@nmshd/transport 1.0.0

package/dist/modules/accounts/AccountController.js

@@ -0,0 +1,337 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountController = void 0;
+const crypto_1 = require("@nmshd/crypto");
+const core_1 = require("../../core");
+const Authenticator_1 = require("../../core/backbone/Authenticator");
+const CoreCrypto_1 = require("../../core/CoreCrypto");
+const DbCollectionNames_1 = require("../../core/DbCollectionNames");
+const TransportLoggerFactory_1 = require("../../core/TransportLoggerFactory");
+const util_1 = require("../../util");
+const CertificateController_1 = require("../certificates/CertificateController");
+const CertificateIssuer_1 = require("../certificates/CertificateIssuer");
+const CertificateValidator_1 = require("../certificates/CertificateValidator");
+const ChallengeController_1 = require("../challenges/ChallengeController");
+const DeviceAuthClient_1 = require("../devices/backbone/DeviceAuthClient");
+const DeviceClient_1 = require("../devices/backbone/DeviceClient");
+const DeviceController_1 = require("../devices/DeviceController");
+const DevicesController_1 = require("../devices/DevicesController");
+const DeviceSecretController_1 = require("../devices/DeviceSecretController");
+const Device_1 = require("../devices/local/Device");
+const DeviceSecretCredentials_1 = require("../devices/local/DeviceSecretCredentials");
+const FileController_1 = require("../files/FileController");
+const MessageController_1 = require("../messages/MessageController");
+const RelationshipsController_1 = require("../relationships/RelationshipsController");
+const RelationshipSecretController_1 = require("../relationships/RelationshipSecretController");
+const RelationshipTemplateController_1 = require("../relationshipTemplates/RelationshipTemplateController");
+const SecretController_1 = require("../secrets/SecretController");
+const SyncController_1 = require("../sync/SyncController");
+const SynchronizedCollection_1 = require("../sync/SynchronizedCollection");
+const TokenController_1 = require("../tokens/TokenController");
+const IdentityClient_1 = require("./backbone/IdentityClient");
+const Identity_1 = require("./data/Identity");
+const IdentityController_1 = require("./IdentityController");
+const IdentityUtil_1 = require("./IdentityUtil");
+class AccountController {
+    constructor(_transport, _realm, _db, _config) {
+        this._transport = _transport;
+        this._realm = _realm;
+        this._db = _db;
+        this._config = _config;
+        this._dbClosed = false;
+        this.autoSync = true;
+        this._authenticator = new Authenticator_1.Authenticator(this);
+        this._log = TransportLoggerFactory_1.TransportLoggerFactory.getLogger(core_1.ControllerName.Account);
+    }
+    get authenticator() {
+        return this._authenticator;
+    }
+    get config() {
+        return this._config;
+    }
+    get db() {
+        return this._db;
+    }
+    get transport() {
+        return this._transport;
+    }
+    get activeDevice() {
+        if (!this._activeDevice) {
+            throw new Error("The DeviceController is not initialized yet.");
+        }
+        return this._activeDevice;
+    }
+    get activeDeviceOrUndefined() {
+        return this._activeDevice;
+    }
+    get identity() {
+        return this._identity;
+    }
+    // TODO: JSSNMSHDD-2487 (last login date)
+    async init(deviceSharedSecret) {
+        this.info = await this.db.getMap("AccountInfo");
+        this.unpushedDatawalletModifications = await this.db.getCollection(DbCollectionNames_1.DbCollectionNames.UnpushedDatawalletModifications);
+        this.deviceClient = new DeviceClient_1.DeviceClient(this.config);
+        this.identityClient = new IdentityClient_1.IdentityClient(this.config);
+        this._identity = new IdentityController_1.IdentityController(this);
+        this._activeDevice = new DeviceController_1.DeviceController(this);
+        this.challenges = await new ChallengeController_1.ChallengeController(this).init();
+        const [availableIdentityDoc, availableDeviceDoc, availableBaseKeyDoc] = await Promise.all([
+            this.info.get("identity"),
+            this.info.get("device"),
+            this.info.get("baseKey")
+        ]);
+        let device;
+        let identityCreated = false;
+        let deviceUpdated = false;
+        if (!availableIdentityDoc && !availableDeviceDoc) {
+            if (!deviceSharedSecret) {
+                // Identity creation
+                this._log.trace("No account information found. Creating new account...");
+                const result = await this.createIdentityAndDevice(this._realm);
+                identityCreated = true;
+                device = result.device;
+                this.deviceAuthClient = new DeviceAuthClient_1.DeviceAuthClient(this.config, this.authenticator);
+            }
+            else {
+                // Device Onboarding
+                device = await this.onboardDevice(deviceSharedSecret);
+                deviceUpdated = true;
+            }
+        }
+        else if (!deviceSharedSecret && availableIdentityDoc && availableDeviceDoc) {
+            // Login
+            if (!availableBaseKeyDoc) {
+                throw core_1.TransportErrors.secrets.secretNotFound("BaseKey");
+            }
+            const [availableIdentity, availableDevice, availableBaseKey] = await Promise.all([
+                Identity_1.Identity.from(availableIdentityDoc),
+                Device_1.Device.from(availableDeviceDoc),
+                crypto_1.CryptoSecretKey.fromJSON(availableBaseKeyDoc)
+            ]);
+            await Promise.all([
+                this.identity.init(availableIdentity),
+                this.activeDevice.init(availableBaseKey, availableDevice)
+            ]);
+            this.deviceAuthClient = new DeviceAuthClient_1.DeviceAuthClient(this.config, this.authenticator);
+        }
