@sudoplatform/sudo-user 11.1.0 → 12.0.2

package/lib/user/user-client.js

@@ -1,504 +1,420 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.DefaultSudoUserClient = void 0;
-
-var _sudoCommon = require("@sudoplatform/sudo-common");
-
-var _sudoWebCryptoProvider = require("@sudoplatform/sudo-web-crypto-provider");
-
-var JWT = _interopRequireWildcard(require("jsonwebtoken"));
-
-var _uuid = require("uuid");
-
-var _apiClient = require("../client/apiClient");
-
-var _apiKeyNames = require("../core/api-key-names");
-
-var _authStore = require("../core/auth-store");
-
-var _keyManager = require("../core/key-manager");
-
-var _sdkConfig = require("../core/sdk-config");
-
-var _auth = require("./auth");
-
-var _error = require("./error");
-
-var _identityProvider = require("./identity-provider");
-
-var _userKeyNames = require("./user-key-names");
-
-function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
-
-function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-class DefaultSudoUserClient {
-  constructor(options) {
-    _defineProperty(this, "config", void 0);
-
-    _defineProperty(this, "keyManager", void 0);
-
-    _defineProperty(this, "sudoUserKeyManager", void 0);
-
-    _defineProperty(this, "authenticationStore", void 0);
-
-    _defineProperty(this, "identityProvider", void 0);
-
-    _defineProperty(this, "apiClient", void 0);
-
-    _defineProperty(this, "logger", void 0);
-
-    _defineProperty(this, "authUI", void 0);
-
-    _defineProperty(this, "launchUriFn", void 0);
-
-    this.logger = options?.logger ?? new _sudoCommon.DefaultLogger('SudoUser', 'warn');
-    this.config = options?.config ?? (0, _sdkConfig.getIdentityServiceConfig)();
-    this.authenticationStore = options?.authenticationStore ?? new _authStore.AuthenticationStore();
-
-    if (options?.sudoKeyManager) {
-      this.sudoUserKeyManager = options?.sudoKeyManager;
-    } else {
-      const cryptoProvider = new _sudoWebCryptoProvider.WebSudoCryptoProvider('SudoUserClient', 'com.sudoplatform.appservicename');
-      this.sudoUserKeyManager = new _sudoCommon.DefaultSudoKeyManager(cryptoProvider);
-    }
-
-    this.keyManager = new _keyManager.KeyManager(this.sudoUserKeyManager);
-    this.launchUriFn = options?.launchUriFn;
-    this.identityProvider = options?.identityProvider ?? new _identityProvider.CognitoUserPoolIdentityProvider(this.keyManager, this.config, this.logger);
-    const federatedSignInConfig = this.config?.federatedSignIn;
-
-    if (federatedSignInConfig) {
-      this.authUI = options?.authUI ?? new _auth.CognitoAuthUI(this.authenticationStore, federatedSignInConfig, this.keyManager, this.logger, this.launchUriFn);
-    }
-
-    this.apiClient = options?.apiClient ?? new _apiClient.ApiClient(this.config.identityService.region, this.config.identityService.apiUrl, this, this.logger);
-  }
-
-  get sudoKeyManager() {
-    return this.sudoUserKeyManager;
-  }
-
-  presentFederatedSignInUI() {
-    try {
-      this.authUI?.presentFederatedSignInUI();
-    } catch (err) {
-      const error = err;
-      this.logger.error('Failed to launch the federated sign in UI.', {
-        error
-      });
-      throw new _sudoCommon.AuthenticationError(error.message);
-    }
-  }
-
-  async processFederatedSignInTokens(url) {
-    try {
-      let authTokens = await this.authUI?.processFederatedSignInTokens(url);
-
-      if (authTokens) {
-        authTokens = await this.registerFederatedIdAndRefreshTokens(authTokens);
-        return authTokens;
-      } else {
-        throw new _sudoCommon.AuthenticationError('Authentication tokens missing.');
-      }
-    } catch (err) {
-      const error = err;
-      this.logger.error('Failed to process the federated sign in redirect.', {
-        error
-      });
-      throw new _sudoCommon.AuthenticationError(error.message);
-    }
-  }
-
-  async getIdToken() {
-    return await this.keyManager.getString(_apiKeyNames.apiKeyNames.idToken);
-  }
-
-  async getAccessToken() {
-    return await this.keyManager.getString(_apiKeyNames.apiKeyNames.accessToken);
-  }
-
-  async getRefreshToken() {
