@sudoplatform/sudo-user 10.1.0 → 12.0.0

package/cjs/src/client/apiClient.js

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiClient = void 0;
+const aws_appsync_1 = require("aws-appsync");
+const graphql_types_1 = require("../gen/graphql-types");
+const sudo_common_1 = require("@sudoplatform/sudo-common");
+/**
+ * AppSync wrapper to use to invoke Identity Service APIs.
+ */
+class ApiClient {
+    constructor(region, graphqlUrl, sudoUserClient, logger) {
+        this.region = region;
+        this.graphqlUrl = graphqlUrl;
+        this.sudoUserClient = sudoUserClient;
+        this.logger = logger;
+        this.client = new aws_appsync_1.AWSAppSyncClient({
+            url: graphqlUrl,
+            region: region,
+            auth: {
+                type: aws_appsync_1.AUTH_TYPE.AMAZON_COGNITO_USER_POOLS,
+                jwtToken: async () => await sudoUserClient.getLatestAuthToken(),
+            },
+            disableOffline: true,
+        });
+    }
+    async deregister() {
+        if (!(await this.sudoUserClient.isSignedIn())) {
+            throw new sudo_common_1.NotSignedInError();
+        }
+        let result;
+        try {
+            result = await this.client.mutate({
+                mutation: graphql_types_1.DeregisterDocument,
+                fetchPolicy: 'no-cache',
+            });
+        }
+        catch (err) {
+            const apolloError = err;
+            const error = apolloError.graphQLErrors?.[0];
+            if (error) {
+                throw this.graphQLErrorsToClientError(error);
+            }
+            else {
+                throw new sudo_common_1.UnknownGraphQLError(err);
+            }
+        }
+        const error = result.errors?.[0];
+        if (error) {
+            throw this.graphQLErrorsToClientError(error);
+        }
+        if (result.data) {
+            return { success: result.data.deregister?.success ? true : false };
+        }
+        else {
+            throw new sudo_common_1.FatalError('deregister did not return any result.');
+        }
+    }
+    async globalSignOut() {
+        if (!(await this.sudoUserClient.isSignedIn())) {
+            throw new sudo_common_1.NotSignedInError();
+        }
+        let result;
+        try {
+            result = await this.client.mutate({
+                mutation: graphql_types_1.GlobalSignOutDocument,
+                fetchPolicy: 'no-cache',
+            });
+        }
+        catch (err) {
+            const apolloError = err;
+            const error = apolloError.graphQLErrors?.[0];
+            if (error) {
+                throw this.graphQLErrorsToClientError(error);
+            }
+            else {
+                throw new sudo_common_1.UnknownGraphQLError(err);
+            }
+        }
+        const error = result.errors?.[0];
+        if (error) {
+            throw this.graphQLErrorsToClientError(error);
+        }
+        if (result.data) {
+            return { success: result.data.globalSignOut?.success ? true : false };
+        }
+        else {
+            throw new sudo_common_1.FatalError('globalSignOut did not return any result.');
+        }
+    }
+    async registerFederatedId(input) {
+        let result;
+        try {
+            result = await this.client.mutate({
+                mutation: graphql_types_1.RegisterFederatedIdDocument,
+                variables: { input },
+                fetchPolicy: 'no-cache',
+            });
+        }
+        catch (err) {
+            const apolloError = err;
+            const error = apolloError.graphQLErrors?.[0];
+            if (error) {
+                throw this.graphQLErrorsToClientError(error);
+            }
+            else {
+                throw new sudo_common_1.UnknownGraphQLError(err);
+            }
+        }
+        const error = result.errors?.[0];
+        if (error) {
+            throw this.graphQLErrorsToClientError(error);
+        }
+        const identityId = result.data?.registerFederatedId?.identityId;
+        if (identityId) {
+            return {
+                identityId,
+            };
+        }
+        else {
+            throw new sudo_common_1.FatalError('registerFederatedId did not return expected result.');
+        }
+    }
+    reset() {
+        this.client.clearStore();
+        this.client = new aws_appsync_1.AWSAppSyncClient({
+            url: this.graphqlUrl,
+            region: this.region,
+            auth: {
+                type: aws_appsync_1.AUTH_TYPE.AMAZON_COGNITO_USER_POOLS,
+                jwtToken: async () => await this.sudoUserClient.getLatestAuthToken(),
+            },
+            disableOffline: true,
+        });
+    }
+    graphQLErrorsToClientError(error) {
+        this.logger.error('GraphQL call failed.', { error });
+        if (error.errorType === 'sudoplatform.ServiceError') {
+            return new sudo_common_1.ServiceError(error.message);
+        }
+        else if (error.errorType === 'sudoplatform.identity.TokenValidationError') {
+            return new sudo_common_1.NotAuthorizedError();
+        }
+        else {
+            return new sudo_common_1.UnknownGraphQLError(error);
+        }
+    }
+}
+exports.ApiClient = ApiClient;
+//# sourceMappingURL=apiClient.js.map

