@tari-project/ootle-wallet-daemon-signer 0.11.1 → 0.12.0

package/README.md

@@ -33,6 +33,14 @@ import { WalletDaemonSigner } from "@tari-project/ootle-wallet-daemon-signer";
 const signer = await WalletDaemonSigner.connect({ url: "http://localhost:18103" });
 ```
 
+Enrolling the wallet's first passkey needs the daemon's one-time setup token, which
+`tari_ootle_walletd` prints at startup and writes to `<base_path>/setup_token`. Pass it
+as `setupToken` until a passkey is enrolled:
+
+```ts
+const signer = await WalletDaemonSigner.connect({ url: "http://localhost:18103", setupToken });
+```
+
 ### Node
 
 WebAuthn is browser-only. If the daemon is configured for `method: "webauthn"`

package/dist/index.d.ts

@@ -29,6 +29,11 @@ export declare interface AuthOptions {
     permissions?: Permission[];
     /** Application name used as the WebAuthn username/identifier. Defaults to `"tari-wallet-sdk"`. */
     appName?: string;
+    /**
+     * One-time setup token for enrolling the wallet's first passkey. `tari_ootle_walletd` prints it at
+     * startup and writes it to `<base_path>/setup_token`. Needed only while the wallet has no passkey.
+     */
+    setupToken?: string;
 }
 
 export { WalletDaemonClient }

package/dist/index.js

@@ -148,6 +148,12 @@ var l = class e3 {
   accountsCreate(e4) {
     return this.sendRequest("accounts.create", e4);
   }
+  accountsImportViewOnly(e4) {
+    return this.sendRequest("accounts.import_view_only", e4);
+  }
+  accountsExportViewKey(e4) {
+    return this.sendRequest("accounts.export_view_key", e4);
+  }
   accountsRename(e4) {
     return this.sendRequest("accounts.rename", e4);
   }
@@ -322,6 +328,15 @@ var l = class e3 {
   webauthnAuthStart(e4) {
     return this.sendRequest("webauthn.auth_start", e4);
   }
+  webauthnListPasskeys(e4 = {}) {
+    return this.sendRequest("webauthn.list_passkeys", e4);
+  }
+  webauthnRenamePasskey(e4) {
+    return this.sendRequest("webauthn.rename_passkey", e4);
+  }
+  webauthnRemovePasskey(e4) {
+    return this.sendRequest("webauthn.remove_passkey", e4);
+  }
   stealthUtxosList(e4) {
     return this.sendRequest("stealth_utxos.list", e4);
   }
@@ -413,55 +428,59 @@ async function p(t2, n2) {
     case "none":
       return t2.authRequest(r2, "None");
     case "webauthn":
-      return m(t2, i3, r2);
+      return m(t2, i3, r2, n2 == null ? void 0 : n2.setupToken);
     default:
       throw new e(`Unsupported wallet daemon auth method: ${a2}. Configure the daemon for one of: "none" or "webauthn", and pass that value to WalletDaemonSigner.connect.`);
   }
 }
-async function m(t2, n2, r2) {
+async function m(t2, n2, r2, i3) {
   if (globalThis.navigator === void 0 || !globalThis.navigator.credentials) throw new e("WebAuthn is browser-only. Run in a browser, or pass `authToken` explicitly to `WalletDaemonSigner.connect({ url, authToken })` from Node.");
-  let { registered: i3 } = await t2.webauthnAlreadyRegistered({});
-  return i3 ? h(t2, n2, r2) : g(t2, n2);
+  let { registered: a2 } = await t2.webauthnAlreadyRegistered({});
+  return a2 ? h(t2, r2) : g(t2, n2, i3);
 }
-async function h(t2, n2, r2) {
+async function h(t2, n2) {
   var _a;
-  let i3 = await t2.webauthnAuthStart({ username: n2 });
-  if (!i3.challenge) throw new e("WebAuthn auth start: missing challenge");
-  let a2 = i3.challenge;
-  if (!((_a = a2.publicKey) == null ? void 0 : _a.challenge)) throw new e("WebAuthn auth start: malformed challenge response");
-  let { publicKey: o2 } = a2, s2 = f(o2.challenge), c2 = (o2.allowCredentials ?? []).map((e4) => ({
+  let r2 = await t2.webauthnAuthStart({});
+  if (!r2.challenge) throw new e("WebAuthn auth start: missing challenge");
+  let i3 = r2.challenge;
+  if (!((_a = i3.publicKey) == null ? void 0 : _a.challenge)) throw new e("WebAuthn auth start: malformed challenge response");
