@mtcute/core 0.6.0 → 0.7.1

package/esm/highlevel/worker/port.js

@@ -0,0 +1,90 @@
+import { LogManager } from '../../utils/logger.js';
+import { PeersIndex } from '../types/peers/peers-index.js';
+import { AppConfigManagerProxy } from './app-config.js';
+import { WorkerInvoker } from './invoker.js';
+import { connectToWorker } from './platform/connect.js';
+import { TelegramStorageProxy } from './storage.js';
+export class TelegramWorkerPort {
+    constructor(options) {
+        this.options = options;
+        this.log = new LogManager('worker');
+        this._serverUpdatesHandler = () => { };
+        this._errorHandler = () => { };
+        this._updateHandler = () => { };
+        this._onMessage = (message) => {
+            switch (message.type) {
+                case 'log':
+                    this.log.handler(message.color, message.level, message.tag, message.fmt, message.args);
+                    break;
+                case 'server_update':
+                    this._serverUpdatesHandler(message.update);
+                    break;
+                case 'update': {
+                    const peers = new PeersIndex(message.users, message.chats);
+                    peers.hasMin = message.hasMin;
+                    this._updateHandler(message.update, peers);
+                    break;
+                }
+                case 'result':
+                    this._invoker.handleResult(message);
+                    break;
+                case 'error':
+                    this.emitError(message.error);
+                    break;
+            }
+        };
+        this._connection = connectToWorker(this.options.worker, this._onMessage);
+        this._invoker = new WorkerInvoker(this._connection[0]);
+        this._bind = this._invoker.makeBinder('client');
+        this.storage = new TelegramStorageProxy(this._invoker);
+        this.appConfig = new AppConfigManagerProxy(this._invoker);
+        this._destroyed = false;
+        this.prepare = this._bind('prepare');
+        this._connect = this._bind('connect');
+        this.close = this._bind('close');
+        this.notifyLoggedIn = this._bind('notifyLoggedIn');
+        this.notifyLoggedOut = this._bind('notifyLoggedOut');
+        this.notifyChannelOpened = this._bind('notifyChannelOpened');
+        this.notifyChannelClosed = this._bind('notifyChannelClosed');
+        this.call = this._bind('call');
+        this.importSession = this._bind('importSession');
+        this.exportSession = this._bind('exportSession');
+        this.handleClientUpdate = this._bind('handleClientUpdate', true);
+        this.getApiCrenetials = this._bind('getApiCrenetials');
+        this.getPoolSize = this._bind('getPoolSize');
+        this.getPrimaryDcId = this._bind('getPrimaryDcId');
+        this.computeSrpParams = this._bind('computeSrpParams');
+        this.computeNewPasswordHash = this._bind('computeNewPasswordHash');
+        this.startUpdatesLoop = this._bind('startUpdatesLoop');
+        this.stopUpdatesLoop = this._bind('stopUpdatesLoop');
+    }
+    onServerUpdate(handler) {
+        this._serverUpdatesHandler = handler;
+    }
+    onError(handler) {
+        this._errorHandler = handler;
+    }
+    emitError(err) {
+        this._errorHandler(err);
+    }
+    onUpdate(handler) {
+        this._updateHandler = handler;
+    }
+    destroy(terminate = false) {
+        if (this._destroyed)
+            return;
+        this._connection[1]();
+        this._destroyed = true;
+        if (terminate && 'terminate' in this.options.worker) {
+            Promise.resolve(this.options.worker.terminate()).catch(() => { });
+        }
+    }
+    invokeCustom(method, ...args) {
+        return this._invoker.invoke('custom', method, args);
+    }
+    async connect() {
+        await this._connect();
+        await this.storage.self.fetch(); // force cache self locally
+    }
+}
+//# sourceMappingURL=port.js.map

package/esm/highlevel/worker/port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.js","sourceRoot":"","sources":["../../../../src/highlevel/worker/port.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAMnD,MAAM,OAAO,kBAAkB;IAC3B,YAAqB,OAAkC;QAAlC,YAAO,GAAP,OAAO,CAA2B;QAE9C,QAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;QAE/B,0BAAqB,GAAsC,GAAG,EAAE,GAAE,CAAC,CAAA;QAKnE,kBAAa,GAA2B,GAAG,EAAE,GAAE,CAAC,CAAA;QAQhD,mBAAc,GAAqB,GAAG,EAAE,GAAE,CAAC,CAAA;QAK3C,eAAU,GAAyB,CAAC,OAAO,EAAE,EAAE;YACnD,QAAQ,OAAO,CAAC,IAAI,EAAE;gBAClB,KAAK,KAAK;oBACN,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;oBACtF,MAAK;gBACT,KAAK,eAAe;oBAChB,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;oBAC1C,MAAK;gBACT,KAAK,QAAQ,CAAC,CAAC;oBACX,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;oBAC1D,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;oBAC7B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;oBAC1C,MAAK;iBACR;gBACD,KAAK,QAAQ;oBACT,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;oBACnC,MAAK;gBACT,KAAK,OAAO;oBACR,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;oBAC7B,MAAK;aACZ;QACL,CAAC,CAAA;QAEO,gBAAW,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACnE,aAAQ,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;QACjD,UAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAkB,QAAQ,CAAC,CAAA;QAE1D,YAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACjD,cAAS,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAErD,eAAU,GAAG,KAAK,CAAA;QAejB,YAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAChC,aAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAK/B,UAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3B,mBAAc,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAC7C,oBAAe,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC/C,wBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACvD,wBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACvD,SAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,kBAAa,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAC3C,kBAAa,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAC3C,uBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;QAC3D,qBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACjD,gBAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QACvC,mBAAc,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAC7C,qBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACjD,2BAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC7D,qBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACjD,oBAAe,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAxFE,CAAC;IAK3D,cAAc,CAAC,OAA0C;QACrD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAA;IACxC,CAAC;IAGD,OAAO,CAAC,OAA+B;QACnC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAA;IAChC,CAAC;IACD,SAAS,CAAC,GAAY;QAClB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAGD,QAAQ,CAAC,OAAyB;QAC9B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAA;IACjC,CAAC;IAiCD,OAAO,CAAC,SAAS,GAAG,KAAK;QACrB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAM;QAC3B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QAEtB,IAAI,SAAS,IAAI,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YACjD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;SACnE;IACL,CAAC;IAED,YAAY,CAAyB,MAAS,EAAE,GAAG,IAA2B;QAC1E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAgB,EAAE,IAAI,CAAmC,CAAA;IACnG,CAAC;IAID,KAAK,CAAC,OAAO;QACT,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA,CAAC,2BAA2B;IAC/D,CAAC;CAiBJ","sourcesContent":["import { tl } from '@mtcute/tl'\n\nimport { LogManager } from '../../utils/logger.js'\nimport { ITelegramClient } from '../client.types.js'\nimport { PeersIndex } from '../types/peers/peers-index.js'\nimport { RawUpdateHandler } from '../updates/types.js'\nimport { AppConfigManagerProxy } from './app-config.js'\nimport { WorkerInvoker } from './invoker.js'\nimport { connectToWorker } from './platform/connect.js'\nimport { ClientMessageHandler, SomeWorker, WorkerCustomMethods } from './protocol.js'\nimport { TelegramStorageProxy } from './storage.js'\n\nexport interface TelegramWorkerPortOptions {\n    worker: SomeWorker\n}\n\nexport class TelegramWorkerPort<Custom extends WorkerCustomMethods> implements ITelegramClient {\n    constructor(readonly options: TelegramWorkerPortOptions) {}\n\n    readonly log = new LogManager('worker')\n\n    private _serverUpdatesHandler: (updates: tl.TypeUpdates) => void = () => {}\n    onServerUpdate(handler: (updates: tl.TypeUpdates) => void): void {\n        this._serverUpdatesHandler = handler\n    }\n\n    private _errorHandler: (err: unknown) => void = () => {}\n    onError(handler: (err: unknown) => void): void {\n        this._errorHandler = handler\n    }\n    emitError(err: unknown): void {\n        this._errorHandler(err)\n    }\n\n    private _updateHandler: RawUpdateHandler = () => {}\n    onUpdate(handler: RawUpdateHandler): void {\n        this._updateHandler = handler\n    }\n\n    private _onMessage: ClientMessageHandler = (message) => {\n        switch (message.type) {\n            case 'log':\n                this.log.handler(message.color, message.level, message.tag, message.fmt, message.args)\n                break\n            case 'server_update':\n                this._serverUpdatesHandler(message.update)\n                break\n            case 'update': {\n                const peers = new PeersIndex(message.users, message.chats)\n                peers.hasMin = message.hasMin\n                this._updateHandler(message.update, peers)\n                break\n            }\n            case 'result':\n                this._invoker.handleResult(message)\n                break\n            case 'error':\n                this.emitError(message.error)\n                break\n        }\n    }\n\n    private _connection = connectToWorker(this.options.worker, this._onMessage)\n    private _invoker = new WorkerInvoker(this._connection[0])\n    private _bind = this._invoker.makeBinder<ITelegramClient>('client')\n\n    readonly storage = new TelegramStorageProxy(this._invoker)\n    readonly appConfig = new AppConfigManagerProxy(this._invoker)\n\n    private _destroyed = false\n    destroy(terminate = false): void {\n        if (this._destroyed) return\n        this._connection[1]()\n        this._destroyed = true\n\n        if (terminate && 'terminate' in this.options.worker) {\n            Promise.resolve(this.options.worker.terminate()).catch(() => {})\n        }\n    }\n\n    invokeCustom<T extends keyof Custom>(method: T, ...args: Parameters<Custom[T]>): Promise<ReturnType<Custom[T]>> {\n        return this._invoker.invoke('custom', method as string, args) as Promise<ReturnType<Custom[T]>>\n    }\n\n    readonly prepare = this._bind('prepare')\n    private _connect = this._bind('connect')\n    async connect(): Promise<void> {\n        await this._connect()\n        await this.storage.self.fetch() // force cache self locally\n    }\n    readonly close = this._bind('close')\n    readonly notifyLoggedIn = this._bind('notifyLoggedIn')\n    readonly notifyLoggedOut = this._bind('notifyLoggedOut')\n    readonly notifyChannelOpened = this._bind('notifyChannelOpened')\n    readonly notifyChannelClosed = this._bind('notifyChannelClosed')\n    readonly call = this._bind('call')\n    readonly importSession = this._bind('importSession')\n    readonly exportSession = this._bind('exportSession')\n    readonly handleClientUpdate = this._bind('handleClientUpdate', true)\n    readonly getApiCrenetials = this._bind('getApiCrenetials')\n    readonly getPoolSize = this._bind('getPoolSize')\n    readonly getPrimaryDcId = this._bind('getPrimaryDcId')\n    readonly computeSrpParams = this._bind('computeSrpParams')\n    readonly computeNewPasswordHash = this._bind('computeNewPasswordHash')\n    readonly startUpdatesLoop = this._bind('startUpdatesLoop')\n    readonly stopUpdatesLoop = this._bind('stopUpdatesLoop')\n}\n"]}

