@workos-inc/node 7.5.0-beta.node-compatibility → 7.6.0

package/lib/user-management/user-management.spec.js

@@ -16,6 +16,7 @@ const jest_fetch_mock_1 = __importDefault(require("jest-fetch-mock"));
 const test_utils_1 = require("../common/utils/test-utils");
 const workos_1 = require("../workos");
 const deactivate_organization_membership_json_1 = __importDefault(require("./fixtures/deactivate-organization-membership.json"));
+const email_verification_json_1 = __importDefault(require("./fixtures/email_verification.json"));
 const invitation_json_1 = __importDefault(require("./fixtures/invitation.json"));
 const list_factors_json_1 = __importDefault(require("./fixtures/list-factors.json"));
 const list_invitations_json_1 = __importDefault(require("./fixtures/list-invitations.json"));
@@ -23,12 +24,15 @@ const list_organization_memberships_json_1 = __importDefault(require("./fixtures
 const list_users_json_1 = __importDefault(require("./fixtures/list-users.json"));
 const magic_auth_json_1 = __importDefault(require("./fixtures/magic_auth.json"));
 const organization_membership_json_1 = __importDefault(require("./fixtures/organization-membership.json"));
+const password_reset_json_1 = __importDefault(require("./fixtures/password_reset.json"));
 const user_json_1 = __importDefault(require("./fixtures/user.json"));
 const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
 const userId = 'user_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const organizationMembershipId = 'om_01H5JQDV7R7ATEYZDEG0W5PRYS';
+const emailVerificationId = 'email_verification_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const invitationId = 'invitation_01H5JQDV7R7ATEYZDEG0W5PRYS';
 const magicAuthId = 'magic_auth_01H5JQDV7R7ATEYZDEG0W5PRYS';
+const passwordResetId = 'password_reset_01H5JQDV7R7ATEYZDEG0W5PRYS';
 describe('UserManagement', () => {
     beforeEach(() => jest_fetch_mock_1.default.resetMocks());
     describe('getUser', () => {
@@ -293,6 +297,22 @@ describe('UserManagement', () => {
             });
         }));
     });
+    describe('getEmailVerification', () => {
+        it('sends a Get EmailVerification request', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)(email_verification_json_1.default);
+            const emailVerification = yield workos.userManagement.getEmailVerification(emailVerificationId);
+            expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/email_verification/${emailVerificationId}`);
+            expect(emailVerification).toMatchObject({
+                id: 'email_verification_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                userId: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                email: 'dane@workos.com',
+                expiresAt: '2023-07-18T02:07:19.911Z',
+                code: '123456',
+                createdAt: '2023-07-18T02:07:19.911Z',
+                updatedAt: '2023-07-18T02:07:19.911Z',
+            });
+        }));
+    });
     describe('sendVerificationEmail', () => {
         it('sends a Create Email Verification Challenge request', () => __awaiter(void 0, void 0, void 0, function* () {
             (0, test_utils_1.fetchOnce)({ user: user_json_1.default });
@@ -377,6 +397,43 @@ describe('UserManagement', () => {
             expect(response).toBeUndefined();
         }));
     });
+    describe('getPasswordReset', () => {
+        it('sends a Get PaswordReset request', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)(password_reset_json_1.default);
+            const passwordReset = yield workos.userManagement.getPasswordReset(passwordResetId);
+            expect((0, test_utils_1.fetchURL)()).toContain(`/user_management/password_reset/${passwordResetId}`);
+            expect(passwordReset).toMatchObject({
+                id: 'password_reset_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                userId: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                email: 'dane@workos.com',
+                passwordResetToken: 'Z1uX3RbwcIl5fIGJJJCXXisdI',
+                passwordResetUrl: 'https://your-app.com/reset-password?token=Z1uX3RbwcIl5fIGJJJCXXisdI',
+                expiresAt: '2023-07-18T02:07:19.911Z',
+                createdAt: '2023-07-18T02:07:19.911Z',
+            });
+        }));
+    });
+    describe('createMagicAuth', () => {
+        it('sends a Create Magic Auth request', () => __awaiter(void 0, void 0, void 0, function* () {
+            (0, test_utils_1.fetchOnce)(password_reset_json_1.default);
+            const response = yield workos.userManagement.createPasswordReset({
+                email: 'dane@workos.com',
+            });
+            expect((0, test_utils_1.fetchURL)()).toContain('/user_management/password_reset');
+            expect((0, test_utils_1.fetchBody)()).toEqual({
+                email: 'dane@workos.com',
+            });
+            expect(response).toMatchObject({
+                id: 'password_reset_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                userId: 'user_01H5JQDV7R7ATEYZDEG0W5PRYS',
+                email: 'dane@workos.com',
+                passwordResetToken: 'Z1uX3RbwcIl5fIGJJJCXXisdI',
+                passwordResetUrl: 'https://your-app.com/reset-password?token=Z1uX3RbwcIl5fIGJJJCXXisdI',
+                expiresAt: '2023-07-18T02:07:19.911Z',
+                createdAt: '2023-07-18T02:07:19.911Z',
+            });
+        }));
+    });
     describe('sendPasswordResetEmail', () => {
         it('sends a Send Password Reset Email request', () => __awaiter(void 0, void 0, void 0, function* () {
             (0, test_utils_1.fetchOnce)();

