@mtcute/core 0.1.0

package/cjs/base-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-client.js","sourceRoot":"","sources":["../../src/base-client.ts"],"names":[],"mappings":";;;;;;AAAA,uDAAuD;AACvD,oDAAiC;AACjC,gDAAuB;AAEvB,mCAA+B;AAC/B,2DAA+E;AAC/E,2DAA+E;AAG/E,mEAA2D;AAE3D,qEAAwG;AAExG,iDAAoE;AAEpE,+CAeyB;AAyKzB;;;GAGG;AACH,MAAa,kBAAmB,SAAQ,gBAAY;IAwDhD,YAAY,IAA+B;QACvC,KAAK,EAAE,CAAA;QAjBX,uDAAuD;QAC7C,oBAAe,GAAG,CAAC,CAAA;QAEpB,YAAO,GAAG,IAAI,iCAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAA;QAE9E,0DAA0D;QAClD,eAAU,GAAwC,KAAK,CAAA;QAOtD,QAAG,GAAG,IAAI,qBAAU,CAAC,QAAQ,CAAC,CAAA;QA0EvC,uBAAkB,GAA4B,EAAE,CAAA;QApE5C,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAEhF,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;SACjE;QAED,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAA;QAEjD,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,uCAA4B,CAAC,EAAE,CAAA;QAC7D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,wBAAa,EAAE,CAAA;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEvC,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAA;QAExB,IAAI,CAAC,EAAE,EAAE;YACL,IAAI,IAAI,CAAC,SAAS,EAAE;gBAChB,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAAiB,CAAC,CAAC,CAAC,wBAAa,CAAA;aACzD;iBAAM;gBACH,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,kCAAuB,CAAC,CAAC,CAAC,8BAAmB,CAAA;aACrE;SACJ;QAED,IAAI,CAAC,WAAW,GAAG,EAAE,CAAA;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAA;QAE1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,OAAE,CAAC,KAAK,CAAA;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,yBAAgB,CAAA;QACpD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,yBAAgB,CAAA;QAEpD,IAAI,CAAC,OAAO,GAAG,IAAI,mCAAc,CAC7B;YACI,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;YAC5C,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,KAAK;YACtD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;YACtC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9B,eAAe,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YACjD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,KAAK;YACxD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SAC1B,EACD,IAAI,CAAC,OAAO,CACf,CAAA;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACpE,CAAC;IAES,gBAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC3B,CAAC;IAES,KAAK,CAAC,YAAY;QACxB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;IAC/B,CAAC;IAID,iBAAiB,CAAC,EAAuB;QACrC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,oBAAoB,CAAC,EAAuB;QACxC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,WAAW;QACb,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,kBAAkB,EAAE;YACtC,MAAM,EAAE,EAAE,CAAA;SACb;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACT,IAAI,IAAI,CAAC,UAAU,EAAE;YACjB,uBAAuB;YACvB,MAAM,IAAI,CAAC,UAAU,CAAA;YAErB,OAAM;SACT;QAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,IAAA,oCAAyB,GAAE,CAAC,CAAA;QAE/D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAA;QACpD,IAAI,SAAS,KAAK,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAEpD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEnF,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE;YAC9D,MAAM,IAAI,GAAG,IAAA,4BAAiB,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;YAEjE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,EAAE;gBAClC,MAAM,IAAI,KAAK,CACX,sDAAsD;oBAClD,cAAc,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,uBACzC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAC9B,EAAE,CACT,CAAA;aACJ;YAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAA;YAClC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAEjD,IAAI,IAAI,CAAC,IAAI,EAAE;gBACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;aACxC;YAED,uDAAuD;YACvD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAEvE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;SAC3B;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAE3B,IAAI,CAAC,OAAO;aACP,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;aACzB,IAAI,CAAC,GAAG,EAAE;YACP,OAAO,CAAC,OAAO,EAAE,CAAA;YACjB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QAC1B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACP,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAEzB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QACtB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QAEtB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QACxB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAA;QAE9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI,CACN,OAAmC,EACnC,MAAuB;QAEvB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE;YAC1B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;SACvB;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAE9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAC3D,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAE/B,+DAA+D;QAC/D,OAAO,GAAG,CAAA;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,eAAe,CAAC,OAAyB;QACrC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,OAA+D;QACnE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IAC3B,CAAC;IAED,cAAc,CAAC,IAA8B;QACzC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IAChC,CAAC;IAED,UAAU,CAAC,GAAY,EAAE,UAA8B;QACnD,IAAI,IAAI,CAAC,QAAQ,EAAE;YACf,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;SACjC;aAAM;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;SACrB;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,GAAW;QAC7B,MAAM,WAAW,GAAgC,EAAE,CAAA;QAEnD,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,IAAI,KAAK,GAAG,CAAC,CAAA;QAEb,KAAK,MAAM,IAAI,IAAI,IAAA,0BAAe,EAAC,GAAkB,CAAC,EAAE;YACpD,IAAK,IAAY,CAAC,GAAG,EAAE;gBACnB,+DAA+D;gBAC/D,gDAAgD;gBAChD,MAAM,GAAG,IAAI,CAAA;gBACb,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAA;gBAC7C,SAAQ;aACX;YAED,KAAK,IAAI,CAAC,CAAA;YAEV,QAAQ,IAAI,CAAC,CAAC,EAAE;gBACZ,KAAK,MAAM;oBACP,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;wBAClB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,IAAI,CAAC,CAAA;wBAC5D,SAAQ;qBACX;oBAED,WAAW,CAAC,IAAI,CAAC;wBACb,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE;wBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI;qBACb,CAAC,CAAA;oBACF,MAAK;gBACT,KAAK,MAAM,CAAC;gBACZ,KAAK,eAAe;oBAChB,WAAW,CAAC,IAAI,CAAC;wBACb,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;wBACZ,UAAU,EAAE,cAAI,CAAC,IAAI;wBACrB,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI;qBACb,CAAC,CAAA;oBACF,MAAK;gBACT,KAAK,SAAS,CAAC;gBACf,KAAK,kBAAkB;oBACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;wBAClB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,IAAI,CAAC,CAAA;wBAC5D,SAAQ;qBACX;oBACD,WAAW,CAAC,IAAI,CAAC;wBACb,EAAE,EAAE,IAAA,8BAAmB,EAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;wBACzE,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,IAAI;qBACb,CAAC,CAAA;oBACF,MAAK;aACZ;SACJ;QAED,IAAI,KAAK,GAAG,CAAC,EAAE;YACX,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;YAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;SAC3C;QAED,OAAO,MAAM,CAAA;IACjB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,aAAa;QACf,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAA;QACrD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAErD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACpE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAE1D,OAAO,IAAA,6BAAkB,EAAC,IAAI,CAAC,UAAU,EAAE;YACvC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YAClC,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,UAAU;YACV,OAAO;SACV,CAAC,CAAA;IACN,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,OAAe,EAAE,KAAK,GAAG,KAAK;QACxC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAA;QAC1B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;IAC7B,CAAC;CACJ;AAvZD,gDAuZC","sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any */\nimport EventEmitter from 'events'\nimport Long from 'long'\n\nimport { tl } from '@mtcute/tl'\nimport { __tlReaderMap as defaultReaderMap } from '@mtcute/tl/binary/reader.js'\nimport { __tlWriterMap as defaultWriterMap } from '@mtcute/tl/binary/writer.js'\nimport { TlReaderMap, TlWriterMap } from '@mtcute/tl-runtime'\n\nimport { ConfigManager } from './network/config-manager.js'\nimport { ReconnectionStrategy, SessionConnection, TransportFactory } from './network/index.js'\nimport { NetworkManager, NetworkManagerExtraParams, RpcCallOptions } from './network/network-manager.js'\nimport { PersistentConnectionParams } from './network/persistent-connection.js'\nimport { ITelegramStorage, MemoryStorage } from './storage/index.js'\nimport { MustEqual } from './types/index.js'\nimport {\n    ControllablePromise,\n    createControllablePromise,\n    CryptoProviderFactory,\n    defaultCryptoProviderFactory,\n    defaultProductionDc,\n    defaultProductionIpv6Dc,\n    defaultTestDc,\n    defaultTestIpv6Dc,\n    getAllPeersFrom,\n    ICryptoProvider,\n    LogManager,\n    readStringSession,\n    toggleChannelIdMark,\n    writeStringSession,\n} from './utils/index.js'\n\n/** Options for {@link BaseTelegramClient} */\nexport interface BaseTelegramClientOptions {\n    /**\n     * API ID from my.telegram.org\n     */\n    apiId: number | string\n    /**\n     * API hash from my.telegram.org\n     */\n    apiHash: string\n\n    /**\n     * Telegram storage to use.