@sudoplatform/sudo-user 11.0.0 → 12.0.1

package/cjs/client/apiClient.d.ts

@@ -0,0 +1,25 @@
+import { RegisterFederatedIdInput } from '../gen/graphql-types';
+import { Logger } from '@sudoplatform/sudo-common';
+import { SudoUserClient } from '../user/user-client-interface';
+/**
+ * AppSync wrapper to use to invoke Identity Service APIs.
+ */
+export declare class ApiClient {
+    private client;
+    private region;
+    private graphqlUrl;
+    private sudoUserClient;
+    private logger;
+    constructor(region: string, graphqlUrl: string, sudoUserClient: SudoUserClient, logger: Logger);
+    deregister(): Promise<{
+        success: boolean;
+    }>;
+    globalSignOut(): Promise<{
+        success: boolean;
+    }>;
+    registerFederatedId(input: RegisterFederatedIdInput): Promise<{
+        identityId: string;
+    }>;
+    reset(): void;
+    private graphQLErrorsToClientError;
+}

package/cjs/client/apiClient.js

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiClient = void 0;
+const aws_appsync_1 = require("aws-appsync");
+const graphql_types_1 = require("../gen/graphql-types");
+const sudo_common_1 = require("@sudoplatform/sudo-common");
+/**
+ * AppSync wrapper to use to invoke Identity Service APIs.
+ */
+class ApiClient {
+    constructor(region, graphqlUrl, sudoUserClient, logger) {
+        this.region = region;
+        this.graphqlUrl = graphqlUrl;
+        this.sudoUserClient = sudoUserClient;
+        this.logger = logger;
+        this.client = new aws_appsync_1.AWSAppSyncClient({
+            url: graphqlUrl,
+            region: region,
+            auth: {
+                type: aws_appsync_1.AUTH_TYPE.AMAZON_COGNITO_USER_POOLS,
+                jwtToken: async () => await sudoUserClient.getLatestAuthToken(),
+            },
+            disableOffline: true,
+        });
+    }
+    async deregister() {
+        if (!(await this.sudoUserClient.isSignedIn())) {
+            throw new sudo_common_1.NotSignedInError();
+        }
+        let result;
+        try {
+            result = await this.client.mutate({
+                mutation: graphql_types_1.DeregisterDocument,
+                fetchPolicy: 'no-cache',
+            });
+        }
+        catch (err) {
+            const apolloError = err;
+            const error = apolloError.graphQLErrors?.[0];
+            if (error) {
+                throw this.graphQLErrorsToClientError(error);
+            }
+            else {
+                throw new sudo_common_1.UnknownGraphQLError(err);
+            }
+        }
+        const error = result.errors?.[0];
+        if (error) {
+            throw this.graphQLErrorsToClientError(error);
+        }
+        if (result.data) {
+            return { success: result.data.deregister?.success ? true : false };
+        }
+        else {
+            throw new sudo_common_1.FatalError('deregister did not return any result.');
+        }
+    }
+    async globalSignOut() {
+        if (!(await this.sudoUserClient.isSignedIn())) {
+            throw new sudo_common_1.NotSignedInError();
+        }
+        let result;
+        try {
+            result = await this.client.mutate({
+                mutation: graphql_types_1.GlobalSignOutDocument,
+                fetchPolicy: 'no-cache',
+            });
+        }
+        catch (err) {
+            const apolloError = err;
+            const error = apolloError.graphQLErrors?.[0];
+            if (error) {
+                throw this.graphQLErrorsToClientError(error);
+            }
+            else {
+                throw new sudo_common_1.UnknownGraphQLError(err);
+            }
+        }
+        const error = result.errors?.[0];
+        if (error) {
+            throw this.graphQLErrorsToClientError(error);
+        }
+        if (result.data) {
+            return { success: result.data.globalSignOut?.success ? true : false };
+        }
+        else {
+            throw new sudo_common_1.FatalError('globalSignOut did not return any result.');
+        }
+    }
+    async registerFederatedId(input) {
+        let result;
+        try {
+            result = await this.client.mutate({
+                mutation: graphql_types_1.RegisterFederatedIdDocument,
+                variables: { input },
+                fetchPolicy: 'no-cache',
+            });
+        }
+        catch (err) {
+            const apolloError = err;
+            const error = apolloError.graphQLErrors?.[0];
+            if (error) {
+                throw this.graphQLErrorsToClientError(error);
+            }
+            else {
+                throw new sudo_common_1.UnknownGraphQLError(err);
+            }
+        }
+        const error = result.errors?.[0];
+        if (error) {
+            throw this.graphQLErrorsToClientError(error);
+        }
+        const identityId = result.data?.registerFederatedId?.identityId;
+        if (identityId) {
+            return {
+                identityId,
+            };
+        }
+        else {
+            throw new sudo_common_1.FatalError('registerFederatedId did not return expected result.');
+        }
+    }
+    reset() {
+        this.client.clearStore();
+        this.client = new aws_appsync_1.AWSAppSyncClient({
+            url: this.graphqlUrl,
+            region: this.region,
+            auth: {
+                type: aws_appsync_1.AUTH_TYPE.AMAZON_COGNITO_USER_POOLS,
+                jwtToken: async () => await this.sudoUserClient.getLatestAuthToken(),
+            },
+            disableOffline: true,
+        });
+    }
+    graphQLErrorsToClientError(error) {
+        this.logger.error('GraphQL call failed.', { error });
+        if (error.errorType === 'sudoplatform.ServiceError') {
+            return new sudo_common_1.ServiceError(error.message);
+        }
+        else if (error.errorType === 'sudoplatform.identity.TokenValidationError') {
+            return new sudo_common_1.NotAuthorizedError();
+        }
+        else {
+            return new sudo_common_1.UnknownGraphQLError(error);
+        }
+    }
+}
+exports.ApiClient = ApiClient;
+//# sourceMappingURL=apiClient.js.map

