@peerbit/server 7.0.1 → 8.0.0

package/dist/src/signed-request.js

@@ -1,54 +1,435 @@
 import { BinaryWriter, deserialize, serialize } from "@dao-xyz/borsh";
-import { SignatureWithKey, fromBase64, toBase64, verify, } from "@peerbit/crypto";
-const SIGNATURE_KEY = "X-Peerbit-Signature";
-const SIGNATURE_TIME_KEY = "X-Peerbit-Signature-Time";
-export const signRequest = async (headers, method, path, data, keypair) => {
-    const sigTimestamp = Math.round(new Date().getTime() / 1000).toString();
-    const write = new BinaryWriter();
-    if (!method) {
-        throw new Error("Expecting method");
-    }
-    if (!path) {
-        throw new Error("Expecting path");
-    }
-    write.string(method.toLowerCase() + path.toLowerCase() + sigTimestamp + (data || ""));
-    const signature = await keypair.sign(write.finalize());
-    headers[SIGNATURE_TIME_KEY] = sigTimestamp;
+import { SignatureWithKey, fromBase64, randomBytes, sha256Sync, toBase64, verify, } from "@peerbit/crypto";
+export const SIGNED_REQUEST_VERSION = "2";
+export const SIGNATURE_KEY = "X-Peerbit-Signature";
+export const SIGNATURE_VERSION_KEY = "X-Peerbit-Signature-Version";
+export const SIGNATURE_TIME_KEY = "X-Peerbit-Signature-Time";
+export const SIGNATURE_NONCE_KEY = "X-Peerbit-Signature-Nonce";
+export const SIGNATURE_SERVER_KEY = "X-Peerbit-Signature-Server";
+export const SIGNATURE_BOOT_KEY = "X-Peerbit-Signature-Boot";
+export const SIGNED_CONTENT_LENGTH_KEY = "X-Peerbit-Content-Length";
+export const SIGNED_CONTENT_SHA256_KEY = "X-Peerbit-Content-SHA256";
+const REQUEST_DOMAIN = "peerbit/server/http-request/v2";
+const DESCRIPTOR_DOMAIN = "peerbit/server/http-auth-descriptor/v2";
+const DECIMAL_PATTERN = /^(0|[1-9][0-9]{0,15})$/;
+const BASE64_32_PATTERN = /^[A-Za-z0-9+/]{43}=$/;
+const METHOD_PATTERN = /^[A-Z]+$/;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder("utf-8", { fatal: true });
+const DEFAULT_MAX_PAST_AGE_SECONDS = 5 * 60;
+const DEFAULT_MAX_FUTURE_SKEW_SECONDS = 60;
+export const DEFAULT_MAX_SIGNED_BODY_BYTES = 64 * 1024 * 1024;
+const DEFAULT_MAX_REPLAY_ENTRIES = 10_000;
+export class SignedRequestError extends Error {
+}
+export class ReplayRequestError extends SignedRequestError {
+}
+export class ReplayCapacityError extends SignedRequestError {
+}
+export class RequestBodyTooLargeError extends SignedRequestError {
+}
+const frame = (domain, fields) => {
+    const writer = new BinaryWriter();
+    writer.string(domain);
+    for (const value of fields) {
+        writer.string(value);
+    }
+    return writer.finalize();
+};
+const requestFrame = (properties) => frame(REQUEST_DOMAIN, [
+    SIGNED_REQUEST_VERSION,
+    properties.serverPeerId,
+    properties.bootId,
+    properties.timestamp,
+    properties.nonce,
+    properties.method,
+    properties.target,
+    properties.bodyLength,
+    properties.bodyHash,
+]);
+const descriptorFrame = (descriptor) => frame(DESCRIPTOR_DOMAIN, [
+    descriptor.version,
+    descriptor.serverPeerId,
+    descriptor.bootId,
+    descriptor.serverTime,
+]);
+const bodyBytes = (data) => {
+    if (data == null)
+        return new Uint8Array();
+    return typeof data === "string" ? encoder.encode(data) : data;
+};
+const parseCanonicalUnsigned = (value, name, maximum) => {
+    if (!DECIMAL_PATTERN.test(value)) {
+        throw new SignedRequestError(`Invalid ${name}`);
+    }
+    const parsed = BigInt(value);
+    if (maximum != null && parsed > maximum) {
+        throw new SignedRequestError(`Invalid ${name}`);
+    }
+    return parsed;
+};
+const decodeCanonical32 = (value, name) => {
+    if (!BASE64_32_PATTERN.test(value)) {
+        throw new SignedRequestError(`Invalid ${name}`);
+    }
+    const bytes = fromBase64(value);
+    if (bytes.length !== 32 || toBase64(bytes) !== value) {
+        throw new SignedRequestError(`Invalid ${name}`);
+    }
+    return bytes;
+};
+const readHeader = (headers, name, maxLength) => {
+    const matches = Object.entries(headers).filter(([key]) => key.toLowerCase() === name.toLowerCase());
+    if (matches.length !== 1 || typeof matches[0][1] !== "string") {
+        throw new SignedRequestError(`Missing or duplicate ${name} header`);
+    }
+    const value = matches[0][1];
+    if (value.length === 0 || value.length > maxLength || value.includes(",")) {
