@reclaimprotocol/attestor-core 4.0.0 → 4.0.1

package/lib/providers/httpb64/utils.d.ts

@@ -1,77 +0,0 @@
-import { ArraySlice, CompleteTLSPacket, ProviderParams, Transcript } from '../../types';
-import { HttpRequest, HttpResponse } from '../../utils';
-export type JSONIndex = {
-    start: number;
-    end: number;
-};
-type HTTPProviderParams = ProviderParams<'http'>;
-/**
- * Returns only first extracted element
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-export declare function extractHTMLElement(html: string, xpathExpression: string, contentsOnly: boolean): string;
-/**
- * Returns all extracted elements
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-export declare function extractHTMLElements(html: string, xpathExpression: string, contentsOnly: boolean): string[];
-/**
- * returns a single index of extracted element
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-export declare function extractHTMLElementIndex(html: string, xpathExpression: string, contentsOnly: boolean): {
-    start: number;
-    end: number;
-};
-/**
- * Returns indexes of all extracted elements
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-export declare function extractHTMLElementsIndexes(html: string, xpathExpression: string, contentsOnly: boolean): {
-    start: number;
-    end: number;
-}[];
-export declare function extractJSONValueIndex(json: string, jsonPath: string): {
-    start: number;
-    end: number;
-};
-export declare function extractJSONValueIndexes(json: string, jsonPath: string): {
-    start: number;
-    end: number;
-}[];
-export declare function buildHeaders(input: HTTPProviderParams['headers']): string[];
-/**
- * Converts position in HTTP response body to an absolute position in TLS transcript considering chunked encoding
- * @param pos
- * @param bodyStartIdx
- * @param chunks
- */
-export declare function convertResponsePosToAbsolutePos(pos: number, bodyStartIdx: number, chunks?: ArraySlice[]): number;
-/**
- * Returns parts of response which contain chunk headers and must be redacted out
- * of revealed response part
- * @param from
- * @param to
- * @param chunks
- */
-export declare function getRedactionsForChunkHeaders(from: any, to: number, chunks?: ArraySlice[]): ArraySlice[];
-export declare function parseHttpResponse(buff: Uint8Array): HttpResponse;
-export declare function makeRegex(str: string): any;
-/**
- * Try to match strings that contain templates like {{param}}
- * against redacted string that has *** instead of that param
- */
-export declare function matchRedactedStrings(templateString: Uint8Array, redactedString?: Uint8Array): boolean;
-export declare function generateRequstAndResponseFromTranscript(transcript: Transcript<CompleteTLSPacket>, tlsVersion: string): {
-    req: HttpRequest;
-    res: HttpResponse;
-};
-export {};

package/lib/providers/httpb64/utils.js

@@ -1,358 +0,0 @@
-"use strict";
-// noinspection ExceptionCaughtLocallyJS
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractHTMLElement = extractHTMLElement;
-exports.extractHTMLElements = extractHTMLElements;
-exports.extractHTMLElementIndex = extractHTMLElementIndex;
-exports.extractHTMLElementsIndexes = extractHTMLElementsIndexes;
-exports.extractJSONValueIndex = extractJSONValueIndex;
-exports.extractJSONValueIndexes = extractJSONValueIndexes;
-exports.buildHeaders = buildHeaders;
-exports.convertResponsePosToAbsolutePos = convertResponsePosToAbsolutePos;
-exports.getRedactionsForChunkHeaders = getRedactionsForChunkHeaders;
-exports.parseHttpResponse = parseHttpResponse;
-exports.makeRegex = makeRegex;
-exports.matchRedactedStrings = matchRedactedStrings;
-exports.generateRequstAndResponseFromTranscript = generateRequstAndResponseFromTranscript;
-const tls_1 = require("@reclaimprotocol/tls");
-const esprima_next_1 = require("esprima-next");
-const jsonpath_plus_1 = require("jsonpath-plus");
-const utils_1 = require("../../utils");
-let RE2;
-try {
-    RE2 = require('re2');
-    if (!Object.keys(RE2).length) {
-        RE2 = undefined;
-        throw new Error();
-    }
-}
-catch (_a) {
-    console.log('RE2 not found. Using standard regex');
-}
-let jsd;
-if (typeof window !== 'undefined') {
-    // @ts-ignore
-    jsd = window.jsdom;
-}
-else {
-    jsd = require('jsdom');
-}
-/**