\n     * If omitted, {@link MemoryStorage} is used\n     */\n    storage?: ITelegramStorage\n\n    /**\n     * Cryptography provider factory to allow delegating\n     * crypto to native addon, worker, etc.\n     */\n    crypto?: CryptoProviderFactory\n\n    /**\n     * Whether to use IPv6 datacenters\n     * (IPv6 will be preferred when choosing a DC by id)\n     * (default: false)\n     */\n    useIpv6?: boolean\n\n    /**\n     * Primary DC to use for initial connection.\n     * This does not mean this will be the only DC used,\n     * nor that this DC will actually be primary, this only\n     * determines the first DC the library will try to connect to.\n     * Can be used to connect to other networks (like test DCs).\n     *\n     * When session already contains primary DC, this parameter is ignored.\n     *\n     * @default  Production DC 2.\n     */\n    defaultDcs?: ITelegramStorage.DcOptions\n\n    /**\n     * Whether to connect to test servers.\n     *\n     * If passed, {@link defaultDc} defaults to Test DC 2.\n     *\n     * **Must** be passed if using test servers, even if\n     * you passed custom {@link defaultDc}\n     */\n    testMode?: boolean\n\n    /**\n     * Additional options for initConnection call.\n     * `apiId` and `query` are not available and will be ignored.\n     * Omitted values will be filled with defaults\n     */\n    initConnectionOptions?: Partial<Omit<tl.RawInitConnectionRequest, 'apiId' | 'query'>>\n\n    /**\n     * Transport factory to use in the client.\n     *\n     * @default  platform-specific transport: WebSocket on the web, TCP in node\n     */\n    transport?: TransportFactory\n\n    /**\n     * Reconnection strategy.\n     *\n     * @default  simple reconnection strategy: first 0ms, then up to 5s (increasing by 1s)\n     */\n    reconnectionStrategy?: ReconnectionStrategy<PersistentConnectionParams>\n\n    /**\n     * Maximum duration of a flood_wait that will be waited automatically.\n     * Flood waits above this threshold will throw a FloodWaitError.\n     * Set to 0 to disable. Can be overridden with `throwFlood` parameter in call() params\n     *\n     * @default 10000\n     */\n    floodSleepThreshold?: number\n\n    /**\n     * Maximum number of retries when calling RPC methods.\n     * Call is retried when InternalError or FloodWaitError is encountered.\n     * Can be set to Infinity.\n     *\n     * @default 5\n     */\n    maxRetryCount?: number\n\n    /**\n     * If true, every single API call will be wrapped with `tl.invokeWithoutUpdates`,\n     * effectively disabling the server-sent events for the clients.\n     * May be useful in some cases.\n     *\n     * Note that this only wraps calls made with `.call()` within the primary\n     * connection. Additional connections and direct `.sendForResult()` calls\n     * must be wrapped manually.\n     *\n     * @default false\n     */\n    disableUpdates?: boolean\n\n    /**\n     * mtcute can send all unknown RPC errors to [danog](https://github.com/danog)'s\n     * [error reporting service](https://rpc.pwrtelegram.xyz/).\n     *\n     * This is fully anonymous (except maybe IP) and is only used to improve the library\n     * and developer experience for everyone working with MTProto. This is fully opt-in,\n     * and if you're too paranoid, you can disable it by manually passing `enableErrorReporting: false` to the client.\n     *\n     * @default false\n     */\n    enableErrorReporting?: boolean\n\n    /**\n     * If true, RPC errors will have a stack trace of the initial `.call()`\n     * or `.sendForResult()` call position, which drastically improves\n     * debugging experience.<br>\n     * If false, they will have a stack trace of mtcute internals.\n     *\n     * Internally this creates a stack capture before every RPC call\n     * and stores it until the result is received. This might\n     * use a lot more memory than normal, thus can be disabled here.\n     *\n     * @default true\n     */\n    niceStacks?: boolean\n\n    /**\n     * Extra parameters for {@link NetworkManager}\n     */\n    network?: NetworkManagerExtraParams\n\n    /**\n     * Set logging level for the client.\n     *\n     * See static members of {@link LogManager} for possible values.\n     */\n    logLevel?: number\n\n    /**\n     * **EXPERT USE ONLY!**\n     *\n     * Override TL layer used for the connection.\n     *\n     * **Does not** change the schema used.\n     */\n    overrideLayer?: number\n\n    /**\n     * **EXPERT USE ONLY**\n     *\n     * Override reader map used for the connection.\n     */\n    readerMap?: TlReaderMap\n\n    /**\n     * **EXPERT USE ONLY**\n     *\n     * Override writer map used for the connection.\n     */\n    writerMap?: TlWriterMap\n}\n\n/**\n * Basic Telegram client that only implements the bare minimum\n * to make RPC calls and receive low-level updates.\n */\nexport class BaseTelegramClient extends EventEmitter {\n    /**\n     * Crypto provider taken from {@link BaseTelegramClientOptions.crypto}\n     */\n    readonly crypto: ICryptoProvider\n\n    /**\n     * Telegram storage taken from {@link BaseTelegramClientOptions.storage}\n     */\n    readonly storage: ITelegramStorage\n\n    /**\n     * API hash taken from {@link BaseTelegramClientOptions.apiHash}\n     */\n    protected readonly _apiHash: string\n\n    /**\n     * \"Use IPv6\" taken from {@link BaseTelegramClientOptions.useIpv6}\n     */\n    protected readonly _useIpv6: boolean\n\n    /**\n     * \"Test mode\" taken from {@link BaseTelegramClientOptions.testMode}\n     */\n    protected readonly _testMode: boolean\n\n    /**\n     * Primary DCs taken from {@link BaseTelegramClientOptions.defaultDcs},\n     * loaded from session or changed by other means (like redirecting).\n     */\n    protected _defaultDcs: ITelegramStorage.DcOptions\n\n    private _niceStacks: boolean\n    /** TL layer used by the client */\n    readonly _layer: number\n    /** TL readers map used by the client */\n    readonly _readerMap: TlReaderMap\n    /** TL writers map used by the client */\n    readonly _writerMap: TlWriterMap\n\n    /** Unix timestamp when the last update was received */\n    protected _lastUpdateTime = 0\n\n    readonly _config = new ConfigManager(() => this.call({ _: 'help.getConfig' }))\n\n    // not really connected, but rather \"connect() was called\"\n    private _connected: ControllablePromise<void> | boolean = false\n\n    private _onError?: (err: unknown, connection?: SessionConnection) => void\n\n    private _importFrom?: string\n    private _importForce?: boolean\n\n    readonly log = new LogManager('client')\n    readonly network: NetworkManager\n\n    constructor(opts: BaseTelegramClientOptions) {\n        super()\n\n        const apiId = typeof opts.apiId === 'string' ? parseInt(opts.apiId) : opts.apiId\n\n        if (isNaN(apiId)) {\n            throw new Error('apiId must be a number or a numeric string!')