@metamask/profile-sync-controller 0.4.0 → 0.6.0

package/dist/chunk-YKOMKXG4.mjs

@@ -1,120 +0,0 @@
-import {
-  SIWEJwtBearerAuth
-} from "./chunk-2CWF7ZTL.mjs";
-import {
-  SRPJwtBearerAuth
-} from "./chunk-J7NSK6BO.mjs";
-import {
-  getNonce,
-  pairIdentifiers
-} from "./chunk-YLURF2PF.mjs";
-import {
-  getMetaMaskProviderEIP6963
-} from "./chunk-5XSXZTED.mjs";
-import {
-  connectSnap
-} from "./chunk-5EBUFNAN.mjs";
-import {
-  PairError,
-  UnsupportedAuthTypeError
-} from "./chunk-TFFQFIJV.mjs";
-import {
-  __privateAdd,
-  __privateGet,
-  __privateMethod,
-  __privateSet
-} from "./chunk-U5UIDVOO.mjs";
-
-// src/sdk/authentication.ts
-var _type, _env, _sdk, _assertSIWE, assertSIWE_fn;
-var JwtBearerAuth = class {
-  constructor(...args) {
-    __privateAdd(this, _assertSIWE);
-    __privateAdd(this, _type, void 0);
-    __privateAdd(this, _env, void 0);
-    __privateAdd(this, _sdk, void 0);
-    __privateSet(this, _type, args[0].type);
-    __privateSet(this, _env, args[0].env);
-    if (args[0].type === "SRP" /* SRP */) {
-      __privateSet(this, _sdk, new SRPJwtBearerAuth(args[0], args[1]));
-      return;
-    }
-    if (args[0].type === "SiWE" /* SiWE */) {
-      __privateSet(this, _sdk, new SIWEJwtBearerAuth(args[0], args[1]));
-      return;
-    }
-    throw new UnsupportedAuthTypeError("unsupported auth type");
-  }
-  async getAccessToken() {
-    return await __privateGet(this, _sdk).getAccessToken();
-  }
-  async connectSnap() {
-    const provider = await getMetaMaskProviderEIP6963();
-    if (!provider) {
-      throw new Error("failed to get MetaMaskProviderEIP6963 provider");
-    }
-    const res = await connectSnap(provider);
-    return res;
-  }
-  async getUserProfile() {
-    return await __privateGet(this, _sdk).getUserProfile();
-  }
-  async getIdentifier() {
-    return await __privateGet(this, _sdk).getIdentifier();
-  }
-  async signMessage(message) {
-    return await __privateGet(this, _sdk).signMessage(message);
-  }
-  async pairIdentifiers(pairing) {
-    const profile = await this.getUserProfile();
-    const n = await getNonce(profile.profileId, __privateGet(this, _env));
-    const logins = await Promise.all(
-      pairing.map(async (p) => {
-        try {
-          const raw = `metamask:${n.nonce}:${p.identifier}`;
-          const sig = await p.signMessage(raw);
-          return {
-            signature: sig,
-            // TODO: Either fix this lint violation or explain why it's necessary to ignore.
-            // eslint-disable-next-line @typescript-eslint/naming-convention
-            raw_message: raw,
-            // TODO: Either fix this lint violation or explain why it's necessary to ignore.
-            // eslint-disable-next-line @typescript-eslint/naming-convention
-            encrypted_storage_key: p.encryptedStorageKey,
-            // TODO: Either fix this lint violation or explain why it's necessary to ignore.
-            // eslint-disable-next-line @typescript-eslint/naming-convention
-            identifier_type: p.identifierType
-          };
-        } catch (e) {
-          const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-          throw new PairError(
-            `failed to sign pairing message: ${errorMessage}`
-          );
-        }
-      })
-    );
-    const accessToken = await this.getAccessToken();
-    await pairIdentifiers(n.nonce, logins, accessToken, __privateGet(this, _env));
-  }
-  prepare(signer) {
-    __privateMethod(this, _assertSIWE, assertSIWE_fn).call(this, __privateGet(this, _type), __privateGet(this, _sdk));
-    __privateGet(this, _sdk).prepare(signer);
-  }
-};
-_type = new WeakMap();
-_env = new WeakMap();
-_sdk = new WeakMap();
-_assertSIWE = new WeakSet();
-assertSIWE_fn = function(type, sdk) {
-  if (type === "SiWE" /* SiWE */) {
-    return;
-  }
-  throw new UnsupportedAuthTypeError(
-    "This method is only available via SIWE auth type"
-  );
-};
-
-export {
-  JwtBearerAuth
-};
-//# sourceMappingURL=chunk-YKOMKXG4.mjs.map