package/lib/webhooks/webhooks.d.ts

@@ -1,7 +1,6 @@
 import { Event } from '../common/interfaces';
 export declare class Webhooks {
-    private cryptoProvider;
-    constructor(subtleCrypto?: typeof crypto.subtle);
+    private encoder;
     constructEvent({ payload, sigHeader, secret, tolerance, }: {
         payload: unknown;
         sigHeader: string;
@@ -16,4 +15,5 @@ export declare class Webhooks {
     }): Promise<boolean>;
     getTimestampAndSignatureHash(sigHeader: string): [string, string];
     computeSignature(timestamp: any, payload: any, secret: string): Promise<string>;
+    secureCompare(stringA: string, stringB: string): Promise<boolean>;
 }

package/lib/webhooks/webhooks.js

@@ -12,15 +12,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Webhooks = void 0;
 const exceptions_1 = require("../common/exceptions");
 const serializers_1 = require("../common/serializers");
-const crypto_1 = require("../common/crypto");
 class Webhooks {
-    constructor(subtleCrypto) {
-        if (typeof crypto !== 'undefined' && typeof crypto.subtle !== 'undefined') {
-            this.cryptoProvider = new crypto_1.SubtleCryptoProvider(subtleCrypto);
-        }
-        else {
-            this.cryptoProvider = new crypto_1.NodeCryptoProvider();
-        }
+    constructor() {
+        this.encoder = new TextEncoder();
     }
     constructEvent({ payload, sigHeader, secret, tolerance = 180000, }) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -40,8 +34,7 @@ class Webhooks {
                 throw new exceptions_1.SignatureVerificationException('Timestamp outside the tolerance zone');
             }
             const expectedSig = yield this.computeSignature(timestamp, payload, secret);
-            if ((yield this.cryptoProvider.secureCompare(expectedSig, signatureHash)) ===
-                false) {
+            if ((yield this.secureCompare(expectedSig, signatureHash)) === false) {
                 throw new exceptions_1.SignatureVerificationException('Signature hash does not match the expected signature hash for payload');
             }
             return true;
@@ -61,8 +54,41 @@ class Webhooks {
         return __awaiter(this, void 0, void 0, function* () {
             payload = JSON.stringify(payload);
             const signedPayload = `${timestamp}.${payload}`;
-            return yield this.cryptoProvider.computeHMACSignatureAsync(signedPayload, secret);
+            const key = yield crypto.subtle.importKey('raw', this.encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+            const signatureBuffer = yield crypto.subtle.sign('HMAC', key, this.encoder.encode(signedPayload));
+            // crypto.subtle returns the signature in base64 format. This must be
+            // encoded in hex to match the CryptoProvider contract. We map each byte in
+            // the buffer to its corresponding hex octet and then combine into a string.
+            const signatureBytes = new Uint8Array(signatureBuffer);
+            const signatureHexCodes = new Array(signatureBytes.length);
+            for (let i = 0; i < signatureBytes.length; i++) {
+                signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
+            }
+            return signatureHexCodes.join('');
+        });
+    }
+    secureCompare(stringA, stringB) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const bufferA = this.encoder.encode(stringA);
+            const bufferB = this.encoder.encode(stringB);
+            if (bufferA.length !== bufferB.length) {
+                return false;
+            }
+            const algorithm = { name: 'HMAC', hash: 'SHA-256' };
+            const key = (yield crypto.subtle.generateKey(algorithm, false, [
+                'sign',
+                'verify',
+            ]));
+            const hmac = yield crypto.subtle.sign(algorithm, key, bufferA);
+            const equal = yield crypto.subtle.verify(algorithm, key, hmac, bufferB);
+            return equal;
         });
     }
 }
 exports.Webhooks = Webhooks;
+// Cached mapping of byte to hex representation. We do this once to avoid re-
+// computing every time we need to convert the result of a signature to hex.
+const byteHexMapping = new Array(256);
+for (let i = 0; i < byteHexMapping.length; i++) {
+    byteHexMapping[i] = i.toString(16).padStart(2, '0');
+}