- * Returns only first extracted element
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-function extractHTMLElement(html, xpathExpression, contentsOnly) {
-    const { start, end } = extractHTMLElementIndex(html, xpathExpression, contentsOnly);
-    return html.slice(start, end);
-}
-/**
- * Returns all extracted elements
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-function extractHTMLElements(html, xpathExpression, contentsOnly) {
-    const indexes = extractHTMLElementsIndexes(html, xpathExpression, contentsOnly);
-    const res = [];
-    for (const { start, end } of indexes) {
-        res.push(html.slice(start, end));
-    }
-    return res;
-}
-/**
- * returns a single index of extracted element
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-function extractHTMLElementIndex(html, xpathExpression, contentsOnly) {
-    return extractHTMLElementsIndexes(html, xpathExpression, contentsOnly)[0];
-}
-/**
- * Returns indexes of all extracted elements
- * @param html
- * @param xpathExpression
- * @param contentsOnly
- */
-function extractHTMLElementsIndexes(html, xpathExpression, contentsOnly) {
-    const dom = new jsd.JSDOM(html, {
-        contentType: 'text/html',
-        includeNodeLocations: true
-    });
-    const document = dom.window.document;
-    const xpathResult = document.evaluate(xpathExpression, document, null, dom.window.XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null);
-    const nodes = [];
-    if ((xpathResult === null || xpathResult === void 0 ? void 0 : xpathResult.resultType) === dom.window.XPathResult.ORDERED_NODE_SNAPSHOT_TYPE &&
-        (xpathResult === null || xpathResult === void 0 ? void 0 : xpathResult.snapshotLength)) {
-        for (let i = 0; i < xpathResult.snapshotLength; ++i) {
-            nodes.push(xpathResult.snapshotItem(i));
-        }
-    }
-    if (!nodes.length) {
-        throw new Error(`Failed to find XPath: "${xpathExpression}"`);
-    }
-    const res = [];
-    for (const node of nodes) {
-        const nodeLocation = dom.nodeLocation(node);
-        if (!nodeLocation) {
-            throw new Error(`Failed to find XPath node location: "${xpathExpression}"`);
-        }
-        if (contentsOnly) {
-            const start = nodeLocation.startTag ? nodeLocation.startTag.endOffset : nodeLocation.startOffset;
-            const end = nodeLocation.endTag ? nodeLocation.endTag.startOffset : nodeLocation.endOffset;
-            res.push({ start, end });
-        }
-        else {
-            res.push({ start: nodeLocation.startOffset, end: nodeLocation.endOffset });
-        }
-    }
-    return res;
-}
-function extractJSONValueIndex(json, jsonPath) {
-    return extractJSONValueIndexes(json, jsonPath)[0];
-}
-function extractJSONValueIndexes(json, jsonPath) {
-    const pointers = (0, jsonpath_plus_1.JSONPath)({
-        path: jsonPath,
-        json: JSON.parse(json),
-        wrap: false,
-        resultType: 'pointer',
-        eval: 'safe',
-        // @ts-ignore
-        ignoreEvalErrors: true
-    });
-    if (!pointers) {
-        throw new Error('jsonPath not found');
-    }
-    const tree = (0, esprima_next_1.parseScript)('(' + json + ')', { range: true }); //wrap in parentheses for esprima to parse
-    if (tree.body[0] instanceof esprima_next_1.ExpressionStatement
-        && (tree.body[0].expression instanceof esprima_next_1.ObjectExpression || tree.body[0].expression instanceof esprima_next_1.ArrayExpression)) {
-        const traversePointers = Array.isArray(pointers) ? pointers : [pointers];
-        const res = [];
-        for (const pointer of traversePointers) {
-            const index = traverse(tree.body[0].expression, '', [pointer]);
-            if (index) {
-                res.push({
-                    start: index.start - 1, //account for '('
-                    end: index.end - 1,
-                });
-            }
-        }
-        return res;
-    }
-    throw new Error('jsonPath not found');
-}
-/**
- * recursively go through AST tree and build a JSON path while it's not equal to the one we search for
- * @param o - esprima expression for root object
- * @param path - path that is being built
- * @param pointers - JSON pointers to compare to
- */
-function traverse(o, path, pointers) {
