@metamask/profile-sync-controller 9.0.0 → 10.1.0

package/dist/controllers/user-storage/services.mjs

@@ -1,276 +0,0 @@
-function $importDefault(module) {
-    if (module?.__esModule) {
-        return module.default;
-    }
-    return module;
-}
-import $log from "loglevel";
-const log = $importDefault($log);
-import encryption, { createSHA256Hash } from "../../shared/encryption/index.mjs";
-import { SHARED_SALT } from "../../shared/encryption/constants.mjs";
-import { Env, getEnvUrls } from "../../shared/env.mjs";
-import { createEntryPath } from "../../shared/storage-schema.mjs";
-const ENV_URLS = getEnvUrls(Env.PRD);
-export const USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
-export const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
-/**
- * User Storage Service - Get Storage Entry.
- *
- * @param opts - User Storage Options
- * @returns The storage entry, or null if fails to find entry
- */
-export async function getUserStorage(opts) {
-    try {
-        const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
-        const encryptedPath = createEntryPath(path, storageKey);
-        const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);
-        const userStorageResponse = await fetch(url.toString(), {
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${bearerToken}`,
-            },
-        });
-        // Acceptable error - since indicates entry does not exist.
-        if (userStorageResponse.status === 404) {
-            return null;
-        }
-        if (userStorageResponse.status !== 200) {
-            throw new Error(`Unable to get User Storage - HTTP ${userStorageResponse.status}`);
-        }
-        const userStorage = await userStorageResponse.json();
-        const encryptedData = userStorage?.Data ?? null;
-        /* istanbul ignore if - this is an edge case where our endpoint returns invalid JSON payload */
-        if (!encryptedData) {
-            return null;
-        }
-        const decryptedData = await encryption.decryptString(encryptedData, opts.storageKey, nativeScryptCrypto);
-        // Re-encrypt and re-upload the entry if the salt is random
-        const salt = encryption.getSalt(encryptedData);
-        if (salt.toString() !== SHARED_SALT.toString()) {
-            await upsertUserStorage(decryptedData, opts);
-        }
-        return decryptedData;
-    }
-    catch (e) {
-        log.error('Failed to get user storage', e);
-        return null;
-    }
-}
-/**
- * User Storage Service - Get all storage entries for a specific feature.
- *
- * @param opts - User Storage Options
- * @returns The storage entry, or null if fails to find entry
- */
-export async function getUserStorageAllFeatureEntries(opts) {
-    try {
-        const { bearerToken, path, nativeScryptCrypto } = opts;
-        const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
-        const userStorageResponse = await fetch(url.toString(), {
-            headers: {
-                'Content-Type': 'application/json',
-                Authorization: `Bearer ${bearerToken}`,
-            },
-        });
-        // Acceptable error - since indicates feature does not exist.
-        if (userStorageResponse.status === 404) {
-            return null;
-        }
-        if (userStorageResponse.status !== 200) {
-            throw new Error(`Unable to get User Storage - HTTP ${userStorageResponse.status}`);
-        }
-        const userStorage = await userStorageResponse.json();
-        if (!Array.isArray(userStorage)) {
-            return null;
-        }
-        const decryptedData = [];
-        const reEncryptedEntries = [];
-        for (const entry of userStorage) {
-            /* istanbul ignore if - unreachable if statement, but kept as edge case */
-            if (!entry.Data) {
-                continue;
-            }
-            try {
-                const data = await encryption.decryptString(entry.Data, opts.storageKey, nativeScryptCrypto);
-                decryptedData.push(data);
-                // Re-encrypt the entry if the salt is different from the shared one
-                const salt = encryption.getSalt(entry.Data);
-                if (salt.toString() !== SHARED_SALT.toString()) {
-                    reEncryptedEntries.push([
-                        entry.HashedKey,
-                        await encryption.encryptString(data, opts.storageKey, nativeScryptCrypto),
-                    ]);
-                }
-            }
-            catch {
-                // do nothing
-            }
-        }
-        // Re-upload the re-encrypted entries
-        if (reEncryptedEntries.length) {
-            await batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(reEncryptedEntries, opts);
-        }
-        return decryptedData;
-    }
-    catch (e) {
-        log.error('Failed to get user storage', e);
-        return null;
-    }
-}
-/**
- * User Storage Service - Set Storage Entry.
