@vibes.diy/identity 3.0.4 → 4.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -5
- package/clerk-claim.d.ts +1 -0
- package/clerk-claim.js.map +1 -1
- package/dash-api/clerk-token.d.ts +1 -1
- package/dash-api/dash-client.d.ts +1 -1
- package/dash-api/dash-client.js.map +1 -1
- package/dash-api/protocols-base-jwt.d.ts +23 -0
- package/dash-api/protocols-base-jwt.js +13 -0
- package/dash-api/protocols-base-jwt.js.map +1 -0
- package/dash-api/protocols-cloud-types.d.ts +127 -0
- package/dash-api/protocols-cloud-types.js +45 -0
- package/dash-api/protocols-cloud-types.js.map +1 -0
- package/dash-api/protocols-dashboard/dash-types.d.ts +27 -0
- package/dash-api/protocols-dashboard/dash-types.js +2 -0
- package/dash-api/protocols-dashboard/dash-types.js.map +1 -0
- package/dash-api/protocols-dashboard/fp-api-interface.d.ts +24 -0
- package/dash-api/protocols-dashboard/fp-api-interface.js +2 -0
- package/dash-api/protocols-dashboard/fp-api-interface.js.map +1 -0
- package/dash-api/protocols-dashboard/index.d.ts +13 -0
- package/dash-api/protocols-dashboard/index.js +6 -0
- package/dash-api/protocols-dashboard/index.js.map +1 -0
- package/dash-api/protocols-dashboard/msg-is.d.ts +68 -0
- package/dash-api/protocols-dashboard/msg-is.js +184 -0
- package/dash-api/protocols-dashboard/msg-is.js.map +1 -0
- package/dash-api/protocols-dashboard/msg-types.d.ts +429 -0
- package/dash-api/protocols-dashboard/msg-types.js +4 -0
- package/dash-api/protocols-dashboard/msg-types.js.map +1 -0
- package/dash-api/protocols-dashboard/token.d.ts +37 -0
- package/dash-api/protocols-dashboard/token.js +7 -0
- package/dash-api/protocols-dashboard/token.js.map +1 -0
- package/dash-api/token.d.ts +3 -3
- package/dash-api/token.js +6 -0
- package/dash-api/token.js.map +1 -1
- package/device-id/ca.d.ts +6 -2
- package/device-id/ca.js.map +1 -1
- package/device-id/certor.d.ts +3 -2
- package/device-id/certor.js.map +1 -1
- package/device-id/csr.d.ts +2 -1
- package/device-id/csr.js.map +1 -1
- package/device-id/device-id-wire-golden.fixture.json +23 -0
- package/device-id/key.d.ts +2 -2
- package/device-id/register-golden.test.d.ts +1 -0
- package/device-id/register-golden.test.js +98 -0
- package/device-id/register-golden.test.js.map +1 -0
- package/device-id/register.d.ts +22 -0
- package/device-id/register.js +162 -0
- package/device-id/register.js.map +1 -0
- package/device-id/sign.d.ts +3 -1
- package/device-id/sign.js.map +1 -1
- package/device-id/test-helpers.d.ts +19 -0
- package/device-id/test-helpers.js +72 -0
- package/device-id/test-helpers.js.map +1 -0
- package/device-id/validator.d.ts +2 -1
- package/device-id/validator.js.map +1 -1
- package/device-id/verify.d.ts +3 -2
- package/device-id/verify.js.map +1 -1
- package/device-id/wire-golden.test.d.ts +1 -0
- package/device-id/wire-golden.test.js +20 -0
- package/device-id/wire-golden.test.js.map +1 -0
- package/index.d.ts +6 -3
- package/index.js.map +1 -1
- package/keybag/key-bag-file.d.ts +1 -1
- package/keybag/key-bag-memory.d.ts +1 -1
- package/keybag/key-bag.d.ts +3 -1
- package/keybag/key-bag.js.map +1 -1
- package/keybag/keybag-golden.fixture.json +70 -70
- package/keybag/keybag.d.ts +1 -1
- package/keybag/sys-file-system/deno-filesystem.d.ts +1 -1
- package/keybag/sys-file-system/factory.d.ts +1 -1
- package/keybag/sys-file-system/node-filesystem.d.ts +1 -1
- package/node.d.ts +4 -4
- package/node.js +1 -1
- package/node.js.map +1 -1
- package/package.json +9 -7
- package/runtime/superthis.d.ts +1 -1
- package/runtime-context.d.ts +1 -1
- package/server.d.ts +1 -1
- package/server.js +1 -1
- package/server.js.map +1 -1
- package/sts/index.d.ts +2 -1
- package/sts/index.js.map +1 -1
- package/testing.d.ts +7 -0
- package/testing.js +7 -0
- package/testing.js.map +1 -0
- package/types/cert-payload.d.ts +45 -1
- package/types/cert-payload.js.map +1 -1
- package/types/device-id-payload.d.ts +67 -1
- package/types/device-id-payload.js.map +1 -1
- package/types/device-id-payload.test.js +5 -17
- package/types/device-id-payload.test.js.map +1 -1
- package/types/device-id-types.d.ts +93 -0
- package/types/device-id-types.js +2 -0
- package/types/device-id-types.js.map +1 -0
- package/types/keybag-item.d.ts +15 -0
- package/types/keybag-item.js +2 -0
- package/types/keybag-item.js.map +1 -0
- package/types/sthis.d.ts +84 -0
- package/types/sthis.js +2 -0
- package/types/sthis.js.map +1 -0
- package/types/wire.d.ts +53 -1
- package/types/wire.js.map +1 -1
- package/types/wire.test.js +5 -9
- package/types/wire.test.js.map +1 -1
package/dash-api/token.js
CHANGED
|
@@ -45,6 +45,12 @@ export class DeviceIdApiToken {
|
|
|
45
45
|
const verify = new DeviceIdVerifyMsg(this.sthis.txt.base64, [rCa.Ok()], { maxAge: 3600, requireCASignature, ...this.opts });
|
|
46
46
|
const res = await verify.verifyWithCertificate(token, FPDeviceIDSessionSchema);
|
|
47
47
|
if (res.valid) {
|
|
48
|
+
const rHeader = await exception2Result(() => decodeProtectedHeader(token));
|
|
49
|
+
const chainSignature = !rHeader.isErr() && typeof rHeader.Ok()["x5c#jwt"] === "string" ? "present" : "absent";
|
|
50
|
+
this.sthis.logger
|
|
51
|
+
.Info()
|
|
52
|
+
.Any({ event: "device-id-verify", chainSignature, requireCASignature })
|
|
53
|
+
.Msg("device-id-chain-signature");
|
|
48
54
|
const creatingUser = res.certificate.certificate.asCert()
|
|
49
55
|
.creatingUser;
|
|
50
56
|
if (!creatingUser || creatingUser.type !== "clerk") {
|
