@waffo/waffo-node 2.5.0 → 2.5.1

package/dist/index.mjs

@@ -92,18 +92,18 @@ var WaffoUnknownStatusError = class _WaffoUnknownStatusError extends Error {
 // src/utils/rsa-utils.ts
 var ALGORITHM = "RSA-SHA256";
 var KEY_SIZE = 2048;
-function sign(data, base64PrivateKey) {
+var PKCS8_PEM_HEADER = "-----BEGIN PRIVATE KEY-----";
+var PEM_HEADER_PREFIX = "-----BEGIN ";
+var INVALID_PRIVATE_KEY_FORMAT_MESSAGE = "Invalid private key format. Please provide an unencrypted PKCS#8 private key.";
+function sign(data, privateKeyInput) {
   try {
-    const privateKeyBuffer = Buffer.from(base64PrivateKey, "base64");
+    const privateKey = parsePrivateKey(privateKeyInput);
     const signer = crypto.createSign(ALGORITHM);
     signer.update(data, "utf8");
-    const signature = signer.sign({
-      key: privateKeyBuffer,
-      format: "der",
-      type: "pkcs8"
-    });
+    const signature = signer.sign(privateKey);
     return signature.toString("base64");
   } catch (error) {
+    if (error instanceof WaffoError) throw error;
     throw new WaffoError(
       WaffoErrorCode.SIGN_FAILED,
       `Failed to sign data: ${error instanceof Error ? error.message : String(error)}`,
@@ -137,29 +137,43 @@ function validatePrivateKey(base64PrivateKey) {
     );
   }
   try {
-    const keyBuffer = Buffer.from(base64PrivateKey, "base64");
-    crypto.createPrivateKey({
-      key: keyBuffer,
-      format: "der",
-      type: "pkcs8"
-    });
+    parsePrivateKey(base64PrivateKey);
   } catch (error) {
     if (error instanceof WaffoError) throw error;
-    const message = error instanceof Error ? error.message : String(error);
-    if (message.includes("bad base64")) {
-      throw new WaffoError(
-        WaffoErrorCode.INVALID_PRIVATE_KEY,
-        "Invalid private key: not valid Base64 encoding",
-        error instanceof Error ? error : void 0
-      );
+    throw new WaffoError(
+      WaffoErrorCode.INVALID_PRIVATE_KEY,
+      INVALID_PRIVATE_KEY_FORMAT_MESSAGE,
+      error instanceof Error ? error : void 0
+    );
+  }
+}
+function parsePrivateKey(privateKeyInput) {
+  try {
+    const trimmed = privateKeyInput.trim();
+    const key = trimmed.startsWith(PKCS8_PEM_HEADER) ? crypto.createPrivateKey(trimmed) : parseDerPrivateKey(trimmed);
+    if (key.asymmetricKeyType !== "rsa") {
+      throw new Error("private key is not RSA");
     }
+    return key;
+  } catch (error) {
+    if (error instanceof WaffoError) throw error;
     throw new WaffoError(
       WaffoErrorCode.INVALID_PRIVATE_KEY,
-      `Invalid private key: ${message}`,
+      INVALID_PRIVATE_KEY_FORMAT_MESSAGE,
       error instanceof Error ? error : void 0
     );
   }
 }
+function parseDerPrivateKey(trimmedPrivateKey) {
+  if (trimmedPrivateKey.startsWith(PEM_HEADER_PREFIX)) {
+    throw new Error("unsupported PEM private key");
+  }
+  return crypto.createPrivateKey({
+    key: Buffer.from(trimmedPrivateKey, "base64"),
+    format: "der",
+    type: "pkcs8"
+  });
+}
 function validatePublicKey(base64PublicKey) {
   if (!base64PublicKey || base64PublicKey.trim() === "") {
     throw new WaffoError(
@@ -441,7 +455,7 @@ var HEADER_SDK_VERSION = "x-sdk-version";
 var HEADER_CONTENT_TYPE = "content-type";
 var CONTENT_TYPE_JSON = "application/json";
 var API_VERSION = "1.0.0";
-var SDK_VERSION = "waffo-node/2.5.0";
+var SDK_VERSION = "waffo-node/2.5.1";
 var WaffoHttpClient = class {
   baseUrl;
   apiKey;
@@ -453,6 +467,8 @@ var WaffoHttpClient = class {
   logger;
   httpTransport;
   constructor(config) {
+    RsaUtils.validatePrivateKey(config.privateKey);
+    RsaUtils.validatePublicKey(config.waffoPublicKey);
     this.baseUrl = EnvironmentBaseUrl[config.environment];
     this.apiKey = config.apiKey;
     this.privateKey = config.privateKey;
@@ -591,7 +607,7 @@ var WaffoHttpClient = class {
   isNetworkError(error) {
     if (!(error instanceof Error)) return false;
     const message = error.message.toLowerCase();
-    return error.name === "AbortError" || message.includes("timeout") || message.includes("econnrefused") || message.includes("enotfound") || message.includes("network") || message.includes("socket") || message.includes("connection");
+    return error.name === "AbortError" || message.includes("timeout") || message.includes("econnrefused") || message.includes("enotfound") || message.includes("fetch failed") || message.includes("network") || message.includes("socket") || message.includes("connection");
   }
 };
 
@@ -1150,8 +1166,8 @@ var Waffo = class _Waffo {
    * @param config - SDK configuration
    */
   constructor(config) {
-    this.config = config;
-    this.httpClient = new WaffoHttpClient(config);
+    this.config = createWaffoConfig(config);
+    this.httpClient = new WaffoHttpClient(this.config);
   }
   /**
    * Creates a Waffo SDK instance from environment variables.