@workos-inc/node 7.57.0 → 8.0.0-beta.2

package/lib/common/crypto/subtle-crypto-provider.cjs

@@ -0,0 +1,152 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var subtle_crypto_provider_exports = {};
+__export(subtle_crypto_provider_exports, {
+  SubtleCryptoProvider: () => SubtleCryptoProvider
+});
+module.exports = __toCommonJS(subtle_crypto_provider_exports);
+var import_crypto_provider = require("./crypto-provider");
+class SubtleCryptoProvider extends import_crypto_provider.CryptoProvider {
+  static {
+    __name(this, "SubtleCryptoProvider");
+  }
+  subtleCrypto;
+  constructor(subtleCrypto) {
+    super();
+    this.subtleCrypto = subtleCrypto || crypto.subtle;
+  }
+  computeHMACSignature(_payload, _secret) {
+    throw new Error(
+      "SubleCryptoProvider cannot be used in a synchronous context."
+    );
+  }
+  /** @override */
+  async computeHMACSignatureAsync(payload, secret) {
+    const encoder = new TextEncoder();
+    const key = await this.subtleCrypto.importKey(
+      "raw",
+      encoder.encode(secret),
+      {
+        name: "HMAC",
+        hash: { name: "SHA-256" }
+      },
+      false,
+      ["sign"]
+    );
+    const signatureBuffer = await this.subtleCrypto.sign(
+      "hmac",
+      key,
+      encoder.encode(payload)
+    );
+    const signatureBytes = new Uint8Array(signatureBuffer);
+    const signatureHexCodes = new Array(signatureBytes.length);
+    for (let i = 0; i < signatureBytes.length; i++) {
+      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
+    }
+    return signatureHexCodes.join("");
+  }
+  /** @override */
+  async secureCompare(stringA, stringB) {
+    const bufferA = this.encoder.encode(stringA);
+    const bufferB = this.encoder.encode(stringB);
+    if (bufferA.length !== bufferB.length) {
+      return false;
+    }
+    const algorithm = { name: "HMAC", hash: "SHA-256" };
+    const key = await crypto.subtle.generateKey(algorithm, false, [
+      "sign",
+      "verify"
+    ]);
+    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);
+    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);
+    return equal;
+  }
+  async encrypt(plaintext, key, iv, aad) {
+    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));
+    const cryptoKey = await this.subtleCrypto.importKey(
+      "raw",
+      key,
+      { name: "AES-GCM" },
+      false,
+      ["encrypt"]
+    );
+    const encryptParams = {
+      name: "AES-GCM",
+      iv: actualIv
+    };
+    if (aad) {
+      encryptParams.additionalData = aad;
+    }
+    const encryptedData = await this.subtleCrypto.encrypt(
+      encryptParams,
+      cryptoKey,
+      plaintext
+    );
+    const encryptedBytes = new Uint8Array(encryptedData);
+    const tagSize = 16;
+    const tagStart = encryptedBytes.length - tagSize;
+    const tag = encryptedBytes.slice(tagStart);
+    const ciphertext = encryptedBytes.slice(0, tagStart);
+    return {
+      ciphertext,
+      iv: actualIv,
+      tag
+    };
+  }
+  async decrypt(ciphertext, key, iv, tag, aad) {
+    const combinedData = new Uint8Array(ciphertext.length + tag.length);
+    combinedData.set(ciphertext, 0);
+    combinedData.set(tag, ciphertext.length);
+    const cryptoKey = await this.subtleCrypto.importKey(
+      "raw",
+      key,
+      { name: "AES-GCM" },
+      false,
+      ["decrypt"]
+    );
+    const decryptParams = {
+      name: "AES-GCM",
+      iv
+    };
+    if (aad) {
+      decryptParams.additionalData = aad;
+    }
+    const decryptedData = await this.subtleCrypto.decrypt(
+      decryptParams,
+      cryptoKey,
+      combinedData
+    );
+    return new Uint8Array(decryptedData);
+  }
+  randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return bytes;
+  }
+}
+const byteHexMapping = new Array(256);
+for (let i = 0; i < byteHexMapping.length; i++) {
+  byteHexMapping[i] = i.toString(16).padStart(2, "0");
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SubtleCryptoProvider
+});
+//# sourceMappingURL=subtle-crypto-provider.cjs.map

