@vex-chat/libvex 7.4.0 → 9.0.0

package/dist/Client.js

@@ -3,15 +3,15 @@
  * Licensed under AGPL-3.0. See LICENSE for details.
  * Commercial licenses available at vex.wtf
  */
-import { enterCryptoProfileScope, getCryptoProfile, leaveCryptoProfileScope, setCryptoProfile, xBoxKeyPairAsync, xBoxKeyPairFromSecretAsync, xConcat, xConstants, xDHAsync, xEcdhKeyPairFromEcdsaKeyPairAsync, xEncode, xHMAC, xKDF, XKeyConvert, xMakeNonce, xMnemonic, xRandomBytes, xSecretboxAsync, xSecretboxOpenAsync, xSignAsync, xSignKeyPair, xSignKeyPairAsync, xSignKeyPairFromSecret, xSignKeyPairFromSecretAsync, xSignOpenAsync, XUtils, } from "@vex-chat/crypto";
-import { CallEventSchema, CallSessionSchema, IceServerConfigSchema, MailType, MailWSSchema, PermissionSchema, WSMessageSchema, } from "@vex-chat/types";
+import { enterCryptoProfileScope, getCryptoProfile, leaveCryptoProfileScope, setCryptoProfile, xBoxKeyPairAsync, xBoxKeyPairFromSecretAsync, xConcat, xConstants, xDHAsync, xEcdhKeyPairFromEcdsaKeyPairAsync, xEncode, xHMAC, xKDF, XKeyConvert, xMakeNonce, xMessageKeySubkeys, xMnemonic, xPreKeySignaturePayload, xRandomBytes, xSecretboxAsync, xSecretboxOpenAsync, xSignAsync, xSignKeyPair, xSignKeyPairAsync, xSignKeyPairFromSecret, xSignKeyPairFromSecretAsync, xSignOpenAsync, XUtils, } from "@vex-chat/crypto";
+import { ACCOUNT_PASSWORD_MAX_LENGTH, ACCOUNT_PASSWORD_MIN_LENGTH, CallEventSchema, CallSessionSchema, IceServerConfigSchema, MailType, MailWSSchema, PermissionSchema, WSMessageSchema, } from "@vex-chat/types";
 import { EventEmitter } from "eventemitter3";
 import * as uuid from "uuid";
 import { z } from "zod/v4";
 import { createFetchHttpClient, isHttpError, } from "./http.js";
 import { clampLocalMessageRetentionDays, formatVexRetentionEnvelope, stripVexRetentionEnvelope, } from "./retention.js";
 import { WebSocketAdapter, WebSocketNotOpenError, } from "./transport/websocket.js";
-import { decodeFipsInitialExtraV1, encodeFipsInitialExtraV1, fipsP256AdFromIdentityPubs, fipsP256PreKeySignPayload, isFipsInitialExtraV1, } from "./utils/fipsMailExtra.js";
+import { decodeFipsInitialExtraV1, encodeFipsInitialExtraV1, fipsP256AdFromIdentityPubs, isFipsInitialExtraV1, } from "./utils/fipsMailExtra.js";
 import { decodeRatchetHeader, deriveBootstrapSendChain, encodeRatchetHeader, hasRemoteDhChanged, initRatchetSession, ratchetStepReceive, ratchetStepSend, sessionToSqlPatch, takeReceiveMessageKey, takeSendMessageKey, } from "./utils/ratchet.js";
 import { verifyKeyBundleSignatures } from "./utils/verifyKeyBundle.js";
 /**
@@ -148,6 +148,16 @@ function libvexDebugLevel() {
         return "debug";
     }
 }
+function registrationPasswordError(password) {
+    if (password.trim().length === 0 ||
+        password.length < ACCOUNT_PASSWORD_MIN_LENGTH) {
+        return new Error(`Password must be at least ${String(ACCOUNT_PASSWORD_MIN_LENGTH)} characters.`);
+    }
+    if (password.length > ACCOUNT_PASSWORD_MAX_LENGTH) {
+        return new Error(`Password must be at most ${String(ACCOUNT_PASSWORD_MAX_LENGTH)} characters.`);
+    }
+    return null;
+}
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -529,6 +539,7 @@ export class Client {
      * Helpers for information/actions related to the currently authenticated account.
      */
     me = {
+        changePassword: this.changePassword.bind(this),
         /**
          * Retrieves current device details.