package/cjs/client/apiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.js","sourceRoot":"","sources":["../../src/client/apiClient.ts"],"names":[],"mappings":";;;AACA,6CAAyD;AACzD,wDAQ6B;AAC7B,2DAQkC;AAIlC;;GAEG;AACH,MAAa,SAAS;IAOpB,YACE,MAAc,EACd,UAAkB,EAClB,cAA8B,EAC9B,MAAc;QAEd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,IAAI,CAAC,MAAM,GAAG,IAAI,8BAAgB,CAAC;YACjC,GAAG,EAAE,UAAU;YACf,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,uBAAS,CAAC,yBAAyB;gBACzC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,cAAc,CAAC,kBAAkB,EAAE;aAChE;YACD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE;YAC7C,MAAM,IAAI,8BAAgB,EAAE,CAAA;SAC7B;QAED,IAAI,MAAM,CAAA;QACV,IAAI;YACF,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAqB;gBACpD,QAAQ,EAAE,kCAAkB;gBAC5B,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,WAAW,GAAG,GAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;aAC7C;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,CAAA;aACnC;SACF;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE;YACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;SAC7C;QAED,IAAI,MAAM,CAAC,IAAI,EAAE;YACf,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;SACnE;aAAM;YACL,MAAM,IAAI,wBAAU,CAAC,uCAAuC,CAAC,CAAA;SAC9D;IACH,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE;YAC7C,MAAM,IAAI,8BAAgB,EAAE,CAAA;SAC7B;QAED,IAAI,MAAM,CAAA;QACV,IAAI;YACF,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAwB;gBACvD,QAAQ,EAAE,qCAAqB;gBAC/B,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,WAAW,GAAG,GAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;aAC7C;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,CAAA;aACnC;SACF;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE;YACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;SAC7C;QAED,IAAI,MAAM,CAAC,IAAI,EAAE;YACf,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;SACtE;aAAM;YACL,MAAM,IAAI,wBAAU,CAAC,0CAA0C,CAAC,CAAA;SACjE;IACH,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAC9B,KAA+B;QAE/B,IAAI,MAAM,CAAA;QACV,IAAI;YACF,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAA8B;gBAC7D,QAAQ,EAAE,2CAA2B;gBACrC,SAAS,EAAE,EAAE,KAAK,EAAE;gBACpB,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,WAAW,GAAG,GAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;aAC7C;iBAAM;gBACL,MAAM,IAAI,iCAAmB,CAAC,GAAG,CAAC,CAAA;aACnC;SACF;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,KAAK,EAAE;YACT,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAA;SAC7C;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAA;QAC/D,IAAI,UAAU,EAAE;YACd,OAAO;gBACL,UAAU;aACX,CAAA;SACF;aAAM;YACL,MAAM,IAAI,wBAAU,CAClB,qDAAqD,CACtD,CAAA;SACF;IACH,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,8BAAgB,CAAC;YACjC,GAAG,EAAE,IAAI,CAAC,UAAU;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE;gBACJ,IAAI,EAAE,uBAAS,CAAC,yBAAyB;gBACzC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;aACrE;YACD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAA;IACJ,CAAC;IAEO,0BAA0B,CAAC,KAAmB;QACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAEpD,IAAI,KAAK,CAAC,SAAS,KAAK,2BAA2B,EAAE;YACnD,OAAO,IAAI,0BAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACvC;aAAM,IACL,KAAK,CAAC,SAAS,KAAK,4CAA4C,EAChE;YACA,OAAO,IAAI,gCAAkB,EAAE,CAAA;SAChC;aAAM;YACL,OAAO,IAAI,iCAAmB,CAAC,KAAK,CAAC,CAAA;SACtC;IACH,CAAC;CACF;AA9JD,8BA8JC"}

