@sudoplatform/sudo-user 10.1.0 → 12.0.0

package/lib/client/apiClient.js

@@ -1,206 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.ApiClient = void 0;
-
-var _awsAppsync = require("aws-appsync");
-
-var _graphqlTypes = require("../gen/graphql-types");
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-/**
- * AppSync wrapper to use to invoke Identity Service APIs.
- */
-class ApiClient {
-  constructor(region, graphqlUrl, sudoUserClient, logger) {
-    _defineProperty(this, "client", void 0);
-
-    _defineProperty(this, "region", void 0);
-
-    _defineProperty(this, "graphqlUrl", void 0);
-
-    _defineProperty(this, "sudoUserClient", void 0);
-
-    _defineProperty(this, "logger", void 0);
-
-    this.region = region;
-    this.graphqlUrl = graphqlUrl;
-    this.sudoUserClient = sudoUserClient;
-    this.logger = logger;
-    this.client = new _awsAppsync.AWSAppSyncClient({
-      url: graphqlUrl,
-      region: region,
-      auth: {
-        type: _awsAppsync.AUTH_TYPE.AMAZON_COGNITO_USER_POOLS,
-        jwtToken: async () => await sudoUserClient.getLatestAuthToken()
-      },
-      disableOffline: true
-    });
-  }
-
-  async deregister() {
-    var _result$errors;
-
-    if (!(await this.sudoUserClient.isSignedIn())) {
-      throw new _sudoCommon.NotSignedInError();
-    }
-
-    let result;
-
-    try {
-      result = await this.client.mutate({
-        mutation: _graphqlTypes.DeregisterDocument,
-        fetchPolicy: 'no-cache'
-      });
-    } catch (err) {
-      var _apolloError$graphQLE;
-
-      const apolloError = err;
-      const error = (_apolloError$graphQLE = apolloError.graphQLErrors) === null || _apolloError$graphQLE === void 0 ? void 0 : _apolloError$graphQLE[0];
-
-      if (error) {
-        throw this.graphQLErrorsToClientError(error);
-      } else {
-        throw new _sudoCommon.UnknownGraphQLError(err);
-      }
-    }
-
-    const error = (_result$errors = result.errors) === null || _result$errors === void 0 ? void 0 : _result$errors[0];
-
-    if (error) {
-      throw this.graphQLErrorsToClientError(error);
-    }
-
-    if (result.data) {
-      var _result$data$deregist;
-
-      return {
-        success: (_result$data$deregist = result.data.deregister) !== null && _result$data$deregist !== void 0 && _result$data$deregist.success ? true : false
-      };
-    } else {
-      throw new _sudoCommon.FatalError('deregister did not return any result.');
-    }
-  }
-
-  async globalSignOut() {
-    var _result$errors2;
-
-    if (!(await this.sudoUserClient.isSignedIn())) {
-      throw new _sudoCommon.NotSignedInError();
-    }
-
-    let result;
-
-    try {
-      result = await this.client.mutate({
-        mutation: _graphqlTypes.GlobalSignOutDocument,
-        fetchPolicy: 'no-cache'
-      });
-    } catch (err) {
-      var _apolloError$graphQLE2;
-
-      const apolloError = err;
-      const error = (_apolloError$graphQLE2 = apolloError.graphQLErrors) === null || _apolloError$graphQLE2 === void 0 ? void 0 : _apolloError$graphQLE2[0];