          *
@@ -614,6 +625,7 @@ export class Client {
         listDevices: this.passkeyListDevices.bind(this),
         recoverDeviceRequest: this.passkeyRecoverDeviceRequest.bind(this),
         rejectDeviceRequest: this.passkeyRejectDeviceRequest.bind(this),
+        resetPassword: this.resetPasswordWithPasskey.bind(this),
     };
     /**
      * Permission-management methods for the current user.
@@ -849,14 +861,23 @@ export class Client {
         const atRestAes = XUtils.deriveLocalAtRestAesKey(idKeys.secretKey, profile);
         let resolvedStorage = storage;
         if (!resolvedStorage) {
-            const { createNodeStorage } = await import("./storage/node.js");
+            const nodeStorageModule = "./storage/node.js";
+            const isNodeStorageModule = (value) => typeof value === "object" &&
+                value !== null &&
+                "createNodeStorage" in value &&
+                typeof value.createNodeStorage === "function";
+            const nodeStorage = await import(
+            /* @vite-ignore */ nodeStorageModule);
+            if (!isNodeStorageModule(nodeStorage)) {
+                throw new Error("Node storage adapter is unavailable.");
+            }
             const dbFileName = options?.inMemoryDb
                 ? ":memory:"
                 : XUtils.encodeHex(signKeys.publicKey) + ".sqlite";
             const dbPath = options?.dbFolder
                 ? options.dbFolder + "/" + dbFileName
                 : dbFileName;
-            resolvedStorage = createNodeStorage(dbPath, atRestAes);
+            resolvedStorage = nodeStorage.createNodeStorage(dbPath, atRestAes);
         }
         await resolvedStorage.init();
         const client = new Client({
@@ -1147,10 +1168,37 @@ export class Client {
         return null;
     }
     /**
-     * Logs out the current authenticated session from the server.
+     * Ends the local authenticated session and disconnects realtime transport.
+     * Spire access tokens are stateless, so local credential removal is the
+     * authoritative logout boundary.
      */
     async logout() {
-        await this.http.post(this.getHost() + "/goodbye");
+        try {
+            if (this.token) {
+                await this.http.post(this.getHost() + "/goodbye");
+            }
+        }
+        catch {
+            // Logout must still complete locally when the server is unreachable.
+        }
+        finally {
+            this.token = null;
+            this.user = undefined;
+            this.device = undefined;
+            delete this.http.defaults.headers.common.Authorization;
+            delete this.http.defaults.headers.common["X-Device-Token"];
+            this.autoReconnectEnabled = false;
+            this.postAuthVersion++;
+            if (this.reconnectTimer) {
+                clearTimeout(this.reconnectTimer);
+                this.reconnectTimer = null;
+            }
+            if (this.pingInterval) {
+                clearInterval(this.pingInterval);
+                this.pingInterval = null;
+            }
+            this.socket.close();
+        }
     }
     /** Removes an event listener. See {@link ClientEvents} for available events. */
     off(event, fn, context) {
@@ -1202,115 +1250,45 @@ export class Client {
     /**
      * Registers a new account on the server.
      *
-     * @param username - Optional username to register (must be unique when provided).
-     * @param password - Optional legacy password used when talking to pre-keycluster servers.
+     * @param username - Username to register.
+     * @param password - Password for the account and device approval request.
      * @returns `[user, null]` on success, `[null, error]` on failure.
      *
      * @example
      * ```ts
-     * const [user, err] = await client.register("MyUsername");
+     * const [user, err] = await client.register("MyUsername", "correct horse battery staple");
      * ```
      */
     async register(username, password) {
-        while (!this.xKeyRing) {
-            await sleep(100);
-        }
-        const regKey = await this.getToken("register");
-        if (regKey) {
-            // Usernames are case-insensitive at the protocol level;
-            // lowercase before sending so the local SDK view matches
-            // what the server canonicalizes and persists.
-            const resolvedUsername = username?.trim().length !== 0 && username !== undefined
-                ? username.trim().toLowerCase()
-                : Client.randomUsername();
-            const resolvedPassword = password?.trim().length !== 0 && password !== undefined
-                ? password
-                : uuid.v4();
-            const signKey = XUtils.encodeHex(this.signKeys.publicKey);
-            const signed = XUtils.encodeHex(await xSignAsync(Uint8Array.from(uuid.parse(regKey.key)), this.signKeys.secretKey));
-            const preKeyIndex = this.xKeyRing.preKeys.index;
-            const regMsg = {
-                deviceName: this.options?.deviceName ?? "unknown",
-                password: resolvedPassword,
-                preKey: XUtils.encodeHex(this.xKeyRing.preKeys.keyPair.publicKey),
-                preKeyIndex,
-                preKeySignature: XUtils.encodeHex(this.xKeyRing.preKeys.signature),
-                signed,
-                signKey,
-                username: resolvedUsername,
-            };
-            try {
-                const res = await this.http.post(this.getHost() + "/register", msgpack.encode(regMsg), { headers: { "Content-Type": "application/msgpack" } });
-                // New key-cluster server response: { device, token, user }.