+        throw new SignedRequestError(`Invalid ${name} header`);
+    }
+    return value;
+};
+const validateMethodAndTarget = (method, target) => {
+    if (!METHOD_PATTERN.test(method)) {
+        throw new SignedRequestError("Invalid request method");
+    }
+    if (!target.startsWith("/") || target.includes("#") || target.length > 8192) {
+        throw new SignedRequestError("Invalid request target");
+    }
+};
+const equalBytes = (left, right) => {
+    if (left.length !== right.length)
+        return false;
+    let difference = 0;
+    for (let index = 0; index < left.length; index++) {
+        difference |= left[index] ^ right[index];
+    }
+    return difference === 0;
+};
+export const createAuthDescriptor = async (identity, audience, nowMs = Date.now()) => {
+    decodeCanonical32(audience.bootId, "boot ID");
+    if (!audience.serverPeerId || audience.serverPeerId.length > 256) {
+        throw new SignedRequestError("Invalid server peer ID");
+    }
+    const unsigned = {
+        version: SIGNED_REQUEST_VERSION,
+        serverPeerId: audience.serverPeerId,
+        bootId: audience.bootId,
+        serverTime: Math.floor(nowMs / 1000).toString(),
+    };
+    const signature = await identity.sign(descriptorFrame(unsigned));
+    return { ...unsigned, signature: toBase64(serialize(signature)) };
+};
+export const verifyAuthDescriptor = async (value, expectedServerPeerId, options) => {
+    if (!value || typeof value !== "object") {
+        throw new SignedRequestError("Invalid authentication descriptor");
+    }
+    const input = value;
+    if (input.version !== SIGNED_REQUEST_VERSION ||
+        typeof input.serverPeerId !== "string" ||
+        typeof input.bootId !== "string" ||
+        typeof input.serverTime !== "string" ||
+        typeof input.signature !== "string") {
+        throw new SignedRequestError("Invalid authentication descriptor");
+    }
+    if (input.serverPeerId !== expectedServerPeerId ||
+        input.serverPeerId.length > 256) {
+        throw new SignedRequestError("Server peer ID does not match the pinned ID");
+    }
+    decodeCanonical32(input.bootId, "boot ID");
+    const serverTime = parseCanonicalUnsigned(input.serverTime, "server time");
+    const nowMs = options?.nowMs ?? Date.now();
+    const maxPastAgeSeconds = options?.maxPastAgeSeconds ?? DEFAULT_MAX_PAST_AGE_SECONDS;
+    const maxFutureSkewSeconds = options?.maxFutureSkewSeconds ?? DEFAULT_MAX_FUTURE_SKEW_SECONDS;
+    if (!Number.isFinite(nowMs) ||
+        nowMs < 0 ||
+        nowMs > Number.MAX_SAFE_INTEGER ||
+        !Number.isSafeInteger(maxPastAgeSeconds) ||
+        maxPastAgeSeconds < 0 ||
+        !Number.isSafeInteger(maxFutureSkewSeconds) ||
+        maxFutureSkewSeconds < 0) {
+        throw new SignedRequestError("Invalid descriptor freshness policy");
+    }
+    const now = BigInt(Math.floor(nowMs / 1000));
+    if (serverTime < now - BigInt(maxPastAgeSeconds) ||
+        serverTime > now + BigInt(maxFutureSkewSeconds)) {
+        throw new SignedRequestError("Authentication descriptor timestamp is outside the window");
+    }
+    if (input.signature.length > 2048 || input.signature.includes(",")) {
+        throw new SignedRequestError("Invalid descriptor signature");
+    }
+    let signature;
+    try {
+        const bytes = fromBase64(input.signature);
+        if (toBase64(bytes) !== input.signature) {
+            throw new Error("Non-canonical base64");
+        }
+        signature = deserialize(bytes, SignatureWithKey);
+        if (!equalBytes(serialize(signature), bytes)) {
+            throw new Error("Non-canonical signature encoding");
+        }
+    }
+    catch {
+        throw new SignedRequestError("Invalid descriptor signature");
+    }
+    if (signature.publicKey.toPeerId().toString() !== input.serverPeerId) {
+        throw new SignedRequestError("Descriptor signer does not match server peer ID");
+    }
+    const descriptor = input;
+    if (!(await verify(signature, descriptorFrame(descriptor)))) {
+        throw new SignedRequestError("Invalid descriptor signature");
+    }
+    return descriptor;
+};
+export const signRequest = async (headers, method, target, data, keypair, audience, options) => {