- *
- * @param data - data to store
- * @param opts - storage options
- */
-export async function upsertUserStorage(data, opts) {
-    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
-    const encryptedData = await encryption.encryptString(data, opts.storageKey, nativeScryptCrypto);
-    const encryptedPath = createEntryPath(path, storageKey);
-    const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ data: encryptedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to upsert data - HTTP ${res.status}`);
-    }
-}
-/**
- * User Storage Service - Set multiple storage entries for one specific feature.
- * You cannot use this method to set multiple features at once.
- *
- * @param data - data to store, in the form of an array of [entryKey, entryValue] pairs
- * @param opts - storage options
- */
-export async function batchUpsertUserStorage(data, opts) {
-    if (!data.length) {
-        return;
-    }
-    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
-    const encryptedData = [];
-    for (const d of data) {
-        encryptedData.push([
-            createSHA256Hash(d[0] + storageKey),
-            await encryption.encryptString(d[1], opts.storageKey, nativeScryptCrypto),
-        ]);
-    }
-    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
-    const formattedData = Object.fromEntries(encryptedData);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ data: formattedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to batch upsert data - HTTP ${res.status}`);
-    }
-}
-/**
- * User Storage Service - Set multiple storage entries for one specific feature.
- * You cannot use this method to set multiple features at once.
- *
- * @param encryptedData - data to store, in the form of an array of [hashedKey, encryptedData] pairs
- * @param opts - storage options
- */
-export async function batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(encryptedData, opts) {
-    if (!encryptedData.length) {
-        return;
-    }
-    const { bearerToken, path } = opts;
-    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
-    const formattedData = Object.fromEntries(encryptedData);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ data: formattedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to batch upsert data - HTTP ${res.status}`);
-    }
-}
-/**
- * User Storage Service - Delete Storage Entry.
- *
- * @param opts - User Storage Options
- */
-export async function deleteUserStorage(opts) {
-    const { bearerToken, path, storageKey } = opts;
-    const encryptedPath = createEntryPath(path, storageKey);
-    const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);
-    const userStorageResponse = await fetch(url.toString(), {
-        method: 'DELETE',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-    });
-    if (userStorageResponse.status === 404) {
-        throw new Error(`user-storage - feature/entry not found - HTTP ${userStorageResponse.status}`);
-    }
-    if (!userStorageResponse.ok) {
-        throw new Error(`user-storage - unable to delete data - HTTP ${userStorageResponse.status}`);
-    }
-}
-/**
- * User Storage Service - Delete multiple storage entries for one specific feature.
- * You cannot use this method to delete multiple features at once.
- *
- * @param data - data to delete, in the form of an array entryKey[]
- * @param opts - storage options
- */
-export async function batchDeleteUserStorage(data, opts) {
-    if (!data.length) {
-        return;
-    }
-    const { bearerToken, path, storageKey } = opts;
-    const encryptedData = [];
-    for (const d of data) {
-        encryptedData.push(createSHA256Hash(d + storageKey));
-    }
-    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
-    const res = await fetch(url.toString(), {
-        method: 'PUT',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-        body: JSON.stringify({ batch_delete: encryptedData }),
-    });
-    if (!res.ok) {
-        throw new Error(`user-storage - unable to batch delete data - HTTP ${res.status}`);
-    }
-}
-/**
- * User Storage Service - Delete all storage entries for a specific feature.