package/cjs/core/api-key-names.d.ts

@@ -0,0 +1,8 @@
+export declare const apiKeyNames: {
+    idToken: string;
+    accessToken: string;
+    refreshToken: string;
+    tokenExpiry: string;
+    refreshTokenExpiry: string;
+    userId: string;
+};

package/cjs/core/api-key-names.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiKeyNames = void 0;
+exports.apiKeyNames = {
+    idToken: 'idToken',
+    accessToken: 'accessToken',
+    refreshToken: 'refreshToken',
+    tokenExpiry: 'tokenExpiry',
+    refreshTokenExpiry: 'refreshTokenExpiry',
+    userId: 'LastAuthUser',
+};
+//# sourceMappingURL=api-key-names.js.map

package/cjs/core/api-key-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-names.js","sourceRoot":"","sources":["../../src/core/api-key-names.ts"],"names":[],"mappings":";;;AAAa,QAAA,WAAW,GAAG;IACzB,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,kBAAkB,EAAE,oBAAoB;IACxC,MAAM,EAAE,cAAc;CACvB,CAAA"}

package/cjs/core/auth-store.d.ts

@@ -0,0 +1,51 @@
+import { Publisher } from './publisher';
+import { Subscriber } from './subscriber';
+export interface Store {
+    setItem(keyId: string, value: string): Promise<void>;
+    getItem(keyId: string): string | undefined;
+    removeItem(keyId: string): void;
+    reset(): void;
+}
+/**
+ * Stores authentication details such as tokens and username
+ */
+export declare class AuthenticationStore implements Store, Publisher {
+    #private;
+    subscribers: Subscriber[];
+    /** Adds a secret into private _secrets object */
+    private addSecret;
+    /**
+     * Adds a string value into authentication store
+     */
+    setItem(keyId: string, value: string): Promise<void>;
+    /**
+     * Returns a string value from authentication store
+     */
+    getItem(keyId: string): string | undefined;
+    /**
+     * Removes a secret
+     */
+    removeItem(keyId: string): void;
+    /**
+     * Clears all secrets
+     */
+    reset(): void;
+    /**
+     * Register a subscriber to be notified when items are added
+     *
+     * @param subscriber a subscriber to be notified when items are added
+     */
+    subscribe(subscriber: Subscriber): Promise<void>;
+    /**
+     * Remove a subscriber from the list of subscribers
+     *
+     * @param subscriber the subscriber to be removed
+     */
+    unsubscribe(subscriber: Subscriber): Promise<void>;
+    /**
+     * Notify all subscribers that a change event was triggered for a specific item
+     *
+     * @param itemName the name of the item that changed
+     */
+    notifySubscribers(itemName: string): Promise<void>;
+}