package/dist/chunk-YKOMKXG4.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/authentication.ts"],"sourcesContent":["import { SIWEJwtBearerAuth } from './authentication-jwt-bearer/flow-siwe';\nimport { SRPJwtBearerAuth } from './authentication-jwt-bearer/flow-srp';\nimport {\n  getNonce,\n  pairIdentifiers,\n} from './authentication-jwt-bearer/services';\nimport type { UserProfile, Pair } from './authentication-jwt-bearer/types';\nimport { AuthType } from './authentication-jwt-bearer/types';\nimport type { Env } from './env';\nimport { PairError, UnsupportedAuthTypeError } from './errors';\nimport { getMetaMaskProviderEIP6963 } from './utils/eip-6963-metamask-provider';\nimport { connectSnap } from './utils/messaging-signing-snap-requests';\n\n// Computing the Classes, so we only get back the public methods for the interface.\n// TODO: Either fix this lint violation or explain why it's necessary to ignore.\n// eslint-disable-next-line @typescript-eslint/naming-convention\ntype Compute<T> = T extends infer U ? { [K in keyof U]: U[K] } : never;\ntype SIWEInterface = Compute<SIWEJwtBearerAuth>;\ntype SRPInterface = Compute<SRPJwtBearerAuth>;\n\ntype SiweParams = ConstructorParameters<typeof SIWEJwtBearerAuth>;\ntype SRPParams = ConstructorParameters<typeof SRPJwtBearerAuth>;\ntype JwtBearerAuthParams = SiweParams | SRPParams;\n\nexport class JwtBearerAuth implements SIWEInterface, SRPInterface {\n  #type: AuthType;\n\n  #env: Env;\n\n  #sdk: SIWEJwtBearerAuth | SRPJwtBearerAuth;\n\n  constructor(...args: JwtBearerAuthParams) {\n    this.#type = args[0].type;\n    this.#env = args[0].env;\n\n    if (args[0].type === AuthType.SRP) {\n      this.#sdk = new SRPJwtBearerAuth(args[0], args[1]);\n      return;\n    }\n\n    if (args[0].type === AuthType.SiWE) {\n      this.#sdk = new SIWEJwtBearerAuth(args[0], args[1]);\n      return;\n    }\n\n    throw new UnsupportedAuthTypeError('unsupported auth type');\n  }\n\n  async getAccessToken(): Promise<string> {\n    return await this.#sdk.getAccessToken();\n  }\n\n  async connectSnap(): Promise<string> {\n    const provider = await getMetaMaskProviderEIP6963();\n    if (!provider) {\n      throw new Error('failed to get MetaMaskProviderEIP6963 provider');\n    }\n    const res = await connectSnap(provider);\n    return res;\n  }\n\n  async getUserProfile(): Promise<UserProfile> {\n    return await this.#sdk.getUserProfile();\n  }\n\n  async getIdentifier(): Promise<string> {\n    return await this.#sdk.getIdentifier();\n  }\n\n  async signMessage(message: string): Promise<string> {\n    return await this.#sdk.signMessage(message);\n  }\n\n  async pairIdentifiers(pairing: Pair[]): Promise<void> {\n    const profile = await this.getUserProfile();\n    const n = await getNonce(profile.profileId, this.#env);\n\n    const logins = await Promise.all(\n      pairing.map(async (p) => {\n        try {\n          const raw = `metamask:${n.nonce}:${p.identifier}`;\n          const sig = await p.signMessage(raw);\n          return {\n            signature: sig,\n            // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n            // eslint-disable-next-line @typescript-eslint/naming-convention\n            raw_message: raw,\n            // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n            // eslint-disable-next-line @typescript-eslint/naming-convention\n            encrypted_storage_key: p.encryptedStorageKey,\n            // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n            // eslint-disable-next-line @typescript-eslint/naming-convention\n            identifier_type: p.identifierType,\n          };\n        } catch (e) {\n          /* istanbul ignore next */\n          const errorMessage =\n            e instanceof Error ? e.message : JSON.stringify(e ?? '');\n          throw new PairError(\n            `failed to sign pairing message: ${errorMessage}`,\n          );\n        }\n      }),\n    );\n\n    const accessToken = await this.getAccessToken();\n    await pairIdentifiers(n.nonce, logins, accessToken, this.#env);\n  }\n\n  prepare(signer: {\n    address: string;\n    chainId: number;\n    signMessage: (message: string) => Promise<string>;\n    domain: string;\n  }): void {\n    this.#assertSIWE(this.#type, this.#sdk);\n    this.#sdk.prepare(signer);\n  }\n\n  #assertSIWE(\n    type: AuthType,\n    sdk: SIWEJwtBearerAuth | SRPJwtBearerAuth,\n  ): asserts sdk is SIWEJwtBearerAuth {\n    if (type === AuthType.SiWE) {\n      return;\n    }\n\n    throw new UnsupportedAuthTypeError(\n      'This method is only available via SIWE auth type',\n    );\n  }\n}\n\nexport { SIWEJwtBearerAuth } from './authentication-jwt-bearer/flow-siwe';\nexport { SRPJwtBearerAuth } from './authentication-jwt-bearer/flow-srp';\nexport * from './authentication-jwt-bearer/types';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAwBO,IAAM,gBAAN,MAA2D;AAAA,EAOhE,eAAe,MAA2B;AAwF1C;AA9FA;AAEA;AAEA;AAGE,uBAAK,OAAQ,KAAK,CAAC,EAAE;AACrB,uBAAK,MAAO,KAAK,CAAC,EAAE;AAEpB,QAAI,KAAK,CAAC,EAAE,0BAAuB;AACjC,yBAAK,MAAO,IAAI,iBAAiB,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;AACjD;AAAA,IACF;AAEA,QAAI,KAAK,CAAC,EAAE,4BAAwB;AAClC,yBAAK,MAAO,IAAI,kBAAkB,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;AAClD;AAAA,IACF;AAEA,UAAM,IAAI,yBAAyB,uBAAuB;AAAA,EAC5D;AAAA,EAEA,MAAM,iBAAkC;AACtC,WAAO,MAAM,mBAAK,MAAK,eAAe;AAAA,EACxC;AAAA,EAEA,MAAM,cAA+B;AACnC,UAAM,WAAW,MAAM,2BAA2B;AAClD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AACA,UAAM,MAAM,MAAM,YAAY,QAAQ;AACtC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,iBAAuC;AAC3C,WAAO,MAAM,mBAAK,MAAK,eAAe;AAAA,EACxC;AAAA,EAEA,MAAM,gBAAiC;AACrC,WAAO,MAAM,mBAAK,MAAK,cAAc;AAAA,EACvC;AAAA,EAEA,MAAM,YAAY,SAAkC;AAClD,WAAO,MAAM,mBAAK,MAAK,YAAY,OAAO;AAAA,EAC5C;AAAA,EAEA,MAAM,gBAAgB,SAAgC;AACpD,UAAM,UAAU,MAAM,KAAK,eAAe;AAC1C,UAAM,IAAI,MAAM,SAAS,QAAQ,WAAW,mBAAK,KAAI;AAErD,UAAM,SAAS,MAAM,QAAQ;AAAA,MAC3B,QAAQ,IAAI,OAAO,MAAM;AACvB,YAAI;AACF,gBAAM,MAAM,YAAY,EAAE,KAAK,IAAI,EAAE,UAAU;AAC/C,gBAAM,MAAM,MAAM,EAAE,YAAY,GAAG;AACnC,iBAAO;AAAA,YACL,WAAW;AAAA;AAAA;AAAA,YAGX,aAAa;AAAA;AAAA;AAAA,YAGb,uBAAuB,EAAE;AAAA;AAAA;AAAA,YAGzB,iBAAiB,EAAE;AAAA,UACrB;AAAA,QACF,SAAS,GAAG;AAEV,gBAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,gBAAM,IAAI;AAAA,YACR,mCAAmC,YAAY;AAAA,UACjD;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,UAAM,gBAAgB,EAAE,OAAO,QAAQ,aAAa,mBAAK,KAAI;AAAA,EAC/D;AAAA,EAEA,QAAQ,QAKC;AACP,0BAAK,4BAAL,WAAiB,mBAAK,QAAO,mBAAK;AAClC,uBAAK,MAAK,QAAQ,MAAM;AAAA,EAC1B;AAcF;AA1GE;AAEA;AAEA;AA0FA;AAAA,gBAAW,SACT,MACA,KACkC;AAClC,MAAI,4BAAwB;AAC1B;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-YLURF2PF.mjs

