@mtcute/core 0.7.2 → 0.7.3

package/esm/network/authorization.js

@@ -243,6 +243,7 @@ export async function doAuthorization(connection, crypto, expiresIn) {
     }
     const dhPrime = bufferToBigInt(serverDhInner.dhPrime);
     const timeOffset = Math.floor(Date.now() / 1000) - serverDhInner.serverTime;
+    session.updateTimeOffset(timeOffset);
     const g = BigInt(serverDhInner.g);
     const gA = bufferToBigInt(serverDhInner.gA);
     checkDhPrime(crypto, log, dhPrime, serverDhInner.g);

package/esm/network/authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/network/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAA2B,MAAM,mBAAmB,CAAA;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,kHAAkH;AAElH,4DAA4D;AAC5D,mDAAmD;AACnD,MAAM,eAAe,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;AAC3C,MAAM,cAAc;AAChB,mCAAmC;AACnC,mgBAAmgB,CAAA;AACvgB,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAChC,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAOhC,MAAM,kBAAkB,GAAmB,EAAE,CAAA;AAE7C,SAAS,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,OAAe,EAAE,CAAS;IAClF,IAAI,cAAc,KAAK,OAAO,EAAE;QAC5B,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAEhE,OAAM;KACT;IAED,IAAI,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAA;IAEtE,IAAI,CAAC,YAAY,EAAE;QACf,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,IAAI,YAAY,EAAE;YACpD,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAA;SAC7E;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAA;SAC7D;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE;YAC3C,MAAM,IAAI,eAAe,CAAC,oEAAoE,CAAC,CAAA;SAClG;QAED,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAEvC,YAAY,GAAG;YACX,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,EAAE;SACjB,CAAA;QACD,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;KACxC;SAAM;QACH,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;KACnD;IAED,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE5D,IAAI,gBAAgB,EAAE;QAClB,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAA;QAEtD,OAAM;KACT;IAED,QAAQ,CAAC,EAAE;QACP,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,MAAK;QACT,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBAC1B,MAAM,IAAI,eAAe,CAAC,+DAA+D,CAAC,CAAA;aAC7F;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,GAAG,CAAA;YAEzB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE;gBAC5B,MAAM,IAAI,eAAe,CAAC,mEAAmE,CAAC,CAAA;aACjG;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBACxC,MAAM,IAAI,eAAe,CACrB,sFAAsF,CACzF,CAAA;aACJ;YACD,MAAK;SACR;QACD;YACI,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAA;KACvE;IAED,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAE/B,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IACvE,+FAA+F;IAE/F,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE/C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;KAC3D;IAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACtC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACvB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,IAAI,GAAG,UAAU,CAAA;IAEjB,SAAS;QACL,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QAErC,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxF,mCAAmC;QACnC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAE9C,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QAExD,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAA;QAEzD,IAAI,mBAAmB,IAAI,UAAU,EAAE;YACnC,SAAQ;SACX;QAED,MAAM,eAAe,GAAG,YAAY,CAAC,mBAAmB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAElF,OAAO,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;KAC9C;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IAC3E,MAAM,SAAS,GAAG,aAAa,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,IAAI;QACJ,mEAAmE;QACnE,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;KACxC,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,YAAY,CAChC,cAAc,CAAC,SAAS,CAAC,EACzB,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,EAC3B,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAC7B,CAAA;IAED,OAAO,cAAc,CAAC,eAAe,CAAC,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,UAA6B,EAC7B,MAAuB,EACvB,SAAkB;IAElB,wCAAwC;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEzC,SAAS,gBAAgB,CAAC,OAAqB;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE,CAAC,CAAA,CAAC,8BAA8B;QAE1F,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAA;QAExC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAEtB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,UAAU,QAAQ;QACnB,MAAM,GAAG,GAAG,cAAc,CAAC,iBAAiB,CACxC,SAAS,EACT,MAAM,UAAU,CAAC,yBAAyB,EAAE,EAC5C,EAAE,CACL,CAAA;QAED,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAElC,OAAO,GAAG,CAAA;IACd,CAAC;IAED,IAAI,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAA;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,qBAAqB;IACrB,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAE5E,MAAM,gBAAgB,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;IAE9B,eAAe,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAEjD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAA;IAE9C,sBAAsB;IACtB,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAEnD,IAAI,CAAC,SAAS,EAAE;QACZ,MAAM,IAAI,eAAe,CACrB,2EAA2E,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACtG,CAAA;KACJ;IACD,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,CAAA;IAEtF,IAAI,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/C,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAA;KACnD;IAED,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjD,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IAEvC,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ;QAAE,IAAI,IAAI,KAAK,CAAA;IAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS;QAAE,IAAI,GAAG,CAAC,IAAI,CAAA;IAEhD,MAAM,YAAY,GAA2B;QACzC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,sBAAsB;QACnE,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,CAAC;QACD,CAAC;QACD,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,SAAU,EAAE,WAAW;KACrC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAE3E,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IAE1C,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAEjC,MAAM,gBAAgB,CAAC;QACnB,CAAC,EAAE,kBAAkB;QACrB,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,CAAC;QACD,CAAC;QACD,oBAAoB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACtE,aAAa;KAChB,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,MAAM,QAAQ,EAAE,CAAA;IAEvC,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC5C,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IACD,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC9D,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;KACxE;IAED,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAEzB,IAAI,cAAc,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,EAAE;QAClD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,+BAA+B;IAC/B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAExC,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;IAC9E,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,EAAkB,CAAA;IAElE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAClG,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAA;KAC/D;IAED,eAAe,CAAC,aAAa,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC3C,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAA;KACnD;IACD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC7D,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;KAC1D;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAA;IAE3E,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAE3C,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAEnD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;IACvB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEvF,SAAS;QACL,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAEtC,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1D,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE;YAC7B,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QAED,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QACD,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAExC,yBAAyB;QACzB,MAAM,aAAa,GAAmC;YAClD,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO;YACP,EAAE,EAAE,GAAG;SACV,CAAA;QACD,IAAI,WAAW,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,CAAA,CAAC,WAAW;QACpG,MAAM,kBAAkB,GAAG,WAAW,GAAG,EAAE,CAAA;QAC3C,IAAI,kBAAkB,GAAG,CAAC;YAAE,WAAW,IAAI,EAAE,GAAG,kBAAkB,CAAA;QAElE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACxE,mBAAmB,CAAC,GAAG,GAAG,EAAE,CAAA;QAC5B,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1G,mBAAmB,CAAC,GAAG,GAAG,CAAC,CAAA;QAC3B,mBAAmB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAE1C,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAA;QAE5D,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,gBAAgB,CAAC;YACnB,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,iBAAiB;SACnC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;QAE9B,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE;YAC9C,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SACxF;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;YACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YACrD,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;SACxE;QAED,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAEnC,IAAI,KAAK,CAAC,CAAC,KAAK,gBAAgB,EAAE;YAC9B,0FAA0F;YAC1F,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SAC5E;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,iBAAiB,EAAE;YAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;YAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;gBAClE,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAA;aAC5E;YACD,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,cAAqC,CAAC,CAAA;YACjE,SAAQ;SACX;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA,CAAC,cAAc;QAEhE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;YAClE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;SACtE;QAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAEpC,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAEzC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;KACrF;AACL,CAAC","sourcesContent":["import Long from 'long'\n\nimport { mtp } from '@mtcute/tl'\nimport { TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { TlBinaryReader, TlBinaryWriter, TlSerializationCounter } from '@mtcute/tl-runtime'\n\nimport { MtArgumentError, MtSecurityError, MtTypeAssertionError } from '../types/index.js'\nimport { buffersEqual, concatBuffers, dataViewFromBuffer } from '../utils/buffer-utils.js'\nimport { findKeyByFingerprints } from '../utils/crypto/keys.js'\nimport { millerRabin } from '../utils/crypto/miller-rabin.js'\nimport { generateKeyAndIvFromNonce } from '../utils/crypto/mtproto.js'\nimport { xorBuffer, xorBufferInPlace } from '../utils/crypto/utils.js'\nimport { bigIntModPow, bigIntToBuffer, bufferToBigInt, ICryptoProvider, Logger } from '../utils/index.js'\nimport { mtpAssertTypeIs } from '../utils/type-assertions.js'\nimport { SessionConnection } from './session-connection.js'\n\n// Heavily based on code from https://github.com/LonamiWebs/Telethon/blob/master/telethon/network/authenticator.py\n\n// see https://core.telegram.org/mtproto/security_guidelines\n// const DH_SAFETY_RANGE = bigInt[2].pow(2048 - 64)\nconst DH_SAFETY_RANGE = 2n ** (2048n - 64n)\nconst KNOWN_DH_PRIME =\n    // eslint-disable-next-line max-len\n    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\nconst TWO_POW_2047 = 2n ** 2047n\nconst TWO_POW_2048 = 2n ** 2048n\n\ninterface CheckedPrime {\n    prime: bigint\n    generators: number[]\n}\n\nconst checkedPrimesCache: CheckedPrime[] = []\n\nfunction checkDhPrime(crypto: ICryptoProvider, log: Logger, dhPrime: bigint, g: number) {\n    if (KNOWN_DH_PRIME === dhPrime) {\n        log.debug('server is using known dh prime, skipping validation')\n\n        return\n    }\n\n    let checkedPrime = checkedPrimesCache.find((x) => x.prime === dhPrime)\n\n    if (!checkedPrime) {\n        if (dhPrime <= TWO_POW_2047 || dhPrime >= TWO_POW_2048) {\n            throw new MtSecurityError('Step 3: dh_prime is not in the 2048-bit range')\n        }\n\n        if (!millerRabin(crypto, dhPrime)) {\n            throw new MtSecurityError('Step 3: dh_prime is not prime')\n        }\n        if (!millerRabin(crypto, (dhPrime - 1n) / 2n)) {\n            throw new MtSecurityError('Step 3: dh_prime is not a safe prime - (dh_prime-1)/2 is not prime')\n        }\n\n        log.debug('dh_prime is probably prime')\n\n        checkedPrime = {\n            prime: dhPrime,\n            generators: [],\n        }\n        checkedPrimesCache.push(checkedPrime)\n    } else {\n        log.debug('dh_prime is probably prime (cached)')\n    }\n\n    const generatorChecked = checkedPrime.generators.includes(g)\n\n    if (generatorChecked) {\n        log.debug('g = %d is already checked for dh_prime', g)\n\n        return\n    }\n\n    switch (g) {\n        case 2:\n            if (dhPrime % 8n !== 7n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 8 != 7')\n            }\n            break\n        case 3:\n            if (dhPrime % 3n !