-                // Legacy response (still deployed in some environments): user only.
-                let didDecodeRegisterResponse = false;
-                let pendingApproval = null;
-                try {
-                    const { device, token, user } = decodeHttpResponse(RegisterResponseCodec, res.data);
-                    this.device = device;
-                    this.setUser(user);
-                    this.token = token;
-                    this.http.defaults.headers.common.Authorization = `Bearer ${token}`;
-                    didDecodeRegisterResponse = true;
-                }
-                catch {
-                    // fall through to legacy decode path
-                }
-                if (!didDecodeRegisterResponse) {
-                    try {
-                        pendingApproval = decodeHttpResponse(RegisterPendingApprovalCodec, res.data);
-                    }
-                    catch {
-                        // fall through to legacy decode path
-                    }
-                }
-                if (!didDecodeRegisterResponse) {
-                    if (pendingApproval !== null) {
-                        return [
-                            null,
-                            new DeviceApprovalRequiredError({
-                                challenge: pendingApproval.challenge,
-                                expiresAt: pendingApproval.expiresAt,
-                                requestID: pendingApproval.requestID,
-                                userID: pendingApproval.userID ?? null,
-                            }),
-                        ];
-                    }
-                    const legacyUser = decodeHttpResponse(UserCodec, res.data);
-                    this.setUser(legacyUser);
-                    // Legacy servers require /auth after /register to get a JWT.
-                    const loginResult = await this.login(resolvedUsername, resolvedPassword);
-                    if (!loginResult.ok) {
-                        return [
-                            null,
-                            new Error(loginResult.error ??
-                                "Legacy register succeeded but login failed."),
-                        ];
-                    }
-                }
-                return [this.getUser(), null];
-            }
-            catch (err) {
-                if (isHttpError(err) && err.response) {
-                    return [
-                        null,
-                        new Error(spireErrorBodyMessage(err.response.data)),
-                    ];
-                }
-                return [
-                    null,
-                    err instanceof Error ? err : new Error(String(err)),
-                ];
-            }
-        }
-        else {
-            return [null, new Error("Couldn't get regkey from server.")];
+        const passwordError = registrationPasswordError(password);
+        if (passwordError) {
+            return [null, passwordError];
         }
+        return this.registerAccountOrEnrollment(username, "create-account", password);
     }
     removeAllListeners(event) {
         this.emitter.removeAllListeners(event);
         return this;
     }
+    /**
+     * Requests approval for a new device using the account password. This
+     * enrollment flow never creates an account when the username is unknown.
+     */
+    async requestDeviceEnrollment(username, password) {
+        const passwordError = registrationPasswordError(password);
+        if (passwordError) {
+            return [null, passwordError];
+        }
+        return this.registerAccountOrEnrollment(username, "enroll-device", password);
+    }
+    /**
+     * Requests enrollment for this device after a successful passkey ceremony.
+     * This is not account registration: the passkey bearer must identify an
+     * existing account, and the server returns a pending device request.
+     */
+    async requestDeviceEnrollmentWithPasskey(username) {
+        return this.registerAccountOrEnrollment(username, "enroll-device");
+    }
     /**
      * Updates the local retention cap (1–30 days) and prunes immediately.
      * Does not affect server-side storage.
