension") {
-    return getOidcClientId("prd" /* PRD */, "extension" /* EXTENSION */);
-  }
-  if (platform === "mobile") {
-    return getOidcClientId("prd" /* PRD */, "mobile" /* MOBILE */);
-  }
-  throw new Error(`Unsupported platform - ${platform}`);
-};
-var OIDC_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:jwt-bearer";
-async function getNonce(publicKey) {
-  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);
-  nonceUrl.searchParams.set("identifier", publicKey);
-  try {
-    const nonceResponse = await fetch(nonceUrl.toString());
-    if (!nonceResponse.ok) {
-      return null;
-    }
-    const nonceJson = await nonceResponse.json();
-    return nonceJson?.nonce ?? null;
-  } catch (e) {
-    console.error("authentication-controller/services: unable to get nonce", e);
-    return null;
-  }
-}
-async function login(rawMessage, signature, clientMetaMetrics) {
-  try {
-    const response = await fetch(AUTH_LOGIN_ENDPOINT, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        signature,
-        // eslint-disable-next-line @typescript-eslint/naming-convention
-        raw_message: rawMessage,
-        metametrics: {
-          // eslint-disable-next-line @typescript-eslint/naming-convention
-          metametrics_id: clientMetaMetrics.metametricsId,
-          agent: clientMetaMetrics.agent
-        }
-      })
-    });
-    if (!response.ok) {
-      return null;
-    }
-    const loginResponse = await response.json();
-    return loginResponse ?? null;
-  } catch (e) {
-    console.error("authentication-controller/services: unable to login", e);
-    return null;
-  }
-}
-async function getAccessToken(jwtToken, platform) {
-  const headers = new Headers({
-    "Content-Type": "application/x-www-form-urlencoded"
-  });
-  const urlEncodedBody = new URLSearchParams();
-  urlEncodedBody.append("grant_type", OIDC_GRANT_TYPE);
-  urlEncodedBody.append("client_id", OIDC_CLIENT_ID(platform));
-  urlEncodedBody.append("assertion", jwtToken);
-  try {
-    const response = await fetch(OIDC_TOKENS_ENDPOINT, {
-      method: "POST",
-      headers,
-      body: urlEncodedBody.toString()
-    });
-    if (!response.ok) {
-      return null;
-    }
-    const accessTokenResponse = await response.json();
-    return accessTokenResponse?.access_token ?? null;
-  } catch (e) {
-    console.error(
-      "authentication-controller/services: unable to get access token",
-      e
-    );
-    return null;
-  }
-}
-function createLoginRawMessage(nonce, publicKey) {
-  return `metamask:${nonce}:${publicKey}`;
-}
-
-export {
-  AUTH_NONCE_ENDPOINT,
-  AUTH_LOGIN_ENDPOINT,
-  OIDC_TOKENS_ENDPOINT,
-  getNonce,
-  login,
-  getAccessToken,
-  createLoginRawMessage
-};
-//# sourceMappingURL=chunk-LGXQBALM.mjs.map

package/dist/chunk-LGXQBALM.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/authentication/services.ts"],"sourcesContent":["import { Env, Platform, getEnvUrls, getOidcClientId } from '../../sdk/env';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nconst AUTH_ENDPOINT: string = ENV_URLS.authApiUrl;\nexport const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;\nexport const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;\n\nconst OIDC_ENDPOINT: string = ENV_URLS.oidcApiUrl || '';\nexport const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;\nconst OIDC_CLIENT_ID = (platform: 'mobile' | 'extension') => {\n  if (platform === 'extension') {\n    return getOidcClientId(Env.PRD, Platform.EXTENSION);\n  }\n  if (platform === 'mobile') {\n    return getOidcClientId(Env.PRD, Platform.MOBILE);\n  }\n\n  throw new Error(`Unsupported platform - ${platform as string}`);\n};\nconst OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n\nexport type NonceResponse = {\n  nonce: string;\n};\n\n/**\n * Auth Service - Get Nonce. Used for the initial JWTBearer flow\n *\n * @param publicKey - public key to associate a nonce with\n * @returns the nonce or null if failed\n */\nexport async function getNonce(publicKey: string): Promise<string | null> {\n  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);\n  nonceUrl.searchParams.set('identifier', publicKey);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      return null;\n    }\n\n    const nonceJson: NonceResponse = await nonceResponse.json();\n    return nonceJson?.nonce ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to get nonce', e);\n    return null;\n  }\n}\n\n/**\n * The Login API Server Response Shape\n */\nexport type LoginResponse = {\n  token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: string;\n  /**\n   * Contains anonymous information about the logged in profile.