== 2n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 3 != 2')\n            }\n            break\n        case 4:\n            break\n        case 5: {\n            const mod = dhPrime % 5n\n\n            if (mod !== 1n && mod !== 4n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 5 != 1 && dh_prime mod 5 != 4')\n            }\n            break\n        }\n        case 6: {\n            const mod = dhPrime % 24n\n\n            if (mod !== 19n && mod !== 23n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 24 != 19 && dh_prime mod 24 != 23')\n            }\n            break\n        }\n        case 7: {\n            const mod = dhPrime % 7n\n\n            if (mod !== 3n && mod !== 5n && mod !== 6n) {\n                throw new MtSecurityError(\n                    'Step 3: ivalid g - dh_prime mod 7 != 3 && dh_prime mod 7 != 5 && dh_prime mod 7 != 6',\n                )\n            }\n            break\n        }\n        default:\n            throw new MtSecurityError(`Step 3: ivalid g - unknown g = ${g}`)\n    }\n\n    checkedPrime.generators.push(g)\n\n    log.debug('g = %d is safe to use with dh_prime', g)\n}\n\nfunction rsaPad(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    // since Summer 2021, they use \"version of RSA with a variant of OAEP+ padding explained below\"\n\n    const keyModulus = BigInt(`0x${key.modulus}`)\n    const keyExponent = BigInt(`0x${key.exponent}`)\n\n    if (data.length > 144) {\n        throw new MtArgumentError('Failed to pad: too big data')\n    }\n\n    const dataPadded = new Uint8Array(192)\n    dataPadded.set(data, 0)\n    crypto.randomFill(dataPadded.subarray(data.length))\n    data = dataPadded\n\n    for (;;) {\n        const aesIv = new Uint8Array(32)\n\n        const aesKey = crypto.randomBytes(32)\n\n        const dataWithHash = concatBuffers([data, crypto.sha256(concatBuffers([aesKey, data]))])\n        // we only need to reverse the data\n        dataWithHash.subarray(0, 192).reverse()\n\n        const aes = crypto.createAesIge(aesKey, aesIv)\n        const encrypted = aes.encrypt(dataWithHash)\n        const encryptedHash = crypto.sha256(encrypted)\n\n        xorBufferInPlace(aesKey, encryptedHash)\n        const decryptedData = concatBuffers([aesKey, encrypted])\n\n        const decryptedDataBigint = bufferToBigInt(decryptedData)\n\n        if (decryptedDataBigint >= keyModulus) {\n            continue\n        }\n\n        const encryptedBigint = bigIntModPow(decryptedDataBigint, keyExponent, keyModulus)\n\n        return bigIntToBuffer(encryptedBigint, 256)\n    }\n}\n\nfunction rsaEncrypt(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    const toEncrypt = concatBuffers([\n        crypto.sha1(data),\n        data,\n        // sha1 is always 20 bytes, so we're left with 255 - 20 - x padding\n        crypto.randomBytes(235 - data.length),\n    ])\n\n    const encryptedBigInt = bigIntModPow(\n        bufferToBigInt(toEncrypt),\n        BigInt(`0x${key.exponent}`),\n        BigInt(`0x${key.modulus}`),\n    )\n\n    return bigIntToBuffer(encryptedBigInt)\n}\n\n/**\n * Execute authorization flow on `connection` using `crypto`.\n *\n * @returns  tuple: [authKey, serverSalt, timeOffset]\n */\nexport async function doAuthorization(\n    connection: SessionConnection,\n    crypto: ICryptoProvider,\n    expiresIn?: number,\n): Promise<[Uint8Array, Long, number]> {\n    // eslint-disable-next-line dot-notation\n    const session = connection['_session']\n    const readerMap = session._readerMap\n    const writerMap = session._writerMap\n    const log = connection.log.create('auth')\n\n    function sendPlainMessage(message: mtp.TlObject): Promise<void> {\n        const length = TlSerializationCounter.countNeededBytes(writerMap, message)\n        const writer = TlBinaryWriter.alloc(writerMap, length + 20) // 20 bytes for mtproto header\n\n        const messageId = session.getMessageId()\n\n        log.verbose('[PLAIN] >>> %j', message)\n        writer.long(Long.ZERO)\n        writer.long(messageId)\n        writer.uint(length)\n        writer.object(message)\n\n        return connection.send(writer.result())\n    }\n\n    async function readNext(): Promise<mtp.TlObject> {\n        const res = TlBinaryReader.deserializeObject<mtp.TlObject>(\n            readerMap,\n            await connection.waitForUnencryptedMessage(),\n            20, // skip mtproto header\n        )\n\n        log.verbose('[PLAIN] <<< %j', res)\n\n        return res\n    }\n\n    if (expiresIn) log.prefix = '[PFS] '\n\n    const nonce = crypto.randomBytes(16)\n    // Step 1: PQ request\n    log.debug('starting PQ handshake (temp = %b), nonce = %h', expiresIn, nonce)\n\n    await sendPlainMessage({ _: 'mt_req_pq_multi', nonce })\n    const resPq = await readNext()\n\n    mtpAssertTypeIs('auth step 1', resPq, 'mt_resPQ')\n\n    if (!buffersEqual(resPq.nonce, nonce)) {\n        throw new MtSecurityError('Step 1: invalid nonce from server')\n    }\n\n    const serverKeys = resPq.serverPublicKeyFingerprints.map((it) => it.toUnsigned().toString(16))\n    log.debug('received PQ, keys: %j', serverKeys)\n\n    // Step 2: DH exchange\n    const publicKey = findKeyByFingerprints(serverKeys)\n\n    if (!publicKey) {\n        throw new MtSecurityError(\n            'Step 2: Could not find server public key with any of these fingerprints: ' + serverKeys.join(', '),\n        )\n    }\n    log.debug('found server key, fp = %s, old = %s', publicKey.fingerprint, publicKey.old)\n\n    if (millerRabin(crypto, bufferToBigInt(resPq.pq))) {\n        throw new MtSecurityError('Step 2: pq is prime')\n    }\n\n    const [p, q] = await crypto.factorizePQ(resPq.pq)\n    log.debug('factorized PQ: PQ = %h, P = %h, Q = %h', resPq.pq, p, q)\n\n    const newNonce = crypto.randomBytes(32)\n\n    let dcId = connection.params.dc.id\n    if (connection.params.testMode) dcId += 10000\n    if (connection.params.dc.mediaOnly) dcId = -dcId\n\n    const _pqInnerData: mtp.TypeP_Q_inner_data = {\n        _: expiresIn ? 'mt_p_q_inner_data_temp_dc' : 'mt_p_q_inner_data_dc',\n        pq: resPq.pq,\n        p,\n        q,\n        nonce,\n        newNonce,\n        serverNonce: resPq.serverNonce,\n        dc: dcId,\n        expiresIn: expiresIn!, // whatever\n    }\n    const pqInnerData = TlBinaryWriter.serializeObject(writerMap, _pqInnerData)\n\n    const encryptedData = publicKey.old ?\n        rsaEncrypt(pqInnerData, crypto, publicKey) :\n        rsaPad(pqInnerData, crypto, publicKey)\n\n    log.debug('requesting DH params')\n\n    await sendPlainMessage({\n        _: 'mt_req_DH_params',\n        nonce,\n        serverNonce: resPq.serverNonce,\n        p,\n        q,\n        publicKeyFingerprint: Long.fromString(publicKey.fingerprint, true, 16),\n        encryptedData,\n    })\n    const serverDhParams = await readNext()\n\n    mtpAssertTypeIs('auth step 2', serverDhParams, 'mt_server_DH_params_ok')\n\n    if (!buffersEqual(serverDhParams.nonce, nonce)) {\n        throw new MtSecurityError('Step 2: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhParams.serverNonce, resPq.serverNonce)) {\n        throw new MtSecurityError('Step 2: invalid server nonce from server')\n    }\n\n    log.debug('server DH ok')\n\n    if (serverDhParams.encryptedAnswer.length % 16 !== 0) {\n        throw new MtSecurityError('Step 2: AES block size is invalid')\n    }\n\n    // Step 3: complete DH exchange\n    const [key, iv] = generateKeyAndIvFromNonce(crypto, resPq.serverNonce, newNonce)\n    const ige = crypto.createAesIge(key, iv)\n\n    const plainTextAnswer = ige.decrypt(serverDhParams.encryptedAnswer)\n    const innerDataHash = plainTextAnswer.subarray(0, 20)\n    const serverDhInnerReader = new TlBinaryReader(readerMap, plainTextAnswer, 20)\n    const serverDhInner = serverDhInnerReader.object() as mtp.TlObject\n\n    if (!buffersEqual(innerDataHash, crypto.sha1(plainTextAnswer.subarray(20, serverDhInnerReader.pos)))) {\n        throw new MtSecurityError('Step 3: invalid inner data hash')\n    }\n\n    mtpAssertTypeIs('auth step 3', serverDhInner, 'mt_server_DH_inner_data')\n\n    if (!buffersEqual(serverDhInner.nonce, nonce)) {\n        throw Error('Step 3: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhInner.serverNonce, resPq.serverNonce)) {\n        throw Error('Step 3: invalid server nonce from server')\n    }\n\n    const dhPrime = bufferToBigInt(serverDhInner.dhPrime)\n    const timeOffset = Math.floor(Date.now() / 1000) - serverDhInner.serverTime\n\n    const g = BigInt(serverDhInner.g)\n    const gA = bufferToBigInt(serverDhInner.gA)\n\n    checkDhPrime(crypto, log, dhPrime, serverDhInner.g)\n\n    let retryId = Long.ZERO\n    const serverSalt = xorBuffer(newNonce.subarray(0, 8), resPq.serverNonce.subarray(0, 8))\n\n    for (;;) {\n        const b = bufferToBigInt(crypto.randomBytes(256))\n        const gB = bigIntModPow(g, b, dhPrime)\n\n        const authKey = bigIntToBuffer(bigIntModPow(gA, b, dhPrime))\n        const authKeyAuxHash = crypto.sha1(authKey).subarray(0, 8)\n\n        // validate DH params\n        if (g <= 1 || g >= dhPrime - 1n) {\n            throw new MtSecurityError('g is not within (1, dh_prime - 1)')\n        }\n        if (gA <= 1 || gA >= dhPrime - 1n) {\n            throw new MtSecurityError('g_a is not within (1, dh_prime - 1)')\n        }\n        if (gB <= 1 || gB >= dhPrime - 1n) {\n            throw new MtSecurityError('g_b is not within (1, dh_prime - 1)')\n        }\n\n        if (gA <= DH_SAFETY_RANGE || gA >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_a is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n        if (gB <= DH_SAFETY_RANGE || gB >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_b is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n\n        const gB_ = bigIntToBuffer(gB, 0, false)\n\n        // Step 4: send client DH\n        const clientDhInner: mtp.RawMt_client_DH_inner_data = {\n            _: 'mt_client_DH_inner_data',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            retryId,\n            gB: gB_,\n        }\n        let innerLength = TlSerializationCounter.countNeededBytes(writerMap, clientDhInner) + 20 // for hash\n        const innerPaddingLength = innerLength % 16\n        if (innerPaddingLength > 0) innerLength += 16 - innerPaddingLength\n\n        const clientDhInnerWriter = TlBinaryWriter.alloc(writerMap, innerLength)\n        clientDhInnerWriter.pos = 20\n        clientDhInnerWriter.object(clientDhInner)\n        const clientDhInnerHash = crypto.sha1(clientDhInnerWriter.uint8View.subarray(20, clientDhInnerWriter.pos))\n        clientDhInnerWriter.pos = 0\n        clientDhInnerWriter.raw(clientDhInnerHash)\n\n        log.debug('sending client DH (timeOffset = %d)', timeOffset)\n\n        const clientDhEncrypted = ige.encrypt(clientDhInnerWriter.uint8View)\n        await sendPlainMessage({\n            _: 'mt_set_client_DH_params',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            encryptedData: clientDhEncrypted,\n        })\n\n        const dhGen = await readNext()\n\n        if (!mtp.isAnySet_client_DH_params_answer(dhGen)) {\n            throw new MtTypeAssertionError('auth step 4', 'set_client_DH_params_answer', dhGen._)\n        }\n\n        if (!buffersEqual(dhGen.nonce, nonce)) {\n            throw new MtSecurityError('Step 4: invalid nonce from server')\n        }\n        if (!buffersEqual(dhGen.serverNonce, resPq.serverNonce)) {\n            throw new MtSecurityError('Step 4: invalid server nonce from server')\n        }\n\n        log.debug('DH result: %s', dhGen._)\n\n        if (dhGen._ === 'mt_dh_gen_fail') {\n            // in theory i would be supposed to calculate newNonceHash, but why, we are failing anyway\n            throw new MtTypeAssertionError('auth step 4', '!mt_dh_gen_fail', dhGen._)\n        }\n\n        if (dhGen._ === 'mt_dh_gen_retry') {\n            const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([2]), authKeyAuxHash]))\n\n            if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash2)) {\n                throw new MtSecurityError('Step 4: invalid retry nonce hash from server')\n            }\n            retryId = Long.fromBytesLE(authKeyAuxHash as unknown as number[])\n            continue\n        }\n\n        if (dhGen._ !== 'mt_dh_gen_ok') throw new Error() // unreachable\n\n        const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([1]), authKeyAuxHash]))\n\n        if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash1)) {\n            throw new MtSecurityError('Step 4: invalid nonce hash from server')\n        }\n\n        log.info('authorization successful')\n\n        const dv = dataViewFromBuffer(serverSalt)\n\n        return [authKey, new Long(dv.getInt32(0, true), dv.getInt32(4, true)), timeOffset]\n    }\n}\n"]}