@@ -1,157 +0,0 @@
-import {
-  getEnvUrls,
-  getOidcClientId
-} from "./chunk-KTCSRECK.mjs";
-import {
-  NonceRetrievalError,
-  PairError,
-  SignInError,
-  ValidationError
-} from "./chunk-TFFQFIJV.mjs";
-
-// src/sdk/authentication-jwt-bearer/services.ts
-var NONCE_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/nonce`;
-var PAIR_IDENTIFIERS = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/identifiers/pair`;
-var OIDC_TOKEN_URL = (env) => `${getEnvUrls(env).oidcApiUrl}/oauth2/token`;
-var SRP_LOGIN_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/srp/login`;
-var SIWE_LOGIN_URL = (env) => `${getEnvUrls(env).authApiUrl}/api/v2/siwe/login`;
-var getAuthenticationUrl = (authType, env) => {
-  switch (authType) {
-    case "SRP" /* SRP */:
-      return SRP_LOGIN_URL(env);
-    case "SiWE" /* SiWE */:
-      return SIWE_LOGIN_URL(env);
-    default:
-      throw new ValidationError(
-        `Invalid AuthType: ${authType} - unable to create Auth URL`
-      );
-  }
-};
-async function pairIdentifiers(nonce, logins, accessToken, env) {
-  const pairUrl = new URL(PAIR_IDENTIFIERS(env));
-  try {
-    const response = await fetch(pairUrl, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${accessToken}`
-      },
-      body: JSON.stringify({
-        nonce,
-        logins
-      })
-    });
-    if (!response.ok) {
-      const responseBody = await response.json();
-      throw new Error(
-        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
-      );
-    }
-  } catch (e) {
-    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new PairError(`unable to pair identifiers: ${errorMessage}`);
-  }
-}
-async function getNonce(id, env) {
-  const nonceUrl = new URL(NONCE_URL(env));
-  nonceUrl.searchParams.set("identifier", id);
-  try {
-    const nonceResponse = await fetch(nonceUrl.toString());
-    if (!nonceResponse.ok) {
-      const responseBody = await nonceResponse.json();
-      throw new Error(
-        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
-      );
-    }
-    const nonceJson = await nonceResponse.json();
-    return {
-      nonce: nonceJson.nonce,
-      identifier: nonceJson.identifier,
-      expiresIn: nonceJson.expires_in
-    };
-  } catch (e) {
-    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new NonceRetrievalError(`failed to generate nonce: ${errorMessage}`);
-  }
-}
-async function authorizeOIDC(jwtToken, env, platform) {
-  const grantType = "urn:ietf:params:oauth:grant-type:jwt-bearer";
-  const headers = new Headers({
-    "Content-Type": "application/x-www-form-urlencoded"
-  });
-  const urlEncodedBody = new URLSearchParams();
-  urlEncodedBody.append("grant_type", grantType);
-  urlEncodedBody.append("client_id", getOidcClientId(env, platform));
-  urlEncodedBody.append("assertion", jwtToken);
-  try {
-    const response = await fetch(OIDC_TOKEN_URL(env), {
-      method: "POST",
-      headers,
-      body: urlEncodedBody.toString()
-    });
-    if (!response.ok) {
-      const responseBody = await response.json();
-      throw new Error(
-        `HTTP error: ${responseBody.error_description}, error code: ${responseBody.error}`
-      );
-    }
-    const accessTokenResponse = await response.json();
-    return {
-      accessToken: accessTokenResponse.access_token,
-      expiresIn: accessTokenResponse.expires_in,
-      obtainedAt: Date.now()
-    };
-  } catch (e) {
-    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new SignInError(`unable to get access token: ${errorMessage}`);
-  }
-}
-async function authenticate(rawMessage, signature, authType, env) {
-  const authenticationUrl = getAuthenticationUrl(authType, env);
-  try {
-    const response = await fetch(authenticationUrl, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        signature,
-        // TODO: Either fix this lint violation or explain why it's necessary to ignore.
-        // eslint-disable-next-line @typescript-eslint/naming-convention
-        raw_message: rawMessage
-      })
-    });
-    if (!response.ok) {
-      const responseBody = await response.json();
-      throw new Error(
-        `${authType} login HTTP error: ${responseBody.message}, error code: ${responseBody.error}`
-      );
-    }
-    const loginResponse = await response.json();
-    return {
-      token: loginResponse.token,
-      expiresIn: loginResponse.expires_in,
-      profile: {
-        identifierId: loginResponse.profile.identifier_id,
-        metaMetricsId: loginResponse.profile.metametrics_id,
-        profileId: loginResponse.profile.profile_id
-      }
-    };
-  } catch (e) {
-    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new SignInError(`unable to perform SRP login: ${errorMessage}`);
-  }
-}
-
-export {
-  NONCE_URL,
-  PAIR_IDENTIFIERS,
-  OIDC_TOKEN_URL,
-  SRP_LOGIN_URL,
-  SIWE_LOGIN_URL,
-  pairIdentifiers,
-  getNonce,
-  authorizeOIDC,
-  authenticate
-};
-//# sourceMappingURL=chunk-YLURF2PF.mjs.map