+        else {
+            throw core_1.TransportErrors.general.notAllowedCombinationOfDeviceSharedSecretAndAccount().logWith(this._log);
+        }
+        this._log.trace(`Using device ${this.activeDevice.id} for identity ${this.identity.address}.`);
+        await this.initControllers();
+        if (identityCreated) {
+            await this.devices.addExistingDevice(device);
+        }
+        else if (deviceUpdated) {
+            await this.syncDatawallet();
+            await this.devices.update(device);
+        }
+        await this.syncDatawallet();
+        return this;
+    }
+    async close() {
+        if (!this._dbClosed) {
+            this._log.trace(`Closing DB for account ${this.identity.identity.address.toString()}.`);
+            await this._db.close();
+            this._dbClosed = true;
+        }
+    }
+    async initControllers() {
+        this._log.trace("Initializing controllers...");
+        this.synchronization = await new SyncController_1.SyncController(this, this.unpushedDatawalletModifications, this.config.datawalletEnabled).init();
+        this.relationshipSecrets = await new RelationshipSecretController_1.RelationshipSecretController(this).init();
+        this.devices = await new DevicesController_1.DevicesController(this).init();
+        this.certificates = await new CertificateController_1.CertificateController(this).init();
+        this.certificateIssuer = await new CertificateIssuer_1.CertificateIssuer(this).init();
+        this.certificateValidator = await new CertificateValidator_1.CertificateValidator(this).init();
+        this.files = await new FileController_1.FileController(this).init();
+        this.relationships = await new RelationshipsController_1.RelationshipsController(this, this.relationshipSecrets).init();
+        this.relationshipTemplates = await new RelationshipTemplateController_1.RelationshipTemplateController(this, this.relationshipSecrets).init();
+        this.messages = await new MessageController_1.MessageController(this).init();
+        this.tokens = await new TokenController_1.TokenController(this).init();
+        this._log.trace("Initialization of controllers finished.");
+    }
+    disableAutoSync() {
+        this.autoSync = false;
+    }
+    async enableAutoSync() {
+        this.autoSync = true;
+        await this.syncDatawallet();
+    }
+    async syncDatawallet(force = false) {
+        if (!force && !this.autoSync) {
+            return;
+        }
+        return await this.synchronization.sync("OnlyDatawallet");
+    }
+    async syncEverything() {
+        return await this.synchronization.sync("Everything");
+    }
+    async getLastCompletedSyncTime() {
+        return await this.synchronization.getLastCompletedSyncTime();
+    }
+    async getLastCompletedDatawalletSyncTime() {
+        return await this.synchronization.getLastCompletedDatawalletSyncTime();
+    }
+    async createIdentityAndDevice(realm = Identity_1.Realm.Prod) {
+        this._log.trace(`Creating new identity for realm ${realm}...`);
+        const [identityKeypair, devicePwdD1, deviceKeypair, privBaseShared, privBaseDevice] = await Promise.all([
+            // Generate identity keypair
+            CoreCrypto_1.CoreCrypto.generateSignatureKeypair(),
+            // Generate strong device password
+            await util_1.PasswordGenerator.createStrongPassword(45, 50),
+            // Generate device keypair
+            CoreCrypto_1.CoreCrypto.generateSignatureKeypair(),
+            // Generate Shared Base Key
+            CoreCrypto_1.CoreCrypto.generateSecretKey(),
+            // Generate Device Base Key
+            CoreCrypto_1.CoreCrypto.generateSecretKey()
+        ]);
+        this._log.trace("Created keys. Requesting challenge...");
+        // Sign Challenge
+        const signedChallenge = await this.challenges.createAccountCreationChallenge(identityKeypair);
+        this._log.trace("Challenge signed. Creating device...");
+        const [deviceResponseResult, privSync, localAddress, deviceInfo] = await Promise.all([
+            // Register first device (and identity) on backbone
+            this.identityClient.createIdentity({
+                devicePassword: devicePwdD1,
+                identityPublicKey: identityKeypair.publicKey.toBase64(),
+                signedChallenge: signedChallenge.toJSON(false),
+                clientId: this._config.platformClientId,
+                clientSecret: this._config.platformClientSecret
+            }),
+            // Generate Synchronization Root Key
+            CoreCrypto_1.CoreCrypto.generateSecretKey(),
+            // Generate address locally
+            IdentityUtil_1.IdentityUtil.createAddress(identityKeypair.publicKey, realm),
+            this.fetchDeviceInfo()
+        ]);
+        if (deviceResponseResult.isError) {
+            const error = deviceResponseResult.error;
+            if (error.code === "error.platform.unauthorized") {
+                throw core_1.TransportErrors.general.platformClientInvalid().logWith(this._log);
+            }
+        }
+        const deviceResponse = deviceResponseResult.value;
+        this._log.trace(`Registered identity with address ${deviceResponse.address}, device id is ${deviceResponse.device.id}.`);
+        if (!deviceResponse.address) {
+            throw core_1.TransportErrors.identity.noAddressReceived().logWith(this._log);
+        }
+        if (localAddress.toString() !== deviceResponse.address) {
+            throw core_1.TransportErrors.identity.addressMismatch().logWith(this._log);
+        }
+        const identity = await Identity_1.Identity.from({
+            address: core_1.CoreAddress.from(deviceResponse.address),
+            createdAt: core_1.CoreDate.from(deviceResponse.createdAt),
+            description: "",
+            name: "",
+            realm: realm,
+            type: "unknown" /* UNKNOWN */,
+            publicKey: identityKeypair.publicKey