package/esm/highlevel/worker/protocol.d.ts

@@ -0,0 +1,43 @@
+/// <reference types="node" resolution-mode="require"/>
+import type { Worker as NodeWorker } from 'worker_threads';
+import { tl } from '@mtcute/tl';
+import { SerializedError } from './errors.js';
+export type WorkerInboundMessage = {
+    type: 'invoke';
+    id: number;
+    target: 'custom' | 'client' | 'storage' | 'storage-self' | 'storage-peers' | 'app-config';
+    method: string;
+    args: unknown[];
+    void: boolean;
+};
+export type WorkerOutboundMessage = {
+    type: 'server_update';
+    update: tl.TypeUpdates;
+} | {
+    type: 'update';
+    update: tl.TypeUpdate;
+    users: Map<number, tl.TypeUser>;
+    chats: Map<number, tl.TypeChat>;
+    hasMin: boolean;
+} | {
+    type: 'error';
+    error: unknown;
+} | {
+    type: 'log';
+    color: number;
+    level: number;
+    tag: string;
+    fmt: string;
+    args: unknown[];
+} | {
+    type: 'result';
+    id: number;
+    result?: unknown;
+    error?: SerializedError;
+};
+export type SomeWorker = NodeWorker | Worker | SharedWorker;
+export type SendFn = (message: WorkerInboundMessage) => void;
+export type ClientMessageHandler = (message: WorkerOutboundMessage) => void;
+export type RespondFn = (message: WorkerOutboundMessage) => void;
+export type WorkerMessageHandler = (message: WorkerInboundMessage, respond: RespondFn) => void;
+export type WorkerCustomMethods = Record<string, (...args: unknown[]) => Promise<unknown>>;

package/esm/highlevel/worker/protocol.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=protocol.js.map

package/esm/highlevel/worker/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../src/highlevel/worker/protocol.ts"],"names":[],"mappings":"","sourcesContent":["import type { Worker as NodeWorker } from 'worker_threads'\n\nimport { tl } from '@mtcute/tl'\n\nimport { SerializedError } from './errors.js'\n\nexport type WorkerInboundMessage = {\n    type: 'invoke'\n    id: number\n    target: 'custom' | 'client' | 'storage' | 'storage-self' | 'storage-peers' | 'app-config'\n    method: string\n    args: unknown[]\n    void: boolean\n}\n\nexport type WorkerOutboundMessage =\n    | { type: 'server_update'; update: tl.TypeUpdates }\n    | {\n          type: 'update'\n          update: tl.TypeUpdate\n          users: Map<number, tl.TypeUser>\n          chats: Map<number, tl.TypeChat>\n          hasMin: boolean\n      }\n    | { type: 'error'; error: unknown }\n    | {\n          type: 'log'\n          color: number\n          level: number\n          tag: string\n          fmt: string\n          args: unknown[]\n      }\n    | {\n          type: 'result'\n          id: number\n          result?: unknown\n          error?: SerializedError\n      }\n\nexport type SomeWorker = NodeWorker | Worker | SharedWorker\n\nexport type SendFn = (message: WorkerInboundMessage) => void\nexport type ClientMessageHandler = (message: WorkerOutboundMessage) => void\n\nexport type RespondFn = (message: WorkerOutboundMessage) => void\nexport type WorkerMessageHandler = (message: WorkerInboundMessage, respond: RespondFn) => void\n\nexport type WorkerCustomMethods = Record<string, (...args: unknown[]) => Promise<unknown>>\n"]}

package/esm/highlevel/worker/storage.d.ts

@@ -0,0 +1,43 @@
+import { tl } from '@mtcute/tl';
+import { PublicPart } from '../../types/utils.js';
+import type { CurrentUserInfo, CurrentUserService } from '../storage/service/current-user.js';
+import type { PeersService } from '../storage/service/peers.js';
+import { TelegramStorageManager } from '../storage/storage.js';
+import { WorkerInvoker } from './invoker.js';
+declare class CurrentUserServiceProxy implements PublicPart<CurrentUserService> {
+    private _invoker;
+    constructor(_invoker: WorkerInvoker);
+    private _bind;
+    private _cached?;
+    private _store;
+    store(info: CurrentUserInfo | null): Promise<void>;
+    private _storeFrom;
+    storeFrom(user: tl.TypeUser): Promise<CurrentUserInfo>;
+    private _fetch;
+    fetch(): Promise<CurrentUserInfo | null>;
+    getCached(safe?: boolean): CurrentUserInfo | null;
+    private _update;
+    update(params: Parameters<CurrentUserService['update']>[0]): Promise<void>;
+}
+declare class PeersServiceProxy implements PublicPart<PeersService> {
+    private _invoker;
+    constructor(_invoker: WorkerInvoker);
+    private _bind;
+    readonly updatePeersFrom: (obj: tl.TlObject | tl.TlObject[]) => Promise<boolean>;
+    readonly store: (peer: tl.TypeUser | tl.TypeChat) => Promise<void>;
+    readonly getById: (id: number, allowRefs?: boolean) => Promise<tl.TypeInputPeer | null>;
+    readonly getByPhone: (phone: string) => Promise<tl.TypeInputPeer | null>;
+    readonly getByUsername: (username: string) => Promise<tl.TypeInputPeer | null>;
+    readonly getCompleteById: (id: number) => Promise<tl.TypeUser | tl.TypeChat | null>;
+}
+export declare class TelegramStorageProxy implements PublicPart<TelegramStorageManager> {
+    private _invoker;
+    constructor(_invoker: WorkerInvoker);
+    private _bind;
+    readonly updates: never;
+    readonly refMsgs: never;
+    readonly self: CurrentUserServiceProxy;
+    readonly peers: PeersServiceProxy;
+    readonly clear: (withAuthKeys?: boolean) => Promise<void>;
+}
+export {};

package/esm/highlevel/worker/storage.js

@@ -0,0 +1,62 @@
+import { MtArgumentError } from '../../types/errors.js';
+class CurrentUserServiceProxy {
+    constructor(_invoker) {
+        this._invoker = _invoker;
+        this._bind = this._invoker.makeBinder('storage-self');
+        this._store = this._bind('store');
+        this._storeFrom = this._bind('storeFrom');
+        this._fetch = this._bind('fetch');
+        this._update = this._bind('update');
+    }
+    async store(info) {
+        await this._store(info);
+        this._cached = info;
+    }
+    async storeFrom(user) {
+        this._cached = await this._storeFrom(user);
+        return this._cached;
+    }
+    async fetch() {
+        if (this._cached)
+            return this._cached;
+        this._cached = await this._fetch();
+        return this._cached;
+    }
+    getCached(safe) {
+        if (this._cached === undefined) {
+            if (safe)
+                return null;
+            throw new MtArgumentError('User info is not cached yet');
+        }
+        return this._cached;
+    }
+    async update(params) {
+        await this._update(params);
+        this._cached = await this._fetch();
+    }
+}
+class PeersServiceProxy {
+    constructor(_invoker) {
+        this._invoker = _invoker;
+        this._bind = this._invoker.makeBinder('storage-peers');
+        this.updatePeersFrom = this._bind('updatePeersFrom');
+        this.store = this._bind('store');
+        this.getById = this._bind('getById');
+        this.getByPhone = this._bind('getByPhone');
+        this.getByUsername = this._bind('getByUsername');
+        this.getCompleteById = this._bind('getCompleteById');
+    }
+}
+export class TelegramStorageProxy {
+    constructor(_invoker) {
+        this._invoker = _invoker;
+        this._bind = this._invoker.makeBinder('storage');
+        // todo - remove once we move these to updates manager
+        this.updates = null;
+        this.refMsgs = null;
+        this.self = new CurrentUserServiceProxy(this._invoker);
+        this.peers = new PeersServiceProxy(this._invoker);
+        this.clear = this._bind('clear');
+    }
+}
+//# sourceMappingURL=storage.js.map

