@super-protocol/pki-attestation-engine 5.1.0-beta3 → 5.1.0

package/dist/challengeProvider/challengeProviderTdxAzure.js

@@ -1,66 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChallengeProviderTdxAzure = void 0;
-const child_process_1 = require("child_process");
-const util_1 = require("util");
-const challengeNvidiaCCHelper_1 = require("./challengeNvidiaCCHelper");
-const pki_common_1 = require("@super-protocol/pki-common");
-const tdxAzureEvidence_1 = require("../azure/tdxAzureEvidence");
-const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
-class ChallengeProviderTdxAzure {
-    logger;
-    constructor(logger) {
-        this.logger = logger;
-    }
-    async generateChallenge(userData, networkID) {
-        const { challengeData, nvidiaTokens } = await challengeNvidiaCCHelper_1.ChallengeNvidiaCCHelper.getTokenAndCombinedChallengeData(userData, this.logger);
-        const bin = process.env.AZURE_GUEST_ATTEST ?? 'azure-guest-attest';
-        const padded = Buffer.alloc(64);
-        challengeData.copy(padded);
-        const jsonArgs = ['guest-attest', '--provider', 'maa', '--json'];
-        const execOpts = {
-            timeout: 30000,
-            maxBuffer: 4 * 1024 * 1024,
-        };
-        let stdout;
-        try {
-            const result = await execFileAsync(bin, [
-                ...jsonArgs,
-                '--client-payload',
-                JSON.stringify({
-                    'user-data': padded.toString('base64'),
-                }),
-            ], execOpts);
-            stdout = result.stdout;
-        }
-        catch (clientPayloadError) {
-            try {
-                const result = await execFileAsync(bin, [
-                    ...jsonArgs,
-                    '--user-data',
-                    `hex:${padded.toString('hex')}`,
-                ], execOpts);
-                stdout = result.stdout;
-            }
-            catch {
-                throw new Error(`azure-guest-attest failed (${bin}): ${clientPayloadError.stderr || clientPayloadError.message}`);
-            }
-        }
-        const jsonStart = stdout.indexOf('{');
-        if (jsonStart < 0) {
-            throw new Error('azure-guest-attest returned no JSON');
-        }
-        const parsed = JSON.parse(stdout.slice(jsonStart));
-        if (!parsed.passed || typeof parsed.token !== 'string') {
-            throw new Error(`Azure MAA guest attestation failed: ${parsed.error || 'no token'}`);
-        }
-        return {
-            type: pki_common_1.ChallengeType.TDXAZURE,
-            evidenceBase64: (0, tdxAzureEvidence_1.encodeTdxAzureEvidence)(parsed.token).toString('base64'),
-            nvidiaTokens,
-            networkID,
-        };
-    }
-}
-exports.ChallengeProviderTdxAzure = ChallengeProviderTdxAzure;
-//# sourceMappingURL=data:application/json;base64,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

package/dist/challengeValidator/challengeValidatorTdxAzure.d.ts

@@ -1,7 +0,0 @@
-import { Challenge, Log } from '@super-protocol/pki-common';
-import { ChallengeResult, ChallengeValidator } from './challengeValidator';
-export declare class ChallengeValidatorTdxAzure implements ChallengeValidator {
-    private readonly log;
-    constructor(log: Log);
-    validate(challenge: Challenge): Promise<ChallengeResult>;
-}

package/dist/challengeValidator/challengeValidatorTdxAzure.js

@@ -1,37 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChallengeValidatorTdxAzure = void 0;
-const pki_common_1 = require("@super-protocol/pki-common");
-const tdxAzureEvidence_1 = require("../azure/tdxAzureEvidence");
-class ChallengeValidatorTdxAzure {
-    log;
-    constructor(log) {
-        this.log = log;
-    }
-    async validate(challenge) {
-        if (challenge.type !== pki_common_1.ChallengeType.TDXAZURE) {
-            throw new Error('Method not implemented.');
-        }
-        try {
-            const evidence = (0, tdxAzureEvidence_1.parseTdxAzureEvidence)(Buffer.from(challenge.evidenceBase64, 'base64'));
-            const claims = await (0, tdxAzureEvidence_1.verifyMaaJwt)(evidence.token);
-            const { userData, mrenclave } = (0, tdxAzureEvidence_1.validateAzureTdxClaims)(claims);
-            this.log.debug('Validated tdx-azure MAA claims', {
-                mrenclaveHex: mrenclave.toString('hex'),
-            });
-            return {
-                success: true,
-                validatedUserData: userData,
-                validatedId: mrenclave,
-            };
-        }
-        catch (e) {
-            return {
-                success: false,
-                error: e.message,
-            };
-        }
-    }
-}
-exports.ChallengeValidatorTdxAzure = ChallengeValidatorTdxAzure;
-//# sourceMappingURL=data:application/json;base64,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