package/dash-api/token.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../jsr/dash-api/token.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,GAAG,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAGxE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,OAAO,gBAAgB;IAClB,KAAK,CAAY;IACjB,IAAI,CAA+B;IAC5C,YAAY,KAAgB,EAAE,IAAkC;QAC9D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAE,GAAG,CAAC,EAAE,EAA8C,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAMD,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,MAAM,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5H,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QAC/E,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../jsr/dash-api/token.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,GAAG,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAGxE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,OAAO,gBAAgB;IAClB,KAAK,CAAY;IACjB,IAAI,CAA+B;IAC5C,YAAY,KAAgB,EAAE,IAAkC;QAC9D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAE,GAAG,CAAC,EAAE,EAA8C,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAMD,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,KAAK,MAAM,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5H,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QAC/E,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YASd,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,MAAM,cAAc,GAClB,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,OAAQ,OAAO,CAAC,EAAE,EAA8B,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtH,IAAI,CAAC,KAAK,CAAC,MAAM;iBACd,IAAI,EAAE;iBACN,GAAG,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBACtE,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACpC,MAAM,YAAY,GAAI,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAA6D;iBAClH,YAAY,CAAC;YAChB,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnD,OAAO,MAAM,CAAC,GAAG,CAAC,2DAA2D,YAAY,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,KAAgB,EAA+B,EAAE;IACtF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IAC1B,OAAO,UAAU,CAAC,IAAI,CACpB,KAAK,EACL,EAAE,UAAU,EAAE,OAAO,CAAC,qBAAqB,EAAE,UAAU,EAAE,OAAO,CAAC,iBAAiB,EAAE,EACpF,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAC3D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAmB,EACnB,KAAK,GAAc,eAAe,EAAE;IAEpC,MAAM,MAAM,GAAG,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,aAAa,GAAG,eAAe,CAAC,SAAS,CAAC;YAC9C,GAAG,EAAE,KAAK;YACV,GAAG,KAAK;YACR,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;YACd,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,SAAS;YAClB,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAiB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,KAAgB,EAAE,IAAkC,EAAE,EAAE;IAC1F,OAAO;QACL,WAAW,EAAE,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC;QAC9C,KAAK,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC,CAAC,CAAC"}
|
package/device-id/ca.d.ts
CHANGED
|
@@ -1,7 +1,11 @@
|
|
|
1
|
-
import type { BaseXXEndeCoder,
|
|
1
|
+
import type { BaseXXEndeCoder, SuperThis } from "../types/sthis.js";
|
|
2
|
+
import type { Extensions, FPDeviceIDCSRPayload, Subject } from "../types/device-id-payload.js";
|
|
3
|
+
import type { IssueCertificateResult } from "../types/cert-payload.js";
|
|
4
|
+
import type { JWKPublic } from "../types/wire.js";
|
|
5
|
+
import type { ClerkClaim } from "../clerk-claim.js";
|
|
2
6
|
import { DeviceIdKey } from "./key.js";
|
|
3
7
|
import { Result } from "@adviser/cement";
|
|
4
|
-
import type { CAActions, CACertResult, DeviceIdCAIf, DeviceIdCAJsonParam } from "
|
|
8
|
+
import type { CAActions, CACertResult, DeviceIdCAIf, DeviceIdCAJsonParam } from "../types/device-id-types.js";
|
|
5
9
|
interface DeviceIdCAOpts {
|
|
6
10
|
readonly base64: BaseXXEndeCoder;
|
|
7
11
|
readonly caKey: DeviceIdKey;
|
package/device-id/ca.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ca.js","sourceRoot":"","sources":["../../jsr/device-id/ca.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;
|
|
1
|
+
{"version":3,"file":"ca.js","sourceRoot":"","sources":["../../jsr/device-id/ca.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAMpE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAgBtD,SAAS,qBAAqB,CAAC,IAAoB;IACjD,OAAO;QACL,GAAG,IAAI;QACP,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;QACzD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,UAAU;IACZ,KAAK,CAA0B;IAC/B,MAAM,CAAc;IACpB,UAAU,CAAU;IAE7B,YAAY,IAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,MAA2B,EAAE,OAAkB;QACjF,IAAI,UAAU,CAAC;QACf,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;gBACpD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,UAAoB,CAAC,CAAC;gBAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;gBACxB,OAAO,MAAM,CAAC,GAAG,CAAC,gCAAgC,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,GAAG,CAAC,+BAA+B,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,iCAAiC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,6BAA6B,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,KAAK,IAAI,EAAE,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CACtG,CAAC;QACF,IAAI,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,GAAG,CAAC,oCAAoC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,GAAG,CAAC,gCAAgC,WAAW,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtH,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAoB;QACnD,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,GAAG,UAAU,CAAC,OAAO;YACrB,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC1B,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YACxC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE;SACpD,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC;YACf,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE;YAC5F,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc;SAClB,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAA2B;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAClG,MAAM,kBAAkB,GAAG;YACzB,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;YAC/B,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU;YACjC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,mBAAmB;YACrC,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc;YACpC,GAAG,EAAE,YAAY;YACjB