-
-      if (error) {
-        throw this.graphQLErrorsToClientError(error);
-      } else {
-        throw new _sudoCommon.UnknownGraphQLError(err);
-      }
-    }
-
-    const error = (_result$errors2 = result.errors) === null || _result$errors2 === void 0 ? void 0 : _result$errors2[0];
-
-    if (error) {
-      throw this.graphQLErrorsToClientError(error);
-    }
-
-    if (result.data) {
-      var _result$data$globalSi;
-
-      return {
-        success: (_result$data$globalSi = result.data.globalSignOut) !== null && _result$data$globalSi !== void 0 && _result$data$globalSi.success ? true : false
-      };
-    } else {
-      throw new _sudoCommon.FatalError('globalSignOut did not return any result.');
-    }
-  }
-
-  async registerFederatedId(input) {
-    var _result$errors3, _result$data, _result$data$register;
-
-    let result;
-
-    try {
-      result = await this.client.mutate({
-        mutation: _graphqlTypes.RegisterFederatedIdDocument,
-        variables: {
-          input
-        },
-        fetchPolicy: 'no-cache'
-      });
-    } catch (err) {
-      var _apolloError$graphQLE3;
-
-      const apolloError = err;
-      const error = (_apolloError$graphQLE3 = apolloError.graphQLErrors) === null || _apolloError$graphQLE3 === void 0 ? void 0 : _apolloError$graphQLE3[0];
-
-      if (error) {
-        throw this.graphQLErrorsToClientError(error);
-      } else {
-        throw new _sudoCommon.UnknownGraphQLError(err);
-      }
-    }
-
-    const error = (_result$errors3 = result.errors) === null || _result$errors3 === void 0 ? void 0 : _result$errors3[0];
-
-    if (error) {
-      throw this.graphQLErrorsToClientError(error);
-    }
-
-    const identityId = (_result$data = result.data) === null || _result$data === void 0 ? void 0 : (_result$data$register = _result$data.registerFederatedId) === null || _result$data$register === void 0 ? void 0 : _result$data$register.identityId;
-
-    if (identityId) {
-      return {
-        identityId
-      };
-    } else {
-      throw new _sudoCommon.FatalError('registerFederatedId did not return expected result.');
-    }
-  }
-
-  reset() {
-    this.client.clearStore();
-    this.client = new _awsAppsync.AWSAppSyncClient({
-      url: this.graphqlUrl,
-      region: this.region,
-      auth: {
-        type: _awsAppsync.AUTH_TYPE.AMAZON_COGNITO_USER_POOLS,
-        jwtToken: async () => await this.sudoUserClient.getLatestAuthToken()
-      },
-      disableOffline: true
-    });
-  }
-
-  graphQLErrorsToClientError(error) {
-    this.logger.error('GraphQL call failed.', {
-      error
-    });
-
-    if (error.errorType === 'sudoplatform.ServiceError') {
-      return new _sudoCommon.ServiceError(error.message);
-    } else if (error.errorType === 'sudoplatform.identity.TokenValidationError') {
-      return new _sudoCommon.NotAuthorizedError();
-    } else {
-      return new _sudoCommon.UnknownGraphQLError(error);
-    }
-  }
-
-}
-
-exports.ApiClient = ApiClient;