- *
- * @param opts - User Storage Options
- */
-export async function deleteUserStorageAllFeatureEntries(opts) {
-    const { bearerToken, path } = opts;
-    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
-    const userStorageResponse = await fetch(url.toString(), {
-        method: 'DELETE',
-        headers: {
-            'Content-Type': 'application/json',
-            Authorization: `Bearer ${bearerToken}`,
-        },
-    });
-    if (userStorageResponse.status === 404) {
-        throw new Error(`user-storage - feature not found - HTTP ${userStorageResponse.status}`);
-    }
-    if (!userStorageResponse.ok) {
-        throw new Error(`user-storage - unable to delete data - HTTP ${userStorageResponse.status}`);
-    }
-}
-//# sourceMappingURL=services.mjs.map

package/dist/controllers/user-storage/services.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"services.mjs","sourceRoot":"","sources":["../../../src/controllers/user-storage/services.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,IAAG,iBAAiB;;AAE3B,OAAO,UAAU,EAAE,EAAE,gBAAgB,EAAE,0CAAgC;AACvE,OAAO,EAAE,WAAW,EAAE,8CAA0C;AAChE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,6BAAyB;AAKnD,OAAO,EAAE,eAAe,EAAE,wCAAoC;AAG9D,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAW,QAAQ,CAAC,iBAAiB,CAAC;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,gBAAgB,qBAAqB,CAAC;AA+B9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB;IAExB,IAAI;QACF,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QAEnE,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,aAAa,EAAE,CAAC,CAAC;QAEjE,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtD,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,OAAO,IAAI,CAAC;SACb;QAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,MAAM,IAAI,KAAK,CACb,qCAAqC,mBAAmB,CAAC,MAAM,EAAE,CAClE,CAAC;SACH;QAED,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC;QAEhD,+FAA+F;QAC/F,IAAI,CAAC,aAAa,EAAE;YAClB,OAAO,IAAI,CAAC;SACb;QAED,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,aAAa,CAClD,aAAa,EACb,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB,CAAC;QAEF,2DAA2D;QAC3D,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,WAAW,CAAC,QAAQ,EAAE,EAAE;YAC9C,MAAM,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;SAC9C;QAED,OAAO,aAAa,CAAC;KACtB;IAAC,OAAO,CAAC,EAAE;QACV,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,IAAyC;IAEzC,IAAI;QACF,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;QAExD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtD,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,6DAA6D;QAC7D,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,OAAO,IAAI,CAAC;SACb;QAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;YACtC,MAAM,IAAI,KAAK,CACb,qCAAqC,mBAAmB,CAAC,MAAM,EAAE,CAClE,CAAC;SACH;QAED,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;YAC/B,OAAO,IAAI,CAAC;SACb;QAED,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,kBAAkB,GAAuB,EAAE,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE;YAC/B,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBACf,SAAS;aACV;YAED,IAAI;gBACF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,aAAa,CACzC,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB,CAAC;gBACF,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEzB,oEAAoE;gBACpE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,WAAW,CAAC,QAAQ,EAAE,EAAE;oBAC9C,kBAAkB,CAAC,IAAI,CAAC;wBACtB,KAAK,CAAC,SAAS;wBACf,MAAM,UAAU,CAAC,aAAa,CAC5B,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB;qBACF,CAAC,CAAC;iBACJ;aACF;YAAC,MAAM;gBACN,aAAa;aACd;SACF;QAED,qCAAqC;QACrC,IAAI,kBAAkB,CAAC,MAAM,EAAE;YAC7B,MAAM,0DAA0D,CAC9D,kBAAkB,EAClB,IAAI,CACL,CAAC;SACH;QAED,OAAO,aAAa,CAAC;KACtB;IAAC,OAAO,CAAC,EAAE;QACV,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;KACb;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAAwB;IAExB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAEnE,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,aAAa,CAClD,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,kBAAkB,CACnB,CAAC;IACF,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,aAAa,EAAE,CAAC,CAAC;IAEjE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,+CAA+C,GAAG,CAAC,MAAM,EAAE,CAC5D,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAwB,EACxB,IAAmC;IAEnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAChB,OAAO;KACR;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAEnE,MAAM,aAAa,GAAe,EAAE,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACpB,aAAa,CAAC,IAAI,CAAC;YACjB,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;YACnC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC;SAC1E,CAAC,CAAC;KACJ;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,MAAM,EAAE,CAClE,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0DAA0D,CAC9E,aAAiC,EACjC,IAAmC;IAEnC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;QACzB,OAAO;KACR;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,MAAM,EAAE,CAClE,CAAC;KACH;