-    return await this.keyManager.getString(_apiKeyNames.apiKeyNames.refreshToken);
-  }
-
-  async getTokenExpiry() {
-    const expiry = await this.keyManager.getString(_apiKeyNames.apiKeyNames.tokenExpiry);
-    return expiry ? new Date(Number(expiry) * 1000) : undefined;
-  }
-
-  async getRefreshTokenExpiry() {
-    let expiry = undefined;
-    const timeSinceEpoch = await this.keyManager.getString(_apiKeyNames.apiKeyNames.refreshTokenExpiry);
-
-    if (timeSinceEpoch) {
-      expiry = new Date(Number(timeSinceEpoch));
-    }
-
-    return expiry;
-  }
-
-  async getUserName() {
-    try {
-      return await this.keyManager.getString(_userKeyNames.userKeyNames.userId);
-    } catch {
-      return undefined;
-    }
-  }
-
-  async setUserName(name) {
-    await this.keyManager.removeItem(_userKeyNames.userKeyNames.userId);
-    await this.keyManager.addString(_userKeyNames.userKeyNames.userId, name);
-  }
-
-  async getUserClaim(name) {
-    const idToken = await this.getIdToken();
-    if (!idToken) return undefined;
-    return this.getTokenClaim(idToken, name);
-  }
-
-  async getSubject() {
-    return await this.getUserClaim('sub');
-  }
-
-  async isSignedIn() {
-    try {
-      const authTokens = await this.getAuthTokens();
-      const expiry = await this.getRefreshTokenExpiry();
-
-      if (authTokens && authTokens.idToken && authTokens.accessToken && authTokens.refreshToken && expiry && // Considered signed in up to 1 hour before the expiry of refresh token.
-      expiry.getTime() > new Date().getTime() + 60 * 60 * 1000) {
-        return true;
-      } else {
-        return false;
-      }
-    } catch (err) {
-      // The key manager throws a KeyNotFoundError if an item is not found
-      // in which case we want to indicate that the user is not signed in.
-      return false;
-    }
-  }
-
-  async refreshTokens(refreshToken) {
-    try {
-      const uid = await this.getUserName();
-
-      if (uid) {
-        const authTokens = await this.identityProvider.refreshTokens(refreshToken);
-        await this.storeTokens(uid, authTokens);
-        return authTokens;
-      } else {
-        throw new _sudoCommon.NotRegisteredError('Not registered.');
-      }
-    } catch (err) {
-      const error = err;
-      throw new _sudoCommon.AuthenticationError(error.message);
-    }
-  }
-
-  async getLatestAuthToken() {
-    try {
-      const idToken = await this.getIdToken();
-      const refreshToken = await this.getRefreshToken();
-      const expiry = await this.getTokenExpiry();
-
-      if (idToken && refreshToken && expiry) {
-        if (expiry.getTime() > new Date().getTime() + 600 * 1000) {
-          return idToken;
-        } else {
-          try {
-            const authTokens = await this.refreshTokens(refreshToken);
-            return authTokens.idToken;
-          } catch (error) {
-            this.logger.info('getLatestAuthToken: Token refresh failed', {
-              error
-            }); // return an empty id token
-
+import { AuthenticationError, DefaultLogger, DefaultSudoKeyManager, FatalError, KeyNotFoundError, NotAuthorizedError, NotRegisteredError, NotSignedInError, PublicKeyFormat, RegisterError, } from '@sudoplatform/sudo-common';
+import { WebSudoCryptoProvider } from '@sudoplatform/sudo-web-crypto-provider';
+import * as JWT from 'jsonwebtoken';
+import { v4 } from 'uuid';
+import { ApiClient } from '../client/apiClient';
+import { apiKeyNames } from '../core/api-key-names';
+import { AuthenticationStore } from '../core/auth-store';
+import { KeyManager } from '../core/key-manager';
+import { getIdentityServiceConfig } from '../core/sdk-config';
+import { CognitoAuthUI } from './auth';
+import { AlreadyRegisteredError } from './error';
+import { CognitoUserPoolIdentityProvider, } from './identity-provider';
+import { userKeyNames } from './user-key-names';
+export class DefaultSudoUserClient {
+    constructor(options) {
+        this.logger = options?.logger ?? new DefaultLogger('SudoUser', 'warn');
+        this.config = options?.config ?? getIdentityServiceConfig();
+        this.authenticationStore =
+            options?.authenticationStore ?? new AuthenticationStore();