+    validateMethodAndTarget(method, target);
+    if (!audience.serverPeerId || audience.serverPeerId.length > 256) {
+        throw new SignedRequestError("Invalid server peer ID");
+    }
+    decodeCanonical32(audience.bootId, "boot ID");
+    const bytes = bodyBytes(data);
+    const timestamp = Math.floor((options?.nowMs ?? Date.now()) / 1000).toString();
+    const nonceBytes = options?.nonce ?? randomBytes(32);
+    if (nonceBytes.length !== 32) {
+        throw new SignedRequestError("Nonce must contain 32 bytes");
+    }
+    const nonce = toBase64(nonceBytes);
+    const length = bytes.length.toString();
+    const hash = toBase64(sha256Sync(bytes));
+    const signable = requestFrame({
+        ...audience,
+        timestamp,
+        nonce,
+        method,
+        target,
+        bodyLength: length,
+        bodyHash: hash,
+    });
+    const signature = await keypair.sign(signable);
+    headers[SIGNATURE_VERSION_KEY] = SIGNED_REQUEST_VERSION;
+    headers[SIGNATURE_TIME_KEY] = timestamp;
+    headers[SIGNATURE_NONCE_KEY] = nonce;
+    headers[SIGNATURE_SERVER_KEY] = audience.serverPeerId;
+    headers[SIGNATURE_BOOT_KEY] = audience.bootId;
+    headers[SIGNED_CONTENT_LENGTH_KEY] = length;
+    headers[SIGNED_CONTENT_SHA256_KEY] = hash;
     headers[SIGNATURE_KEY] = toBase64(serialize(signature));
 };
-export const getBody = (req) => {
+export class RequestAuthenticator {
+    options;
+    maxBodyBytes;
+    maxPastAgeSeconds;
+    maxFutureSkewSeconds;
+    maxReplayEntries;
+    wallClockMs;
+    monotonicClockMs;
+    replays = new Map();
+    lastWallSeconds;
+    constructor(options) {
+        this.options = options;
+        this.maxPastAgeSeconds = BigInt(options.maxPastAgeSeconds ?? DEFAULT_MAX_PAST_AGE_SECONDS);
+        this.maxFutureSkewSeconds = BigInt(options.maxFutureSkewSeconds ?? DEFAULT_MAX_FUTURE_SKEW_SECONDS);
+        this.maxBodyBytes = options.maxBodyBytes ?? DEFAULT_MAX_SIGNED_BODY_BYTES;
+        this.maxReplayEntries =
+            options.maxReplayEntries ?? DEFAULT_MAX_REPLAY_ENTRIES;
+        this.wallClockMs = options.wallClockMs ?? Date.now;
+        this.monotonicClockMs =
+            options.monotonicClockMs ?? (() => performance.now());
+        if (this.maxPastAgeSeconds < 0n ||
+            this.maxFutureSkewSeconds < 0n ||
+            !Number.isSafeInteger(this.maxBodyBytes) ||
+            this.maxBodyBytes < 0 ||
+            !Number.isSafeInteger(this.maxReplayEntries) ||
+            this.maxReplayEntries < 1) {
+            throw new SignedRequestError("Invalid signed-request policy");
+        }
+        decodeCanonical32(options.bootId, "boot ID");
+    }
+    effectiveWallSeconds() {
+        const current = BigInt(Math.floor(this.wallClockMs() / 1000));
+        if (this.lastWallSeconds == null || current > this.lastWallSeconds) {
+            this.lastWallSeconds = current;
+        }
+        return this.lastWallSeconds;
+    }
+    precheckReplay(publicKey, nonce, wallNow) {
+        const monotonicNow = this.monotonicClockMs();
+        const key = `${publicKey.hashcode()}\0${nonce}`;
+        const expired = (entry) => monotonicNow >= entry.monotonicUntil && wallNow > entry.wallUntil;
+        const existing = this.replays.get(key);
+        if (existing != null && !expired(existing)) {
+            throw new ReplayRequestError("Request has already been used");
+        }
+        if (this.replays.size < this.maxReplayEntries || existing != null)
+            return;
+        for (const entry of this.replays.values()) {
+            if (expired(entry))
+                return;
+        }
+        throw new ReplayCapacityError("Replay protection is at capacity");
+    }
+    consumeReplay(publicKey, nonce, timestamp, wallNow) {
+        const now = this.monotonicClockMs();
+        const key = `${publicKey.hashcode()}\0${nonce}`;
+        const existing = this.replays.get(key);
+        const expired = (entry) => now >= entry.monotonicUntil && wallNow > entry.wallUntil;
+        if (existing != null && !expired(existing)) {
+            throw new ReplayRequestError("Request has already been used");
+        }
+        if (existing != null)
+            this.replays.delete(key);
+        if (this.replays.size >= this.maxReplayEntries) {
