@snugdesk/core 0.2.12 → 0.2.13

package/fesm2022/snugdesk-core.mjs

@@ -3198,6 +3198,195 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.16", ngImpo
                 }]
         }], ctorParameters: () => [{ type: AppSyncHelperService }] });
 
+var StorageType;
+(function (StorageType) {
+    StorageType["SessionStorage"] = "sessionStorage";
+    StorageType["LocalStorage"] = "localStorage";
+})(StorageType || (StorageType = {}));
+class EncryptedStorageService {
+    authenticationService;
+    DEFAULT_TTL_SECONDS = 60 * 60 * 12; // 12 hours
+    constructor(authenticationService) {
+        this.authenticationService = authenticationService;
+    }
+    buildKeys(baseKey) {
+        const dataKey = this.scopedKey(baseKey);
+        return {
+            dataKey,
+            cryptoKey: this.scopedKey(`${baseKey}_KEY`),
+            cryptoKeyCreatedAt: this.scopedKey(`${baseKey}_KEY_CREATED_AT`),
+        };
+    }
+    async getJsonByKey(storageType, baseKey, ttlSeconds) {
+        return this.getJson(storageType, this.buildKeys(baseKey), ttlSeconds);
+    }
+    async setJsonByKey(storageType, baseKey, value, ttlSeconds) {
+        await this.setJson(storageType, this.buildKeys(baseKey), value, ttlSeconds);
+    }
+    async updateJsonByKey(storageType, baseKey, value, ttlSeconds) {
+        await this.updateJson(storageType, this.buildKeys(baseKey), ttlSeconds, () => value);
+    }
+    clearByKey(storageType, baseKey) {
+        this.clear(storageType, this.buildKeys(baseKey));
+    }
+    async getJson(storageType, keys, ttlSeconds) {
+        const storage = this.getStorage(storageType);
+        if (!storage)
+            return null;
+        try {
+            const encrypted = storage.getItem(keys.dataKey);
+            if (!encrypted)
+                return null;
+            const decrypted = await this.decryptString(encrypted, keys, ttlSeconds, storage);
+            if (!decrypted)
+                return null;
+            return JSON.parse(decrypted);
+        }
+        catch (err) {
+            console.warn('Failed to read encrypted storage value:', err);
+            return null;
+        }
+    }
+    async setJson(storageType, keys, value, ttlSeconds) {
+        const storage = this.getStorage(storageType);
+        if (!storage)
+            return;
+        try {
+            const payload = JSON.stringify(value);
+            const encrypted = await this.encryptString(payload, keys, ttlSeconds, storage);
+            if (!encrypted)
+                return;
+            storage.setItem(keys.dataKey, encrypted);
+        }
+        catch (err) {
+            console.warn('Failed to persist encrypted storage value:', err);
+        }
+    }
+    async updateJson(storageType, keys, ttlSeconds, updater) {
+        const current = await this.getJson(storageType, keys, ttlSeconds);
+        const next = await updater(current);
+        if (!next)
+            return;
+        await this.setJson(storageType, keys, next, ttlSeconds);
+    }
+    clear(storageType, keys) {
+        const storage = this.getStorage(storageType);
+        if (!storage)
+            return;
+        try {
+            storage.removeItem(keys.dataKey);
+        }
+        catch (err) {
+            console.warn('Failed to clear encrypted storage value:', err);
+        }
+    }
+    getStorage(storageType) {
+        if (typeof window === 'undefined')
+            return null;
+        return storageType === StorageType.LocalStorage ? window.localStorage : window.sessionStorage;
+    }
+    scopedKey(baseKey) {
+        const tenantId = this.authenticationService.getTenantId();
+        return tenantId ? `${baseKey}:${tenantId}` : baseKey;
+    }
+    nowSeconds() {
+        return Math.floor(Date.now() / 1000);
+    }
+    resolveTtlSeconds(ttlSeconds) {
+        return typeof ttlSeconds === 'number' && ttlSeconds > 0 ? ttlSeconds : this.DEFAULT_TTL_SECONDS;
+    }
+    async getOrCreateCryptoKey(keys, ttlSeconds, storage) {
+        if (!window?.crypto?.subtle)