+        if (options?.sudoKeyManager) {
+            this.sudoUserKeyManager = options?.sudoKeyManager;
+        }
+        else {
+            const cryptoProvider = new WebSudoCryptoProvider('SudoUserClient', 'com.sudoplatform.appservicename');
+            this.sudoUserKeyManager = new DefaultSudoKeyManager(cryptoProvider);
+        }
+        this.keyManager = new KeyManager(this.sudoUserKeyManager);
+        this.launchUriFn = options?.launchUriFn;
+        this.identityProvider =
+            options?.identityProvider ??
+                new CognitoUserPoolIdentityProvider(this.keyManager, this.config, this.logger);
+        const federatedSignInConfig = this.config?.federatedSignIn;
+        if (federatedSignInConfig) {
+            this.authUI =
+                options?.authUI ??
+                    new CognitoAuthUI(this.authenticationStore, federatedSignInConfig, this.keyManager, this.logger, this.launchUriFn);
+        }
+        this.apiClient =
+            options?.apiClient ??
+                new ApiClient(this.config.identityService.region, this.config.identityService.apiUrl, this, this.logger);
+    }
+    get sudoKeyManager() {
+        return this.sudoUserKeyManager;
+    }
+    presentFederatedSignInUI() {
+        try {
+            this.authUI?.presentFederatedSignInUI();
+        }
+        catch (err) {
+            const error = err;
+            this.logger.error('Failed to launch the federated sign in UI.', { error });
+            throw new AuthenticationError(error.message);
+        }
+    }
+    async processFederatedSignInTokens(url) {
+        try {
+            let authTokens = await this.authUI?.processFederatedSignInTokens(url);
+            if (authTokens) {
+                authTokens = await this.registerFederatedIdAndRefreshTokens(authTokens);
+                return authTokens;
+            }
+            else {
+                throw new AuthenticationError('Authentication tokens missing.');
+            }
+        }
+        catch (err) {
+            const error = err;
+            this.logger.error('Failed to process the federated sign in redirect.', {
+                error,
+            });
+            throw new AuthenticationError(error.message);
+        }
+    }
+    async getIdToken() {
+        return await this.keyManager.getString(apiKeyNames.idToken);
+    }
+    async getAccessToken() {
+        return await this.keyManager.getString(apiKeyNames.accessToken);
+    }
+    async getRefreshToken() {
+        return await this.keyManager.getString(apiKeyNames.refreshToken);
+    }
+    async getTokenExpiry() {
+        const expiry = await this.keyManager.getString(apiKeyNames.tokenExpiry);
+        return expiry ? new Date(Number(expiry) * 1000) : undefined;
+    }
+    async getRefreshTokenExpiry() {
+        let expiry = undefined;
+        const timeSinceEpoch = await this.keyManager.getString(apiKeyNames.refreshTokenExpiry);
+        if (timeSinceEpoch) {
+            expiry = new Date(Number(timeSinceEpoch));
+        }
+        return expiry;
+    }
+    async getUserName() {
+        try {
+            return await this.keyManager.getString(userKeyNames.userId);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async setUserName(name) {
+        await this.keyManager.removeItem(userKeyNames.userId);
+        await this.keyManager.addString(userKeyNames.userId, name);
+    }
+    async getUserClaim(name) {
+        const idToken = await this.getIdToken();
+        if (!idToken)
+            return undefined;
+        return this.getTokenClaim(idToken, name);
+    }
+    async getSubject() {
+        return await this.getUserClaim('sub');
+    }
+    async isSignedIn() {
+        try {
+            const authTokens = await this.getAuthTokens();
+            const expiry = await this.getRefreshTokenExpiry();
+            if (authTokens &&
+                authTokens.idToken &&
+                authTokens.accessToken &&
+                authTokens.refreshToken &&
+                expiry &&
+                // Considered signed in up to 1 hour before the expiry of refresh token.