package/lib/webhooks/webhooks.spec.js

@@ -17,7 +17,6 @@ const workos_1 = require("../workos");
 const webhook_json_1 = __importDefault(require("./fixtures/webhook.json"));
 const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
 const exceptions_1 = require("../common/exceptions");
-const crypto_2 = require("../common/crypto");
 describe('Webhooks', () => {
     let payload;
     let secret;
@@ -188,32 +187,4 @@ describe('Webhooks', () => {
             expect(signature).toEqual(signatureHash);
         }));
     });
-    describe('when in an environment that supports SubtleCrypto', () => {
-        it('automatically uses the subtle crypto library', () => {
-            // tslint:disable-next-line
-            expect(workos.webhooks['cryptoProvider']).toBeInstanceOf(crypto_2.SubtleCryptoProvider);
-        });
-    });
-    describe('CryptoProvider', () => {
-        describe('when computing HMAC signature', () => {
-            it('returns the same for the Node crypto and Web Crypto versions', () => __awaiter(void 0, void 0, void 0, function* () {
-                const nodeCryptoProvider = new crypto_2.NodeCryptoProvider();
-                const subtleCryptoProvider = new crypto_2.SubtleCryptoProvider();
-                const stringifiedPayload = JSON.stringify(payload);
-                const payloadHMAC = `${timestamp}.${stringifiedPayload}`;
-                const nodeCompare = yield nodeCryptoProvider.computeHMACSignatureAsync(payloadHMAC, secret);
-                const subtleCompare = yield subtleCryptoProvider.computeHMACSignatureAsync(payloadHMAC, secret);
-                expect(nodeCompare).toEqual(subtleCompare);
-            }));
-        });
-        describe('when securely comparing', () => {
-            it('returns the same for the Node crypto and Web Crypto versions', () => __awaiter(void 0, void 0, void 0, function* () {
-                const nodeCryptoProvider = new crypto_2.NodeCryptoProvider();
-                const subtleCryptoProvider = new crypto_2.SubtleCryptoProvider();
-                const signature = yield workos.webhooks.computeSignature(timestamp, payload, secret);
-                expect(nodeCryptoProvider.secureCompare(signature, signatureHash)).toEqual(subtleCryptoProvider.secureCompare(signature, signatureHash));
-                expect(nodeCryptoProvider.secureCompare(signature, 'foo')).toEqual(subtleCryptoProvider.secureCompare(signature, 'foo'));
-            }));
-        });
-    });
 });

package/lib/workos.d.ts

@@ -39,5 +39,5 @@ export declare class WorkOS {
     }>;
     delete(path: string, query?: any): Promise<void>;
     emitWarning(warning: string): void;
-    private handleHttpError;
+    private handleFetchError;
 }