+        });
+        const deviceId = core_1.CoreId.from(deviceResponse.device.id);
+        const device = await Device_1.Device.from({
+            createdAt: core_1.CoreDate.from(deviceResponse.createdAt),
+            createdByDevice: deviceId,
+            id: deviceId,
+            description: "",
+            name: "Device 1",
+            lastLoginAt: core_1.CoreDate.utc(),
+            operatingSystem: deviceInfo.operatingSystem,
+            publicKey: deviceKeypair.publicKey,
+            type: deviceInfo.type,
+            certificate: "",
+            username: deviceResponse.device.username
+        });
+        // Initialize required controllers
+        await Promise.all([this.identity.init(identity), this.activeDevice.init(privBaseDevice, device)]);
+        const deviceCredentials = await DeviceSecretCredentials_1.DeviceSecretCredentials.from({
+            id: device.id,
+            username: deviceResponse.device.username,
+            password: devicePwdD1
+        });
+        await Promise.all([
+            this.info.set("device", device.toJSON()),
+            this.info.set("identity", identity.toJSON()),
+            this.info.set("baseKey", privBaseDevice.toJSON()),
+            this.activeDevice.secrets.storeSecret(privBaseShared, DeviceSecretController_1.DeviceSecretType.SharedSecretBaseKey),
+            this.activeDevice.secrets.storeSecret(privSync, DeviceSecretController_1.DeviceSecretType.IdentitySynchronizationMaster),
+            this.activeDevice.secrets.storeSecret(identityKeypair.privateKey, DeviceSecretController_1.DeviceSecretType.IdentitySignature),
+            this.activeDevice.secrets.storeSecret(deviceKeypair.privateKey, DeviceSecretController_1.DeviceSecretType.DeviceSignature),
+            this.activeDevice.secrets.storeSecret(deviceCredentials, DeviceSecretController_1.DeviceSecretType.DeviceCredentials)
+        ]);
+        // TODO: JSSNMSHDD-2471 (Rollback on error)
+        return { identity, device };
+    }
+    async onboardDevice(deviceSharedSecret) {
+        this._log.trace("Onboarding device for existing identity...");
+        const [devicePwdDn, deviceKeypair, deviceInfo, privBaseDevice] = await Promise.all([
+            // Generate strong device password
+            util_1.PasswordGenerator.createStrongPassword(45, 50),
+            // Generate device keypair
+            CoreCrypto_1.CoreCrypto.generateSignatureKeypair(),
+            this.fetchDeviceInfo(),
+            // Generate device basekey
+            CoreCrypto_1.CoreCrypto.generateSecretKey()
+        ]);
+        const device = await Device_1.Device.from({
+            id: deviceSharedSecret.id,
+            name: deviceSharedSecret.name ? deviceSharedSecret.name : "",
+            description: deviceSharedSecret.description ? deviceSharedSecret.name : "",
+            lastLoginAt: core_1.CoreDate.utc(),
+            createdAt: deviceSharedSecret.createdAt,
+            createdByDevice: deviceSharedSecret.createdByDevice,
+            operatingSystem: deviceInfo.operatingSystem,
+            type: deviceInfo.type,
+            publicKey: deviceKeypair.publicKey,
+            username: deviceSharedSecret.username,
+            initialPassword: "",
+            isAdmin: deviceSharedSecret.identityPrivateKey ? true : false
+        });
+        // Initialize required controllers
+        await Promise.all([
+            this.identity.init(deviceSharedSecret.identity),
+            this.activeDevice.init(privBaseDevice, device)
+        ]);
+        const deviceCredentials = await DeviceSecretCredentials_1.DeviceSecretCredentials.from({
+            id: deviceSharedSecret.id,
+            username: deviceSharedSecret.username,
+            password: deviceSharedSecret.password
+        });
+        await Promise.all([
+            this.info.set("device", device.toJSON()),
+            this.info.set("identity", deviceSharedSecret.identity.toJSON()),
+            this.info.set("baseKey", privBaseDevice.toJSON()),
+            this.info.set(SecretController_1.SecretController.secretNonceKey, deviceSharedSecret.deviceIndex * 1000000),
+            this.activeDevice.secrets.storeSecret(deviceSharedSecret.secretBaseKey, DeviceSecretController_1.DeviceSecretType.SharedSecretBaseKey),
+            this.activeDevice.secrets.storeSecret(deviceSharedSecret.synchronizationKey, DeviceSecretController_1.DeviceSecretType.IdentitySynchronizationMaster),
+            this.activeDevice.secrets.storeSecret(deviceKeypair.privateKey, DeviceSecretController_1.DeviceSecretType.DeviceSignature),
+            this.activeDevice.secrets.storeSecret(deviceCredentials, DeviceSecretController_1.DeviceSecretType.DeviceCredentials)
+        ]);
+        if (deviceSharedSecret.identityPrivateKey) {
+            await this.activeDevice.secrets.storeSecret(deviceSharedSecret.identityPrivateKey, DeviceSecretController_1.DeviceSecretType.IdentitySignature);
+        }
+        this.deviceAuthClient = new DeviceAuthClient_1.DeviceAuthClient(this.config, this.authenticator);
+        await this.activeDevice.changePassword(devicePwdDn);
+        return device;
+    }
+    async registerPushNotificationToken(token) {
+        await this.deviceAuthClient.registerPushNotificationToken(token);
+    }
+    fetchDeviceInfo() {
+        return Promise.resolve({
+            operatingSystem: "",
+            type: Device_1.DeviceType.Unknown
+        });
+    }
+    async getSynchronizedCollection(collectionName) {
+        const collection = await this.db.getCollection(collectionName);
+        if (!this.config.datawalletEnabled) {
+            return new SynchronizedCollection_1.SynchronizedCollection(collection);
+        }
+        return new SynchronizedCollection_1.SynchronizedCollection(collection, this.unpushedDatawalletModifications);
+    }
+}
+exports.AccountController = AccountController;
+//# sourceMappingURL=AccountController.js.map