@@ -1448,6 +1426,16 @@ export class Client {
             signature: XUtils.decodeHex(preKey.signature),
         };
     }
+    async changePassword(currentPassword, newPassword) {
+        const passwordError = registrationPasswordError(newPassword);
+        if (passwordError)
+            throw passwordError;
+        if (currentPassword.length === 0 ||
+            currentPassword.length > ACCOUNT_PASSWORD_MAX_LENGTH) {
+            throw new Error("Current password is invalid.");
+        }
+        await this.replaceAccountPassword({ currentPassword, newPassword });
+    }
     async createChannel(name, serverID) {
         const body = { name };
         const res = await this.http.post(this.getHost() + "/server/" + serverID + "/channels", msgpack.encode(body), { headers: { "Content-Type": "application/msgpack" } });
@@ -1515,12 +1503,10 @@ export class Client {
         const res = await this.http.post(this.getHost() + "/server/" + serverID + "/invites", msgpack.encode(payload), { headers: { "Content-Type": "application/msgpack" } });
         return decodeHttpResponse(InviteCodec, res.data);
     }
-    async createPreKey() {
+    async createPreKey(kind) {
         return this.runWithThisCryptoProfile(async () => {
             const preKeyPair = await xBoxKeyPairAsync();
-            const toSign = this.cryptoProfile === "fips"
-                ? fipsP256PreKeySignPayload(preKeyPair.publicKey)
-                : xEncode(xConstants.CURVE, preKeyPair.publicKey);
+            const toSign = xPreKeySignaturePayload(preKeyPair.publicKey, kind, this.cryptoProfile);
             return {
                 keyPair: preKeyPair,
                 signature: await xSignAsync(toSign, this.signKeys.secretKey),
@@ -1596,12 +1582,13 @@ export class Client {
                 : XUtils.numberToUint8Arr(0);
             // shared secret key
             const SK = xKDF(IKM);
+            const initialSubkeys = xMessageKeySubkeys(SK);
             const PK = (await xBoxKeyPairFromSecretAsync(SK)).publicKey;
             const AD = fips
                 ? fipsP256AdFromIdentityPubs(IK_AP, new Uint8Array(keyBundle.signKey))
                 : xConcat(xEncode(xConstants.CURVE, IK_AP), xEncode(xConstants.CURVE, IK_B));
             const nonce = xMakeNonce();
-            const cipher = await xSecretboxAsync(message, nonce, SK);
+            const cipher = await xSecretboxAsync(message, nonce, initialSubkeys.encryptionKey);
             const signKeyWire = fips ? IK_AP : this.signKeys.publicKey;
             const ephKeyWire = ephemeralKeys.publicKey;
             const extra = fips
@@ -1620,7 +1607,7 @@ export class Client {
                 recipient: device.deviceID,
                 sender: this.getDevice().deviceID,
             };
-            const hmac = xHMAC(mail, SK);
+            const hmac = xHMAC(mail, initialSubkeys.authenticationKey);
             const msg = {
                 action: "CREATE",
                 data: mail,
@@ -2114,6 +2101,9 @@ export class Client {
                 "/device/" +
                 this.getDevice().deviceID +
                 "/mail");
+            if (!this.token || this.isManualCloseInFlight()) {
+                return;
+            }
             const mailBuffer = new Uint8Array(res.data);
             const rawInbox = z
                 .array(mailInboxEntry)
@@ -2445,9 +2435,7 @@ export class Client {
     }
     async isPreKeySignedByCurrentDevice(preKey) {
         return this.runWithThisCryptoProfile(async () => {
-            const payload = this.cryptoProfile === "fips"
-                ? fipsP256PreKeySignPayload(preKey.keyPair.publicKey)
-                : xEncode(xConstants.CURVE, preKey.keyPair.publicKey);
+            const payload = xPreKeySignaturePayload(preKey.keyPair.publicKey, "signed", this.cryptoProfile);
             const opened = await xSignOpenAsync(preKey.signature, this.signKeys.publicKey);
             return Boolean(opened && XUtils.bytesEqual(opened, payload));
         });
@@ -2619,7 +2607,7 @@ export class Client {
             let preKeys = await this.database.getPreKeys();
             if (!preKeys ||
                 !(await this.isPreKeySignedByCurrentDevice(preKeys))) {
-                const unsaved = await this.createPreKey();
+                const unsaved = await this.createPreKey("signed");
                 const [saved] = await this.database.savePreKeys([unsaved], false);
                 if (!saved || saved.index == null)
                     throw new Error("Failed to save prekey — no index returned.");
@@ -2889,9 +2877,10 @@ export class Client {
                             : xConcat(DH1, DH2, DH3);
                         // shared secret key
                         const SK = xKDF(IKM);
+                        const initialSubkeys = xMessageKeySubkeys(SK);
                         const PK = (await xBoxKeyPairFromSecretAsync(SK))
                             .publicKey;
-                        const hmac = xHMAC(mail, SK);