package/lib/workos.js

@@ -23,8 +23,8 @@ const mfa_1 = require("./mfa/mfa");
 const audit_logs_1 = require("./audit-logs/audit-logs");
 const user_management_1 = require("./user-management/user-management");
 const bad_request_exception_1 = require("./common/exceptions/bad-request.exception");
-const net_1 = require("./common/net");
-const VERSION = '7.5.0';
+const fetch_client_1 = require("./common/utils/fetch-client");
+const VERSION = '7.6.0';
 const DEFAULT_HOSTNAME = 'api.workos.com';
 class WorkOS {
     constructor(key, options = {}) {
@@ -64,7 +64,7 @@ class WorkOS {
             const { name, version } = options.appInfo;
             userAgent += ` ${name}: ${version}`;
         }
-        this.client = (0, net_1.createHttpClient)(this.baseURL, Object.assign(Object.assign({}, options.config), { headers: Object.assign(Object.assign({}, (_a = options.config) === null || _a === void 0 ? void 0 : _a.headers), { Authorization: `Bearer ${this.key}`, 'User-Agent': userAgent }) }), options.fetchFn);
+        this.client = new fetch_client_1.FetchClient(this.baseURL, Object.assign(Object.assign({}, options.config), { headers: Object.assign(Object.assign({}, (_a = options.config) === null || _a === void 0 ? void 0 : _a.headers), { Authorization: `Bearer ${this.key}`, 'User-Agent': userAgent }) }));
     }
     get version() {
         return VERSION;
@@ -76,14 +76,13 @@ class WorkOS {
                 requestHeaders['Idempotency-Key'] = options.idempotencyKey;
             }
             try {
-                const res = yield this.client.post(path, entity, {
+                return yield this.client.post(path, entity, {
                     params: options.query,
                     headers: requestHeaders,
                 });
-                return { data: yield res.toJSON() };
             }
             catch (error) {
-                this.handleHttpError({ path, error });
+                this.handleFetchError({ path, error });
                 throw error;
             }
         });
@@ -92,16 +91,15 @@ class WorkOS {
         return __awaiter(this, void 0, void 0, function* () {
             try {
                 const { accessToken } = options;
-                const res = yield this.client.get(path, {
+                return yield this.client.get(path, {
                     params: options.query,
                     headers: accessToken
                         ? { Authorization: `Bearer ${accessToken}` }
                         : undefined,
                 });
-                return { data: yield res.toJSON() };
             }
             catch (error) {
-                this.handleHttpError({ path, error });
+                this.handleFetchError({ path, error });
                 throw error;
             }
         });
@@ -113,14 +111,13 @@ class WorkOS {
                 requestHeaders['Idempotency-Key'] = options.idempotencyKey;
             }
             try {
-                const res = yield this.client.put(path, entity, {
+                return yield this.client.put(path, entity, {
                     params: options.query,
                     headers: requestHeaders,
                 });
-                return { data: yield res.toJSON() };
             }
             catch (error) {
-                this.handleHttpError({ path, error });
+                this.handleFetchError({ path, error });
                 throw error;
             }
         });
@@ -133,7 +130,7 @@ class WorkOS {
                 });
             }
             catch (error) {
-                this.handleHttpError({ path, error });
+                this.handleFetchError({ path, error });
                 throw error;
             }
         });
@@ -146,15 +143,12 @@ class WorkOS {
         }
         return process.emitWarning(warning, 'WorkOS');
     }
-    handleHttpError({ path, error }) {
+    handleFetchError({ path, error }) {
         var _a;
-        if (!(error instanceof net_1.HttpClientError)) {
-            throw new Error(`Unexpected error: ${error}`);
-        }
         const { response } = error;
         if (response) {
             const { status, data, headers } = response;
-            const requestID = (_a = headers['X-Request-ID']) !== null && _a !== void 0 ? _a : '';
+            const requestID = (_a = headers.get('X-Request-ID')) !== null && _a !== void 0 ? _a : '';
             const { code, error_description: errorDescription, error, errors, message, } = data;
             switch (status) {
                 case 401: {

