@peers-app/peers-sdk 0.27.2 → 0.27.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/contracts/contract-proxy.d.ts +7 -0
- package/dist/contracts/contract-proxy.js +19 -2
- package/dist/contracts/create-local-consumer.js +16 -1
- package/dist/contracts/index.d.ts +2 -0
- package/dist/contracts/index.js +2 -0
- package/dist/contracts/system/index.d.ts +2 -0
- package/dist/contracts/system/index.js +2 -0
- package/dist/contracts/system/invites-contract.js +2 -1
- package/dist/contracts/system/sync-check-contract.d.ts +97 -0
- package/dist/contracts/system/sync-check-contract.js +115 -0
- package/dist/contracts/tool-arguments.d.ts +15 -0
- package/dist/contracts/tool-arguments.js +41 -0
- package/dist/contracts/tool-catalog-service.js +2 -12
- package/dist/data/change-tracking.d.ts +40 -0
- package/dist/data/change-tracking.js +89 -0
- package/dist/data/orm/types.d.ts +24 -7
- package/dist/data/orm/types.js +97 -24
- package/dist/data/persistent-vars.d.ts +5 -0
- package/dist/data/persistent-vars.js +24 -6
- package/dist/define/manifest.js +6 -34
- package/dist/package-loader/package-loader.js +27 -22
- package/dist/system-ids.d.ts +5 -0
- package/dist/system-ids.js +6 -1
- package/package.json +4 -2
- package/dist/context/user-context-identity.test.d.ts +0 -1
- package/dist/context/user-context-identity.test.js +0 -220
- package/dist/contracts/__tests__/action-dispatch.test.d.ts +0 -1
- package/dist/contracts/__tests__/action-dispatch.test.js +0 -319
- package/dist/contracts/__tests__/also-implements.test.d.ts +0 -1
- package/dist/contracts/__tests__/also-implements.test.js +0 -110
- package/dist/contracts/__tests__/builder.test.d.ts +0 -1
- package/dist/contracts/__tests__/builder.test.js +0 -669
- package/dist/contracts/__tests__/contract-events.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-events.test.js +0 -199
- package/dist/contracts/__tests__/contract-observables.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-observables.test.js +0 -290
- package/dist/contracts/__tests__/contract-provider-router.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-provider-router.test.js +0 -315
- package/dist/contracts/__tests__/contract-proxy.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-proxy.test.js +0 -657
- package/dist/contracts/__tests__/contract-resolvers.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-resolvers.test.js +0 -758
- package/dist/contracts/__tests__/contract-subscription-lifecycle.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-subscription-lifecycle.test.js +0 -353
- package/dist/contracts/__tests__/contract-table-events.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-table-events.test.js +0 -209
- package/dist/contracts/__tests__/contract-transport.test.d.ts +0 -1
- package/dist/contracts/__tests__/contract-transport.test.js +0 -163
- package/dist/contracts/__tests__/extract.test.d.ts +0 -1
- package/dist/contracts/__tests__/extract.test.js +0 -145
- package/dist/contracts/__tests__/frozen-contracts.test.d.ts +0 -1
- package/dist/contracts/__tests__/frozen-contracts.test.js +0 -191
- package/dist/contracts/__tests__/generic-tool-dispatch.test.d.ts +0 -1
- package/dist/contracts/__tests__/generic-tool-dispatch.test.js +0 -130
- package/dist/contracts/__tests__/host-contract-client.test.d.ts +0 -1
- package/dist/contracts/__tests__/host-contract-client.test.js +0 -793
- package/dist/contracts/__tests__/host-contract-consumer.test.d.ts +0 -1
- package/dist/contracts/__tests__/host-contract-consumer.test.js +0 -163
- package/dist/contracts/__tests__/host-contract-transport.test.d.ts +0 -1
- package/dist/contracts/__tests__/host-contract-transport.test.js +0 -66
- package/dist/contracts/__tests__/integration.test.d.ts +0 -1
- package/dist/contracts/__tests__/integration.test.js +0 -348
- package/dist/contracts/__tests__/legacy-removal.test.d.ts +0 -1
- package/dist/contracts/__tests__/legacy-removal.test.js +0 -128
- package/dist/contracts/__tests__/persistent-registry.test.d.ts +0 -1
- package/dist/contracts/__tests__/persistent-registry.test.js +0 -109
- package/dist/contracts/__tests__/playground.test.d.ts +0 -1
- package/dist/contracts/__tests__/playground.test.js +0 -216
- package/dist/contracts/__tests__/registry.test.d.ts +0 -1
- package/dist/contracts/__tests__/registry.test.js +0 -238
- package/dist/contracts/__tests__/remote-contract-transport.test.d.ts +0 -1
- package/dist/contracts/__tests__/remote-contract-transport.test.js +0 -119
- package/dist/contracts/__tests__/system-contracts.test.d.ts +0 -1
- package/dist/contracts/__tests__/system-contracts.test.js +0 -247
- package/dist/contracts/__tests__/target-dispatch.d.ts +0 -11
- package/dist/contracts/__tests__/target-dispatch.js +0 -24
- package/dist/contracts/__tests__/tool-catalog-inventory.test.d.ts +0 -1
- package/dist/contracts/__tests__/tool-catalog-inventory.test.js +0 -44
- package/dist/contracts/__tests__/tool-catalog-service.test.d.ts +0 -1
- package/dist/contracts/__tests__/tool-catalog-service.test.js +0 -482
- package/dist/contracts/__tests__/tool-catalog.test.d.ts +0 -1
- package/dist/contracts/__tests__/tool-catalog.test.js +0 -1199
- package/dist/contracts/__tests__/validate.test.d.ts +0 -1
- package/dist/contracts/__tests__/validate.test.js +0 -991
- package/dist/contracts/__tests__/workflow-context.test.d.ts +0 -1
- package/dist/contracts/__tests__/workflow-context.test.js +0 -50
