@prove-identity/prove-auth 2.4.4 → 2.7.0

package/build/lib/proveauth/internal/report-error-step.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const logger_1 = require("../common/logger");
 const auth_error_1 = __importDefault(require("./auth-error"));
-const base_authenticator_1 = __importDefault(require("./base-authenticator"));
+const main_authenticator_1 = __importDefault(require("./main-authenticator"));
 const device_passive_register_step_1 = __importDefault(require("./device-passive-register-step"));
 const device_passive_silent_step_1 = __importDefault(require("./device-passive-silent-step"));
 const device_passive_step_1 = __importDefault(require("./device-passive-step"));
@@ -14,6 +14,7 @@ const mobile_instant_step_1 = __importDefault(require("./mobile-instant-step"));
 const mobile_instantlink_step_1 = __importDefault(require("./mobile-instantlink-step"));
 const mobile_otp_step_1 = __importDefault(require("./mobile-otp-step"));
 const user_present_step_1 = __importDefault(require("./user-present-step"));
+const device_universal_redirect_steps_1 = require("./device-universal-redirect-steps");
 class ReportErrorStep {
     constructor(error) {
         this.logger = logger_1.LoggerFactory.getLogger('report-error-step');
@@ -49,14 +50,14 @@ class ReportErrorStep {
             logMessage = logMessage + ', message: ' + this._message;
         }
         this.logger.error(logMessage);
-        if (this.nextStep === base_authenticator_1.default.AUTH_DONE) {
-            return Promise.resolve(base_authenticator_1.default.AUTH_DONE);
+        if (this.nextStep === main_authenticator_1.default.AUTH_DONE) {
+            return Promise.resolve(main_authenticator_1.default.AUTH_DONE);
         }
         else if (!this.nextStep || this.reportable) {
             return new Promise((resolve, reject) => {
-                const errorKind = this.getKind(session.lastStep);
+                const error = this.lookupError(session.lastStep);
                 session
-                    .fetchFromBackend(`/v1/client/${errorKind}/error`, {
+                    .fetchFromBackend(`/v1/client/${error}/error`, {
                     code: this._code ? this._code : undefined,
                     message: this._message,
                 })
@@ -70,12 +71,12 @@ class ReportErrorStep {
             return Promise.resolve(this.nextStep);
         }
     }
-    getKind(last) {
+    lookupError(last) {
         const defaultKind = 'device/passive';
-        return last ? ReportErrorStep.errorKinds.get(last) || defaultKind : defaultKind;
+        return last ? ReportErrorStep.errorMap.get(last) || defaultKind : defaultKind;
     }
 }
-ReportErrorStep.errorKinds = new Map([
+ReportErrorStep.errorMap = new Map([
     [device_passive_step_1.default.NAME, 'device/passive'],
     [device_passive_silent_step_1.default.NAME, 'device/passive'],
     [device_passive_register_step_1.default.NAME, 'device/fido2'],
@@ -84,5 +85,7 @@ ReportErrorStep.errorKinds = new Map([
     [mobile_instantlink_step_1.default.NAME, 'mobile/instantlink'],
     [mobile_otp_step_1.default.NAME, 'mobile/otp'],
     [user_present_step_1.default.NAME, 'user/mobileactive'],
+    [device_universal_redirect_steps_1.DeviceUniversalRedirectExchangeStep.NAME, 'device/universal'],
+    [device_universal_redirect_steps_1.DeviceUniversalRedirectFinishStep.NAME, 'device/universal'],
 ]);
 exports.default = ReportErrorStep;

package/build/lib/proveauth/internal/settings.d.ts

@@ -5,6 +5,7 @@ export default class Settings {
     static readonly FIDO_PASSKEY_REGISTERED_KEY = "fidoPasskeyRegistered";
     private readonly log;
     private storage;
+    upkEnabled: boolean;
     constructor(storage: Storage);
     reset(): void;
     get deviceId(): string | null;

package/build/lib/proveauth/internal/settings.js

@@ -4,6 +4,7 @@ const logger_1 = require("../common/logger");
 class Settings {
     constructor(storage) {
         this.log = logger_1.LoggerFactory.getLogger('settings');
+        this.upkEnabled = false;
         this.storage = storage;
     }
     reset() {