package/dist/chunk-YLURF2PF.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/services.ts"],"sourcesContent":["import type { Env, Platform } from '../env';\nimport { getEnvUrls, getOidcClientId } from '../env';\nimport {\n  NonceRetrievalError,\n  PairError,\n  SignInError,\n  ValidationError,\n} from '../errors';\nimport type { AccessToken, ErrorMessage, UserProfile } from './types';\nimport { AuthType } from './types';\n\nexport const NONCE_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/nonce`;\n\nexport const PAIR_IDENTIFIERS = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/identifiers/pair`;\n\nexport const OIDC_TOKEN_URL = (env: Env) =>\n  `${getEnvUrls(env).oidcApiUrl}/oauth2/token`;\n\nexport const SRP_LOGIN_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/srp/login`;\n\nexport const SIWE_LOGIN_URL = (env: Env) =>\n  `${getEnvUrls(env).authApiUrl}/api/v2/siwe/login`;\n\nconst getAuthenticationUrl = (authType: AuthType, env: Env): string => {\n  switch (authType) {\n    case AuthType.SRP:\n      return SRP_LOGIN_URL(env);\n    case AuthType.SiWE:\n      return SIWE_LOGIN_URL(env);\n    /* istanbul ignore next */\n    default:\n      throw new ValidationError(\n        `Invalid AuthType: ${authType as number} - unable to create Auth URL`,\n      );\n  }\n};\n\ntype NonceResponse = {\n  nonce: string;\n  identifier: string;\n  expiresIn: number;\n};\n\ntype PairRequest = {\n  signature: string;\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  raw_message: string;\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  encrypted_storage_key: string;\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  identifier_type: 'SIWE' | 'SRP';\n};\n\n/**\n * Pair multiple identifiers under a single profile\n *\n * @param nonce - session nonce\n * @param logins - pairing request payload\n * @param accessToken - JWT access token used to access protected resources\n * @param env - server environment\n * @returns void.\n */\nexport async function pairIdentifiers(\n  nonce: string,\n  logins: PairRequest[],\n  accessToken: string,\n  env: Env,\n): Promise<void> {\n  const pairUrl = new URL(PAIR_IDENTIFIERS(env));\n\n  try {\n    const response = await fetch(pairUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${accessToken}`,\n      },\n      body: JSON.stringify({\n        nonce,\n        logins,\n      }),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as ErrorMessage;\n      throw new Error(\n        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n      );\n    }\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new PairError(`unable to pair identifiers: ${errorMessage}`);\n  }\n}\n\n/**\n * Service to Get Nonce for JWT Bearer Flow\n *\n * @param id - identifier ID\n * @param env - server environment\n * @returns the nonce.\n */\nexport async function getNonce(id: string, env: Env): Promise<NonceResponse> {\n  const nonceUrl = new URL(NONCE_URL(env));\n  nonceUrl.searchParams.set('identifier', id);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      const responseBody = (await nonceResponse.json()) as ErrorMessage;\n      throw new Error(\n        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n      );\n    }\n\n    const nonceJson = await nonceResponse.json();\n    return {\n      nonce: nonceJson.nonce,\n      identifier: nonceJson.identifier,\n      expiresIn: nonceJson.expires_in,\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new NonceRetrievalError(`failed to generate nonce: ${errorMessage}`);\n  }\n}\n\n/**\n * Service to Authorize And perform OIDC Flow to get the Access Token\n *\n * @param jwtToken - The original token received from Authentication. This is traded for the Access Token. (the authentication token is single-use)\n * @param env - server environment\n * @param platform - SDK platform\n * @returns Access Token from Authorization server\n */\nexport async function authorizeOIDC(\n  jwtToken: string,\n  env: Env,\n  platform: Platform,\n): Promise<AccessToken> {\n  const grantType = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', grantType);\n  urlEncodedBody.append('client_id', getOidcClientId(env, platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKEN_URL(env), {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as {\n        // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        error_description: string;\n        error: string;\n      };\n      throw new Error(\n        `HTTP error: ${responseBody.error_description}, error code: ${responseBody.error}`,\n      );\n    }\n\n    const accessTokenResponse = await response.json();\n    return {\n      accessToken: accessTokenResponse.access_token,\n      expiresIn: accessTokenResponse.expires_in,\n      obtainedAt: Date.now(),\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new SignInError(`unable to get access token: ${errorMessage}`);\n  }\n}\n\ntype Authentication = {\n  token: string;\n  expiresIn: number;\n  profile: UserProfile;\n};\n/**\n * Service to Authenticate/Login a user via SIWE or SRP derived key.\n *\n * @param rawMessage - raw message for validation when authenticating\n * @param signature - signed raw message\n * @param authType - authentication type/flow used\n * @param env - server environment\n * @returns Authentication Token\n */\nexport async function authenticate(\n  rawMessage: string,\n  signature: string,\n  authType: AuthType,\n  env: Env,\n): Promise<Authentication> {\n  const authenticationUrl = getAuthenticationUrl(authType, env);\n\n  try {\n    const response = await fetch(authenticationUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n      }),\n    });\n\n    if (!response.ok) {\n      const responseBody = (await response.json()) as ErrorMessage;\n      throw new Error(\n        `${authType} login HTTP error: ${responseBody.message}, error code: ${responseBody.error}`,\n      );\n    }\n\n    const loginResponse = await response.json();\n    return {\n      token: loginResponse.token,\n      expiresIn: loginResponse.expires_in,\n      profile: {\n        identifierId: loginResponse.profile.identifier_id,\n        metaMetricsId: loginResponse.profile.metametrics_id,\n        profileId: loginResponse.profile.profile_id,\n      },\n    };\n  } catch (e) {\n    /* istanbul ignore next */\n    const errorMessage =\n      e instanceof Error ? e.message : JSON.stringify(e ?? '');\n    throw new SignInError(`unable to perform SRP login: ${errorMessage}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAWO,IAAM,YAAY,CAAC,QACxB,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,mBAAmB,CAAC,QAC/B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,iBAAiB,CAAC,QAC7B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,gBAAgB,CAAC,QAC5B,GAAG,WAAW,GAAG,EAAE,UAAU;AAExB,IAAM,iBAAiB,CAAC,QAC7B,GAAG,WAAW,GAAG,EAAE,UAAU;AAE/B,IAAM,uBAAuB,CAAC,UAAoB,QAAqB;AACrE,UAAQ,UAAU;AAAA,IAChB;AACE,aAAO,cAAc,GAAG;AAAA,IAC1B;AACE,aAAO,eAAe,GAAG;AAAA,IAE3B;AACE,YAAM,IAAI;AAAA,QACR,qBAAqB,QAAkB;AAAA,MACzC;AAAA,EACJ;AACF;AA8BA,eAAsB,gBACpB,OACA,QACA,aACA,KACe;AACf,QAAM,UAAU,IAAI,IAAI,iBAAiB,GAAG,CAAC;AAE7C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,SAAS;AAAA,MACpC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,UAAU,+BAA+B,YAAY,EAAE;AAAA,EACnE;AACF;AASA,eAAsB,SAAS,IAAY,KAAkC;AAC3E,QAAM,WAAW,IAAI,IAAI,UAAU,GAAG,CAAC;AACvC,WAAS,aAAa,IAAI,cAAc,EAAE;AAE1C,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,eAAgB,MAAM,cAAc,KAAK;AAC/C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,cAAc,KAAK;AAC3C,WAAO;AAAA,MACL,OAAO,UAAU;AAAA,MACjB,YAAY,UAAU;AAAA,MACtB,WAAW,UAAU;AAAA,IACvB;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,oBAAoB,6BAA6B,YAAY,EAAE;AAAA,EAC3E;AACF;AAUA,eAAsB,cACpB,UACA,KACA,UACsB;AACtB,QAAM,YAAY;AAClB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,SAAS;AAC7C,iBAAe,OAAO,aAAa,gBAAgB,KAAK,QAAQ,CAAC;AACjE,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,eAAe,GAAG,GAAG;AAAA,MAChD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAM1C,YAAM,IAAI;AAAA,QACR,eAAe,aAAa,iBAAiB,iBAAiB,aAAa,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,sBAAsB,MAAM,SAAS,KAAK;AAChD,WAAO;AAAA,MACL,aAAa,oBAAoB;AAAA,MACjC,WAAW,oBAAoB;AAAA,MAC/B,YAAY,KAAK,IAAI;AAAA,IACvB;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,YAAY,+BAA+B,YAAY,EAAE;AAAA,EACrE;AACF;AAgBA,eAAsB,aACpB,YACA,WACA,UACA,KACyB;AACzB,QAAM,oBAAoB,qBAAqB,UAAU,GAAG;AAE5D,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA;AAAA,QAGA,aAAa;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,GAAG,QAAQ,sBAAsB,aAAa,OAAO,iBAAiB,aAAa,KAAK;AAAA,MAC1F;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,SAAS,KAAK;AAC1C,WAAO;AAAA,MACL,OAAO,cAAc;AAAA,MACrB,WAAW,cAAc;AAAA,MACzB,SAAS;AAAA,QACP,cAAc,cAAc,QAAQ;AAAA,QACpC,eAAe,cAAc,QAAQ;AAAA,QACrC,WAAW,cAAc,QAAQ;AAAA,MACnC;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI,YAAY,gCAAgC,YAAY,EAAE;AAAA,EACtE;AACF;","names":[]}