\n   *\n   * @property identifier_id - a deterministic unique identifier on the method used to sign in\n   * @property profile_id - a unique id for a given profile\n   * @property metametrics_id - an anonymous server id\n   */\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: string;\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: string;\n  };\n};\n\ntype ClientMetaMetrics = {\n  metametricsId: string;\n  agent: 'extension' | 'mobile';\n};\n\n/**\n * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.\n *\n * @param rawMessage - the original message before signing\n * @param signature - the signed message\n * @param clientMetaMetrics - optional client metametrics id (to associate on backend)\n * @returns The Login Response\n */\nexport async function login(\n  rawMessage: string,\n  signature: string,\n  clientMetaMetrics: ClientMetaMetrics,\n): Promise<LoginResponse | null> {\n  try {\n    const response = await fetch(AUTH_LOGIN_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n        metametrics: {\n          // eslint-disable-next-line @typescript-eslint/naming-convention\n          metametrics_id: clientMetaMetrics.metametricsId,\n          agent: clientMetaMetrics.agent,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const loginResponse: LoginResponse = await response.json();\n    return loginResponse ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to login', e);\n    return null;\n  }\n}\n\n/**\n * The Auth API Token Response Shape\n */\nexport type OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: number;\n};\n\n/**\n * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)\n * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints\n *\n * @param jwtToken - the JWT Auth Token, received from `/login`\n * @param platform - the OIDC platform to retrieve access token\n * @returns JWT Access token to store and use on authorized endpoints.\n */\nexport async function getAccessToken(\n  jwtToken: string,\n  platform: ClientMetaMetrics['agent'],\n): Promise<string | null> {\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);\n  urlEncodedBody.append('client_id', OIDC_CLIENT_ID(platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKENS_ENDPOINT, {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const accessTokenResponse: OAuthTokenResponse = await response.json();\n    return accessTokenResponse?.access_token ?? null;\n  } catch (e) {\n    console.error(\n      'authentication-controller/services: unable to get access token',\n      e,\n    );\n    return null;\n  }\n}\n\n/**\n * Utility to create the raw login message for the JWT bearer flow (via SRP)\n *\n * @param nonce - nonce received from `/nonce` endpoint\n * @param publicKey - public key used to retrieve nonce and for message signing\n * @returns Raw Message which will be used for signing & logging in.\n */\nexport function createLoginRawMessage(\n  nonce: string,\n  publicKey: string,\n): `metamask:${string}:${string}` {\n  return `metamask:${nonce}:${publicKey}` as const;\n}\n"],"mappings":";;;;;;AAEA,IAAM,WAAW,0BAAkB;AAEnC,IAAM,gBAAwB,SAAS;AAChC,IAAM,sBAAsB,GAAG,aAAa;AAC5C,IAAM,sBAAsB,GAAG,aAAa;AAEnD,IAAM,gBAAwB,SAAS,cAAc;AAC9C,IAAM,uBAAuB,GAAG,aAAa;AACpD,IAAM,iBAAiB,CAAC,aAAqC;AAC3D,MAAI,aAAa,aAAa;AAC5B,WAAO,4DAA2C;AAAA,EACpD;AACA,MAAI,aAAa,UAAU;AACzB,WAAO,sDAAwC;AAAA,EACjD;AAEA,QAAM,IAAI,MAAM,0BAA0B,QAAkB,EAAE;AAChE;AACA,IAAM,kBAAkB;AAYxB,eAAsB,SAAS,WAA2C;AACxE,QAAM,WAAW,IAAI,IAAI,mBAAmB;AAC5C,WAAS,aAAa,IAAI,cAAc,SAAS;AAEjD,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,YAA2B,MAAM,cAAc,KAAK;AAC1D,WAAO,WAAW,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,YAAQ,MAAM,2DAA2D,CAAC;AAC1E,WAAO;AAAA,EACT;AACF;AAqCA,eAAsB,MACpB,YACA,WACA,mBAC+B;AAC/B,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,qBAAqB;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA,QAEA,aAAa;AAAA,QACb,aAAa;AAAA;AAAA,UAEX,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,kBAAkB;AAAA,QAC3B;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,gBAA+B,MAAM,SAAS,KAAK;AACzD,WAAO,iBAAiB;AAAA,EAC1B,SAAS,GAAG;AACV,YAAQ,MAAM,uDAAuD,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAoBA,eAAsB,eACpB,UACA,UACwB;AACxB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,eAAe;AACnD,iBAAe,OAAO,aAAa,eAAe,QAAQ,CAAC;AAC3D,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,sBAAsB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,sBAA0C,MAAM,SAAS,KAAK;AACpE,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C,SAAS,GAAG;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,sBACd,OACA,WACgC;AAChC,SAAO,YAAY,KAAK,IAAI,SAAS;AACvC;","names":[]}