@virtru/dsp-sdk 0.4.1 → 0.6.0

package/dist/src/lib/utils.js

@@ -4,6 +4,7 @@
  * Your use of this file is governed by the Virtu Terms of Service <https://www.virtru.com/terms-of-service/>.
  */
 import { AuthProviders, OpenTDF, PermissionDeniedError, } from '@opentdf/sdk';
+import { WebCryptoService } from '@opentdf/sdk/singlecontainer';
 import { PlatformClient } from '@opentdf/sdk/platform';
 import { ActiveStateEnum } from '@opentdf/sdk/platform/common/common_pb.js';
 import * as asn1js from 'asn1js';
@@ -21,7 +22,7 @@ import { DSPClient } from './client';
  * @param authProvider - An instance of `AuthProvider` used to generate authentication credentials.
  * @returns An `Interceptor` function that modifies requests to include authentication headers.
  */
-export function createAuthInterceptor(authProvider) {
+export function createAuthInterceptor(authProvider, _cryptoService) {
     return (next) => async (req) => {
         const url = new URL(req.url);
         const pathOnly = url.pathname;
@@ -67,6 +68,7 @@ export async function createOpenTDFClient(options) {
             noVerify: true,
         },
         disableDPoP: true,
+        cryptoService: options.cryptoService,
     });
 }
 export const getObligations = async (ciphertext, options) => {
@@ -92,6 +94,7 @@ export async function getUserEntitlements(options) {
     const authProvider = await createAuthProvider({
         oidc: options.oidc,
         refreshToken: options.refreshToken,
+        cryptoService: options.cryptoService,
     });
     const accessToken = await authProvider.oidcAuth.get();
     const userEntitlementsResponse = await fetch(`${options.platformEndpoint}/shared/entitlements`, {
@@ -174,17 +177,13 @@ async function getCertificatesForNamespace(dspClient, namespaceId) {
  * ```
  */
 export async function getTrustedCertificates(options) {
-    function generateSigningKeyPair() {
-        return crypto.subtle.generateKey({
-            name: 'ECDSA',
-            namedCurve: 'P-256',
-        }, true, ['sign', 'verify']);
-    }
+    const cs = options.cryptoService ?? WebCryptoService;
     const authProvider = await createAuthProvider({
         oidc: options.oidc,
         refreshToken: options.refreshToken,
+        cryptoService: options.cryptoService,
     });
-    await authProvider.updateClientPublicKey(await generateSigningKeyPair());
+    await authProvider.updateClientPublicKey(await cs.generateSigningKeyPair());
     // Create both clients
     const platform = new PlatformClient({
         authProvider,
@@ -300,7 +299,7 @@ function pemToArrayBuffer(pem) {
  * }
  * ```
  */
-export async function validateJWSCertificateChain(x5c, trustedRootCertificates) {
+export async function validateJWSCertificateChain(x5c, trustedRootCertificates, _cryptoService) {
     const warnings = [];
     try {
         // Validate inputs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@virtru/dsp-sdk",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "license": "SEE LICENSE IN LICENSE",
   "main": "dist/src/index.js",
   "exports": {
@@ -9,12 +9,24 @@
       "import": "./dist/src/index.js",
       "require": "./dist-commonjs/src/index.js"
     },
+    "./fips": {
+      "types": "./dist/src/fips.d.ts",
+      "import": "./dist/src/fips.js",
+      "require": "./dist-commonjs/src/fips.js"
+    },
     "./platform/*": {
       "types": "./dist/src/gen/*.d.ts",
       "import": "./dist/src/gen/*.js",
       "require": "./dist-commonjs/src/gen/*.js"
     }
   },
+  "files": [
+    "dist/src/**",
+    "dist-commonjs/src/**",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
   "engines": {
     "node": ">=18.0.0"
   },
@@ -24,6 +36,7 @@
     "@rushstack/heft-web-rig": "^1.3.0",
     "@types/node": "^22.0.0",
     "@vitest/browser": "~3.1.3",
+    "buffer": "^6.0.3",
     "eslint": "^9.17.0",
     "eslint-plugin-prettier": "^5.2.1",
     "globals": "^16.3.0",
@@ -34,23 +47,36 @@
     "typescript-eslint": "^8.39.1",
     "vite": "^5.4.21",
     "vite-plugin-dts": "^4.5.4",
-    "vitest": "~3.1.3"
+    "vitest": "~3.1.3",
+    "@virtru-private/fips-crypto-js": "0.3.0"
   },
   "dependencies": {
     "@bufbuild/protobuf": "^2.7.0",
     "@connectrpc/connect": "~2.0.2",
     "@connectrpc/connect-web": "~2.0.2",
-    "@opentdf/sdk": "0.9.0-rc.82",
+    "@opentdf/sdk": "0.10.0-rc.97",
     "asn1js": "^3.0.5",
     "pkijs": "^3.0.19"
   },
+  "peerDependencies": {
+    "@virtru-private/fips-crypto-js": "0.3.0"
+  },
+  "peerDependenciesMeta": {
+    "@virtru-private/fips-crypto-js": {
+      "optional": true
+    }
+  },
   "scripts": {
     "build": "heft build --clean",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
-    "test": "vitest --run",
+    "test": "npm run test:unit && npm run test:integration",
+    "test:unit": "npm run build-fips-crypto && npm run copy-wasm && npx vitest --run --config vitest.config.ts",
+    "test:integration": "npm run build-fips-crypto && npm run copy-wasm && npx vitest --run --config vitest.integration.config.ts",
     "update-protos": "./update-protos.sh",
+    "build-fips-crypto": "npm run build --prefix ../fips-crypto-js",
+    "copy-wasm": "mkdir -p public && cp ../fips-crypto-js/src/utils/virtru.wasm public/virtru.wasm",
     "_phase:build": "heft build --clean",
-    "_phase:test": "npm run test && heft test"
+    "_phase:test": "npm run build-fips-crypto && npm run copy-wasm && npm run test:unit && heft test"
   }
 }