package/dist/chunk-ZUPTMFEA.mjs

@@ -1,28 +0,0 @@
-import {
-  LOCALIZED_DEFAULT_ACCOUNT_NAMES,
-  USER_STORAGE_VERSION,
-  USER_STORAGE_VERSION_KEY
-} from "./chunk-EHZFPUJH.mjs";
-
-// src/controllers/user-storage/accounts/user-storage.ts
-var isNameDefaultAccountName = (name) => {
-  return LOCALIZED_DEFAULT_ACCOUNT_NAMES.some((prefix) => {
-    return new RegExp(`^${prefix} ([0-9]+)$`, "u").test(name);
-  });
-};
-var mapInternalAccountToUserStorageAccount = (internalAccount) => {
-  const { address, id, metadata } = internalAccount;
-  return {
-    [USER_STORAGE_VERSION_KEY]: USER_STORAGE_VERSION,
-    a: address,
-    i: id,
-    n: metadata.name,
-    nlu: metadata.nameLastUpdatedAt
-  };
-};
-
-export {
-  isNameDefaultAccountName,
-  mapInternalAccountToUserStorageAccount
-};
-//# sourceMappingURL=chunk-ZUPTMFEA.mjs.map

package/dist/chunk-ZUPTMFEA.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/user-storage/accounts/user-storage.ts"],"sourcesContent":["import type { InternalAccount } from '@metamask/keyring-api';\n\nimport {\n  USER_STORAGE_VERSION_KEY,\n  USER_STORAGE_VERSION,\n  LOCALIZED_DEFAULT_ACCOUNT_NAMES,\n} from './constants';\n\nexport type UserStorageAccount = {\n  /**\n   * The Version 'v' of the User Storage.\n   * NOTE - will allow us to support upgrade/downgrades in the future\n   */\n  [USER_STORAGE_VERSION_KEY]: typeof USER_STORAGE_VERSION;\n  /** the id 'i' of the account */\n  i: string;\n  /** the address 'a' of the account */\n  a: string;\n  /** the name 'n' of the account */\n  n: string;\n  /** the nameLastUpdatedAt timestamp 'nlu' of the account */\n  nlu?: number;\n};\n\n/**\n * Tells if the given name is a default account name.\n * Default account names are localized names that are automatically generated by the clients.\n *\n * @param name - the name to check\n * @returns true if the name is a default account name, false otherwise\n */\n\nexport const isNameDefaultAccountName = (name: string) => {\n  return LOCALIZED_DEFAULT_ACCOUNT_NAMES.some((prefix) => {\n    return new RegExp(`^${prefix} ([0-9]+)$`, 'u').test(name);\n  });\n};\n\n/**\n * Map an internal account to a user storage account\n * @param internalAccount - An internal account\n * @returns A user storage account\n */\nexport const mapInternalAccountToUserStorageAccount = (\n  internalAccount: InternalAccount,\n): UserStorageAccount => {\n  const { address, id, metadata } = internalAccount;\n  return {\n    [USER_STORAGE_VERSION_KEY]: USER_STORAGE_VERSION,\n    a: address,\n    i: id,\n    n: metadata.name,\n    nlu: metadata.nameLastUpdatedAt,\n  };\n};\n"],"mappings":";;;;;;;AAgCO,IAAM,2BAA2B,CAAC,SAAiB;AACxD,SAAO,gCAAgC,KAAK,CAAC,WAAW;AACtD,WAAO,IAAI,OAAO,IAAI,MAAM,cAAc,GAAG,EAAE,KAAK,IAAI;AAAA,EAC1D,CAAC;AACH;AAOO,IAAM,yCAAyC,CACpD,oBACuB;AACvB,QAAM,EAAE,SAAS,IAAI,SAAS,IAAI;AAClC,SAAO;AAAA,IACL,CAAC,wBAAwB,GAAG;AAAA,IAC5B,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG,SAAS;AAAA,IACZ,KAAK,SAAS;AAAA,EAChB;AACF;","names":[]}