package/esm/highlevel/worker/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../../src/highlevel/worker/storage.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAOvD,MAAM,uBAAuB;IACzB,YAAoB,QAAuB;QAAvB,aAAQ,GAAR,QAAQ,CAAe;QACnC,UAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAqB,cAAc,CAAC,CAAA;QAIpE,WAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAM5B,eAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAOpC,WAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAmB5B,YAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IArCQ,CAAC;IAM/C,KAAK,CAAC,KAAK,CAAC,IAA4B;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACvB,CAAC;IAGD,KAAK,CAAC,SAAS,CAAC,IAAiB;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAE1C,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAGD,KAAK,CAAC,KAAK;QACP,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QAErC,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QAElC,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAED,SAAS,CAAC,IAAc;QACpB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;YAC5B,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAA;YAErB,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;SAC3D;QAED,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,MAAmD;QAC5D,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;IACtC,CAAC;CACJ;AAED,MAAM,iBAAiB;IACnB,YAAoB,QAAuB;QAAvB,aAAQ,GAAR,QAAQ,CAAe;QACnC,UAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAe,eAAe,CAAC,CAAA;QAE9D,oBAAe,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC/C,UAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3B,YAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC/B,eAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QACrC,kBAAa,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAC3C,oBAAe,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IARV,CAAC;CASlD;AAED,MAAM,OAAO,oBAAoB;IAC7B,YAAoB,QAAuB;QAAvB,aAAQ,GAAR,QAAQ,CAAe;QAEnC,UAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAyB,SAAS,CAAC,CAAA;QAE3E,sDAAsD;QAC7C,YAAO,GAAG,IAAa,CAAA;QACvB,YAAO,GAAG,IAAa,CAAA;QAEvB,SAAI,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACjD,UAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE5C,UAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAXU,CAAC;CAYlD","sourcesContent":["import { tl } from '@mtcute/tl'\n\nimport { MtArgumentError } from '../../types/errors.js'\nimport { PublicPart } from '../../types/utils.js'\nimport type { CurrentUserInfo, CurrentUserService } from '../storage/service/current-user.js'\nimport type { PeersService } from '../storage/service/peers.js'\nimport { TelegramStorageManager } from '../storage/storage.js'\nimport { WorkerInvoker } from './invoker.js'\n\nclass CurrentUserServiceProxy implements PublicPart<CurrentUserService> {\n    constructor(private _invoker: WorkerInvoker) {}\n    private _bind = this._invoker.makeBinder<CurrentUserService>('storage-self')\n\n    private _cached?: CurrentUserInfo | null\n\n    private _store = this._bind('store')\n    async store(info: CurrentUserInfo | null): Promise<void> {\n        await this._store(info)\n        this._cached = info\n    }\n\n    private _storeFrom = this._bind('storeFrom')\n    async storeFrom(user: tl.TypeUser): Promise<CurrentUserInfo> {\n        this._cached = await this._storeFrom(user)\n\n        return this._cached\n    }\n\n    private _fetch = this._bind('fetch')\n    async fetch(): Promise<CurrentUserInfo | null> {\n        if (this._cached) return this._cached\n\n        this._cached = await this._fetch()\n\n        return this._cached\n    }\n\n    getCached(safe?: boolean): CurrentUserInfo | null {\n        if (this._cached === undefined) {\n            if (safe) return null\n\n            throw new MtArgumentError('User info is not cached yet')\n        }\n\n        return this._cached\n    }\n\n    private _update = this._bind('update')\n    async update(params: Parameters<CurrentUserService['update']>[0]): Promise<void> {\n        await this._update(params)\n        this._cached = await this._fetch()\n    }\n}\n\nclass PeersServiceProxy implements PublicPart<PeersService> {\n    constructor(private _invoker: WorkerInvoker) {}\n    private _bind = this._invoker.makeBinder<PeersService>('storage-peers')\n\n    readonly updatePeersFrom = this._bind('updatePeersFrom')\n    readonly store = this._bind('store')\n    readonly getById = this._bind('getById')\n    readonly getByPhone = this._bind('getByPhone')\n    readonly getByUsername = this._bind('getByUsername')\n    readonly getCompleteById = this._bind('getCompleteById')\n}\n\nexport class TelegramStorageProxy implements PublicPart<TelegramStorageManager> {\n    constructor(private _invoker: WorkerInvoker) {}\n\n    private _bind = this._invoker.makeBinder<TelegramStorageManager>('storage')\n\n    // todo - remove once we move these to updates manager\n    readonly updates = null as never\n    readonly refMsgs = null as never\n\n    readonly self = new CurrentUserServiceProxy(this._invoker)\n    readonly peers = new PeersServiceProxy(this._invoker)\n\n    readonly clear = this._bind('clear')\n}\n"]}

package/esm/highlevel/worker/worker.d.ts

@@ -0,0 +1,7 @@
+import { BaseTelegramClient, BaseTelegramClientOptions } from '../base.js';
+import { WorkerCustomMethods } from './protocol.js';
+export interface TelegramWorkerOptions<T extends WorkerCustomMethods> {
+    client: BaseTelegramClient | BaseTelegramClientOptions;
+    customMethods?: T;
+}
+export declare function makeTelegramWorker<T extends WorkerCustomMethods>(params: TelegramWorkerOptions<T>): void;

package/esm/highlevel/worker/worker.js

@@ -0,0 +1,103 @@
+import { BaseTelegramClient } from '../base.js';
+import { serializeError } from './errors.js';
+import { registerWorker } from './platform/register.js';
+export function makeTelegramWorker(params) {
+    const { client: client_, customMethods } = params;
+    const client = client_ instanceof BaseTelegramClient ? client_ : new BaseTelegramClient(client_);
+    const onInvoke = (msg, respond) => {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        let target;
+        switch (msg.target) {
+            case 'custom':
+                target = customMethods;
+                break;
+            case 'client':
+                target = client;
+                break;
+            case 'storage':
+                target = client.storage;
+                break;
+            case 'storage-self':
+                target = client.storage.self;
+                break;
+            case 'storage-peers':
+                target = client.storage.peers;
+                break;
+            case 'app-config':
+                target = client.appConfig;
+                break;
+            default: {
+                respond({
+                    type: 'result',
+                    id: msg.id,
+                    error: new Error(`Unknown target ${msg.target}`),
+                });
+                return;
+            }
+        }
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+        const method = target[msg.method];
+        if (!method) {
+            respond({
+                type: 'result',
+                id: msg.id,
+                error: new Error(`Method ${msg.method} not found on ${msg.target}`),
+            });
+            return;
+        }
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-call
+        Promise.resolve(method.apply(target, msg.args))
+            .then((res) => {
+            if (msg.void)
+                return;
+            respond({
+                type: 'result',
+                id: msg.id,
+                result: res,
+            });
+        })
+            .catch((err) => {
+            respond({
+                type: 'result',
+                id: msg.id,
+                error: serializeError(err),
+            });
+        });
+    };
+    const onMessage = (message, respond) => {
+        switch (message.type) {
+            case 'invoke':
+                onInvoke(message, respond);
+                break;
+        }
+    };
+    const broadcast = registerWorker(onMessage);
+    client.log.mgr.handler = (color, level, tag, fmt, args) => broadcast({
+        type: 'log',
+        color,
+        level,
+        tag,
+        fmt,
+        args,
+    });
+    client.onError((err) => broadcast({
+        type: 'error',
+        error: err,
+    }));
+    if (client.updates) {
+        client.onUpdate((update, peers) => broadcast({
+            type: 'update',
+            update,
+            users: peers.users,
+            chats: peers.chats,
+            hasMin: peers.hasMin,
+        }));
+    }
+    else {
+        client.onServerUpdate((update) => broadcast({
+            type: 'server_update',
+            update,
+        }));
+    }
+}
+//# sourceMappingURL=worker.js.map

package/esm/highlevel/worker/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../../../src/highlevel/worker/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA6B,MAAM,YAAY,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAQvD,MAAM,UAAU,kBAAkB,CAAgC,MAAgC;IAC9F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAEjD,MAAM,MAAM,GAAG,OAAO,YAAY,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAEhG,MAAM,QAAQ,GAAG,CAAC,GAAsD,EAAE,OAAkB,EAAE,EAAE;QAC5F,8DAA8D;QAC9D,IAAI,MAAW,CAAA;QAEf,QAAQ,GAAG,CAAC,MAAM,EAAE;YAChB,KAAK,QAAQ;gBACT,MAAM,GAAG,aAAa,CAAA;gBACtB,MAAK;YACT,KAAK,QAAQ;gBACT,MAAM,GAAG,MAAM,CAAA;gBACf,MAAK;YACT,KAAK,SAAS;gBACV,MAAM,GAAG,MAAM,CAAC,OAAO,CAAA;gBACvB,MAAK;YACT,KAAK,cAAc;gBACf,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAA;gBAC5B,MAAK;YACT,KAAK,eAAe;gBAChB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAA;gBAC7B,MAAK;YACT,KAAK,YAAY;gBACb,MAAM,GAAG,MAAM,CAAC,SAAS,CAAA;gBACzB,MAAK;YAET,OAAO,CAAC,CAAC;gBACL,OAAO,CAAC;oBACJ,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,KAAK,EAAE,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC;iBACnD,CAAC,CAAA;gBAEF,OAAM;aACT;SACJ;QAED,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAEjC,IAAI,CAAC,MAAM,EAAE;YACT,OAAO,CAAC;gBACJ,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC;aACtE,CAAC,CAAA;YAEF,OAAM;SACT;QAED,6DAA6D;QAC7D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;aAC1C,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACV,IAAI,GAAG,CAAC,IAAI;gBAAE,OAAM;YAEpB,OAAO,CAAC;gBACJ,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,GAAG;aACd,CAAC,CAAA;QACN,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,OAAO,CAAC;gBACJ,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC;aAC7B,CAAC,CAAA;QACN,CAAC,CAAC,CAAA;IACV,CAAC,CAAA;IAED,MAAM,SAAS,GAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QACzD,QAAQ,OAAO,CAAC,IAAI,EAAE;YAClB,KAAK,QAAQ;gBACT,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC1B,MAAK;SACZ;IACL,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IAE3C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CACtD,SAAS,CAAC;QACN,IAAI,EAAE,KAAK;QACX,KAAK;QACL,KAAK;QACL,GAAG;QACH,GAAG;QACH,IAAI;KACP,CAAC,CAAA;IACN,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACnB,SAAS,CAAC;QACN,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,GAAG;KACb,CAAC,CACL,CAAA;IAED,IAAI,MAAM,CAAC,OAAO,EAAE;QAChB,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC9B,SAAS,CAAC;YACN,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CACL,CAAA;KACJ;SAAM;QACH,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7B,SAAS,CAAC;YACN,IAAI,EAAE,eAAe;YACrB,MAAM;SACT,CAAC,CACL,CAAA;KACJ;AACL,CAAC","sourcesContent":["import { BaseTelegramClient, BaseTelegramClientOptions } from '../base.js'\nimport { serializeError } from './errors.js'\nimport { registerWorker } from './platform/register.js'\nimport { RespondFn, WorkerCustomMethods, WorkerInboundMessage, WorkerMessageHandler } from './protocol.js'\n\nexport interface TelegramWorkerOptions<T extends WorkerCustomMethods> {\n    client: BaseTelegramClient | BaseTelegramClientOptions\n    customMethods?: T\n}\n\nexport function makeTelegramWorker<T extends WorkerCustomMethods>(params: TelegramWorkerOptions<T>) {\n    const { client: client_, customMethods } = params\n\n    const client = client_ instanceof BaseTelegramClient ? client_ : new BaseTelegramClient(client_)\n\n    const onInvoke = (msg: Extract<WorkerInboundMessage, { type: 'invoke' }>, respond: RespondFn) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        let target: any\n\n        switch (msg.target) {\n            case 'custom':\n                target = customMethods\n                break\n            case 'client':\n                target = client\n                break\n            case 'storage':\n                target = client.storage\n                break\n            case 'storage-self':\n                target = client.storage.self\n                break\n            case 'storage-peers':\n                target = client.storage.peers\n                break\n            case 'app-config':\n                target = client.appConfig\n                break\n\n            default: {\n                respond({\n                    type: 'result',\n                    id: msg.id,\n                    error: new Error(`Unknown target ${msg.target}`),\n                })\n\n                return\n            }\n        }\n\n        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment\n        const method = target[msg.method]\n\n        if (!method) {\n            respond({\n                type: 'result',\n                id: msg.id,\n                error: new Error(`Method ${msg.method} not found on ${msg.target}`),\n            })\n\n            return\n        }\n\n        // eslint-disable-next-line @typescript-eslint/no-unsafe-call\n        Promise.resolve(method.apply(target, msg.args))\n            .then((res) => {\n                if (msg.void) return\n\n                respond({\n                    type: 'result',\n                    id: msg.id,\n                    result: res,\n                })\n            })\n            .catch((err) => {\n                respond({\n                    type: 'result',\n                    id: msg.id,\n                    error: serializeError(err),\n                })\n            })\n    }\n\n    const onMessage: WorkerMessageHandler = (message, respond) => {\n        switch (message.type) {\n            case 'invoke':\n                onInvoke(message, respond)\n                break\n        }\n    }\n\n    const broadcast = registerWorker(onMessage)\n\n    client.log.mgr.handler = (color, level, tag, fmt, args) =>\n        broadcast({\n            type: 'log',\n            color,\n            level,\n            tag,\n            fmt,\n            args,\n        })\n    client.onError((err) =>\n        broadcast({\n            type: 'error',\n            error: err,\n        }),\n    )\n\n    if (client.updates) {\n        client.onUpdate((update, peers) =>\n            broadcast({\n                type: 'update',\n                update,\n                users: peers.users,\n                chats: peers.chats,\n                hasMin: peers.hasMin,\n            }),\n        )\n    } else {\n        client.onServerUpdate((update) =>\n            broadcast({\n                type: 'server_update',\n                update,\n            }),\n        )\n    }\n}\n"]}