-    if (o instanceof esprima_next_1.ObjectExpression) {
-        for (const p of o.properties) {
-            if (!(p instanceof esprima_next_1.Property)) {
-                continue;
-            }
-            const localPath = p.key.type === esprima_next_1.Syntax.Literal
-                ? path + '/' + p.key.value
-                : path;
-            if (pointers.includes(localPath) && 'range' in p && Array.isArray(p.range)) {
-                return {
-                    start: p.range[0],
-                    end: p.range[1],
-                };
-            }
-            if (p.value instanceof esprima_next_1.ObjectExpression
-                || p.value instanceof esprima_next_1.ArrayExpression) {
-                const res = traverse(p.value, localPath, pointers);
-                if (res) {
-                    return res;
-                }
-            }
-        }
-    }
-    if (o instanceof esprima_next_1.ArrayExpression) {
-        for (let i = 0; i < o.elements.length; i++) {
-            const element = o.elements[i];
-            if (!element) {
-                continue;
-            }
-            const localPath = path + '/' + i;
-            if (pointers.includes(localPath) &&
-                'range' in element &&
-                Array.isArray(element.range)) {
-                return {
-                    start: element.range[0],
-                    end: element.range[1],
-                };
-            }
-            if (element instanceof esprima_next_1.ObjectExpression) {
-                const res = traverse(element, localPath, pointers);
-                if (res) {
-                    return res;
-                }
-            }
-            if (element instanceof esprima_next_1.ArrayExpression) {
-                const res = traverse(element, localPath, pointers);
-                if (res) {
-                    return res;
-                }
-            }
-        }
-    }
-    return null;
-}
-function buildHeaders(input) {
-    const headers = [];
-    for (const [key, value] of Object.entries(input || {})) {
-        headers.push(`${key}: ${value}`);
-    }
-    return headers;
-}
-/**
- * Converts position in HTTP response body to an absolute position in TLS transcript considering chunked encoding
- * @param pos
- * @param bodyStartIdx
- * @param chunks
- */
-function convertResponsePosToAbsolutePos(pos, bodyStartIdx, chunks) {
-    if (chunks === null || chunks === void 0 ? void 0 : chunks.length) {
-        let chunkBodyStart = 0;
-        for (const chunk of chunks) {
-            const chunkSize = chunk.toIndex - chunk.fromIndex;
-            if (pos >= chunkBodyStart && pos <= (chunkBodyStart + chunkSize)) {
-                return pos - chunkBodyStart + chunk.fromIndex;
-            }
-            chunkBodyStart += chunkSize;
-        }
-        throw new Error('position out of range');
-    }
-    return bodyStartIdx + pos;
-}
-/**
- * Returns parts of response which contain chunk headers and must be redacted out
- * of revealed response part
- * @param from
- * @param to
- * @param chunks
- */
-function getRedactionsForChunkHeaders(from, to, chunks) {
-    const res = [];
-    if (chunks === null || chunks === void 0 ? void 0 : chunks.length) {
-        for (let i = 1; i < (chunks === null || chunks === void 0 ? void 0 : chunks.length); i++) {
-            if (chunks[i].fromIndex > from && chunks[i].fromIndex < to) {
-                res.push({ fromIndex: chunks[i - 1].toIndex, toIndex: chunks[i].fromIndex });
-            }
-        }
-    }
-    return res;
-}
-function parseHttpResponse(buff) {
-    const parser = (0, utils_1.makeHttpResponseParser)();
-    parser.onChunk(buff);
-    parser.streamEnded();
-    return parser.res;
-}
-function makeRegex(str) {
-    if (RE2 !== undefined) {
-        return RE2(str, 'sgiu');
-    }
-    return new RegExp(str, 'sgi');
-}
-const TEMPLATE_START_CHARCODE = '{'.charCodeAt(0);
-const TEMPLATE_END_CHARCODE = '}'.charCodeAt(0);
-/**
- * Try to match strings that contain templates like {{param}}
- * against redacted string that has *** instead of that param
- */
-function matchRedactedStrings(templateString, redactedString) {
-    if (templateString.length === 0 && (redactedString === null || redactedString === void 0 ? void 0 : redactedString.length) === 0) {