package/dist/chunk-ZX2KHPXG.js

@@ -1,106 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _chunkDF24ZX4Hjs = require('./chunk-DF24ZX4H.js');
-
-// src/controllers/authentication/services.ts
-var ENV_URLS = _chunkDF24ZX4Hjs.getEnvUrls.call(void 0, "prd" /* PRD */);
-var AUTH_ENDPOINT = ENV_URLS.authApiUrl;
-var AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;
-var AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;
-var OIDC_ENDPOINT = ENV_URLS.oidcApiUrl || "";
-var OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;
-var OIDC_CLIENT_ID = (platform) => {
-  if (platform === "extension") {
-    return _chunkDF24ZX4Hjs.getOidcClientId.call(void 0, "prd" /* PRD */, "extension" /* EXTENSION */);
-  }
-  if (platform === "mobile") {
-    return _chunkDF24ZX4Hjs.getOidcClientId.call(void 0, "prd" /* PRD */, "mobile" /* MOBILE */);
-  }
-  throw new Error(`Unsupported platform - ${platform}`);
-};
-var OIDC_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:jwt-bearer";
-async function getNonce(publicKey) {
-  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);
-  nonceUrl.searchParams.set("identifier", publicKey);
-  try {
-    const nonceResponse = await fetch(nonceUrl.toString());
-    if (!nonceResponse.ok) {
-      return null;
-    }
-    const nonceJson = await nonceResponse.json();
-    return nonceJson?.nonce ?? null;
-  } catch (e) {
-    console.error("authentication-controller/services: unable to get nonce", e);
-    return null;
-  }
-}
-async function login(rawMessage, signature, clientMetaMetrics) {
-  try {
-    const response = await fetch(AUTH_LOGIN_ENDPOINT, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        signature,
-        // eslint-disable-next-line @typescript-eslint/naming-convention
-        raw_message: rawMessage,
-        metametrics: {
-          // eslint-disable-next-line @typescript-eslint/naming-convention
-          metametrics_id: clientMetaMetrics.metametricsId,
-          agent: clientMetaMetrics.agent
-        }
-      })
-    });
-    if (!response.ok) {
-      return null;
-    }
-    const loginResponse = await response.json();
-    return loginResponse ?? null;
-  } catch (e) {
-    console.error("authentication-controller/services: unable to login", e);
-    return null;
-  }
-}
-async function getAccessToken(jwtToken, platform) {
-  const headers = new Headers({
-    "Content-Type": "application/x-www-form-urlencoded"
-  });
-  const urlEncodedBody = new URLSearchParams();
-  urlEncodedBody.append("grant_type", OIDC_GRANT_TYPE);
-  urlEncodedBody.append("client_id", OIDC_CLIENT_ID(platform));
-  urlEncodedBody.append("assertion", jwtToken);
-  try {
-    const response = await fetch(OIDC_TOKENS_ENDPOINT, {
-      method: "POST",
-      headers,
-      body: urlEncodedBody.toString()
-    });
-    if (!response.ok) {
-      return null;
-    }
-    const accessTokenResponse = await response.json();
-    return accessTokenResponse?.access_token ?? null;
-  } catch (e) {
-    console.error(
-      "authentication-controller/services: unable to get access token",
-      e
-    );
-    return null;
-  }
-}
-function createLoginRawMessage(nonce, publicKey) {
-  return `metamask:${nonce}:${publicKey}`;
-}
-
-
-
-
-
-
-
-
-
-exports.AUTH_NONCE_ENDPOINT = AUTH_NONCE_ENDPOINT; exports.AUTH_LOGIN_ENDPOINT = AUTH_LOGIN_ENDPOINT; exports.OIDC_TOKENS_ENDPOINT = OIDC_TOKENS_ENDPOINT; exports.getNonce = getNonce; exports.login = login; exports.getAccessToken = getAccessToken; exports.createLoginRawMessage = createLoginRawMessage;
-//# sourceMappingURL=chunk-ZX2KHPXG.js.map