package/cjs/core/auth-store.js

@@ -0,0 +1,92 @@
+"use strict";
+var _AuthenticationStore_secrets;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationStore = void 0;
+const tslib_1 = require("tslib");
+const JWT = tslib_1.__importStar(require("jsonwebtoken"));
+/**
+ * Stores authentication details such as tokens and username
+ */
+class AuthenticationStore {
+    constructor() {
+        /** Do not expose these directly */
+        // eslint-disable-next-line tree-shaking/no-side-effects-in-initialization
+        _AuthenticationStore_secrets.set(this, {});
+        this.subscribers = [];
+    }
+    /** Adds a secret into private _secrets object */
+    async addSecret(keyId, secret) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        tslib_1.__classPrivateFieldGet(this, _AuthenticationStore_secrets, "f")[key] = secret;
+    }
+    /**
+     * Adds a string value into authentication store
+     */
+    async setItem(keyId, value) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        if (key === 'idToken') {
+            // Store the token expiry
+            const decoded = JWT.decode(value, { complete: true });
+            if (decoded) {
+                const tokenExpiry = decoded.payload['exp'];
+                await this.addSecret('tokenExpiry', {
+                    type: 'string',
+                    value: tokenExpiry,
+                });
+            }
+        }
+        await this.addSecret(key, { type: 'string', value });
+        await this.notifySubscribers(key);
+    }
+    /**
+     * Returns a string value from authentication store
+     */
+    getItem(keyId) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        const secret = tslib_1.__classPrivateFieldGet(this, _AuthenticationStore_secrets, "f")[key];
+        return secret?.type === 'string' ? secret.value : undefined;
+    }
+    /**
+     * Removes a secret
+     */
+    removeItem(keyId) {
+        const key = keyId.substr(keyId.lastIndexOf('.') + 1);
+        delete tslib_1.__classPrivateFieldGet(this, _AuthenticationStore_secrets, "f")[key];
+    }
+    /**
+     * Clears all secrets
+     */
+    reset() {
+        tslib_1.__classPrivateFieldSet(this, _AuthenticationStore_secrets, {}, "f");
+    }
+    /**
+     * Register a subscriber to be notified when items are added
+     *
+     * @param subscriber a subscriber to be notified when items are added
+     */
+    async subscribe(subscriber) {
+        this.subscribers.push(subscriber);
+    }
+    /**
+     * Remove a subscriber from the list of subscribers
+     *
+     * @param subscriber the subscriber to be removed
+     */
+    async unsubscribe(subscriber) {
+        const index = this.subscribers.indexOf(subscriber);
+        this.subscribers.splice(index, 1);
+    }
+    /**
+     * Notify all subscribers that a change event was triggered for a specific item
+     *
+     * @param itemName the name of the item that changed
+     */
+    async notifySubscribers(itemName) {
+        for (const subscriber of this.subscribers) {
+            subscriber.update(itemName);
+        }
+    }
+}
+exports.AuthenticationStore = AuthenticationStore;
+_AuthenticationStore_secrets = new WeakMap();
+//# sourceMappingURL=auth-store.js.map

package/cjs/core/auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../src/core/auth-store.ts"],"names":[],"mappings":";;;;;AAEA,0DAAmC;AAcnC;;GAEG;AACH,MAAa,mBAAmB;IAAhC;QACE,mCAAmC;QACnC,0EAA0E;QAC1E,uCAAmC,EAAE,EAAA;QACrC,gBAAW,GAAiB,EAAE,CAAA;IAiFhC,CAAC;IA/EC,iDAAiD;IACzC,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,+BAAA,IAAI,oCAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;IAC7B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAAa;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,IAAI,GAAG,KAAK,SAAS,EAAE;YACrB,yBAAyB;YACzB,MAAM,OAAO,GAAQ,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1D,IAAI,OAAO,EAAE;gBACX,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC1C,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;oBAClC,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAA;aACH;SACF;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,KAAa;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,+BAAA,IAAI,oCAAS,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC;IAED;;OAEG;IACI,UAAU,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,OAAO,+BAAA,IAAI,oCAAS,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED;;OAEG;IACI,KAAK;QACV,+BAAA,IAAI,gCAAY,EAAE,MAAA,CAAA;IACpB,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,SAAS,CAAC,UAAsB;QAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,WAAW,CAAC,UAAsB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE;YACzC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;SAC5B;IACH,CAAC;CACF;AArFD,kDAqFC"}