package/esm/index.d.ts

@@ -1,5 +1,4 @@
-export * from './base-client.js';
-export * from './base-client.types.js';
+export * from './highlevel/index.js';
 export * from './network/index.js';
 export * from './storage/index.js';
 export * from './types/index.js';

package/esm/index.js

@@ -1,5 +1,4 @@
-export * from './base-client.js';
-export * from './base-client.types.js';
+export * from './highlevel/index.js';
 export * from './network/index.js';
 export * from './storage/index.js';
 export * from './types/index.js';

package/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAA;AAChC,cAAc,wBAAwB,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AAErC,cAAc;AACd,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,cAAc;AACd,OAAO,EAAE,IAAI,EAAE,CAAA","sourcesContent":["export * from './base-client.js'\nexport * from './base-client.types.js'\nexport * from './network/index.js'\nexport * from './storage/index.js'\nexport * from './types/index.js'\nexport * from './utils/peer-utils.js'\n\n/** @hidden */\nexport { mtp, tl } from '@mtcute/tl'\nimport Long from 'long'\n/** @hidden */\nexport { Long }\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAA;AACpC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AAErC,cAAc;AACd,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,cAAc;AACd,OAAO,EAAE,IAAI,EAAE,CAAA","sourcesContent":["export * from './highlevel/index.js'\nexport * from './network/index.js'\nexport * from './storage/index.js'\nexport * from './types/index.js'\nexport * from './utils/peer-utils.js'\n\n/** @hidden */\nexport { mtp, tl } from '@mtcute/tl'\nimport Long from 'long'\n/** @hidden */\nexport { Long }\n"]}

package/esm/network/authorization.js

@@ -176,6 +176,9 @@ export async function doAuthorization(connection, crypto, expiresIn) {
         throw new MtSecurityError('Step 2: Could not find server public key with any of these fingerprints: ' + serverKeys.join(', '));
     }
     log.debug('found server key, fp = %s, old = %s', publicKey.fingerprint, publicKey.old);
+    if (millerRabin(crypto, bufferToBigInt(resPq.pq))) {
+        throw new MtSecurityError('Step 2: pq is prime');
+    }
     const [p, q] = await crypto.factorizePQ(resPq.pq);
     log.debug('factorized PQ: PQ = %h, P = %h, Q = %h', resPq.pq, p, q);
     const newNonce = crypto.randomBytes(32);
@@ -298,10 +301,10 @@ export async function doAuthorization(connection, crypto, expiresIn) {
             throw new MtTypeAssertionError('auth step 4', 'set_client_DH_params_answer', dhGen._);
         }
         if (!buffersEqual(dhGen.nonce, nonce)) {
-            throw Error('Step 4: invalid nonce from server');
+            throw new MtSecurityError('Step 4: invalid nonce from server');
         }
         if (!buffersEqual(dhGen.serverNonce, resPq.serverNonce)) {
-            throw Error('Step 4: invalid server nonce from server');
+            throw new MtSecurityError('Step 4: invalid server nonce from server');
         }
         log.debug('DH result: %s', dhGen._);
         if (dhGen._ === 'mt_dh_gen_fail') {
@@ -311,7 +314,7 @@ export async function doAuthorization(connection, crypto, expiresIn) {
         if (dhGen._ === 'mt_dh_gen_retry') {
             const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([2]), authKeyAuxHash]));
             if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash2)) {
-                throw Error('Step 4: invalid retry nonce hash from server');
+                throw new MtSecurityError('Step 4: invalid retry nonce hash from server');
             }
             retryId = Long.fromBytesLE(authKeyAuxHash);
             continue;
@@ -320,7 +323,7 @@ export async function doAuthorization(connection, crypto, expiresIn) {
             throw new Error(); // unreachable
         const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([1]), authKeyAuxHash]));
         if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash1)) {
-            throw Error('Step 4: invalid nonce hash from server');
+            throw new MtSecurityError('Step 4: invalid nonce hash from server');
         }
         log.info('authorization successful');
         const dv = dataViewFromBuffer(serverSalt);