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE;gBACX,OAAO,EAAE,GAAG;gBACZ,YAAY,EAAE,YAAY;gBAC1B,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO;gBAC1B,MAAM,EAAE,IAAI,CAAC,UAAU;gBACvB,QAAQ,EAAE;oBACR,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;oBAC7C,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;iBAC3E;gBACD,oBAAoB,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;gBACzC,kBAAkB,EAAE,OAAO;gBAC3B,QAAQ,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;gBACjD,gBAAgB,EAAE,CAAC,YAAY,CAAC;aACjC;SACF,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,MAAM,IAAI,OAAO,CAAC,kBAA6C,CAAC;aACpF,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;aACnF,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,MAAM,CAAC,EAAE,CAAC;YACf,cAAc,EAAE,cAAc;YAC9B,kBAAkB,EAAE,kBAAkB;YACtC,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,YAAY;YAC1B,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;YAClC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU;YACrC,cAAc,EAAE;gBACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;gBAC/B,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;aAC7D;YACD,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS;SACM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,mBAA+B,EAAE,OAAgB,EAAE,aAAwB;QAC1G,MAAM,UAAU,GAAG;YACjB,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE;YACxE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,CAAC,QAAQ,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE;YAC5G,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,gBAAgB,IAAI,CAAC,YAAY,CAAC,EAAE;YACpG,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACtG,sBAAsB,EAAE,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE;YAC1E,oBAAoB,EAAE,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC,aAAa,CAAC,EAAE;SAC9E,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}
|
package/device-id/certor.d.ts
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
|
-
import type { BaseXXEndeCoder
|
|
2
|
-
import type {
|
|
1
|
+
import type { BaseXXEndeCoder } from "../types/sthis.js";
|
|
2
|
+
import type { CertificatePayload } from "../types/cert-payload.js";
|
|
3
|
+
import type { CertorIf } from "../types/device-id-types.js";
|
|
3
4
|
export declare class Certor implements CertorIf {
|
|
4
5
|
#private;
|
|
5
6
|
readonly base64: BaseXXEndeCoder;
|
package/device-id/certor.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"certor.js","sourceRoot":"","sources":["../../jsr/device-id/certor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;
|
|
1
|
+
{"version":3,"file":"certor.js","sourceRoot":"","sources":["../../jsr/device-id/certor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAIpE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,OAAO,MAAM;IACR,KAAK,CAAqB;IAC1B,MAAM,CAAkB;IACjC,QAAQ,CAAU;IAClB,UAAU,CAAc;IAExB,MAAM,CAAC,UAAU,CAAC,MAAuB,EAAE,IAAY;QACrD,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,MAAuB,EAAE,SAAiB;QACjE,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,YAAY,MAAuB,EAAE,IAAwB;QAC3D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAuB,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,uBAAuB,CAAC,CAAS;QAC/B,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;gBACjB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}
|
package/device-id/csr.d.ts
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
import type { Subject, Extensions, FPDeviceIDCSRPayload
|
|
1
|
+
import type { Subject, Extensions, FPDeviceIDCSRPayload } from "../types/device-id-payload.js";
|
|
2
|
+
import type { SuperThis } from "../types/sthis.js";
|
|
2
3
|
import { Result } from "@adviser/cement";
|
|
3
4
|
import { DeviceIdKey } from "./key.js";
|
|
4
5
|
export declare class DeviceIdCSR {
|
package/device-id/csr.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"csr.js","sourceRoot":"","sources":["../../jsr/device-id/csr.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAqC,MAAM,MAAM,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;
|
|
1
|
+
{"version":3,"file":"csr.js","sourceRoot":"","sources":["../../jsr/device-id/csr.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAqC,MAAM,MAAM,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAG3E,OAAO,EAAE,gBAAgB,EAAU,MAAM,iBAAiB,CAAC;AAG3D,MAAM,OAAO,WAAW;IACb,IAAI,CAAc;IAClB,MAAM,CAAY;IAE3B,YAAY,KAAgB,EAAE,GAAgB;QAC5C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,UAAU,GAAwB,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,0BAA0B,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,uBAAuB;YAC5B,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;YAC/B,GAAG,EAAE;gBACH,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACtC,UAAU,EAAE;oBACV,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;oBAC/C,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;oBACxE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,IAAI,CAAC,YAAY,CAAC;iBAChE;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA6B;QACzC,OAAO,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,OAAyB,CAAC;iBACrD,kBAAkB,CAAC;gBAClB,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,MAAM,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC;aACvD,CAAC;iBACD,WAAW,EAAE;iBACb,iBAAiB,CAAC,IAAI,CAAC;iBACvB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAgB,EAAE,UAAU,GAAwB,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"_comment": "Frozen device-id JWT header captured from @fireproof/core-device-id@0.24.19 for the keybag-golden.fixture.json key+cert with fixedClaims. Cross-checked byte-identical against the in-repo signer at capture time. Permanent byte-parity oracle for #2937 (see wire-golden.test.ts). The JWT signature + iat/exp are non-deterministic and intentionally NOT frozen; only the key/cert-derived header bytes are.",
|
|
3
|
+
"fixedClaims": {
|
|
4
|
+
"iss": "wire-golden",
|
|
5
|
+
"sub": "device-id",