- package/dist/data/access-level.test.d.ts +0 -1
- package/dist/data/access-level.test.js +0 -53
- package/dist/data/change-tracking.test.d.ts +0 -1
- package/dist/data/change-tracking.test.js +0 -62
- package/dist/data/files/files.test.d.ts +0 -1
- package/dist/data/files/files.test.js +0 -770
- package/dist/data/group-members.test.d.ts +0 -1
- package/dist/data/group-members.test.js +0 -336
- package/dist/data/group-share.test.d.ts +0 -1
- package/dist/data/group-share.test.js +0 -110
- package/dist/data/groups.test.d.ts +0 -1
- package/dist/data/groups.test.js +0 -153
- package/dist/data/orm/cursor.test.d.ts +0 -1
- package/dist/data/orm/cursor.test.js +0 -314
- package/dist/data/orm/data-query.mongo.test.d.ts +0 -1
- package/dist/data/orm/data-query.mongo.test.js +0 -367
- package/dist/data/orm/data-query.sqlite.test.d.ts +0 -1
- package/dist/data/orm/data-query.sqlite.test.js +0 -365
- package/dist/data/orm/data-query.test.d.ts +0 -1
- package/dist/data/orm/data-query.test.js +0 -545
- package/dist/data/orm/dependency-injection.test.d.ts +0 -1
- package/dist/data/orm/dependency-injection.test.js +0 -171
- package/dist/data/orm/event-registry.test.d.ts +0 -1
- package/dist/data/orm/event-registry.test.js +0 -44
- package/dist/data/orm/multi-cursors.test.d.ts +0 -1
- package/dist/data/orm/multi-cursors.test.js +0 -463
- package/dist/data/orm/sql.data-source.test.d.ts +0 -1
- package/dist/data/orm/sql.data-source.test.js +0 -731
- package/dist/data/orm/table-container-events.test.d.ts +0 -1
- package/dist/data/orm/table-container-events.test.js +0 -101
- package/dist/data/orm/table-container.test.d.ts +0 -1
- package/dist/data/orm/table-container.test.js +0 -273
- package/dist/data/orm/table.event-source.test.d.ts +0 -1
- package/dist/data/orm/table.event-source.test.js +0 -331
- package/dist/data/orm/types.test.d.ts +0 -1
- package/dist/data/orm/types.test.js +0 -409
- package/dist/data/package-table-identity.test.d.ts +0 -1
- package/dist/data/package-table-identity.test.js +0 -46
- package/dist/data/package-version-permissions.test.d.ts +0 -1
- package/dist/data/package-version-permissions.test.js +0 -107
- package/dist/data/package-version-resolver.test.d.ts +0 -4
- package/dist/data/package-version-resolver.test.js +0 -543
- package/dist/data/package-versions.test.d.ts +0 -1
- package/dist/data/package-versions.test.js +0 -227
- package/dist/data/persistent-vars.conflict.test.d.ts +0 -1
- package/dist/data/persistent-vars.conflict.test.js +0 -126
- package/dist/data/persistent-vars.migration.test.d.ts +0 -1
- package/dist/data/persistent-vars.migration.test.js +0 -133
- package/dist/data/persistent-vars.package-scope.test.d.ts +0 -1
- package/dist/data/persistent-vars.package-scope.test.js +0 -27
- package/dist/data/sync-recovery-queue.test.d.ts +0 -1
- package/dist/data/sync-recovery-queue.test.js +0 -215
- package/dist/data/table-signing.test.d.ts +0 -1
- package/dist/data/table-signing.test.js +0 -118
- package/dist/data/tool-access.test.d.ts +0 -1
- package/dist/data/tool-access.test.js +0 -166
- package/dist/data/user-permissions.test.d.ts +0 -1
- package/dist/data/user-permissions.test.js +0 -305
- package/dist/data/user-trust-levels.test.d.ts +0 -1
- package/dist/data/user-trust-levels.test.js +0 -37
- package/dist/define/also-implements.test.d.ts +0 -1
- package/dist/define/also-implements.test.js +0 -123
- package/dist/define/declare-contract.test.d.ts +0 -1
- package/dist/define/declare-contract.test.js +0 -573
- package/dist/define/define.test.d.ts +0 -1
- package/dist/define/define.test.js +0 -1010
- package/dist/define/empty-fields.test.d.ts +0 -1
- package/dist/define/empty-fields.test.js +0 -55
- package/dist/define/events-observables.test.d.ts +0 -1
- package/dist/define/events-observables.test.js +0 -1013
- package/dist/define/serve-members.test.d.ts +0 -1
- package/dist/define/serve-members.test.js +0 -630
- package/dist/define/vars.test.d.ts +0 -1
- package/dist/define/vars.test.js +0 -39
- package/dist/device/binary-peer-connection-v2.test.d.ts +0 -1
- package/dist/device/binary-peer-connection-v2.test.js +0 -730
- package/dist/device/binary-peer-connection.test.d.ts +0 -1
- package/dist/device/binary-peer-connection.test.js +0 -184
- package/dist/device/connection.test.d.ts +0 -1
- package/dist/device/connection.test.js +0 -613
- package/dist/device/device-election.test.d.ts +0 -1
- package/dist/device/device-election.test.js +0 -516
- package/dist/device/device.test.d.ts +0 -1
- package/dist/device/device.test.js +0 -243
- package/dist/device/frame-cipher.test.d.ts +0 -1
- package/dist/device/frame-cipher.test.js +0 -219
- package/dist/device/get-trust-level-fn.test.d.ts +0 -1
- package/dist/device/get-trust-level-fn.test.js +0 -685
- package/dist/device/streamed-socket.test.d.ts +0 -1
- package/dist/device/streamed-socket.test.js +0 -216
- package/dist/device/tx-encoding.test.d.ts +0 -1
- package/dist/device/tx-encoding.test.js +0 -295
- package/dist/device-pairing/cpace.test.d.ts +0 -1
- package/dist/device-pairing/cpace.test.js +0 -116
- package/dist/device-pairing/device-pairing.test.d.ts +0 -1
- package/dist/device-pairing/device-pairing.test.js +0 -211
- package/dist/hlc.test.d.ts +0 -1
- package/dist/hlc.test.js +0 -45
- package/dist/host-credentials.test.d.ts +0 -1
- package/dist/host-credentials.test.js +0 -88
- package/dist/identity/account-email.test.d.ts +0 -1