package/cjs/src/client/apiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.js","sourceRoot":"","sources":["../../../src/client/apiClient.ts"],"names":[],"mappings":";;;AACA,6CAAyD;AACzD,wDAQ6B;AAC7B,2DAQkC;AAIlC;;GAEG;AACH,MAAa,SAAS;IAOpB,YACE,MAAc,EACd,UAAkB,EAClB,cAA8B,EAC9B,MAAc;QAEd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,IAAI,CAAC,MAAM,GAAG,IAAI,8BAAgB,CAAC;YACjC,GAAG,EAAE,UAAU;YACf,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,uBAAS,CAAC,yBAAyB;gBACzC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,cAAc,CAAC,kBAAkB,EAAE;aAChE;YACD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE;YAC7C,MAAM,IAAI,8BAAgB,EAAE,CAAA;SAC7B;QAED,IAAI,MAAM,CAAA;QACV,IAAI;YACF,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAqB;gBACpD,QAAQ,EAAE,kCAAkB;gBAC5B,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,WAAW,GAAG,GAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;aAC7C;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,CAAA;aACnC;SACF;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE;YACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;SAC7C;QAED,IAAI,MAAM,CAAC,IAAI,EAAE;YACf,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;SACnE;aAAM;YACL,MAAM,IAAI,wBAAU,CAAC,uCAAuC,CAAC,CAAA;SAC9D;IACH,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE;YAC7C,MAAM,IAAI,8BAAgB,EAAE,CAAA;SAC7B;QAED,IAAI,MAAM,CAAA;QACV,IAAI;YACF,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAwB;gBACvD,QAAQ,EAAE,qCAAqB;gBAC/B,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,WAAW,GAAG,GAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;aAC7C;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,CAAA;aACnC;SACF;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE;YACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;SAC7C;QAED,IAAI,MAAM,CAAC,IAAI,EAAE;YACf,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;SACtE;aAAM;YACL,MAAM,IAAI,wBAAU,CAAC,0CAA0C,CAAC,CAAA;SACjE;IACH,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAC9B,KAA+B;QAE/B,IAAI,MAAM,CAAA;QACV,IAAI;YACF,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAA8B;gBAC7D,QAAQ,EAAE,2CAA2B;gBACrC,SAAS,EAAE,EAAE,KAAK,EAAE;gBACpB,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,WAAW,GAAG,GAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;aAC7C;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,CAAA;aACnC;SACF;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE;YACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;SAC7C;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAA;QAC/D,IAAI,UAAU,EAAE;YACd,OAAO;gBACL,UAAU;aACX,CAAA;SACF;aAAM;YACL,MAAM,IAAI,wBAAU,CAClB,qDAAqD,CACtD,CAAA;SACF;IACH,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,8BAAgB,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,UAAU;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE;gBACJ,IAAI,EAAE,uBAAS,CAAC,yBAAyB;gBACzC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;aACrE;YACD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAA;IACJ,CAAC;IAEO,0BAA0B,CAAC,KAAmB;QACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAEpD,IAAI,KAAK,CAAC,SAAS,KAAK,2BAA2B,EAAE;YACnD,OAAO,IAAI,0BAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACvC;aAAM,IACL,KAAK,CAAC,SAAS,KAAK,4CAA4C,EAChE;YACA,OAAO,IAAI,gCAAkB,EAAE,CAAA;SAChC;aAAM;YACL,OAAO,IAAI,iCAAmB,CAAC,KAAK,CAAC,CAAA;SACtC;IACH,CAAC;CACF;AA9JD,8BA8JC"}