+            for (const [candidate, entry] of this.replays) {
+                if (expired(entry))
+                    this.replays.delete(candidate);
+            }
+        }
+        if (this.replays.size >= this.maxReplayEntries) {
+            throw new ReplayCapacityError("Replay protection is at capacity");
+        }
+        const retentionSeconds = Number(this.maxPastAgeSeconds + this.maxFutureSkewSeconds) + 1;
+        this.replays.set(key, {
+            monotonicUntil: now + retentionSeconds * 1000,
+            wallUntil: timestamp + this.maxPastAgeSeconds,
+        });
+    }
+    /**
+     * Atomically consume a verified nonce immediately before dispatch. Call this
+     * only after the exact request body has passed verifyRequestBody().
+     */
+    consume(verified) {
+        const now = this.effectiveWallSeconds();
+        if (verified.timestamp < now - this.maxPastAgeSeconds ||
+            verified.timestamp > now + this.maxFutureSkewSeconds) {
+            throw new SignedRequestError("Request timestamp is outside the window");
+        }
+        if (!this.options.isTrusted(verified.publicKey)) {
+            throw new SignedRequestError("Request signer is not trusted");
+        }
+        this.consumeReplay(verified.publicKey, verified.nonce, verified.timestamp, now);
+    }
+    async verify(headers, method, target) {
+        validateMethodAndTarget(method, target);
+        const version = readHeader(headers, SIGNATURE_VERSION_KEY, 8);
+        if (version !== SIGNED_REQUEST_VERSION) {
+            throw new SignedRequestError("Unsupported signed-request version");
+        }
+        const timestampValue = readHeader(headers, SIGNATURE_TIME_KEY, 16);
+        const timestamp = parseCanonicalUnsigned(timestampValue, "timestamp");
+        const now = this.effectiveWallSeconds();
+        if (timestamp < now - this.maxPastAgeSeconds ||
+            timestamp > now + this.maxFutureSkewSeconds) {
+            throw new SignedRequestError("Request timestamp is outside the window");
+        }
+        const nonce = readHeader(headers, SIGNATURE_NONCE_KEY, 44);
+        decodeCanonical32(nonce, "nonce");
+        const serverPeerId = readHeader(headers, SIGNATURE_SERVER_KEY, 256);
+        const bootId = readHeader(headers, SIGNATURE_BOOT_KEY, 44);
+        if (serverPeerId !== this.options.serverPeerId ||
+            bootId !== this.options.bootId) {
+            throw new SignedRequestError("Request audience does not match this server");
+        }
+        decodeCanonical32(bootId, "boot ID");
+        const bodyLengthValue = readHeader(headers, SIGNED_CONTENT_LENGTH_KEY, 16);
+        const bodyLengthBig = parseCanonicalUnsigned(bodyLengthValue, "body length", BigInt(this.maxBodyBytes));
+        const bodyLength = Number(bodyLengthBig);
+        const bodyHashValue = readHeader(headers, SIGNED_CONTENT_SHA256_KEY, 44);
+        const bodyHash = decodeCanonical32(bodyHashValue, "body hash");
+        const signatureValue = readHeader(headers, SIGNATURE_KEY, 2048);
+        let signature;
+        try {
+            const signatureBytes = fromBase64(signatureValue);
+            if (toBase64(signatureBytes) !== signatureValue) {
+                throw new Error("Non-canonical base64");
+            }
+            signature = deserialize(signatureBytes, SignatureWithKey);
+            if (!equalBytes(serialize(signature), signatureBytes)) {
+                throw new Error("Non-canonical signature encoding");
+            }
+        }
+        catch {
+            throw new SignedRequestError("Invalid request signature encoding");
+        }
+        if (!this.options.isTrusted(signature.publicKey)) {
+            throw new SignedRequestError("Request signer is not trusted");
+        }
+        const signable = requestFrame({
+            serverPeerId,
+            bootId,
+            timestamp: timestampValue,
+            nonce,
+            method,
+            target,
+            bodyLength: bodyLengthValue,
+            bodyHash: bodyHashValue,
+        });
+        if (!(await verify(signature, signable))) {
+            throw new SignedRequestError("Invalid request signature");
+        }
+        // Reject already-committed replays and a full cache before reading a