|
|
6
|
+
"seq": 1,
|
|
7
|
+
"exp": 4102444800,
|
|
8
|
+
"nbf": 0,
|
|
9
|
+
"iat": 0,
|
|
10
|
+
"jti": "wire-golden-jti"
|
|
11
|
+
},
|
|
12
|
+
"headerSegment": "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",
|
|
13
|
+
"header": {
|
|
14
|
+
"alg": "ES256",
|
|
15
|
+
"typ": "JWT",
|
|
16
|
+
"kid": "-zeBIY6W1yuGMAo44EoZbKxYMw8wxih-BymlIeSxFaY",
|
|
17
|
+
"x5c": [
|
|
18
|
+
"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"
|
|
19
|
+
],
|
|
20
|
+
"x5t": "z5dsrVMoUTxvwosf6bYpwWqTrkWfhif",
|
|
21
|
+
"x5t#S256": "zQmZu48pM2fwDNengDeA1wXxVgYZ5H5pMuuRhZmQ87FGPXc"
|
|
22
|
+
}
|
|
23
|
+
}
|
package/device-id/key.d.ts
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { Result } from "@adviser/cement";
|
|
2
|
-
import type { JWKPrivate, JWKPublic } from "
|
|
3
|
-
import type { DeviceIdKeyIf } from "
|
|
2
|
+
import type { JWKPrivate, JWKPublic } from "../types/wire.js";
|
|
3
|
+
import type { DeviceIdKeyIf } from "../types/device-id-types.js";
|
|
4
4
|
import { type GenerateKeyPairOptions } from "jose";
|
|
5
5
|
export declare class DeviceIdKey implements DeviceIdKeyIf {
|
|
6
6
|
#private;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
import { describe, it, expect } from "vitest";
|
|
2
|
+
import { type } from "arktype";
|
|
3
|
+
import { AppContext, Evento, Result } from "@adviser/cement";
|
|
4
|
+
import { ensureSuperThis } from "../index.js";
|
|
5
|
+
import { getKeyBag } from "../keybag/keybag.js";
|
|
6
|
+
import { deviceIdRegisterEvento, isResDeviceIdRegister, ReqDeviceIdRegister } from "./register.js";
|
|
7
|
+
const FIXTURE = (await import("../keybag/keybag-golden.fixture.json", { with: { type: "json" } })).default;
|
|
8
|
+
const deviceId = FIXTURE.item.deviceId;
|
|
9
|
+
const cert = FIXTURE.item.cert;
|
|
10
|
+
class TestSendProvider {
|
|
11
|
+
results = [];
|
|
12
|
+
send(_trigger, data) {
|
|
13
|
+
this.results.push(data);
|
|
14
|
+
return Promise.resolve(Result.Ok(undefined));
|
|
15
|
+
}
|
|
16
|
+
done() {
|
|
17
|
+
return Promise.resolve(Result.Ok(undefined));
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
async function triggerRegister(sthis, raw) {
|
|
21
|
+
const evento = new Evento({
|
|
22
|
+
encode: (i) => Promise.resolve(Result.Ok(i.result)),
|
|
23
|
+
decode: (i) => Promise.resolve(Result.Ok(i)),
|
|
24
|
+
});
|
|
25
|
+
evento.push([deviceIdRegisterEvento]);
|
|
26
|
+
const send = new TestSendProvider();
|
|
27
|
+
const appCtx = new AppContext().set("cliCtx", { sthis });
|
|
28
|
+
const request = {
|
|
29
|
+
type: "msg.cmd-ts",
|
|
30
|
+
cmdTs: { raw, outputFormat: "text" },
|
|
31
|
+
result: { type: "core-cli.device-id-register", ...raw },
|
|
32
|
+
};
|
|
33
|
+
const triggered = await evento.trigger({ ctx: appCtx, send, request });
|
|
34
|
+
if (triggered.isErr()) {
|
|
35
|
+
throw triggered.Err();
|
|
36
|
+
}
|
|
37
|
+
const triggerCtx = triggered.unwrap();
|
|
38
|
+
if (triggerCtx.error) {
|
|
39
|
+
throw triggerCtx.error;
|
|
40
|
+
}
|
|
41
|
+
const last = send.results[send.results.length - 1];
|
|
42
|
+
if (!last) {
|
|
43
|
+
throw new Error("register evento emitted no response");
|
|
44
|
+
}
|
|
45
|
+
return last.result;
|
|
46
|
+
}
|
|
47
|
+
function memSthis() {
|
|
48
|
+
const sthis = ensureSuperThis();
|
|
49
|
+
sthis.env.set("FP_KEYBAG_URL", `memory://register-golden-${sthis.nextId().str}`);
|
|
50
|
+
return sthis;
|
|
51
|
+
}
|
|
52
|
+
const baseArgs = {
|
|
53
|
+
commonName: "test-device",
|
|
54
|
+
organization: "You did not set the Organization",
|
|
55
|
+
locality: "You did not set the City",
|
|
56
|
+
state: "You did not set the State",
|
|
57
|
+
country: "WD",
|
|
58
|
+
caUrl: "http://localhost:7370/fp/cloud/csr2cert",
|
|
59
|
+
port: "",
|
|
60
|
+
timeout: "60",
|
|
61
|
+
forceRenew: false,
|
|
62
|
+
};
|
|
63
|
+
describe("device-id register — already-enrolled short-circuit (no re-login)", () => {
|
|
64
|
+
it("returns 'already has a certificate' without hitting the CA when a cert exists", async () => {
|
|
65
|
+
const sthis = memSthis();
|
|
66
|
+
const kb = await getKeyBag(sthis);
|
|
67
|
+
await kb.setDeviceId(deviceId, cert);
|
|
68
|
+
const msg = await triggerRegister(sthis, baseArgs);
|
|
69
|
+
expect(isResDeviceIdRegister(msg)).toBe(true);
|
|
70
|
+
if (isResDeviceIdRegister(msg)) {
|
|
71
|
+
expect(msg.output).toContain("Device already has a certificate. Registration not needed.");
|
|
72
|
+
expect(msg.output).toContain("Use --force-renew to renew the certificate.");
|
|
73
|
+
expect(msg.output).toContain("Existing Device ID Fingerprint:");
|
|
74
|
+
}
|
|
75
|
+
const devid = await kb.getDeviceId();
|
|
76
|
+
expect(devid.cert.IsSome()).toBe(true);
|
|
77
|
+
expect(devid.cert.Unwrap()).toEqual(cert);
|
|
78
|
+
});
|
|
79
|
+
});
|
|
80
|
+
describe("device-id register — wire contract", () => {
|
|
81
|
+
it("the request schema accepts the shape emitted by `vibes-diy login`", () => {
|
|
82
|
+
const req = { type: "core-cli.device-id-register", ...baseArgs };
|
|
83
|
+
const parsed = ReqDeviceIdRegister(req);
|
|
84
|
+
expect(parsed instanceof type.errors).toBe(false);
|
|
85
|
+
expect(parsed.type).toBe("core-cli.device-id-register");
|
|
86
|
+
});
|
|
87
|
+
it("isResDeviceIdRegister only matches the register response type literal", () => {
|
|
88
|
+
expect(isResDeviceIdRegister({ type: "core-cli.res-device-id-register", output: "ok" })).toBe(true);
|
|
89
|
+
expect(isResDeviceIdRegister({ type: "core-cli.res-device-id-create", output: "ok" })).toBe(false);
|
|
90
|
+
expect(isResDeviceIdRegister({ type: "core-cli.res-device-id-register" })).toBe(false);
|
|
91
|
+
expect(isResDeviceIdRegister(undefined)).toBe(false);
|
|
92
|
+
});
|
|
93
|
+
it("ResDeviceIdRegister round-trips a valid response", () => {
|
|
94
|
+