package/cjs/src/core/api-key-names.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiKeyNames = void 0;
+exports.apiKeyNames = {
+    idToken: 'idToken',
+    accessToken: 'accessToken',
+    refreshToken: 'refreshToken',
+    tokenExpiry: 'tokenExpiry',
+    refreshTokenExpiry: 'refreshTokenExpiry',
+    userId: 'LastAuthUser',
+};
+//# sourceMappingURL=api-key-names.js.map

package/cjs/src/core/api-key-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-names.js","sourceRoot":"","sources":["../../../src/core/api-key-names.ts"],"names":[],"mappings":";;;AAAa,QAAA,WAAW,GAAG;IACzB,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,kBAAkB,EAAE,oBAAoB;IACxC,MAAM,EAAE,cAAc;CACvB,CAAA"}

package/cjs/src/core/auth-store.js

@@ -0,0 +1,92 @@
+"use strict";
+var _AuthenticationStore_secrets;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationStore = void 0;
+const tslib_1 = require("tslib");
+const JWT = tslib_1.__importStar(require("jsonwebtoken"));
+/**
+ * Stores authentication details such as tokens and username
+ */
+class AuthenticationStore {
+    constructor() {
+        /** Do not expose these directly */
+        // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+        _AuthenticationStore_secrets.set(this, {});
+        this.subscribers = [];
+    }
+    /** Adds a secret into private _secrets object */
+    async addSecret(keyId, secret) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        tslib_1.__classPrivateFieldGet(this, _AuthenticationStore_secrets, "f")[key] = secret;
+    }
+    /**
+     * Adds a string value into authentication store
+     */
+    async setItem(keyId, value) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        if (key === 'idToken') {
+            // Store the token expiry
+            const decoded = JWT.decode(value, { complete: true });
+            if (decoded) {
+                const tokenExpiry = decoded.payload['exp'];
+                await this.addSecret('tokenExpiry', {
+                    type: 'string',
+                    value: tokenExpiry,
+                });
+            }
+        }
+        await this.addSecret(key, { type: 'string', value });
+        await this.notifySubscribers(key);
+    }
+    /**
+     * Returns a string value from authentication store
+     */
+    getItem(keyId) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        const secret = tslib_1.__classPrivateFieldGet(this, _AuthenticationStore_secrets, "f")[key];
+        return secret?.type === 'string' ? secret.value : undefined;
+    }
+    /**
+     * Removes a secret
+     */
+    removeItem(keyId) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        delete tslib_1.__classPrivateFieldGet(this, _AuthenticationStore_secrets, "f")[key];
+    }
+    /**
+     * Clears all secrets
+     */
+    reset() {
+        tslib_1.__classPrivateFieldSet(this, _AuthenticationStore_secrets, {}, "f");
+    }
+    /**
+     * Register a subscriber to be notified when items are added
+     *
+     * @param subscriber a subscriber to be notified when items are added
+     */
+    async subscribe(subscriber) {
+        this.subscribers.push(subscriber);
+    }
+    /**
+     * Remove a subscriber from the list of subscribers
+     *
+     * @param subscriber the subscriber to be removed
+     */
+    async unsubscribe(subscriber) {
+        const index = this.subscribers.indexOf(subscriber);
+        this.subscribers.splice(index, 1);
+    }
+    /**
+     * Notify all subscribers that a change event was triggered for a specific item
+     *
+     * @param itemName the name of the item that changed
+     */
+    async notifySubscribers(itemName) {
+        for (const subscriber of this.subscribers) {
+            subscriber.update(itemName);
+        }
+    }
+}
+exports.AuthenticationStore = AuthenticationStore;
+_AuthenticationStore_secrets = new WeakMap();
+//# sourceMappingURL=auth-store.js.map