+        // potentially large body. This check is deliberately non-mutating; consume()
+        // remains the authoritative atomic check-and-insert after body verification.
+        this.precheckReplay(signature.publicKey, nonce, this.effectiveWallSeconds());
+        return {
+            publicKey: signature.publicKey,
+            bodyLength,
+            bodyHash,
+            nonce,
+            timestamp,
+        };
+    }
+}
+export const getBody = (req, maxBytes = DEFAULT_MAX_SIGNED_BODY_BYTES) => {
     return new Promise((resolve, reject) => {
-        let body = "";
-        req.on("data", (d) => {
-            body += d;
+        const chunks = [];
+        let length = 0;
+        let settled = false;
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            chunks.length = 0;
+            reject(error);
+        };
+        req.on("data", (chunk) => {
+            if (settled)
+                return;
+            const bytes = typeof chunk === "string"
+                ? encoder.encode(chunk)
+                : new Uint8Array(chunk);
+            length += bytes.length;
+            if (length > maxBytes) {
+                fail(new RequestBodyTooLargeError("Request body is too large"));
+                return;
+            }
+            chunks.push(bytes);
         });
         req.on("end", () => {
+            if (settled)
+                return;
+            settled = true;
+            const body = new Uint8Array(length);
+            let offset = 0;
+            for (const chunk of chunks) {
+                body.set(chunk, offset);
+                offset += chunk.length;
+            }
             resolve(body);
         });
-        req.on("error", (e) => reject(e));
+        req.on("aborted", () => fail(new SignedRequestError("Request was aborted")));
+        req.on("error", fail);
     });
 };
-export const verifyRequest = async (headers, method, path, body = "") => {
-    const timestamp = headers[SIGNATURE_TIME_KEY] || headers[SIGNATURE_TIME_KEY.toLowerCase()];
-    if (typeof timestamp !== "string") {
-        throw new Error("Unexpected timestamp type: " + typeof timestamp);
-    }
-    const write = new BinaryWriter();
-    if (!method) {
-        throw new Error("Expecting method");
-    }
-    if (!path) {
-        throw new Error("Expecting path");
+export const verifyRequestBody = (verified, body) => {
+    if (body.length !== verified.bodyLength ||
+        !equalBytes(sha256Sync(body), verified.bodyHash)) {
+        throw new SignedRequestError("Request body does not match its signature");
     }
-    write.string(method.toLowerCase() + path.toLowerCase() + timestamp + body);
-    const signature = headers[SIGNATURE_KEY] || headers[SIGNATURE_KEY.toLowerCase()];
-    if (typeof signature !== "string") {
-        throw new Error("Unexpected signature type: " + typeof signature);
+    try {
+        return decoder.decode(body);
     }
-    const signatureWithKey = deserialize(fromBase64(signature), SignatureWithKey);
-    if (await verify(signatureWithKey, write.finalize())) {
-        return signatureWithKey.publicKey;
+    catch {
+        throw new SignedRequestError("Request body is not valid UTF-8");
     }
-    throw new Error("Invalid signature");
 };
 //# sourceMappingURL=signed-request.js.map

package/dist/src/signed-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"signed-request.js","sourceRoot":"","sources":["../../src/signed-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAIN,gBAAgB,EAChB,UAAU,EACV,QAAQ,EACR,MAAM,GACN,MAAM,iBAAiB,CAAC;AAGzB,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC/B,OAA+B,EAC/B,MAAc,EACd,IAAY,EACZ,IAAwB,EACxB,OAAmC,EAClC,EAAE;IACH,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CACX,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,YAAY,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CACvE,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;IAC3C,OAAO,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAyB,EAAmB,EAAE;IACrE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACpB,IAAI,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EACjC,OAAsD,EACtD,MAAc,EACd,IAAY,EACZ,IAAI,GAAG,EAAE,EACgB,EAAE;IAC3B,MAAM,SAAS,GACd,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,OAAO,SAAS,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3E,MAAM,SAAS,GACd,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,OAAO,SAAS,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC9E,IAAI,MAAM,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QACtD,OAAO,gBAAgB,CAAC,SAAS,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACtC,CAAC,CAAC"}
