@virtru/dsp-sdk 0.2.3 → 0.3.0

package/src/gen/virtru/policy/certificates/v1/certificates_pb.ts

@@ -0,0 +1,260 @@
+// @generated by protoc-gen-es v2.3.0 with parameter "target=ts"
+// @generated from file virtru/policy/certificates/v1/certificates.proto (package virtru.policy.certificates.v1, syntax proto3)
+/* eslint-disable */
+
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv1";
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../../../buf/validate/validate_pb";
+import type { MetadataMutable, PageRequest, PageResponse } from "../../../common/common_pb";
+import { file_virtru_common_common } from "../../../common/common_pb";
+import type { Algorithm, Certificate, KeyMode, KeyStatus } from "../../objects_pb";
+import { file_virtru_policy_objects } from "../../objects_pb";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file virtru/policy/certificates/v1/certificates.proto.
+ */
+export const file_virtru_policy_certificates_v1_certificates: GenFile = /*@__PURE__*/
+  fileDesc("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", [file_buf_validate_validate, file_virtru_common_common, file_virtru_policy_objects]);
+
+/**
+ * Maps a namespace to a certificate (similar to NamespaceKey pattern)
+ *
+ * @generated from message virtru.policy.certificates.v1.NamespaceCertificate
+ */
+export type NamespaceCertificate = Message<"virtru.policy.certificates.v1.NamespaceCertificate"> & {
+  /**
+   * Required - namespace id
+   *
+   * @generated from field: string namespace_id = 1;
+   */
+  namespaceId: string;
+
+  /**
+   * Required (The id from the Certificate object)
+   *
+   * @generated from field: string certificate_id = 2;
+   */
+  certificateId: string;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.NamespaceCertificate.
+ * Use `create(NamespaceCertificateSchema)` to create a new message.
+ */
+export const NamespaceCertificateSchema: GenMessage<NamespaceCertificate> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 0);
+
+/**
+ * @generated from message virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest
+ */
+export type ListCertificatesByNamespaceRequest = Message<"virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest"> & {
+  /**
+   * Required - namespace id
+   *
+   * @generated from field: string namespace_id = 1;
+   */
+  namespaceId: string;
+
+  /**
+   * Optional pagination information
+   *
+   * @generated from field: virtru.common.PageRequest pagination = 10;
+   */
+  pagination?: PageRequest;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.ListCertificatesByNamespaceRequest.
+ * Use `create(ListCertificatesByNamespaceRequestSchema)` to create a new message.
+ */
+export const ListCertificatesByNamespaceRequestSchema: GenMessage<ListCertificatesByNamespaceRequest> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 1);
+
+/**
+ * ListCertificatesByNamespaceResponse is the response message for the ListCertificatesByNamespace method.
+ *
+ * @generated from message virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse
+ */
+export type ListCertificatesByNamespaceResponse = Message<"virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse"> & {
+  /**
+   * The list of certificates for the specified namespace.
+   *
+   * @generated from field: repeated virtru.policy.Certificate certificates = 1;
+   */
+  certificates: Certificate[];
+
+  /**
+   * Pagination information
+   *
+   * @generated from field: virtru.common.PageResponse pagination = 10;
+   */
+  pagination?: PageResponse;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.ListCertificatesByNamespaceResponse.
+ * Use `create(ListCertificatesByNamespaceResponseSchema)` to create a new message.
+ */
+export const ListCertificatesByNamespaceResponseSchema: GenMessage<ListCertificatesByNamespaceResponse> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 2);
+
+/**
+ * @generated from message virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest
+ */
+export type AssignCertificateToNamespaceRequest = Message<"virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest"> & {
+  /**
+   * Required - namespace id
+   *
+   * @generated from field: string namespace_id = 1;
+   */
+  namespaceId: string;
+
+  /**
+   * Required - PEM format certificate
+   *
+   * @generated from field: string pem = 2;
+   */
+  pem: string;
+
+  /**
+   * @generated from field: string key_id = 3;
+   */
+  keyId: string;
+
+  /**
+   * The algorithm to be used for the key
+   *
+   * @generated from field: virtru.policy.Algorithm key_algorithm = 4;
+   */
+  keyAlgorithm: Algorithm;
+
+  /**