const res = { type: "core-cli.res-device-id-register", output: "done" };
|
|
95
|
+
expect(isResDeviceIdRegister(res)).toBe(true);
|
|
96
|
+
});
|
|
97
|
+
});
|
|
98
|
+
//# sourceMappingURL=register-golden.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register-golden.test.js","sourceRoot":"","sources":["../../jsr/device-id/register-golden.test.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,mBAAmB,EAAuB,MAAM,eAAe,CAAC;AAIxH,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAElG,CAAC;AACF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;AACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;AAG/B,MAAM,gBAAgB;IACX,OAAO,GAAc,EAAE,CAAC;IACjC,IAAI,CAAS,QAAiB,EAAE,IAAQ;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAe,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI;QACF,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAe,CAAC,CAAC,CAAC;IACrD,CAAC;CACF;AAID,KAAK,UAAU,eAAe,CAAC,KAAgB,EAAE,GAAsC;IACrF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;QACxB,MAAM,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAE,CAAyB,CAAC,MAAM,CAAC,CAAC;QACrF,MAAM,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;QACpC,MAAM,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,GAAG,EAAE;KACxD,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAqE,CAAC;IACzG,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,KAAK,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAA6C,CAAC;IAC/F,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,4BAA4B,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,QAAQ,GAAsC;IAClD,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,kCAAkC;IAChD,QAAQ,EAAE,0BAA0B;IACpC,KAAK,EAAE,2BAA2B;IAClC,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,yCAAyC;IAChD,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,KAAK;CAClB,CAAC;AAEF,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAErC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,4DAA4D,CAAC,CAAC;YAC3F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAC;YAC5E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,QAAQ,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAE,MAA8B,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnG,MAAM,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAwB,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7F,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import type { EventoHandler } from "@adviser/cement";
|
|
2
|
+
import { type WrapCmdTSMsg } from "@vibes.diy/cmd-tools";
|
|
3
|
+
export declare const ReqDeviceIdRegister: import("arktype/internal/variants/object.ts").ObjectType<{
|
|
4
|
+
type: "core-cli.device-id-register";
|
|
5
|
+
commonName: string;
|
|
6
|
+
organization: string;
|
|
7
|
+
locality: string;
|
|
8
|
+
state: string;
|
|
9
|
+
country: string;
|
|
10
|
+
caUrl: string;
|
|
11
|
+
port: string;
|
|
12
|
+
timeout: string;
|
|
13
|
+
forceRenew: boolean;
|
|
14
|
+
}, {}>;
|
|
15
|
+
export type ReqDeviceIdRegister = typeof ReqDeviceIdRegister.infer;
|
|
16
|
+
export declare const ResDeviceIdRegister: import("arktype/internal/variants/object.ts").ObjectType<{
|
|
17
|
+
type: "core-cli.res-device-id-register";
|
|
18
|
+
output: string;
|
|
19
|
+
}, {}>;
|
|
20
|
+
export type ResDeviceIdRegister = typeof ResDeviceIdRegister.infer;
|
|
21
|
+
export declare function isResDeviceIdRegister(u: unknown): u is ResDeviceIdRegister;
|
|
22
|
+
export declare const deviceIdRegisterEvento: EventoHandler<WrapCmdTSMsg<unknown>, ReqDeviceIdRegister, ResDeviceIdRegister>;
|
|
@@ -0,0 +1,162 @@
|
|
|
1
|
+
import { decodeJwt } from "jose";
|
|
2
|
+
import { Hono } from "hono";
|
|
3
|
+
import { serve } from "@hono/node-server";
|
|
4
|
+
import open from "open";
|
|
5
|
+
import { Future, timeouted, isSuccess, isTimeout, BuildURI, Result, Option } from "@adviser/cement";
|
|
6
|
+
import { type } from "arktype";
|
|
7
|
+
import { sendMsg, sendProgress } from "@vibes.diy/cmd-tools";
|
|
8
|
+
import { getKeyBag } from "../keybag/keybag.js";
|
|
9
|
+
import { DeviceIdKey } from "./key.js";
|
|
10
|
+
import { DeviceIdCSR } from "./csr.js";
|
|
11
|
+
import { CertificatePayloadSchema } from "../types/cert-payload.js";
|
|
12
|
+
function buildSubject(args) {
|
|
13
|
+
return {
|
|
14
|
+
commonName: args.commonName,
|
|
15
|
+
organization: args.organization,
|
|
16
|
+
locality: args.locality,
|
|
17
|
+
stateOrProvinceName: args.state,
|
|
18
|
+
countryName: args.country,
|
|
19
|
+
};
|
|
20
|
+
}
|
|
21
|
+
export const ReqDeviceIdRegister = type({
|
|
22
|
+
type: "'core-cli.device-id-register'",
|
|
23
|
+
commonName: "string",
|
|
24
|
+
organization: "string",
|
|
25
|
+
locality: "string",
|
|
26
|
+
state: "string",
|
|
27
|
+
country: "string",
|
|
28
|
+
caUrl: "string",
|
|
29
|
+
port: "string",
|
|
30
|
+
timeout: "string",
|
|
31
|
+
forceRenew: "boolean",
|
|
32
|
+
});
|
|
33
|
+
export const ResDeviceIdRegister = type({
|
|
34
|
+
type: "'core-cli.res-device-id-register'",
|
|
35
|
+
output: "string",
|
|
36
|
+
});
|
|
37
|
+
export function isResDeviceIdRegister(u) {
|
|
38
|
+
return !(ResDeviceIdRegister(u) instanceof type.errors);
|
|
39
|
+
}
|
|
40
|
+
export const deviceIdRegisterEvento = {
|
|
41
|
+
hash: "core-cli.device-id-register",
|
|
42
|
+
validate: (ctx) => {
|
|
43
|
+
if (!(ReqDeviceIdRegister(ctx.enRequest) instanceof type.errors)) {
|
|
44
|
+
return Promise.resolve(Result.Ok(Option.Some(ctx.enRequest)));
|
|
45
|
+
}
|
|
46
|
+
return Promise.resolve(Result.Ok(Option.None()));
|
|
47
|
+
},
|
|
48
|
+
handle: async (ctx) => {
|
|
49
|
+
const cliCtx = ctx.ctx.getOrThrow("cliCtx");
|
|
50
|
+
const sthis = cliCtx.sthis;
|
|
51
|
+
const args = ctx.validated;
|
|
52
|
+
const keyBag = await getKeyBag(sthis);
|
|
53
|
+
const existingDeviceIdResult = await keyBag.getDeviceId();
|
|
54
|
+
if (existingDeviceIdResult.cert.IsSome() && !args.forceRenew) {