- package/dist/identity/account-email.test.js +0 -59
- package/dist/identity/anchor-document.test.d.ts +0 -1
- package/dist/identity/anchor-document.test.js +0 -16
- package/dist/identity/anchor-resolution.test.d.ts +0 -1
- package/dist/identity/anchor-resolution.test.js +0 -130
- package/dist/identity/key-change.test.d.ts +0 -1
- package/dist/identity/key-change.test.js +0 -811
- package/dist/invites/group-approval.test.d.ts +0 -1
- package/dist/invites/group-approval.test.js +0 -223
- package/dist/invites/invite-token.test.d.ts +0 -1
- package/dist/invites/invite-token.test.js +0 -123
- package/dist/keys.test.d.ts +0 -1
- package/dist/keys.test.js +0 -336
- package/dist/logging/console-logger.test.d.ts +0 -1
- package/dist/logging/console-logger.test.js +0 -300
- package/dist/logging/console-logs.table.test.d.ts +0 -1
- package/dist/logging/console-logs.table.test.js +0 -156
- package/dist/observable.test.d.ts +0 -1
- package/dist/observable.test.js +0 -309
- package/dist/package-build/build-package.test.d.ts +0 -1
- package/dist/package-build/build-package.test.js +0 -204
- package/dist/package-build/contract-add.test.d.ts +0 -1
- package/dist/package-build/contract-add.test.js +0 -467
- package/dist/package-build/freeze-contracts.test.d.ts +0 -1
- package/dist/package-build/freeze-contracts.test.js +0 -355
- package/dist/package-installer/package-author-signing.test.d.ts +0 -1
- package/dist/package-installer/package-author-signing.test.js +0 -200
- package/dist/package-installer/package-cloner.test.d.ts +0 -1
- package/dist/package-installer/package-cloner.test.js +0 -278
- package/dist/package-installer/package-creator.test.d.ts +0 -1
- package/dist/package-installer/package-creator.test.js +0 -908
- package/dist/package-installer/package-dev-tools.test.d.ts +0 -1
- package/dist/package-installer/package-dev-tools.test.js +0 -64
- package/dist/package-installer/package-installer.test.d.ts +0 -1
- package/dist/package-installer/package-installer.test.js +0 -882
- package/dist/package-installer/package-propagation.test.d.ts +0 -1
- package/dist/package-installer/package-propagation.test.js +0 -1269
- package/dist/package-installer/package-publisher.test.d.ts +0 -1
- package/dist/package-installer/package-publisher.test.js +0 -153
- package/dist/package-installer/package-remote-checker.test.d.ts +0 -1
- package/dist/package-installer/package-remote-checker.test.js +0 -334
- package/dist/package-installer/package-seed-installer.test.d.ts +0 -1
- package/dist/package-installer/package-seed-installer.test.js +0 -123
- package/dist/package-installer/package-tarball.test.d.ts +0 -1
- package/dist/package-installer/package-tarball.test.js +0 -75
- package/dist/package-installer/peers-core-installer.test.d.ts +0 -1
- package/dist/package-installer/peers-core-installer.test.js +0 -49
- package/dist/package-installer/peers-core-trust-anchor.test.d.ts +0 -1
- package/dist/package-installer/peers-core-trust-anchor.test.js +0 -155
- package/dist/package-loader/contract-package-loader.test.d.ts +0 -1
- package/dist/package-loader/contract-package-loader.test.js +0 -274
- package/dist/package-loader/host-authority-loading.test.d.ts +0 -1
- package/dist/package-loader/host-authority-loading.test.js +0 -104
- package/dist/package-loader/host-dispatch-policy.test.d.ts +0 -1
- package/dist/package-loader/host-dispatch-policy.test.js +0 -56
- package/dist/package-loader/isolated-artifact.test.d.ts +0 -1
- package/dist/package-loader/isolated-artifact.test.js +0 -688
- package/dist/package-loader/isolated-persistent-var-gateway.test.d.ts +0 -1
- package/dist/package-loader/isolated-persistent-var-gateway.test.js +0 -56
- package/dist/package-loader/isolated-table-gateway.test.d.ts +0 -1
- package/dist/package-loader/isolated-table-gateway.test.js +0 -633
- package/dist/package-loader/package-loader.test.d.ts +0 -1
- package/dist/package-loader/package-loader.test.js +0 -1764
- package/dist/package-loader/resolve-consumed-contracts.test.d.ts +0 -1
- package/dist/package-loader/resolve-consumed-contracts.test.js +0 -166
- package/dist/serial-json.compat.test.d.ts +0 -1
- package/dist/serial-json.compat.test.js +0 -369
- package/dist/serial-json.test.d.ts +0 -1
- package/dist/serial-json.test.js +0 -401
- package/dist/testing/mock-host-contract.test.d.ts +0 -1
- package/dist/testing/mock-host-contract.test.js +0 -782
- package/dist/utils.test.d.ts +0 -1
- package/dist/utils.test.js +0 -232
|
@@ -1,243 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const data_1 = require("../data");
|
|
4
|
-
const keys_1 = require("../keys");
|
|
5
|
-
const utils_1 = require("../utils");
|
|
6
|
-
const device_1 = require("./device");
|
|
7
|
-
describe(device_1.Device, () => {
|
|
8
|
-
it("should create a new device with valid keys", async () => {
|
|
9
|
-
const userId = (0, utils_1.newid)();
|
|
10
|
-
const device = new device_1.Device(userId);
|
|
11
|
-
expect(device.userId).toBe(userId);
|
|
12
|
-
expect(device.deviceId).toBeTruthy();
|
|
13
|
-
expect(device.publicKey).toBeTruthy();
|
|
14
|
-
expect(device.publicBoxKey).toBeTruthy();
|
|
15
|
-
const msg = "Hello, World!";
|
|
16
|
-
const signedMsg = device.signMessageWithSecretKey(msg);
|
|
17
|
-
expect(signedMsg).toBeTruthy();
|
|
18
|
-
const openedMsg = (0, keys_1.openMessageWithPublicKey)(signedMsg, device.publicKey);
|
|
19
|
-
expect(openedMsg).toBe(msg);
|
|
20
|
-
const obj = { msg };
|
|
21
|
-