package/lib/core/api-key-names.js

@@ -1,15 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.apiKeyNames = void 0;
-const apiKeyNames = {
-  idToken: 'idToken',
-  accessToken: 'accessToken',
-  refreshToken: 'refreshToken',
-  tokenExpiry: 'tokenExpiry',
-  refreshTokenExpiry: 'refreshTokenExpiry',
-  userId: 'LastAuthUser'
-};
-exports.apiKeyNames = apiKeyNames;

package/lib/core/auth-store.js

@@ -1,144 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.AuthenticationStore = void 0;
-
-var JWT = _interopRequireWildcard(require("jsonwebtoken"));
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-function _classPrivateFieldInitSpec(obj, privateMap, value) { _checkPrivateRedeclaration(obj, privateMap); privateMap.set(obj, value); }
-
-function _checkPrivateRedeclaration(obj, privateCollection) { if (privateCollection.has(obj)) { throw new TypeError("Cannot initialize the same private elements twice on an object"); } }
-
-function _classPrivateFieldSet(receiver, privateMap, value) { var descriptor = _classExtractFieldDescriptor(receiver, privateMap, "set"); _classApplyDescriptorSet(receiver, descriptor, value); return value; }
-
-function _classApplyDescriptorSet(receiver, descriptor, value) { if (descriptor.set) { descriptor.set.call(receiver, value); } else { if (!descriptor.writable) { throw new TypeError("attempted to set read only private field"); } descriptor.value = value; } }
-
-function _classPrivateFieldGet(receiver, privateMap) { var descriptor = _classExtractFieldDescriptor(receiver, privateMap, "get"); return _classApplyDescriptorGet(receiver, descriptor); }
-
-function _classExtractFieldDescriptor(receiver, privateMap, action) { if (!privateMap.has(receiver)) { throw new TypeError("attempted to " + action + " private field on non-instance"); } return privateMap.get(receiver); }
-
-function _classApplyDescriptorGet(receiver, descriptor) { if (descriptor.get) { return descriptor.get.call(receiver); } return descriptor.value; }
-
-var _secrets = /*#__PURE__*/new WeakMap();
-
-/**
- * Stores authentication details such as tokens and username
- */
-class AuthenticationStore {
-  constructor() {
-    _classPrivateFieldInitSpec(this, _secrets, {
-      writable: true,
-      value: {}
-    });
-
-    _defineProperty(this, "subscribers", []);
-  }
-
-  /** Adds a secret into private _secrets object */
-  async addSecret(keyId, secret) {
-    const key = keyId.substr(keyId.lastIndexOf('.') + 1);
-    _classPrivateFieldGet(this, _secrets)[key] = secret;
-  }
-  /**
-   * Adds a string value into authentication store
-   */
-
-
-  async setItem(keyId, value) {
-    const key = keyId.substr(keyId.lastIndexOf('.') + 1);
-
-    if (key === 'idToken') {
-      // Store the token expiry
-      const decoded = JWT.decode(value, {
-        complete: true
-      });
-
-      if (decoded) {
-        const tokenExpiry = decoded.payload['exp'];
-        await this.addSecret('tokenExpiry', {
-          type: 'string',
-          value: tokenExpiry
-        });
-      }
-    }
-
-    await this.addSecret(key, {
-      type: 'string',
-      value
-    });
-    await this.notifySubscribers(key);
-  }
-  /**
-   * Returns a string value from authentication store
-   */
-
-
-  getItem(keyId) {
-    const key = keyId.substr(keyId.lastIndexOf('.') + 1);
-
-    const secret = _classPrivateFieldGet(this, _secrets)[key];
-
-    return (secret === null || secret === void 0 ? void 0 : secret.type) === 'string' ? secret.value : undefined;
-  }
-  /**
-   * Removes a secret
-   */
-
-
-  removeItem(keyId) {
-    const key = keyId.substr(keyId.lastIndexOf('.') + 1);
-    delete _classPrivateFieldGet(this, _secrets)[key];
-  }
-  /**
-   * Clears all secrets
-   */
-
-
-  reset() {
-    _classPrivateFieldSet(this, _secrets, {});
-  }
-  /**
-   * Register a subscriber to be notified when items are added
-   *
-   * @param subscriber a subscriber to be notified when items are added
-   */
-
-
-  async subscribe(subscriber) {
-    this.subscribers.push(subscriber);
-  }
-  /**
-   * Remove a subscriber from the list of subscribers
-   *
-   * @param subscriber the subscriber to be removed
-   */
-
-
-  async unsubscribe(subscriber) {
-    const index = this.subscribers.indexOf(subscriber);
-    this.subscribers.splice(index, 1);
-  }
-  /**
-   * Notify all subscribers that a change event was triggered for a specific item
-   *
-   * @param itemName the name of the item that changed
-   */
-
-
-  async notifySubscribers(itemName) {
-    for (const subscriber of this.subscribers) {
-      subscriber.update(itemName);
-    }
-  }
-
-}
-
-exports.AuthenticationStore = AuthenticationStore;

package/lib/core/crypto.js

@@ -1,5 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});