+  let { publicKey: a2 } = i3, o2 = f(a2.challenge), s2 = (a2.allowCredentials ?? []).map((e4) => ({
     id: f(e4.id),
     type: e4.type
-  })), l2 = await navigator.credentials.get({ publicKey: {
-    challenge: s2,
-    allowCredentials: c2,
+  })), c2 = await navigator.credentials.get({ publicKey: {
+    challenge: o2,
+    allowCredentials: s2,
     timeout: 6e4,
     userVerification: "required"
   } });
-  if (!l2) throw new e("WebAuthn authentication was cancelled");
-  return t2.authRequest(r2, { WebAuthN: {
-    session_id: i3.session_id,
-    credential: l2
+  if (!c2) throw new e("WebAuthn authentication was cancelled");
+  return t2.authRequest(n2, { WebAuthN: {
+    session_id: r2.session_id,
+    credential: c2
   } });
 }
-async function g(t2, n2) {
+async function g(t2, n2, r2) {
   var _a, _b, _c;
-  let r2 = await t2.webauthnStartRegistration({ username: n2 });
-  if (!r2.public_key) throw new e("WebAuthn registration start: missing public_key");
-  let i3 = r2.public_key;
-  if (!i3.challenge) throw new e("WebAuthn registration start: malformed public_key response");
-  let a2 = f(i3.challenge), o2 = await navigator.credentials.create({ publicKey: {
+  if (r2 === void 0) throw new e("The wallet daemon has no passkey yet, and enrolling the first one needs its one-time setup token. Pass `setupToken` to `WalletDaemonSigner.connect` (tari_ootle_walletd prints it at startup and writes it to `<base_path>/setup_token`).");
+  let i3 = await t2.webauthnStartRegistration({
+    username: n2,
+    setup_token: r2
+  });
+  if (!i3.public_key) throw new e("WebAuthn registration start: missing public_key");
+  let a2 = i3.public_key;
+  if (!a2.challenge) throw new e("WebAuthn registration start: malformed public_key response");
+  let o2 = f(a2.challenge), s2 = await navigator.credentials.create({ publicKey: {
     rp: {
-      name: ((_a = i3.rp) == null ? void 0 : _a.name) ?? "Tari Wallet",
-      id: ((_b = i3.rp) == null ? void 0 : _b.id) ?? ((_c = globalThis.location) == null ? void 0 : _c.hostname)
+      name: ((_a = a2.rp) == null ? void 0 : _a.name) ?? "Tari Wallet",
+      id: ((_b = a2.rp) == null ? void 0 : _b.id) ?? ((_c = globalThis.location) == null ? void 0 : _c.hostname)
     },
     user: {
       id: Uint8Array.from(n2, (e4) => e4.charCodeAt(0)),
       name: n2,
       displayName: n2
     },
-    challenge: a2,
-    pubKeyCredParams: i3.pubKeyCredParams ?? [
+    challenge: o2,
+    pubKeyCredParams: a2.pubKeyCredParams ?? [
       {
         type: "public-key",
         alg: -8
@@ -480,12 +499,14 @@ async function g(t2, n2) {
     attestation: "none",
     authenticatorSelection: { userVerification: "required" }
   } });
-  if (!o2) throw new e("WebAuthn registration was cancelled");
-  let { token: s2 } = await t2.webauthnFinishRegistration({
-    session_id: r2.session_id,
-    credential: o2
+  if (!s2) throw new e("WebAuthn registration was cancelled");
+  let { token: c2 } = await t2.webauthnFinishRegistration({
+    session_id: i3.session_id,
+    credential: s2,
+    setup_token: r2
   });
-  return s2;
+  if (!c2) throw new e("WebAuthn registration finish: the daemon returned no token");
+  return c2;
 }
 var _ = class i2 {
   constructor(e4) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tari-project/ootle-wallet-daemon-signer",
-  "version": "0.11.1",
+  "version": "0.12.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/tari-project/ootle.ts.git",
@@ -25,9 +25,9 @@
     }
   },
   "dependencies": {
-    "@tari-project/ootle-ts-bindings": "^1.60.0",
-    "@tari-project/wallet_jrpc_client": "^1.26.0",
-    "@tari-project/ootle": "0.11.1"
+    "@tari-project/ootle-ts-bindings": "^1.62.0",
+    "@tari-project/wallet_jrpc_client": "^1.28.0",
+    "@tari-project/ootle": "0.12.0"
   },
   "devDependencies": {
     "@microsoft/api-extractor": "^7.57.7",