package/dist/modules/accounts/AccountController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountController.js","sourceRoot":"","sources":["../../../src/modules/accounts/AccountController.ts"],"names":[],"mappings":";;;AAEA,0CAA+C;AAC/C,qCAA+G;AAC/G,qEAAiE;AACjE,sDAAkD;AAClD,oEAAgE;AAChE,8EAA0E;AAC1E,qCAA8C;AAC9C,iFAA6E;AAC7E,yEAAqE;AACrE,+EAA2E;AAC3E,2EAAuE;AACvE,2EAAkH;AAClH,mEAA+D;AAC/D,kEAA8D;AAC9D,oEAAgE;AAChE,8EAAoE;AACpE,oDAAwE;AACxE,sFAAkF;AAElF,4DAAwD;AACxD,qEAAiE;AACjE,sFAAkF;AAClF,gGAA4F;AAC5F,4GAAwG;AACxG,kEAA8D;AAE9D,2DAAuD;AACvD,2EAAuE;AACvE,+DAA2D;AAC3D,8DAA0D;AAC1D,8CAA+D;AAC/D,6DAAyD;AACzD,iDAA6C;AAE7C,MAAa,iBAAiB;IA2D1B,YACqB,UAAqB,EACrB,MAAa,EACb,GAAgC,EAChC,OAAgB;QAHhB,eAAU,GAAV,UAAU,CAAW;QACrB,WAAM,GAAN,MAAM,CAAO;QACb,QAAG,GAAH,GAAG,CAA6B;QAChC,YAAO,GAAP,OAAO,CAAS;QA1B3B,cAAS,GAAG,KAAK,CAAA;QAwInB,aAAQ,GAAG,IAAI,CAAA;QA5GnB,IAAI,CAAC,cAAc,GAAG,IAAI,6BAAa,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,IAAI,GAAG,+CAAsB,CAAC,SAAS,CAAC,qBAAc,CAAC,OAAO,CAAC,CAAA;IACxE,CAAC;IA/DD,IAAW,aAAa;QACpB,OAAO,IAAI,CAAC,cAAc,CAAA;IAC9B,CAAC;IAuBD,IAAW,MAAM;QACb,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAED,IAAW,EAAE;QACT,OAAO,IAAI,CAAC,GAAG,CAAA;IACnB,CAAC;IAID,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,UAAU,CAAA;IAC1B,CAAC;IAGD,IAAW,YAAY;QACnB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;SAClE;QACD,OAAO,IAAI,CAAC,aAAa,CAAA;IAC7B,CAAC;IACD,IAAW,uBAAuB;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAA;IAC7B,CAAC;IAGD,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;IAYD,yCAAyC;IAClC,KAAK,CAAC,IAAI,CAAC,kBAAuC;QACrD,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC/C,IAAI,CAAC,+BAA+B,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAC9D,qCAAiB,CAAC,+BAA+B,CACpD,CAAA;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,2BAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,+BAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAErD,IAAI,CAAC,SAAS,GAAG,IAAI,uCAAkB,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,mCAAgB,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,yCAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QAE5D,MAAM,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;SAC3B,CAAC,CAAA;QAEF,IAAI,MAAc,CAAA;QAClB,IAAI,eAAe,GAAG,KAAK,CAAA;QAC3B,IAAI,aAAa,GAAG,KAAK,CAAA;QAEzB,IAAI,CAAC,oBAAoB,IAAI,CAAC,kBAAkB,EAAE;YAC9C,IAAI,CAAC,kBAAkB,EAAE;gBACrB,oBAAoB;gBACpB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;gBACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBAE9D,eAAe,GAAG,IAAI,CAAA;gBACtB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;gBACtB,IAAI,CAAC,gBAAgB,GAAG,IAAI,mCAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;aAChF;iBAAM;gBACH,oBAAoB;gBACpB,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAA;gBACrD,aAAa,GAAG,IAAI,CAAA;aACvB;SACJ;aAAM,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,IAAI,kBAAkB,EAAE;YAC1E,QAAQ;YACR,IAAI,CAAC,mBAAmB,EAAE;gBACtB,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;aAC1D;YACD,MAAM,CAAC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC7E,mBAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC;gBACnC,eAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBAC/B,wBAAe,CAAC,QAAQ,CAAC,mBAAmB,CAAC;aAChD,CAAC,CAAA;YACF,MAAM,OAAO,CAAC,GAAG,CAAC;gBACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC;aAC5D,CAAC,CAAA;YACF,IAAI,CAAC,gBAAgB,GAAG,IAAI,mCAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;SAChF;aAAM;YACH,MAAM,sBAAe,CAAC,OAAO,CAAC,mDAAmD,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SACzG;QAED,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,YAAY,CAAC,EAAE,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAA;QAE9F,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAE5B,IAAI,eAAe,EAAE;YACjB,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAO,CAAC,CAAA;SAChD;aAAM,IAAI,aAAa,EAAE;YACtB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;YAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAO,CAAC,CAAA;SACrC;QACD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAE3B,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,KAAK;QACd,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACvF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;YACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;SACxB;IACL,CAAC;IAEO,KAAK,CAAC,eAAe;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAE9C,IAAI,CAAC,eAAe,GAAG,MAAM,IAAI,+BAAc,CAC3C,IAAI,EACJ,IAAI,CAAC,+BAA+B,EACpC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAChC,CAAC,IAAI,EAAE,CAAA;QACR,IAAI,CAAC,mBAAmB,GAAG,MAAM,IAAI,2DAA4B,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QAC9E,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,qCAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACvD,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,6CAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QAChE,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,qCAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACjE,IAAI,CAAC,oBAAoB,GAAG,MAAM,IAAI,2CAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACvE,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,+BAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QAElD,IAAI,CAAC,aAAa,GAAG,MAAM,IAAI,iDAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAA;QAE7F,IAAI,CAAC,qBAAqB,GAAG,MAAM,IAAI,+DAA8B,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5G,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,qCAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACxD,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,iCAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QAEpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAGM,eAAe;QAClB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;IACzB,CAAC;IAEM,KAAK,CAAC,cAAc;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAK,GAAG,KAAK;QACrC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1B,OAAM;SACT;QAED,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAC5D,CAAC;IAEM,KAAK,CAAC,cAAc;QACvB