package/build/lib/proveauth/internal/web-device-auth.d.ts

@@ -1,17 +1,20 @@
-import { AuthRegistration } from './auth-request';
+import { AuthRegistration, Signal, Signals } from './auth-request';
 import DeviceAuth, { DeviceRegistration, DeviceRegistrationOptions } from './device-auth';
 export declare class WebDeviceRegistration implements DeviceRegistration {
     private keys?;
     deviceId: string | null;
+    fingerprint?: Signal;
     readonly namespace: string;
     readonly keyId: string;
     readonly algorithm: string;
     readonly endpoint: string;
     readonly createdAt: number;
     constructor(options: DeviceRegistrationOptions | any);
+    setFpSignal(fingerprintSignal: Signal): void;
     sign(data: string): Promise<string>;
     getPublicKey(): Promise<string>;
     getAuthRegistration(challenge: string): Promise<AuthRegistration>;
+    getSignals(): Signals | undefined;
     private initialize;
     private p1363ToDer;
     private lenVal;

package/build/lib/proveauth/internal/web-device-auth.js

@@ -25,6 +25,9 @@ class WebDeviceRegistration {
             this.createdAt = (0, platform_1.getUnixTime)();
         }
     }
+    setFpSignal(fingerprintSignal) {
+        this.fingerprint = fingerprintSignal;
+    }
     sign(data) {
         return new Promise((resolve, reject) => {
             this.initialize()
@@ -80,6 +83,9 @@ class WebDeviceRegistration {
                 .catch(reject);
         });
     }
+    getSignals() {
+        return this.fingerprint ? { fingerprint: this.fingerprint } : undefined;
+    }
     initialize() {
         return new Promise((resolve, reject) => {
             if (this.keys) {

package/build/lib/proveauth/internal/web-platform.d.ts

@@ -1,6 +1,8 @@
+/// <reference types="webappsec-credential-management" />
 import { AuthenticatorBuilder } from '@prove-identity/mobile-auth';
 import Platform, { AuthSessionIntegration, MessageChannel, RequestSigner } from './platform';
 import WebDeviceAuth from './web-device-auth';
+import { Agent } from '@fingerprintjs/fingerprintjs-pro';
 export declare class WebSocketMessageChannel implements MessageChannel {
     private readonly webSocket;
     constructor(endpointUrl: string);
@@ -9,6 +11,7 @@ export declare class WebSocketMessageChannel implements MessageChannel {
     close(): void;
 }
 export declare class WebPlatform implements Platform {
+    private fpPromise;
     readonly webauthn: {
         getCredentials: (options?: CredentialRequestOptions) => Promise<CredentialType | null>;
         createCredentials: (options: CredentialCreationOptions) => Promise<CredentialType | null>;
@@ -18,7 +21,7 @@ export declare class WebPlatform implements Platform {
     getUserAgent(): string | null;
     isFidoSupported(): boolean;
     fetch(input: string, init?: RequestInit): Promise<Response>;
-    createMessageChannel(endpointUrl: string): MessageChannel;
+    createMessageChannel(input: string): MessageChannel;
     createRequestSigner(session: AuthSessionIntegration): RequestSigner;
     private getBrowserName;
     private getBrowserVersion;
@@ -26,4 +29,8 @@ export declare class WebPlatform implements Platform {
     getDeviceCapabilities(): string[];
     getMobileAuthBuilder(): AuthenticatorBuilder<any>;
     exit(code?: number): void;
+    urlRedirect(url: string): void;
+    getFpPromise(): Promise<Agent> | undefined;
+    setFpPromise(fpPromise: Promise<Agent>): void;
+    getOrigin(): string;
 }

package/build/lib/proveauth/internal/web-platform.js

@@ -47,8 +47,8 @@ class WebPlatform {
     fetch(input, init) {
         return fetch(input, init);
     }
-    createMessageChannel(endpointUrl) {
-        return new WebSocketMessageChannel(endpointUrl);
+    createMessageChannel(input) {
+        return new WebSocketMessageChannel(input);
     }
     createRequestSigner(session) {
         return new request_signer_v3_1.default(session);
@@ -156,5 +156,17 @@ class WebPlatform {
     }
     exit(code) {
     }
+    urlRedirect(url) {
+        window.location.replace(url);
+    }
+    getFpPromise() {
+        return this.fpPromise;
+    }
+    setFpPromise(fpPromise) {
+        this.fpPromise = fpPromise;
+    }
+    getOrigin() {
+        return window.location.origin;
+    }
 }
 exports.WebPlatform = WebPlatform;

package/build/lib/proveauth/user-consent-step.d.ts

@@ -0,0 +1,7 @@
+export interface UserConsentOutput {
+    readonly consentGranted: boolean;
+}
+export default interface UserConsentStep {
+    execute: () => Promise<UserConsentOutput>;
+}
+export type UserConsentStepFn = () => Promise<UserConsentOutput>;

package/build/lib/proveauth/user-consent-step.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/lib/proveauth/version.d.ts