|
|
55
|
+
const jwk = existingDeviceIdResult.deviceId.Unwrap();
|
|
56
|
+
const deviceIdKey = (await DeviceIdKey.createFromJWK(jwk)).Ok();
|
|
57
|
+
const fingerprint = await deviceIdKey.fingerPrint();
|
|
58
|
+
return sendMsg(ctx, {
|
|
59
|
+
type: "core-cli.res-device-id-register",
|
|
60
|
+
output: [
|
|
61
|
+
"Device already has a certificate. Registration not needed.",
|
|
62
|
+
"Use --force-renew to renew the certificate.",
|
|
63
|
+
`Existing Device ID Fingerprint: ${fingerprint}`,
|
|
64
|
+
].join("\n"),
|
|
65
|
+
});
|
|
66
|
+
}
|
|
67
|
+
if (args.forceRenew && existingDeviceIdResult.cert.IsSome()) {
|
|
68
|
+
await sendProgress(ctx, "info", "Force renewing certificate...");
|
|
69
|
+
}
|
|
70
|
+
let deviceIdKey;
|
|
71
|
+
if (existingDeviceIdResult.deviceId.IsNone()) {
|
|
72
|
+
await sendProgress(ctx, "info", "Creating new device ID key pair...");
|
|
73
|
+
deviceIdKey = await DeviceIdKey.create();
|
|
74
|
+
const jwkPrivate = await deviceIdKey.exportPrivateJWK();
|
|
75
|
+
await keyBag.setDeviceId(jwkPrivate);
|
|
76
|
+
const fingerprint = await deviceIdKey.fingerPrint();
|
|
77
|
+
await sendProgress(ctx, "info", `Created Device ID Fingerprint: ${fingerprint}`);
|
|
78
|
+
}
|
|
79
|
+
else {
|
|
80
|
+
await sendProgress(ctx, "info", "Using existing device ID key...");
|
|
81
|
+
const jwkPrivate = existingDeviceIdResult.deviceId.Unwrap();
|
|
82
|
+
const createResult = await DeviceIdKey.createFromJWK(jwkPrivate);
|
|
83
|
+
if (createResult.isErr()) {
|
|
84
|
+
return Result.Err(`Error loading existing device ID: ${createResult.Err()}`);
|
|
85
|
+
}
|
|
86
|
+
deviceIdKey = createResult.Ok();
|
|
87
|
+
const fingerprint = await deviceIdKey.fingerPrint();
|
|
88
|
+
await sendProgress(ctx, "info", `Device ID Fingerprint: ${fingerprint}`);
|
|
89
|
+
}
|
|
90
|
+
await sendProgress(ctx, "info", "Generating Certificate Signing Request (CSR)...");
|
|
91
|
+
const deviceIdCSR = new DeviceIdCSR(sthis, deviceIdKey);
|
|
92
|
+
const subject = buildSubject(args);
|
|
93
|
+
const csrResult = await deviceIdCSR.createCSR(subject);
|
|
94
|
+
if (csrResult.isErr()) {
|
|
95
|
+
return Result.Err(`Failed to generate CSR: ${csrResult.Err()}`);
|
|
96
|
+
}
|
|
97
|
+
const csrJWS = csrResult.Ok();
|
|
98
|
+
await sendProgress(ctx, "info", "CSR generated successfully.");
|
|
99
|
+
const certFuture = new Future();
|
|
100
|
+
const app = new Hono();
|
|
101
|
+
app.get("/cert", (c) => {
|
|
102
|
+
const cert = c.req.query("cert");
|
|
103
|
+
if (!cert) {
|
|
104
|
+
certFuture.reject(new Error("Missing cert parameter"));
|
|
105
|
+
return c.text("Missing cert parameter", 400);
|
|
106
|
+
}
|
|
107
|
+
void sendProgress(ctx, "info", "\nCertificate received from CA!");
|
|
108
|
+
certFuture.resolve(cert);
|
|
109
|
+
return c.text("Certificate received successfully. You can close this window.");
|
|
110
|
+
});
|
|
111
|
+
const port = args.port ? parseInt(args.port, 10) : Math.floor(Math.random() * (65535 - 49152) + 49152);
|
|
112
|
+
const callbackUrl = `http://localhost:${port}/cert`;
|
|
113
|
+
await sendProgress(ctx, "info", `Starting local server on port ${port}...`);
|
|
114
|
+
const serverInstance = serve({
|
|
115
|
+
fetch: app.fetch,
|
|
116
|
+
port,
|
|
117
|
+
});
|
|
118
|
+
const caUri = BuildURI.from(args.caUrl).setParam("csr", csrJWS).setParam("returnUrl", callbackUrl);
|
|
119
|
+
const caUrlWithParams = caUri.toString();
|
|
120
|
+
await sendProgress(ctx, "info", "\nOpening browser to CA for certificate signing...");
|
|
121
|
+
await sendProgress(ctx, "info", `URL: ${caUrlWithParams}\n`);
|
|
122
|
+
try {
|
|
123
|
+
await open(caUrlWithParams);
|
|
124
|
+
}
|
|
125
|
+
catch {
|
|
126
|
+
await sendProgress(ctx, "warn", "Could not automatically open browser. Please open this URL manually:");
|
|
127
|
+
await sendProgress(ctx, "warn", caUrlWithParams);
|
|
128
|
+
}
|
|
129
|
+
await sendProgress(ctx, "info", "Waiting for certificate from CA...");
|
|
130
|
+
await sendProgress(ctx, "info", "(The browser should redirect back to this application after signing)\n");
|
|
131
|
+
const timeoutMs = parseInt(args.timeout, 10) * 1000;
|
|
132
|
+
const result = await timeouted(certFuture.asPromise(), { timeout: timeoutMs });
|
|
133
|
+
serverInstance.close();
|
|
134
|
+
if (!isSuccess(result)) {
|
|
135
|
+
if (isTimeout(result)) {
|
|
136
|
+
return Result.Err(`Timeout waiting for certificate from CA (${args.timeout}s).`);
|
|
137
|
+
}
|
|
138
|
+
else {
|
|
139
|
+
return Result.Err(`Failed to receive certificate: ${result.state === "error" ? result.error : result}`);
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
const receivedCert = result.value;
|
|
143
|
+
await sendProgress(ctx, "info", "Storing certificate...");
|
|
144
|
+
const decoded = decodeJwt(receivedCert);
|
|
145
|
+
const certPayload = CertificatePayloadSchema.parse(decoded);
|
|
146
|
+
const jwkPrivate = await deviceIdKey.exportPrivateJWK();
|
|
147
|
+
const certToStore = {
|
|
148
|
+
certificateJWT: receivedCert,
|
|
149
|
+
certificatePayload: certPayload,
|
|
150
|
+
};
|
|
151
|
+
await keyBag.setDeviceId(jwkPrivate, certToStore);
|
|
152
|
+
const fingerprint = await deviceIdKey.fingerPrint();
|
|
153
|
+
return sendMsg(ctx, {
|
|
154
|
+
type: "core-cli.res-device-id-register",
|
|
155
|
+
output: [
|
|
156
|
+
"\n✓ Registration complete! Certificate successfully stored with Device ID.",
|
|
157
|
+
`Device ID Fingerprint: ${fingerprint}`,
|
|
158
|
+
].join("\n"),
|
|
159
|
+
});
|
|
160
|
+
},
|
|
161
|
+
};
|
|
162
|
+