package/cjs/src/core/auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../../src/core/auth-store.ts"],"names":[],"mappings":";;;;;AAEA,0DAAmC;AAcnC;;GAEG;AACH,MAAa,mBAAmB;IAAhC;QACE,mCAAmC;QACnC,0EAA0E;QAC1E,uCAAmC,EAAE,EAAA;QACrC,gBAAW,GAAiB,EAAE,CAAA;IAiFhC,CAAC;IA/EC,iDAAiD;IACzC,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,+BAAA,IAAI,oCAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;IAC7B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAAa;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,IAAI,GAAG,KAAK,SAAS,EAAE;YACrB,yBAAyB;YACzB,MAAM,OAAO,GAAQ,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1D,IAAI,OAAO,EAAE;gBACX,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC1C,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;oBAClC,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAA;aACH;SACF;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,KAAa;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,+BAAA,IAAI,oCAAS,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC;IAED;;OAEG;IACI,UAAU,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,OAAO,+BAAA,IAAI,oCAAS,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED;;OAEG;IACI,KAAK;QACV,+BAAA,IAAI,gCAAY,EAAE,MAAA,CAAA;IACpB,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,SAAS,CAAC,UAAsB;QAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,WAAW,CAAC,UAAsB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE;YACzC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;SAC5B;IACH,CAAC;CACF;AArFD,kDAqFC"}

package/cjs/src/core/crypto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=crypto.js.map

package/cjs/src/core/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../src/core/crypto.ts"],"names":[],"mappings":""}