@@ -1,3 +1,3 @@
-export declare const VERSION = "2.3.2";
-export declare const API_CONTRACT_VERSION = "2.7.0";
+export declare const VERSION = "2.7.0";
+export declare const API_CONTRACT_VERSION = "2.8.0";
 export declare const USER_AGENT_VERSIONS: string;

package/build/lib/proveauth/version.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.USER_AGENT_VERSIONS = exports.API_CONTRACT_VERSION = exports.VERSION = void 0;
-exports.VERSION = '2.3.2';
-exports.API_CONTRACT_VERSION = '2.7.0';
+exports.VERSION = '2.7.0';
+exports.API_CONTRACT_VERSION = '2.8.0';
 exports.USER_AGENT_VERSIONS = `ProveAuth/${exports.VERSION} Contract/${exports.API_CONTRACT_VERSION} WEB/1`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prove-identity/prove-auth",
-  "version": "2.4.4",
+  "version": "2.7.0",
   "description": "Prove Auth SDK for Web",
   "main": "build/lib/index.js",
   "files": [
@@ -11,7 +11,8 @@
     "build/lib/index.d.ts",
     "build/lib/proveauth/**/*.js",
     "build/lib/proveauth/**/*.js.map",
-    "build/lib/proveauth/**/*.d.ts"
+    "build/lib/proveauth/**/*.d.ts",
+    "build/bundle/release/*.js"
   ],
   "types": "build/lib/index.d.ts",
   "scripts": {
@@ -67,5 +68,13 @@
   },
   "dependencies": {
     "@prove-identity/mobile-auth": "^3.0.0"
+  },
+  "peerDependencies": {
+    "@fingerprintjs/fingerprintjs-pro": "^3.11.0"
+  },
+  "peerDependenciesMeta": {
+    "@fingerprintjs/fingerprintjs-pro": {
+      "optional": true
+    }
   }
-}
+}

package/build/lib/proveauth/internal/primary-authenticator.d.ts

@@ -1,14 +0,0 @@
-import AuthFinishStep from '../auth-finish-step';
-import AuthStep from './auth-step';
-import AuthSession from './auth-session';
-import Platform from './platform';
-import CancelablePromise from '../common/cancelable-promise';
-import BaseAuthenticator from './base-authenticator';
-export default class PrimaryAuthenticator extends BaseAuthenticator {
-    static readonly MAX_ATTEMPTS = 50;
-    private readonly steps;
-    constructor(platform?: Platform, storage?: Storage, finishStep?: AuthFinishStep, steps?: Array<AuthStep>);
-    process(session: AuthSession): CancelablePromise<void>;
-    private nextStep;
-    private getNextStep;
-}