-        return true;
-    }
-    if (!redactedString) {
-        return false;
-    }
-    let ts = -1;
-    let rs = -1;
-    while (ts < templateString.length && rs < redactedString.length) {
-        let ct = getTChar();
-        let cr = getRChar();
-        if (ct !== cr) {
-            // only valid if param contains "{" & redacted contains "*"
-            if (ct === TEMPLATE_START_CHARCODE && cr === utils_1.REDACTION_CHAR_CODE) {
-                //check that the char after first "{" is also "{"
-                if (getTChar() !== TEMPLATE_START_CHARCODE) {
-                    return false;
-                }
-                //look for first closing bracket
-                while (((ct = getTChar()) !== TEMPLATE_END_CHARCODE) && ct !== -1) {
-                }
-                //look for second closing bracket
-                while (((ct = getTChar()) !== TEMPLATE_END_CHARCODE) && ct !== -1) {
-                }
-                if (ct === -1) {
-                    return false;
-                }
-                //find the end of redaction
-                while (((cr = getRChar()) === utils_1.REDACTION_CHAR_CODE) && cr !== -1) {
-                }
-                if (cr === -1) {
-                    //if there's nothing after template too then both ended at the end of strings
-                    return getTChar() === -1;
-                }
-                //rewind redacted string position back 1 char because we read one extra
-                rs--;
-            }
-            else {
-                return false;
-            }
-        }
-    }
-    function getTChar() {
-        ts++;
-        if (ts < templateString.length) {
-            return templateString[ts];
-        }
-        else {
-            return -1;
-        }
-    }
-    function getRChar() {
-        if (!redactedString) {
-            return -1;
-        }
-        rs++;
-        if (rs < redactedString.length) {
-            return redactedString[rs];
-        }
-        else {
-            return -1;
-        }
-    }
-    return ts === templateString.length && rs === redactedString.length;
-}
-function generateRequstAndResponseFromTranscript(transcript, tlsVersion) {
-    const allPackets = transcript;
-    const packets = [];
-    for (const b of allPackets) {
-        if (b.message.type !== 'ciphertext'
-            || !(0, utils_1.isApplicationData)(b.message, tlsVersion)) {
-            continue;
-        }
-        const plaintext = tlsVersion === 'TLS1_3'
-            ? b.message.plaintext.slice(0, -1)
-            : b.message.plaintext;
-        packets.push({
-            message: plaintext,
-            sender: b.sender
-        });
-    }
-    const req = (0, utils_1.getHttpRequestDataFromTranscript)(packets);
-    const responsePackets = (0, tls_1.concatenateUint8Arrays)(packets.filter(p => p.sender === 'server').map(p => p.message).filter(b => !b.every(b => b === utils_1.REDACTION_CHAR_CODE)));
-    const res = parseHttpResponse(responsePackets);
-    return { req, res };
-}
-//# sourceMappingURL=data:application/json;base64,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

package/lib/server/utils/verify-server-certificates.d.ts

@@ -1,7 +0,0 @@
-import { IDecryptedTranscript } from '../../types';
-/**
- * Verifies server cert chain and removes handshake messages from transcript, returning new one
- * @param receipt
- * @param logger
- */
-export declare function verifyServerCertificates(receipt: IDecryptedTranscript, logger: any): Promise<IDecryptedTranscript>;

package/lib/server/utils/verify-server-certificates.js

@@ -1,101 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyServerCertificates = verifyServerCertificates;
-const tls_1 = require("@reclaimprotocol/tls");
-const parse_certificate_1 = require("@reclaimprotocol/tls/lib/utils/parse-certificate");
-const utils_1 = require("../../utils");
-const RECORD_LENGTH_BYTES = 3;
-/**
- * Verifies server cert chain and removes handshake messages from transcript, returning new one
- * @param receipt
- * @param logger
- */
-async function verifyServerCertificates(receipt, logger) {
-    const handshakeMsgs = (0, utils_1.extractHandshakeFromTranscript)(receipt);
-    let handshakeData = (0, tls_1.concatenateUint8Arrays)(handshakeMsgs.messages.map(m => m.message));