package/lib/core/key-manager.js

@@ -1,158 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.KeyManager = void 0;
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-var _jsonwebtoken = _interopRequireDefault(require("jsonwebtoken"));
-
-var uuid = _interopRequireWildcard(require("uuid"));
-
-var _nodeCrypto = require("../runtimes/node/node-crypto");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-/**
- * Key Manager
- */
-class KeyManager {
-  constructor(sudoKeyManager) {
-    this.sudoKeyManager = sudoKeyManager;
-  }
-  /**
-   * Adds a string value into key manager
-   */
-
-
-  async addString(keyId, value) {
-    await this.sudoKeyManager.addPassword(new TextEncoder().encode(value).buffer, keyId);
-  }
-  /**
-   * Returns a string value from key manager
-   */
-
-
-  async getString(keyId) {
-    const passwordBuffer = await this.sudoKeyManager.getPassword(keyId);
-
-    if (!passwordBuffer) {
-      throw new _sudoCommon.KeyNotFoundError(`No key found for keyId: ${keyId}`);
-    }
-
-    try {
-      return new TextDecoder('utf-8', {
-        fatal: true
-      }).decode(passwordBuffer);
-    } catch (err) {
-      const error = err;
-      throw new _sudoCommon.DecodeError(error.message);
-    }
-  }
-  /**
-   * Generates and adds a new key pair into key manager
-   * @returns Key ID
-   */
-
-
-  async generateKeyPair(keyId = uuid.v4()) {
-    await this.sudoKeyManager.generateKeyPair(keyId);
-    return keyId;
-  }
-  /**
-   * Removes a secret
-   */
-
-
-  async removeItem(id) {
-    await this.sudoKeyManager.deletePassword(id);
-  }
-  /**
-   * Signs a JWT with a signing key that is in key manager
-   * @returns JWT data
-   */
-
-
-  async signJWT(keyId, payload) {
-    const privateKeyBits = await this.sudoKeyManager.getPrivateKey(keyId);
-
-    if (!privateKeyBits) {
-      throw new _sudoCommon.KeyNotFoundError(`No key found for keyId: ${keyId}`);
-    }
-
-    const base64encoded = _nodeCrypto.cryptoProvider.arrayBufferToBase64(privateKeyBits); //PEM encode private key
-
-
-    const signingKey = `-----BEGIN PRIVATE KEY-----\n${base64encoded}\n-----END PRIVATE KEY-----`;
-    return _jsonwebtoken.default.sign(payload, signingKey, {
-      algorithm: 'RS256',
-      keyid: keyId
-    });
-  }
-  /**
-   * Exports public key in a format for use with SudoPlatform
-   */
-
-
-  async exportPublicKey(keyId) {
-    const publicKey = await this.sudoKeyManager.getPublicKey(keyId);
-
-    if (!publicKey) {
-      throw new Error('Invalid key ID for exportPublicKey');
-    }
-
-    const base64encoded = _nodeCrypto.cryptoProvider.arrayBufferToBase64(publicKey.keyData);
-
-    return {
-      keyId,
-      algorithm: KeyManager.Constants.publicKeyAlgorithm,
-      symmetricAlgorithm: KeyManager.Constants.symmetricAlgorithm,
-      publicKey: base64encoded,
-      keyFormat: publicKey.keyFormat
-    };
-  }
-  /**
-   * Clears all private keys from memory
-   */
-
-
-  async reset() {
-    await this.sudoKeyManager.removeAllKeys();
-  }
-
-  async retrieveKeyPair(keyId) {
-    const publicKey = await this.sudoKeyManager.getPublicKey(keyId);
-
-    if (!publicKey) {
-      throw new _sudoCommon.KeyNotFoundError(`Public key not found for keyId: ${keyId}`);
-    }
-
-    const privateKey = await this.sudoKeyManager.getPrivateKey(keyId);
-
-    if (!privateKey) {
-      throw new _sudoCommon.KeyNotFoundError(`Private key not found for keyId: ${keyId}`);
-    }
-
-    return {
-      publicKey: _nodeCrypto.cryptoProvider.arrayBufferToBase64(publicKey.keyData),
-      publicKeyFormat: publicKey.keyFormat,
-      privateKey: _nodeCrypto.cryptoProvider.arrayBufferToBase64(privateKey)
-    };
-  }
-
-}
-
-exports.KeyManager = KeyManager;
-
-_defineProperty(KeyManager, "Constants", {
-  publicKeyAlgorithm: 'RSA',
-  symmetricAlgorithm: 'AES/256'
-});

package/lib/core/protected-store.js

@@ -1,5 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});

package/lib/core/publisher.js

@@ -1,5 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});

package/lib/core/sdk-config.js

@@ -1,56 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.IdentityServiceConfigCodec = exports.FederatedSignInConfigCodec = exports.Config = void 0;
-exports.getIdentityServiceConfig = getIdentityServiceConfig;
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-var t = _interopRequireWildcard(require("io-ts"));
-
-var _error = require("../user/error");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-const IdentityServiceConfigCodec = t.intersection([t.type({
-  region: t.string,
-  poolId: t.string,
-  clientId: t.string,
-  identityPoolId: t.string,
-  apiUrl: t.string,
-  apiKey: t.string,
-  bucket: t.string,
-  transientBucket: t.string,
-  registrationMethods: t.array(t.string)
-}), t.partial({
-  refreshTokenLifetime: t.number
-})], 'IdentityServiceConfig');
-exports.IdentityServiceConfigCodec = IdentityServiceConfigCodec;
-const FederatedSignInConfigCodec = t.intersection([t.type({
-  appClientId: t.string,
-  signInRedirectUri: t.string,
-  signOutRedirectUri: t.string,
-  webDomain: t.string
-}), t.partial({
-  identityProvider: t.string,
-  refreshTokenLifetime: t.number
-})], 'FederatedSignInConfig');
-exports.FederatedSignInConfigCodec = FederatedSignInConfigCodec;
-const Config = t.intersection([t.type({
-  identityService: IdentityServiceConfigCodec
-}), t.partial({
-  federatedSignIn: FederatedSignInConfigCodec
-})]);
-exports.Config = Config;
-
-function getIdentityServiceConfig() {
-  if (!_sudoCommon.DefaultConfigurationManager.getInstance().getConfigSet('identityService')) {
-    throw new _error.IdentityServiceConfigNotFoundError();
-  }
-
-  return _sudoCommon.DefaultConfigurationManager.getInstance().bindConfigSet(Config, undefined);
-}

package/lib/core/subscriber.js

@@ -1,5 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});