package/cjs/src/core/key-manager.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyManager = void 0;
+const tslib_1 = require("tslib");
+const sudo_common_1 = require("@sudoplatform/sudo-common");
+const jsonwebtoken_1 = tslib_1.__importDefault(require("jsonwebtoken"));
+const uuid = tslib_1.__importStar(require("uuid"));
+const node_crypto_1 = require("../runtimes/node/node-crypto");
+/**
+ * Key Manager
+ */
+class KeyManager {
+    constructor(sudoKeyManager) {
+        this.sudoKeyManager = sudoKeyManager;
+    }
+    /**
+     * Adds a string value into key manager
+     */
+    async addString(keyId, value) {
+        await this.sudoKeyManager.addPassword(new TextEncoder().encode(value).buffer, keyId);
+    }
+    /**
+     * Returns a string value from key manager
+     */
+    async getString(keyId) {
+        const passwordBuffer = await this.sudoKeyManager.getPassword(keyId);
+        if (!passwordBuffer) {
+            throw new sudo_common_1.KeyNotFoundError(`No key found for keyId: ${keyId}`);
+        }
+        try {
+            return new TextDecoder('utf-8', { fatal: true }).decode(passwordBuffer);
+        }
+        catch (err) {
+            const error = err;
+            throw new sudo_common_1.DecodeError(error.message);
+        }
+    }
+    /**
+     * Generates and adds a new key pair into key manager
+     * @returns Key ID
+     */
+    async generateKeyPair(keyId = uuid.v4()) {
+        await this.sudoKeyManager.generateKeyPair(keyId);
+        return keyId;
+    }
+    /**
+     * Removes a secret
+     */
+    async removeItem(id) {
+        await this.sudoKeyManager.deletePassword(id);
+    }
+    /**
+     * Signs a JWT with a signing key that is in key manager
+     * @returns JWT data
+     */
+    async signJWT(keyId, payload) {
+        const privateKeyBits = await this.sudoKeyManager.getPrivateKey(keyId);
+        if (!privateKeyBits) {
+            throw new sudo_common_1.KeyNotFoundError(`No key found for keyId: ${keyId}`);
+        }
+        const base64encoded = node_crypto_1.cryptoProvider.arrayBufferToBase64(privateKeyBits);
+        //PEM encode private key
+        const signingKey = `-----BEGIN PRIVATE KEY-----\n${base64encoded}\n-----END PRIVATE KEY-----`;
+        return jsonwebtoken_1.default.sign(payload, signingKey, {
+            algorithm: 'RS256',
+            keyid: keyId,
+        });
+    }
+    /**
+     * Exports public key in a format for use with SudoPlatform
+     */
+    async exportPublicKey(keyId) {
+        const publicKey = await this.sudoKeyManager.getPublicKey(keyId);
+        if (!publicKey) {
+            throw new Error('Invalid key ID for exportPublicKey');
+        }
+        const base64encoded = node_crypto_1.cryptoProvider.arrayBufferToBase64(publicKey.keyData);
+        return {
+            keyId,
+            algorithm: KeyManager.Constants.publicKeyAlgorithm,
+            symmetricAlgorithm: KeyManager.Constants.symmetricAlgorithm,
+            publicKey: base64encoded,
+            keyFormat: publicKey.keyFormat,
+        };
+    }
+    /**
+     * Clears all private keys from memory
+     */
+    async reset() {
+        await this.sudoKeyManager.removeAllKeys();
+    }
+    async retrieveKeyPair(keyId) {
+        const publicKey = await this.sudoKeyManager.getPublicKey(keyId);
+        if (!publicKey) {
+            throw new sudo_common_1.KeyNotFoundError(`Public key not found for keyId: ${keyId}`);
+        }
+        const privateKey = await this.sudoKeyManager.getPrivateKey(keyId);
+        if (!privateKey) {
+            throw new sudo_common_1.KeyNotFoundError(`Private key not found for keyId: ${keyId}`);
+        }
+        return {
+            publicKey: node_crypto_1.cryptoProvider.arrayBufferToBase64(publicKey.keyData),
+            publicKeyFormat: publicKey.keyFormat,
+            privateKey: node_crypto_1.cryptoProvider.arrayBufferToBase64(privateKey),
+        };
+    }
+}
+exports.KeyManager = KeyManager;
+KeyManager.Constants = {
+    publicKeyAlgorithm: 'RSA',
+    symmetricAlgorithm: 'AES/256',
+};
+//# sourceMappingURL=key-manager.js.map

package/cjs/src/core/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../../src/core/key-manager.ts"],"names":[],"mappings":";;;;AAAA,2DAKkC;AAClC,wEAA8B;AAC9B,mDAA4B;AAC5B,8DAA6D;AA0B7D;;GAEG;AACH,MAAa,UAAU;IAMrB,YAAoB,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEtD;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,KAAa;QACjD,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CACnC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EACtC,KAAK,CACN,CAAA;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa;QAClC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QACnE,IAAI,CAAC,cAAc,EAAE;YACnB,MAAM,IAAI,8BAAgB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAA;SAC/D;QACD,IAAI;YACF,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;SACxE;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,IAAI,yBAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACrC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE;QAC5C,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,EAAU;QAChC,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAClB,KAAa,EACb,OAAgC;QAEhC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QACrE,IAAI,CAAC,cAAc,EAAE;YACnB,MAAM,IAAI,8BAAgB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAA;SAC/D;QAED,MAAM,aAAa,GAAG,4BAAc,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAExE,wBAAwB;QACxB,MAAM,UAAU,GAAG,gCAAgC,aAAa,6BAA6B,CAAA;QAE7F,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE;YACnC,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC/D,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;SACtD;QACD,MAAM,aAAa,GAAG,4BAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAE3E,OAAO;YACL,KAAK;YACL,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,kBAAkB;YAClD,kBAAkB,EAAE,UAAU,CAAC,SAAS,CAAC,kBAAkB;YAC3D,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAA;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAA;IAC3C,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC/D,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,8BAAgB,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAA;SACvE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QACjE,IAAI,CAAC,UAAU,EAAE;YACf,MAAM,IAAI,8BAAgB,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAA;SACxE;QAED,OAAO;YACL,SAAS,EAAE,4BAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC;YAChE,eAAe,EAAE,SAAS,CAAC,SAAS;YACpC,UAAU,EAAE,4BAAc,CAAC,mBAAmB,CAAC,UAAyB,CAAC;SAC1E,CAAA;IACH,CAAC;;AAnHH,gCAoHC;AAnHgB,oBAAS,GAAG;IACzB,kBAAkB,EAAE,KAAK;IACzB,kBAAkB,EAAE,SAAS;CAC9B,CAAA"}