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACxD,CAAC;IAEM,KAAK,CAAC,wBAAwB;QACjC,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAA;IAChE,CAAC;IAEM,KAAK,CAAC,kCAAkC;QAC3C,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,kCAAkC,EAAE,CAAA;IAC1E,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,QAAe,gBAAK,CAAC,IAAI;QAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mCAAmC,KAAK,KAAK,CAAC,CAAA;QAC9D,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpG,4BAA4B;YAC5B,uBAAU,CAAC,wBAAwB,EAAE;YACrC,kCAAkC;YAClC,MAAM,wBAAiB,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;YACpD,0BAA0B;YAC1B,uBAAU,CAAC,wBAAwB,EAAE;YACrC,2BAA2B;YAC3B,uBAAU,CAAC,iBAAiB,EAAE;YAC9B,2BAA2B;YAC3B,uBAAU,CAAC,iBAAiB,EAAE;SACjC,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAExD,iBAAiB;QACjB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,8BAA8B,CAAC,eAAe,CAAC,CAAA;QAC7F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;QAEvD,MAAM,CAAC,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjF,mDAAmD;YACnD,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;gBAC/B,cAAc,EAAE,WAAW;gBAC3B,iBAAiB,EAAE,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACvD,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC9C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBACvC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB;aAClD,CAAC;YACF,oCAAoC;YACpC,uBAAU,CAAC,iBAAiB,EAAE;YAE9B,2BAA2B;YAC3B,2BAAY,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC;YAC5D,IAAI,CAAC,eAAe,EAAE;SACzB,CAAC,CAAA;QAEF,IAAI,oBAAoB,CAAC,OAAO,EAAE;YAC9B,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAA;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,6BAA6B,EAAE;gBAC9C,MAAM,sBAAe,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;aAC3E;SACJ;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAA;QAEjD,IAAI,CAAC,IAAI,CAAC,KAAK,CACX,oCAAoC,cAAc,CAAC,OAAO,kBAAkB,cAAc,CAAC,MAAM,CAAC,EAAE,GAAG,CAC1G,CAAA;QAED,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YACzB,MAAM,sBAAe,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SACxE;QAED,IAAI,YAAY,CAAC,QAAQ,EAAE,KAAK,cAAc,CAAC,OAAO,EAAE;YACpD,MAAM,sBAAe,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SACtE;QAED,MAAM,QAAQ,GAAG,MAAM,mBAAQ,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE,kBAAW,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACjD,SAAS,EAAE,eAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAClD,WAAW,EAAE,EAAE;YACf,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,KAAK;YACZ,IAAI,yBAAsB;YAC1B,SAAS,EAAE,eAAe,CAAC,SAAS;SACvC,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,aAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAEtD,MAAM,MAAM,GAAG,MAAM,eAAM,CAAC,IAAI,CAAC;YAC7B,SAAS,EAAE,eAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAClD,eAAe,EAAE,QAAQ;YACzB,EAAE,EAAE,QAAQ;YACZ,WAAW,EAAE,EAAE;YACf,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,eAAQ,CAAC,GAAG,EAAE;YAC3B,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ;SAC3C,CAAC,CAAA;QAEF,kCAAkC;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QAEjG,MAAM,iBAAiB,GAAG,MAAM,iDAAuB,CAAC,IAAI,CAAC;YACzD,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ;YACxC,QAAQ,EAAE,WAAW;SACxB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,yCAAgB,CAAC,mBAAmB,CAAC;YAC3F,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,yCAAgB,CAAC,6BAA6B,CAAC;YAC/F,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,UAAU,EAAE,yCAAgB,CAAC,iBAAiB,CAAC;YACrG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,yCAAgB,CAAC,eAAe,CAAC;YACjG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,yCAAgB,CAAC,iBAAiB,CAAC;SAC/F,CAAC,CAAA;QAEF,2CAA2C;QAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,kBAAsC;QAC7D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC7D,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/E,kCAAkC;YAClC,wBAAiB,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;YAC9C,0BAA0B;YAC1B,uBAAU,CAAC,wBAAwB,EAAE;YACrC,IAAI,CAAC,eAAe,EAAE;YACtB,0BAA0B;YAC1B,uBAAU,CAAC,iBAAiB,EAAE;SACjC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,eAAM,CAAC,IAAI,CAAC;YAC7B,EAAE,EAAE,kBAAkB,CAAC,EAAE;YACzB,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC5D,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC1E,WAAW,EAAE,eAAQ,CAAC,GAAG,EAAE;YAC3B,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,eAAe,EAAE,kBAAkB,CAAC,eAAe;YACnD,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;SAChE,CAAC,CAAA;QAEF,kCAAkC;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;SACjD,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAAG,MAAM,iDAAuB,CAAC,IAAI,CAAC;YACzD,EAAE,EAAE,kBAAkB,CAAC,EAAE;YACzB,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;SACxC,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAgB,CAAC,cAAc,EAAE,kBAAkB,CAAC,WAAW,GAAG,OAAO,CAAC;YACxF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CACjC,kBAAkB,CAAC,aAAa,EAChC,yCAAgB,CAAC,mBAAmB,CACvC;YACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CACjC,kBAAkB,CAAC,kBAAkB,EACrC,yCAAgB,CAAC,6BAA6B,CACjD;YACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,yCAAgB,CAAC,eAAe,CAAC;YACjG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,yCAAgB,CAAC,iBAAiB,CAAC;SAC/F,CAAC,CAAA;QACF,IAAI,kBAAkB,CAAC,kBAAkB,EAAE;YACvC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CACvC,kBAAkB,CAAC,kBAAkB,EACrC,yCAAgB,CAAC,iBAAiB,CACrC,CAAA;SACJ;QAED,IAAI,CAAC,gBAAgB,GAAG,IAAI,mCAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QAE7E,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAEnD,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,6BAA6B,CAAC,KAAgD;QACvF,MAAM,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC;IAEM,eAAe;QAClB,OAAO,OAAO,CAAC,OAAO,CAAC;YACnB,eAAe,EAAE,EAAE;YACnB,IAAI,EAAE,mBAAU,CAAC,OAAO;SAC3B,CAAC,CAAA;IACN,CAAC;IAEM,KAAK,CAAC,yBAAyB,CAAC,cAAsB;QACzD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAChC,OAAO,IAAI,+CAAsB,CAAC,UAAU,CAAC,CAAA;SAChD;QAED,OAAO,IAAI,+CAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IACvF,CAAC;CACJ;AAhZD,8CAgZC"}

