@opensecret/react 0.1.8 → 0.2.0

package/dist/index.d.ts

@@ -78,15 +78,15 @@ declare const AttestationDocumentSchema: z.ZodObject<{
     nonce: Uint8Array | null;
 }>;
 
-export declare function authenticate(attestationDocumentBase64: string, trustedRootCert: Uint8Array, nonce: string): Promise<AttestationDocument>;
+declare function authenticate(attestationDocumentBase64: string, trustedRootCert: Uint8Array, nonce: string): Promise<AttestationDocument>;
 
-export declare const AWS_ROOT_CERT_DER: Uint8Array;
+declare const AWS_ROOT_CERT_DER: Uint8Array;
 
 declare function changePassword(currentPassword: string, newPassword: string): Promise<void>;
 
 declare function confirmPasswordReset(email: string, alphanumericCode: string, plaintextSecret: string, newPassword: string): Promise<void>;
 
-export declare const EXPECTED_ROOT_CERT_HASH = "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b";
+declare const EXPECTED_ROOT_CERT_HASH = "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b";
 
 declare function fetchAttestationDocument(nonce: string): Promise<string>;
 
@@ -112,7 +112,7 @@ declare function fetchUser(): Promise<UserResponse>;
 
 export declare function generateSecureSecret(): string;
 
-export declare function getAttestation(forceRefresh?: boolean): Promise<Attestation>;
+declare function getAttestation(forceRefresh?: boolean): Promise<Attestation>;
 
 export declare type GithubAuthResponse = {
     auth_url: string;
@@ -315,6 +315,42 @@ export declare type OpenSecretContextType = {
      * @returns The current API URL
      */
     apiUrl: string;
+    /**
+     * Additional PCR0 hashes to validate against
+     */
+    pcrConfig: PcrConfig;
+    /**
+     * Gets attestation from the enclave
+     */
+    getAttestation: typeof getAttestation;
+    /**
+     * Authenticates an attestation document
+     */
+    authenticate: typeof authenticate;
+    /**
+     * Parses an attestation document for viewing
+     */
+    parseAttestationForView: (document: AttestationDocument, cabundle: Uint8Array[], pcrConfig?: PcrConfig) => Promise<ParsedAttestationView>;
+    /**
+     * AWS root certificate in DER format
+     */
+    awsRootCertDer: typeof AWS_ROOT_CERT_DER;
+    /**
+     * Expected hash of the AWS root certificate
+     */
+    expectedRootCertHash: typeof EXPECTED_ROOT_CERT_HASH;
+    /**
+     * Gets and verifies an attestation document from the enclave
+     * @returns A promise resolving to the parsed attestation document
+     * @throws {Error} If attestation fails or is invalid
+     *
+     * @description
+     * This is a convenience function that:
+     * 1. Fetches the attestation document with a random nonce
+     * 2. Authenticates the document
+     * 3. Parses it for viewing
+     */
+    getAttestationDocument: () => Promise<ParsedAttestationView>;
 };
 
 /**
@@ -337,13 +373,12 @@ export declare type OpenSecretContextType = {
  * </OpenSecretProvider>
  * ```
  */
-export declare function OpenSecretProvider({ children, apiUrl }: {
+export declare function OpenSecretProvider({ children, apiUrl, pcrConfig }: {
     children: default_2.ReactNode;
     apiUrl: string;
+    pcrConfig?: PcrConfig;
 }): JSX_2.Element;
 
-export declare function parseAttestationForView(document: AttestationDocument, cabundle: Uint8Array[]): Promise<ParsedAttestationView>;
-
 export declare type ParsedAttestationView = {
     moduleId: string;
     publicKey: string | null;
@@ -363,6 +398,17 @@ export declare type ParsedAttestationView = {
     userData: string | null;
     nonce: string | null;
     cert0hash: string;
+    validatedPcr0Hash: Pcr0ValidationResult | null;
+};
+
+export declare type Pcr0ValidationResult = {
+    isMatch: boolean;
+    text: string;
+};
+
+export declare type PcrConfig = {
+    pcr0Values?: string[];
+    pcr0DevValues?: string[];
 };
 
 declare type PrivateKeyResponse = {
@@ -385,7 +431,7 @@ declare function requestNewVerificationCode(): Promise<void>;
 
 declare function requestPasswordReset(email: string, hashedSecret: string): Promise<void>;
 
-export declare function setApiUrl(url: string): void;
+declare function setApiUrl(url: string): void;
 
 declare type SigningAlgorithm = "schnorr" | "ecdsa";
 
@@ -410,10 +456,6 @@ export declare type UserResponse = {
     };
 };
 
-export declare const VALID_PCR0_VALUES: string[];
-
-export declare const VALID_PCR0_VALUES_DEV: string[];
-
 declare function verifyEmail(code: string): Promise<void>;
 
 export { }