\n        }\n\n        if (opts.logLevel) this.log.level = opts.logLevel\n\n        this.crypto = (opts.crypto ?? defaultCryptoProviderFactory)()\n        this.storage = opts.storage ?? new MemoryStorage()\n        this._apiHash = opts.apiHash\n        this._useIpv6 = Boolean(opts.useIpv6)\n        this._testMode = Boolean(opts.testMode)\n\n        let dc = opts.defaultDcs\n\n        if (!dc) {\n            if (this._testMode) {\n                dc = this._useIpv6 ? defaultTestIpv6Dc : defaultTestDc\n            } else {\n                dc = this._useIpv6 ? defaultProductionIpv6Dc : defaultProductionDc\n            }\n        }\n\n        this._defaultDcs = dc\n        this._niceStacks = opts.niceStacks ?? true\n\n        this._layer = opts.overrideLayer ?? tl.LAYER\n        this._readerMap = opts.readerMap ?? defaultReaderMap\n        this._writerMap = opts.writerMap ?? defaultWriterMap\n\n        this.network = new NetworkManager(\n            {\n                apiId,\n                crypto: this.crypto,\n                disableUpdates: opts.disableUpdates ?? false,\n                initConnectionOptions: opts.initConnectionOptions,\n                layer: this._layer,\n                log: this.log,\n                readerMap: this._readerMap,\n                writerMap: this._writerMap,\n                reconnectionStrategy: opts.reconnectionStrategy,\n                storage: this.storage,\n                testMode: this._testMode,\n                transport: opts.transport,\n                _emitError: this._emitError.bind(this),\n                floodSleepThreshold: opts.floodSleepThreshold ?? 10000,\n                maxRetryCount: opts.maxRetryCount ?? 5,\n                isPremium: false,\n                useIpv6: Boolean(opts.useIpv6),\n                keepAliveAction: this._keepAliveAction.bind(this),\n                enableErrorReporting: opts.enableErrorReporting ?? false,\n                ...(opts.network ?? {}),\n            },\n            this._config,\n        )\n\n        this.storage.setup?.(this.log, this._readerMap, this._writerMap)\n    }\n\n    protected _keepAliveAction(): void {\n        this.emit('keep_alive')\n    }\n\n    protected async _loadStorage(): Promise<void> {\n        await this.storage.load?.()\n    }\n\n    _beforeStorageSave: (() => Promise<void>)[] = []\n\n    beforeStorageSave(cb: () => Promise<void>): void {\n        this._beforeStorageSave.push(cb)\n    }\n\n    offBeforeStorageSave(cb: () => Promise<void>): void {\n        this._beforeStorageSave = this._beforeStorageSave.filter((x) => x !== cb)\n    }\n\n    async saveStorage(): Promise<void> {\n        for (const cb of this._beforeStorageSave) {\n            await cb()\n        }\n        await this.storage.save?.()\n    }\n\n    /**\n     * Initialize the connection to the primary DC.\n     *\n     * You shouldn't usually call this method directly as it is called\n     * implicitly the first time you call {@link call}.\n     */\n    async connect(): Promise<void> {\n        if (this._connected) {\n            // avoid double-connect\n            await this._connected\n\n            return\n        }\n\n        const promise = (this._connected = createControllablePromise())\n\n        await this._loadStorage()\n        const primaryDc = await this.storage.getDefaultDcs()\n        if (primaryDc !== null) this._defaultDcs = primaryDc\n\n        const defaultDcAuthKey = await this.storage.getAuthKeyFor(this._defaultDcs.main.id)\n\n        if ((this._importForce || !defaultDcAuthKey) && this._importFrom) {\n            const data = readStringSession(this._readerMap, this._importFrom)\n\n            if (data.testMode !== this._testMode) {\n                throw new Error(\n                    'This session string is not for the current backend. ' +\n                        `Session is ${data.testMode ? 'test' : 'prod'}, but the client is ${\n                            this._testMode ? 'test' : 'prod'\n                        }`,\n                )\n            }\n\n            this._defaultDcs = data.primaryDcs\n            await this.storage.setDefaultDcs(data.primaryDcs)\n\n            if (data.self) {\n                await this.storage.setSelf(data.self)\n            }\n\n            // await this.primaryConnection.setupKeys(data.authKey)\n            await this.storage.setAuthKeyFor(data.primaryDcs.main.id, data.authKey)\n\n            await this.saveStorage()\n        }\n\n        this.emit('before_connect')\n\n        this.network\n            .connect(this._defaultDcs)\n            .then(() => {\n                promise.resolve()\n                this._connected = true\n            })\n            .catch((err: Error) => this._emitError(err))\n    }\n\n    /**\n     * Close all connections and finalize the client.\n     */\n    async close(): Promise<void> {\n        this.emit('before_close')\n\n        this._config.destroy()\n        this.network.destroy()\n\n        await this.saveStorage()\n        await this.storage.destroy?.()\n\n        this.emit('closed')\n    }\n\n    /**\n     * Make an RPC call to the primary DC.\n     * This method handles DC migration, flood waits and retries automatically.\n     *\n     * If you want more low-level control, use\n     * `primaryConnection.sendForResult()` (which is what this method wraps)\n     *\n     * This method is still quite low-level and you shouldn't use this\n     * when using high-level API provided by `@mtcute/client`.\n     *\n     * @param message  RPC method to call\n     * @param params  Additional call parameters\n     */\n    async call<T extends tl.RpcMethod>(\n        message: MustEqual<T, tl.RpcMethod>,\n        params?: RpcCallOptions,\n    ): Promise<tl.RpcCallReturn[T['_']]> {\n        if (this._connected !== true) {\n            await this.connect()\n        }\n\n        const stack = this._niceStacks ? new Error().stack : undefined\n\n        const res = await this.network.call(message, params, stack)\n        await this._cachePeersFrom(res)\n\n        // eslint-disable-next-line @typescript-eslint/no-unsafe-return\n        return res\n    }\n\n    /**\n     * Change transport for the client.\n     *\n     * Can be used, for example, to change proxy at runtime\n     *\n     * This effectively calls `changeTransport()` on\n     * `primaryConnection` and all additional connections.\n     *\n     * @param factory  New transport factory\n     */\n    changeTransport(factory: TransportFactory): void {\n        this.network.changeTransport(factory)\n    }\n\n    /**\n     * Register an error handler for the client\n     *\n     * @param handler\n     *     Error handler. Called with one or two parameters.\n     *     The first one is always the error, and the second is\n     *     the connection in which the error has occurred, in case\n     *     this was connection-related error.\n     */\n    onError(handler: (err: unknown, connection?: SessionConnection) => void): void {\n        this._onError = handler\n    }\n\n    notifyLoggedIn(auth: tl.auth.RawAuthorization): void {\n        this.network.notifyLoggedIn(auth)\n        this.emit('logged_in', auth)\n    }\n\n    _emitError(err: unknown, connection?: SessionConnection): void {\n        if (this._onError) {\n            this._onError(err, connection)\n        } else {\n            console.error(err)\n        }\n    }\n\n    /**\n     * Adds all peers from a given object to entity cache in storage.\n     *\n     * @returns  `true` if there were any `min` peers\n     */\n    async _cachePeersFrom(obj: object): Promise<boolean> {\n        const parsedPeers: ITelegramStorage.PeerInfo[] = []\n\n        let hadMin = false\n        let count = 0\n\n        for (const peer of getAllPeersFrom(obj as tl.TlObject)) {\n            if ((peer as any).min) {\n                // absolutely incredible min peer handling, courtesy of levlam.