//# sourceMappingURL=register.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register.js","sourceRoot":"","sources":["../../jsr/device-id/register.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEpG,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAqB,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AASpE,SAAS,YAAY,CAAC,IAAyB;IAC7C,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,IAAI,CAAC,KAAK;QAC/B,WAAW,EAAE,IAAI,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,+BAA+B;IACrC,UAAU,EAAE,QAAQ;IACpB,YAAY,EAAE,QAAQ;IACtB,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,SAAS;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,mCAAmC;IACzC,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC;AAGH,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAmF;IACpH,IAAI,EAAE,6BAA6B;IACnC,QAAQ,EAAE,CAAC,GAAwF,EAAE,EAAE;QACrG,IAAI,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAgC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAsF,EAAE,EAAE;QACvG,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAa,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAChE,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO,OAAO,CAAC,GAAG,EAAE;gBAClB,IAAI,EAAE,iCAAiC;gBACvC,MAAM,EAAE;oBACN,4DAA4D;oBAC5D,6CAA6C;oBAC7C,mCAAmC,WAAW,EAAE;iBACjD,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,WAAwB,CAAC;QAC7B,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,oCAAoC,CAAC,CAAC;YACtE,WAAW,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC;YACxD,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC;YACpD,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,kCAAkC,WAAW,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5D,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,GAAG,CAAC,qCAAqC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,WAAW,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC;YACpD,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,0BAA0B,WAAW,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,iDAAiD,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,2BAA2B,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,MAAM,EAAU,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC;YAClE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;QACvG,MAAM,WAAW,GAAG,oBAAoB,IAAI,OAAO,CAAC;QACpD,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,iCAAiC,IAAI,KAAK,CAAC,CAAC;QAC5E,MAAM,cAAc,GAAG,KAAK,CAAC;YAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI;SACL,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACnG,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,oDAAoD,CAAC,CAAC;QACtF,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,eAAe,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,sEAAsE,CAAC,CAAC;YACxG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,oCAAoC,CAAC,CAAC;QACtE,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,wEAAwE,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC,GAAG,CAAC,4CAA4C,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,OAAO,MAAM,CAAC,GAAG,CAAC,kCAAkC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;QAClC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG;YAClB,cAAc,EAAE,YAAY;YAC5B,kBAAkB,EAAE,WAAW;SAChC,CAAC;QACF,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,EAAE,iCAAiC;YACvC,MAAM,EAAE;gBACN,4EAA4E;gBAC5E,0BAA0B,WAAW,EAAE;aACxC,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}
|
package/device-id/sign.d.ts
CHANGED
|
@@ -1,4 +1,6 @@
|
|
|
1
|
-
import type { BaseXXEndeCoder
|
|
1
|
+
import type { BaseXXEndeCoder } from "../types/sthis.js";
|
|
2
|
+
import type { CertificatePayload } from "../types/cert-payload.js";
|
|
3
|
+
import type { JWTPayload } from "../types/device-id-payload.js";
|
|
2
4
|
import { DeviceIdKey } from "./key.js";
|
|
3
5
|
export declare class DeviceIdSignMsg {
|
|
4
6
|
#private;
|
package/device-id/sign.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../jsr/device-id/sign.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAA+D,MAAM,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../jsr/device-id/sign.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAA+D,MAAM,MAAM,CAAC;AAIpH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,OAAO,eAAe;IACjB,IAAI,CAAc;IAClB,KAAK,CAAqB;IAC1B,eAAe,CAAU;IACzB,MAAM,CAAkB;IAEjC,YAAY,MAAuB,EAAE,GAAgB,EAAE,IAAwB,EAAE,cAAuB;QACtG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAuB,OAAU,EAAE,SAAS,GAAG,OAAO;QAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,eAAe,GAAwB;YAC3C,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,MAAM,sBAAsB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC;YACxE,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG;YACR,UAAU,EAAE,OAAO;SACpB,CAAC;QAIF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,eAAe,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QACpD,CAAC;QAKD,OAAO,MAAM,IAAI,OAAO,CAAC,OAAoC,CAAC;aAC3D,kBAAkB,CAAC,eAAe,CAAC;aACnC,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import type { SuperThis } from "../types/sthis.js";
|
|
2
|
+
import type { DeviceIdCAIf } from "../types/device-id-types.js";
|
|
3
|
+
import type { DashAuthType } from "../types/wire.js";
|
|
4
|
+
import { DeviceIdCA } from "./ca.js";
|
|
5
|
+
import { DeviceIdKey } from "./key.js";
|
|
6
|
+
import { DeviceIdSignMsg } from "./sign.js";
|
|
7
|
+
export declare function createTestDeviceCA(sthis: SuperThis): Promise<DeviceIdCA>;
|
|
8
|
+
export interface CreateTestUserParams {
|
|
9
|
+
readonly sthis: SuperThis;
|
|
10
|
+
readonly deviceCA: DeviceIdCAIf;
|
|
11
|
+
readonly session?: string;
|
|
12
|
+
readonly seqUserId?: number;
|
|
13
|
+
}
|
|
14
|
+
export interface TestUser {
|
|
15
|
+
readonly devkey: DeviceIdKey;
|
|
16
|
+
readonly deviceIdSigner: DeviceIdSignMsg;
|
|
17
|
+
getDashBoardToken(): Promise<DashAuthType>;
|
|
18
|
+
}
|
|
19
|
+
export declare function createTestUser({ sthis, session, seqUserId, deviceCA }: CreateTestUserParams): Promise<TestUser>;
|
|
@@ -0,0 +1,72 @@
|
|
|
1
|
+
import { Lazy } from "@adviser/cement";
|
|
2
|
+
import { DeviceIdCA } from "./ca.js";
|