package/cjs/src/core/protected-store.d.ts

@@ -0,0 +1,5 @@
+export interface ProtectedStore {
+    put(key: string, value: ArrayBuffer): Promise<void>;
+    get(key: string): Promise<ArrayBuffer>;
+    delete(key: string): Promise<void>;
+}

package/cjs/src/core/protected-store.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=protected-store.js.map

package/cjs/src/core/protected-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-store.js","sourceRoot":"","sources":["../../../src/core/protected-store.ts"],"names":[],"mappings":""}

package/cjs/src/core/publisher.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=publisher.js.map

package/cjs/src/core/publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.js","sourceRoot":"","sources":["../../../src/core/publisher.ts"],"names":[],"mappings":""}

package/cjs/src/core/sdk-config.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIdentityServiceConfig = exports.Config = exports.FederatedSignInConfigCodec = exports.IdentityServiceConfigCodec = void 0;
+const tslib_1 = require("tslib");
+const sudo_common_1 = require("@sudoplatform/sudo-common");
+const t = tslib_1.__importStar(require("io-ts"));
+const error_1 = require("../user/error");
+// eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+exports.IdentityServiceConfigCodec = t.intersection([
+    // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+    t.type({
+        region: t.string,
+        poolId: t.string,
+        clientId: t.string,
+        identityPoolId: t.string,
+        apiUrl: t.string,
+        apiKey: t.string,
+        bucket: t.string,
+        transientBucket: t.string,
+        // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+        registrationMethods: t.array(t.string),
+    }),
+    // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+    t.partial({
+        refreshTokenLifetime: t.number,
+    }),
+], 'IdentityServiceConfig');
+// eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+exports.FederatedSignInConfigCodec = t.intersection([
+    // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+    t.type({
+        appClientId: t.string,
+        signInRedirectUri: t.string,
+        signOutRedirectUri: t.string,
+        webDomain: t.string,
+    }),
+    // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+    t.partial({
+        identityProvider: t.string,
+        refreshTokenLifetime: t.number,
+    }),
+], 'FederatedSignInConfig');
+// eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+exports.Config = t.intersection([
+    // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+    t.type({
+        identityService: exports.IdentityServiceConfigCodec,
+    }),
+    // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+    t.partial({
+        federatedSignIn: exports.FederatedSignInConfigCodec,
+    }),
+]);
+function getIdentityServiceConfig() {
+    if (!sudo_common_1.DefaultConfigurationManager.getInstance().getConfigSet('identityService')) {
+        throw new error_1.IdentityServiceConfigNotFoundError();
+    }
+    return sudo_common_1.DefaultConfigurationManager.getInstance().bindConfigSet(exports.Config, undefined);
+}
+exports.getIdentityServiceConfig = getIdentityServiceConfig;
+//# sourceMappingURL=sdk-config.js.map