+            return null;
+        try {
+            const createdAtRaw = storage.getItem(keys.cryptoKeyCreatedAt);
+            const keyRaw = storage.getItem(keys.cryptoKey);
+            const now = this.nowSeconds();
+            const ttl = this.resolveTtlSeconds(ttlSeconds);
+            if (createdAtRaw && keyRaw) {
+                const createdAt = Number(createdAtRaw);
+                const isExpired = !Number.isFinite(createdAt) || now - createdAt > ttl;
+                if (!isExpired) {
+                    const jwk = JSON.parse(keyRaw);
+                    return await crypto.subtle.importKey('jwk', jwk, { name: 'AES-GCM' }, true, ['encrypt', 'decrypt']);
+                }
+            }
+            const key = await crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, true, ['encrypt', 'decrypt']);
+            const jwk = await crypto.subtle.exportKey('jwk', key);
+            storage.setItem(keys.cryptoKey, JSON.stringify(jwk));
+            storage.setItem(keys.cryptoKeyCreatedAt, String(now));
+            return key;
+        }
+        catch (err) {
+            console.warn('Failed to create crypto key:', err);
+            return null;
+        }
+    }
+    async encryptString(plainText, keys, ttlSeconds, storage) {
+        const key = await this.getOrCreateCryptoKey(keys, ttlSeconds, storage);
+        if (!key)
+            return null;
+        try {
+            const iv = crypto.getRandomValues(new Uint8Array(12));
+            const encoded = new TextEncoder().encode(plainText);
+            const cipherBuffer = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, encoded);
+            const payload = {
+                iv: this.bytesToBase64(iv),
+                data: this.bytesToBase64(new Uint8Array(cipherBuffer)),
+            };
+            return JSON.stringify(payload);
+        }
+        catch (err) {
+            console.warn('Failed to encrypt cache payload:', err);
+            return null;
+        }
+    }
+    async decryptString(cipherText, keys, ttlSeconds, storage) {
+        const key = await this.getOrCreateCryptoKey(keys, ttlSeconds, storage);
+        if (!key)
+            return null;
+        try {
+            const payload = JSON.parse(cipherText);
+            const iv = this.base64ToBytes(payload?.iv);
+            const data = this.base64ToBytes(payload?.data);
+            if (!iv?.length || !data?.length)
+                return null;
+            // Re-wrap into fresh Uint8Arrays backed by ArrayBuffer (not SharedArrayBuffer).
+            const ivBytes = new Uint8Array(iv);
+            const dataBytes = new Uint8Array(data);
+            const plainBuffer = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: ivBytes }, key, dataBytes);
+            return new TextDecoder().decode(plainBuffer);
+        }
+        catch (err) {
+            console.warn('Failed to decrypt cache payload:', err);
+            return null;
+        }
+    }
+    bytesToBase64(bytes) {
+        let binary = '';
+        for (let i = 0; i < bytes.length; i += 1) {
+            binary += String.fromCharCode(bytes[i]);
+        }
+        return btoa(binary);
+    }
+    base64ToBytes(base64) {
+        const binary = atob(base64 || '');
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i += 1) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes;
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: EncryptedStorageService, deps: [{ token: SnugdeskAuthenticationService }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: EncryptedStorageService, providedIn: 'root' });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.16", ngImport: i0, type: EncryptedStorageService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }], ctorParameters: () => [{ type: SnugdeskAuthenticationService }] });
+
 class CleanDeep {
     static clean(obj) {
         Object.keys(obj).forEach((key) => {
@@ -3301,5 +3490,5 @@ class CustomValidators {
  * Generated bundle index. Do not edit.