package/dist/modules/accounts/IdentityController.d.ts

@@ -0,0 +1,21 @@
+import { CoreBuffer, CryptoSignature, CryptoSignaturePublicKey } from "@nmshd/crypto";
+import { CoreAddress, CoreDate, TransportController } from "../../core";
+import { AccountController } from "../accounts/AccountController";
+import { Identity, IdentityType, Realm } from "./data/Identity";
+export declare class IdentityController extends TransportController {
+    get address(): CoreAddress;
+    get publicKey(): CryptoSignaturePublicKey;
+    get realm(): Realm;
+    get name(): string;
+    get description(): string;
+    get createdAt(): CoreDate;
+    get type(): IdentityType;
+    get identity(): Identity;
+    private _identity;
+    constructor(parent: AccountController);
+    init(identity?: Identity): Promise<IdentityController>;
+    isMe(address: CoreAddress): boolean;
+    update(name: string, description: string): Promise<void>;
+    sign(content: CoreBuffer): Promise<CryptoSignature>;
+    verify(content: CoreBuffer, signature: CryptoSignature): Promise<boolean>;
+}

package/dist/modules/accounts/IdentityController.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityController = void 0;
+const crypto_1 = require("@nmshd/crypto");
+const core_1 = require("../../core");
+const DeviceSecretController_1 = require("../devices/DeviceSecretController");
+class IdentityController extends core_1.TransportController {
+    constructor(parent) {
+        super(core_1.ControllerName.Identity, parent);
+    }
+    get address() {
+        return this._identity.address;
+    }
+    get publicKey() {
+        return this._identity.publicKey;
+    }
+    get realm() {
+        return this._identity.realm;
+    }
+    get name() {
+        return this._identity.name;
+    }
+    get description() {
+        return this._identity.description;
+    }
+    get createdAt() {
+        return this._identity.createdAt;
+    }
+    get type() {
+        return this._identity.type;
+    }
+    get identity() {
+        return this._identity;
+    }
+    async init(identity) {
+        await super.init();
+        if (!identity) {
+            throw core_1.TransportErrors.identity.identityNotSet().logWith(this._log);
+        }
+        this._identity = identity;
+        return this;
+    }
+    isMe(address) {
+        return this.address.equals(address);
+    }
+    async update(name, description) {
+        this.identity.name = name;
+        this.identity.description = description;
+        await this.parent.info.set("identity", this.identity);
+    }
+    async sign(content) {
+        const privateKeyContainer = await this.parent.activeDevice.secrets.loadSecret(DeviceSecretController_1.DeviceSecretType.IdentitySignature);
+        if (!privateKeyContainer || !(privateKeyContainer.secret instanceof crypto_1.CryptoSignaturePrivateKey)) {
+            throw core_1.TransportErrors.secrets.secretNotFound(DeviceSecretController_1.DeviceSecretType.IdentitySignature).logWith(this._log);
+        }
+        const privateKey = privateKeyContainer.secret;
+        const signature = await core_1.CoreCrypto.sign(content, privateKey);
+        privateKey.clear();
+        return signature;
+    }
+    async verify(content, signature) {
+        const valid = await core_1.CoreCrypto.verify(content, signature, this.publicKey);
+        return valid;
+    }
+}
+exports.IdentityController = IdentityController;
+//# sourceMappingURL=IdentityController.js.map

package/dist/modules/accounts/IdentityController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityController.js","sourceRoot":"","sources":["../../../src/modules/accounts/IdentityController.ts"],"names":[],"mappings":";;;AAAA,0CAAgH;AAChH,qCAAoH;AAEpH,8EAAoE;AAGpE,MAAa,kBAAmB,SAAQ,0BAAmB;IAkCvD,YAAmB,MAAyB;QACxC,KAAK,CAAC,qBAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1C,CAAC;IAnCD,IAAW,OAAO;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAA;IACjC,CAAC;IAED,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAA;IACnC,CAAC;IAED,IAAW,KAAK;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAA;IAC/B,CAAC;IAED,IAAW,IAAI;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,IAAW,WAAW;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAA;IACrC,CAAC;IAED,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAA;IACnC,CAAC;IAED,IAAW,IAAI;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;IAOM,KAAK,CAAC,IAAI,CAAC,QAAmB;QACjC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAElB,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,sBAAe,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SACrE;QACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QAEzB,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,IAAI,CAAC,OAAoB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,WAAmB;QACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAA;QACzB,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAA;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzD,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,OAAmB;QACjC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CACzE,yCAAgB,CAAC,iBAAiB,CACrC,CAAA;QACD,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,mBAAmB,CAAC,MAAM,YAAY,kCAAyB,CAAC,EAAE;YAC5F,MAAM,sBAAe,CAAC,OAAO,CAAC,cAAc,CAAC,yCAAgB,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SACtG;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAA;QAE7C,MAAM,SAAS,GAAG,MAAM,iBAAU,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAC5D,UAAU,CAAC,KAAK,EAAE,CAAA;QAClB,OAAO,SAAS,CAAA;IACpB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAAmB,EAAE,SAA0B;QAC/D,MAAM,KAAK,GAAG,MAAM,iBAAU,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACzE,OAAO,KAAK,CAAA;IAChB,CAAC;CACJ;AA7ED,gDA6EC"}