+{"version":3,"file":"signed-request.js","sourceRoot":"","sources":["../../src/signed-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAIN,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,MAAM,GACN,MAAM,iBAAiB,CAAC;AAGzB,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAC7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AAEpE,MAAM,cAAc,GAAG,gCAAgC,CAAC;AACxD,MAAM,iBAAiB,GAAG,wCAAwC,CAAC;AACnE,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE1D,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,CAAC;AAC5C,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAChD,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;CAAG;AAC7D,MAAM,OAAO,mBAAoB,SAAQ,kBAAkB;CAAG;AAC9D,MAAM,OAAO,wBAAyB,SAAQ,kBAAkB;CAAG;AAqCnE,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,MAAyB,EAAc,EAAE;IACvE,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,UASrB,EAAc,EAAE,CAChB,KAAK,CAAC,cAAc,EAAE;IACrB,sBAAsB;IACtB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,SAAS;IACpB,UAAU,CAAC,KAAK;IAChB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,QAAQ;CACnB,CAAC,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,UAA6C,EAAE,EAAE,CACzE,KAAK,CAAC,iBAAiB,EAAE;IACxB,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,UAAU;CACrB,CAAC,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC,IAAqC,EAAc,EAAE;IACvE,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAC1C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC9B,KAAa,EACb,IAAY,EACZ,OAAgB,EACP,EAAE;IACX,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,OAAO,IAAI,IAAI,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,IAAY,EAAc,EAAE;IACrE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,kBAAkB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,kBAAkB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAClB,OAAsD,EACtD,IAAY,EACZ,SAAiB,EACR,EAAE;IACX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CACnD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,IAAI,SAAS,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,kBAAkB,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE;IAClE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC7E,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;IACxD,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAE,EAAE;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACxC,QAAoC,EACpC,QAAyB,EACzB,QAAgB,IAAI,CAAC,GAAG,EAAE,EACA,EAAE;IAC5B,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAClE,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAsC;QACnD,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACxC,KAAc,EACd,oBAA4B,EAC5B,OAAqC,EACX,EAAE;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IACC,KAAK,CAAC,OAAO,KAAK,sBAAsB;QACxC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,IACC,KAAK,CAAC,YAAY,KAAK,oBAAoB;QAC3C,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG,EAC9B,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;IAC7E,CAAC;IACD,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3C,MAAM,iBAAiB,GACtB,OAAO,EAAE,iBAAiB,IAAI,4BAA4B,CAAC;IAC5D,MAAM,oBAAoB,GACzB,OAAO,EAAE,oBAAoB,IAAI,+BAA+B,CAAC;IAClE,IACC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,MAAM,CAAC,gBAAgB;QAC/B,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACxC,iBAAiB,GAAG,CAAC;QACrB,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC;QAC3C,oBAAoB,GAAG,CAAC,EACvB,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7C,IACC,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC5C,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAC9C,CAAC;QACF,MAAM,IAAI,kBAAkB,CAC3B,2DAA2D,CAC3D,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,SAA2B,CAAC;IAChC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzC,CAAC;QACD,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrD,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACtE,MAAM,IAAI,kBAAkB,CAC3B,iDAAiD,CACjD,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAmB,KAAuB,