package/.prettierrc

@@ -1,3 +0,0 @@
-{
-  "singleQuote": true
-}

package/.rush/temp/chunked-rush-logs/dsp-sdk._phase_build.chunks.jsonl

@@ -1,12 +0,0 @@
-{"kind":"O","text":"Invoking: heft build --clean --production\n"}
-{"kind":"O","text":" ---- build started ---- \n"}
-{"kind":"O","text":"[build:set-browserslist-ignore-old-data-env-var] Setting environment variable BROWSERSLIST_IGNORE_OLD_DATA=1\n"}
-{"kind":"O","text":"[build:sass] Starting...\n"}
-{"kind":"O","text":"[build:image-typings] Processing static assets...\n"}
-{"kind":"O","text":"[build:image-typings] Finished processing static assets.\n"}
-{"kind":"O","text":"[build:sass] No SCSS files to process.\n"}
-{"kind":"O","text":"[build:typescript] Using TypeScript version 5.8.2\n"}
-{"kind":"O","text":"[build:webpack] No Webpack configuration found\n"}
-{"kind":"O","text":"[build:lint] Using ESLint version 9.39.3\n"}
-{"kind":"O","text":" ---- build finished (7.235s) ---- \n"}
-{"kind":"O","text":"-------------------- Finished (7.239s) --------------------\n"}