+   * @generated from field: string name = 5;
+   */
+  name: string;
+
+  /**
+   * The status of the key
+   *
+   * @generated from field: virtru.policy.KeyStatus key_status = 6;
+   */
+  keyStatus: KeyStatus;
+
+  /**
+   * The mode of the key
+   *
+   * @generated from field: virtru.policy.KeyMode key_mode = 7;
+   */
+  keyMode: KeyMode;
+
+  /**
+   * Optional
+   *
+   * @generated from field: virtru.common.MetadataMutable metadata = 100;
+   */
+  metadata?: MetadataMutable;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.AssignCertificateToNamespaceRequest.
+ * Use `create(AssignCertificateToNamespaceRequestSchema)` to create a new message.
+ */
+export const AssignCertificateToNamespaceRequestSchema: GenMessage<AssignCertificateToNamespaceRequest> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 3);
+
+/**
+ * @generated from message virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse
+ */
+export type AssignCertificateToNamespaceResponse = Message<"virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse"> & {
+  /**
+   * The mapping of the namespace to the certificate.
+   *
+   * @generated from field: virtru.policy.certificates.v1.NamespaceCertificate namespace_certificate = 1;
+   */
+  namespaceCertificate?: NamespaceCertificate;
+
+  /**
+   * Return the full certificate object for convenience
+   *
+   * @generated from field: virtru.policy.Certificate certificate = 2;
+   */
+  certificate?: Certificate;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.AssignCertificateToNamespaceResponse.
+ * Use `create(AssignCertificateToNamespaceResponseSchema)` to create a new message.
+ */
+export const AssignCertificateToNamespaceResponseSchema: GenMessage<AssignCertificateToNamespaceResponse> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 4);
+
+/**
+ * @generated from message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest
+ */
+export type RemoveCertificateFromNamespaceRequest = Message<"virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest"> & {
+  /**
+   * The namespace and certificate to unassign.
+   *
+   * @generated from field: virtru.policy.certificates.v1.NamespaceCertificate namespace_certificate = 1;
+   */
+  namespaceCertificate?: NamespaceCertificate;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceRequest.
+ * Use `create(RemoveCertificateFromNamespaceRequestSchema)` to create a new message.
+ */
+export const RemoveCertificateFromNamespaceRequestSchema: GenMessage<RemoveCertificateFromNamespaceRequest> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 5);
+
+/**
+ * @generated from message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse
+ */
+export type RemoveCertificateFromNamespaceResponse = Message<"virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse"> & {
+  /**
+   * The unassigned namespace and certificate.
+   *
+   * @generated from field: virtru.policy.certificates.v1.NamespaceCertificate namespace_certificate = 1;
+   */
+  namespaceCertificate?: NamespaceCertificate;
+};
+
+/**
+ * Describes the message virtru.policy.certificates.v1.RemoveCertificateFromNamespaceResponse.
+ * Use `create(RemoveCertificateFromNamespaceResponseSchema)` to create a new message.
+ */
+export const RemoveCertificateFromNamespaceResponseSchema: GenMessage<RemoveCertificateFromNamespaceResponse> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_certificates_v1_certificates, 6);
+
+/**
+ * @generated from service virtru.policy.certificates.v1.CertificateService
+ */
+export const CertificateService: GenService<{
+  /**
+   * @generated from rpc virtru.policy.certificates.v1.CertificateService.ListCertificatesByNamespace
+   */
+  listCertificatesByNamespace: {
+    methodKind: "unary";
+    input: typeof ListCertificatesByNamespaceRequestSchema;
+    output: typeof ListCertificatesByNamespaceResponseSchema;
+  },
+  /**
+   * @generated from rpc virtru.policy.certificates.v1.CertificateService.AssignCertificateToNamespace
+   */
+  assignCertificateToNamespace: {
+    methodKind: "unary";
+    input: typeof AssignCertificateToNamespaceRequestSchema;
+    output: typeof AssignCertificateToNamespaceResponseSchema;
+  },
+  /**
+   * @generated from rpc virtru.policy.certificates.v1.CertificateService.RemoveCertificateFromNamespace
+   */
+  removeCertificateFromNamespace: {
+    methodKind: "unary";
+    input: typeof RemoveCertificateFromNamespaceRequestSchema;
+    output: typeof RemoveCertificateFromNamespaceResponseSchema;
+  },
+}> = /*@__PURE__*/
+  serviceDesc(file_virtru_policy_certificates_v1_certificates, 0);
+