package/dist/chunk-ZX2KHPXG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/authentication/services.ts"],"names":[],"mappings":";;;;;;AAEA,IAAM,WAAW,0BAAkB;AAEnC,IAAM,gBAAwB,SAAS;AAChC,IAAM,sBAAsB,GAAG,aAAa;AAC5C,IAAM,sBAAsB,GAAG,aAAa;AAEnD,IAAM,gBAAwB,SAAS,cAAc;AAC9C,IAAM,uBAAuB,GAAG,aAAa;AACpD,IAAM,iBAAiB,CAAC,aAAqC;AAC3D,MAAI,aAAa,aAAa;AAC5B,WAAO,4DAA2C;AAAA,EACpD;AACA,MAAI,aAAa,UAAU;AACzB,WAAO,sDAAwC;AAAA,EACjD;AAEA,QAAM,IAAI,MAAM,0BAA0B,QAAkB,EAAE;AAChE;AACA,IAAM,kBAAkB;AAYxB,eAAsB,SAAS,WAA2C;AACxE,QAAM,WAAW,IAAI,IAAI,mBAAmB;AAC5C,WAAS,aAAa,IAAI,cAAc,SAAS;AAEjD,MAAI;AACF,UAAM,gBAAgB,MAAM,MAAM,SAAS,SAAS,CAAC;AACrD,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,YAA2B,MAAM,cAAc,KAAK;AAC1D,WAAO,WAAW,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,YAAQ,MAAM,2DAA2D,CAAC;AAC1E,WAAO;AAAA,EACT;AACF;AAqCA,eAAsB,MACpB,YACA,WACA,mBAC+B;AAC/B,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,qBAAqB;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA;AAAA,QAEA,aAAa;AAAA,QACb,aAAa;AAAA;AAAA,UAEX,gBAAgB,kBAAkB;AAAA,UAClC,OAAO,kBAAkB;AAAA,QAC3B;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,gBAA+B,MAAM,SAAS,KAAK;AACzD,WAAO,iBAAiB;AAAA,EAC1B,SAAS,GAAG;AACV,YAAQ,MAAM,uDAAuD,CAAC;AACtE,WAAO;AAAA,EACT;AACF;AAoBA,eAAsB,eACpB,UACA,UACwB;AACxB,QAAM,UAAU,IAAI,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,iBAAiB,IAAI,gBAAgB;AAC3C,iBAAe,OAAO,cAAc,eAAe;AACnD,iBAAe,OAAO,aAAa,eAAe,QAAQ,CAAC;AAC3D,iBAAe,OAAO,aAAa,QAAQ;AAE3C,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,sBAAsB;AAAA,MACjD,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,eAAe,SAAS;AAAA,IAChC,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,sBAA0C,MAAM,SAAS,KAAK;AACpE,WAAO,qBAAqB,gBAAgB;AAAA,EAC9C,SAAS,GAAG;AACV,YAAQ;AAAA,MACN;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,sBACd,OACA,WACgC;AAChC,SAAO,YAAY,KAAK,IAAI,SAAS;AACvC","sourcesContent":["import { Env, Platform, getEnvUrls, getOidcClientId } from '../../sdk/env';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nconst AUTH_ENDPOINT: string = ENV_URLS.authApiUrl;\nexport const AUTH_NONCE_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/nonce`;\nexport const AUTH_LOGIN_ENDPOINT = `${AUTH_ENDPOINT}/api/v2/srp/login`;\n\nconst OIDC_ENDPOINT: string = ENV_URLS.oidcApiUrl || '';\nexport const OIDC_TOKENS_ENDPOINT = `${OIDC_ENDPOINT}/oauth2/token`;\nconst OIDC_CLIENT_ID = (platform: 'mobile' | 'extension') => {\n  if (platform === 'extension') {\n    return getOidcClientId(Env.PRD, Platform.EXTENSION);\n  }\n  if (platform === 'mobile') {\n    return getOidcClientId(Env.PRD, Platform.MOBILE);\n  }\n\n  throw new Error(`Unsupported platform - ${platform as string}`);\n};\nconst OIDC_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:jwt-bearer';\n\nexport type NonceResponse = {\n  nonce: string;\n};\n\n/**\n * Auth Service - Get Nonce. Used for the initial JWTBearer flow\n *\n * @param publicKey - public key to associate a nonce with\n * @returns the nonce or null if failed\n */\nexport async function getNonce(publicKey: string): Promise<string | null> {\n  const nonceUrl = new URL(AUTH_NONCE_ENDPOINT);\n  nonceUrl.searchParams.set('identifier', publicKey);\n\n  try {\n    const nonceResponse = await fetch(nonceUrl.toString());\n    if (!nonceResponse.ok) {\n      return null;\n    }\n\n    const nonceJson: NonceResponse = await nonceResponse.json();\n    return nonceJson?.nonce ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to get nonce', e);\n    return null;\n  }\n}\n\n/**\n * The Login API Server Response Shape\n */\nexport type LoginResponse = {\n  token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: string;\n  /**\n   * Contains anonymous information about the logged in profile.\n   *\n   * @property identifier_id - a deterministic unique identifier on the method used to sign in\n   * @property profile_id - a unique id for a given profile\n   * @property metametrics_id - an anonymous server id\n   */\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: string;\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: string;\n  };\n};\n\ntype ClientMetaMetrics = {\n  metametricsId: string;\n  agent: 'extension' | 'mobile';\n};\n\n/**\n * Auth Service - Login. Will perform login with a given signature and will return a single use JWT Token.\n *\n * @param rawMessage - the original message before signing\n * @param signature - the signed message\n * @param clientMetaMetrics - optional client metametrics id (to associate on backend)\n * @returns The Login Response\n */\nexport async function login(\n  rawMessage: string,\n  signature: string,\n  clientMetaMetrics: ClientMetaMetrics,\n): Promise<LoginResponse | null> {\n  try {\n    const response = await fetch(AUTH_LOGIN_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        signature,\n        // eslint-disable-next-line @typescript-eslint/naming-convention\n        raw_message: rawMessage,\n        metametrics: {\n          // eslint-disable-next-line @typescript-eslint/naming-convention\n          metametrics_id: clientMetaMetrics.metametricsId,\n          agent: clientMetaMetrics.agent,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const loginResponse: LoginResponse = await response.json();\n    return loginResponse ?? null;\n  } catch (e) {\n    console.error('authentication-controller/services: unable to login', e);\n    return null;\n  }\n}\n\n/**\n * The Auth API Token Response Shape\n */\nexport type OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: number;\n};\n\n/**\n * OIDC Service - Access Token. Trades the Auth Token for an access token (to be used for other authenticated endpoints)\n * NOTE - the access token is short lived, which means it is best practice to validate session before calling authenticated endpoints\n *\n * @param jwtToken - the JWT Auth Token, received from `/login`\n * @param platform - the OIDC platform to retrieve access token\n * @returns JWT Access token to store and use on authorized endpoints.\n */\nexport async function getAccessToken(\n  jwtToken: string,\n  platform: ClientMetaMetrics['agent'],\n): Promise<string | null> {\n  const headers = new Headers({\n    'Content-Type': 'application/x-www-form-urlencoded',\n  });\n\n  const urlEncodedBody = new URLSearchParams();\n  urlEncodedBody.append('grant_type', OIDC_GRANT_TYPE);\n  urlEncodedBody.append('client_id', OIDC_CLIENT_ID(platform));\n  urlEncodedBody.append('assertion', jwtToken);\n\n  try {\n    const response = await fetch(OIDC_TOKENS_ENDPOINT, {\n      method: 'POST',\n      headers,\n      body: urlEncodedBody.toString(),\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    const accessTokenResponse: OAuthTokenResponse = await response.json();\n    return accessTokenResponse?.access_token ?? null;\n  } catch (e) {\n    console.error(\n      'authentication-controller/services: unable to get access token',\n      e,\n    );\n    return null;\n  }\n}\n\n/**\n * Utility to create the raw login message for the JWT bearer flow (via SRP)\n *\n * @param nonce - nonce received from `/nonce` endpoint\n * @param publicKey - public key used to retrieve nonce and for message signing\n * @returns Raw Message which will be used for signing & logging in.\n */\nexport function createLoginRawMessage(\n  nonce: string,\n  publicKey: string,\n): `metamask:${string}:${string}` {\n  return `metamask:${nonce}:${publicKey}` as const;\n}\n"]}

package/dist/controllers/authentication/AuthenticationController.js

@@ -1,13 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _chunkF6BAOSH2js = require('../../chunk-F6BAOSH2.js');
-require('../../chunk-ZX2KHPXG.js');
-require('../../chunk-YHGWG3EQ.js');
-require('../../chunk-DF24ZX4H.js');
-require('../../chunk-IGY2S5BC.js');
-
-
-
-exports.default = _chunkF6BAOSH2js.AuthenticationController; exports.defaultState = _chunkF6BAOSH2js.defaultState;
-//# sourceMappingURL=AuthenticationController.js.map

package/dist/controllers/authentication/AuthenticationController.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/authentication/auth-snap-requests.js