const signedObj = device.signObjectWithSecretKey(obj);
|
|
22
|
-
expect(signedObj.contents).toEqual(obj);
|
|
23
|
-
const openedObj = (0, keys_1.openSignedObject)(signedObj);
|
|
24
|
-
expect(openedObj).toEqual(obj);
|
|
25
|
-
const userId2 = (0, utils_1.newid)();
|
|
26
|
-
const device2 = new device_1.Device(userId2);
|
|
27
|
-
{
|
|
28
|
-
const box = device.boxDataWithKeys(obj, device2.publicBoxKey);
|
|
29
|
-
expect(box).toBeTruthy();
|
|
30
|
-
const openedBox = device2.openBoxWithSecretKey(box);
|
|
31
|
-
expect(openedBox).toEqual(obj);
|
|
32
|
-
}
|
|
33
|
-
{
|
|
34
|
-
const box = device.boxDataForDevice(obj, device2);
|
|
35
|
-
expect(box).toBeTruthy();
|
|
36
|
-
const openedBox = device2.openBoxWithSecretKey(box);
|
|
37
|
-
expect(openedBox).toEqual(obj);
|
|
38
|
-
}
|
|
39
|
-
});
|
|
40
|
-
describe("handshakes", () => {
|
|
41
|
-
const userId1 = (0, utils_1.newid)();
|
|
42
|
-
const client = new device_1.Device(userId1);
|
|
43
|
-
const userId2 = (0, utils_1.newid)();
|
|
44
|
-
const server = new device_1.Device(userId2);
|
|
45
|
-
describe("getHandshake", () => {
|
|
46
|
-
it("should return a valid and correct handshake object", async () => {
|
|
47
|
-
const connectionId = (0, utils_1.newid)();
|
|
48
|
-
const handshake = client.getHandshake(connectionId, "localhost");
|
|
49
|
-
expect(handshake.publicKey).toBe(client.publicKey);
|
|
50
|
-
expect(handshake.contents.userId).toBe(userId1);
|
|
51
|
-
expect(handshake.contents.publicKey).toBe(client.publicKey);
|
|
52
|
-
expect(handshake.contents.publicBoxKey).toBe(client.publicBoxKey);
|
|
53
|
-
expect(handshake.contents.connectionId).toBe(connectionId);
|
|
54
|
-
});
|
|
55
|
-
it("includes bounded display metadata and refreshes cached device info", () => {
|
|
56
|
-
const device = new device_1.Device((0, utils_1.newid)(), (0, utils_1.newid)(), (0, keys_1.newKeys)(), {
|
|
57
|
-
userName: "Mark",
|
|
58
|
-
deviceName: "Office laptop",
|
|
59
|
-
});
|
|
60
|
-
const originalInfo = device.getDeviceInfo();
|
|
61
|
-
expect(originalInfo.contents).toMatchObject({
|
|
62
|
-
userName: "Mark",
|
|
63
|
-
deviceName: "Office laptop",
|
|
64
|
-
});
|
|
65
|
-
device.setDisplayInfo({ userName: "Mark Archer", deviceName: "Kitchen display" });
|
|
66
|
-
const refreshedInfo = device.getDeviceInfo();
|
|
67
|
-
const handshake = device.getHandshake((0, utils_1.newid)(), "localhost");
|
|
68
|
-
expect(refreshedInfo).not.toBe(originalInfo);
|
|
69
|
-
expect(refreshedInfo.contents).toMatchObject({
|
|
70
|
-
userName: "Mark Archer",
|
|
71
|
-
deviceName: "Kitchen display",
|
|
72
|
-
});
|
|
73
|
-
expect(handshake.contents).toMatchObject({
|
|
74
|
-
userName: "Mark Archer",
|
|
75
|
-
deviceName: "Kitchen display",
|
|
76
|
-
});
|
|
77
|
-
});
|
|
78
|
-
it("bounds invalid local display metadata before signing it", () => {
|
|
79
|
-
const device = new device_1.Device((0, utils_1.newid)(), (0, utils_1.newid)(), (0, keys_1.newKeys)(), {
|
|
80
|
-
deviceName: "x".repeat(data_1.DISPLAY_NAME_MAX_LENGTH + 1),
|
|
81
|
-
});
|
|
82
|
-
expect(device.getDeviceInfo().contents.deviceName).toHaveLength(data_1.DISPLAY_NAME_MAX_LENGTH);
|
|
83
|
-
});
|
|
84
|
-
});
|
|
85
|
-
describe("handshakeResponse", () => {
|
|
86
|
-
it("should return a valid and correct handshake response object", async () => {
|
|
87
|
-
const connectionId = (0, utils_1.newid)();
|
|
88
|
-
const handshake = client.getHandshake(connectionId, "localhost");
|
|
89
|
-
const handshakeResponse = server.handshakeResponse(handshake, connectionId, "localhost");
|
|
90
|
-
expect(handshakeResponse.userId).toBe(userId2);
|
|
91
|
-
expect(handshakeResponse.deviceId).toBe(server.deviceId);
|
|
92
|
-
expect(handshakeResponse.publicKey).toBe(server.publicKey);
|
|
93
|
-
expect(handshakeResponse.publicBoxKey).toBe(server.publicBoxKey);
|
|
94
|
-
expect(handshakeResponse.connectionId).toBe(connectionId);
|
|
95
|
-
});
|
|
96
|
-
it("should detect when requests and responses are being forwarded through a different connection", async () => {
|
|
97
|
-
const c1 = {
|
|
98
|
-
connectionId: (0, utils_1.newid)(),
|
|
99
|
-
};
|
|
100
|
-
const c2 = {
|
|
101
|
-
connectionId: (0, utils_1.newid)(),
|
|
102
|
-
};
|
|
103
|
-
const handshake = client.getHandshake(c1.connectionId, "localhost");
|
|
104
|
-
expect(() => server.handshakeResponse(handshake, c2.connectionId, "localhost")).toThrow(/Invalid connectionId/);
|
|
105
|
-
});
|
|
106
|
-
it("rejects signed handshake metadata that exceeds the display-name limit", () => {
|
|
107
|
-
const connectionId = (0, utils_1.newid)();
|
|
108
|
-
const handshake = client.signObjectWithSecretKey({
|
|
109
|
-
connectionId,
|
|
110
|
-
userId: client.userId,
|
|
111
|
-
deviceId: client.deviceId,
|
|
112
|
-
publicKey: client.publicKey,
|
|
113
|
-
publicBoxKey: client.publicBoxKey,
|
|
114
|
-
userName: "x".repeat(data_1.DISPLAY_NAME_MAX_LENGTH + 1),
|
|
115
|
-
serverAddress: "localhost",
|
|
116
|
-
timestamp: Date.now(),
|
|
117
|
-
});
|
|
118
|
-
expect(() => server.handshakeResponse(handshake, connectionId, "localhost")).toThrow();
|
|
119
|
-
});
|
|
120
|
-
it("should reject a handshake signed by a different key than the one claimed in the payload (key confusion)", async () => {
|
|
121
|
-
const connectionId = (0, utils_1.newid)();
|
|
122
|
-
// Imposter holds a random secret key but claims the real client's publicKey/publicBoxKey.