\n                // see this thread: https://t.me/tdlibchat/15084\n                hadMin = true\n                this.log.debug('received min peer: %j', peer)\n                continue\n            }\n\n            count += 1\n\n            switch (peer._) {\n                case 'user':\n                    if (!peer.accessHash) {\n                        this.log.warn('received user without access hash: %j', peer)\n                        continue\n                    }\n\n                    parsedPeers.push({\n                        id: peer.id,\n                        accessHash: peer.accessHash,\n                        username: peer.username?.toLowerCase(),\n                        phone: peer.phone,\n                        type: 'user',\n                        full: peer,\n                    })\n                    break\n                case 'chat':\n                case 'chatForbidden':\n                    parsedPeers.push({\n                        id: -peer.id,\n                        accessHash: Long.ZERO,\n                        type: 'chat',\n                        full: peer,\n                    })\n                    break\n                case 'channel':\n                case 'channelForbidden':\n                    if (!peer.accessHash) {\n                        this.log.warn('received user without access hash: %j', peer)\n                        continue\n                    }\n                    parsedPeers.push({\n                        id: toggleChannelIdMark(peer.id),\n                        accessHash: peer.accessHash,\n                        username: peer._ === 'channel' ? peer.username?.toLowerCase() : undefined,\n                        type: 'channel',\n                        full: peer,\n                    })\n                    break\n            }\n        }\n\n        if (count > 0) {\n            await this.storage.updatePeers(parsedPeers)\n            this.log.debug('cached %d peers', count)\n        }\n\n        return hadMin\n    }\n\n    /**\n     * Export current session to a single *LONG* string, containing\n     * all the needed information.\n     *\n     * > **Warning!** Anyone with this string will be able\n     * > to authorize as you and do anything. Treat this\n     * > as your password, and never give it away!\n     * >\n     * > In case you have accidentally leaked this string,\n     * > make sure to revoke this session in account settings:\n     * > \"Privacy & Security\" > \"Active sessions\" >\n     * > find the one containing `mtcute` > Revoke,\n     * > or, in case this is a bot, revoke bot token\n     * > with [@BotFather](//t.me/botfather)\n     */\n    async exportSession(): Promise<string> {\n        const primaryDcs = await this.storage.getDefaultDcs()\n        if (!primaryDcs) throw new Error('No default DC set')\n\n        const authKey = await this.storage.getAuthKeyFor(primaryDcs.main.id)\n        if (!authKey) throw new Error('Auth key is not ready yet')\n\n        return writeStringSession(this._writerMap, {\n            version: 2,\n            self: await this.storage.getSelf(),\n            testMode: this._testMode,\n            primaryDcs,\n            authKey,\n        })\n    }\n\n    /**\n     * Request the session to be imported from the given session string.\n     *\n     * Note that the string will not be parsed and imported right away,\n     * instead, it will be imported when `connect()` is called\n     *\n     * Also note that the session will only be imported in case\n     * the storage is missing authorization (i.e. does not contain\n     * auth key for the primary DC), otherwise it will be ignored (unless `force).\n     *\n     * @param session  Session string to import\n     * @param force  Whether to overwrite existing session\n     */\n    importSession(session: string, force = false): void {\n        this._importFrom = session\n        this._importForce = force\n    }\n}\n"]}

package/cjs/index.d.ts

@@ -0,0 +1,10 @@
+export * from './base-client.js';
+export * from './network/index.js';
+export * from './storage/index.js';
+export * from './types/index.js';
+export * from './utils/peer-utils.js';
+/** @hidden */
+export * from '@mtcute/tl';
+import Long from 'long';
+/** @hidden */
+export { Long };

package/cjs/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Long = void 0;
+__exportStar(require("./base-client.js"), exports);
+__exportStar(require("./network/index.js"), exports);
+__exportStar(require("./storage/index.js"), exports);
+__exportStar(require("./types/index.js"), exports);
+__exportStar(require("./utils/peer-utils.js"), exports);
+/** @hidden */
+__exportStar(require("@mtcute/tl"), exports);
+const long_1 = __importDefault(require("long"));
+exports.Long = long_1.default;
+//# sourceMappingURL=index.js.map

package/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,mDAAgC;AAChC,qDAAkC;AAClC,qDAAkC;AAClC,mDAAgC;AAChC,wDAAqC;AAErC,cAAc;AACd,6CAA0B;AAC1B,gDAAuB;AAEd,eAFF,cAAI,CAEE","sourcesContent":["export * from './base-client.js'\nexport * from './network/index.js'\nexport * from './storage/index.js'\nexport * from './types/index.js'\nexport * from './utils/peer-utils.js'\n\n/** @hidden */\nexport * from '@mtcute/tl'\nimport Long from 'long'\n/** @hidden */\nexport { Long }\n"]}

package/cjs/network/auth-key.d.ts

@@ -0,0 +1,21 @@
+import Long from 'long';
+import { tl } from '@mtcute/tl';
+import { TlBinaryReader, TlReaderMap } from '@mtcute/tl-runtime';
+import { ICryptoProvider, Logger } from '../utils/index.js';
+export declare class AuthKey {
+    readonly _crypto: ICryptoProvider;
+    readonly log: Logger;
+    readonly _readerMap: TlReaderMap;
+    ready: boolean;
+    key: Uint8Array;
+    id: Uint8Array;
+    clientSalt: Uint8Array;
+    serverSalt: Uint8Array;
+    constructor(_crypto: ICryptoProvider, log: Logger, _readerMap: TlReaderMap);
+    match(keyId: Uint8Array): boolean;
+    setup(authKey?: Uint8Array | null): Promise<void>;
+    encryptMessage(message: Uint8Array, serverSalt: Long, sessionId: Long): Promise<Uint8Array>;
+    decryptMessage(data: Uint8Array, sessionId: Long, callback: (msgId: tl.Long, seqNo: number, data: TlBinaryReader) => void): Promise<void>;
+    copyFrom(authKey: AuthKey): void;
+    reset(): void;
+}

package/cjs/network/auth-key.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthKey = void 0;
+const tl_runtime_1 = require("@mtcute/tl-runtime");
+const errors_js_1 = require("../types/errors.js");
+const mtproto_js_1 = require("../utils/crypto/mtproto.js");
+const index_js_1 = require("../utils/index.js");
+class AuthKey {
+    constructor(_crypto, log, _readerMap) {
+        this._crypto = _crypto;
+        this.log = log;
+        this._readerMap = _readerMap;
+        this.ready = false;
+    }
+    match(keyId) {
+        return this.ready && (0, index_js_1.buffersEqual)(keyId, this.id);
+    }
+    async setup(authKey) {
+        if (!authKey)
+            return this.reset();
+        this.ready = true;
+        this.key = authKey;
+        this.clientSalt = authKey.subarray(88, 120);
+        this.serverSalt = authKey.subarray(96, 128);
+        this.id = (await this._crypto.sha1(authKey)).subarray(-8);
+        this.log.verbose('auth key set up, id = %h', this.id);
+    }
+    async encryptMessage(message, serverSalt, sessionId) {
+        if (!this.ready)
+            throw new errors_js_1.MtcuteError('Keys are not set up!');
+        let padding = (16 /* header size */ + message.length + 12) /* min padding */ % 16;
+        padding = 12 + (padding ? 16 - padding : 0);
+        const buf = new Uint8Array(16 + message.length + padding);
+        const dv = (0, index_js_1.dataViewFromBuffer)(buf);
+        dv.setInt32(0, serverSalt.low, true);
+        dv.setInt32(4, serverSalt.high, true);
+        dv.setInt32(8, sessionId.low, true);
+        dv.setInt32(12, sessionId.high, true);
+        buf.set(message, 16);
+        buf.set((0, index_js_1.randomBytes)(padding), 16 + message.length);
+        const messageKey = (await this._crypto.sha256((0, index_js_1.concatBuffers)([this.clientSalt, buf]))).subarray(8, 24);
+        const ige = await (0, mtproto_js_1.createAesIgeForMessage)(this._crypto, this.key, messageKey, true);
+        const encryptedData = await ige.encrypt(buf);
+        return (0, index_js_1.concatBuffers)([this.id, messageKey, encryptedData]);
+    }
+    async decryptMessage(data, sessionId, callback) {
+        const messageKey = data.subarray(8, 24);
+        let encryptedData = data.subarray(24);
+        const mod16 = encryptedData.byteLength % 16;
+        if (mod16 !== 0) {
+            // strip padding in case of padded transport.