package/build/lib/proveauth/internal/primary-authenticator.js

@@ -1,64 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const report_error_step_1 = __importDefault(require("./report-error-step"));
-const logger_1 = require("../common/logger");
-const cancelable_promise_1 = __importDefault(require("../common/cancelable-promise"));
-const base_authenticator_1 = __importDefault(require("./base-authenticator"));
-const auth_error_1 = __importDefault(require("./auth-error"));
-const error_code_1 = __importDefault(require("./error-code"));
-class PrimaryAuthenticator extends base_authenticator_1.default {
-    constructor(platform, storage, finishStep, steps) {
-        super(platform, storage, finishStep);
-        this.steps = new Map();
-        this.log = logger_1.LoggerFactory.getLogger('primary-authenticator');
-        if (steps) {
-            for (let step of steps) {
-                this.steps.set(step.name, step);
-            }
-        }
-    }
-    process(session) {
-        return new cancelable_promise_1.default((resolve, reject, onCancel) => {
-            onCancel(() => {
-                this.log.info('Canceled');
-                resolve();
-            });
-            this.nextStep(session, session.next, 1).then(resolve).catch(reject);
-        });
-    }
-    nextStep(session, step, attempt) {
-        this.log.debug(`Authentication attempt ${attempt}, next step: ${step}`);
-        session.lastStep = step;
-        return new Promise((resolve, reject) => {
-            if ([base_authenticator_1.default.AUTH_DONE, base_authenticator_1.default.AUTH_EMPTY].includes(step)) {
-                resolve();
-            }
-            else if (attempt > PrimaryAuthenticator.MAX_ATTEMPTS) {
-                reject(new auth_error_1.default('Too many authentication steps', error_code_1.default.ERROR_MAX_ATTEMPTS));
-            }
-            else {
-                this.getNextStep(step)
-                    .execute(session)
-                    .then((next) => this.nextStep(session, next, attempt + 1))
-                    .then(resolve)
-                    .catch((e) => new report_error_step_1.default(e)
-                    .execute(session)
-                    .then((next) => this.nextStep(session, next, attempt + 1))
-                    .then(resolve)
-                    .catch(reject));
-            }
-        });
-    }
-    getNextStep(step) {
-        var nextStep = this.steps.get(step);
-        if (nextStep) {
-            return nextStep;
-        }
-        return new report_error_step_1.default('Unknown authentication step: ' + step);
-    }
-}
-PrimaryAuthenticator.MAX_ATTEMPTS = 50;
-exports.default = PrimaryAuthenticator;

package/build/lib/proveauth/internal/secondary-authenticator.d.ts

@@ -1,10 +0,0 @@
-import AuthFinishStep from '../auth-finish-step';
-import AuthSession from './auth-session';
-import Platform from './platform';
-import CancelablePromise from '../common/cancelable-promise';
-import AuthStep from './auth-step';
-import PrimaryAuthenticator from './primary-authenticator';
-export default class SecondaryAuthenticator extends PrimaryAuthenticator {
-    constructor(platform?: Platform, storage?: Storage, finishStep?: AuthFinishStep, steps?: Array<AuthStep>);
-    process(session: AuthSession): CancelablePromise<void>;
-}

package/build/lib/proveauth/internal/secondary-authenticator.js

@@ -1,65 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const logger_1 = require("../common/logger");
-const cancelable_promise_1 = __importDefault(require("../common/cancelable-promise"));
-const auth_error_1 = __importDefault(require("./auth-error"));
-const primary_authenticator_1 = __importDefault(require("./primary-authenticator"));
-class SecondaryAuthenticator extends primary_authenticator_1.default {
-    constructor(platform, storage, finishStep, steps) {
-        super(platform, storage, finishStep, steps);
-        this.log = logger_1.LoggerFactory.getLogger('secondary-authenticator');
-    }
-    process(session) {
-        return new cancelable_promise_1.default((resolve, reject, onCancel) => {
-            var gotResponse = false;
-            var channel;
-            var runSteps = super.process(session);
-            runSteps
-                .then(() => {
-                channel = session.createMessageChannel('/v1/client/status', () => {
-                    if (!gotResponse) {
-                        reject(new auth_error_1.default('Failed to receive secondary authentication status, no response'));
-                    }
-                }, (errorMessage) => {
-                    gotResponse = true;
-                    this.log.error('Failed: ' + errorMessage);
-                    reject(new auth_error_1.default('Failed to receive secondary authentication status: ' + errorMessage));
-                }, (data) => {
-                    gotResponse = true;
-                    try {
-                        this.log.debug(('Secondary authentication status: ' + data));
-                        const response = JSON.parse(data);
-                        if (response.error) {
-                            reject(new auth_error_1.default(response.error.message, response.error.code, response.next));
-                        }
-                        else {
-                            session.lastStep = response.next;
-                            resolve();
-                        }
-                    }
-                    catch (e) {
-                        reject(e);
-                    }
-                    finally {
-                        channel.close();
-                    }
-                });
-            })
-                .catch(reject);
-            onCancel(() => {
-                gotResponse = true;
-                if (runSteps) {
-                    runSteps.cancel();
-                }
-                if (channel) {
-                    channel.close();
-                }
-                resolve();
-            });
-        });
-    }
-}
-exports.default = SecondaryAuthenticator;