package/src/gen/virtru/policy/objects_pb.ts

@@ -0,0 +1,235 @@
+// @generated by protoc-gen-es v2.3.0 with parameter "target=ts"
+// @generated from file virtru/policy/objects.proto (package virtru.policy, syntax proto3)
+/* eslint-disable */
+
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_buf_validate_validate } from "../../buf/validate/validate_pb";
+import type { Metadata } from "../common/common_pb";
+import { file_virtru_common_common } from "../common/common_pb";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file virtru/policy/objects.proto.
+ */
+export const file_virtru_policy_objects: GenFile = /*@__PURE__*/
+  fileDesc("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", [file_buf_validate_validate, file_virtru_common_common]);
+
+/**
+ * @generated from message virtru.policy.Certificate
+ */
+export type Certificate = Message<"virtru.policy.Certificate"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * @generated from field: string key_id = 2;
+   */
+  keyId: string;
+
+  /**
+   * @generated from field: virtru.policy.Algorithm key_algorithm = 3;
+   */
+  keyAlgorithm: Algorithm;
+
+  /**
+   * @generated from field: virtru.policy.KeyStatus key_status = 4;
+   */
+  keyStatus: KeyStatus;
+
+  /**
+   * @generated from field: string pem = 5;
+   */
+  pem: string;
+
+  /**
+   * The name of the certificate.
+   *
+   * @generated from field: string name = 6;
+   */
+  name: string;
+
+  /**
+   * The key mode of the certificate.
+   *
+   * @generated from field: virtru.policy.KeyMode key_mode = 7;
+   */
+  keyMode: KeyMode;
+
+  /**
+   * The fingerprint of the certificate.
+   *
+   * @generated from field: string fingerprint = 8;
+   */
+  fingerprint: string;
+
+  /**
+   * @generated from field: virtru.common.Metadata metadata = 100;
+   */
+  metadata?: Metadata;
+};
+
+/**
+ * Describes the message virtru.policy.Certificate.
+ * Use `create(CertificateSchema)` to create a new message.
+ */
+export const CertificateSchema: GenMessage<Certificate> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_objects, 0);
+
+/**
+ * @generated from message virtru.policy.CertificateMapping
+ */
+export type CertificateMapping = Message<"virtru.policy.CertificateMapping"> & {
+  /**
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * @generated from field: string certificate_id = 2;
+   */
+  certificateId: string;
+
+  /**
+   * @generated from field: string namespace_id = 3;
+   */
+  namespaceId: string;
+
+  /**
+   * @generated from field: virtru.common.Metadata metadata = 100;
+   */
+  metadata?: Metadata;
+};
+
+/**
+ * Describes the message virtru.policy.CertificateMapping.
+ * Use `create(CertificateMappingSchema)` to create a new message.
+ */
+export const CertificateMappingSchema: GenMessage<CertificateMapping> = /*@__PURE__*/
+  messageDesc(file_virtru_policy_objects, 1);
+
+/**
+ * @generated from enum virtru.policy.Algorithm
+ */
+export enum Algorithm {
+  /**
+   * @generated from enum value: ALGORITHM_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * @generated from enum value: ALGORITHM_RSA_2048 = 1;
+   */
+  RSA_2048 = 1,
+
+  /**
+   * @generated from enum value: ALGORITHM_RSA_4096 = 2;
+   */
+  RSA_4096 = 2,
+
+  /**
+   * @generated from enum value: ALGORITHM_EC_P256 = 3;
+   */
+  EC_P256 = 3,
+
+  /**
+   * @generated from enum value: ALGORITHM_EC_P384 = 4;
+   */
+  EC_P384 = 4,
+
+  /**
+   * @generated from enum value: ALGORITHM_EC_P521 = 5;
+   */
+  EC_P521 = 5,
+}
+
+/**
+ * Describes the enum virtru.policy.Algorithm.
+ */
+export const AlgorithmSchema: GenEnum<Algorithm> = /*@__PURE__*/
+  enumDesc(file_virtru_policy_objects, 0);
+
+/**
+ * @generated from enum virtru.policy.KeyStatus
+ */
+export enum KeyStatus {
+  /**
+   * @generated from enum value: KEY_STATUS_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * @generated from enum value: KEY_STATUS_ACTIVE = 1;
+   */
+  ACTIVE = 1,
+
+  /**
+   * @generated from enum value: KEY_STATUS_ROTATED = 2;
+   */
+  ROTATED = 2,
+}
+
+/**
+ * Describes the enum virtru.policy.KeyStatus.
+ */
+export const KeyStatusSchema: GenEnum<KeyStatus> = /*@__PURE__*/
+  enumDesc(file_virtru_policy_objects, 1);
+
+/**
+ * Describes the management and operational mode of a cryptographic key.
+ *
+ * @generated from enum virtru.policy.KeyMode
+ */
+export enum KeyMode {
+  /**
+   * KEY_MODE_UNSPECIFIED: Default, unspecified key mode. Indicates an uninitialized or error state.
+   *
+   * @generated from enum value: KEY_MODE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * KEY_MODE_CONFIG_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
+   * sourced from local configuration. Unwrapping and all cryptographic operations are performed locally.
+   *
+   * @generated from enum value: KEY_MODE_CONFIG_ROOT_KEY = 1;
+   */
+  CONFIG_ROOT_KEY = 1,
+
+  /**
+   * KEY_MODE_PROVIDER_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
+   * managed by an external provider (e.g., a Hardware Security Module or Cloud KMS).
+   * Key unwrapping is delegated to the external provider; subsequent cryptographic operations
+   * are performed locally using the unwrapped key.
+   *
+   * @generated from enum value: KEY_MODE_PROVIDER_ROOT_KEY = 2;
+   */
+  PROVIDER_ROOT_KEY = 2,
+
+  /**
+   * KEY_MODE_REMOTE: Remote key management where the private key is stored in, and all cryptographic
+   * operations are performed by, a remote Key Management Service (KMS) or HSM.
+   * The private key material never leaves the secure boundary of the remote system.
+   *
+   * @generated from enum value: KEY_MODE_REMOTE = 3;
+   */
+  REMOTE = 3,
+
+  /**
+   * KEY_MODE_PUBLIC_KEY_ONLY: Public key only mode. Used when only a public key is available or required,
+   * typically for wrapping operations (e.g., encrypting a Data Encryption Key (DEK) for an external KAS).
+   * The corresponding private key is not managed or accessible by this system.
+   *
+   * @generated from enum value: KEY_MODE_PUBLIC_KEY_ONLY = 4;
+   */
+  PUBLIC_KEY_ONLY = 4,
+}
+
+/**
+ * Describes the enum virtru.policy.KeyMode.
+ */
+export const KeyModeSchema: GenEnum<KeyMode> = /*@__PURE__*/
+  enumDesc(file_virtru_policy_objects, 2);
+