+            // i wish this could be done at transport level, but we can't properly align anything there
+            // because padding size is not known, and transport level should not be aware of MTProto structure
+            encryptedData = encryptedData.subarray(0, encryptedData.byteLength - mod16);
+        }
+        const ige = await (0, mtproto_js_1.createAesIgeForMessage)(this._crypto, this.key, messageKey, false);
+        const innerData = await ige.decrypt(encryptedData);
+        const msgKeySource = await this._crypto.sha256((0, index_js_1.concatBuffers)([this.serverSalt, innerData]));
+        const expectedMessageKey = msgKeySource.subarray(8, 24);
+        if (!(0, index_js_1.buffersEqual)(messageKey, expectedMessageKey)) {
+            this.log.warn('[%h] received message with invalid messageKey = %h (expected %h)', messageKey, expectedMessageKey);
+            return;
+        }
+        const innerReader = new tl_runtime_1.TlBinaryReader(this._readerMap, innerData);
+        innerReader.seek(8); // skip salt
+        const sessionId_ = innerReader.long();
+        const messageId = innerReader.long(true);
+        if (sessionId_.neq(sessionId)) {
+            this.log.warn('ignoring message with invalid sessionId = %h', sessionId_);
+            return;
+        }
+        const seqNo = innerReader.uint();
+        const length = innerReader.uint();
+        if (length > innerData.length - 32 /* header size */) {
+            this.log.warn('ignoring message with invalid length: %d > %d', length, innerData.length - 32);
+            return;
+        }
+        if (length % 4 !== 0) {
+            this.log.warn('ignoring message with invalid length: %d is not a multiple of 4', length);
+            return;
+        }
+        const paddingSize = innerData.length - length - 32; // header size
+        if (paddingSize < 12 || paddingSize > 1024) {
+            this.log.warn('ignoring message with invalid padding size: %d', paddingSize);
+            return;
+        }
+        callback(messageId, seqNo, innerReader);
+    }
+    copyFrom(authKey) {
+        this.ready = authKey.ready;
+        this.key = authKey.key;
+        this.id = authKey.id;
+        this.serverSalt = authKey.serverSalt;
+        this.clientSalt = authKey.clientSalt;
+    }
+    reset() {
+        this.ready = false;
+    }
+}
+exports.AuthKey = AuthKey;
+//# sourceMappingURL=auth-key.js.map

package/cjs/network/auth-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-key.js","sourceRoot":"","sources":["../../../src/network/auth-key.ts"],"names":[],"mappings":";;;AAGA,mDAAgE;AAEhE,kDAAgD;AAChD,2DAAmE;AACnE,gDAAyH;AAEzH,MAAa,OAAO;IAQhB,YACa,OAAwB,EACxB,GAAW,EACX,UAAuB;QAFvB,YAAO,GAAP,OAAO,CAAiB;QACxB,QAAG,GAAH,GAAG,CAAQ;QACX,eAAU,GAAV,UAAU,CAAa;QAVpC,UAAK,GAAG,KAAK,CAAA;IAWV,CAAC;IAEJ,KAAK,CAAC,KAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,IAAI,IAAA,uBAAY,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAA2B;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;QAEjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAA;QAClB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC3C,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAEzD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAmB,EAAE,UAAgB,EAAE,SAAe;QACvE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAW,CAAC,sBAAsB,CAAC,CAAA;QAE9D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAA;QACjF,OAAO,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAE3C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAAA;QACzD,MAAM,EAAE,GAAG,IAAA,6BAAkB,EAAC,GAAG,CAAC,CAAA;QAElC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACpC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACnC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACrC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACpB,GAAG,CAAC,GAAG,CAAC,IAAA,sBAAW,EAAC,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAElD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAA,wBAAa,EAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACrG,MAAM,GAAG,GAAG,MAAM,IAAA,mCAAsB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QAClF,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAE5C,OAAO,IAAA,wBAAa,EAAC,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,cAAc,CAChB,IAAgB,EAChB,SAAe,EACf,QAAuE;QAEvE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACvC,IAAI,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAErC,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,GAAG,EAAE,CAAA;QAE3C,IAAI,KAAK,KAAK,CAAC,EAAE;YACb,6CAA6C;YAC7C,2FAA2F;YAC3F,kGAAkG;YAClG,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,UAAU,GAAG,KAAK,CAAC,CAAA;SAC9E;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,mCAAsB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;QACnF,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAElD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAA,wBAAa,EAAC,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;QAC3F,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAEvD,IAAI,CAAC,IAAA,uBAAY,EAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE;YAC/C,IAAI,CAAC,GAAG,CAAC,IAAI,CACT,kEAAkE,EAClE,UAAU,EACV,kBAAkB,CACrB,CAAA;YAED,OAAM;SACT;QAED,MAAM,WAAW,GAAG,IAAI,2BAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAClE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,YAAY;QAChC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAExC,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE,UAAU,CAAC,CAAA;YAEzE,OAAM;SACT;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;QAEjC,IAAI,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,iBAAiB,EAAE;YAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+CAA+C,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;YAE7F,OAAM;SACT;QAED,IAAI,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE;YAClB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iEAAiE,EAAE,MAAM,CAAC,CAAA;YAExF,OAAM;SACT;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,EAAE,CAAA,CAAC,cAAc;QAEjE,IAAI,WAAW,GAAG,EAAE,IAAI,WAAW,GAAG,IAAI,EAAE;YACxC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE,WAAW,CAAC,CAAA;YAE5E,OAAM;SACT;QAED,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;IAC3C,CAAC;IAED,QAAQ,CAAC,OAAgB;QACrB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC1B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;QACtB,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACxC,CAAC;IAED,KAAK;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;CACJ;AAtID,0BAsIC","sourcesContent":["import Long from 'long'\n\nimport { tl } from '@mtcute/tl'\nimport { TlBinaryReader, TlReaderMap } from '@mtcute/tl-runtime'\n\nimport { MtcuteError } from '../types/errors.js'\nimport { createAesIgeForMessage } from '../utils/crypto/mtproto.js'\nimport { buffersEqual, concatBuffers, dataViewFromBuffer, ICryptoProvider, Logger, randomBytes } from '../utils/index.js'\n\nexport class AuthKey {\n    ready = false\n\n    key!: Uint8Array\n    id!: Uint8Array\n    clientSalt!: Uint8Array\n    serverSalt!: Uint8Array\n\n    constructor(\n        readonly _crypto: ICryptoProvider,\n        readonly log: Logger,\n        readonly _readerMap: TlReaderMap,\n    ) {}\n\n    match(keyId: Uint8Array): boolean {\n        return this.ready && buffersEqual(keyId, this.id)\n    }\n\n    async setup(authKey?: Uint8Array | null): Promise<void> {\n        if (!authKey) return this.reset()\n\n        this.ready = true\n        this.key = authKey\n        this.clientSalt = authKey.subarray(88, 120)\n        this.serverSalt = authKey.subarray(96, 128)\n        this.id = (await this._crypto.sha1(authKey)).subarray(-8)\n\n        this.log.verbose('auth key set up, id = %h', this.id)\n    }\n\n    async encryptMessage(message: Uint8Array, serverSalt: Long, sessionId: Long): Promise<Uint8Array> {\n        if (!this.ready) throw new MtcuteError('Keys are not set up!')