package/esm/network/authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/network/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAA2B,MAAM,mBAAmB,CAAA;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,kHAAkH;AAElH,4DAA4D;AAC5D,mDAAmD;AACnD,MAAM,eAAe,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;AAC3C,MAAM,cAAc;AAChB,mCAAmC;AACnC,mgBAAmgB,CAAA;AACvgB,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAChC,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAOhC,MAAM,kBAAkB,GAAmB,EAAE,CAAA;AAE7C,SAAS,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,OAAe,EAAE,CAAS;IAClF,IAAI,cAAc,KAAK,OAAO,EAAE;QAC5B,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAEhE,OAAM;KACT;IAED,IAAI,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAA;IAEtE,IAAI,CAAC,YAAY,EAAE;QACf,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,IAAI,YAAY,EAAE;YACpD,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAA;SAC7E;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAA;SAC7D;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE;YAC3C,MAAM,IAAI,eAAe,CAAC,oEAAoE,CAAC,CAAA;SAClG;QAED,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAEvC,YAAY,GAAG;YACX,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,EAAE;SACjB,CAAA;QACD,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;KACxC;SAAM;QACH,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;KACnD;IAED,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE5D,IAAI,gBAAgB,EAAE;QAClB,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAA;QAEtD,OAAM;KACT;IAED,QAAQ,CAAC,EAAE;QACP,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,MAAK;QACT,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBAC1B,MAAM,IAAI,eAAe,CAAC,+DAA+D,CAAC,CAAA;aAC7F;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,GAAG,CAAA;YAEzB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE;gBAC5B,MAAM,IAAI,eAAe,CAAC,mEAAmE,CAAC,CAAA;aACjG;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBACxC,MAAM,IAAI,eAAe,CACrB,sFAAsF,CACzF,CAAA;aACJ;YACD,MAAK;SACR;QACD;YACI,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAA;KACvE;IAED,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAE/B,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IACvE,+FAA+F;IAE/F,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE/C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;KAC3D;IAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACtC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACvB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,IAAI,GAAG,UAAU,CAAA;IAEjB,SAAS;QACL,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QAErC,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxF,mCAAmC;QACnC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAE9C,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QAExD,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAA;QAEzD,IAAI,mBAAmB,IAAI,UAAU,EAAE;YACnC,SAAQ;SACX;QAED,MAAM,eAAe,GAAG,YAAY,CAAC,mBAAmB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAElF,OAAO,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;KAC9C;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IAC3E,MAAM,SAAS,GAAG,aAAa,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,IAAI;QACJ,mEAAmE;QACnE,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;KACxC,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,YAAY,CAChC,cAAc,CAAC,SAAS,CAAC,EACzB,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,EAC3B,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAC7B,CAAA;IAED,OAAO,cAAc,CAAC,eAAe,CAAC,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,UAA6B,EAC7B,MAAuB,EACvB,SAAkB;IAElB,wCAAwC;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEzC,SAAS,gBAAgB,CAAC,OAAqB;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE,CAAC,CAAA,CAAC,8BAA8B;QAE1F,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAA;QAExC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAEtB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,UAAU,QAAQ;QACnB,MAAM,GAAG,GAAG,cAAc,CAAC,iBAAiB,CACxC,SAAS,EACT,MAAM,UAAU,CAAC,yBAAyB,EAAE,EAC5C,EAAE,CACL,CAAA;QAED,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAElC,OAAO,GAAG,CAAA;IACd,CAAC;IAED,IAAI,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAA;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,qBAAqB;IACrB,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAE5E,MAAM,gBAAgB,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;IAE9B,eAAe,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAEjD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAA;IAE9C,sBAAsB;IACtB,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAEnD,IAAI,CAAC,SAAS,EAAE;QACZ,MAAM,IAAI,eAAe,CACrB,2EAA2E,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACtG,CAAA;KACJ;IACD,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,CAAA;IAEtF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjD,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IAEvC,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ;QAAE,IAAI,IAAI,KAAK,CAAA;IAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS;QAAE,IAAI,GAAG,CAAC,IAAI,CAAA;IAEhD,MAAM,YAAY,GAA2B;QACzC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,sBAAsB;QACnE,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,CAAC;QACD,CAAC;QACD,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,SAAU,EAAE,WAAW;KACrC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAE3E,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IAE1C,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAEjC,MAAM,gBAAgB,CAAC;QACnB,CAAC,EAAE,kBAAkB;QACrB,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,CAAC;QACD,CAAC;QACD,oBAAoB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACtE,aAAa;KAChB,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,MAAM,QAAQ,EAAE,CAAA;IAEvC,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC5C,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IACD,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC9D,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;KACxE;IAED,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAEzB,IAAI,cAAc,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,EAAE;QAClD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,+BAA+B;IAC/B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAExC,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;IAC9E,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,EAAkB,CAAA;IAElE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAClG,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAA;KAC/D;IAED,eAAe,CAAC,aAAa,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC3C,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAA;KACnD;IACD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC7D,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;KAC1D;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAA;IAE3E,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAE3C,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAEnD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;IACvB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEvF,SAAS;QACL,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAEtC,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1D,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE;YAC7B,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QAED,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QACD,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAExC,yBAAyB;QACzB,MAAM,aAAa,GAAmC;YAClD,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO;YACP,EAAE,EAAE,GAAG;SACV,CAAA;QACD,IAAI,WAAW,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,CAAA,CAAC,WAAW;QACpG,MAAM,kBAAkB,GAAG,WAAW,GAAG,EAAE,CAAA;QAC3C,IAAI,kBAAkB,GAAG,CAAC;YAAE,WAAW,IAAI,EAAE,GAAG,kBAAkB,CAAA;QAElE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACxE,mBAAmB,CAAC,GAAG,GAAG,EAAE,CAAA;QAC5B,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1G,mBAAmB,CAAC,GAAG,GAAG,CAAC,CAAA;QAC3B,mBAAmB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAE1C,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAA;QAE5D,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,gBAAgB,CAAC;YACnB,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,iBAAiB;SACnC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;QAE9B,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE;YAC9C,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SACxF;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;YACnC,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAA;SACnD;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YACrD,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;SAC1D;QAED,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAEnC,IAAI,KAAK,CAAC,CAAC,KAAK,gBAAgB,EAAE;YAC9B,0FAA0F;YAC1F,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SAC5E;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,iBAAiB,EAAE;YAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;YAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;gBAClE,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAA;aAC9D;YACD,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,cAAqC,CAAC,CAAA;YACjE,SAAQ;SACX;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA,CAAC,cAAc;QAEhE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;YAClE,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAA;SACxD;QAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAEpC,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAEzC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;KACrF;AACL,CAAC","sourcesContent":["import Long from 'long'\n\nimport { mtp } from '@mtcute/tl'\nimport { TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { TlBinaryReader, TlBinaryWriter, TlSerializationCounter } from '@mtcute/tl-runtime'\n\nimport { MtArgumentError, MtSecurityError, MtTypeAssertionError } from '../types/index.js'\nimport { buffersEqual, concatBuffers, dataViewFromBuffer } from '../utils/buffer-utils.js'\nimport { findKeyByFingerprints } from '../utils/crypto/keys.js'\nimport { millerRabin } from '../utils/crypto/miller-rabin.js'\nimport { generateKeyAndIvFromNonce } from '../utils/crypto/mtproto.js'\nimport { xorBuffer, xorBufferInPlace } from '../utils/crypto/utils.js'\nimport { bigIntModPow, bigIntToBuffer, bufferToBigInt, ICryptoProvider, Logger } from '../utils/index.js'\nimport { mtpAssertTypeIs } from '../utils/type-assertions.js'\nimport { SessionConnection } from './session-connection.js'\n\n// Heavily based on code from https://github.com/LonamiWebs/Telethon/blob/master/telethon/network/authenticator.py\n\n// see https://core.telegram.org/mtproto/security_guidelines\n// const DH_SAFETY_RANGE = bigInt[2].pow(2048 - 64)\nconst DH_SAFETY_RANGE = 2n ** (2048n - 64n)\nconst KNOWN_DH_PRIME =\n    // eslint-disable-next-line max-len\n    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\nconst TWO_POW_2047 = 2n ** 2047n\nconst TWO_POW_2048 = 2n ** 2048n\n\ninterface CheckedPrime {\n    prime: bigint\n    generators: number[]\n}\n\nconst checkedPrimesCache: CheckedPrime[] = []\n\nfunction checkDhPrime(crypto: ICryptoProvider, log: Logger, dhPrime: bigint, g: number) {\n    if (KNOWN_DH_PRIME === dhPrime) {\n        log.debug('server is using known dh prime, skipping validation')\n\n        return\n    }\n\n    let checkedPrime = checkedPrimesCache.find((x) => x.prime === dhPrime)\n\n    if (!checkedPrime) {\n        if (dhPrime <= TWO_POW_2047 || dhPrime >= TWO_POW_2048) {\n            throw new MtSecurityError('Step 3: dh_prime is not in the 2048-bit range')\n        }\n\n        if (!millerRabin(crypto, dhPrime)) {\n            throw new MtSecurityError('Step 3: dh_prime is not prime')\n        }\n        if (!millerRabin(crypto, (dhPrime - 1n) / 2n)) {\n            throw new MtSecurityError('Step 3: dh_prime is not a safe prime - (dh_prime-1)/2 is not prime')\n        }\n\n        log.debug('dh_prime is probably prime')\n\n        checkedPrime = {\n            prime: dhPrime,\n            generators: [],\n        }\n        checkedPrimesCache.push(checkedPrime)\n    } else {\n        log.debug('dh_prime is probably prime (cached)')\n    }\n\n    const generatorChecked = checkedPrime.generators.includes(g)\n\n    if (generatorChecked) {\n        log.debug('g = %d is already checked for dh_prime', g)\n\n        return\n    }\n\n    switch (g) {\n        case 2:\n            if (dhPrime % 8n !== 7n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 8 != 7')\n            }\n            break\n        case 3:\n            if (dhPrime % 3n !== 2n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 3 != 2')\n            }\n            break\n        case 4:\n            break\n        case 5: {\n            const mod = dhPrime % 5n\n\n            if (mod !