package/lib/workos.spec.js

@@ -18,7 +18,6 @@ const promises_1 = __importDefault(require("fs/promises"));
 const exceptions_1 = require("./common/exceptions");
 const workos_1 = require("./workos");
 const rate_limit_exceeded_exception_1 = require("./common/exceptions/rate-limit-exceeded.exception");
-const net_1 = require("./common/net");
 describe('WorkOS', () => {
     beforeEach(() => jest_fetch_mock_1.default.resetMocks());
     describe('constructor', () => {
@@ -96,40 +95,10 @@ describe('WorkOS', () => {
                 });
                 yield workos.post('/somewhere', {});
                 expect((0, test_utils_1.fetchHeaders)()).toMatchObject({
-                    'User-Agent': `workos-node/${packageJson.version}/fetch fooApp: 1.0.0`,
+                    'User-Agent': `workos-node/${packageJson.version} fooApp: 1.0.0`,
                 });
             }));
         });
-        describe('when no `appInfo` option is provided', () => {
-            it('adds the HTTP client name to the user-agent', () => __awaiter(void 0, void 0, void 0, function* () {
-                (0, test_utils_1.fetchOnce)('{}');
-                const packageJson = JSON.parse(yield promises_1.default.readFile('package.json', 'utf8'));
-                const workos = new workos_1.WorkOS('sk_test');
-                yield workos.post('/somewhere', {});
-                expect((0, test_utils_1.fetchHeaders)()).toMatchObject({
-                    'User-Agent': `workos-node/${packageJson.version}/fetch`,
-                });
-            }));
-        });
-        describe('when no `appInfo` option is provided', () => {
-            it('adds the HTTP client name to the user-agent', () => __awaiter(void 0, void 0, void 0, function* () {
-                (0, test_utils_1.fetchOnce)('{}');
-                const packageJson = JSON.parse(yield promises_1.default.readFile('package.json', 'utf8'));
-                const workos = new workos_1.WorkOS('sk_test');
-                yield workos.post('/somewhere', {});
-                expect((0, test_utils_1.fetchHeaders)()).toMatchObject({
-                    'User-Agent': `workos-node/${packageJson.version}/fetch`,
-                });
-            }));
-        });
-        describe('when using an environment that supports fetch', () => {
-            it('automatically uses the fetch HTTP client', () => {
-                const workos = new workos_1.WorkOS('sk_test');
-                // Bracket notation gets past private visibility
-                // tslint:disable-next-line
-                expect(workos['client']).toBeInstanceOf(net_1.FetchHttpClient);
-            });
-        });
     });
     describe('version', () => {
         it('matches the version in `package.json`', () => __awaiter(void 0, void 0, void 0, function* () {
@@ -208,34 +177,12 @@ describe('WorkOS', () => {
             }));
         });
         describe('when the entity is null', () => {
-            it('sends an empty string body', () => __awaiter(void 0, void 0, void 0, function* () {
+            it('sends a null body', () => __awaiter(void 0, void 0, void 0, function* () {
                 (0, test_utils_1.fetchOnce)();
                 const workos = new workos_1.WorkOS('sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU');
                 yield workos.post('/somewhere', null);
-                expect((0, test_utils_1.fetchBody)({ raw: true })).toBe('');
+                expect((0, test_utils_1.fetchBody)({ raw: true })).toBeNull();
             }));
         });
     });
-    describe('when in an environment that does not support fetch', () => {
-        const fetchFn = globalThis.fetch;
-        beforeEach(() => {
-            // @ts-ignore
-            delete globalThis.fetch;
-        });
-        afterEach(() => {
-            globalThis.fetch = fetchFn;
-        });
-        it('automatically uses the node HTTP client', () => {
-            const workos = new workos_1.WorkOS('sk_test_key');
-            // tslint:disable-next-line
-            expect(workos['client']).toBeInstanceOf(net_1.NodeHttpClient);
-        });
-        it('uses a fetch function if provided', () => {
-            const workos = new workos_1.WorkOS('sk_test_key', {
-                fetchFn,
-            });
-            // tslint:disable-next-line
-            expect(workos['client']).toBeInstanceOf(net_1.FetchHttpClient);
-        });
-    });
 });