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/network/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAA2B,MAAM,mBAAmB,CAAA;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,kHAAkH;AAElH,4DAA4D;AAC5D,mDAAmD;AACnD,MAAM,eAAe,GAAG,EAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;AAC3C,MAAM,cAAc;AAChB,mCAAmC;AACnC,mgBAAmgB,CAAA;AACvgB,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAChC,MAAM,YAAY,GAAG,EAAE,IAAI,KAAK,CAAA;AAOhC,MAAM,kBAAkB,GAAmB,EAAE,CAAA;AAE7C,SAAS,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,OAAe,EAAE,CAAS;IAClF,IAAI,cAAc,KAAK,OAAO,EAAE;QAC5B,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAEhE,OAAM;KACT;IAED,IAAI,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAA;IAEtE,IAAI,CAAC,YAAY,EAAE;QACf,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,IAAI,YAAY,EAAE;YACpD,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAA;SAC7E;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAA;SAC7D;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE;YAC3C,MAAM,IAAI,eAAe,CAAC,oEAAoE,CAAC,CAAA;SAClG;QAED,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAEvC,YAAY,GAAG;YACX,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,EAAE;SACjB,CAAA;QACD,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;KACxC;SAAM;QACH,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;KACnD;IAED,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE5D,IAAI,gBAAgB,EAAE;QAClB,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAA;QAEtD,OAAM;KACT;IAED,QAAQ,CAAC,EAAE;QACP,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;aACtE;YACD,MAAK;QACT,KAAK,CAAC;YACF,MAAK;QACT,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBAC1B,MAAM,IAAI,eAAe,CAAC,+DAA+D,CAAC,CAAA;aAC7F;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,GAAG,CAAA;YAEzB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE;gBAC5B,MAAM,IAAI,eAAe,CAAC,mEAAmE,CAAC,CAAA;aACjG;YACD,MAAK;SACR;QACD,KAAK,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,CAAA;YAExB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;gBACxC,MAAM,IAAI,eAAe,CACrB,sFAAsF,CACzF,CAAA;aACJ;YACD,MAAK;SACR;QACD;YACI,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAA;KACvE;IAED,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAE/B,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IACvE,+FAA+F;IAE/F,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAE/C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;KAC3D;IAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACtC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACvB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,IAAI,GAAG,UAAU,CAAA;IAEjB,SAAS;QACL,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QAErC,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxF,mCAAmC;QACnC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAE9C,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACvC,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QAExD,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAA;QAEzD,IAAI,mBAAmB,IAAI,UAAU,EAAE;YACnC,SAAQ;SACX;QAED,MAAM,eAAe,GAAG,YAAY,CAAC,mBAAmB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAElF,OAAO,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;KAC9C;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,MAAuB,EAAE,GAAgB;IAC3E,MAAM,SAAS,GAAG,aAAa,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,IAAI;QACJ,mEAAmE;QACnE,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;KACxC,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,YAAY,CAChC,cAAc,CAAC,SAAS,CAAC,EACzB,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC,EAC3B,MAAM,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAC7B,CAAA;IAED,OAAO,cAAc,CAAC,eAAe,CAAC,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,UAA6B,EAC7B,MAAuB,EACvB,SAAkB;IAElB,wCAAwC;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEzC,SAAS,gBAAgB,CAAC,OAAqB;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE,CAAC,CAAA,CAAC,8BAA8B;QAE1F,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAA;QAExC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAEtB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,UAAU,QAAQ;QACnB,MAAM,GAAG,GAAG,cAAc,CAAC,iBAAiB,CACxC,SAAS,EACT,MAAM,UAAU,CAAC,yBAAyB,EAAE,EAC5C,EAAE,CACL,CAAA;QAED,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAElC,OAAO,GAAG,CAAA;IACd,CAAC;IAED,IAAI,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAA;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,qBAAqB;IACrB,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAE5E,MAAM,gBAAgB,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;IAE9B,eAAe,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAEjD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAA;IAE9C,sBAAsB;IACtB,MAAM,SAAS,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAEnD,IAAI,CAAC,SAAS,EAAE;QACZ,MAAM,IAAI,eAAe,CACrB,2EAA2E,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACtG,CAAA;KACJ;IACD,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,CAAA;IAEtF,IAAI,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/C,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAA;KACnD;IAED,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjD,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IAEvC,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ;QAAE,IAAI,IAAI,KAAK,CAAA;IAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS;QAAE,IAAI,GAAG,CAAC,IAAI,CAAA;IAEhD,MAAM,YAAY,GAA2B;QACzC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,sBAAsB;QACnE,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,CAAC;QACD,CAAC;QACD,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,SAAU,EAAE,WAAW;KACrC,CAAA;IACD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAE3E,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;IAE1C,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAEjC,MAAM,gBAAgB,CAAC;QACnB,CAAC,EAAE,kBAAkB;QACrB,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,CAAC;QACD,CAAC;QACD,oBAAoB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACtE,aAAa;KAChB,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,MAAM,QAAQ,EAAE,CAAA;IAEvC,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC5C,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IACD,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC9D,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;KACxE;IAED,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAEzB,IAAI,cAAc,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,EAAE;QAClD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;KACjE;IAED,+BAA+B;IAC/B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAExC,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;IAC9E,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,EAAkB,CAAA;IAElE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAClG,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAA;KAC/D;IAED,eAAe,CAAC,aAAa,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAExE,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;QAC3C,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAA;KACnD;IACD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;QAC7D,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAA;KAC1D;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,UAAU,CAAA;IAC3E,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAEpC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAE3C,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAEnD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;IACvB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEvF,SAAS;QACL,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAEtC,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1D,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE;YAC7B,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;SACnE;QAED,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QACD,IAAI,EAAE,IAAI,eAAe,IAAI,EAAE,IAAI,OAAO,GAAG,eAAe,EAAE;YAC1D,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAA;SACvF;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAExC,yBAAyB;QACzB,MAAM,aAAa,GAAmC;YAClD,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO;YACP,EAAE,EAAE,GAAG;SACV,CAAA;QACD,IAAI,WAAW,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,CAAA,CAAC,WAAW;QACpG,MAAM,kBAAkB,GAAG,WAAW,GAAG,EAAE,CAAA;QAC3C,IAAI,kBAAkB,GAAG,CAAC;YAAE,WAAW,IAAI,EAAE,GAAG,kBAAkB,CAAA;QAElE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACxE,mBAAmB,CAAC,GAAG,GAAG,EAAE,CAAA;QAC5B,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1G,mBAAmB,CAAC,GAAG,GAAG,CAAC,CAAA;QAC3B,mBAAmB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAE1C,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAA;QAE5D,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,gBAAgB,CAAC;YACnB,CAAC,EAAE,yBAAyB;YAC5B,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,iBAAiB;SACnC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAA;QAE9B,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE;YAC9C,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SACxF;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;YACnC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAA;SACjE;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YACrD,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAA;SACxE;QAED,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QAEnC,IAAI,KAAK,CAAC,CAAC,KAAK,gBAAgB,EAAE;YAC9B,0FAA0F;YAC1F,MAAM,IAAI,oBAAoB,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;SAC5E;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,iBAAiB,EAAE;YAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;YAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;gBAClE,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAA;aAC5E;YACD,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,cAAqC,CAAC,CAAA;YACjE,SAAQ;SACX;QAED,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA,CAAC,cAAc;QAEhE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QAEhG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;YAClE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAA;SACtE;QAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAEpC,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAEzC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;KACrF;AACL,CAAC","sourcesContent":["import Long from 'long'\n\nimport { mtp } from '@mtcute/tl'\nimport { TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { TlBinaryReader, TlBinaryWriter, TlSerializationCounter } from '@mtcute/tl-runtime'\n\nimport { MtArgumentError, MtSecurityError, MtTypeAssertionError } from '../types/index.js'\nimport { buffersEqual, concatBuffers, dataViewFromBuffer } from '../utils/buffer-utils.js'\nimport { findKeyByFingerprints } from '../utils/crypto/keys.js'\nimport { millerRabin } from '../utils/crypto/miller-rabin.js'\nimport { generateKeyAndIvFromNonce } from '../utils/crypto/mtproto.js'\nimport { xorBuffer, xorBufferInPlace } from '../utils/crypto/utils.js'\nimport { bigIntModPow, bigIntToBuffer, bufferToBigInt, ICryptoProvider, Logger } from '../utils/index.js'\nimport { mtpAssertTypeIs } from '../utils/type-assertions.js'\nimport { SessionConnection } from './session-connection.js'\n\n// Heavily based on code from https://github.com/LonamiWebs/Telethon/blob/master/telethon/network/authenticator.py\n\n// see https://core.telegram.org/mtproto/security_guidelines\n// const DH_SAFETY_RANGE = bigInt[2].pow(2048 - 64)\nconst DH_SAFETY_RANGE = 2n ** (2048n - 64n)\nconst KNOWN_DH_PRIME =\n    // eslint-disable-next-line max-len\n    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\nconst TWO_POW_2047 = 2n ** 2047n\nconst TWO_POW_2048 = 2n ** 2048n\n\ninterface CheckedPrime {\n    prime: bigint\n    generators: number[]\n}\n\nconst checkedPrimesCache: CheckedPrime[] = []\n\nfunction checkDhPrime(crypto: ICryptoProvider, log: Logger, dhPrime: bigint, g: number) {\n    if (KNOWN_DH_PRIME === dhPrime) {\n        log.debug('server is using known dh prime, skipping validation')\n\n        return\n    }\n\n    let checkedPrime = checkedPrimesCache.find((x) => x.prime === dhPrime)\n\n    if (!checkedPrime) {\n        if (dhPrime <= TWO_POW_2047 || dhPrime >= TWO_POW_2048) {\n            throw new MtSecurityError('Step 3: dh_prime is not in the 2048-bit range')\n        }\n\n        if (!millerRabin(crypto, dhPrime)) {\n            throw new MtSecurityError('Step 3: dh_prime is not prime')\n        }\n        if (!millerRabin(crypto, (dhPrime - 1n) / 2n)) {\n            throw new MtSecurityError('Step 3: dh_prime is not a safe prime - (dh_prime-1)/2 is not prime')\n        }\n\n        log.debug('dh_prime is probably prime')\n\n        checkedPrime = {\n            prime: dhPrime,\n            generators: [],\n        }\n        checkedPrimesCache.push(checkedPrime)\n    } else {\n        log.debug('dh_prime is probably prime (cached)')\n    }\n\n    const generatorChecked = checkedPrime.generators.includes(g)\n\n    if (generatorChecked) {\n        log.debug('g = %d is already checked for dh_prime', g)\n\n        return\n    }\n\n    switch (g) {\n        case 2:\n            if (dhPrime % 8n !== 7n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 8 != 7')\n            }\n            break\n        case 3:\n            if (dhPrime % 3n !== 2n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 3 != 2')\n            }\n            break\n        case 4:\n            break\n        case 5: {\n            const mod = dhPrime % 5n\n\n            if (mod !