|
|
123
|
-
// getHandshake signs with the random key, so signedObj.publicKey != contents.publicKey.
|
|
124
|
-
const clientImposter = new device_1.Device(userId1, client.deviceId, {
|
|
125
|
-
secretKey: (0, keys_1.newKeys)().secretKey,
|
|
126
|
-
publicKey: client.publicKey,
|
|
127
|
-
publicBoxKey: client.publicBoxKey,
|
|
128
|
-
});
|
|
129
|
-
const handshake = clientImposter.getHandshake(connectionId, "localhost");
|
|
130
|
-
expect(() => server.handshakeResponse(handshake, connectionId, "localhost")).toThrow(/signing key does not match claimed identity key/i);
|
|
131
|
-
});
|
|
132
|
-
it("should detect when requests and responses are being forwarded through a different address", async () => {
|
|
133
|
-
const connToServer = {
|
|
134
|
-
connectionId: (0, utils_1.newid)(),
|
|
135
|
-
};
|
|
136
|
-
const _connToClient = {
|
|
137
|
-
connectionId: connToServer.connectionId,
|
|
138
|
-
};
|
|
139
|
-
const _manInTheMiddle = new device_1.Device(userId2);
|
|
140
|
-
// const mitmAddress = manInTheMiddle.publicAddress || manInTheMiddle.localAddress;
|
|
141
|
-
// const connToManInTheMiddle = {
|
|
142
|
-
// connectionId: connToServer.connectionId,
|
|
143
|
-
// remoteAddress: mitmAddress
|
|
144
|
-
// };
|
|
145
|
-
// // client is being intercepted
|
|
146
|
-
// {
|
|
147
|
-
// expect(() => {
|
|
148
|
-
// doHandshake(client, connToManInTheMiddle, server, connToClient);
|
|
149
|
-
// }).toThrow(/Invalid client address/);
|
|
150
|
-
// }
|
|
151
|
-
// // server is being intercepted
|
|
152
|
-
// {
|
|
153
|
-
// expect(() => {
|
|
154
|
-
// doHandshake(client, connToServer, server, connToManInTheMiddle);
|
|
155
|
-
// }).toThrow(/Invalid server address/);
|
|
156
|
-
// }
|
|
157
|
-
});
|
|
158
|
-
});
|
|
159
|
-
});
|
|
160
|
-
});
|
|
161
|
-
/*
|
|
162
|
-
describe(ServerDevice, () => {
|
|
163
|
-
describe("newConnection", () => {
|
|
164
|
-
it("should create a new connection with a valid server device and valid client device", async () => {
|
|
165
|
-
const serverDevice = new Device();
|
|
166
|
-
const server = new ServerDevice(serverDevice);
|
|
167
|
-
|
|
168
|
-
const clientDevice = new Device();
|
|
169
|
-
|
|
170
|
-
let conn = await server.newConnection(clientDevice.address);
|
|
171
|
-
|
|
172
|
-
// don't allow RPC calls to the server before the handshake is complete
|
|
173
|
-
{
|
|
174
|
-
const result: any = await conn.rpcCall('ping', {}).catch((err) => err);
|
|
175
|
-
expect(result?.message).toMatch(/Connection not verified/);
|
|
176
|
-
}
|
|
177
|
-
|
|
178
|
-
const handshakeSigned = clientDevice.getHandshake({ connectionId: conn.connectionId, remoteAddress: serverDevice.address });
|
|
179
|
-
const handshakeBoxed = clientDevice.boxDataForDevice(handshakeSigned, serverDevice);
|
|
180
|
-
const responseBox = await conn.completeHandshake(handshakeBoxed);
|
|
181
|
-
const responseSigned = clientDevice.openBoxWithSecretKey(responseBox);
|
|
182
|
-
const response = openSignedObject(responseSigned) as IDeviceHandshake;
|
|
183
|
-
expect(response.userId).toBe(serverDevice.userId);
|
|
184
|
-
expect(response.deviceId).toBe(serverDevice.deviceId);
|
|
185
|
-
expect(response.publicKey).toBe(serverDevice.publicKey);
|
|
186
|
-
expect(response.publicBoxKey).toBe(serverDevice.publicBoxKey);
|
|
187
|
-
expect(response.localAddress).toBe(serverDevice.localAddress);
|
|
188
|
-
expect(response.publicAddress).toBe(serverDevice.publicAddress);
|
|
189
|
-
expect(response.connectionId).toBe(conn.connectionId);
|
|
190
|
-
expect(response.remoteAddress).toBe(clientDevice.address);
|
|
191
|
-
|
|
192
|
-
conn = await server.getConnection(conn.connectionId);
|
|
193
|
-
|
|
194
|
-
expect(conn.server).toEqual({
|
|
195
|
-
userId: serverDevice.userId,
|
|
196
|
-
deviceId: serverDevice.deviceId,
|
|
197
|
-
publicKey: serverDevice.publicKey,
|
|
198
|
-
publicBoxKey: serverDevice.publicBoxKey
|
|
199
|
-
});
|
|
200
|
-
expect(conn.client).toEqual({
|
|
201
|
-
userId: clientDevice.userId,
|
|
202
|
-
deviceId: clientDevice.deviceId,
|
|
203
|
-
publicKey: clientDevice.publicKey,
|
|
204
|
-
publicBoxKey: clientDevice.publicBoxKey
|
|
205
|
-
});
|
|
206
|
-
expect(conn.clientAddress).toBe(clientDevice.address);
|
|
207
|
-
expect(conn.secure).toBe(true);
|
|
208
|
-
expect(conn.verified).toBe(true);
|
|
209
|
-
|
|
210
|
-
// allow RPC calls to the server after the handshake is complete
|
|
211
|
-
{
|
|
212
|
-
const result: any = await conn.rpcCall('ping', {}).catch((err) => err);
|
|
213
|
-
expect(result).toBe('pong');
|
|
214
|
-
}
|
|
215
|
-
});
|
|
216
|
-
|
|
217
|
-
it("should leave connections as insecure if the remoteAddress doesn't match", async () => {
|
|
218
|
-
const serverDevice = new Device();
|
|
219
|
-
const server = new ServerDevice(serverDevice);
|
|
220
|
-
|
|
221
|
-
const clientDevice = new Device();
|
|
222
|
-
|
|
223
|
-
let conn = await server.newConnection(clientDevice.address);
|
|
224
|
-
|
|
225
|
-