== 1n && mod !== 4n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 5 != 1 && dh_prime mod 5 != 4')\n            }\n            break\n        }\n        case 6: {\n            const mod = dhPrime % 24n\n\n            if (mod !== 19n && mod !== 23n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 24 != 19 && dh_prime mod 24 != 23')\n            }\n            break\n        }\n        case 7: {\n            const mod = dhPrime % 7n\n\n            if (mod !== 3n && mod !== 5n && mod !== 6n) {\n                throw new MtSecurityError(\n                    'Step 3: ivalid g - dh_prime mod 7 != 3 && dh_prime mod 7 != 5 && dh_prime mod 7 != 6',\n                )\n            }\n            break\n        }\n        default:\n            throw new MtSecurityError(`Step 3: ivalid g - unknown g = ${g}`)\n    }\n\n    checkedPrime.generators.push(g)\n\n    log.debug('g = %d is safe to use with dh_prime', g)\n}\n\nfunction rsaPad(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    // since Summer 2021, they use \"version of RSA with a variant of OAEP+ padding explained below\"\n\n    const keyModulus = BigInt(`0x${key.modulus}`)\n    const keyExponent = BigInt(`0x${key.exponent}`)\n\n    if (data.length > 144) {\n        throw new MtArgumentError('Failed to pad: too big data')\n    }\n\n    const dataPadded = new Uint8Array(192)\n    dataPadded.set(data, 0)\n    crypto.randomFill(dataPadded.subarray(data.length))\n    data = dataPadded\n\n    for (;;) {\n        const aesIv = new Uint8Array(32)\n\n        const aesKey = crypto.randomBytes(32)\n\n        const dataWithHash = concatBuffers([data, crypto.sha256(concatBuffers([aesKey, data]))])\n        // we only need to reverse the data\n        dataWithHash.subarray(0, 192).reverse()\n\n        const aes = crypto.createAesIge(aesKey, aesIv)\n        const encrypted = aes.encrypt(dataWithHash)\n        const encryptedHash = crypto.sha256(encrypted)\n\n        xorBufferInPlace(aesKey, encryptedHash)\n        const decryptedData = concatBuffers([aesKey, encrypted])\n\n        const decryptedDataBigint = bufferToBigInt(decryptedData)\n\n        if (decryptedDataBigint >= keyModulus) {\n            continue\n        }\n\n        const encryptedBigint = bigIntModPow(decryptedDataBigint, keyExponent, keyModulus)\n\n        return bigIntToBuffer(encryptedBigint, 256)\n    }\n}\n\nfunction rsaEncrypt(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    const toEncrypt = concatBuffers([\n        crypto.sha1(data),\n        data,\n        // sha1 is always 20 bytes, so we're left with 255 - 20 - x padding\n        crypto.randomBytes(235 - data.length),\n    ])\n\n    const encryptedBigInt = bigIntModPow(\n        bufferToBigInt(toEncrypt),\n        BigInt(`0x${key.exponent}`),\n        BigInt(`0x${key.modulus}`),\n    )\n\n    return bigIntToBuffer(encryptedBigInt)\n}\n\n/**\n * Execute authorization flow on `connection` using `crypto`.\n *\n * @returns  tuple: [authKey, serverSalt, timeOffset]\n */\nexport async function doAuthorization(\n    connection: SessionConnection,\n    crypto: ICryptoProvider,\n    expiresIn?: number,\n): Promise<[Uint8Array, Long, number]> {\n    // eslint-disable-next-line dot-notation\n    const session = connection['_session']\n    const readerMap = session._readerMap\n    const writerMap = session._writerMap\n    const log = connection.log.create('auth')\n\n    function sendPlainMessage(message: mtp.TlObject): Promise<void> {\n        const length = TlSerializationCounter.countNeededBytes(writerMap, message)\n        const writer = TlBinaryWriter.alloc(writerMap, length + 20) // 20 bytes for mtproto header\n\n        const messageId = session.getMessageId()\n\n        log.verbose('[PLAIN] >>> %j', message)\n        writer.long(Long.ZERO)\n        writer.long(messageId)\n        writer.uint(length)\n        writer.object(message)\n\n        return connection.send(writer.result())\n    }\n\n    async function readNext(): Promise<mtp.TlObject> {\n        const res = TlBinaryReader.deserializeObject<mtp.TlObject>(\n            readerMap,\n            await connection.waitForUnencryptedMessage(),\n            20, // skip mtproto header\n        )\n\n        log.verbose('[PLAIN] <<< %j', res)\n\n        return res\n    }\n\n    if (expiresIn) log.prefix = '[PFS] '\n\n    const nonce = crypto.randomBytes(16)\n    // Step 1: PQ request\n    log.debug('starting PQ handshake (temp = %b), nonce = %h', expiresIn, nonce)\n\n    await sendPlainMessage({ _: 'mt_req_pq_multi', nonce })\n    const resPq = await readNext()\n\n    mtpAssertTypeIs('auth step 1', resPq, 'mt_resPQ')\n\n    if (!buffersEqual(resPq.nonce, nonce)) {\n        throw new MtSecurityError('Step 1: invalid nonce from server')\n    }\n\n    const serverKeys = resPq.serverPublicKeyFingerprints.map((it) => it.toUnsigned().toString(16))\n    log.debug('received PQ, keys: %j', serverKeys)\n\n    // Step 2: DH exchange\n    const publicKey = findKeyByFingerprints(serverKeys)\n\n    if (!publicKey) {\n        throw new MtSecurityError(\n            'Step 2: Could not find server public key with any of these fingerprints: ' + serverKeys.join(', '),\n        )\n    }\n    log.debug('found server key, fp = %s, old = %s', publicKey.fingerprint, publicKey.old)\n\n    const [p, q] = await crypto.factorizePQ(resPq.pq)\n    log.debug('factorized PQ: PQ = %h, P = %h, Q = %h', resPq.pq, p, q)\n\n    const newNonce = crypto.randomBytes(32)\n\n    let dcId = connection.params.dc.id\n    if (connection.params.testMode) dcId += 10000\n    if (connection.params.dc.mediaOnly) dcId = -dcId\n\n    const _pqInnerData: mtp.TypeP_Q_inner_data = {\n        _: expiresIn ? 'mt_p_q_inner_data_temp_dc' : 'mt_p_q_inner_data_dc',\n        pq: resPq.pq,\n        p,\n        q,\n        nonce,\n        newNonce,\n        serverNonce: resPq.serverNonce,\n        dc: dcId,\n        expiresIn: expiresIn!, // whatever\n    }\n    const pqInnerData = TlBinaryWriter.serializeObject(writerMap, _pqInnerData)\n\n    const encryptedData = publicKey.old ?\n        rsaEncrypt(pqInnerData, crypto, publicKey) :\n        rsaPad(pqInnerData, crypto, publicKey)\n\n    log.debug('requesting DH params')\n\n    await sendPlainMessage({\n        _: 'mt_req_DH_params',\n        nonce,\n        serverNonce: resPq.serverNonce,\n        p,\n        q,\n        publicKeyFingerprint: Long.fromString(publicKey.fingerprint, true, 16),\n        encryptedData,\n    })\n    const serverDhParams = await readNext()\n\n    mtpAssertTypeIs('auth step 2', serverDhParams, 'mt_server_DH_params_ok')\n\n    if (!buffersEqual(serverDhParams.nonce, nonce)) {\n        throw new MtSecurityError('Step 2: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhParams.serverNonce, resPq.serverNonce)) {\n        throw new MtSecurityError('Step 2: invalid server nonce from server')\n    }\n\n    log.debug('server DH ok')\n\n    if (serverDhParams.encryptedAnswer.length % 16 !== 0) {\n        throw new MtSecurityError('Step 2: AES block size is invalid')\n    }\n\n    // Step 3: complete DH exchange\n    const [key, iv] = generateKeyAndIvFromNonce(crypto, resPq.serverNonce, newNonce)\n    const ige = crypto.createAesIge(key, iv)\n\n    const plainTextAnswer = ige.decrypt(serverDhParams.encryptedAnswer)\n    const innerDataHash = plainTextAnswer.subarray(0, 20)\n    const serverDhInnerReader = new TlBinaryReader(readerMap, plainTextAnswer, 20)\n    const serverDhInner = serverDhInnerReader.object() as mtp.TlObject\n\n    if (!buffersEqual(innerDataHash, crypto.sha1(plainTextAnswer.subarray(20, serverDhInnerReader.pos)))) {\n        throw new MtSecurityError('Step 3: invalid inner data hash')\n    }\n\n    mtpAssertTypeIs('auth step 3', serverDhInner, 'mt_server_DH_inner_data')\n\n    if (!buffersEqual(serverDhInner.nonce, nonce)) {\n        throw Error('Step 3: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhInner.serverNonce, resPq.serverNonce)) {\n        throw Error('Step 3: invalid server nonce from server')\n    }\n\n    const dhPrime = bufferToBigInt(serverDhInner.dhPrime)\n    const timeOffset = Math.floor(Date.now() / 1000) - serverDhInner.serverTime\n\n    const g = BigInt(serverDhInner.g)\n    const gA = bufferToBigInt(serverDhInner.gA)\n\n    checkDhPrime(crypto, log, dhPrime, serverDhInner.g)\n\n    let retryId = Long.ZERO\n    const serverSalt = xorBuffer(newNonce.subarray(0, 8), resPq.serverNonce.subarray(0, 8))\n\n    for (;;) {\n        const b = bufferToBigInt(crypto.randomBytes(256))\n        const gB = bigIntModPow(g, b, dhPrime)\n\n        const authKey = bigIntToBuffer(bigIntModPow(gA, b, dhPrime))\n        const authKeyAuxHash = crypto.sha1(authKey).subarray(0, 8)\n\n        // validate DH params\n        if (g <= 1 || g >= dhPrime - 1n) {\n            throw new MtSecurityError('g is not within (1, dh_prime - 1)')\n        }\n        if (gA <= 1 || gA >= dhPrime - 1n) {\n            throw new MtSecurityError('g_a is not within (1, dh_prime - 1)')\n        }\n        if (gB <= 1 || gB >= dhPrime - 1n) {\n            throw new MtSecurityError('g_b is not within (1, dh_prime - 1)')\n        }\n\n        if (gA <= DH_SAFETY_RANGE || gA >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_a is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n        if (gB <= DH_SAFETY_RANGE || gB >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_b is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n\n        const gB_ = bigIntToBuffer(gB, 0, false)\n\n        // Step 4: send client DH\n        const clientDhInner: mtp.RawMt_client_DH_inner_data = {\n            _: 'mt_client_DH_inner_data',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            retryId,\n            gB: gB_,\n        }\n        let innerLength = TlSerializationCounter.countNeededBytes(writerMap, clientDhInner) + 20 // for hash\n        const innerPaddingLength = innerLength % 16\n        if (innerPaddingLength > 0) innerLength += 16 - innerPaddingLength\n\n        const clientDhInnerWriter = TlBinaryWriter.alloc(writerMap, innerLength)\n        clientDhInnerWriter.pos = 20\n        clientDhInnerWriter.object(clientDhInner)\n        const clientDhInnerHash = crypto.sha1(clientDhInnerWriter.uint8View.subarray(20, clientDhInnerWriter.pos))\n        clientDhInnerWriter.pos = 0\n        clientDhInnerWriter.raw(clientDhInnerHash)\n\n        log.debug('sending client DH (timeOffset = %d)', timeOffset)\n\n        const clientDhEncrypted = ige.encrypt(clientDhInnerWriter.uint8View)\n        await sendPlainMessage({\n            _: 'mt_set_client_DH_params',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            encryptedData: clientDhEncrypted,\n        })\n\n        const dhGen = await readNext()\n\n        if (!mtp.isAnySet_client_DH_params_answer(dhGen)) {\n            throw new MtTypeAssertionError('auth step 4', 'set_client_DH_params_answer', dhGen._)\n        }\n\n        if (!buffersEqual(dhGen.nonce, nonce)) {\n            throw Error('Step 4: invalid nonce from server')\n        }\n        if (!buffersEqual(dhGen.serverNonce, resPq.serverNonce)) {\n            throw Error('Step 4: invalid server nonce from server')\n        }\n\n        log.debug('DH result: %s', dhGen._)\n\n        if (dhGen._ === 'mt_dh_gen_fail') {\n            // in theory i would be supposed to calculate newNonceHash, but why, we are failing anyway\n            throw new MtTypeAssertionError('auth step 4', '!mt_dh_gen_fail', dhGen._)\n        }\n\n        if (dhGen._ === 'mt_dh_gen_retry') {\n            const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([2]), authKeyAuxHash]))\n\n            if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash2)) {\n                throw Error('Step 4: invalid retry nonce hash from server')\n            }\n            retryId = Long.fromBytesLE(authKeyAuxHash as unknown as number[])\n            continue\n        }\n\n        if (dhGen._ !== 'mt_dh_gen_ok') throw new Error() // unreachable\n\n        const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([1]), authKeyAuxHash]))\n\n        if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash1)) {\n            throw Error('Step 4: invalid nonce hash from server')\n        }\n\n        log.info('authorization successful')\n\n        const dv = dataViewFromBuffer(serverSalt)\n\n        return [authKey, new Long(dv.getInt32(0, true), dv.getInt32(4, true)), timeOffset]\n    }\n}\n"]}