== 1n && mod !== 4n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 5 != 1 && dh_prime mod 5 != 4')\n            }\n            break\n        }\n        case 6: {\n            const mod = dhPrime % 24n\n\n            if (mod !== 19n && mod !== 23n) {\n                throw new MtSecurityError('Step 3: ivalid g - dh_prime mod 24 != 19 && dh_prime mod 24 != 23')\n            }\n            break\n        }\n        case 7: {\n            const mod = dhPrime % 7n\n\n            if (mod !== 3n && mod !== 5n && mod !== 6n) {\n                throw new MtSecurityError(\n                    'Step 3: ivalid g - dh_prime mod 7 != 3 && dh_prime mod 7 != 5 && dh_prime mod 7 != 6',\n                )\n            }\n            break\n        }\n        default:\n            throw new MtSecurityError(`Step 3: ivalid g - unknown g = ${g}`)\n    }\n\n    checkedPrime.generators.push(g)\n\n    log.debug('g = %d is safe to use with dh_prime', g)\n}\n\nfunction rsaPad(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    // since Summer 2021, they use \"version of RSA with a variant of OAEP+ padding explained below\"\n\n    const keyModulus = BigInt(`0x${key.modulus}`)\n    const keyExponent = BigInt(`0x${key.exponent}`)\n\n    if (data.length > 144) {\n        throw new MtArgumentError('Failed to pad: too big data')\n    }\n\n    const dataPadded = new Uint8Array(192)\n    dataPadded.set(data, 0)\n    crypto.randomFill(dataPadded.subarray(data.length))\n    data = dataPadded\n\n    for (;;) {\n        const aesIv = new Uint8Array(32)\n\n        const aesKey = crypto.randomBytes(32)\n\n        const dataWithHash = concatBuffers([data, crypto.sha256(concatBuffers([aesKey, data]))])\n        // we only need to reverse the data\n        dataWithHash.subarray(0, 192).reverse()\n\n        const aes = crypto.createAesIge(aesKey, aesIv)\n        const encrypted = aes.encrypt(dataWithHash)\n        const encryptedHash = crypto.sha256(encrypted)\n\n        xorBufferInPlace(aesKey, encryptedHash)\n        const decryptedData = concatBuffers([aesKey, encrypted])\n\n        const decryptedDataBigint = bufferToBigInt(decryptedData)\n\n        if (decryptedDataBigint >= keyModulus) {\n            continue\n        }\n\n        const encryptedBigint = bigIntModPow(decryptedDataBigint, keyExponent, keyModulus)\n\n        return bigIntToBuffer(encryptedBigint, 256)\n    }\n}\n\nfunction rsaEncrypt(data: Uint8Array, crypto: ICryptoProvider, key: TlPublicKey): Uint8Array {\n    const toEncrypt = concatBuffers([\n        crypto.sha1(data),\n        data,\n        // sha1 is always 20 bytes, so we're left with 255 - 20 - x padding\n        crypto.randomBytes(235 - data.length),\n    ])\n\n    const encryptedBigInt = bigIntModPow(\n        bufferToBigInt(toEncrypt),\n        BigInt(`0x${key.exponent}`),\n        BigInt(`0x${key.modulus}`),\n    )\n\n    return bigIntToBuffer(encryptedBigInt)\n}\n\n/**\n * Execute authorization flow on `connection` using `crypto`.\n *\n * @returns  tuple: [authKey, serverSalt, timeOffset]\n */\nexport async function doAuthorization(\n    connection: SessionConnection,\n    crypto: ICryptoProvider,\n    expiresIn?: number,\n): Promise<[Uint8Array, Long, number]> {\n    // eslint-disable-next-line dot-notation\n    const session = connection['_session']\n    const readerMap = session._readerMap\n    const writerMap = session._writerMap\n    const log = connection.log.create('auth')\n\n    function sendPlainMessage(message: mtp.TlObject): Promise<void> {\n        const length = TlSerializationCounter.countNeededBytes(writerMap, message)\n        const writer = TlBinaryWriter.alloc(writerMap, length + 20) // 20 bytes for mtproto header\n\n        const messageId = session.getMessageId()\n\n        log.verbose('[PLAIN] >>> %j', message)\n        writer.long(Long.ZERO)\n        writer.long(messageId)\n        writer.uint(length)\n        writer.object(message)\n\n        return connection.send(writer.result())\n    }\n\n    async function readNext(): Promise<mtp.TlObject> {\n        const res = TlBinaryReader.deserializeObject<mtp.TlObject>(\n            readerMap,\n            await connection.waitForUnencryptedMessage(),\n            20, // skip mtproto header\n        )\n\n        log.verbose('[PLAIN] <<< %j', res)\n\n        return res\n    }\n\n    if (expiresIn) log.prefix = '[PFS] '\n\n    const nonce = crypto.randomBytes(16)\n    // Step 1: PQ request\n    log.debug('starting PQ handshake (temp = %b), nonce = %h', expiresIn, nonce)\n\n    await sendPlainMessage({ _: 'mt_req_pq_multi', nonce })\n    const resPq = await readNext()\n\n    mtpAssertTypeIs('auth step 1', resPq, 'mt_resPQ')\n\n    if (!buffersEqual(resPq.nonce, nonce)) {\n        throw new MtSecurityError('Step 1: invalid nonce from server')\n    }\n\n    const serverKeys = resPq.serverPublicKeyFingerprints.map((it) => it.toUnsigned().toString(16))\n    log.debug('received PQ, keys: %j', serverKeys)\n\n    // Step 2: DH exchange\n    const publicKey = findKeyByFingerprints(serverKeys)\n\n    if (!publicKey) {\n        throw new MtSecurityError(\n            'Step 2: Could not find server public key with any of these fingerprints: ' + serverKeys.join(', '),\n        )\n    }\n    log.debug('found server key, fp = %s, old = %s', publicKey.fingerprint, publicKey.old)\n\n    if (millerRabin(crypto, bufferToBigInt(resPq.pq))) {\n        throw new MtSecurityError('Step 2: pq is prime')\n    }\n\n    const [p, q] = await crypto.factorizePQ(resPq.pq)\n    log.debug('factorized PQ: PQ = %h, P = %h, Q = %h', resPq.pq, p, q)\n\n    const newNonce = crypto.randomBytes(32)\n\n    let dcId = connection.params.dc.id\n    if (connection.params.testMode) dcId += 10000\n    if (connection.params.dc.mediaOnly) dcId = -dcId\n\n    const _pqInnerData: mtp.TypeP_Q_inner_data = {\n        _: expiresIn ? 'mt_p_q_inner_data_temp_dc' : 'mt_p_q_inner_data_dc',\n        pq: resPq.pq,\n        p,\n        q,\n        nonce,\n        newNonce,\n        serverNonce: resPq.serverNonce,\n        dc: dcId,\n        expiresIn: expiresIn!, // whatever\n    }\n    const pqInnerData = TlBinaryWriter.serializeObject(writerMap, _pqInnerData)\n\n    const encryptedData = publicKey.old ?\n        rsaEncrypt(pqInnerData, crypto, publicKey) :\n        rsaPad(pqInnerData, crypto, publicKey)\n\n    log.debug('requesting DH params')\n\n    await sendPlainMessage({\n        _: 'mt_req_DH_params',\n        nonce,\n        serverNonce: resPq.serverNonce,\n        p,\n        q,\n        publicKeyFingerprint: Long.fromString(publicKey.fingerprint, true, 16),\n        encryptedData,\n    })\n    const serverDhParams = await readNext()\n\n    mtpAssertTypeIs('auth step 2', serverDhParams, 'mt_server_DH_params_ok')\n\n    if (!buffersEqual(serverDhParams.nonce, nonce)) {\n        throw new MtSecurityError('Step 2: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhParams.serverNonce, resPq.serverNonce)) {\n        throw new MtSecurityError('Step 2: invalid server nonce from server')\n    }\n\n    log.debug('server DH ok')\n\n    if (serverDhParams.encryptedAnswer.length % 16 !== 0) {\n        throw new MtSecurityError('Step 2: AES block size is invalid')\n    }\n\n    // Step 3: complete DH exchange\n    const [key, iv] = generateKeyAndIvFromNonce(crypto, resPq.serverNonce, newNonce)\n    const ige = crypto.createAesIge(key, iv)\n\n    const plainTextAnswer = ige.decrypt(serverDhParams.encryptedAnswer)\n    const innerDataHash = plainTextAnswer.subarray(0, 20)\n    const serverDhInnerReader = new TlBinaryReader(readerMap, plainTextAnswer, 20)\n    const serverDhInner = serverDhInnerReader.object() as mtp.TlObject\n\n    if (!buffersEqual(innerDataHash, crypto.sha1(plainTextAnswer.subarray(20, serverDhInnerReader.pos)))) {\n        throw new MtSecurityError('Step 3: invalid inner data hash')\n    }\n\n    mtpAssertTypeIs('auth step 3', serverDhInner, 'mt_server_DH_inner_data')\n\n    if (!buffersEqual(serverDhInner.nonce, nonce)) {\n        throw Error('Step 3: invalid nonce from server')\n    }\n    if (!buffersEqual(serverDhInner.serverNonce, resPq.serverNonce)) {\n        throw Error('Step 3: invalid server nonce from server')\n    }\n\n    const dhPrime = bufferToBigInt(serverDhInner.dhPrime)\n    const timeOffset = Math.floor(Date.now() / 1000) - serverDhInner.serverTime\n    session.updateTimeOffset(timeOffset)\n\n    const g = BigInt(serverDhInner.g)\n    const gA = bufferToBigInt(serverDhInner.gA)\n\n    checkDhPrime(crypto, log, dhPrime, serverDhInner.g)\n\n    let retryId = Long.ZERO\n    const serverSalt = xorBuffer(newNonce.subarray(0, 8), resPq.serverNonce.subarray(0, 8))\n\n    for (;;) {\n        const b = bufferToBigInt(crypto.randomBytes(256))\n        const gB = bigIntModPow(g, b, dhPrime)\n\n        const authKey = bigIntToBuffer(bigIntModPow(gA, b, dhPrime))\n        const authKeyAuxHash = crypto.sha1(authKey).subarray(0, 8)\n\n        // validate DH params\n        if (g <= 1 || g >= dhPrime - 1n) {\n            throw new MtSecurityError('g is not within (1, dh_prime - 1)')\n        }\n        if (gA <= 1 || gA >= dhPrime - 1n) {\n            throw new MtSecurityError('g_a is not within (1, dh_prime - 1)')\n        }\n        if (gB <= 1 || gB >= dhPrime - 1n) {\n            throw new MtSecurityError('g_b is not within (1, dh_prime - 1)')\n        }\n\n        if (gA <= DH_SAFETY_RANGE || gA >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_a is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n        if (gB <= DH_SAFETY_RANGE || gB >= dhPrime - DH_SAFETY_RANGE) {\n            throw new MtSecurityError('g_b is not within (2^{2048-64}, dh_prime - 2^{2048-64})')\n        }\n\n        const gB_ = bigIntToBuffer(gB, 0, false)\n\n        // Step 4: send client DH\n        const clientDhInner: mtp.RawMt_client_DH_inner_data = {\n            _: 'mt_client_DH_inner_data',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            retryId,\n            gB: gB_,\n        }\n        let innerLength = TlSerializationCounter.countNeededBytes(writerMap, clientDhInner) + 20 // for hash\n        const innerPaddingLength = innerLength % 16\n        if (innerPaddingLength > 0) innerLength += 16 - innerPaddingLength\n\n        const clientDhInnerWriter = TlBinaryWriter.alloc(writerMap, innerLength)\n        clientDhInnerWriter.pos = 20\n        clientDhInnerWriter.object(clientDhInner)\n        const clientDhInnerHash = crypto.sha1(clientDhInnerWriter.uint8View.subarray(20, clientDhInnerWriter.pos))\n        clientDhInnerWriter.pos = 0\n        clientDhInnerWriter.raw(clientDhInnerHash)\n\n        log.debug('sending client DH (timeOffset = %d)', timeOffset)\n\n        const clientDhEncrypted = ige.encrypt(clientDhInnerWriter.uint8View)\n        await sendPlainMessage({\n            _: 'mt_set_client_DH_params',\n            nonce,\n            serverNonce: resPq.serverNonce,\n            encryptedData: clientDhEncrypted,\n        })\n\n        const dhGen = await readNext()\n\n        if (!mtp.isAnySet_client_DH_params_answer(dhGen)) {\n            throw new MtTypeAssertionError('auth step 4', 'set_client_DH_params_answer', dhGen._)\n        }\n\n        if (!buffersEqual(dhGen.nonce, nonce)) {\n            throw new MtSecurityError('Step 4: invalid nonce from server')\n        }\n        if (!buffersEqual(dhGen.serverNonce, resPq.serverNonce)) {\n            throw new MtSecurityError('Step 4: invalid server nonce from server')\n        }\n\n        log.debug('DH result: %s', dhGen._)\n\n        if (dhGen._ === 'mt_dh_gen_fail') {\n            // in theory i would be supposed to calculate newNonceHash, but why, we are failing anyway\n            throw new MtTypeAssertionError('auth step 4', '!mt_dh_gen_fail', dhGen._)\n        }\n\n        if (dhGen._ === 'mt_dh_gen_retry') {\n            const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([2]), authKeyAuxHash]))\n\n            if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash2)) {\n                throw new MtSecurityError('Step 4: invalid retry nonce hash from server')\n            }\n            retryId = Long.fromBytesLE(authKeyAuxHash as unknown as number[])\n            continue\n        }\n\n        if (dhGen._ !== 'mt_dh_gen_ok') throw new Error() // unreachable\n\n        const expectedHash = crypto.sha1(concatBuffers([newNonce, new Uint8Array([1]), authKeyAuxHash]))\n\n        if (!buffersEqual(expectedHash.subarray(4, 20), dhGen.newNonceHash1)) {\n            throw new MtSecurityError('Step 4: invalid nonce hash from server')\n        }\n\n        log.info('authorization successful')\n\n        const dv = dataViewFromBuffer(serverSalt)\n\n        return [authKey, new Long(dv.getInt32(0, true), dv.getInt32(4, true)), timeOffset]\n    }\n}\n"]}

package/esm/network/mtproto-session.d.ts

@@ -102,6 +102,7 @@ export declare class MtprotoSession {
      */
     reset(withAuthKey?: boolean): void;
     resetAuthKey(): void;
+    updateTimeOffset(offset: number): void;
     /**
      * Reset session state and generate a new session ID.