package/.rush/temp/chunked-rush-logs/dsp-sdk._phase_test.chunks.jsonl

@@ -1,43 +0,0 @@
-{"kind":"O","text":"Invoking: npm run test && heft test --production\n"}
-{"kind":"O","text":"\n"}
-{"kind":"O","text":"> @virtru/dsp-sdk@0.4.0 test\n"}
-{"kind":"O","text":"> vitest --run\n"}
-{"kind":"O","text":"\n"}
-{"kind":"E","text":"\u001b[33mThe CJS build of Vite's Node API is deprecated. See https://vite.dev/guide/troubleshooting.html#vite-cjs-node-api-deprecated for more details.\u001b[39m\n"}
-{"kind":"O","text":"\n"}
-{"kind":"O","text":"\u001b[1m\u001b[46m RUN \u001b[49m\u001b[22m \u001b[36mv3.1.4 \u001b[39m\u001b[90m/home/runner/_work/js-lib-monorepo/js-lib-monorepo/libraries/dsp-sdk\u001b[39m\n"}
-{"kind":"O","text":"\n"}
-{"kind":"O","text":" \u001b[32m✓\u001b[39m src/lib/utils.test.ts \u001b[2m(\u001b[22m\u001b[2m16 tests\u001b[22m\u001b[2m)\u001b[22m\u001b[32m 67\u001b[2mms\u001b[22m\u001b[39m\n"}
-{"kind":"O","text":" \u001b[32m✓\u001b[39m tests/dsp-client.test.ts \u001b[2m(\u001b[22m\u001b[2m5 tests\u001b[22m\u001b[2m)\u001b[22m\u001b[32m 32\u001b[2mms\u001b[22m\u001b[39m\n"}
-{"kind":"E","text":"\u001b[90mstderr\u001b[2m | tests/dsp.test.ts\u001b[2m > \u001b[22m\u001b[2mshould throw an error if platformUrl is not provided\n"}
-{"kind":"E","text":"\u001b[22m\u001b[39mWarning: 'platformUrl' is required for security to ensure the SDK uses the platform-configured Key Access Server list\n"}
-{"kind":"E","text":"\n"}
-{"kind":"O","text":" \u001b[32m✓\u001b[39m tests/dsp.test.ts \u001b[2m(\u001b[22m\u001b[2m8 tests\u001b[22m\u001b[2m)\u001b[22m\u001b[32m 68\u001b[2mms\u001b[22m\u001b[39m\n"}
-{"kind":"O","text":"\n"}
-{"kind":"O","text":"\u001b[2m Test Files \u001b[22m \u001b[1m\u001b[32m3 passed\u001b[39m\u001b[22m\u001b[90m (3)\u001b[39m\n"}
-{"kind":"O","text":"\u001b[2m      Tests \u001b[22m \u001b[1m\u001b[32m29 passed\u001b[39m\u001b[22m\u001b[90m (29)\u001b[39m\n"}
-{"kind":"O","text":"\u001b[2m   Start at \u001b[22m 16:23:32\n"}
-{"kind":"O","text":"\u001b[2m   Duration \u001b[22m 5.24s\u001b[2m (transform 887ms, setup 0ms, collect 4.93s, tests 166ms, environment 4.46s, prepare 1.48s)\u001b[22m\n"}
-{"kind":"O","text":"\n"}
-{"kind":"O","text":" ---- build started ---- \n"}
-{"kind":"O","text":"[build:set-browserslist-ignore-old-data-env-var] Setting environment variable BROWSERSLIST_IGNORE_OLD_DATA=1\n"}
-{"kind":"O","text":"[build:sass] Starting...\n"}
-{"kind":"O","text":"[build:image-typings] Processing static assets...\n"}
-{"kind":"O","text":"[build:image-typings] Finished processing static assets.\n"}
-{"kind":"O","text":"[build:sass] No SCSS files to process.\n"}
-{"kind":"O","text":"[build:typescript] Using TypeScript version 5.8.2\n"}
-{"kind":"O","text":"[build:webpack] No Webpack configuration found\n"}
-{"kind":"O","text":"[build:lint] Using ESLint version 9.39.3\n"}
-{"kind":"O","text":" ---- build finished (11.532s) ---- \n"}
-{"kind":"O","text":" ---- test started ---- \n"}
-{"kind":"O","text":"[test:jest] Using Jest version 29.5.0\n"}
-{"kind":"O","text":"No tests found, exiting with code 0\n"}
-{"kind":"O","text":"[test:jest] \n"}
-{"kind":"O","text":"[test:jest] Run start. 0 test suites\n"}
-{"kind":"O","text":"[test:jest] \n"}
-{"kind":"O","text":"[test:jest] Tests finished:\n"}
-{"kind":"O","text":"[test:jest]   Successes: 0\n"}
-{"kind":"O","text":"[test:jest]   Failures: 0\n"}
-{"kind":"O","text":"[test:jest]   Total: 0\n"}
-{"kind":"O","text":" ---- test finished (0.344s) ---- \n"}
-{"kind":"O","text":"-------------------- Finished (11.889s) --------------------\n"}