+                expiry.getTime() > new Date().getTime() + 60 * 60 * 1000) {
+                return true;
+            }
+            else {
+                return false;
+            }
+        }
+        catch (err) {
+            // The key manager throws a KeyNotFoundError if an item is not found
+            // in which case we want to indicate that the user is not signed in.
+            return false;
+        }
+    }
+    async refreshTokens(refreshToken) {
+        try {
+            const uid = await this.getUserName();
+            if (uid) {
+                const authTokens = await this.identityProvider.refreshTokens(refreshToken);
+                await this.storeTokens(uid, authTokens);
+                return authTokens;
+            }
+            else {
+                throw new NotRegisteredError('Not registered.');
+            }
+        }
+        catch (err) {
+            const error = err;
+            throw new AuthenticationError(error.message);
+        }
+    }
+    async getLatestAuthToken() {
+        try {
+            const idToken = await this.getIdToken();
+            const refreshToken = await this.getRefreshToken();
+            const expiry = await this.getTokenExpiry();
+            if (idToken && refreshToken && expiry) {
+                if (expiry.getTime() > new Date().getTime() + 600 * 1000) {
+                    return idToken;
+                }
+                else {
+                    try {
+                        const authTokens = await this.refreshTokens(refreshToken);
+                        return authTokens.idToken;
+                    }
+                    catch (error) {
+                        this.logger.info('getLatestAuthToken: Token refresh failed', {
+                            error,
+                        });
+                        // return an empty id token
+                        return '';
+                    }
+                }
+            }
+            else {
+                // If tokens are missing then it's likely due to the client not being signed in.
+                // Return an empty id token.
+                return '';
+            }
+        }
+        catch (err) {
+            // The key manager throws a KeyNotFoundError if an item is not found
+            // which would indicate that the client is likely not signed in.
+            // Return an empty id token.
             return '';
-          }
-        }
-      } else {
-        // If tokens are missing then it's likely due to the client not being signed in.
-        // Return an empty id token.
-        return '';
-      }
-    } catch (err) {
-      // The key manager throws a KeyNotFoundError if an item is not found
-      // which would indicate that the client is likely not signed in.
-      // Return an empty id token.