-    let packetData;
-    const handshakeRawMessages = [];
-    const certificates = [];
-    let cipherSuite = undefined;
-    let serverRandom = undefined;
-    let clientRandom = undefined;
-    let certVerified = false;
-    while ((packetData = readPacket()) && !certVerified) {
-        const { type, content } = packetData;
-        switch (type) {
-            case tls_1.SUPPORTED_RECORD_TYPE_MAP.CLIENT_HELLO:
-                const clientHello = (0, tls_1.parseClientHello)(handshakeRawMessages[0]);
-                clientRandom = clientHello.serverRandom;
-                break;
-            case tls_1.SUPPORTED_RECORD_TYPE_MAP.SERVER_HELLO:
-                const serverHello = await (0, tls_1.parseServerHello)(content);
-                cipherSuite = serverHello.cipherSuite;
-                serverRandom = serverHello.serverRandom;
-                break;
-            case tls_1.SUPPORTED_RECORD_TYPE_MAP.CERTIFICATE:
-                const parseResult = (0, tls_1.parseCertificates)(content, { version: receipt.tlsVersion });
-                certificates.push(...parseResult.certificates);
-                break;
-            case tls_1.SUPPORTED_RECORD_TYPE_MAP.CERTIFICATE_VERIFY:
-                const signature = (0, tls_1.parseServerCertificateVerify)(content);
-                if (!(certificates === null || certificates === void 0 ? void 0 : certificates.length)) {
-                    throw new Error('No provider certificates received');
-                }
-                const signatureData = await (0, tls_1.getSignatureDataTls13)(handshakeRawMessages.slice(0, -1), cipherSuite);
-                await (0, tls_1.verifyCertificateSignature)({
-                    ...signature,
-                    publicKey: certificates[0].getPublicKey(),
-                    signatureData,
-                });
-                await (0, parse_certificate_1.verifyCertificateChain)(certificates, receipt.hostname);
-                logger.info({ host: receipt.hostname }, 'verified provider certificate chain');
-                certVerified = true;
-                break;
-            case tls_1.SUPPORTED_RECORD_TYPE_MAP.SERVER_KEY_SHARE:
-                if (!(certificates === null || certificates === void 0 ? void 0 : certificates.length)) {
-                    throw new Error('No provider certificates received');
-                }
-                const keyShare = await (0, tls_1.processServerKeyShare)(content);
-                const signatureData12 = await (0, tls_1.getSignatureDataTls12)({
-                    clientRandom: clientRandom,
-                    serverRandom: serverRandom,
-                    curveType: keyShare.publicKeyType,
-                    publicKey: keyShare.publicKey,
-                });
-                // verify signature
-                await (0, tls_1.verifyCertificateSignature)({
-                    signature: keyShare.signatureBytes,
-                    algorithm: keyShare.signatureAlgorithm,
-                    publicKey: certificates[0].getPublicKey(),
-                    signatureData: signatureData12,
-                });
-                await (0, parse_certificate_1.verifyCertificateChain)(certificates, receipt.hostname);
-                logger.info({ host: receipt.hostname }, 'verified provider certificate chain');
-                certVerified = true;
-                break;
-        }
-    }
-    if (!certVerified) {
-        throw new Error('No provider certificates received');
-    }
-    function readPacket() {
-        if (!handshakeData.length) {
-            return;
-        }
-        const type = handshakeData[0];
-        const content = (0, tls_1.readWithLength)(handshakeData.slice(1), RECORD_LENGTH_BYTES);
-        if (!content) {
-            logger.warn('missing bytes from packet');
-            return;
-        }
-        const totalLength = 1 + RECORD_LENGTH_BYTES + content.length;
-        handshakeRawMessages.push(handshakeData.slice(0, totalLength));
-        handshakeData = handshakeData.slice(totalLength);
-        return { type, content };
-    }
-    return {
-        tlsVersion: receipt.tlsVersion,
-        hostname: receipt.hostname,
-        transcript: receipt.transcript.slice(handshakeMsgs.lastMsgIndex)
-    };
-}