const handshakeSigned = clientDevice.getHandshake({ connectionId: conn.connectionId, remoteAddress: 'using proxy' });
|
|
226
|
-
const handshakeBoxed = clientDevice.boxDataForDevice(handshakeSigned, serverDevice);
|
|
227
|
-
const responseBox = await conn.completeHandshake(handshakeBoxed);
|
|
228
|
-
const response = clientDevice.openBoxedAndSignedData(responseBox) as IDeviceHandshake;
|
|
229
|
-
expect(response.userId).toBe(serverDevice.userId);
|
|
230
|
-
|
|
231
|
-
conn = await server.getConnection(conn.connectionId);
|
|
232
|
-
|
|
233
|
-
expect(conn.verified).toBe(true);
|
|
234
|
-
expect(conn.secure).toBe(false);
|
|
235
|
-
|
|
236
|
-
// confirm responses are signed and boxed
|
|
237
|
-
const resultBox = await conn.rpcCall('ping', {}).catch((err) => err) as IDataBox;
|
|
238
|
-
const result = clientDevice.openBoxedAndSignedData(resultBox);
|
|
239
|
-
expect(result).toBe('pong');
|
|
240
|
-
});
|
|
241
|
-
});
|
|
242
|
-
})
|
|
243
|
-
*/
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export {};
|
|
@@ -1,219 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const nacl = require("tweetnacl");
|
|
4
|
-
const utils_1 = require("../utils");
|
|
5
|
-
const frame_cipher_1 = require("./frame-cipher");
|
|
6
|
-
function randomKey() {
|
|
7
|
-
return nacl.randomBytes(32);
|
|
8
|
-
}
|
|
9
|
-
function derivationParams() {
|
|
10
|
-
return {
|
|
11
|
-
ephemeralSharedSecret: nacl.randomBytes(32),
|
|
12
|
-
staticSharedSecret: nacl.randomBytes(32),
|
|
13
|
-
connectionId: (0, utils_1.newid)(),
|
|
14
|
-
clientDeviceId: (0, utils_1.newid)(),
|
|
15
|
-
serverDeviceId: (0, utils_1.newid)(),
|
|
16
|
-
timestamp: Date.now(),
|
|
17
|
-
};
|
|
18
|
-
}
|
|
19
|
-
function innerFrame(type, payload) {
|
|
20
|
-
const frame = new Uint8Array(1 + payload.length);
|
|
21
|
-
frame[0] = type;
|
|
22
|
-
frame.set(payload, 1);
|
|
23
|
-
return frame;
|
|
24
|
-
}
|
|
25
|
-
describe("frame-cipher", () => {
|
|
26
|
-
describe("seal / open", () => {
|
|
27
|
-
it("round-trips an inner frame with exactly FRAME_CIPHER_OVERHEAD bytes added", () => {
|
|
28
|
-
const key = randomKey();
|
|
29
|
-
const connectionId = (0, utils_1.newid)();
|
|
30
|
-
const sealer = new frame_cipher_1.FrameSealer(key.slice(), connectionId);
|
|
31
|
-
const opener = new frame_cipher_1.FrameOpener(key.slice(), connectionId);
|
|
32
|
-
const inner = innerFrame(0x10, new Uint8Array([1, 2, 3, 4, 5]));
|
|
33
|
-
const sealed = sealer.seal(inner);
|
|
34
|
-
expect(sealed[0]).toBe(frame_cipher_1.FRAME_ENC);
|
|
35
|
-
expect(sealed.length).toBe(inner.length + frame_cipher_1.FRAME_CIPHER_OVERHEAD);
|
|
36
|
-
expect(Buffer.from(opener.open(sealed) ?? [])).toEqual(Buffer.from(inner));
|
|
37
|
-
});
|
|
38
|
-
it("round-trips an empty inner frame and a large inner frame", () => {
|
|
39
|
-
const key = randomKey();
|
|
40
|
-
const { sealer, opener } = (0, frame_cipher_1.createFrameCiphers)({ sendKey: key.slice(), receiveKey: key.slice() }, "conn");
|
|
41
|
-
const empty = new Uint8Array(0);
|
|
42
|
-
expect(opener.open(sealer.seal(empty))?.length).toBe(0);
|
|
43
|
-
const large = new Uint8Array(512 * 1024);
|
|
44
|
-
for (let i = 0; i < large.length; i++)
|
|
45
|
-
large[i] = i % 251;
|
|
46
|
-
const opened = opener.open(sealer.seal(large));
|
|
47
|
-
expect(opened).not.toBeNull();
|
|
48
|
-
expect(Buffer.from(opened)).toEqual(Buffer.from(large));
|
|
49
|
-
});
|
|
50
|
-
it("does not leak the inner frame bytes on the wire", () => {
|
|
51
|
-
const key = randomKey();
|
|
52
|
-
const sealer = new frame_cipher_1.FrameSealer(key, "conn");
|
|
53
|
-
const marker = Buffer.from("SECRET-MARKER-0123456789abcdef");
|
|
54
|
-
const sealed = Buffer.from(sealer.seal(innerFrame(0x00, marker)));
|
|
55
|
-
expect(sealed.indexOf(marker)).toBe(-1);
|
|
56
|
-
});
|
|
57
|
-
it("fails to open with the wrong key", () => {
|
|
58
|
-
const sealer = new frame_cipher_1.FrameSealer(randomKey(), "conn");
|
|
59
|
-
const opener = new frame_cipher_1.FrameOpener(randomKey(), "conn");
|
|
60
|
-
expect(opener.open(sealer.seal(innerFrame(0x00, new Uint8Array([9]))))).toBeNull();
|
|
61
|
-
});
|
|
62
|
-
it("fails to open with the wrong connectionId (AAD)", () => {
|
|
63
|
-
const key = randomKey();
|
|
64
|
-
const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn-a");
|
|
65
|
-
const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn-b");
|
|
66
|
-
expect(opener.open(sealer.seal(innerFrame(0x00, new Uint8Array([9]))))).toBeNull();
|
|
67
|
-
});
|
|
68
|
-
it("fails to open a frame sealed for the other direction", () => {
|
|
69
|
-
const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
|
|
70
|
-
const client = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "client"), "conn");
|
|
71
|
-
const server = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "server"), "conn");
|
|
72
|
-
const sealed = client.sealer.seal(innerFrame(0x00, new Uint8Array([1])));
|
|
73
|
-
// The client's own opener holds the server-to-client key: wrong direction.