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAwB;IAExB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,aAAa,EAAE,CAAC,CAAC;IAEjE,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;QACtC,MAAM,IAAI,KAAK,CACb,iDAAiD,mBAAmB,CAAC,MAAM,EAAE,CAC9E,CAAC;KACH;IAED,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,KAAK,CACb,+CAA+C,mBAAmB,CAAC,MAAM,EAAE,CAC5E,CAAC;KACH;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAc,EACd,IAAmC;IAEnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAChB,OAAO;KACR;IAED,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE/C,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACpB,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;KACtD;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;QAED,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;KACtD,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACX,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,CAAC,MAAM,EAAE,CAClE,CAAC;KACH;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAAyC;IAEzC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,MAAM,KAAK,GAAG,EAAE;QACtC,MAAM,IAAI,KAAK,CACb,2CAA2C,mBAAmB,CAAC,MAAM,EAAE,CACxE,CAAC;KACH;IAED,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,KAAK,CACb,+CAA+C,mBAAmB,CAAC,MAAM,EAAE,CAC5E,CAAC;KACH;AACH,CAAC","sourcesContent":["import log from 'loglevel';\n\nimport encryption, { createSHA256Hash } from '../../shared/encryption';\nimport { SHARED_SALT } from '../../shared/encryption/constants';\nimport { Env, getEnvUrls } from '../../shared/env';\nimport type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from '../../shared/storage-schema';\nimport { createEntryPath } from '../../shared/storage-schema';\nimport type { NativeScrypt } from '../../shared/types/encryption';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n  HashedKey: string;\n  Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n  HashedKey: string;\n  Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n  bearerToken: string;\n  storageKey: string;\n  nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureAndKey;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureOnly;\n};\n\nexport type UserStorageBatchUpsertOptions = UserStorageAllFeatureEntriesOptions;\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n  opts: UserStorageOptions,\n): Promise<string | null> {\n  try {\n    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n    const encryptedPath = createEntryPath(path, storageKey);\n    const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates entry does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error(\n        `Unable to get User Storage - HTTP ${userStorageResponse.status}`,\n      );\n    }\n\n    const userStorage: GetUserStorageResponse | null =\n      await userStorageResponse.json();\n    const encryptedData = userStorage?.Data ?? null;\n\n    /* istanbul ignore if - this is an edge case where our endpoint returns invalid JSON payload */\n    if (!encryptedData) {\n      return null;\n    }\n\n    const decryptedData = await encryption.decryptString(\n      encryptedData,\n      opts.storageKey,\n      nativeScryptCrypto,\n    );\n\n    // Re-encrypt and re-upload the entry if the salt is random\n    const salt = encryption.getSalt(encryptedData);\n    if (salt.toString() !== SHARED_SALT.toString()) {\n      await upsertUserStorage(decryptedData, opts);\n    }\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n  opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n  try {\n    const { bearerToken, path, nativeScryptCrypto } = opts;\n    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates feature does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error(\n        `Unable to get User Storage - HTTP ${userStorageResponse.status}`,\n      );\n    }\n\n    const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n      await userStorageResponse.json();\n\n    if (!Array.isArray(userStorage)) {\n      return null;\n    }\n\n    const decryptedData: string[] = [];\n    const reEncryptedEntries: [string, string][] = [];\n\n    for (const entry of userStorage) {\n      /* istanbul ignore if - unreachable if statement, but kept as edge case */\n      if (!entry.Data) {\n        continue;\n      }\n\n      try {\n        const data = await encryption.decryptString(\n          entry.Data,\n          opts.storageKey,\n          nativeScryptCrypto,\n        );\n        decryptedData.push(data);\n\n        // Re-encrypt the entry if the salt is different from the shared one\n        const salt = encryption.getSalt(entry.Data);\n        if (salt.toString() !