+                        const hmac = xHMAC(mail, initialSubkeys.authenticationKey);
                         // associated data
                         const AD = fipsRead
                             ? fipsP256AdFromIdentityPubs(IK_A, IK_BP)
@@ -2922,7 +2911,7 @@ export class Client {
                             this.acknowledgeRepeatedDecryptFailure(mail, failureCount, timestamp);
                             return;
                         }
-                        const unsealed = await xSecretboxOpenAsync(new Uint8Array(mail.cipher), new Uint8Array(mail.nonce), SK);
+                        const unsealed = await xSecretboxOpenAsync(new Uint8Array(mail.cipher), new Uint8Array(mail.nonce), initialSubkeys.encryptionKey);
                         if (unsealed) {
                             let plaintext = "";
                             if (!mail.forward) {
@@ -3076,15 +3065,17 @@ export class Client {
                         else if (hasRemoteDhChanged(candidateSession.DHr, ratchetHeader.dhPub)) {
                             await ratchetStepReceive(candidateSession, ratchetHeader.dhPub, ratchetHeader.pn);
                         }
-                        let messageKey = takeReceiveMessageKey(candidateSession, ratchetHeader.dhPub, ratchetHeader.n);
-                        let HMAC = xHMAC(mail, messageKey);
+                        const messageKey = takeReceiveMessageKey(candidateSession, ratchetHeader.dhPub, ratchetHeader.n);
+                        let messageSubkeys = xMessageKeySubkeys(messageKey);
+                        let HMAC = xHMAC(mail, messageSubkeys.authenticationKey);
                         if (!XUtils.bytesEqual(HMAC, header) &&
                             firstInboundFromSubsequent &&
                             !originalSession.CKr) {
                             const ratchetedCandidate = cloneSessionCrypto(originalSession);
                             await ratchetStepReceive(ratchetedCandidate, ratchetHeader.dhPub, ratchetHeader.pn);
                             const ratchetedMessageKey = takeReceiveMessageKey(ratchetedCandidate, ratchetHeader.dhPub, ratchetHeader.n);
-                            const ratchetedHMAC = xHMAC(mail, ratchetedMessageKey);
+                            const ratchetedSubkeys = xMessageKeySubkeys(ratchetedMessageKey);
+                            const ratchetedHMAC = xHMAC(mail, ratchetedSubkeys.authenticationKey);
                             if (XUtils.bytesEqual(ratchetedHMAC, header)) {
                                 if (libvexDebugDmEnabled()) {
                                     debugLibvexDm("readMail subsequent: first inbound used DH-ratchet fallback", {
@@ -3093,7 +3084,7 @@ export class Client {
                                     });
                                 }
                                 candidateSession = ratchetedCandidate;
-                                messageKey = ratchetedMessageKey;
+                                messageSubkeys = ratchetedSubkeys;
                                 HMAC = ratchetedHMAC;
                             }
                         }
@@ -3120,7 +3111,7 @@ export class Client {
                             return;
                         }
                         session = candidateSession;
-                        const decrypted = await xSecretboxOpenAsync(new Uint8Array(mail.cipher), new Uint8Array(mail.nonce), messageKey);
+                        const decrypted = await xSecretboxOpenAsync(new Uint8Array(mail.cipher), new Uint8Array(mail.nonce), messageSubkeys.encryptionKey);
                         if (decrypted) {
                             const fwdMsg2 = mail.forward
                                 ? messageSchema.parse(msgpack.decode(decrypted))
@@ -3243,6 +3234,75 @@ export class Client {
         const res = await this.http.patch(this.getHost() + "/invite/" + inviteID);
         return decodeHttpResponse(PermissionCodec, res.data);
     }
+    async registerAccountOrEnrollment(username, intent, password) {
+        const resolvedUsername = username.trim().toLowerCase();
+        if (!/^\w{3,19}$/.test(resolvedUsername)) {
+            return [
+                null,
+                new Error("Username must be between three and nineteen letters, digits, or underscores."),
+            ];
+        }
+        while (!this.xKeyRing) {
+            await sleep(100);
+        }
+        const regKey = await this.getToken("register");
+        if (regKey) {
+            const signKey = XUtils.encodeHex(this.signKeys.publicKey);
+            const signed = XUtils.encodeHex(await xSignAsync(Uint8Array.from(uuid.parse(regKey.key)), this.signKeys.secretKey));
+            const preKeyIndex = this.xKeyRing.preKeys.index;
+            const regMsg = {
+                deviceName: this.options?.deviceName ?? "unknown",
+                intent,
+                preKey: XUtils.encodeHex(this.xKeyRing.preKeys.keyPair.publicKey),
+                preKeyIndex,