      *

package/esm/network/mtproto-session.js

@@ -68,6 +68,12 @@ export class MtprotoSession {
         this._authKeyTemp.reset();
         this._authKeyTempSecondary.reset();
     }
+    updateTimeOffset(offset) {
+        this._timeOffset = offset;
+        // lastMessageId was generated with (potentially) wrong time
+        // reset it to avoid bigger issues - at worst, we'll get bad_msg_notification
+        this._lastMessageId = Long.ZERO;
+    }
     /**
      * Reset session state and generate a new session ID.
      *
@@ -119,7 +125,7 @@ export class MtprotoSession {
     }
     getMessageId() {
         const timeTicks = Date.now();
-        const timeSec = Math.floor(timeTicks / 1000) + this._timeOffset;
+        const timeSec = Math.floor(timeTicks / 1000) - this._timeOffset;
         const timeMSec = timeTicks % 1000;
         const random = getRandomInt(0xffff);
         let messageId = new Long((timeMSec << 21) | (random << 3) | 4, timeSec);

package/esm/network/mtproto-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"mtproto-session.js","sourceRoot":"","sources":["../../../src/network/mtproto-session.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAGvB,OAAO,EAA+B,sBAAsB,EAAe,MAAM,oBAAoB,CAAA;AAErG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EACH,YAAY,EAEZ,KAAK,EACL,YAAY,EAGZ,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,GACd,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAoEvC;;;GAGG;AACH,MAAM,OAAO,cAAc;IA2CvB,YACa,OAAwB,EACxB,GAAW,EACX,UAAuB,EACvB,UAAuB,EACvB,MAAyB;QAJzB,YAAO,GAAP,OAAO,CAAiB;QACxB,QAAG,GAAH,GAAG,CAAQ;QACX,eAAU,GAAV,UAAU,CAAa;QACvB,eAAU,GAAV,UAAU,CAAa;QACvB,WAAM,GAAN,MAAM,CAAmB;QA/CtC,eAAU,GAAG,UAAU,EAAE,CAAA;QAEzB,aAAQ,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,iBAAY,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACnE,0BAAqB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAE5E,gBAAW,GAAG,CAAC,CAAA;QACf,mBAAc,GAAG,IAAI,CAAC,IAAI,CAAA;QAC1B,WAAM,GAAG,CAAC,CAAA;QAEV,aAAa;QACb,iBAAiB;QACjB,yBAAoB,GAAG,IAAI,MAAM,CAAO,IAAI,EAAE,IAAI,CAAC,CAAA;QACnD,yBAAoB,GAAG,IAAI,MAAM,CAAO,IAAI,EAAE,IAAI,CAAC,CAAA;QAEnD,SAAS;QACT,cAAS,GAAG,IAAI,KAAK,EAAc,CAAA;QACnC,eAAU,GAAW,EAAE,CAAA;QACvB,mBAAc,GAAW,EAAE,CAAA;QAC3B,oBAAe,GAAW,EAAE,CAAA;QAC5B,oBAAe,GAAW,EAAE,CAAA;QAC5B,qBAAgB,GAAG,IAAI,WAAW,CAAa,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAS,GAAG,CAAC,CAAC,QAAS,CAAC,CAAA;QAEvF,WAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;QACzC,uBAAkB,GAAG,IAAI,GAAG,EAA4C,CAAA;QAExE,gBAAgB;QAChB,oBAAe,GAAG,IAAI,OAAO,EAAkB,CAAA;QAC/C,4BAAuB,GAAG,IAAI,OAAO,EAAQ,CAAA;QAE7C,gBAAW,GAAG,GAAG,CAAA;QACjB,iBAAY,GAAG,CAAC,CAAA;QAChB,kBAAa,GAAG,IAAI,CAAC,IAAI,CAAA;QACzB,0BAAqB,GAAG,IAAI,CAAC,IAAI,CAAA;QAEjC,yBAAoB,GAAG,KAAK,CAAA;QAC5B,yBAAoB,GAAG,KAAK,CAAA;QAE5B,mBAAc,GAAG,IAAI,CAAA;QAWjB,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAA;IAClE,CAAC;IAED,IAAI,kBAAkB;QAClB,OAAO,OAAO,CACV,IAAI,CAAC,SAAS,CAAC,MAAM;YACjB,IAAI,CAAC,UAAU,CAAC,MAAM;YACtB,IAAI,CAAC,cAAc,CAAC,MAAM;YAC1B,IAAI,CAAC,eAAe,CAAC,MAAM,CAClC,CAAA;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,GAAG,KAAK;QACrB,IAAI,WAAW,EAAE;YACb,IAAI,CAAC,YAAY,EAAE,CAAA;SACtB;QAED,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACpC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,YAAY;QACR,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAA;IACtC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,WAAW,GAAG,KAAK;QAC1B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAA;QAC/B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,EAAE,CAAA;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAA;QAE9D,sBAAsB;QAEtB,IAAI,CAAC,WAAW,EAAE;YACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE;gBAC9C,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;oBAClB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAA;iBAC/D;aACJ;YACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;SAC/B;QAED,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAA;QACjC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAA;QAEjC,IAAI,CAAC,WAAW,EAAE;YACd,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAG,CAAA;gBAEtC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE;oBACpB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAA;iBAC1D;aACJ;SACJ;QAED,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAA;QAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAA;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACnB,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAA;IACnC,CAAC;IAED,UAAU,CAAC,GAAe,EAAE,KAAe;QACvC,8BAA8B;QAC9B,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,KAAK,CAAA;QAExD,GAAG,CAAC,IAAI,GAAG,KAAK,CAAA;QAChB,GAAG,CAAC,WAAW,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,CAAA;QACvF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QAE5B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,YAAY;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAA;QAC/D,MAAM,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAA;QACjC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAEnC,IAAI,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QAEvE,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE;YACnC,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;SACzC;QAED,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QAE/B,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,QAAQ,CAAC,gBAAgB,GAAG,IAAI;QAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAA;QAEvB,IAAI,gBAAgB,EAAE;YAClB,KAAK,IAAI,CAAC,CAAA;YACV,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;SACnB;QAED,OAAO,KAAK,CAAA;IAChB,CAAC;IAED,4DAA4D;IAC5D,cAAc,CAAC,OAAmB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAA;QAEvE,OAAO,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAChF,CAAC;IAED,4DAA4D;IAC5D,cAAc,CAAC,IAAgB,EAAE,QAAkD;QAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,sBAAsB,CAAC,CAAA;QAEvE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAErC,IAAI,GAAY,CAAA;QAEhB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAChC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAA;SACtB;aAAM,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAC3C,GAAG,GAAG,IAAI,CAAC,YAAY,CAAA;SAC1B;aAAM,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YACpD,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAA;SACnC;aAAM;YACH,IAAI,CAAC,GAAG,CAAC,IAAI,CACT,sEAAsE,EACtE,SAAS,EACT,IAAI,CAAC,QAAQ,CAAC,EAAE,EAChB,IAAI,CAAC,YAAY,CAAC,EAAE,EACpB,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAChC,CAAA;YAED,OAAM;SACT;QAED,OAAO,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC9D,CAAC;IAED,YAAY,CACR,MAAsB,EACtB,OAAgD,EAChD,gBAAgB,GAAG,IAAI;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE7C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,sBAAsB,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAU,EAAE,OAAO,CAAC,CAAA;QAEvE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnB,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;;YAC/C,MAAM,CAAC,MAAM,CAAC,OAAsB,CAAC,CAAA;QAE1C,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,gBAAgB,CAAC,QAAoB;QACjC,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAM,CAAC,kBAAkB;QAErD,oDAAoD;QACpD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAExB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAA;QAEnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QAC9D,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACpC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAEtC,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAA;YAClC,QAAQ,EAAE,CAAA;QACd,CAAC,EAAE,OAAO,CAAC,CAAA;QACX,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAA;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC9B,CAAC,EAAE,KAAK,CAAC,CAAA;QAET,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,EAAE,OAAO,CAAC,CAAA;QAE/E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;IAC/B,CAAC;IAED,aAAa,CAAC,QAAQ,GAAG,KAAK;QAC1B,IAAI,QAAQ;YAAE,IAAI,CAAC,YAAY,GAAG,CAAC,CAAA;QAEnC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE;YAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;SAClD;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAA;IAClC,CAAC;IAED,UAAU,CAAC,OAAwB,EAAE,KAAW;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAE/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAEpF,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,eAAe,CAAC,OAAwB,EAAE,KAAW;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE1C,IAAI,CAAC,SAAS,EAAE;YACZ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;YAE/E,OAAM;SACT;QAED,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;YACrB,uCAAuC;YACvC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;YACtE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;SAC9B;QAED,aAAa;IACjB,CAAC;IAED,sBAAsB,CAAC,OAAwB;QAC3C,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC,GAAG,EAAE;YACN,GAAG,GAAG,IAAI,WAAW,CAAa,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,WAAY,EAAE,CAAC,CAAC,WAAY,CAAC,CAAC,CAAA;YAC7F,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;SAC5C;QAED,OAAO,GAAG,CAAA;IACd,CAAC;CACJ","sourcesContent":["import Long from 'long'\n\nimport { mtp, tl } from '@mtcute/tl'\nimport { TlBinaryWriter, TlReaderMap, TlSerializationCounter, TlWriterMap } from '@mtcute/tl-runtime'\n\nimport { MtcuteError } from '../types/index.js'\nimport {\n    compareLongs,\n    ControllablePromise,\n    Deque,\n    getRandomInt,\n    ICryptoProvider,\n    Logger,\n    LongMap,\n    LruSet,\n    randomLong,\n    SortedArray,\n} from '../utils/index.js'\nimport { AuthKey } from './auth-key.js'\nimport { ServerSaltManager } from './server-salt.js'\n\nexport interface PendingRpc {\n    method: string\n    data: Uint8Array\n    promise: ControllablePromise\n    stack?: string\n    gzipOverhead?: number\n\n    chainId?: string | number\n    invokeAfter?: Long\n\n    sent?: boolean\n    done?: boolean\n    msgId?: Long\n    seqNo?: number\n    containerId?: Long\n    acked?: boolean\n    initConn?: boolean\n    getState?: number\n    cancelled?: boolean\n    timeout?: NodeJS.Timeout\n}\n\nexport type PendingMessage =\n    | {\n          _: 'rpc'\n          rpc: PendingRpc\n      }\n    | {\n          _: 'container'\n          msgIds: Long[]\n      }\n    | {\n          _: 'state'\n          msgIds: Long[]\n          containerId: Long\n      }\n    | {\n          _: 'resend'\n          msgIds: Long[]\n          containerId: Long\n      }\n    | {\n          _: 'ping'\n          pingId: Long\n          containerId: Long\n      }\n    | {\n          _: 'destroy_session'\n          sessionId: Long\n          containerId: Long\n      }\n    | {\n          _: 'cancel'\n          msgId: Long\n          containerId: Long\n      }\n    | {\n          _: 'future_salts'\n          containerId: Long\n      }\n    | {\n          _: 'bind'\n          promise: ControllablePromise\n      }\n\n/**\n * Class encapsulating a single MTProto session and storing\n * all the relevant state\n */\nexport class MtprotoSession {\n    _sessionId = randomLong()\n\n    _authKey = new AuthKey(this._crypto, this.log, this._readerMap)\n    _authKeyTemp = new AuthKey(this._crypto, this.log, this._readerMap)\n    _authKeyTempSecondary = new AuthKey(this._crypto, this.log, this._readerMap)\n\n    _timeOffset = 0\n    _lastMessageId = Long.ZERO\n    _seqNo = 0\n\n    /// state ///\n    // recent msg ids\n    recentOutgoingMsgIds = new LruSet<Long>(1000, true)\n    recentIncomingMsgIds = new LruSet<Long>(1000, true)\n\n    // queues\n    queuedRpc = new Deque<PendingRpc>()\n    queuedAcks: Long[] = []\n    queuedStateReq: Long[] = []\n    queuedResendReq: Long[] = []\n    queuedCancelReq: Long[] = []\n    getStateSchedule = new SortedArray<PendingRpc>([], (a, b) => a.getState! - b.getState!)