\n\n        let padding = (16 /* header size */ + message.length + 12) /* min padding */ % 16\n        padding = 12 + (padding ? 16 - padding : 0)\n\n        const buf = new Uint8Array(16 + message.length + padding)\n        const dv = dataViewFromBuffer(buf)\n\n        dv.setInt32(0, serverSalt.low, true)\n        dv.setInt32(4, serverSalt.high, true)\n        dv.setInt32(8, sessionId.low, true)\n        dv.setInt32(12, sessionId.high, true)\n        buf.set(message, 16)\n        buf.set(randomBytes(padding), 16 + message.length)\n\n        const messageKey = (await this._crypto.sha256(concatBuffers([this.clientSalt, buf]))).subarray(8, 24)\n        const ige = await createAesIgeForMessage(this._crypto, this.key, messageKey, true)\n        const encryptedData = await ige.encrypt(buf)\n\n        return concatBuffers([this.id, messageKey, encryptedData])\n    }\n\n    async decryptMessage(\n        data: Uint8Array,\n        sessionId: Long,\n        callback: (msgId: tl.Long, seqNo: number, data: TlBinaryReader) => void,\n    ): Promise<void> {\n        const messageKey = data.subarray(8, 24)\n        let encryptedData = data.subarray(24)\n\n        const mod16 = encryptedData.byteLength % 16\n\n        if (mod16 !== 0) {\n            // strip padding in case of padded transport.\n            // i wish this could be done at transport level, but we can't properly align anything there\n            // because padding size is not known, and transport level should not be aware of MTProto structure\n            encryptedData = encryptedData.subarray(0, encryptedData.byteLength - mod16)\n        }\n\n        const ige = await createAesIgeForMessage(this._crypto, this.key, messageKey, false)\n        const innerData = await ige.decrypt(encryptedData)\n\n        const msgKeySource = await this._crypto.sha256(concatBuffers([this.serverSalt, innerData]))\n        const expectedMessageKey = msgKeySource.subarray(8, 24)\n\n        if (!buffersEqual(messageKey, expectedMessageKey)) {\n            this.log.warn(\n                '[%h] received message with invalid messageKey = %h (expected %h)',\n                messageKey,\n                expectedMessageKey,\n            )\n\n            return\n        }\n\n        const innerReader = new TlBinaryReader(this._readerMap, innerData)\n        innerReader.seek(8) // skip salt\n        const sessionId_ = innerReader.long()\n        const messageId = innerReader.long(true)\n\n        if (sessionId_.neq(sessionId)) {\n            this.log.warn('ignoring message with invalid sessionId = %h', sessionId_)\n\n            return\n        }\n\n        const seqNo = innerReader.uint()\n        const length = innerReader.uint()\n\n        if (length > innerData.length - 32 /* header size */) {\n            this.log.warn('ignoring message with invalid length: %d > %d', length, innerData.length - 32)\n\n            return\n        }\n\n        if (length % 4 !== 0) {\n            this.log.warn('ignoring message with invalid length: %d is not a multiple of 4', length)\n\n            return\n        }\n\n        const paddingSize = innerData.length - length - 32 // header size\n\n        if (paddingSize < 12 || paddingSize > 1024) {\n            this.log.warn('ignoring message with invalid padding size: %d', paddingSize)\n\n            return\n        }\n\n        callback(messageId, seqNo, innerReader)\n    }\n\n    copyFrom(authKey: AuthKey): void {\n        this.ready = authKey.ready\n        this.key = authKey.key\n        this.id = authKey.id\n        this.serverSalt = authKey.serverSalt\n        this.clientSalt = authKey.clientSalt\n    }\n\n    reset(): void {\n        this.ready = false\n    }\n}\n"]}

package/cjs/network/authorization.d.ts

@@ -0,0 +1,9 @@
+import Long from 'long';
+import { ICryptoProvider } from '../utils/index.js';
+import { SessionConnection } from './session-connection.js';
+/**
+ * Execute authorization flow on `connection` using `crypto`.
+ *
+ * @returns  tuple: [authKey, serverSalt, timeOffset]
+ */
+export declare function doAuthorization(connection: SessionConnection, crypto: ICryptoProvider, expiresIn?: number): Promise<[Uint8Array, Long, number]>;

package/cjs/network/authorization.js

@@ -0,0 +1,332 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.doAuthorization = void 0;
+const big_integer_1 = __importDefault(require("big-integer"));
+const long_1 = __importDefault(require("long"));
+const tl_1 = require("@mtcute/tl");
+const tl_runtime_1 = require("@mtcute/tl-runtime");
+const index_js_1 = require("../types/index.js");
+const buffer_utils_js_1 = require("../utils/buffer-utils.js");
+const keys_js_1 = require("../utils/crypto/keys.js");
+const miller_rabin_js_1 = require("../utils/crypto/miller-rabin.js");
+const mtproto_js_1 = require("../utils/crypto/mtproto.js");
+const utils_js_1 = require("../utils/crypto/utils.js");
+const index_js_2 = require("../utils/index.js");
+const type_assertions_js_1 = require("../utils/type-assertions.js");
+// Heavily based on code from https://github.com/LonamiWebs/Telethon/blob/master/telethon/network/authenticator.py
+// see https://core.telegram.org/mtproto/security_guidelines
+const DH_SAFETY_RANGE = big_integer_1.default[2].pow(2048 - 64);
+const KNOWN_DH_PRIME = (0, big_integer_1.default)('C71CAEB9C6B1C9048E6C522F70F13F73980D40238E3E21C14934D037563D930F48198A0AA7C14058229493D22530F4DBFA336F6E0AC925139543AED44CCE7C3720FD51F69458705AC68CD4FE6B6B13ABDC9746512969328454F18FAF8C595F642477FE96BB2A941D5BCD1D4AC8CC49880708FA9B378E3C4F3A9060BEE67CF9A4A4A695811051907E162753B56B0F6B410DBA74D8A84B2A14B3144E0EF1284754FD17ED950D5965B4B9DD46582DB1178D169C6BC465B0D6FF9CA3928FEF5B9AE4E418FC15E83EBEA0F87FA9FF5EED70050DED2849F47BF959D956850CE929851F0D8115F635B105EE2E4E15D04B2454BF6F4FADF034B10403119CD8E3B92FCC5B', 16);
+const TWO_POW_2047 = big_integer_1.default[2].pow(2047);
+const TWO_POW_2048 = big_integer_1.default[2].pow(2048);
+const checkedPrimesCache = [];
+function checkDhPrime(log, dhPrime, g) {
+    if (KNOWN_DH_PRIME.eq(dhPrime)) {
+        log.debug('server is using known dh prime, skipping validation');
+        return;
+    }
+    let checkedPrime = checkedPrimesCache.find((x) => x.prime.eq(dhPrime));
+    if (!checkedPrime) {
+        if (dhPrime.lesserOrEquals(TWO_POW_2047) || dhPrime.greaterOrEquals(TWO_POW_2048)) {
+            throw new index_js_1.MtSecurityError('Step 3: dh_prime is not in the 2048-bit range');
+        }
+        if (!(0, miller_rabin_js_1.millerRabin)(dhPrime)) {
+            throw new index_js_1.MtSecurityError('Step 3: dh_prime is not prime');
+        }
+        if (!(0, miller_rabin_js_1.millerRabin)(dhPrime.minus(1).divide(2))) {