-      return '';
-    }
-  }
-
-  async signOut() {
-    let refreshToken;
-
-    try {
-      refreshToken = await this.getRefreshToken();
-    } catch (err) {
-      if (err instanceof _sudoCommon.KeyNotFoundError) {
-        throw new _sudoCommon.NotSignedInError();
-      } else {
-        throw err;
-      }
-    }
-
-    if (refreshToken) {
-      await this.identityProvider.signOut(refreshToken);
-    } else {
-      throw new _sudoCommon.NotSignedInError();
-    }
-  }
-
-  async globalSignOut() {
-    if (!(await this.isSignedIn())) {
-      throw new _sudoCommon.NotSignedInError();
-    }
-
-    await this.apiClient.globalSignOut();
-    this.clearAuthenticationTokens();
-  }
-
-  async registerWithAuthenticationProvider(authenticationProvider, registrationId) {
-    this.logger.info('Registering using an external authentication provider.');
-
-    if (!(await this.isRegistered())) {
-      const authInfo = await authenticationProvider.getAuthenticationInfo();
-
-      if (!authInfo.isValid()) {
-        throw new _sudoCommon.NotAuthorizedError('Authentication provider returned invalid authentication info.');
-      }
-
-      const token = authInfo.encode();
-      const jwt = JWT.decode(token, {
-        complete: true
-      });
-      let uid;
-
-      if (jwt && jwt.payload['sub']) {
-        uid = jwt.payload['sub'];
-      } else {
-        uid = (0, _uuid.v4)();
-      }
-
-      const publicKey = await this.generateRegistrationData();
-      const data = {
-        challengeType: authInfo.type,
-        answer: token,
-        registrationId: registrationId ? registrationId : (0, _uuid.v4)(),
-        publicKey: JSON.stringify(publicKeyToRSAPublicKey(publicKey))
-      };
-      const validationData = Object.keys(data).map(key => {
-        return {
-          Name: key,
-          Value: data[key]
-        };
-      });
-      const userId = await this.identityProvider.register(uid, validationData);
-
-      if (userId) {
-        await this.setUserName(userId);
-        return userId;
-      } else {
-        throw new _sudoCommon.RegisterError('Registration was successful but not user ID was returned.');
-      }
-    } else {
-      throw new _error.AlreadyRegisteredError();
-    }
-  }
-
-  async signInWithAuthenticationProvider(authenticationProvider) {
-    this.logger.info('Signing in using external authentication provider.');
-    const authInfo = await authenticationProvider.getAuthenticationInfo();
-
-    if (!authInfo.isValid()) {
-      throw new _sudoCommon.NotAuthorizedError('Authentication provider returned invalid authentication info.');
-    }
-
-    const uid = authInfo.getUsername();
-    const token = authInfo.encode();
-    const type = authInfo.type;
-    let authTokens = await this.identityProvider.signInWithToken(uid, token, type);
-    await this.storeTokens(uid, authTokens);
-    authTokens = await this.registerFederatedIdAndRefreshTokens(authTokens);
-    return authTokens;
-  }
-
-  async isRegistered() {
-    try {
-      const uid = await this.getUserName();
-      return uid ? true : false;
-    } catch (err) {
-      return false;
-    }
-  }
-
-  async signInWithKey() {
-    this.logger.info('Signing in using private key.');
-    const uid = await this.getUserName();
-    const userKeyId = await this.keyManager.getString('userKeyId');
-
-    if (uid && userKeyId) {
-      let authTokens = await this.identityProvider.signInWithKey(uid, userKeyId);
-
-      if (authTokens) {
+        }
+    }
+    async signOut() {
+        let refreshToken;
+        try {
+            refreshToken = await this.getRefreshToken();
+        }
+        catch (err) {
+            if (err instanceof KeyNotFoundError) {
+                throw new NotSignedInError();
+            }
+            else {
+                throw err;
+            }
+        }
+        if (refreshToken) {
+            await this.identityProvider.signOut(refreshToken);
+        }
+        else {
+            throw new NotSignedInError();
+        }
+    }
+    async globalSignOut() {
+        if (!(await this.isSignedIn())) {
+            throw new NotSignedInError();
+        }
+        await this.apiClient.globalSignOut();
+        this.clearAuthenticationTokens();
+    }
+    async registerWithAuthenticationProvider(authenticationProvider, registrationId) {
+        this.logger.info('Registering using an external authentication provider.');
+        if (!(await this.isRegistered())) {
+            const authInfo = await authenticationProvider.getAuthenticationInfo();
+            if (!authInfo.isValid()) {
+                throw new NotAuthorizedError('Authentication provider returned invalid authentication info.');