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC/B,OAA+B,EAC/B,MAAc,EACd,MAAc,EACd,IAAqC,EACrC,OAAmC,EACnC,QAAyB,EACzB,OAAgD,EAC/C,EAAE;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAClE,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;IACxD,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAC3B,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CACrC,CAAC,QAAQ,EAAE,CAAC;IACb,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC7B,GAAG,QAAQ;QACX,SAAS;QACT,KAAK;QACL,MAAM;QACN,MAAM;QACN,UAAU,EAAE,MAAM;QAClB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,CAAC,qBAAqB,CAAC,GAAG,sBAAsB,CAAC;IACxD,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;IACxC,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC;IACrC,OAAO,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;IACtD,OAAO,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC9C,OAAO,CAAC,yBAAyB,CAAC,GAAG,MAAM,CAAC;IAC5C,OAAO,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC;IAC1C,OAAO,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC;AAEF,MAAM,OAAO,oBAAoB;IAaX;IAZZ,YAAY,CAAS;IACb,iBAAiB,CAAS;IAC1B,oBAAoB,CAAS;IAC7B,gBAAgB,CAAS;IACzB,WAAW,CAAe;IAC1B,gBAAgB,CAAe;IAC/B,OAAO,GAAG,IAAI,GAAG,EAG/B,CAAC;IACI,eAAe,CAAU;IAEjC,YAAqB,OAAoC;QAApC,YAAO,GAAP,OAAO,CAA6B;QACxD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAC9B,OAAO,CAAC,iBAAiB,IAAI,4BAA4B,CACzD,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,MAAM,CACjC,OAAO,CAAC,oBAAoB,IAAI,+BAA+B,CAC/D,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,6BAA6B,CAAC;QAC1E,IAAI,CAAC,gBAAgB;YACpB,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC;QACnD,IAAI,CAAC,gBAAgB;YACpB,OAAO,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,IACC,IAAI,CAAC,iBAAiB,GAAG,EAAE;YAC3B,IAAI,CAAC,oBAAoB,GAAG,EAAE;YAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YACxC,IAAI,CAAC,YAAY,GAAG,CAAC;YACrB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAC5C,IAAI,CAAC,gBAAgB,GAAG,CAAC,EACxB,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAEO,oBAAoB;QAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACpE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAC7B,CAAC;IAEO,cAAc,CACrB,SAAwB,EACxB,KAAa,EACb,OAAe;QAEf,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,KAAoD,EAAE,EAAE,CACxE,YAAY,IAAI,KAAK,CAAC,cAAc,IAAI,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,gBAAgB,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO;QAC1E,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO;QAC5B,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;IACnE,CAAC;IAEO,aAAa,CACpB,SAAwB,EACxB,KAAa,EACb,SAAiB,EACjB,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,KAAoD,EAAE,EAAE,CACxE,GAAG,IAAI,KAAK,CAAC,cAAc,IAAI,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1D,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,QAAQ,IAAI,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/C,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,gBAAgB,GACrB,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACrB,cAAc,EAAE,GAAG,GAAG,gBAAgB,GAAG,IAAI;YAC7C,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC,iBAAiB;SAC7C,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,QAAyB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxC,IACC,QAAQ,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,iBAAiB;YACjD,QAAQ,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,oBAAoB,EACnD,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,aAAa,CACjB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,SAAS,EAClB,GAAG,CACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACX,OAAsD,EACtD,MAAc,EACd,MAAc;QAEd,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;YACxC,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,sBAAsB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxC,IACC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,iBAAiB;YACxC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,oBAAoB,EAC1C,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAC3D,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC3D,IACC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY;YAC1C,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAC7B,CAAC;YACF,MAAM,IAAI,kBAAkB,CAC3B,6CAA6C,CAC7C,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,sBAAsB,CAC3C,eAAe,EACf,aAAa,EACb,