+            throw new index_js_1.MtSecurityError('Step 3: dh_prime is not a safe prime - (dh_prime-1)/2 is not prime');
+        }
+        log.debug('dh_prime is probably prime');
+        checkedPrime = {
+            prime: dhPrime,
+            generators: [],
+        };
+        checkedPrimesCache.push(checkedPrime);
+    }
+    else {
+        log.debug('dh_prime is probably prime (cached)');
+    }
+    const generatorChecked = checkedPrime.generators.includes(g);
+    if (generatorChecked) {
+        log.debug('g = %d is already checked for dh_prime', g);
+        return;
+    }
+    switch (g) {
+        case 2:
+            if (dhPrime.mod(8).notEquals(7)) {
+                throw new index_js_1.MtSecurityError('Step 3: ivalid g - dh_prime mod 8 != 7');
+            }
+            break;
+        case 3:
+            if (dhPrime.mod(3).notEquals(2)) {
+                throw new index_js_1.MtSecurityError('Step 3: ivalid g - dh_prime mod 3 != 2');
+            }
+            break;
+        case 4:
+            break;
+        case 5: {
+            const mod = dhPrime.mod(5);
+            if (mod.notEquals(1) && mod.notEquals(4)) {
+                throw new index_js_1.MtSecurityError('Step 3: ivalid g - dh_prime mod 5 != 1 && dh_prime mod 5 != 4');
+            }
+            break;
+        }
+        case 6: {
+            const mod = dhPrime.mod(24);
+            if (mod.notEquals(19) && mod.notEquals(23)) {
+                throw new index_js_1.MtSecurityError('Step 3: ivalid g - dh_prime mod 24 != 19 && dh_prime mod 24 != 23');
+            }
+            break;
+        }
+        case 7: {
+            const mod = dhPrime.mod(7);
+            if (mod.notEquals(3) && mod.notEquals(5) && mod.notEquals(6)) {
+                throw new index_js_1.MtSecurityError('Step 3: ivalid g - dh_prime mod 7 != 3 && dh_prime mod 7 != 5 && dh_prime mod 7 != 6');
+            }
+            break;
+        }
+        default:
+            throw new index_js_1.MtSecurityError(`Step 3: ivalid g - unknown g = ${g}`);
+    }
+    checkedPrime.generators.push(g);
+    log.debug('g = %d is safe to use with dh_prime', g);
+}
+async function rsaPad(data, crypto, key) {
+    // since Summer 2021, they use "version of RSA with a variant of OAEP+ padding explained below"
+    const keyModulus = (0, big_integer_1.default)(key.modulus, 16);
+    const keyExponent = (0, big_integer_1.default)(key.exponent, 16);
+    if (data.length > 144) {
+        throw new index_js_1.MtArgumentError('Failed to pad: too big data');
+    }
+    data = (0, buffer_utils_js_1.concatBuffers)([data, (0, buffer_utils_js_1.randomBytes)(192 - data.length)]);
+    for (;;) {
+        const aesIv = new Uint8Array(32);
+        const aesKey = (0, buffer_utils_js_1.randomBytes)(32);
+        const dataWithHash = (0, buffer_utils_js_1.concatBuffers)([data, await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([aesKey, data]))]);
+        // we only need to reverse the data
+        dataWithHash.subarray(0, 192).reverse();
+        const aes = await crypto.createAesIge(aesKey, aesIv);
+        const encrypted = await aes.encrypt(dataWithHash);
+        const encryptedHash = await crypto.sha256(encrypted);
+        (0, utils_js_1.xorBufferInPlace)(aesKey, encryptedHash);
+        const decryptedData = (0, buffer_utils_js_1.concatBuffers)([aesKey, encrypted]);
+        const decryptedDataBigint = (0, index_js_2.bufferToBigInt)(decryptedData);
+        if (decryptedDataBigint.geq(keyModulus)) {
+            continue;
+        }
+        const encryptedBigint = decryptedDataBigint.modPow(keyExponent, keyModulus);
+        return (0, index_js_2.bigIntToBuffer)(encryptedBigint, 256);
+    }
+}
+async function rsaEncrypt(data, crypto, key) {
+    const toEncrypt = (0, buffer_utils_js_1.concatBuffers)([
+        await crypto.sha1(data),
+        data,
+        // sha1 is always 20 bytes, so we're left with 255 - 20 - x padding
+        (0, buffer_utils_js_1.randomBytes)(235 - data.length),
+    ]);
+    const encryptedBigInt = (0, index_js_2.bufferToBigInt)(toEncrypt).modPow((0, big_integer_1.default)(key.exponent, 16), (0, big_integer_1.default)(key.modulus, 16));
+    return (0, index_js_2.bigIntToBuffer)(encryptedBigInt);
+}
+/**
+ * Execute authorization flow on `connection` using `crypto`.
+ *
+ * @returns  tuple: [authKey, serverSalt, timeOffset]
+ */
+async function doAuthorization(connection, crypto, expiresIn) {
+    // eslint-disable-next-line dot-notation
+    const session = connection['_session'];
+    const readerMap = session._readerMap;
+    const writerMap = session._writerMap;
+    const log = connection.log.create('auth');
+    function sendPlainMessage(message) {
+        const length = tl_runtime_1.TlSerializationCounter.countNeededBytes(writerMap, message);
+        const writer = tl_runtime_1.TlBinaryWriter.alloc(writerMap, length + 20); // 20 bytes for mtproto header
+        const messageId = session.getMessageId();
+        log.verbose('[PLAIN] >>> %j', message);
+        writer.long(long_1.default.ZERO);
+        writer.long(messageId);
+        writer.uint(length);
+        writer.object(message);
+        return connection.send(writer.result());
+    }
+    async function readNext() {
+        const res = tl_runtime_1.TlBinaryReader.deserializeObject(readerMap, await connection.waitForUnencryptedMessage(), 20);
+        log.verbose('[PLAIN] <<< %j', res);
+        return res;
+    }
+    if (expiresIn)
+        log.prefix = '[PFS] ';
+    const nonce = (0, buffer_utils_js_1.randomBytes)(16);
+    // Step 1: PQ request
+    log.debug('starting PQ handshake (temp = %b), nonce = %h', expiresIn, nonce);
+    await sendPlainMessage({ _: 'mt_req_pq_multi', nonce });
+    const resPq = await readNext();
+    (0, type_assertions_js_1.mtpAssertTypeIs)('auth step 1', resPq, 'mt_resPQ');
+    if (!(0, buffer_utils_js_1.buffersEqual)(resPq.nonce, nonce)) {
+        throw new index_js_1.MtSecurityError('Step 1: invalid nonce from server');
+    }
+    const serverKeys = resPq.serverPublicKeyFingerprints.map((it) => it.toUnsigned().toString(16));
+    log.debug('received PQ, keys: %j', serverKeys);
+    // Step 2: DH exchange
+    const publicKey = (0, keys_js_1.findKeyByFingerprints)(serverKeys);
+    if (!publicKey) {
+        throw new index_js_1.MtSecurityError('Step 2: Could not find server public key with any of these fingerprints: ' + serverKeys.join(', '));
+    }
+    log.debug('found server key, fp = %s, old = %s', publicKey.fingerprint, publicKey.old);
+    const [p, q] = await crypto.factorizePQ(resPq.pq);
+    log.debug('factorized PQ: PQ = %h, P = %h, Q = %h', resPq.pq, p, q);
+    const newNonce = (0, buffer_utils_js_1.randomBytes)(32);
+    let dcId = connection.params.dc.id;
+    if (connection.params.testMode)
+        dcId += 10000;
+    if (connection.params.dc.mediaOnly)
+        dcId = -dcId;
+    const _pqInnerData = {
+        _: expiresIn ? 'mt_p_q_inner_data_temp_dc' : 'mt_p_q_inner_data_dc',
+        pq: resPq.pq,
+        p,
+        q,
+        nonce,
+        newNonce,
+        serverNonce: resPq.serverNonce,
+        dc: dcId,
+        expiresIn: expiresIn, // whatever
+    };
+    const pqInnerData = tl_runtime_1.TlBinaryWriter.serializeObject(writerMap, _pqInnerData);
+    const encryptedData = publicKey.old ?