== SHARED_SALT.toString()) {\n          reEncryptedEntries.push([\n            entry.HashedKey,\n            await encryption.encryptString(\n              data,\n              opts.storageKey,\n              nativeScryptCrypto,\n            ),\n          ]);\n        }\n      } catch {\n        // do nothing\n      }\n    }\n\n    // Re-upload the re-encrypted entries\n    if (reEncryptedEntries.length) {\n      await batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(\n        reEncryptedEntries,\n        opts,\n      );\n    }\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n  data: string,\n  opts: UserStorageOptions,\n): Promise<void> {\n  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n  const encryptedData = await encryption.encryptString(\n    data,\n    opts.storageKey,\n    nativeScryptCrypto,\n  );\n  const encryptedPath = createEntryPath(path, storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to upsert data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Set multiple storage entries for one specific feature.\n * You cannot use this method to set multiple features at once.\n *\n * @param data - data to store, in the form of an array of [entryKey, entryValue] pairs\n * @param opts - storage options\n */\nexport async function batchUpsertUserStorage(\n  data: [string, string][],\n  opts: UserStorageBatchUpsertOptions,\n): Promise<void> {\n  if (!data.length) {\n    return;\n  }\n\n  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n  const encryptedData: string[][] = [];\n\n  for (const d of data) {\n    encryptedData.push([\n      createSHA256Hash(d[0] + storageKey),\n      await encryption.encryptString(d[1], opts.storageKey, nativeScryptCrypto),\n    ]);\n  }\n\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const formattedData = Object.fromEntries(encryptedData);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: formattedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to batch upsert data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Set multiple storage entries for one specific feature.\n * You cannot use this method to set multiple features at once.\n *\n * @param encryptedData - data to store, in the form of an array of [hashedKey, encryptedData] pairs\n * @param opts - storage options\n */\nexport async function batchUpsertUserStorageWithAlreadyHashedAndEncryptedEntries(\n  encryptedData: [string, string][],\n  opts: UserStorageBatchUpsertOptions,\n): Promise<void> {\n  if (!encryptedData.length) {\n    return;\n  }\n\n  const { bearerToken, path } = opts;\n\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const formattedData = Object.fromEntries(encryptedData);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: formattedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to batch upsert data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Delete Storage Entry.\n *\n * @param opts - User Storage Options\n */\nexport async function deleteUserStorage(\n  opts: UserStorageOptions,\n): Promise<void> {\n  const { bearerToken, path, storageKey } = opts;\n  const encryptedPath = createEntryPath(path, storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${encryptedPath}`);\n\n  const userStorageResponse = await fetch(url.toString(), {\n    method: 'DELETE',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n  });\n\n  if (userStorageResponse.status === 404) {\n    throw new Error(\n      `user-storage - feature/entry not found - HTTP ${userStorageResponse.status}`,\n    );\n  }\n\n  if (!userStorageResponse.ok) {\n    throw new Error(\n      `user-storage - unable to delete data - HTTP ${userStorageResponse.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Delete multiple storage entries for one specific feature.\n * You cannot use this method to delete multiple features at once.\n *\n * @param data - data to delete, in the form of an array entryKey[]\n * @param opts - storage options\n */\nexport async function batchDeleteUserStorage(\n  data: string[],\n  opts: UserStorageBatchUpsertOptions,\n): Promise<void> {\n  if (!data.length) {\n    return;\n  }\n\n  const { bearerToken, path, storageKey } = opts;\n\n  const encryptedData: string[] = [];\n\n  for (const d of data) {\n    encryptedData.push(createSHA256Hash(d + storageKey));\n  }\n\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n\n    body: JSON.stringify({ batch_delete: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error(\n      `user-storage - unable to batch delete data - HTTP ${res.status}`,\n    );\n  }\n}\n\n/**\n * User Storage Service - Delete all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n */\nexport async function deleteUserStorageAllFeatureEntries(\n  opts: UserStorageAllFeatureEntriesOptions,\n): Promise<void> {\n  const { bearerToken, path } = opts;\n  const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n  const userStorageResponse = await fetch(url.toString(), {\n    method: 'DELETE',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n  });\n\n  if (userStorageResponse.status === 404) {\n    throw new Error(\n      `user-storage - feature not found - HTTP ${userStorageResponse.status}`,\n    );\n  }\n\n  if (!userStorageResponse.ok) {\n    throw new Error(\n      `user-storage - unable to delete data - HTTP ${userStorageResponse.status}`,\n    );\n  }\n}\n"]}