|
3
|
+
import { DeviceIdKey } from "./key.js";
|
|
4
|
+
import { DeviceIdCSR } from "./csr.js";
|
|
5
|
+
import { DeviceIdSignMsg } from "./sign.js";
|
|
6
|
+
export async function createTestDeviceCA(sthis) {
|
|
7
|
+
const caKey = await DeviceIdKey.create();
|
|
8
|
+
const caSubject = {
|
|
9
|
+
commonName: "Test Device CA",
|
|
10
|
+
organization: "Test Organization",
|
|
11
|
+
locality: "Test City",
|
|
12
|
+
stateOrProvinceName: "Test State",
|
|
13
|
+
countryName: "US",
|
|
14
|
+
};
|
|
15
|
+
return new DeviceIdCA({
|
|
16
|
+
base64: sthis.txt.base64,
|
|
17
|
+
caKey,
|
|
18
|
+
caSubject,
|
|
19
|
+
actions: {
|
|
20
|
+
generateSerialNumber: async () => sthis.nextId(32).str,
|
|
21
|
+
},
|
|
22
|
+
});
|
|
23
|
+
}
|
|
24
|
+
const sessionId = Lazy((sthis) => sthis.nextId().str);
|
|
25
|
+
const seqUserIdGlobal = Lazy((sthis) => ({ id: parseInt(sessionId(sthis).replace(/[^0-9]/g, ""), 10) }));
|
|
26
|
+
export async function createTestUser({ sthis, session, seqUserId, deviceCA }) {
|
|
27
|
+
const devid = await DeviceIdKey.create();
|
|
28
|
+
const devkey = (await DeviceIdKey.createFromJWK(await devid.exportPrivateJWK())).Ok();
|
|
29
|
+
const deviceIdCSR = new DeviceIdCSR(sthis, devkey);
|
|
30
|
+
const rCsrResult = await deviceIdCSR.createCSR({ commonName: "test-device-id" });
|
|
31
|
+
const userId = `${session ?? sessionId(sthis)}-${seqUserId ?? seqUserIdGlobal(sthis).id++}`;
|
|
32
|
+
const rProcessResult = await deviceCA.processCSR(rCsrResult.Ok(), {
|
|
33
|
+
azp: `test-app-${userId}-${sthis.nextId().str}`,
|
|
34
|
+
exp: Math.floor(Date.now() / 1000) + 3600,
|
|
35
|
+
iat: Math.floor(Date.now() / 1000),
|
|
36
|
+
iss: "test-issuer",
|
|
37
|
+
jti: sthis.nextId().str,
|
|
38
|
+
nbf: Math.floor(Date.now() / 1000),
|
|
39
|
+
params: {
|
|
40
|
+
nick: `nick-${userId}`,
|
|
41
|
+
email: `email-${userId}@example.com`,
|
|
42
|
+
email_verified: true,
|
|
43
|
+
first: `first-${userId}`,
|
|
44
|
+
image_url: `http://example.com/image-${userId}.png`,
|
|
45
|
+
last: `last-${userId}`,
|
|
46
|
+
name: `name-${userId}`,
|
|
47
|
+
public_meta: `{ "role": "tester-${userId}" }`,
|
|
48
|
+
},
|
|
49
|
+
role: "device-id",
|
|
50
|
+
sub: `device-id-subject-${sthis.nextId().str}`,
|
|
51
|
+
userId: `user-id-${userId}`,
|
|
52
|
+
aud: ["http://test-audience.localhost/"],
|
|
53
|
+
});
|
|
54
|
+
const deviceIdSigner = new DeviceIdSignMsg(sthis.txt.base64, devkey, rProcessResult.Ok().certificatePayload);
|
|
55
|
+
let seq = 0;
|
|
56
|
+
const getDashBoardToken = async () => {
|
|
57
|
+
const now = Math.floor(Date.now() / 1000);
|
|
58
|
+
const token = await deviceIdSigner.sign({
|
|
59
|
+
iss: "app-id",
|
|
60
|
+
sub: "device-id",
|
|
61
|
+
deviceId: await devkey.fingerPrint(),
|
|
62
|
+
seq: ++seq,
|
|
63
|
+
exp: now + 120,
|
|
64
|
+
nbf: now - 2,
|
|
65
|
+
iat: now,
|
|
66
|
+
jti: sthis.nextId().str,
|
|
67
|
+
}, "ES256");
|
|
68
|
+
return { type: "device-id", token };
|
|
69
|
+
};
|
|
70
|
+
return { devkey, deviceIdSigner, getDashBoardToken };
|
|
71
|
+
}
|
|
72
|
+
//# sourceMappingURL=test-helpers.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../../jsr/device-id/test-helpers.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAIvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAgB;IACvD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG;QAChB,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,mBAAmB;QACjC,QAAQ,EAAE,WAAW;QACrB,mBAAmB,EAAE,YAAY;QACjC,WAAW,EAAE,IAAI;KAClB,CAAC;IACF,OAAO,IAAI,UAAU,CAAC;QACpB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM;QACxB,KAAK;QACL,SAAS;QACT,OAAO,EAAE;YACP,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;SACvD;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,KAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;AACjE,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,KAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAepH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAwB;IAChG,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IAC5F,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE;QAChE,GAAG,EAAE,YAAY,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC/C,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;QACzC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAClC,GAAG,EAAE,aAAa;QAClB,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG;QACvB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAClC,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ,MAAM,EAAE;YACtB,KAAK,EAAE,SAAS,MAAM,cAAc;YACpC,cAAc,EAAE,IAAI;YACpB,KAAK,EAAE,SAAS,MAAM,EAAE;YACxB,SAAS,EAAE,4BAA4B,MAAM,MAAM;YACnD,IAAI,EAAE,QAAQ,MAAM,EAAE;YACtB,IAAI,EAAE,QAAQ,MAAM,EAAE;YACtB,WAAW,EAAE,qBAAqB,MAAM,KAAK;SAC9C;QACD,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,qBAAqB,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC9C,MAAM,EAAE,WAAW,MAAM,EAAE;QAC3B,GAAG,EAAE,CAAC,iCAAiC,CAAC;KAChC,CAAC,CAAC;IACZ,MAAM,cAAc,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC7G,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,iBAAiB,GAAG,KAAK,IAA2B,EAAE;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CACrC;YACE,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,MAAM,MAAM,CAAC,WAAW,EAAE;YACpC,GAAG,EAAE,EAAE,GAAG;YACV,GAAG,EAAE,GAAG,GAAG,GAAG;YACd,GAAG,EAAE,GAAG,GAAG,CAAC;YACZ,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG;SACxB,EACD,OAAO,CACR,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AACvD,CAAC"}
|
package/device-id/validator.d.ts
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
import type { FPDeviceIDCSRPayload
|
|
1
|
+
import type { FPDeviceIDCSRPayload } from "../types/device-id-payload.js";
|
|
2
|
+
import type { JWKPublic } from "../types/wire.js";
|
|
2
3
|
interface ValidateCSRError {
|
|
3
4
|
readonly valid: false;
|
|
4
5
|
readonly error: string;
|