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/network/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAA2B,MAAM,mBAAmB,CAAA;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,kHAAkH;AAElH,4DAA4D;AAC5D,mDAAmD;AACnD,MAAM,eAAe,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;AAC3C,MAAM,cAAc;AAChB,mCAAmC;AACnC,mgBAAmgB,CAAA;AACvgB,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAChC,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAOhC,MAAM,kBAAkB,GAAmB,EAAE,CAAA;AAE7C,SAAS,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,OAAe,EAAE,CAAS;IAClF,IAAI,cAAc,KAAK,OAAO,EAAE;QAC5B,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAEhE,OAAM;KACT;IAED,IAAI,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAA;IAEtE,IAAI,CAAC,YAAY,EAAE;QACf,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,IAAI,YAAY,EAAE;YACpD,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAA;SAC7E;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAA;SAC7D;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE;YAC3C,MAAM,IAAI,eAAe,CAAC,oEAAoE,CAAC,CAAA;SAClG;QAED,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAEvC,YAAY,GAAG;YACX,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,EAAE;SACjB,CAAA;QACD,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;KACxC;SAAM;QACH,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;KACnD;IAED,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE5D,IAAI,gBAAgB,EAAE;QAClB,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAA;QAEtD,OAAM;KACT;IAED,QAAQ,CAAC,EAAE;QACP,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,MAAK;QACT,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBAC1B,MAAM,IAAI,eAAe,CAAC,+DAA+D,CAAC,CAAA;aAC7F;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,GAAG,CAAA;YAEzB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE;gBAC5B,MAAM,IAAI,eAAe,CAAC,mEAAmE,CAAC,CAAA;aACjG;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBACxC,MAAM,IAAI,eAAe,CACrB,sFAAsF,CACzF,CAAA;aACJ;YACD,MAAK;SACR;QACD;YACI,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAA;KACvE;IAED,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAE/B,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IACvE,+FAA+F;IAE/F,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE/C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;KAC3D;IAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACtC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACvB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,IAAI,GAAG,UAAU,CAAA;IAEjB,SAAS;QACL,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QAErC,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxF,mCAAmC;QACnC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAE9C,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QAExD,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAA;QAEzD,IAAI,mBAAmB,IAAI,UAAU,EAAE;YACnC,SAAQ;SACX;QAED,MAAM,eAAe,GAAG,YAAY,CAAC,mBAAmB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAElF,OAAO,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;KAC9C;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IAC3E,MAAM,SAAS,GAAG,aAAa,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,IAAI;QACJ,mEAAmE;QACnE,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;KACxC,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,YAAY,CAChC,cAAc,CAAC,SAAS,CAAC,EACzB,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,EAC3B,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAC7B,CAAA;IAED,OAAO,cAAc,CAAC,eAAe,CAAC,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,UAA6B,EAC7B,MAAuB,EACvB,SAAkB;IAElB,wCAAwC;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEzC,SAAS,gBAAgB,CAAC,OAAqB;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE,CAAC,CAAA,CAAC,8BAA8B;QAE1F,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAA;QAExC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAEtB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,UAAU,QAAQ;QACnB,MAAM,GAAG,GAAG,cAAc,CAAC,iBAAiB,CACxC,SAAS,EACT,MAAM,UAAU,CAAC,yBAAyB,EAAE,EAC5C,EAAE,CACL,CAAA;QAED,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAElC,OAAO,GAAG,CAAA;IACd,CAAC;IAED,IAAI,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAA;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,qBAAqB;IACrB,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAE5E,MAAM,gBAAgB,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;IAE9B,eAAe,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAEjD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAA;IAE9C,sBAAsB;IACtB,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAEnD,IAAI,CAAC,SAAS,EAAE;QACZ,MAAM,IAAI,eAAe,CACrB,2EAA2E,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACtG,CAAA;KACJ;IACD,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,CAAA;IAEtF,IAAI,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/C,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAA;KACnD;IAED,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjD,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IAEvC,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ;QAAE,IAAI,IAAI,KAAK,CAAA;IAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS;QAAE,IAAI,GAAG,CAAC,IAAI,CAAA;IAEhD,MAAM,YAAY,GAA2B;QACzC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,sBAAsB;QACnE,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,CAAC;QACD,CAAC;QACD,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,SAAU,EAAE,WAAW;KACrC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAE3E,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IAE1C,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAEjC,MAAM,gBAAgB,CAAC;QACnB,CAAC,EAAE,kBAAkB;QACrB,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,CAAC;QACD,CAAC;QACD,oBAAoB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACtE,aAAa;KAChB,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,MAAM,QAAQ,EAAE,CAAA;IAEvC,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC5C,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IACD,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC9D,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;KACxE;IAED,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAEzB,IAAI,cAAc,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,EAAE;QAClD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,+BAA+B;IAC/B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAExC,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;IAC9E,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,EAAkB,CAAA;IAElE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAClG,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAA;KAC/D;IAED,eAAe,CAAC,aAAa,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC3C,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAA;KACnD;IACD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC7D,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;KAC1D;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAA;IAE3E,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAE3C,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAEnD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;IACvB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEvF,SAAS;QACL,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAEtC,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1D,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE;YAC7B,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QAED,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QACD,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAExC,yBAAyB;QACzB,MAAM,aAAa,GAAmC;YAClD,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO;YACP,EAAE,EAAE,GAAG;SACV,CAAA;QACD,IAAI,WAAW,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,CAAA,CAAC,WAAW;QACpG,MAAM,kBAAkB,GAAG,WAAW,GAAG,EAAE,CAAA;QAC3C,IAAI,kBAAkB,GAAG,CAAC;YAAE,WAAW,IAAI,EAAE,GAAG,kBAAkB,CAAA;QAElE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACxE,mBAAmB,CAAC,GAAG,GAAG,EAAE,CAAA;QAC5B,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1G,mBAAmB,CAAC,GAAG,GAAG,CAAC,CAAA;QAC3B,mBAAmB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAE1C,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAA;QAE5D,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,gBAAgB,CAAC;YACnB,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,iBAAiB;SACnC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;QAE9B,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE;YAC9C,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SACxF;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;YACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YACrD,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;SACxE;QAED,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAEnC,IAAI,KAAK,CAAC,CAAC,KAAK,gBAAgB,EAAE;YAC9B,0FAA0F;YAC1F,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SAC5E;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,iBAAiB,EAAE;YAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;YAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;gBAClE,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAA;aAC5E;YACD,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,cAAqC,CAAC,CAAA;YACjE,SAAQ;SACX;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA,CAAC,cAAc;QAEhE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;YAClE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;SACtE;QAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAEpC,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAEzC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;KACrF;AACL,CAAC","sourcesContent":["import Long from 'long'\n\nimport { mtp } from '@mtcute/tl'\nimport { TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { TlBinaryReader, TlBinaryWriter, TlSerializationCounter } from '@mtcute/tl-runtime'\n\nimport { MtArgumentError, MtSecurityError, MtTypeAssertionError } from '../types/index.js'\nimport { buffersEqual, concatBuffers, dataViewFromBuffer } from '../utils/buffer-utils.js'\nimport { findKeyByFingerprints } from '../utils/crypto/keys.js'\nimport { millerRabin } from '../utils/crypto/miller-rabin.js'\nimport { generateKeyAndIvFromNonce } from '../utils/crypto/mtproto.js'\nimport { xorBuffer, xorBufferInPlace } from '../utils/crypto/utils.js'\nimport { bigIntModPow, bigIntToBuffer, bufferToBigInt, ICryptoProvider, Logger } from '../utils/index.js'\nimport { mtpAssertTypeIs } from '../utils/type-assertions.js'\nimport { SessionConnection } from './session-connection.js'\n\n// Heavily based on code from https://github.com/LonamiWebs/Telethon/blob/master/telethon/network/authenticator.py\n\n// see https://core.telegram.org/mtproto/security_guidelines\n// const DH_SAFETY_RANGE = bigInt[2].pow(2048 - 64)\nconst DH_SAFETY_RANGE = 2n ** (2048n - 64n)\nconst KNOWN_DH_PRIME =\n    // eslint-disable-next-line max-len\n    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\nconst TWO_POW_2047 = 2n ** 2047n\nconst TWO_POW_2048 = 2n ** 2048n\n\ninterface CheckedPrime {\n    prime: bigint\n    generators: number[]\n}\n\nconst checkedPrimesCache: CheckedPrime[] = []\n\nfunction checkDhPrime(crypto: ICryptoProvider, log: Logger, dhPrime: bigint, g: number) {\n    if (KNOWN_DH_PRIME === dhPrime) {\n        log.debug('server is using known dh prime, skipping validation')\n\n        return\n    }\n\n    let checkedPrime = checkedPrimesCache.find((x) => x.prime === dhPrime)\n\n    if (!checkedPrime) {\n        if (dhPrime <= TWO_POW_2047 || dhPrime >= TWO_POW_2048) {\n            throw new MtSecurityError('Step 3: dh_prime is not in the 2048-bit range')\n        }\n\n        if (!millerRabin(crypto, dhPrime)) {\n            throw new MtSecurityError('Step 3: dh_prime is not prime')\n        }\n        if (!millerRabin(crypto, (dhPrime - 1n) / 2n)) {\n            throw new MtSecurityError('Step 3: dh_prime is not a safe prime - (dh_prime-1)/2 is not prime')\n        }\n\n        log.debug('dh_prime is probably prime')\n\n        checkedPrime = {\n            prime: dhPrime,\n            generators: [],\n        }\n        checkedPrimesCache.push(checkedPrime)\n    } else {\n        log.debug('dh_prime is probably prime (cached)')\n    }\n\n    const generatorChecked = checkedPrime.generators.includes(g)\n\n    if (generatorChecked) {\n        log.debug('g = %d is already checked for dh_prime', g)\n\n        return\n    }\n\n    switch (g) {\n        case 2:\n            if (dhPrime % 8n !== 7n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 8 != 7')\n            }\n            break\n        case 3:\n            if (dhPrime % 3n !== 2n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 3 != 2')\n            }\n            break\n        case 4:\n            break\n        case 5: {\n            const mod = dhPrime % 5n\n\n            if (mod !