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CACzB,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,SAA2B,CAAC;QAChC,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,cAAc,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACzC,CAAC;YACD,SAAS,GAAG,WAAW,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACrD,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC7B,YAAY;YACZ,MAAM;YACN,SAAS,EAAE,cAAc;YACzB,KAAK;YACL,MAAM;YACN,MAAM;YACN,UAAU,EAAE,eAAe;YAC3B,QAAQ,EAAE,aAAa;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC3D,CAAC;QACD,qEAAqE;QACrE,6EAA6E;QAC7E,6EAA6E;QAC7E,IAAI,CAAC,cAAc,CAClB,SAAS,CAAC,SAAS,EACnB,KAAK,EACL,IAAI,CAAC,oBAAoB,EAAE,CAC3B,CAAC;QACF,OAAO;YACN,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU;YACV,QAAQ;YACR,KAAK;YACL,SAAS;SACT,CAAC;IACH,CAAC;CACD;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CACtB,GAAyB,EACzB,WAAmB,6BAA6B,EAC1B,EAAE;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,CAAC;QACf,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAA0B,EAAE,EAAE;YAC7C,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,KAAK,GACV,OAAO,KAAK,KAAK,QAAQ;gBACxB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;gBACvB,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YACvB,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,wBAAwB,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAChE,OAAO;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAClB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YACxB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CACtB,IAAI,CAAC,IAAI,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,CACnD,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,QAAyB,EACzB,IAAgB,EACP,EAAE;IACX,IACC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU;QACnC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAC/C,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,CAAC,CAAC;IACjE,CAAC;AACF,CAAC,CAAC"}

package/dist/src/trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/trust.ts"],"names":[],"mappings":"AAEA,qBAAa,KAAK;IAEL,QAAQ,CAAC,IAAI,EAAE,MAAM;IADjC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACG,IAAI,EAAE,MAAM;IAUjC,IAAI;IAIJ,SAAS,CAAC,QAAQ,EAAE,MAAM;IAI1B,GAAG,CAAC,GAAG,EAAE,MAAM;IAQf,MAAM,CAAC,QAAQ,EAAE,MAAM;CAQvB"}
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/trust.ts"],"names":[],"mappings":"AAEA,qBAAa,KAAK;IAEL,QAAQ,CAAC,IAAI,EAAE,MAAM;IADjC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACG,IAAI,EAAE,MAAM;IAUjC,IAAI;IAIJ,SAAS,CAAC,QAAQ,EAAE,MAAM;IAI1B,GAAG,CAAC,GAAG,EAAE,MAAM;IAQf,MAAM,CAAC,QAAQ,EAAE,MAAM;CASvB"}

package/dist/src/trust.js

@@ -28,6 +28,7 @@ export class Trust {
         const existing = this.trusted.findIndex((x) => x === hashcode);
         if (existing >= 0) {
             this.trusted.splice(existing, 1);
+            this.save();
             return true;
         }
         return false;

package/dist/src/trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../src/trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,OAAO,KAAK;IAEI;IADrB,OAAO,CAAW;IAClB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QAChC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3B,CAAC;QACf,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QACnB,CAAC;IACF,CAAC;IAED,IAAI;QACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,SAAS,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,GAAG,CAAC,GAAW;QACd,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;IACb,CAAC;IAED,MAAM,CAAC,QAAgB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC/D,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD"}
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../src/trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,OAAO,KAAK;IAEI;IADrB,OAAO,CAAW;IAClB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QAChC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3B,CAAC;QACf,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QACnB,CAAC;IACF,CAAC;IAED,IAAI;QACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,SAAS,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,GAAG,CAAC,GAAW;QACd,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;IACb,CAAC;IAED,MAAM,CAAC,QAAgB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC/D,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD"}