+            }
+            const token = authInfo.encode();
+            const jwt = JWT.decode(token, { complete: true });
+            let uid;
+            if (jwt && jwt.payload['sub']) {
+                uid = jwt.payload['sub'];
+            }
+            else {
+                uid = v4();
+            }
+            const publicKey = await this.generateRegistrationData();
+            const data = {
+                challengeType: authInfo.type,
+                answer: token,
+                registrationId: registrationId ? registrationId : v4(),
+                publicKey: JSON.stringify(publicKeyToRSAPublicKey(publicKey)),
+            };
+            const validationData = Object.keys(data).map((key) => {
+                return {
+                    Name: key,
+                    Value: data[key],
+                };
+            });
+            const userId = await this.identityProvider.register(uid, validationData);
+            if (userId) {
+                await this.setUserName(userId);
+                return userId;
+            }
+            else {
+                throw new RegisterError('Registration was successful but not user ID was returned.');
+            }
+        }
+        else {
+            throw new AlreadyRegisteredError();
+        }
+    }
+    async signInWithAuthenticationProvider(authenticationProvider) {
+        this.logger.info('Signing in using external authentication provider.');
+        const authInfo = await authenticationProvider.getAuthenticationInfo();
+        if (!authInfo.isValid()) {
+            throw new NotAuthorizedError('Authentication provider returned invalid authentication info.');
+        }
+        const uid = authInfo.getUsername();
+        const token = authInfo.encode();
+        const type = authInfo.type;
+        let authTokens = await this.identityProvider.signInWithToken(uid, token, type);
         await this.storeTokens(uid, authTokens);
         authTokens = await this.registerFederatedIdAndRefreshTokens(authTokens);
         return authTokens;
-      } else {
-        throw new _sudoCommon.FatalError('Unexpected error. Unable to sign in.');
-      }
-    } else {
-      throw new _sudoCommon.NotRegisteredError('Not registered.');
-    }
-  }
-
-  async deregister() {
-    await this.apiClient.deregister();
-    await this.keyManager.reset();
-    this.clearAuthenticationTokens();
-  }
-
-  async clearAuthenticationTokens() {
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.idToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.accessToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.tokenExpiry);
-    this.authenticationStore.reset();
-
-    if (this.authUI) {
-      this.authUI.reset();
-    }
-  }
-
-  presentSignOutUI() {
-    this.authUI?.presentSignOutUI();
-  }
-
-  reset() {
-    this.keyManager.reset();
-    this.apiClient.reset();
-    this.clearAuthenticationTokens();
-  }
-
-  getTokenClaim(token, name) {
-    let claim = undefined;
-    const decoded = JWT.decode(token, {
-      complete: true
-    });
-
-    if (decoded) {
-      claim = decoded.payload[name];
-    }
-
-    return claim;
-  }
-  /**
-   * Store the authentication tokens and user id of the signed in user. This function
-   * is only called when a user has successfully signed in using a private key.
-   */
-
-
-  async storeTokens(uid, authTokens) {
-    await this.keyManager.removeItem(_userKeyNames.userKeyNames.userId);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.idToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.accessToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.refreshToken);
-    await this.keyManager.removeItem(_apiKeyNames.apiKeyNames.tokenExpiry);
-    await this.keyManager.addString(_userKeyNames.userKeyNames.userId, uid);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.idToken, authTokens.idToken);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.accessToken, authTokens.accessToken);
-    await this.keyManager.addString(_apiKeyNames.apiKeyNames.refreshToken, authTokens.refreshToken);
-    const decoded = JWT.decode(authTokens.idToken, {
-      complete: true
-    });
-
-    if (decoded) {
-      const tokenExpiry = decoded.payload['exp'];
-      await this.keyManager.addString(_apiKeyNames.apiKeyNames.tokenExpiry, tokenExpiry);
-    }
-  }
-
-  async registerFederatedIdAndRefreshTokens(authTokens) {
-    const identityId = this.getTokenClaim(authTokens.idToken, 'custom:identityId');
-
-    if (identityId) {
-      return authTokens;
-    } else {
-      await this.apiClient.registerFederatedId({
-        idToken: authTokens.idToken
-      }); // Refresh the ID token so the identity ID is present as a claim.