package/cjs/core/crypto.d.ts

@@ -0,0 +1,3 @@
+export interface CryptoProvider {
+    arrayBufferToBase64(buffer: ArrayBuffer): string;
+}

package/cjs/core/crypto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=crypto.js.map

package/cjs/core/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/core/crypto.ts"],"names":[],"mappings":""}

package/cjs/core/key-manager.d.ts

@@ -0,0 +1,31 @@
+import { PublicKeyFormat, SudoKeyManager } from '@sudoplatform/sudo-common';
+export interface PublicKey {
+    keyId: string;
+    algorithm: string;
+    symmetricAlgorithm: string;
+    publicKey: string;
+    keyFormat: PublicKeyFormat;
+}
+export interface KeyPair {
+    publicKey: unknown;
+    publicKeyFormat: PublicKeyFormat;
+    privateKey: unknown;
+}
+export interface KeyManager {
+    addString(keyId: string, value: string): Promise<void>;
+    getString(keyId: string): Promise<string | undefined>;
+    generateKeyPair(keyId?: string): Promise<string>;
+    exportPublicKey(keyId: string): Promise<PublicKey>;
+    signJWT(keyId: string, payload: Record<string, unknown>): Promise<string>;
+    reset(): Promise<void>;
+    removeItem(keyId: string): Promise<void>;
+}
+/**
+ * Key Manager
+ */
+export declare class KeyManager implements KeyManager {
+    private sudoKeyManager;
+    private static Constants;
+    constructor(sudoKeyManager: SudoKeyManager);
+    retrieveKeyPair(keyId: string): Promise<KeyPair>;
+}

