@metamask/profile-sync-controller 27.1.0 → 28.0.1

package/dist/sdk/utils/validate-login-response.d.mts

@@ -1,10 +1,14 @@
 import type { LoginResponse } from "../authentication.mjs";
 /**
- * Validates Shape is LoginResponse
- * NOTE - validation is pretty loose, we can improve this by using external libs like Zod for improved/tighter validation
+ * Validates that the input is a well-formed, non-expired LoginResponse.
+ *
+ * Checks structural shape (token + profile objects exist) and verifies
+ * the JWT access token's `exp` claim is still in the future. This acts
+ * as a hard guard against stale cached tokens regardless of client-side
+ * TTL tracking (obtainedAt / expiresIn), which can be corrupted.
  *
  * @param input - unknown/untyped input
- * @returns boolean if input is LoginResponse
+ * @returns boolean if input is a valid, non-expired LoginResponse
  */
 export declare function validateLoginResponse(input: unknown): input is LoginResponse;
 //# sourceMappingURL=validate-login-response.d.mts.map

package/dist/sdk/utils/validate-login-response.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-login-response.d.mts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA0B;AAEvD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAY5E"}
+{"version":3,"file":"validate-login-response.d.mts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA0B;AAEvD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgB5E"}

package/dist/sdk/utils/validate-login-response.mjs

@@ -1,9 +1,13 @@
 /**
- * Validates Shape is LoginResponse
- * NOTE - validation is pretty loose, we can improve this by using external libs like Zod for improved/tighter validation
+ * Validates that the input is a well-formed, non-expired LoginResponse.
+ *
+ * Checks structural shape (token + profile objects exist) and verifies
+ * the JWT access token's `exp` claim is still in the future. This acts
+ * as a hard guard against stale cached tokens regardless of client-side
+ * TTL tracking (obtainedAt / expiresIn), which can be corrupted.
  *
  * @param input - unknown/untyped input
- * @returns boolean if input is LoginResponse
+ * @returns boolean if input is a valid, non-expired LoginResponse
  */
 export function validateLoginResponse(input) {
     const assumedInput = input;
@@ -13,6 +17,29 @@ export function validateLoginResponse(input) {
     if (!assumedInput?.token || !assumedInput?.profile) {
         return false;
     }
+    if (isJwtExpired(assumedInput.token.accessToken)) {
+        return false;
+    }
     return true;
 }
+/**
+ * Checks whether a JWT has expired by decoding its `exp` claim.
+ *
+ * @param token - A JWT string.
+ * @returns true if the token is expired or cannot be decoded; false if still valid.
+ */
+function isJwtExpired(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            return true;
+        }
+        const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');
+        const { exp } = JSON.parse(atob(base64));
+        return !Number.isInteger(exp) || exp * 1000 <= Date.now();
+    }
+    catch {
+        return true;
+    }
+}
 //# sourceMappingURL=validate-login-response.mjs.map