package/.rush/temp/package-deps__phase_build.json

@@ -1,68 +0,0 @@
-{
-  "files": {
-    "libraries/dsp-sdk/.gitignore": "63ff9c3c57396245247098596ed79b36fd1d76a6",
-    "libraries/dsp-sdk/.prettierrc": "544138be45652abc7bc3873341deacd3f4f90c61",
-    "libraries/dsp-sdk/.rush/temp/shrinkwrap-deps.json": "f96efa697a0f3f1a9dbe4a73219cd27c1d47a0f9",
-    "libraries/dsp-sdk/CHANGELOG.json": "9501d8251791ea3b51e5c512591c0f4713be48aa",
-    "libraries/dsp-sdk/CHANGELOG.md": "88a2da5870f26cc74ca9de0d8e27822db23b8c20",
-    "libraries/dsp-sdk/LICENSE": "5e54fddf2616afa01260ae06b6b1f09e07d71077",
-    "libraries/dsp-sdk/README.md": "c967a7dcf3b90e49fa4c7f400ffe6ad46ba80edc",
-    "libraries/dsp-sdk/buf.gen.yaml": "0b5a95cb8a60b7e8f29cb816359fe7ce6cfc5a7e",
-    "libraries/dsp-sdk/buf.yaml": "c135bda377d5b6c143504328b57e85ed816dfa13",
-    "libraries/dsp-sdk/config/jest.config.json": "c2d3e44f320a6703b01ad6ac1fc562a9400e31a7",
-    "libraries/dsp-sdk/config/rig.json": "a75d77481094429136022458a72d3a98973e2c42",
-    "libraries/dsp-sdk/eslint.config.mjs": "a0b9402f6b9a945b8610d66a0b564c7b59238aba",
-    "libraries/dsp-sdk/package.json": "5db7dcb3bb2aec6e14592c63a7e4997a11270e18",
-    "libraries/dsp-sdk/src/gen/buf/validate/validate_pb.ts": "f944ab8ae554fdc9cc773fdd55fd90557407f8c6",
-    "libraries/dsp-sdk/src/gen/config/formatters/testdata/v1/test_pb.ts": "6875e00a5ea2500550890b52aa82b98ccba04692",
-    "libraries/dsp-sdk/src/gen/config/v1/config_connect.ts": "c9a01a4aa689225187c3dcdd2fb7d530d2ebdfe8",
-    "libraries/dsp-sdk/src/gen/config/v1/config_pb.ts": "1857dfab96f7258da75adaaaca84c277357fd0fe",
-    "libraries/dsp-sdk/src/gen/config/v1/kas_config_pb.ts": "0f5d9dfcef501767e3102329cfb2c01198382363",
-    "libraries/dsp-sdk/src/gen/config/v1/meta_pb.ts": "e895cd00db68fb3e164c0f9d1d22aa91ce9a04fb",
-    "libraries/dsp-sdk/src/gen/config/v1/outlook_config_pb.ts": "a8aad41c48ef6308970bb3a926b9af9ab72e4738",
-    "libraries/dsp-sdk/src/gen/config/v1/secureviewer_config_pb.ts": "336f2f630d9867dfb11764f452d3cf7d4d54490c",
-    "libraries/dsp-sdk/src/gen/config/v1/tagging_pb.ts": "a2ede7bd585311db0443a617979725332c2f600f",
-    "libraries/dsp-sdk/src/gen/google/api/annotations_pb.ts": "055c67af9722191301430f4b0cd89864e842ccef",
-    "libraries/dsp-sdk/src/gen/google/api/http_pb.ts": "5d02eb9453fa2a4b3acbfabde8bdb0e5c99af73d",
-    "libraries/dsp-sdk/src/gen/helloworld/v1/helloworld_connect.ts": "584bf66153bb7d1057deb01a4181864a5b8aa6fa",
-    "libraries/dsp-sdk/src/gen/helloworld/v1/helloworld_pb.ts": "21a4157de1a6dd068267cabfc24460836b6acbd7",
-    "libraries/dsp-sdk/src/gen/kas/nanotdf/v1/nanotdf_rewrap_connect.ts": "e1523e8a4dfc5a8b31a6a89b33d717acc8580e0a",
-    "libraries/dsp-sdk/src/gen/kas/nanotdf/v1/nanotdf_rewrap_pb.ts": "c51f1ef293046d45764a9b4608a15cbb911182aa",
-    "libraries/dsp-sdk/src/gen/policyimportexport/v1/policy_import_export_connect.ts": "e074bf2f8e0d4e1589b6aec9b7f2e294c0948ef3",
-    "libraries/dsp-sdk/src/gen/policyimportexport/v1/policy_import_export_pb.ts": "e19238fc130cb80db3ec2601bf0552c0e5ac8a8d",
-    "libraries/dsp-sdk/src/gen/shared/v1/shared_connect.ts": "c50d9cf0b8fd44bba4b923482f32720029b5ce5d",
-    "libraries/dsp-sdk/src/gen/shared/v1/shared_pb.ts": "d839e04c4e8a246b54366897c4536a9c27e1d3c1",