package/cjs/src/core/sdk-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-config.js","sourceRoot":"","sources":["../../../src/core/sdk-config.ts"],"names":[],"mappings":";;;;AAAA,2DAAuE;AACvE,iDAA0B;AAC1B,yCAAkE;AAElE,0EAA0E;AAC7D,QAAA,0BAA0B,GAAG,CAAC,CAAC,YAAY,CACtD;IACE,0EAA0E;IAC1E,CAAC,CAAC,IAAI,CAAC;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM;QAClB,cAAc,EAAE,CAAC,CAAC,MAAM;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,MAAM;QACzB,0EAA0E;QAC1E,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;KACvC,CAAC;IACF,0EAA0E;IAC1E,CAAC,CAAC,OAAO,CAAC;QACR,oBAAoB,EAAE,CAAC,CAAC,MAAM;KAC/B,CAAC;CACH,EACD,uBAAuB,CACxB,CAAA;AAED,0EAA0E;AAC7D,QAAA,0BAA0B,GAAG,CAAC,CAAC,YAAY,CACtD;IACE,0EAA0E;IAC1E,CAAC,CAAC,IAAI,CAAC;QACL,WAAW,EAAE,CAAC,CAAC,MAAM;QACrB,iBAAiB,EAAE,CAAC,CAAC,MAAM;QAC3B,kBAAkB,EAAE,CAAC,CAAC,MAAM;QAC5B,SAAS,EAAE,CAAC,CAAC,MAAM;KACpB,CAAC;IACF,0EAA0E;IAC1E,CAAC,CAAC,OAAO,CAAC;QACR,gBAAgB,EAAE,CAAC,CAAC,MAAM;QAC1B,oBAAoB,EAAE,CAAC,CAAC,MAAM;KAC/B,CAAC;CACH,EACD,uBAAuB,CACxB,CAAA;AAED,0EAA0E;AAC7D,QAAA,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;IACnC,0EAA0E;IAC1E,CAAC,CAAC,IAAI,CAAC;QACL,eAAe,EAAE,kCAA0B;KAC5C,CAAC;IACF,0EAA0E;IAC1E,CAAC,CAAC,OAAO,CAAC;QACR,eAAe,EAAE,kCAA0B;KAC5C,CAAC;CACH,CAAC,CAAA;AAMF,SAAgB,wBAAwB;IACtC,IACE,CAAC,yCAA2B,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAC1E;QACA,MAAM,IAAI,0CAAkC,EAAE,CAAA;KAC/C;IAED,OAAO,yCAA2B,CAAC,WAAW,EAAE,CAAC,aAAa,CAC5D,cAAM,EACN,SAAS,CACV,CAAA;AACH,CAAC;AAXD,4DAWC"}

package/cjs/src/core/subscriber.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=subscriber.js.map

package/cjs/src/core/subscriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriber.js","sourceRoot":"","sources":["../../../src/core/subscriber.ts"],"names":[],"mappings":""}

package/{lib → cjs/src}/gen/graphql-types.d.ts

@@ -1,5 +1,6 @@
 import { TypedDocumentNode as DocumentNode } from '@graphql-typed-document-node/core';
 export declare type Maybe<T> = T | undefined;
+export declare type InputMaybe<T> = T | undefined;
 export declare type Exact<T extends {
     [key: string]: unknown;
 }> = {
@@ -47,7 +48,7 @@ export declare type Mutation = {
     registerFederatedId?: Maybe<FederatedId>;
 };
 export declare type MutationRegisterFederatedIdArgs = {
-    input?: Maybe<RegisterFederatedIdInput>;
+    input?: InputMaybe<RegisterFederatedIdInput>;
 };
 export declare type Query = {
     __typename?: 'Query';
@@ -67,7 +68,7 @@ export declare type DeregisterMutation = {
     deregister?: {
         __typename?: 'Deregister';
         success: boolean;
-    } | null | undefined;
+    } | undefined;
 };
 export declare type GlobalSignOutMutationVariables = Exact<{
     [key: string]: never;
@@ -77,7 +78,7 @@ export declare type GlobalSignOutMutation = {
     globalSignOut?: {
         __typename?: 'GlobalSignOut';
         success: boolean;
-    } | null | undefined;
+    } | undefined;
 };
 export declare type RegisterFederatedIdMutationVariables = Exact<{
     input: RegisterFederatedIdInput;
@@ -87,7 +88,7 @@ export declare type RegisterFederatedIdMutation = {
     registerFederatedId?: {
         __typename?: 'FederatedId';
         identityId: string;
-    } | null | undefined;
+    } | undefined;
 };
 export declare const DeregisterDocument: DocumentNode<DeregisterMutation, Exact<{
     [key: string]: never;