+        await rsaEncrypt(pqInnerData, crypto, publicKey) :
+        await rsaPad(pqInnerData, crypto, publicKey);
+    log.debug('requesting DH params');
+    await sendPlainMessage({
+        _: 'mt_req_DH_params',
+        nonce,
+        serverNonce: resPq.serverNonce,
+        p,
+        q,
+        publicKeyFingerprint: long_1.default.fromString(publicKey.fingerprint, true, 16),
+        encryptedData,
+    });
+    const serverDhParams = await readNext();
+    (0, type_assertions_js_1.mtpAssertTypeIs)('auth step 2', serverDhParams, 'mt_server_DH_params_ok');
+    if (!(0, buffer_utils_js_1.buffersEqual)(serverDhParams.nonce, nonce)) {
+        throw new index_js_1.MtSecurityError('Step 2: invalid nonce from server');
+    }
+    if (!(0, buffer_utils_js_1.buffersEqual)(serverDhParams.serverNonce, resPq.serverNonce)) {
+        throw new index_js_1.MtSecurityError('Step 2: invalid server nonce from server');
+    }
+    log.debug('server DH ok');
+    if (serverDhParams.encryptedAnswer.length % 16 !== 0) {
+        throw new index_js_1.MtSecurityError('Step 2: AES block size is invalid');
+    }
+    // Step 3: complete DH exchange
+    const [key, iv] = await (0, mtproto_js_1.generateKeyAndIvFromNonce)(crypto, resPq.serverNonce, newNonce);
+    const ige = await crypto.createAesIge(key, iv);
+    const plainTextAnswer = await ige.decrypt(serverDhParams.encryptedAnswer);
+    const innerDataHash = plainTextAnswer.subarray(0, 20);
+    const serverDhInnerReader = new tl_runtime_1.TlBinaryReader(readerMap, plainTextAnswer, 20);
+    const serverDhInner = serverDhInnerReader.object();
+    if (!(0, buffer_utils_js_1.buffersEqual)(innerDataHash, await crypto.sha1(plainTextAnswer.subarray(20, serverDhInnerReader.pos)))) {
+        throw new index_js_1.MtSecurityError('Step 3: invalid inner data hash');
+    }
+    (0, type_assertions_js_1.mtpAssertTypeIs)('auth step 3', serverDhInner, 'mt_server_DH_inner_data');
+    if (!(0, buffer_utils_js_1.buffersEqual)(serverDhInner.nonce, nonce)) {
+        throw Error('Step 3: invalid nonce from server');
+    }
+    if (!(0, buffer_utils_js_1.buffersEqual)(serverDhInner.serverNonce, resPq.serverNonce)) {
+        throw Error('Step 3: invalid server nonce from server');
+    }
+    const dhPrime = (0, index_js_2.bufferToBigInt)(serverDhInner.dhPrime);
+    const timeOffset = Math.floor(Date.now() / 1000) - serverDhInner.serverTime;
+    const g = (0, big_integer_1.default)(serverDhInner.g);
+    const gA = (0, index_js_2.bufferToBigInt)(serverDhInner.gA);
+    checkDhPrime(log, dhPrime, serverDhInner.g);
+    let retryId = long_1.default.ZERO;
+    const serverSalt = (0, utils_js_1.xorBuffer)(newNonce.subarray(0, 8), resPq.serverNonce.subarray(0, 8));
+    for (;;) {
+        const b = (0, index_js_2.bufferToBigInt)((0, buffer_utils_js_1.randomBytes)(256));
+        const gB = g.modPow(b, dhPrime);
+        const authKey = (0, index_js_2.bigIntToBuffer)(gA.modPow(b, dhPrime));
+        const authKeyAuxHash = (await crypto.sha1(authKey)).subarray(0, 8);
+        // validate DH params
+        if (g.lesserOrEquals(1) || g.greaterOrEquals(dhPrime.minus(big_integer_1.default.one))) {
+            throw new index_js_1.MtSecurityError('g is not within (1, dh_prime - 1)');
+        }
+        if (gA.lesserOrEquals(1) || gA.greaterOrEquals(dhPrime.minus(big_integer_1.default.one))) {
+            throw new index_js_1.MtSecurityError('g_a is not within (1, dh_prime - 1)');
+        }
+        if (gB.lesserOrEquals(1) || gB.greaterOrEquals(dhPrime.minus(big_integer_1.default.one))) {
+            throw new index_js_1.MtSecurityError('g_b is not within (1, dh_prime - 1)');
+        }
+        if (gA.lt(DH_SAFETY_RANGE) || gA.gt(dhPrime.minus(DH_SAFETY_RANGE))) {
+            throw new index_js_1.MtSecurityError('g_a is not within (2^{2048-64}, dh_prime - 2^{2048-64})');
+        }
+        if (gB.lt(DH_SAFETY_RANGE) || gB.gt(dhPrime.minus(DH_SAFETY_RANGE))) {
+            throw new index_js_1.MtSecurityError('g_b is not within (2^{2048-64}, dh_prime - 2^{2048-64})');
+        }
+        const gB_ = (0, index_js_2.bigIntToBuffer)(gB, 0, false);
+        // Step 4: send client DH
+        const clientDhInner = {
+            _: 'mt_client_DH_inner_data',
+            nonce,
+            serverNonce: resPq.serverNonce,
+            retryId,
+            gB: gB_,
+        };
+        let innerLength = tl_runtime_1.TlSerializationCounter.countNeededBytes(writerMap, clientDhInner) + 20; // for hash
+        const innerPaddingLength = innerLength % 16;
+        if (innerPaddingLength > 0)
+            innerLength += 16 - innerPaddingLength;
+        const clientDhInnerWriter = tl_runtime_1.TlBinaryWriter.alloc(writerMap, innerLength);
+        clientDhInnerWriter.pos = 20;
+        clientDhInnerWriter.object(clientDhInner);
+        const clientDhInnerHash = await crypto.sha1(clientDhInnerWriter.uint8View.subarray(20, clientDhInnerWriter.pos));
+        clientDhInnerWriter.pos = 0;
+        clientDhInnerWriter.raw(clientDhInnerHash);
+        log.debug('sending client DH (timeOffset = %d)', timeOffset);
+        const clientDhEncrypted = await ige.encrypt(clientDhInnerWriter.uint8View);
+        await sendPlainMessage({
+            _: 'mt_set_client_DH_params',
+            nonce,
+            serverNonce: resPq.serverNonce,
+            encryptedData: clientDhEncrypted,
+        });
+        const dhGen = await readNext();
+        if (!tl_1.mtp.isAnySet_client_DH_params_answer(dhGen)) {
+            throw new index_js_1.MtTypeAssertionError('auth step 4', 'set_client_DH_params_answer', dhGen._);
+        }
+        if (!(0, buffer_utils_js_1.buffersEqual)(dhGen.nonce, nonce)) {
+            throw Error('Step 4: invalid nonce from server');
+        }
+        if (!(0, buffer_utils_js_1.buffersEqual)(dhGen.serverNonce, resPq.serverNonce)) {
+            throw Error('Step 4: invalid server nonce from server');
+        }
+        log.debug('DH result: %s', dhGen._);
+        if (dhGen._ === 'mt_dh_gen_fail') {
+            // in theory i would be supposed to calculate newNonceHash, but why, we are failing anyway
+            throw new index_js_1.MtTypeAssertionError('auth step 4', '!mt_dh_gen_fail', dhGen._);
+        }
+        if (dhGen._ === 'mt_dh_gen_retry') {
+            const expectedHash = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, new Uint8Array([2]), authKeyAuxHash]));
+            if (!(0, buffer_utils_js_1.buffersEqual)(expectedHash.subarray(4, 20), dhGen.newNonceHash2)) {
+                throw Error('Step 4: invalid retry nonce hash from server');
+            }
+            retryId = long_1.default.fromBytesLE(authKeyAuxHash);
+            continue;
+        }
+        if (dhGen._ !== 'mt_dh_gen_ok')
+            throw new Error(); // unreachable
+        const expectedHash = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, new Uint8Array([1]), authKeyAuxHash]));
+        if (!(0, buffer_utils_js_1.buffersEqual)(expectedHash.subarray(4, 20), dhGen.newNonceHash1)) {
+            throw Error('Step 4: invalid nonce hash from server');
+        }
+        log.info('authorization successful');
+        const dv = (0, buffer_utils_js_1.dataViewFromBuffer)(serverSalt);
+        return [authKey, new long_1.default(dv.getInt32(0, true), dv.getInt32(4, true)), timeOffset];
+    }
+}
+exports.doAuthorization = doAuthorization;
+//# sourceMappingURL=authorization.js.map