package/dist/modules/accounts/IdentityUtil.d.ts

@@ -0,0 +1,6 @@
+import { ICryptoSignaturePublicKey } from "@nmshd/crypto";
+import { CoreAddress } from "../../core";
+export declare class IdentityUtil {
+    static createAddress(publicKey: ICryptoSignaturePublicKey, realm?: string): Promise<CoreAddress>;
+    static checkAddress(address: CoreAddress, publicKey?: ICryptoSignaturePublicKey, realm?: string): Promise<boolean>;
+}

package/dist/modules/accounts/IdentityUtil.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityUtil = void 0;
+const crypto_1 = require("@nmshd/crypto");
+const core_1 = require("../../core");
+class IdentityUtil {
+    static async createAddress(publicKey, realm = "ID0") {
+        if (realm && realm.length !== 3) {
+            throw core_1.TransportErrors.identity.realmLength();
+        }
+        const sha512buffer = await crypto_1.CryptoHash.hash(publicKey.publicKey, 2 /* SHA512 */);
+        const hash = await crypto_1.CryptoHash.hash(sha512buffer, 1 /* SHA256 */);
+        const hashedPublicKey = new crypto_1.CoreBuffer(hash.buffer.slice(0, 20));
+        const checksumSource = crypto_1.CoreBuffer.fromUtf8(realm);
+        checksumSource.append(hashedPublicKey);
+        const addressChecksum1 = await crypto_1.CryptoHash.hash(checksumSource, 2 /* SHA512 */);
+        const checksumHash = await crypto_1.CryptoHash.hash(addressChecksum1, 1 /* SHA256 */);
+        const checksum = new crypto_1.CoreBuffer(checksumHash.buffer.slice(0, 4));
+        const concatenation = hashedPublicKey;
+        concatenation.append(checksum);
+        const addressString = realm + concatenation.toBase58();
+        const addressObj = core_1.CoreAddress.from({ address: addressString });
+        return addressObj;
+    }
+    static async checkAddress(address, publicKey, realm = "id1") {
+        const str = address.toString();
+        const strRealm = str.substr(0, 3);
+        if (realm && strRealm !== realm) {
+            return false;
+        }
+        const strAddress = str.substr(3);
+        const addressBuffer = crypto_1.CoreBuffer.fromBase58(strAddress).buffer;
+        const sha256Array = addressBuffer.slice(0, addressBuffer.byteLength - 4);
+        const checksumArray = addressBuffer.slice(addressBuffer.byteLength - 4, addressBuffer.byteLength);
+        const checksumBuffer = crypto_1.CoreBuffer.fromUtf8(strRealm);
+        checksumBuffer.append(new crypto_1.CoreBuffer(sha256Array));
+        const addressChecksum1 = await crypto_1.CryptoHash.hash(checksumBuffer, 2 /* SHA512 */);
+        const addressChecksum2 = await crypto_1.CryptoHash.hash(addressChecksum1, 1 /* SHA256 */);
+        const firstBytesOfChecksum = new crypto_1.CoreBuffer(addressChecksum2.buffer.slice(0, 4));
+        if (!firstBytesOfChecksum.equals(new crypto_1.CoreBuffer(checksumArray))) {
+            return false;
+        }
+        if (publicKey) {
+            const sha512buffer = await crypto_1.CryptoHash.hash(publicKey.publicKey, 2 /* SHA512 */);
+            let sha256buffer = await crypto_1.CryptoHash.hash(sha512buffer, 1 /* SHA256 */);
+            sha256buffer = new crypto_1.CoreBuffer(sha256buffer.buffer.slice(0, 20));
+            if (!sha256buffer.equals(new crypto_1.CoreBuffer(sha256Array))) {
+                // Hash doesn't match with given public key.
+                return false;
+            }
+        }
+        return true;
+    }
+}
+exports.IdentityUtil = IdentityUtil;
+//# sourceMappingURL=IdentityUtil.js.map