package/cjs/core/key-manager.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyManager = void 0;
+const tslib_1 = require("tslib");
+const sudo_common_1 = require("@sudoplatform/sudo-common");
+const jsonwebtoken_1 = tslib_1.__importDefault(require("jsonwebtoken"));
+const uuid = tslib_1.__importStar(require("uuid"));
+const node_crypto_1 = require("../runtimes/node/node-crypto");
+/**
+ * Key Manager
+ */
+class KeyManager {
+    constructor(sudoKeyManager) {
+        this.sudoKeyManager = sudoKeyManager;
+    }
+    /**
+     * Adds a string value into key manager
+     */
+    async addString(keyId, value) {
+        await this.sudoKeyManager.addPassword(new TextEncoder().encode(value).buffer, keyId);
+    }
+    /**
+     * Returns a string value from key manager
+     */
+    async getString(keyId) {
+        const passwordBuffer = await this.sudoKeyManager.getPassword(keyId);
+        if (!passwordBuffer) {
+            throw new sudo_common_1.KeyNotFoundError(`No key found for keyId: ${keyId}`);
+        }
+        try {
+            return new TextDecoder('utf-8', { fatal: true }).decode(passwordBuffer);
+        }
+        catch (err) {
+            const error = err;
+            throw new sudo_common_1.DecodeError(error.message);
+        }
+    }
+    /**
+     * Generates and adds a new key pair into key manager
+     * @returns Key ID
+     */
+    async generateKeyPair(keyId = uuid.v4()) {
+        await this.sudoKeyManager.generateKeyPair(keyId);
+        return keyId;
+    }
+    /**
+     * Removes a secret
+     */
+    async removeItem(id) {
+        await this.sudoKeyManager.deletePassword(id);
+    }
+    /**
+     * Signs a JWT with a signing key that is in key manager
+     * @returns JWT data
+     */
+    async signJWT(keyId, payload) {
+        const privateKeyBits = await this.sudoKeyManager.getPrivateKey(keyId);
+        if (!privateKeyBits) {
+            throw new sudo_common_1.KeyNotFoundError(`No key found for keyId: ${keyId}`);
+        }
+        const base64encoded = node_crypto_1.cryptoProvider.arrayBufferToBase64(privateKeyBits);
+        //PEM encode private key
+        const signingKey = `-----BEGIN PRIVATE KEY-----\n${base64encoded}\n-----END PRIVATE KEY-----`;
+        return jsonwebtoken_1.default.sign(payload, signingKey, {
+            algorithm: 'RS256',
+            keyid: keyId,
+        });
+    }
+    /**
+     * Exports public key in a format for use with SudoPlatform
+     */
+    async exportPublicKey(keyId) {
+        const publicKey = await this.sudoKeyManager.getPublicKey(keyId);
+        if (!publicKey) {
+            throw new Error('Invalid key ID for exportPublicKey');
+        }
+        const base64encoded = node_crypto_1.cryptoProvider.arrayBufferToBase64(publicKey.keyData);
+        return {
+            keyId,
+            algorithm: KeyManager.Constants.publicKeyAlgorithm,
+            symmetricAlgorithm: KeyManager.Constants.symmetricAlgorithm,
+            publicKey: base64encoded,
+            keyFormat: publicKey.keyFormat,
+        };
+    }
+    /**
+     * Clears all private keys from memory
+     */
+    async reset() {
+        await this.sudoKeyManager.removeAllKeys();
+    }
+    async retrieveKeyPair(keyId) {
+        const publicKey = await this.sudoKeyManager.getPublicKey(keyId);
+        if (!publicKey) {
+            throw new sudo_common_1.KeyNotFoundError(`Public key not found for keyId: ${keyId}`);
+        }
+        const privateKey = await this.sudoKeyManager.getPrivateKey(keyId);
+        if (!privateKey) {
+            throw new sudo_common_1.KeyNotFoundError(`Private key not found for keyId: ${keyId}`);
+        }
+        return {
+            publicKey: node_crypto_1.cryptoProvider.arrayBufferToBase64(publicKey.keyData),
+            publicKeyFormat: publicKey.keyFormat,
+            privateKey: node_crypto_1.cryptoProvider.arrayBufferToBase64(privateKey),
+        };
+    }
+}
+exports.KeyManager = KeyManager;
+KeyManager.Constants = {
+    publicKeyAlgorithm: 'RSA',
+    symmetricAlgorithm: 'AES/256',
+};
+//# sourceMappingURL=key-manager.js.map

package/cjs/core/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../src/core/key-manager.ts"],"names":[],"mappings":";;;;AAAA,2DAKkC;AAClC,wEAA8B;AAC9B,mDAA4B;AAC5B,8DAA6D;AA0B7D;;GAEG;AACH,MAAa,UAAU;IAMrB,YAAoB,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEtD;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,KAAa;QACjD,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CACnC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EACtC,KAAK,CACN,CAAA;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa;QAClC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QACnE,IAAI,CAAC,cAAc,EAAE;YACnB,MAAM,IAAI,8BAAgB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAA;SAC/D;QACD,IAAI;YACF,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;SACxE;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,GAAY,CAAA;YAC1B,MAAM,IAAI,yBAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACrC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE;QAC5C,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAC,EAAU;QAChC,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAClB,KAAa,EACb,OAAgC;QAEhC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QACrE,IAAI,CAAC,cAAc,EAAE;YACnB,MAAM,IAAI,8BAAgB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAA;SAC/D;QAED,MAAM,aAAa,GAAG,4BAAc,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAExE,wBAAwB;QACxB,MAAM,UAAU,GAAG,gCAAgC,aAAa,6BAA6B,CAAA;QAE7F,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE;YACnC,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC/D,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;SACtD;QACD,MAAM,aAAa,GAAG,4BAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAE3E,OAAO;YACL,KAAK;YACL,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,kBAAkB;YAClD,kBAAkB,EAAE,UAAU,CAAC,SAAS,CAAC,kBAAkB;YAC3D,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAA;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAA;IAC3C,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,KAAa;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC/D,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,8BAAgB,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAA;SACvE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QACjE,IAAI,CAAC,UAAU,EAAE;YACf,MAAM,IAAI,8BAAgB,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAA;SACxE;QAED,OAAO;YACL,SAAS,EAAE,4BAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC;YAChE,eAAe,EAAE,SAAS,CAAC,SAAS;YACpC,UAAU,EAAE,4BAAc,CAAC,mBAAmB,CAAC,UAAyB,CAAC;SAC1E,CAAA;IACH,CAAC;;AAnHH,gCAoHC;AAnHgB,oBAAS,GAAG;IACzB,kBAAkB,EAAE,KAAK;IACzB,kBAAkB,EAAE,SAAS;CAC9B,CAAA"}