@@ -1,10 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _chunkYHGWG3EQjs = require('../../chunk-YHGWG3EQ.js');
-require('../../chunk-IGY2S5BC.js');
-
-
-
-exports.createSnapPublicKeyRequest = _chunkYHGWG3EQjs.createSnapPublicKeyRequest; exports.createSnapSignMessageRequest = _chunkYHGWG3EQjs.createSnapSignMessageRequest;
-//# sourceMappingURL=auth-snap-requests.js.map

package/dist/controllers/authentication/auth-snap-requests.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/authentication/index.js

@@ -1,19 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _chunkPRYLTXW4js = require('../../chunk-PRYLTXW4.js');
-
-
-
-var _chunkF6BAOSH2js = require('../../chunk-F6BAOSH2.js');
-require('../../chunk-ZX2KHPXG.js');
-require('../../chunk-YHGWG3EQ.js');
-require('../../chunk-DF24ZX4H.js');
-require('../../chunk-IGY2S5BC.js');
-
-
-
-
-
-exports.Controller = _chunkF6BAOSH2js.AuthenticationController; exports.Mocks = _chunkPRYLTXW4js.fixtures_exports; exports.default = _chunkPRYLTXW4js.authentication_default; exports.defaultState = _chunkF6BAOSH2js.defaultState;
-//# sourceMappingURL=index.js.map

package/dist/controllers/authentication/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/authentication/services.js

@@ -1,21 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-
-
-
-
-
-var _chunkZX2KHPXGjs = require('../../chunk-ZX2KHPXG.js');
-require('../../chunk-DF24ZX4H.js');
-require('../../chunk-IGY2S5BC.js');
-
-
-
-
-
-
-
-
-exports.AUTH_LOGIN_ENDPOINT = _chunkZX2KHPXGjs.AUTH_LOGIN_ENDPOINT; exports.AUTH_NONCE_ENDPOINT = _chunkZX2KHPXGjs.AUTH_NONCE_ENDPOINT; exports.OIDC_TOKENS_ENDPOINT = _chunkZX2KHPXGjs.OIDC_TOKENS_ENDPOINT; exports.createLoginRawMessage = _chunkZX2KHPXGjs.createLoginRawMessage; exports.getAccessToken = _chunkZX2KHPXGjs.getAccessToken; exports.getNonce = _chunkZX2KHPXGjs.getNonce; exports.login = _chunkZX2KHPXGjs.login;
-//# sourceMappingURL=services.js.map

package/dist/controllers/authentication/services.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/index.js

@@ -1,25 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-var _chunkPRYLTXW4js = require('../chunk-PRYLTXW4.js');
-require('../chunk-F6BAOSH2.js');
-require('../chunk-ZX2KHPXG.js');
-
-
-var _chunkCHUZGCDVjs = require('../chunk-CHUZGCDV.js');
-require('../chunk-246Z6L5V.js');
-require('../chunk-GQXYWBFK.js');
-require('../chunk-JAQ5TPSZ.js');
-require('../chunk-YHGWG3EQ.js');
-require('../chunk-4LMFZDL4.js');
-require('../chunk-5MQUI24U.js');
-require('../chunk-NIUQ34PY.js');
-require('../chunk-BKQE7DB5.js');
-require('../chunk-UAXWZN5J.js');
-require('../chunk-PCOIRDTO.js');
-require('../chunk-DF24ZX4H.js');
-require('../chunk-IGY2S5BC.js');
-
-
-
-exports.Authentication = _chunkPRYLTXW4js.authentication_exports; exports.UserStorage = _chunkCHUZGCDVjs.user_storage_exports;
-//# sourceMappingURL=index.js.map

package/dist/controllers/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/user-storage/UserStorageController.js

@@ -1,20 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _chunk246Z6L5Vjs = require('../../chunk-246Z6L5V.js');
-require('../../chunk-GQXYWBFK.js');
-require('../../chunk-JAQ5TPSZ.js');
-require('../../chunk-YHGWG3EQ.js');
-require('../../chunk-4LMFZDL4.js');
-require('../../chunk-5MQUI24U.js');
-require('../../chunk-NIUQ34PY.js');
-require('../../chunk-BKQE7DB5.js');
-require('../../chunk-UAXWZN5J.js');
-require('../../chunk-PCOIRDTO.js');
-require('../../chunk-DF24ZX4H.js');
-require('../../chunk-IGY2S5BC.js');
-
-
-
-exports.default = _chunk246Z6L5Vjs.UserStorageController; exports.defaultState = _chunk246Z6L5Vjs.defaultState;
-//# sourceMappingURL=UserStorageController.js.map

package/dist/controllers/user-storage/UserStorageController.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/user-storage/accounts/constants.js

@@ -1,12 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-
-var _chunkJAQ5TPSZjs = require('../../../chunk-JAQ5TPSZ.js');
-require('../../../chunk-IGY2S5BC.js');
-
-
-
-
-exports.LOCALIZED_DEFAULT_ACCOUNT_NAMES = _chunkJAQ5TPSZjs.LOCALIZED_DEFAULT_ACCOUNT_NAMES; exports.USER_STORAGE_VERSION = _chunkJAQ5TPSZjs.USER_STORAGE_VERSION; exports.USER_STORAGE_VERSION_KEY = _chunkJAQ5TPSZjs.USER_STORAGE_VERSION_KEY;
-//# sourceMappingURL=constants.js.map

package/dist/controllers/user-storage/accounts/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/controllers/user-storage/accounts/user-storage.js

@@ -1,11 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-var _chunkGQXYWBFKjs = require('../../../chunk-GQXYWBFK.js');
-require('../../../chunk-JAQ5TPSZ.js');
-require('../../../chunk-IGY2S5BC.js');
-
-
-
-exports.isNameDefaultAccountName = _chunkGQXYWBFKjs.isNameDefaultAccountName; exports.mapInternalAccountToUserStorageAccount = _chunkGQXYWBFKjs.mapInternalAccountToUserStorageAccount;
-//# sourceMappingURL=user-storage.js.map

package/dist/controllers/user-storage/accounts/user-storage.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":""}