+                preKeySignature: XUtils.encodeHex(this.xKeyRing.preKeys.signature),
+                signed,
+                signKey,
+                username: resolvedUsername,
+            };
+            if (password !== undefined) {
+                regMsg.password = password;
+            }
+            try {
+                const res = await this.http.post(this.getHost() + "/register", msgpack.encode(regMsg), { headers: { "Content-Type": "application/msgpack" } });
+                try {
+                    const { device, token, user } = decodeHttpResponse(RegisterResponseCodec, res.data);
+                    this.device = device;
+                    this.setUser(user);
+                    this.token = token;
+                    this.http.defaults.headers.common.Authorization = `Bearer ${token}`;
+                }
+                catch {
+                    const pendingApproval = decodeHttpResponse(RegisterPendingApprovalCodec, res.data);
+                    return [
+                        null,
+                        new DeviceApprovalRequiredError({
+                            challenge: pendingApproval.challenge,
+                            expiresAt: pendingApproval.expiresAt,
+                            requestID: pendingApproval.requestID,
+                            userID: pendingApproval.userID,
+                        }),
+                    ];
+                }
+                return [this.getUser(), null];
+            }
+            catch (err) {
+                if (isHttpError(err) && err.response) {
+                    return [
+                        null,
+                        new Error(spireErrorBodyMessage(err.response.data)),
+                    ];
+                }
+                return [
+                    null,
+                    err instanceof Error ? err : new Error(String(err)),
+                ];
+            }
+        }
+        else {
+            return [null, new Error("Couldn't get regkey from server.")];
+        }
+    }
     registerDecryptFailure(mail) {
         const count = (this.decryptFailureCounts.get(mail.mailID) ?? 0) + 1;
         this.decryptFailureCounts.set(mail.mailID, count);
@@ -3291,6 +3351,15 @@ export class Client {
             requestID +
             "/reject");
     }
+    async replaceAccountPassword(payload) {
+        await this.http.patch(this.getHost() + "/user/" + this.getUser().userID + "/password", msgpack.encode(payload), { headers: { "Content-Type": "application/msgpack" } });
+    }
+    async resetPasswordWithPasskey(newPassword) {
+        const passwordError = registrationPasswordError(newPassword);
+        if (passwordError)
+            throw passwordError;
+        await this.replaceAccountPassword({ newPassword });
+    }
     async respond(msg) {
         const response = {
             signed: await xSignAsync(new Uint8Array(msg.challenge), this.signKeys.secretKey),
@@ -3370,7 +3439,7 @@ export class Client {
                         challenge: newDevice.challenge,
                         expiresAt: newDevice.expiresAt,
                         requestID: newDevice.requestID,
-                        userID: newDevice.userID ?? null,
+                        userID: newDevice.userID,
                     });
                 }
                 else {
@@ -3672,6 +3741,7 @@ export class Client {
                 await ratchetStepSend(session);
             }
             const { messageKey, n } = takeSendMessageKey(session);
+            const messageSubkeys = xMessageKeySubkeys(messageKey);
             const ratchetHeader = {
                 dhPub: session.DHsPublic,
                 n,
@@ -3679,7 +3749,7 @@ export class Client {
                 version: 1,
             };
             const nonce = xMakeNonce();
-            const cipher = await xSecretboxAsync(msg, nonce, messageKey);
+            const cipher = await xSecretboxAsync(msg, nonce, messageSubkeys.encryptionKey);
             const extra = encodeRatchetHeader(ratchetHeader);
             const mail = {
                 authorID: this.getUser().userID,
@@ -3701,7 +3771,7 @@ export class Client {
                 transmissionID: uuid.v4(),
                 type: "resource",
             };
-            const hmac = xHMAC(mail, messageKey);
+            const hmac = xHMAC(mail, messageSubkeys.authenticationKey);
             const fwdOut = forward
                 ? messageSchema.parse(msgpack.decode(msg))
                 : null;
@@ -3949,7 +4019,7 @@ export class Client {
     async submitOTK(amount) {
         const otks = [];
         for (let i = 0; i < amount; i++) {
-            otks.push(await this.createPreKey());
+            otks.push(await this.createPreKey("one-time"));
         }
         const savedKeys = await this.database.savePreKeys(otks, true);
         await this.http.post(this.getHost() + "/device/" + this.getDevice().deviceID + "/otk", msgpack.encode(savedKeys.map((key) => this.censorPreKey(key))), {