\n\n    chains = new Map<string | number, Long>()\n    chainsPendingFails = new Map<string | number, SortedArray<PendingRpc>>()\n\n    // requests info\n    pendingMessages = new LongMap<PendingMessage>()\n    destroySessionIdToMsgId = new LongMap<Long>()\n\n    lastPingRtt = NaN\n    lastPingTime = 0\n    lastPingMsgId = Long.ZERO\n    lastSessionCreatedUid = Long.ZERO\n\n    initConnectionCalled = false\n    authorizationPending = false\n\n    next429Timeout = 1000\n    current429Timeout?: NodeJS.Timeout\n    next429ResetTimeout?: NodeJS.Timeout\n\n    constructor(\n        readonly _crypto: ICryptoProvider,\n        readonly log: Logger,\n        readonly _readerMap: TlReaderMap,\n        readonly _writerMap: TlWriterMap,\n        readonly _salts: ServerSaltManager,\n    ) {\n        this.log.prefix = `[SESSION ${this._sessionId.toString(16)}] `\n    }\n\n    get hasPendingMessages(): boolean {\n        return Boolean(\n            this.queuedRpc.length ||\n                this.queuedAcks.length ||\n                this.queuedStateReq.length ||\n                this.queuedResendReq.length,\n        )\n    }\n\n    /**\n     * Reset session by resetting auth key(s) and session state\n     */\n    reset(withAuthKey = false): void {\n        if (withAuthKey) {\n            this.resetAuthKey()\n        }\n\n        clearTimeout(this.current429Timeout)\n        this.resetState(withAuthKey)\n        this.resetLastPing(true)\n    }\n\n    resetAuthKey(): void {\n        this._authKey.reset()\n        this._authKeyTemp.reset()\n        this._authKeyTempSecondary.reset()\n    }\n\n    /**\n     * Reset session state and generate a new session ID.\n     *\n     * By default, also cancels any pending RPC requests.\n     * If `keepPending` is set to `true`, pending requests will be kept\n     */\n    resetState(keepPending = false): void {\n        this._lastMessageId = Long.ZERO\n        this._seqNo = 0\n\n        this._sessionId = randomLong()\n        this.log.debug('session reset, new sid = %h', this._sessionId)\n        this.log.prefix = `[SESSION ${this._sessionId.toString(16)}] `\n\n        // reset session state\n\n        if (!keepPending) {\n            for (const info of this.pendingMessages.values()) {\n                if (info._ === 'rpc') {\n                    info.rpc.promise.reject(new MtcuteError('Session is reset'))\n                }\n            }\n            this.pendingMessages.clear()\n        }\n\n        this.recentOutgoingMsgIds.clear()\n        this.recentIncomingMsgIds.clear()\n\n        if (!keepPending) {\n            while (this.queuedRpc.length) {\n                const rpc = this.queuedRpc.popFront()!\n\n                if (rpc.sent === false) {\n                    rpc.promise.reject(new MtcuteError('Session is reset'))\n                }\n            }\n        }\n\n        this.queuedAcks.length = 0\n        this.queuedStateReq.length = 0\n        this.queuedResendReq.length = 0\n        this.queuedCancelReq.length = 0\n        this.getStateSchedule.clear()\n        this.chains.clear()\n        this.chainsPendingFails.clear()\n    }\n\n    enqueueRpc(rpc: PendingRpc, force?: boolean): boolean {\n        // already queued or cancelled\n        if ((!force && !rpc.sent) || rpc.cancelled) return false\n\n        rpc.sent = false\n        rpc.containerId = undefined\n        this.log.debug('enqueued %s for sending (msg_id = %s)', rpc.method, rpc.msgId || 'n/a')\n        this.queuedRpc.pushBack(rpc)\n\n        return true\n    }\n\n    getMessageId(): Long {\n        const timeTicks = Date.now()\n        const timeSec = Math.floor(timeTicks / 1000) + this._timeOffset\n        const timeMSec = timeTicks % 1000\n        const random = getRandomInt(0xffff)\n\n        let messageId = new Long((timeMSec << 21) | (random << 3) | 4, timeSec)\n\n        if (this._lastMessageId.gt(messageId)) {\n            messageId = this._lastMessageId.add(4)\n        }\n\n        this._lastMessageId = messageId\n\n        return messageId\n    }\n\n    getSeqNo(isContentRelated = true): number {\n        let seqNo = this._seqNo\n\n        if (isContentRelated) {\n            seqNo += 1\n            this._seqNo += 2\n        }\n\n        return seqNo\n    }\n\n    /** Encrypt a single MTProto message using session's keys */\n    encryptMessage(message: Uint8Array): Uint8Array {\n        const key = this._authKeyTemp.ready ? this._authKeyTemp : this._authKey\n\n        return key.encryptMessage(message, this._salts.currentSalt, this._sessionId)\n    }\n\n    /** Decrypt a single MTProto message using session's keys */\n    decryptMessage(data: Uint8Array, callback: Parameters<AuthKey['decryptMessage']>[2]): void {\n        if (!this._authKey.ready) throw new MtcuteError('Keys are not set up!')\n\n        const authKeyId = data.subarray(0, 8)\n\n        let key: AuthKey\n\n        if (this._authKey.match(authKeyId)) {\n            key = this._authKey\n        } else if (this._authKeyTemp.match(authKeyId)) {\n            key = this._authKeyTemp\n        } else if (this._authKeyTempSecondary.match(authKeyId)) {\n            key = this._authKeyTempSecondary\n        } else {\n            this.log.warn(\n                'received message with unknown authKey = %h (expected %h or %h or %h)',\n                authKeyId,\n                this._authKey.id,\n                this._authKeyTemp.id,\n                this._authKeyTempSecondary.id,\n            )\n\n            return\n        }\n\n        return key.decryptMessage(data, this._sessionId, callback)\n    }\n\n    writeMessage(\n        writer: TlBinaryWriter,\n        content: tl.TlObject | mtp.TlObject | Uint8Array,\n        isContentRelated = true,\n    ): Long {\n        const messageId = this.getMessageId()\n        const seqNo = this.getSeqNo(isContentRelated)\n\n        const length = ArrayBuffer.isView(content) ?\n            content.length :\n            TlSerializationCounter.countNeededBytes(writer.objectMap!, content)\n\n        writer.long(messageId)\n        writer.int(seqNo)\n        writer.uint(length)\n        if (ArrayBuffer.isView(content)) writer.raw(content)\n        else writer.object(content as tl.TlObject)\n\n        return messageId\n    }\n\n    onTransportFlood(callback: () => void) {\n        if (this.current429Timeout) return // already waiting\n\n        // all active queries must be resent after a timeout\n        this.resetLastPing(true)\n\n        const timeout = this.next429Timeout\n\n        this.next429Timeout = Math.min(this.next429Timeout * 2, 32000)\n        clearTimeout(this.current429Timeout)\n        clearTimeout(this.next429ResetTimeout)\n\n        this.current429Timeout = setTimeout(() => {\n            this.current429Timeout = undefined\n            callback()\n        }, timeout)\n        this.next429ResetTimeout = setTimeout(() => {\n            this.next429ResetTimeout = undefined\n            this.next429Timeout = 1000\n        }, 60000)\n\n        this.log.debug('transport flood, waiting for %d ms before proceeding', timeout)\n\n        return Date.now() + timeout\n    }\n\n    resetLastPing(withTime = false): void {\n        if (withTime) this.lastPingTime = 0\n\n        if (!this.lastPingMsgId.isZero()) {\n            this.pendingMessages.delete(this.lastPingMsgId)\n        }\n\n        this.lastPingMsgId = Long.ZERO\n    }\n\n    addToChain(chainId: string | number, msgId: Long): Long | undefined {\n        const prevMsgId = this.chains.get(chainId)\n        this.chains.set(chainId, msgId)\n\n        this.log.debug('added message %l to chain %s (prev: %l)', msgId, chainId, prevMsgId)\n\n        return prevMsgId\n    }\n\n    removeFromChain(chainId: string | number, msgId: Long): void {\n        const lastMsgId = this.chains.get(chainId)\n\n        if (!lastMsgId) {\n            this.log.warn('tried to remove message %l from empty chain %s', msgId, chainId)\n\n            return\n        }\n\n        if (lastMsgId.eq(msgId)) {\n            // last message of the chain, remove it\n            this.log.debug('chain %s: exhausted, last message %l', msgId, chainId)\n            this.chains.delete(chainId)\n        }\n\n        // do nothing\n    }\n\n    getPendingChainedFails(chainId: string | number): SortedArray<PendingRpc> {\n        let arr = this.chainsPendingFails.get(chainId)\n\n        if (!arr) {\n            arr = new SortedArray<PendingRpc>([], (a, b) => compareLongs(a.invokeAfter!, b.invokeAfter!))\n            this.chainsPendingFails.set(chainId, arr)\n        }\n\n        return arr\n    }\n}\n"]}