  */
 
-export { AMPLIFY_CONFIG, AppSyncHelperService, CleanDeep, CustomPipesModule, CustomValidators, DomainNamePipe, EntityConversationService, EntityService, ErrorComponent, FIELDS_ENTITY, FIELDS_ENTITY_CONVERSATION, FIELDS_ENTITY_CONVERSATION_EXPANDED, FIELDS_ENTITY_EXPANDED, FIELDS_ENTITY_MINIMAL, FIELDS_ENTITY_TYPE, FIELDS_INTERACTION, FIELDS_INTERACTION_ATTENDEE, FIELDS_INTERACTION_ATTENDEE_EXPANDED, FIELDS_INTERACTION_ENDPOINT, FIELDS_INTERACTION_EXPANDED, FIELDS_INTERACTION_HOST, FIELDS_INTERACTION_INVITEE, FIELDS_INTERACTION_MESSAGE, FIELDS_INTERACTION_MESSAGE_ATTACHMENT, FIELDS_INTERACTION_MESSAGE_EXPANDED, FIELDS_INTERACTION_WIDGET, FIELDS_INTERACTION_WIDGET_USER_SETTING, FIELDS_TEAM, FIELDS_TEAM_MEMBER, FIELDS_TENANT, FIELDS_TICKET, FIELDS_TICKET_PRIORITY, FIELDS_TICKET_STATUS, FIELDS_TICKET_TYPE, FIELDS_USER, FIELDS_USER_SESSION, FooterComponent, FormatEpochTimestampPipe, InteractionChannel, InteractionContext, InteractionDirection, InteractionEndpointService, InteractionProvider, InteractionRouteLogic, InteractionService, InteractionStatus, InteractionWidgetService, LoaderComponent, ModelAttributeTypes, ModelSortDirection, OpenSearchHelperService, S3HelperService, SafeHtmlPipe, SearchInnerFieldPipe, SearchPipe, SingularizePipe, SnugdeskAuthenticationService, SnugdeskCoreModule, SnugdeskIPRegistryService, TeamService, TenantSSOConfigurationProtocol, TenantService, TicketService, UserService, UserSessionService, UserStatus, UserType, provideAmplifyConfig };
+export { AMPLIFY_CONFIG, AppSyncHelperService, CleanDeep, CustomPipesModule, CustomValidators, DomainNamePipe, EncryptedStorageService, EntityConversationService, EntityService, ErrorComponent, FIELDS_ENTITY, FIELDS_ENTITY_CONVERSATION, FIELDS_ENTITY_CONVERSATION_EXPANDED, FIELDS_ENTITY_EXPANDED, FIELDS_ENTITY_MINIMAL, FIELDS_ENTITY_TYPE, FIELDS_INTERACTION, FIELDS_INTERACTION_ATTENDEE, FIELDS_INTERACTION_ATTENDEE_EXPANDED, FIELDS_INTERACTION_ENDPOINT, FIELDS_INTERACTION_EXPANDED, FIELDS_INTERACTION_HOST, FIELDS_INTERACTION_INVITEE, FIELDS_INTERACTION_MESSAGE, FIELDS_INTERACTION_MESSAGE_ATTACHMENT, FIELDS_INTERACTION_MESSAGE_EXPANDED, FIELDS_INTERACTION_WIDGET, FIELDS_INTERACTION_WIDGET_USER_SETTING, FIELDS_TEAM, FIELDS_TEAM_MEMBER, FIELDS_TENANT, FIELDS_TICKET, FIELDS_TICKET_PRIORITY, FIELDS_TICKET_STATUS, FIELDS_TICKET_TYPE, FIELDS_USER, FIELDS_USER_SESSION, FooterComponent, FormatEpochTimestampPipe, InteractionChannel, InteractionContext, InteractionDirection, InteractionEndpointService, InteractionProvider, InteractionRouteLogic, InteractionService, InteractionStatus, InteractionWidgetService, LoaderComponent, ModelAttributeTypes, ModelSortDirection, OpenSearchHelperService, S3HelperService, SafeHtmlPipe, SearchInnerFieldPipe, SearchPipe, SingularizePipe, SnugdeskAuthenticationService, SnugdeskCoreModule, SnugdeskIPRegistryService, StorageType, TeamService, TenantSSOConfigurationProtocol, TenantService, TicketService, UserService, UserSessionService, UserStatus, UserType, provideAmplifyConfig };
 //# sourceMappingURL=snugdesk-core.mjs.map