package/src/index.ts

@@ -22,7 +22,21 @@ export {
   DSPClient,
 } from './lib/client';
 export { PlatformClient } from '@opentdf/sdk/platform';
-export { createAuthInterceptor, type Interceptor } from './lib/utils';
+export {
+  createAuthInterceptor,
+  type Interceptor,
+  createAuthProvider,
+  createOpenTDFClient,
+  getObligations,
+  getUserEntitlements,
+  flattenObligations,
+  getTrustedCertificates,
+  validateJWSCertificateChain,
+  type JWSValidationResult,
+  type ObligationFeatureMap,
+  type SupportedObligations,
+  type GetUserEntitlementsResponse,
+} from './lib/utils';
 
 /**
  * Exports the DSP wrapper of OpenTDF

package/src/lib/client.ts

@@ -15,6 +15,7 @@ import { PolicyArtifactService } from '../gen/policyimportexport/v1/policy_impor
 import { SharedService } from '../gen/shared/v1/shared_pb';
 import { TaggingPDPService } from '../gen/tagging/pdp/v2/tagging_pb';
 import { VersionService } from '../gen/version/v1/version_pb';
+import { CertificateService } from '../gen/virtru/policy/certificates/v1/certificates_pb';
 import { createAuthInterceptor } from './utils';
 
 export interface DSPClientServicesV1 {
@@ -22,6 +23,7 @@ export interface DSPClientServicesV1 {
   policyArtifactService: Client<typeof PolicyArtifactService>;
   sharedService: Client<typeof SharedService>;
   versionService: Client<typeof VersionService>;
+  certificateService: Client<typeof CertificateService>;
 }
 
 export interface DSPClientServicesV2 {
@@ -74,6 +76,7 @@ export class DSPClient {
       policyArtifactService: createClient(PolicyArtifactService, transport),
       sharedService: createClient(SharedService, transport),
       versionService: createClient(VersionService, transport),
+      certificateService: createClient(CertificateService, transport),
     };
 
     this.v2 = {

package/src/lib/consts.ts

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) Virtru Corporation.  All rights reserved.
+ *
+ * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
+ */
+
+export const MAX_CERTS = 10; // reasonable upper bound for chain depth
+export const MAX_CERT_BYTES = 64 * 1024; // 64KB per certificate