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "7.5.0-beta.node-compatibility",
+  "version": "7.6.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",
@@ -13,8 +13,9 @@
     "yarn": "1.22.19"
   },
   "engines": {
-    "node": ">=16"
+    "node": ">=19"
   },
+  "engineStrict": true,
   "main": "lib/index.js",
   "typings": "lib/index.d.ts",
   "files": [
@@ -48,7 +49,7 @@
     "jest-fetch-mock": "^3.0.3",
     "prettier": "2.8.8",
     "supertest": "6.3.3",
-    "ts-jest": "29.1.2",
+    "ts-jest": "29.1.3",
     "tslint": "6.1.3",
     "typescript": "5.1.6"
   }

package/lib/common/crypto/CryptoProvider.d.ts

@@ -1,32 +0,0 @@
-/**
- * Interface encapsulating the various crypto computations used by the library,
- * allowing pluggable underlying crypto implementations.
- */
-export declare abstract class CryptoProvider {
-    encoder: TextEncoder;
-    /**
-     * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).
-     * The output HMAC should be encoded in hexadecimal.
-     *
-     * Sample values for implementations:
-     * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'
-     * - computeHMACSignature('\ud83d\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43
-     */
-    abstract computeHMACSignature(payload: string, secret: string): string;
-    /**
-     * Asynchronous version of `computeHMACSignature`. Some implementations may
-     * only allow support async signature computation.
-     *
-     * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).
-     * The output HMAC should be encoded in hexadecimal.
-     *
-     * Sample values for implementations:
-     * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'
-     * - computeHMACSignature('\ud83d\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43
-     */
-    abstract computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
-    /**
-     * Cryptographically determine whether two signatures are equal
-     */
-    abstract secureCompare(stringA: string, stringB: string): Promise<boolean>;
-}

package/lib/common/crypto/CryptoProvider.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CryptoProvider = void 0;
-/**
- * Interface encapsulating the various crypto computations used by the library,
- * allowing pluggable underlying crypto implementations.
- */
-class CryptoProvider {
-    constructor() {
-        this.encoder = new TextEncoder();
-    }
-}
-exports.CryptoProvider = CryptoProvider;

package/lib/common/crypto/NodeCryptoProvider.d.ts

@@ -1,12 +0,0 @@
-import { CryptoProvider } from './CryptoProvider';
-/**
- * `CryptoProvider which uses the Node `crypto` package for its computations.
- */
-export declare class NodeCryptoProvider extends CryptoProvider {
-    /** @override */
-    computeHMACSignature(payload: string, secret: string): string;
-    /** @override */
-    computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
-    /** @override */
-    secureCompare(stringA: string, stringB: string): Promise<boolean>;
-}

package/lib/common/crypto/NodeCryptoProvider.js

@@ -1,73 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NodeCryptoProvider = void 0;
-const crypto = __importStar(require("crypto"));
-const CryptoProvider_1 = require("./CryptoProvider");
-/**
- * `CryptoProvider which uses the Node `crypto` package for its computations.
- */
-class NodeCryptoProvider extends CryptoProvider_1.CryptoProvider {
-    /** @override */
-    computeHMACSignature(payload, secret) {
-        return crypto
-            .createHmac('sha256', secret)
-            .update(payload, 'utf8')
-            .digest('hex');
-    }
-    /** @override */
-    computeHMACSignatureAsync(payload, secret) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const signature = yield this.computeHMACSignature(payload, secret);
-            return signature;
-        });
-    }
-    /** @override */
-    secureCompare(stringA, stringB) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const bufferA = this.encoder.encode(stringA);
-            const bufferB = this.encoder.encode(stringB);
-            if (bufferA.length !== bufferB.length) {
-                return false;
-            }
-            // Generate a random key for HMAC
-            const key = crypto.randomBytes(32); // Generates a 256-bit key
-            const hmacA = crypto.createHmac('sha256', key).update(bufferA).digest();
-            const hmacB = crypto.createHmac('sha256', key).update(bufferB).digest();
-            // Perform a constant time comparison
-            return crypto.timingSafeEqual(hmacA, hmacB);
-        });
-    }
-}
-exports.NodeCryptoProvider = NodeCryptoProvider;

package/lib/common/crypto/SubtleCryptoProvider.d.ts

@@ -1,15 +0,0 @@
-import { CryptoProvider } from './CryptoProvider';
-/**
- * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
- *
- * This only supports asynchronous operations.
- */
-export declare class SubtleCryptoProvider extends CryptoProvider {
-    subtleCrypto: SubtleCrypto;
-    constructor(subtleCrypto?: SubtleCrypto);
-    computeHMACSignature(_payload: string, _secret: string): string;
-    /** @override */
-    computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
-    /** @override */
-    secureCompare(stringA: string, stringB: string): Promise<boolean>;
-}