package/dist/sdk/utils/validate-login-response.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validate-login-response.mjs","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,YAAY,GAAG,KAAsB,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { LoginResponse } from '../authentication';\n\n/**\n * Validates Shape is LoginResponse\n * NOTE - validation is pretty loose, we can improve this by using external libs like Zod for improved/tighter validation\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  return true;\n}\n"]}
+{"version":3,"file":"validate-login-response.mjs","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,YAAY,GAAG,KAAsB,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { LoginResponse } from '../authentication';\n\n/**\n * Validates that the input is a well-formed, non-expired LoginResponse.\n *\n * Checks structural shape (token + profile objects exist) and verifies\n * the JWT access token's `exp` claim is still in the future. This acts\n * as a hard guard against stale cached tokens regardless of client-side\n * TTL tracking (obtainedAt / expiresIn), which can be corrupted.\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is a valid, non-expired LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  if (isJwtExpired(assumedInput.token.accessToken)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Checks whether a JWT has expired by decoding its `exp` claim.\n *\n * @param token - A JWT string.\n * @returns true if the token is expired or cannot be decoded; false if still valid.\n */\nfunction isJwtExpired(token: string): boolean {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      return true;\n    }\n    const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');\n    const { exp } = JSON.parse(atob(base64));\n    return !Number.isInteger(exp) || exp * 1000 <= Date.now();\n  } catch {\n    return true;\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask/profile-sync-controller",
-  "version": "27.1.0",
+  "version": "28.0.1",
   "description": "The profile sync helps developers synchronize data across multiple clients and devices in a privacy-preserving way. All data saved in the user storage database is encrypted client-side to preserve privacy. The user storage provides a modular design, giving developers the flexibility to construct and manage their storage spaces in a way that best suits their needs",
   "keywords": [
     "MetaMask",
@@ -93,7 +93,9 @@
     "build:docs": "typedoc",
     "changelog:update": "../../scripts/update-changelog.sh @metamask/profile-sync-controller",
     "changelog:validate": "../../scripts/validate-changelog.sh @metamask/profile-sync-controller",
-    "publish:preview": "yarn npm publish --tag preview",
+    "generate-method-action-types": "yarn generate-method-action-types:authentication \"$@\" && yarn generate-method-action-types:user-storage \"$@\"",
+    "generate-method-action-types:authentication": "tsx ../../scripts/generate-method-action-types.ts src/controllers/authentication",
+    "generate-method-action-types:user-storage": "tsx ../../scripts/generate-method-action-types.ts src/controllers/user-storage",
     "since-latest-release": "../../scripts/since-latest-release.sh",
     "test": "NODE_OPTIONS=--experimental-vm-modules jest --reporters=jest-silent-reporter",
     "test:clean": "NODE_OPTIONS=--experimental-vm-modules jest --clearCache",
@@ -101,10 +103,10 @@
     "test:watch": "NODE_OPTIONS=--experimental-vm-modules jest --watch"
   },
   "dependencies": {
-    "@metamask/address-book-controller": "^7.0.1",
-    "@metamask/base-controller": "^9.0.0",
-    "@metamask/keyring-controller": "^25.1.0",
-    "@metamask/messenger": "^0.3.0",
+    "@metamask/address-book-controller": "^7.1.1",
+    "@metamask/base-controller": "^9.0.1",
+    "@metamask/keyring-controller": "^25.1.1",
+    "@metamask/messenger": "^1.0.0",
     "@metamask/snaps-controllers": "^17.2.0",
     "@metamask/snaps-sdk": "^10.3.0",
     "@metamask/snaps-utils": "^11.7.0",
@@ -119,18 +121,19 @@
     "@lavamoat/allow-scripts": "^3.0.4",
     "@lavamoat/preinstall-always-fail": "^2.1.0",
     "@metamask/auto-changelog": "^3.4.4",
-    "@metamask/keyring-api": "^21.0.0",
-    "@metamask/keyring-internal-api": "^9.0.0",
+    "@metamask/keyring-api": "^21.6.0",
+    "@metamask/keyring-internal-api": "^10.0.0",
     "@metamask/providers": "^22.1.0",
     "@ts-bridge/cli": "^0.6.4",
-    "@types/jest": "^27.5.2",
+    "@types/jest": "^29.5.14",
     "deepmerge": "^4.2.2",
     "ethers": "^6.12.0",
-    "jest": "^27.5.1",
-    "jest-environment-jsdom": "^27.5.1",
+    "jest": "^29.7.0",
+    "jest-environment-jsdom": "^29.7.0",
     "nock": "^13.3.1",
-    "ts-jest": "^27.1.5",
-    "typedoc": "^0.24.8",
+    "ts-jest": "^29.2.5",
+    "tsx": "^4.20.5",
+    "typedoc": "^0.25.13",
     "typedoc-plugin-missing-exports": "^2.0.0",
     "typescript": "~5.3.3",
     "webextension-polyfill": "^0.12.0"