package/cjs/core/protected-store.d.ts

@@ -0,0 +1,5 @@
+export interface ProtectedStore {
+    put(key: string, value: ArrayBuffer): Promise<void>;
+    get(key: string): Promise<ArrayBuffer>;
+    delete(key: string): Promise<void>;
+}

package/cjs/core/protected-store.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=protected-store.js.map

package/cjs/core/protected-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-store.js","sourceRoot":"","sources":["../../src/core/protected-store.ts"],"names":[],"mappings":""}

package/cjs/core/publisher.d.ts

@@ -0,0 +1,6 @@
+import { Subscriber } from './subscriber';
+export interface Publisher {
+    subscribe(subscriber: Subscriber): void;
+    unsubscribe(subscriber: Subscriber): void;
+    notifySubscribers(itemName: string): void;
+}

package/cjs/core/publisher.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=publisher.js.map

package/cjs/core/publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.js","sourceRoot":"","sources":["../../src/core/publisher.ts"],"names":[],"mappings":""}

package/cjs/core/sdk-config.d.ts

@@ -0,0 +1,52 @@
+import * as t from 'io-ts';
+export declare const IdentityServiceConfigCodec: t.IntersectionC<[t.TypeC<{
+    region: t.StringC;
+    poolId: t.StringC;
+    clientId: t.StringC;
+    identityPoolId: t.StringC;
+    apiUrl: t.StringC;
+    apiKey: t.StringC;
+    bucket: t.StringC;
+    transientBucket: t.StringC;
+    registrationMethods: t.ArrayC<t.StringC>;
+}>, t.PartialC<{
+    refreshTokenLifetime: t.NumberC;
+}>]>;
+export declare const FederatedSignInConfigCodec: t.IntersectionC<[t.TypeC<{
+    appClientId: t.StringC;
+    signInRedirectUri: t.StringC;
+    signOutRedirectUri: t.StringC;
+    webDomain: t.StringC;
+}>, t.PartialC<{
+    identityProvider: t.StringC;
+    refreshTokenLifetime: t.NumberC;
+}>]>;
+export declare const Config: t.IntersectionC<[t.TypeC<{
+    identityService: t.IntersectionC<[t.TypeC<{
+        region: t.StringC;
+        poolId: t.StringC;
+        clientId: t.StringC;
+        identityPoolId: t.StringC;
+        apiUrl: t.StringC;
+        apiKey: t.StringC;
+        bucket: t.StringC;
+        transientBucket: t.StringC;
+        registrationMethods: t.ArrayC<t.StringC>;
+    }>, t.PartialC<{
+        refreshTokenLifetime: t.NumberC;
+    }>]>;
+}>, t.PartialC<{
+    federatedSignIn: t.IntersectionC<[t.TypeC<{
+        appClientId: t.StringC;
+        signInRedirectUri: t.StringC;
+        signOutRedirectUri: t.StringC;
+        webDomain: t.StringC;
+    }>, t.PartialC<{
+        identityProvider: t.StringC;
+        refreshTokenLifetime: t.NumberC;
+    }>]>;
+}>]>;
+export declare type Config = t.TypeOf<typeof Config>;
+export declare type IdentityServiceConfig = t.TypeOf<typeof IdentityServiceConfigCodec>;
+export declare type FederatedSignInConfig = t.TypeOf<typeof FederatedSignInConfigCodec>;
+export declare function getIdentityServiceConfig(): Config;