== 1n && mod !== 4n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 5 != 1 && dh_prime mod 5 != 4')\n            }\n            break\n        }\n        case 6: {\n            const mod = dhPrime % 24n\n\n            if (mod !== 19n && mod !== 23n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 24 != 19 && dh_prime mod 24 != 23')\n            }\n            break\n        }\n        case 7: {\n            const mod = dhPrime % 7n\n\n            if (mod !== 3n && mod !== 5n && mod !== 6n) {\n                throw new MtSecurityError(\n                    'Step 3: ivalid g - dh_prime mod 7 != 3 && dh_prime mod 7 != 5 && dh_prime mod 7 != 6',\n                )\n            }\n            break\n        }\n        default:\n            throw new MtSecurityError(`Step 3: ivalid g - unknown g = ${g}`)\n    }\n\n    checkedPrime.generators.push(g)\n\n    log.debug('g = %d is safe to use with dh_prime', g)\n}\n\nfunction rsaPad(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    // since Summer 2021, they use \"version of RSA with a variant of OAEP+ padding explained below\"\n\n    const keyModulus = BigInt(`0x${key.modulus}`)\n    const keyExponent = BigInt(`0x${key.exponent}`)\n\n    if (data.length > 144) {\n        throw new MtArgumentError('Failed to pad: too big data')\n    }\n\n    const dataPadded = new Uint8Array(192)\n    dataPadded.set(data, 0)\n    crypto.randomFill(dataPadded.subarray(data.length))\n    data = dataPadded\n\n    for (;;) {\n        const aesIv = new Uint8Array(32)\n\n        const aesKey = crypto.randomBytes(32)\n\n        const dataWithHash = concatBuffers([data, crypto.sha256(concatBuffers([aesKey, data]))])\n        // we only need to reverse the data\n        dataWithHash.subarray(0, 192).reverse()\n\n        const aes = crypto.createAesIge(aesKey, aesIv)\n        const encrypted = aes.encrypt(dataWithHash)\n        const encryptedHash = crypto.sha256(encrypted)\n\n        xorBufferInPlace(aesKey, encryptedHash)\n        const decryptedData = concatBuffers([aesKey, encrypted])\n\n        const decryptedDataBigint = bufferToBigInt(decryptedData)\n\n        if (decryptedDataBigint >= keyModulus) {\n            continue\n        }\n\n        const encryptedBigint = bigIntModPow(decryptedDataBigint, keyExponent, keyModulus)\n\n        return bigIntToBuffer(encryptedBigint, 256)\n    }\n}\n\nfunction rsaEncrypt(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    const toEncrypt = concatBuffers([\n        crypto.sha1(data),\n        data,\n        // sha1 is always 20 bytes, so we're left with 255 - 20 - x padding\n        crypto.randomBytes(235 - data.length),\n    ])\n\n    const encryptedBigInt = bigIntModPow(\n        bufferToBigInt(toEncrypt),\n        BigInt(`0x${key.exponent}`),\n        BigInt(`0x${key.modulus}`),\n    )\n\n    return bigIntToBuffer(encryptedBigInt)\n}\n\n/**\n * Execute authorization flow on `connection` using `crypto`.\n *\n * @returns  tuple: [authKey, serverSalt, timeOffset]\n */\nexport async function doAuthorization(\n    connection: SessionConnection,\n    crypto: ICryptoProvider,\n    expiresIn?: number,\n): Promise<[Uint8Array, Long, number]> {\n    // eslint-disable-next-line dot-notation\n    const session = connection['_session']\n    const readerMap = session._readerMap\n    const writerMap = session._writerMap\n    const log = connection.log.create('auth')\n\n    function sendPlainMessage(message: mtp.TlObject): Promise<void> {\n        const length = TlSerializationCounter.countNeededBytes(writerMap, message)\n        const writer = TlBinaryWriter.alloc(writerMap, length + 20) // 20 bytes for mtproto header\n\n        const messageId = session.getMessageId()\n\n        log.verbose('[PLAIN] >>> %j', message)\n        writer.long(Long.ZERO)\n        writer.long(messageId)\n        writer.uint(length)\n        writer.object(message)\n\n        return connection.send(writer.result())\n    }\n\n    async function readNext(): Promise<mtp.TlObject> {\n        const res = TlBinaryReader.deserializeObject<mtp.TlObject>(\n            readerMap,\n            await connection.waitForUnencryptedMessage(),\n            20, // skip mtproto header\n        )\n\n        log.verbose('[PLAIN] <<< %j', res)\n\n        return res\n    }\n\n    if (expiresIn) log.prefix = '[PFS] '\n\n    const nonce = crypto.randomBytes(16)\n    // Step 1: PQ request\n    log.debug('starting PQ handshake (temp = %b), nonce = %h', expiresIn, nonce)\n\n    await sendPlainMessage({ _: 'mt_req_pq_multi', nonce })\n    const resPq = await readNext()\n\n    mtpAssertTypeIs('auth step 1', resPq, 'mt_resPQ')\n\n    if (!buffersEqual(resPq.nonce, nonce)) {\n        throw new MtSecurityError('Step 1: invalid nonce from server')\n    }\n\n    const serverKeys = resPq.serverPublicKeyFingerprints.map((it) => it.toUnsigned().toString(16))\n    log.debug('received PQ, keys: %j', serverKeys)\n\n    // Step 2: DH exchange\n    const publicKey = findKeyByFingerprints(serverKeys)\n\n    if (!publicKey) {\n        throw new MtSecurityError(\n            'Step 2: Could not find server public key with any of these fingerprints: ' + serverKeys.join(', '),\n        )\n    }\n    log.debug('found server key, fp = %s, old = %s', publicKey.fingerprint, publicKey.old)\n\n    if (millerRabin(crypto, bufferToBigInt(resPq.pq))) {\n        throw new MtSecurityError('Step 2: pq is prime')\n    }\n\n    const [p, q] = await crypto.factorizePQ(resPq.pq)\n    log.debug('factorized PQ: PQ = %h, P = %h, Q = %h', resPq.pq, p, q)\n\n    const newNonce = crypto.randomBytes(32)\n\n    let dcId = connection.params.dc.id\n    if (connection.params.testMode) dcId += 10000\n    if (connection.params.dc.mediaOnly) dcId = -dcId\n\n    const _pqInnerData: mtp.TypeP_Q_inner_data = {\n        _: expiresIn ? 'mt_p_q_inner_data_temp_dc' : 'mt_p_q_inner_data_dc',\n        pq: resPq.pq,\n        p,\n        q,\n        nonce,\n        newNonce,\n        serverNonce: resPq.serverNonce,\n        dc: dcId,\n        expiresIn: expiresIn!, // whatever\n    }\n    const pqInnerData = TlBinaryWriter.serializeObject(writerMap, _pqInnerData)\n\n    const encryptedData = publicKey.old ?\n        rsaEncrypt(pqInnerData, crypto, publicKey) :\n        rsaPad(pqInnerData, crypto, publicKey)\n\n    log.debug('requesting DH params')\n\n    await sendPlainMessage({\n        _: 'mt_req_DH_params',\n        nonce,\n        serverNonce: resPq.serverNonce,\n        p,\n        q,\n        publicKeyFingerprint: Long.fromString(publicKey.fingerprint, true, 16),\n        encryptedData,\n    })\n    const serverDhParams = await readNext()\n\n    mtpAssertTypeIs('auth step 2', serverDhParams, 'mt_server_DH_params_ok')\n\n    if (!buffersEqual(serverDhParams.nonce, nonce)) {\n        throw new MtSecurityError('Step 2: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhParams.serverNonce, resPq.serverNonce)) {\n        throw new MtSecurityError('Step 2: invalid server nonce from server')\n    }\n\n    log.debug('server DH ok')\n\n    if (serverDhParams.encryptedAnswer.length % 16 !== 0) {\n        throw new MtSecurityError('Step 2: AES block size is invalid')\n    }\n\n    // Step 3: complete DH exchange\n    const [key, iv] = generateKeyAndIvFromNonce(crypto, resPq.serverNonce, newNonce)\n    const ige = crypto.createAesIge(key, iv)\n\n    const plainTextAnswer = ige.decrypt(serverDhParams.encryptedAnswer)\n    const innerDataHash = plainTextAnswer.subarray(0, 20)\n    const serverDhInnerReader = new TlBinaryReader(readerMap, plainTextAnswer, 20)\n    const serverDhInner = serverDhInnerReader.object() as mtp.TlObject\n\n    if (!buffersEqual(innerDataHash, crypto.sha1(plainTextAnswer.subarray(20, serverDhInnerReader.pos)))) {\n        throw new MtSecurityError('Step 3: invalid inner data hash')\n    }\n\n    mtpAssertTypeIs('auth step 3', serverDhInner, 'mt_server_DH_inner_data')\n\n    if (!buffersEqual(serverDhInner.nonce, nonce)) {\n        throw Error('Step 3: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhInner.serverNonce, resPq.serverNonce)) {\n        throw Error('Step 3: invalid server nonce from server')\n    }\n\n    const dhPrime = bufferToBigInt(serverDhInner.dhPrime)\n    const timeOffset = Math.floor(Date.now() / 1000) - serverDhInner.serverTime\n\n    const g = BigInt(serverDhInner.g)\n    const gA = bufferToBigInt(serverDhInner.gA)\n\n    checkDhPrime(crypto, log, dhPrime, serverDhInner.g)\n\n    let retryId = Long.ZERO\n    const serverSalt = xorBuffer(newNonce.subarray(0, 8), resPq.serverNonce.subarray(0, 8))\n\n    for (;;) {\n        const b = bufferToBigInt(crypto.randomBytes(256))\n        const gB = bigIntModPow(g, b, dhPrime)\n\n        const authKey = bigIntToBuffer(bigIntModPow(gA, b, dhPrime))\n        const authKeyAuxHash = crypto.sha1(authKey).subarray(0, 8)\n\n        // validate DH params\n        if (g <= 1 || g >= dhPrime - 1n) {\n            throw new MtSecurityError('g is not within (1, dh_prime - 1)')\n        }\n        if (gA <= 1 || gA >= dhPrime - 1n) {\n            throw new MtSecurityError('g_a is not within (1, dh_prime - 1)')\n        }\n        if (gB <= 1 || gB >= dhPrime - 1n) {\n            throw new MtSecurityError('g_b is not within (1, dh_prime - 1)')\n        }\n\n        if (gA <= DH_SAFETY_RANGE || gA >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_a is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n        if (gB <= DH_SAFETY_RANGE || gB >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_b is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n\n        const gB_ = bigIntToBuffer(gB, 0, false)\n\n        // Step 4: send client DH\n        const clientDhInner: mtp.RawMt_client_DH_inner_data = {\n            _: 'mt_client_DH_inner_data',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            retryId,\n            gB: gB_,\n        }\n        let innerLength = TlSerializationCounter.countNeededBytes(writerMap, clientDhInner) + 20 // for hash\n        const innerPaddingLength = innerLength % 16\n        if (innerPaddingLength > 0) innerLength += 16 - innerPaddingLength\n\n        const clientDhInnerWriter = TlBinaryWriter.alloc(writerMap, innerLength)\n        clientDhInnerWriter.pos = 20\n        clientDhInnerWriter.object(clientDhInner)\n        const clientDhInnerHash = crypto.sha1(clientDhInnerWriter.uint8View.subarray(20, clientDhInnerWriter.pos))\n        clientDhInnerWriter.pos = 0\n        clientDhInnerWriter.raw(clientDhInnerHash)\n\n        log.debug('sending client DH (timeOffset = %d)', timeOffset)\n\n        const clientDhEncrypted = ige.encrypt(clientDhInnerWriter.uint8View)\n        await sendPlainMessage({\n            _: 'mt_set_client_DH_params',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            encryptedData: clientDhEncrypted,\n        })\n\n        const dhGen = await readNext()\n\n        if (!mtp.isAnySet_client_DH_params_answer(dhGen)) {\n            throw new MtTypeAssertionError('auth step 4', 'set_client_DH_params_answer', dhGen._)\n        }\n\n        if (!buffersEqual(dhGen.nonce, nonce)) {\n            throw new MtSecurityError('Step 4: invalid nonce from server')\n        }\n        if (!buffersEqual(dhGen.serverNonce, resPq.serverNonce)) {\n            throw new MtSecurityError('Step 4: invalid server nonce from server')\n        }\n\n        log.debug('DH result: %s', dhGen._)\n\n        if (dhGen._ === 'mt_dh_gen_fail') {\n            // in theory i would be supposed to calculate newNonceHash, but why, we are failing anyway\n            throw new MtTypeAssertionError('auth step 4', '!mt_dh_gen_fail', dhGen._)\n        }\n\n        if (dhGen._ === 'mt_dh_gen_retry') {\n            const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([2]), authKeyAuxHash]))\n\n            if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash2)) {\n                throw new MtSecurityError('Step 4: invalid retry nonce hash from server')\n            }\n            retryId = Long.fromBytesLE(authKeyAuxHash as unknown as number[])\n            continue\n        }\n\n        if (dhGen._ !== 'mt_dh_gen_ok') throw new Error() // unreachable\n\n        const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([1]), authKeyAuxHash]))\n\n        if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash1)) {\n            throw new MtSecurityError('Step 4: invalid nonce hash from server')\n        }\n\n        log.info('authorization successful')\n\n        const dv = dataViewFromBuffer(serverSalt)\n\n        return [authKey, new Long(dv.getInt32(0, true), dv.getInt32(4, true)), timeOffset]\n    }\n}\n"]}