|
|
74
|
-
expect(client.opener.open(sealed)).toBeNull();
|
|
75
|
-
// The server's opener holds the client-to-server key and is at counter 0.
|
|
76
|
-
expect(server.opener.open(sealed)).not.toBeNull();
|
|
77
|
-
});
|
|
78
|
-
it("fails to open when a ciphertext bit is flipped", () => {
|
|
79
|
-
const key = randomKey();
|
|
80
|
-
const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
|
|
81
|
-
const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
|
|
82
|
-
const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([1, 2, 3])));
|
|
83
|
-
sealed[2] ^= 0x01;
|
|
84
|
-
expect(opener.open(sealed)).toBeNull();
|
|
85
|
-
});
|
|
86
|
-
it("fails to open when the tag is truncated or the type byte is wrong", () => {
|
|
87
|
-
const key = randomKey();
|
|
88
|
-
const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
|
|
89
|
-
const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([1, 2, 3])));
|
|
90
|
-
expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(sealed.subarray(0, sealed.length - 1))).toBeNull();
|
|
91
|
-
expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(new Uint8Array([frame_cipher_1.FRAME_ENC]))).toBeNull();
|
|
92
|
-
const wrongType = sealed.slice();
|
|
93
|
-
wrongType[0] = 0x00;
|
|
94
|
-
expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(wrongType)).toBeNull();
|
|
95
|
-
});
|
|
96
|
-
it("fails to open a replayed frame because the receive counter has advanced", () => {
|
|
97
|
-
const key = randomKey();
|
|
98
|
-
const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
|
|
99
|
-
const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
|
|
100
|
-
const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([7])));
|
|
101
|
-
expect(opener.open(sealed)).not.toBeNull();
|
|
102
|
-
expect(opener.open(sealed)).toBeNull();
|
|
103
|
-
});
|
|
104
|
-
it("fails to open frames delivered out of order", () => {
|
|
105
|
-
const key = randomKey();
|
|
106
|
-
const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
|
|
107
|
-
const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
|
|
108
|
-
sealer.seal(innerFrame(0x00, new Uint8Array([1]))); // frame 0, never delivered
|
|
109
|
-
const second = sealer.seal(innerFrame(0x00, new Uint8Array([2])));
|
|
110
|
-
expect(opener.open(second)).toBeNull();
|
|
111
|
-
});
|
|
112
|
-
it("advances counters independently per direction", () => {
|
|
113
|
-
const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
|
|
114
|
-
const client = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "client"), "conn");
|
|
115
|
-
const server = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "server"), "conn");
|
|
116
|
-
for (let i = 0; i < 5; i++) {
|
|
117
|
-
const opened = server.opener.open(client.sealer.seal(innerFrame(0x00, new Uint8Array([i]))));
|
|
118
|
-
expect(opened?.[1]).toBe(i);
|
|
119
|
-
}
|
|
120
|
-
expect(client.sealer.count).toBe(5);
|
|
121
|
-
expect(server.opener.count).toBe(5);
|
|
122
|
-
expect(server.sealer.count).toBe(0);
|
|
123
|
-
expect(client.opener.count).toBe(0);
|
|
124
|
-
const back = client.opener.open(server.sealer.seal(innerFrame(0x00, new Uint8Array([42]))));
|
|
125
|
-
expect(back?.[1]).toBe(42);
|
|
126
|
-
expect(server.sealer.count).toBe(1);
|
|
127
|
-
expect(client.opener.count).toBe(1);
|
|
128
|
-
});
|
|
129
|
-
it("produces different ciphertext for identical plaintext on consecutive frames", () => {
|
|
130
|
-
const sealer = new frame_cipher_1.FrameSealer(randomKey(), "conn");
|
|
131
|
-
const inner = innerFrame(0x00, new Uint8Array([1, 2, 3, 4]));
|
|
132
|
-
const a = Buffer.from(sealer.seal(inner));
|
|
133
|
-
const b = Buffer.from(sealer.seal(inner));
|
|
134
|
-
expect(a.equals(b)).toBe(false);
|
|
135
|
-
});
|
|
136
|
-
it("rejects keys of the wrong length", () => {
|
|
137
|
-
expect(() => new frame_cipher_1.FrameSealer(new Uint8Array(16), "conn")).toThrow(/32 bytes/);
|
|
138
|
-
expect(() => new frame_cipher_1.FrameOpener(new Uint8Array(31), "conn")).toThrow(/32 bytes/);
|
|
139
|
-
});
|
|
140
|
-
});
|
|
141
|
-
describe("deriveFrameKeys", () => {
|
|
142
|
-
it("is symmetric: both peers derive identical directional keys", () => {
|
|
143
|
-
const params = derivationParams();
|
|
144
|
-
const a = (0, frame_cipher_1.deriveFrameKeys)({ ...params });
|
|
145
|
-
const b = (0, frame_cipher_1.deriveFrameKeys)({ ...params });
|
|
146
|
-
expect(Buffer.from(a.clientToServer)).toEqual(Buffer.from(b.clientToServer));
|
|
147
|
-