-
-      const newAuthTokens = await this.refreshTokens(authTokens.refreshToken);
-      return newAuthTokens;
-    }
-  }
-
-  async generateRegistrationData() {
-    const keyId = await this.keyManager.generateKeyPair();
-    await this.keyManager.removeItem(_userKeyNames.userKeyNames.userKeyId);
-    await this.keyManager.addString(_userKeyNames.userKeyNames.userKeyId, keyId);
-    const publicKey = await this.keyManager.exportPublicKey(keyId);
-    return publicKey;
-  }
-
-  async getAuthTokens() {
-    const idToken = await this.getIdToken();
-    const accessToken = await this.getAccessToken();
-    const refreshToken = await this.getRefreshToken();
-    const tokenExpiry = await this.getTokenExpiry();
-
-    if (idToken && accessToken && refreshToken && tokenExpiry) {
-      return {
-        idToken: idToken,
-        accessToken: accessToken,
-        refreshToken: refreshToken,
-        tokenExpiry: tokenExpiry.getTime()
-      };
-    } else {
-      return undefined;
-    }
-  }
-  /**
-   * Provide a custom auth UI. This is mainly used for unit testing (optional).
-   */
-
-
-  setAuthUI(authUI) {
-    this.authUI = authUI;
-  }
-  /**
-   * Provide a custom identity provider. This is mainly used for unit testing (optional).
-   */
-
-
-  setIdentityProvider(identityProvider) {
-    this.identityProvider = identityProvider;
-  }
-  /**
-   * Provide a custom function to open the sign in url.
-   * This is mainly used for unit testing (optional).
-   */
-
-
-  setLaunchUriFn(launchUriFn) {
-    this.launchUriFn = launchUriFn;
-  }
-  /**
-   * Provide a custom authentication store.
-   * This is mainly used for unit testing (optional).
-   */
-
-
-  setAuthenticationStore(authenticationStore) {
-    this.authenticationStore = authenticationStore;
-  }
-
+    }
+    async isRegistered() {
+        try {
+            const uid = await this.getUserName();
+            return uid ? true : false;
+        }
+        catch (err) {
+            return false;
+        }
+    }
+    async signInWithKey() {
+        this.logger.info('Signing in using private key.');
+        const uid = await this.getUserName();
+        const userKeyId = await this.keyManager.getString('userKeyId');
+        if (uid && userKeyId) {
+            let authTokens = await this.identityProvider.signInWithKey(uid, userKeyId);
+            if (authTokens) {
+                await this.storeTokens(uid, authTokens);
+                authTokens = await this.registerFederatedIdAndRefreshTokens(authTokens);
+                return authTokens;
+            }
+            else {
+                throw new FatalError('Unexpected error. Unable to sign in.');
+            }
+        }
+        else {
+            throw new NotRegisteredError('Not registered.');
+        }
+    }
+    async deregister() {
+        await this.apiClient.deregister();
+        await this.keyManager.reset();
+        this.clearAuthenticationTokens();
+    }
+    async clearAuthenticationTokens() {
+        await this.keyManager.removeItem(apiKeyNames.idToken);
+        await this.keyManager.removeItem(apiKeyNames.accessToken);
+        await this.keyManager.removeItem(apiKeyNames.refreshToken);
+        await this.keyManager.removeItem(apiKeyNames.tokenExpiry);
+        this.authenticationStore.reset();
+        if (this.authUI) {
+            this.authUI.reset();
+        }
+    }
+    presentSignOutUI() {
+        this.authUI?.presentSignOutUI();
+    }
+    reset() {
+        this.keyManager.reset();
+        this.apiClient.reset();
+        this.clearAuthenticationTokens();
+    }
+    getTokenClaim(token, name) {
+        let claim = undefined;
+        const decoded = JWT.decode(token, { complete: true });
+        if (decoded) {
+            claim = decoded.payload[name];
+        }
+        return claim;
+    }
+    /**
+     * Store the authentication tokens and user id of the signed in user. This function
+     * is only called when a user has successfully signed in using a private key.