package/dist/modules/accounts/IdentityUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityUtil.js","sourceRoot":"","sources":["../../../src/modules/accounts/IdentityUtil.ts"],"names":[],"mappings":";;;AAAA,0CAAsG;AACtG,qCAAyD;AAEzD,MAAa,YAAY;IACd,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,SAAoC,EAAE,KAAK,GAAG,KAAK;QACjF,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;YAC7B,MAAM,sBAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;SAC/C;QACD,MAAM,YAAY,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,iBAA6B,CAAA;QAC3F,MAAM,IAAI,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,YAAY,iBAA6B,CAAA;QAC5E,MAAM,eAAe,GAAG,IAAI,mBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAEhE,MAAM,cAAc,GAAG,mBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACjD,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QAEtC,MAAM,gBAAgB,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,cAAc,iBAA6B,CAAA;QAC1F,MAAM,YAAY,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,gBAAgB,iBAA6B,CAAA;QACxF,MAAM,QAAQ,GAAG,IAAI,mBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAEhE,MAAM,aAAa,GAAG,eAAe,CAAA;QACrC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAE9B,MAAM,aAAa,GAAG,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAA;QACtD,MAAM,UAAU,GAAG,kBAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QAC/D,OAAO,UAAU,CAAA;IACrB,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,YAAY,CAC5B,OAAoB,EACpB,SAAqC,EACrC,KAAK,GAAG,KAAK;QAEb,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAA;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACjC,IAAI,KAAK,IAAI,QAAQ,KAAK,KAAK,EAAE;YAC7B,OAAO,KAAK,CAAA;SACf;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAEhC,MAAM,aAAa,GAAG,mBAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAA;QAE9D,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;QACxE,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,GAAG,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;QAEjG,MAAM,cAAc,GAAG,mBAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACpD,cAAc,CAAC,MAAM,CAAC,IAAI,mBAAU,CAAC,WAAW,CAAC,CAAC,CAAA;QAClD,MAAM,gBAAgB,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,cAAc,iBAA6B,CAAA;QAC1F,MAAM,gBAAgB,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,gBAAgB,iBAA6B,CAAA;QAC5F,MAAM,oBAAoB,GAAG,IAAI,mBAAU,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAChF,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,mBAAU,CAAC,aAAa,CAAC,CAAC,EAAE;YAC7D,OAAO,KAAK,CAAA;SACf;QAED,IAAI,SAAS,EAAE;YACX,MAAM,YAAY,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,iBAA6B,CAAA;YAC3F,IAAI,YAAY,GAAG,MAAM,mBAAU,CAAC,IAAI,CAAC,YAAY,iBAA6B,CAAA;YAClF,YAAY,GAAG,IAAI,mBAAU,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC/D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,mBAAU,CAAC,WAAW,CAAC,CAAC,EAAE;gBACnD,4CAA4C;gBAC5C,OAAO,KAAK,CAAA;aACf;SACJ;QACD,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AA9DD,oCA8DC"}

package/dist/modules/accounts/backbone/IdentityClient.d.ts

@@ -0,0 +1,23 @@
+import { RESTClient, RESTClientLogDirective } from "../../../core";
+import { ClientResult } from "../../../core/backbone/ClientResult";
+import { IChallengeSignedSerialized } from "../../challenges/data/ChallengeSigned";
+export interface PlatformIdentityPostRequest {
+    identityPublicKey: string;
+    devicePassword: string;
+    signedChallenge: IChallengeSignedSerialized;
+    clientId: string;
+    clientSecret: string;
+}
+export interface PlatformIdentityDevice {
+    id: string;
+    username: string;
+}
+export interface PlatformIdentityPostResponse {
+    address: string;
+    device: PlatformIdentityDevice;
+    createdAt: string;
+}
+export declare class IdentityClient extends RESTClient {
+    protected _logDirective: RESTClientLogDirective;
+    createIdentity(value: PlatformIdentityPostRequest): Promise<ClientResult<PlatformIdentityPostResponse>>;
+}

package/dist/modules/accounts/backbone/IdentityClient.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityClient = void 0;
+const core_1 = require("../../../core");
+class IdentityClient extends core_1.RESTClient {
+    constructor() {
+        super(...arguments);
+        this._logDirective = core_1.RESTClientLogDirective.LogResponse;
+    }
+    async createIdentity(value) {
+        return await this.post("/api/v1/Identities", value, {});
+    }
+}
+exports.IdentityClient = IdentityClient;
+//# sourceMappingURL=IdentityClient.js.map

package/dist/modules/accounts/backbone/IdentityClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityClient.js","sourceRoot":"","sources":["../../../../src/modules/accounts/backbone/IdentityClient.ts"],"names":[],"mappings":";;;AAAA,wCAAkE;AAuBlE,MAAa,cAAe,SAAQ,iBAAU;IAA9C;;QACc,kBAAa,GAAG,6BAAsB,CAAC,WAAW,CAAA;IAOhE,CAAC;IALU,KAAK,CAAC,cAAc,CACvB,KAAkC;QAElC,OAAO,MAAM,IAAI,CAAC,IAAI,CAA+B,oBAAoB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IACzF,CAAC;CACJ;AARD,wCAQC"}

package/dist/modules/accounts/data/Identity.d.ts

@@ -0,0 +1,34 @@
+import { CryptoSignaturePublicKey, ICryptoSignaturePublicKey } from "@nmshd/crypto";
+import { CoreSerializableAsync, ICoreSerializableAsync } from "../../../core/CoreSerializableAsync";
+import { CoreAddress } from "../../../core/types/CoreAddress";
+import { CoreDate } from "../../../core/types/CoreDate";
+export interface IIdentity extends ICoreSerializableAsync {
+    address: CoreAddress;
+    publicKey: ICryptoSignaturePublicKey;
+    realm: Realm;
+    name: string;
+    description: string;
+    createdAt: CoreDate;
+    type: IdentityType;
+}
+export declare const enum IdentityType {
+    UNKNOWN = "unknown",
+    PERSON = "person",
+    CORPORATION = "corporation",
+    FREELANCER = "freelancer"
+}
+export declare enum Realm {
+    Dev = "dev",
+    Stage = "id0",
+    Prod = "id1"
+}
+export declare class Identity extends CoreSerializableAsync implements IIdentity {
+    address: CoreAddress;
+    publicKey: CryptoSignaturePublicKey;
+    realm: Realm;
+    name: string;
+    description: string;
+    createdAt: CoreDate;
+    type: IdentityType;
+    static from(value: IIdentity): Promise<Identity>;
+}