expect(Buffer.from(a.serverToClient)).toEqual(Buffer.from(b.serverToClient));
|
|
148
|
-
expect(Buffer.from(a.clientToServer).equals(Buffer.from(a.serverToClient))).toBe(false);
|
|
149
|
-
});
|
|
150
|
-
it("maps roles onto directions so client.send == server.receive", () => {
|
|
151
|
-
const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
|
|
152
|
-
const client = (0, frame_cipher_1.frameKeysForRole)(derived, "client");
|
|
153
|
-
const server = (0, frame_cipher_1.frameKeysForRole)(derived, "server");
|
|
154
|
-
expect(Buffer.from(client.sendKey)).toEqual(Buffer.from(server.receiveKey));
|
|
155
|
-
expect(Buffer.from(client.receiveKey)).toEqual(Buffer.from(server.sendKey));
|
|
156
|
-
});
|
|
157
|
-
it("changes with every input", () => {
|
|
158
|
-
const base = derivationParams();
|
|
159
|
-
const reference = (0, frame_cipher_1.deriveFrameKeys)(base);
|
|
160
|
-
const variants = [
|
|
161
|
-
{ ephemeralSharedSecret: nacl.randomBytes(32) },
|
|
162
|
-
{ staticSharedSecret: nacl.randomBytes(32) },
|
|
163
|
-
{ connectionId: (0, utils_1.newid)() },
|
|
164
|
-
{ clientDeviceId: (0, utils_1.newid)() },
|
|
165
|
-
{ serverDeviceId: (0, utils_1.newid)() },
|
|
166
|
-
{ timestamp: base.timestamp + 1 },
|
|
167
|
-
];
|
|
168
|
-
for (const variant of variants) {
|
|
169
|
-
const derived = (0, frame_cipher_1.deriveFrameKeys)({ ...base, ...variant });
|
|
170
|
-
expect(Buffer.from(derived.clientToServer).equals(Buffer.from(reference.clientToServer))).toBe(false);
|
|
171
|
-
expect(Buffer.from(derived.serverToClient).equals(Buffer.from(reference.serverToClient))).toBe(false);
|
|
172
|
-
}
|
|
173
|
-
});
|
|
174
|
-
it("distinguishes swapped device IDs", () => {
|
|
175
|
-
const base = derivationParams();
|
|
176
|
-
const a = (0, frame_cipher_1.deriveFrameKeys)(base);
|
|
177
|
-
const b = (0, frame_cipher_1.deriveFrameKeys)({
|
|
178
|
-
...base,
|
|
179
|
-
clientDeviceId: base.serverDeviceId,
|
|
180
|
-
serverDeviceId: base.clientDeviceId,
|
|
181
|
-
});
|
|
182
|
-
expect(Buffer.from(a.clientToServer).equals(Buffer.from(b.clientToServer))).toBe(false);
|
|
183
|
-
});
|
|
184
|
-
it("rejects malformed inputs", () => {
|
|
185
|
-
const base = derivationParams();
|
|
186
|
-
expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, ephemeralSharedSecret: new Uint8Array(31) })).toThrow(/32-byte/);
|
|
187
|
-
expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, connectionId: "" })).toThrow(/connectionId/);
|
|
188
|
-
expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, timestamp: -1 })).toThrow(/timestamp/);
|
|
189
|
-
expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, timestamp: 1.5 })).toThrow(/timestamp/);
|
|
190
|
-
});
|
|
191
|
-
it("works end to end with real X25519 shared secrets", () => {
|
|
192
|
-
const clientEph = nacl.box.keyPair();
|
|
193
|
-
const serverEph = nacl.box.keyPair();
|
|
194
|
-
const clientStatic = nacl.box.keyPair();
|
|
195
|
-
const serverStatic = nacl.box.keyPair();
|
|
196
|
-
const common = {
|
|
197
|
-
connectionId: (0, utils_1.newid)(),
|
|
198
|
-
clientDeviceId: (0, utils_1.newid)(),
|
|
199
|
-
serverDeviceId: (0, utils_1.newid)(),
|
|
200
|
-
timestamp: Date.now(),
|
|
201
|
-
};
|
|
202
|
-
const clientKeys = (0, frame_cipher_1.frameKeysForRole)((0, frame_cipher_1.deriveFrameKeys)({
|
|
203
|
-
...common,
|
|
204
|
-
ephemeralSharedSecret: nacl.scalarMult(clientEph.secretKey, serverEph.publicKey),
|
|
205
|
-
staticSharedSecret: nacl.scalarMult(clientStatic.secretKey, serverStatic.publicKey),
|
|
206
|
-
}), "client");
|
|
207
|
-
const serverKeys = (0, frame_cipher_1.frameKeysForRole)((0, frame_cipher_1.deriveFrameKeys)({
|
|
208
|
-
...common,
|
|
209
|
-
ephemeralSharedSecret: nacl.scalarMult(serverEph.secretKey, clientEph.publicKey),
|
|
210
|
-
staticSharedSecret: nacl.scalarMult(serverStatic.secretKey, clientStatic.publicKey),
|
|
211
|
-
}), "server");
|
|
212
|
-
const client = (0, frame_cipher_1.createFrameCiphers)(clientKeys, common.connectionId);
|
|
213
|
-
const server = (0, frame_cipher_1.createFrameCiphers)(serverKeys, common.connectionId);
|
|
214
|
-
const inner = innerFrame(0x11, Buffer.from("hello over x25519"));
|
|
215
|
-
expect(Buffer.from(server.opener.open(client.sealer.seal(inner)) ?? [])).toEqual(Buffer.from(inner));
|
|
216
|
-
expect(Buffer.from(client.opener.open(server.sealer.seal(inner)) ?? [])).toEqual(Buffer.from(inner));
|
|
217
|
-
});
|
|
218
|
-
});
|
|
219
|
-
});
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export {};
|