+     */
+    async storeTokens(uid, authTokens) {
+        await this.keyManager.removeItem(userKeyNames.userId);
+        await this.keyManager.removeItem(apiKeyNames.idToken);
+        await this.keyManager.removeItem(apiKeyNames.accessToken);
+        await this.keyManager.removeItem(apiKeyNames.refreshToken);
+        await this.keyManager.removeItem(apiKeyNames.tokenExpiry);
+        await this.keyManager.addString(userKeyNames.userId, uid);
+        await this.keyManager.addString(apiKeyNames.idToken, authTokens.idToken);
+        await this.keyManager.addString(apiKeyNames.accessToken, authTokens.accessToken);
+        await this.keyManager.addString(apiKeyNames.refreshToken, authTokens.refreshToken);
+        const decoded = JWT.decode(authTokens.idToken, { complete: true });
+        if (decoded) {
+            const tokenExpiry = decoded.payload['exp'];
+            await this.keyManager.addString(apiKeyNames.tokenExpiry, tokenExpiry);
+        }
+    }
+    async registerFederatedIdAndRefreshTokens(authTokens) {
+        const identityId = this.getTokenClaim(authTokens.idToken, 'custom:identityId');
+        if (identityId) {
+            return authTokens;
+        }
+        else {
+            await this.apiClient.registerFederatedId({
+                idToken: authTokens.idToken,
+            });
+            // Refresh the ID token so the identity ID is present as a claim.
+            const newAuthTokens = await this.refreshTokens(authTokens.refreshToken);
+            return newAuthTokens;
+        }
+    }
+    async generateRegistrationData() {
+        const keyId = await this.keyManager.generateKeyPair();
+        await this.keyManager.removeItem(userKeyNames.userKeyId);
+        await this.keyManager.addString(userKeyNames.userKeyId, keyId);
+        const publicKey = await this.keyManager.exportPublicKey(keyId);
+        return publicKey;
+    }
+    async getAuthTokens() {
+        const idToken = await this.getIdToken();
+        const accessToken = await this.getAccessToken();
+        const refreshToken = await this.getRefreshToken();
+        const tokenExpiry = await this.getTokenExpiry();
+        if (idToken && accessToken && refreshToken && tokenExpiry) {
+            return {
+                idToken: idToken,
+                accessToken: accessToken,
+                refreshToken: refreshToken,
+                tokenExpiry: tokenExpiry.getTime(),
+            };
+        }
+        else {
+            return undefined;
+        }
+    }
+    /**
+     * Provide a custom auth UI. This is mainly used for unit testing (optional).
+     */
+    setAuthUI(authUI) {
+        this.authUI = authUI;
+    }
+    /**
+     * Provide a custom identity provider. This is mainly used for unit testing (optional).
+     */
+    setIdentityProvider(identityProvider) {
+        this.identityProvider = identityProvider;
+    }
+    /**
+     * Provide a custom function to open the sign in url.
+     * This is mainly used for unit testing (optional).
+     */
+    setLaunchUriFn(launchUriFn) {
+        this.launchUriFn = launchUriFn;
+    }
+    /**
+     * Provide a custom authentication store.
+     * This is mainly used for unit testing (optional).
+     */
+    setAuthenticationStore(authenticationStore) {
+        this.authenticationStore = authenticationStore;
+    }
 }
 /**
  * Convert PublicKey of any format to an RSAPublicKey format public key
@@ -506,17 +422,14 @@ class DefaultSudoUserClient {
  * @param publicKey PublicKey to convert
  * @returns RSAPublicKey formatted PublicKey
  */
-
-
-exports.DefaultSudoUserClient = DefaultSudoUserClient;
-
 function publicKeyToRSAPublicKey(publicKey) {
-  if (publicKey.keyFormat === _sudoCommon.PublicKeyFormat.RSAPublicKey) {
-    return publicKey;
-  }
-
-  return { ...publicKey,
-    publicKey: publicKey.publicKey.replace('MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A', ''),
-    keyFormat: _sudoCommon.PublicKeyFormat.RSAPublicKey
-  };
-}
+    if (publicKey.keyFormat === PublicKeyFormat.RSAPublicKey) {
+        return publicKey;
+    }
+    return {
+        ...publicKey,
+        publicKey: publicKey.publicKey.replace('MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A', ''),
+        keyFormat: PublicKeyFormat.RSAPublicKey,
+    };
+}
+//# sourceMappingURL=user-client.js.map