+{"version":3,"file":"mtproto-session.js","sourceRoot":"","sources":["../../../src/network/mtproto-session.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAGvB,OAAO,EAA+B,sBAAsB,EAAe,MAAM,oBAAoB,CAAA;AAErG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EACH,YAAY,EAEZ,KAAK,EACL,YAAY,EAGZ,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,GACd,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAoEvC;;;GAGG;AACH,MAAM,OAAO,cAAc;IA2CvB,YACa,OAAwB,EACxB,GAAW,EACX,UAAuB,EACvB,UAAuB,EACvB,MAAyB;QAJzB,YAAO,GAAP,OAAO,CAAiB;QACxB,QAAG,GAAH,GAAG,CAAQ;QACX,eAAU,GAAV,UAAU,CAAa;QACvB,eAAU,GAAV,UAAU,CAAa;QACvB,WAAM,GAAN,MAAM,CAAmB;QA/CtC,eAAU,GAAG,UAAU,EAAE,CAAA;QAEzB,aAAQ,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,iBAAY,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACnE,0BAAqB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAE5E,gBAAW,GAAG,CAAC,CAAA;QACf,mBAAc,GAAG,IAAI,CAAC,IAAI,CAAA;QAC1B,WAAM,GAAG,CAAC,CAAA;QAEV,aAAa;QACb,iBAAiB;QACjB,yBAAoB,GAAG,IAAI,MAAM,CAAO,IAAI,EAAE,IAAI,CAAC,CAAA;QACnD,yBAAoB,GAAG,IAAI,MAAM,CAAO,IAAI,EAAE,IAAI,CAAC,CAAA;QAEnD,SAAS;QACT,cAAS,GAAG,IAAI,KAAK,EAAc,CAAA;QACnC,eAAU,GAAW,EAAE,CAAA;QACvB,mBAAc,GAAW,EAAE,CAAA;QAC3B,oBAAe,GAAW,EAAE,CAAA;QAC5B,oBAAe,GAAW,EAAE,CAAA;QAC5B,qBAAgB,GAAG,IAAI,WAAW,CAAa,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAS,GAAG,CAAC,CAAC,QAAS,CAAC,CAAA;QAEvF,WAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;QACzC,uBAAkB,GAAG,IAAI,GAAG,EAA4C,CAAA;QAExE,gBAAgB;QAChB,oBAAe,GAAG,IAAI,OAAO,EAAkB,CAAA;QAC/C,4BAAuB,GAAG,IAAI,OAAO,EAAQ,CAAA;QAE7C,gBAAW,GAAG,GAAG,CAAA;QACjB,iBAAY,GAAG,CAAC,CAAA;QAChB,kBAAa,GAAG,IAAI,CAAC,IAAI,CAAA;QACzB,0BAAqB,GAAG,IAAI,CAAC,IAAI,CAAA;QAEjC,yBAAoB,GAAG,KAAK,CAAA;QAC5B,yBAAoB,GAAG,KAAK,CAAA;QAE5B,mBAAc,GAAG,IAAI,CAAA;QAWjB,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAA;IAClE,CAAC;IAED,IAAI,kBAAkB;QAClB,OAAO,OAAO,CACV,IAAI,CAAC,SAAS,CAAC,MAAM;YACjB,IAAI,CAAC,UAAU,CAAC,MAAM;YACtB,IAAI,CAAC,cAAc,CAAC,MAAM;YAC1B,IAAI,CAAC,eAAe,CAAC,MAAM,CAClC,CAAA;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,GAAG,KAAK;QACrB,IAAI,WAAW,EAAE;YACb,IAAI,CAAC,YAAY,EAAE,CAAA;SACtB;QAED,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACpC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,YAAY;QACR,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAA;IACtC,CAAC;IAED,gBAAgB,CAAC,MAAc;QAC3B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAA;QACzB,4DAA4D;QAC5D,6EAA6E;QAC7E,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAA;IACnC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,WAAW,GAAG,KAAK;QAC1B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAA;QAC/B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,EAAE,CAAA;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAA;QAE9D,sBAAsB;QAEtB,IAAI,CAAC,WAAW,EAAE;YACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE;gBAC9C,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;oBAClB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAA;iBAC/D;aACJ;YACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;SAC/B;QAED,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAA;QACjC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAA;QAEjC,IAAI,CAAC,WAAW,EAAE;YACd,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAG,CAAA;gBAEtC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE;oBACpB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAA;iBAC1D;aACJ;SACJ;QAED,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAA;QAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAA;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACnB,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAA;IACnC,CAAC;IAED,UAAU,CAAC,GAAe,EAAE,KAAe;QACvC,8BAA8B;QAC9B,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,KAAK,CAAA;QAExD,GAAG,CAAC,IAAI,GAAG,KAAK,CAAA;QAChB,GAAG,CAAC,WAAW,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,CAAA;QACvF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QAE5B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,YAAY;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAA;QAC/D,MAAM,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAA;QACjC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAEnC,IAAI,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QAEvE,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE;YACnC,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;SACzC;QAED,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QAE/B,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,QAAQ,CAAC,gBAAgB,GAAG,IAAI;QAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAA;QAEvB,IAAI,gBAAgB,EAAE;YAClB,KAAK,IAAI,CAAC,CAAA;YACV,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;SACnB;QAED,OAAO,KAAK,CAAA;IAChB,CAAC;IAED,4DAA4D;IAC5D,cAAc,CAAC,OAAmB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAA;QAEvE,OAAO,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAChF,CAAC;IAED,4DAA4D;IAC5D,cAAc,CAAC,IAAgB,EAAE,QAAkD;QAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,sBAAsB,CAAC,CAAA;QAEvE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAErC,IAAI,GAAY,CAAA;QAEhB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAChC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAA;SACtB;aAAM,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAC3C,GAAG,GAAG,IAAI,CAAC,YAAY,CAAA;SAC1B;aAAM,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YACpD,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAA;SACnC;aAAM;YACH,IAAI,CAAC,GAAG,CAAC,IAAI,CACT,sEAAsE,EACtE,SAAS,EACT,IAAI,CAAC,QAAQ,CAAC,EAAE,EAChB,IAAI,CAAC,YAAY,CAAC,EAAE,EACpB,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAChC,CAAA;YAED,OAAM;SACT;QAED,OAAO,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC9D,CAAC;IAED,YAAY,CACR,MAAsB,EACtB,OAAgD,EAChD,gBAAgB,GAAG,IAAI;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE7C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,sBAAsB,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAU,EAAE,OAAO,CAAC,CAAA;QAEvE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnB,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;;YAC/C,MAAM,CAAC,MAAM,CAAC,OAAsB,CAAC,CAAA;QAE1C,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,gBAAgB,CAAC,QAAoB;QACjC,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAM,CAAC,kBAAkB;QAErD,oDAAoD;QACpD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAExB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAA;QAEnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QAC9D,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACpC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAEtC,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAA;YAClC,QAAQ,EAAE,CAAA;QACd,CAAC,EAAE,OAAO,CAAC,CAAA;QACX,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAA;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC9B,CAAC,EAAE,KAAK,CAAC,CAAA;QAET,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,EAAE,OAAO,CAAC,CAAA;QAE/E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;IAC/B,CAAC;IAED,aAAa,CAAC,QAAQ,GAAG,KAAK;QAC1B,IAAI,QAAQ;YAAE,IAAI,CAAC,YAAY,GAAG,CAAC,CAAA;QAEnC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE;YAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;SAClD;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAA;IAClC,CAAC;IAED,UAAU,CAAC,OAAwB,EAAE,KAAW;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAE/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAEpF,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,eAAe,CAAC,OAAwB,EAAE,KAAW;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE1C,IAAI,CAAC,SAAS,EAAE;YACZ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;YAE/E,OAAM;SACT;QAED,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;YACrB,uCAAuC;YACvC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;YACtE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;SAC9B;QAED,aAAa;IACjB,CAAC;IAED,sBAAsB,CAAC,OAAwB;QAC3C,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC,GAAG,EAAE;YACN,GAAG,GAAG,IAAI,WAAW,CAAa,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,WAAY,EAAE,CAAC,CAAC,WAAY,CAAC,CAAC,CAAA;YAC7F,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;SAC5C;QAED,OAAO,GAAG,CAAA;IACd,CAAC;CACJ","sourcesContent":["import Long from 'long'\n\nimport { mtp, tl } from '@mtcute/tl'\nimport { TlBinaryWriter, TlReaderMap, TlSerializationCounter, TlWriterMap } from '@mtcute/tl-runtime'\n\nimport { MtcuteError } from '../types/index.js'\nimport {\n    compareLongs,\n    ControllablePromise,\n    Deque,\n    getRandomInt,\n    ICryptoProvider,\n    Logger,\n    LongMap,\n    LruSet,\n    randomLong,\n    SortedArray,\n} from '../utils/index.js'\nimport { AuthKey } from './auth-key.js'\nimport { ServerSaltManager } from './server-salt.js'\n\nexport interface PendingRpc {\n    method: string\n    data: Uint8Array\n    promise: ControllablePromise\n    stack?: string\n    gzipOverhead?: number\n\n    chainId?: string | number\n    invokeAfter?: Long\n\n    sent?: boolean\n    done?: boolean\n    msgId?: Long\n    seqNo?: number\n    containerId?: Long\n    acked?: boolean\n    initConn?: boolean\n    getState?: number\n    cancelled?: boolean\n    timeout?: NodeJS.Timeout\n}\n\nexport type PendingMessage =\n    | {\n          _: 'rpc'\n          rpc: PendingRpc\n      }\n    | {\n          _: 'container'\n          msgIds: Long[]\n      }\n    | {\n          _: 'state'\n          msgIds: Long[]\n          containerId: Long\n      }\n    | {\n          _: 'resend'\n          msgIds: Long[]\n          containerId: Long\n      }\n    | {\n          _: 'ping'\n          pingId: Long\n          containerId: Long\n      }\n    | {\n          _: 'destroy_session'\n          sessionId: Long\n          containerId: Long\n      }\n    | {\n          _: 'cancel'\n          msgId: Long\n          containerId: Long\n      }\n    | {\n          _: 'future_salts'\n          containerId: Long\n      }\n    | {\n          _: 'bind'\n          promise: ControllablePromise\n      }\n\n/**\n * Class encapsulating a single MTProto session and storing\n * all the relevant state\n */\nexport class MtprotoSession {\n    _sessionId = randomLong()\n\n    _authKey = new AuthKey(this._crypto, this.log, this._readerMap)\n    _authKeyTemp = new AuthKey(this._crypto, this.log, this._readerMap)\n    _authKeyTempSecondary = new AuthKey(this._crypto, this.log, this._readerMap)\n\n    _timeOffset = 0\n    _lastMessageId = Long.ZERO\n    _seqNo = 0\n\n    /// state ///\n    // recent msg ids\n    recentOutgoingMsgIds = new LruSet<Long>(1000, true)\n    recentIncomingMsgIds = new LruSet<Long>(1000, true)\n\n    // queues\n    queuedRpc = new Deque<PendingRpc>()\n    queuedAcks: Long[] = []\n    queuedStateReq: Long[] = []\n    queuedResendReq: Long[] = []\n    queuedCancelReq: Long[] = []\n    getStateSchedule = new SortedArray<PendingRpc>([], (a, b) => a.getState! - b.getState!)