-    "libraries/dsp-sdk/src/gen/shared/v2/shared_connect.ts": "84cd7177f7842d2f4b75d8a97b4d14453507dbbd",
-    "libraries/dsp-sdk/src/gen/shared/v2/shared_pb.ts": "0a3fc851ec6c333883849797374db166bce11d7a",
-    "libraries/dsp-sdk/src/gen/tagging/pdp/v2/externalprocessors/processor_connect.ts": "f38594100daaaaec72957577c6194b5c22d72ecc",
-    "libraries/dsp-sdk/src/gen/tagging/pdp/v2/externalprocessors/processor_pb.ts": "b860748174906cd7306b465ab08871bf30535c9a",
-    "libraries/dsp-sdk/src/gen/tagging/pdp/v2/stanag/stanag_pb.ts": "0e27454e14de6012a69de4c38a4198f0f4c23aeb",
-    "libraries/dsp-sdk/src/gen/tagging/pdp/v2/tagging_connect.ts": "32123a68ef05038afe90247f91dd6d0dc0cff58f",
-    "libraries/dsp-sdk/src/gen/tagging/pdp/v2/tagging_pb.ts": "0775584ab0bf384e15e82898b44ad55dfcd76894",
-    "libraries/dsp-sdk/src/gen/version/v1/version_connect.ts": "15b41570b808fdae8f9039b4a867f5d6db88aeff",
-    "libraries/dsp-sdk/src/gen/version/v1/version_pb.ts": "1d566636fe3011499fdbf21269537a677e3c3227",
-    "libraries/dsp-sdk/src/gen/virtru/common/common_pb.ts": "2506135ce26ff8ec0cdd686f462eceb1d15a532f",
-    "libraries/dsp-sdk/src/gen/virtru/policy/certificates/v1/certificates_connect.ts": "2196caefe9d9b0b5e26c7e0093ca772b72bd32a1",
-    "libraries/dsp-sdk/src/gen/virtru/policy/certificates/v1/certificates_pb.ts": "8cdeefc56af32d69284562e46d96a9c92297db74",
-    "libraries/dsp-sdk/src/gen/virtru/policy/objects_pb.ts": "862f30ea9f2f934a23d6939e2118cf99cd812b20",
-    "libraries/dsp-sdk/src/gen/web-admin/v1/config_connect.ts": "9737d1908c0d08d3b1739384ed3d8e9cd83bad1a",
-    "libraries/dsp-sdk/src/gen/web-admin/v1/config_pb.ts": "e64eaeec8e5055326a1952f7629f72d3847f2210",
-    "libraries/dsp-sdk/src/index.ts": "ca37f10c88c77b5f79333fc118e90e443b8ddb69",
-    "libraries/dsp-sdk/src/lib/client.ts": "803640d403d79a3870572732dfafbb4c8ae0e691",
-    "libraries/dsp-sdk/src/lib/consts.ts": "44df09d2e1158023b7a962692c0b3fd32b15f4d1",
-    "libraries/dsp-sdk/src/lib/dsp.ts": "f11b0270e65edd03a1f3e28f8a7dea24dd55f2bc",
-    "libraries/dsp-sdk/src/lib/utils.test.ts": "fa9c0e5758081bf322e01439e53c9903c5df1035",
-    "libraries/dsp-sdk/src/lib/utils.ts": "5c015999a4419b33333d90b427ce8c5ed0090a42",
-    "libraries/dsp-sdk/src/vite-env.d.ts": "d07ebe61a244ee4fffdb3ba2e5674440e3340024",
-    "libraries/dsp-sdk/tests/dsp-client.test.ts": "772530fc1036ad904693f022b43f78c30365afca",
-    "libraries/dsp-sdk/tests/dsp.test.ts": "864d6174e80eba22d2d102ec1b3bea2a9d6caf9c",
-    "libraries/dsp-sdk/tests/mocks/create-export-artifacts.ts": "4da51496fd76a2af6757f253c8197655c07805f4",
-    "libraries/dsp-sdk/tests/mocks/tagging-pdp-tag.ts": "472fb8edb0e603e541d4073e0f29d36a1f190453",
-    "libraries/dsp-sdk/tests/mocks/well-known-configuration.ts": "079db974991ed33cee5e0189f123956e2fab7168",
-    "libraries/dsp-sdk/tests/setup-msw.ts": "63f071cd77ee3f0ba56fc25fbc928ca3e4920ddf",
-    "libraries/dsp-sdk/tsconfig.json": "0aa1510e86d91b5c0cb278421d346dac0d9f1a67",
-    "libraries/dsp-sdk/update-protos.sh": "5e5f1f25463ffacd1b558ef2b4cb99d87e086d39",
-    "libraries/dsp-sdk/vitest.config.ts": "c73b5f508059bd3ea9bdb0b00a5cd10f84ec34dd"
-  },
-  "arguments": "heft build --clean --production"
-}