\n\n    chains = new Map<string | number, Long>()\n    chainsPendingFails = new Map<string | number, SortedArray<PendingRpc>>()\n\n    // requests info\n    pendingMessages = new LongMap<PendingMessage>()\n    destroySessionIdToMsgId = new LongMap<Long>()\n\n    lastPingRtt = NaN\n    lastPingTime = 0\n    lastPingMsgId = Long.ZERO\n    lastSessionCreatedUid = Long.ZERO\n\n    initConnectionCalled = false\n    authorizationPending = false\n\n    next429Timeout = 1000\n    current429Timeout?: NodeJS.Timeout\n    next429ResetTimeout?: NodeJS.Timeout\n\n    constructor(\n        readonly _crypto: ICryptoProvider,\n        readonly log: Logger,\n        readonly _readerMap: TlReaderMap,\n        readonly _writerMap: TlWriterMap,\n        readonly _salts: ServerSaltManager,\n    ) {\n        this.log.prefix = `[SESSION ${this._sessionId.toString(16)}] `\n    }\n\n    get hasPendingMessages(): boolean {\n        return Boolean(\n            this.queuedRpc.length ||\n                this.queuedAcks.length ||\n                this.queuedStateReq.length ||\n                this.queuedResendReq.length,\n        )\n    }\n\n    /**\n     * Reset session by resetting auth key(s) and session state\n     */\n    reset(withAuthKey = false): void {\n        if (withAuthKey) {\n            this.resetAuthKey()\n        }\n\n        clearTimeout(this.current429Timeout)\n        this.resetState(withAuthKey)\n        this.resetLastPing(true)\n    }\n\n    resetAuthKey(): void {\n        this._authKey.reset()\n        this._authKeyTemp.reset()\n        this._authKeyTempSecondary.reset()\n    }\n\n    updateTimeOffset(offset: number) {\n        this._timeOffset = offset\n        // lastMessageId was generated with (potentially) wrong time\n        // reset it to avoid bigger issues - at worst, we'll get bad_msg_notification\n        this._lastMessageId = Long.ZERO\n    }\n\n    /**\n     * Reset session state and generate a new session ID.\n     *\n     * By default, also cancels any pending RPC requests.\n     * If `keepPending` is set to `true`, pending requests will be kept\n     */\n    resetState(keepPending = false): void {\n        this._lastMessageId = Long.ZERO\n        this._seqNo = 0\n\n        this._sessionId = randomLong()\n        this.log.debug('session reset, new sid = %h', this._sessionId)\n        this.log.prefix = `[SESSION ${this._sessionId.toString(16)}] `\n\n        // reset session state\n\n        if (!keepPending) {\n            for (const info of this.pendingMessages.values()) {\n                if (info._ === 'rpc') {\n                    info.rpc.promise.reject(new MtcuteError('Session is reset'))\n                }\n            }\n            this.pendingMessages.clear()\n        }\n\n        this.recentOutgoingMsgIds.clear()\n        this.recentIncomingMsgIds.clear()\n\n        if (!keepPending) {\n            while (this.queuedRpc.length) {\n                const rpc = this.queuedRpc.popFront()!\n\n                if (rpc.sent === false) {\n                    rpc.promise.reject(new MtcuteError('Session is reset'))\n                }\n            }\n        }\n\n        this.queuedAcks.length = 0\n        this.queuedStateReq.length = 0\n        this.queuedResendReq.length = 0\n        this.queuedCancelReq.length = 0\n        this.getStateSchedule.clear()\n        this.chains.clear()\n        this.chainsPendingFails.clear()\n    }\n\n    enqueueRpc(rpc: PendingRpc, force?: boolean): boolean {\n        // already queued or cancelled\n        if ((!force && !rpc.sent) || rpc.cancelled) return false\n\n        rpc.sent = false\n        rpc.containerId = undefined\n        this.log.debug('enqueued %s for sending (msg_id = %s)', rpc.method, rpc.msgId || 'n/a')\n        this.queuedRpc.pushBack(rpc)\n\n        return true\n    }\n\n    getMessageId(): Long {\n        const timeTicks = Date.now()\n        const timeSec = Math.floor(timeTicks / 1000) - this._timeOffset\n        const timeMSec = timeTicks % 1000\n        const random = getRandomInt(0xffff)\n\n        let messageId = new Long((timeMSec << 21) | (random << 3) | 4, timeSec)\n\n        if (this._lastMessageId.gt(messageId)) {\n            messageId = this._lastMessageId.add(4)\n        }\n\n        this._lastMessageId = messageId\n\n        return messageId\n    }\n\n    getSeqNo(isContentRelated = true): number {\n        let seqNo = this._seqNo\n\n        if (isContentRelated) {\n            seqNo += 1\n            this._seqNo += 2\n        }\n\n        return seqNo\n    }\n\n    /** Encrypt a single MTProto message using session's keys */\n    encryptMessage(message: Uint8Array): Uint8Array {\n        const key = this._authKeyTemp.ready ? this._authKeyTemp : this._authKey\n\n        return key.encryptMessage(message, this._salts.currentSalt, this._sessionId)\n    }\n\n    /** Decrypt a single MTProto message using session's keys */\n    decryptMessage(data: Uint8Array, callback: Parameters<AuthKey['decryptMessage']>[2]): void {\n        if (!this._authKey.ready) throw new MtcuteError('Keys are not set up!')\n\n        const authKeyId = data.subarray(0, 8)\n\n        let key: AuthKey\n\n        if (this._authKey.match(authKeyId)) {\n            key = this._authKey\n        } else if (this._authKeyTemp.match(authKeyId)) {\n            key = this._authKeyTemp\n        } else if (this._authKeyTempSecondary.match(authKeyId)) {\n            key = this._authKeyTempSecondary\n        } else {\n            this.log.warn(\n                'received message with unknown authKey = %h (expected %h or %h or %h)',\n                authKeyId,\n                this._authKey.id,\n                this._authKeyTemp.id,\n                this._authKeyTempSecondary.id,\n            )\n\n            return\n        }\n\n        return key.decryptMessage(data, this._sessionId, callback)\n    }\n\n    writeMessage(\n        writer: TlBinaryWriter,\n        content: tl.TlObject | mtp.TlObject | Uint8Array,\n        isContentRelated = true,\n    ): Long {\n        const messageId = this.getMessageId()\n        const seqNo = this.getSeqNo(isContentRelated)\n\n        const length = ArrayBuffer.isView(content) ?\n            content.length :\n            TlSerializationCounter.countNeededBytes(writer.objectMap!, content)\n\n        writer.long(messageId)\n        writer.int(seqNo)\n        writer.uint(length)\n        if (ArrayBuffer.isView(content)) writer.raw(content)\n        else writer.object(content as tl.TlObject)\n\n        return messageId\n    }\n\n    onTransportFlood(callback: () => void) {\n        if (this.current429Timeout) return // already waiting\n\n        // all active queries must be resent after a timeout\n        this.resetLastPing(true)\n\n        const timeout = this.next429Timeout\n\n        this.next429Timeout = Math.min(this.next429Timeout * 2, 32000)\n        clearTimeout(this.current429Timeout)\n        clearTimeout(this.next429ResetTimeout)\n\n        this.current429Timeout = setTimeout(() => {\n            this.current429Timeout = undefined\n            callback()\n        }, timeout)\n        this.next429ResetTimeout = setTimeout(() => {\n            this.next429ResetTimeout = undefined\n            this.next429Timeout = 1000\n        }, 60000)\n\n        this.log.debug('transport flood, waiting for %d ms before proceeding', timeout)\n\n        return Date.now() + timeout\n    }\n\n    resetLastPing(withTime = false): void {\n        if (withTime) this.lastPingTime = 0\n\n        if (!this.lastPingMsgId.isZero()) {\n            this.pendingMessages.delete(this.lastPingMsgId)\n        }\n\n        this.lastPingMsgId = Long.ZERO\n    }\n\n    addToChain(chainId: string | number, msgId: Long): Long | undefined {\n        const prevMsgId = this.chains.get(chainId)\n        this.chains.set(chainId, msgId)\n\n        this.log.debug('added message %l to chain %s (prev: %l)', msgId, chainId, prevMsgId)\n\n        return prevMsgId\n    }\n\n    removeFromChain(chainId: string | number, msgId: Long): void {\n        const lastMsgId = this.chains.get(chainId)\n\n        if (!lastMsgId) {\n            this.log.warn('tried to remove message %l from empty chain %s', msgId, chainId)\n\n            return\n        }\n\n        if (lastMsgId.eq(msgId)) {\n            // last message of the chain, remove it\n            this.log.debug('chain %s: exhausted, last message %l', msgId, chainId)\n            this.chains.delete(chainId)\n        }\n\n        // do nothing\n    }\n\n    getPendingChainedFails(chainId: string | number): SortedArray<PendingRpc> {\n        let arr = this.chainsPendingFails.get(chainId)\n\n        if (!arr) {\n            arr = new SortedArray<PendingRpc>([], (a, b) => compareLongs(a.invokeAfter!, b.invokeAfter!))\n            this.chainsPendingFails.set(chainId, arr)\n        }\n\n        return arr\n    }\n}\n"]}

package/esm/network/network-manager.js

@@ -240,7 +240,7 @@ export class NetworkManager {
             _: 'initConnection',
             deviceModel,
             systemVersion: '1.0',
-            appVersion: '0.7.2',
+            appVersion: '0.7.3',
             systemLangCode: 'en',
             langPack: '',
             langCode: 'en',

package/esm/network/session-connection.js

@@ -192,7 +192,7 @@ export class SessionConnection extends PersistentConnection {
             .then(([authKey, serverSalt, timeOffset]) => {
             this._session._authKey.setup(authKey);
             this._salts.currentSalt = serverSalt;
-            this._session._timeOffset = timeOffset;
+            this._session.updateTimeOffset(timeOffset);
             this._session.authorizationPending = false;
             this.emit('key-change', authKey);
             if (this._usePfs) {
@@ -812,9 +812,9 @@ export class SessionConnection extends PersistentConnection {
                     // msg_id is either too high or too low
                     // code 20 means msg_id is too old,
                     // we just need to resend the message
-                    const serverTime = msgId.low >>> 0;
+                    const serverTime = msgId.high >>> 0;
                     const timeOffset = Math.floor(Date.now() / 1000) - serverTime;
-                    this._session._timeOffset = timeOffset;
+                    this._session.updateTimeOffset(timeOffset);
                     this.log.debug('server time: %d, corrected offset to %d', serverTime, timeOffset);
                 }
                 this._onMessageFailed(msg.badMsgId, `bad_msg_notification ${msg.errorCode}`);