package/lib/common/crypto/subtle-crypto-provider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/common/crypto/subtle-crypto-provider.ts"],"sourcesContent":["import { CryptoProvider } from './crypto-provider';\n\n/**\n * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.\n *\n * This only supports asynchronous operations.\n */\nexport class SubtleCryptoProvider extends CryptoProvider {\n  subtleCrypto: SubtleCrypto;\n\n  constructor(subtleCrypto?: SubtleCrypto) {\n    super();\n\n    // If no subtle crypto is interface, default to the global namespace. This\n    // is to allow custom interfaces (eg. using the Node webcrypto interface in\n    // tests).\n    this.subtleCrypto = subtleCrypto || crypto.subtle;\n  }\n\n  computeHMACSignature(_payload: string, _secret: string): string {\n    throw new Error(\n      'SubleCryptoProvider cannot be used in a synchronous context.',\n    );\n  }\n\n  /** @override */\n  async computeHMACSignatureAsync(\n    payload: string,\n    secret: string,\n  ): Promise<string> {\n    const encoder = new TextEncoder();\n\n    const key = await this.subtleCrypto.importKey(\n      'raw',\n      encoder.encode(secret),\n      {\n        name: 'HMAC',\n        hash: { name: 'SHA-256' },\n      },\n      false,\n      ['sign'],\n    );\n\n    const signatureBuffer = await this.subtleCrypto.sign(\n      'hmac',\n      key,\n      encoder.encode(payload),\n    );\n\n    // crypto.subtle returns the signature in base64 format. This must be\n    // encoded in hex to match the CryptoProvider contract. We map each byte in\n    // the buffer to its corresponding hex octet and then combine into a string.\n    const signatureBytes = new Uint8Array(signatureBuffer);\n    const signatureHexCodes = new Array(signatureBytes.length);\n\n    for (let i = 0; i < signatureBytes.length; i++) {\n      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];\n    }\n\n    return signatureHexCodes.join('');\n  }\n\n  /** @override */\n  async secureCompare(stringA: string, stringB: string): Promise<boolean> {\n    const bufferA = this.encoder.encode(stringA);\n    const bufferB = this.encoder.encode(stringB);\n\n    if (bufferA.length !== bufferB.length) {\n      return false;\n    }\n\n    const algorithm = { name: 'HMAC', hash: 'SHA-256' };\n    const key = (await crypto.subtle.generateKey(algorithm, false, [\n      'sign',\n      'verify',\n    ])) as CryptoKey;\n    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);\n    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);\n\n    return equal;\n  }\n\n  async encrypt(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n    iv?: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<{\n    ciphertext: Uint8Array;\n    iv: Uint8Array;\n    tag: Uint8Array;\n  }> {\n    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key,\n      { name: 'AES-GCM' },\n      false,\n      ['encrypt'],\n    );\n\n    const encryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv: actualIv,\n    };\n\n    if (aad) {\n      encryptParams.additionalData = aad;\n    }\n\n    const encryptedData = await this.subtleCrypto.encrypt(\n      encryptParams,\n      cryptoKey,\n      plaintext,\n    );\n\n    const encryptedBytes = new Uint8Array(encryptedData);\n\n    // Extract tag (last 16 bytes)\n    const tagSize = 16;\n    const tagStart = encryptedBytes.length - tagSize;\n    const tag = encryptedBytes.slice(tagStart);\n    const ciphertext = encryptedBytes.slice(0, tagStart);\n\n    return {\n      ciphertext,\n      iv: actualIv,\n      tag,\n    };\n  }\n\n  async decrypt(\n    ciphertext: Uint8Array,\n    key: Uint8Array,\n    iv: Uint8Array,\n    tag: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<Uint8Array> {\n    // SubtleCrypto expects tag to be appended to ciphertext for AES-GCM\n    const combinedData = new Uint8Array(ciphertext.length + tag.length);\n    combinedData.set(ciphertext, 0);\n    combinedData.set(tag, ciphertext.length);\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key,\n      { name: 'AES-GCM' },\n      false,\n      ['decrypt'],\n    );\n\n    const decryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv,\n    };\n\n    if (aad) {\n      decryptParams.additionalData = aad;\n    }\n\n    const decryptedData = await this.subtleCrypto.decrypt(\n      decryptParams,\n      cryptoKey,\n      combinedData,\n    );\n\n    return new Uint8Array(decryptedData);\n  }\n\n  randomBytes(length: number): Uint8Array {\n    const bytes = new Uint8Array(length);\n    crypto.getRandomValues(bytes);\n    return bytes;\n  }\n}\n\n// Cached mapping of byte to hex representation. We do this once to avoid re-\n// computing every time we need to convert the result of a signature to hex.\nconst byteHexMapping = new Array(256);\nfor (let i = 0; i < byteHexMapping.length; i++) {\n  byteHexMapping[i] = i.toString(16).padStart(2, '0');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6BAA+B;AAOxB,MAAM,6BAA6B,sCAAe;AAAA,EAPzD,OAOyD;AAAA;AAAA;AAAA,EACvD;AAAA,EAEA,YAAY,cAA6B;AACvC,UAAM;AAKN,SAAK,eAAe,gBAAgB,OAAO;AAAA,EAC7C;AAAA,EAEA,qBAAqB,UAAkB,SAAyB;AAC9D,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,0BACJ,SACA,QACiB;AACjB,UAAM,UAAU,IAAI,YAAY;AAEhC,UAAM,MAAM,MAAM,KAAK,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB;AAAA,QACE,MAAM;AAAA,QACN,MAAM,EAAE,MAAM,UAAU;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,UAAM,kBAAkB,MAAM,KAAK,aAAa;AAAA,MAC9C;AAAA,MACA;AAAA,MACA,QAAQ,OAAO,OAAO;AAAA,IACxB;AAKA,UAAM,iBAAiB,IAAI,WAAW,eAAe;AACrD,UAAM,oBAAoB,IAAI,MAAM,eAAe,MAAM;AAEzD,aAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,wBAAkB,CAAC,IAAI,eAAe,eAAe,CAAC,CAAC;AAAA,IACzD;AAEA,WAAO,kBAAkB,KAAK,EAAE;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,cAAc,SAAiB,SAAmC;AACtE,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAC3C,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAE3C,QAAI,QAAQ,WAAW,QAAQ,QAAQ;AACrC,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,EAAE,MAAM,QAAQ,MAAM,UAAU;AAClD,UAAM,MAAO,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO;AAAA,MAC7D;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,OAAO,MAAM,OAAO,OAAO,KAAK,WAAW,KAAK,OAAO;AAC7D,UAAM,QAAQ,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK,MAAM,OAAO;AAEtE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QACJ,WACA,KACA,IACA,KAKC;AACD,UAAM,WAAW,MAAM,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAEhE,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN,IAAI;AAAA,IACN;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,WAAW,aAAa;AAGnD,UAAM,UAAU;AAChB,UAAM,WAAW,eAAe,SAAS;AACzC,UAAM,MAAM,eAAe,MAAM,QAAQ;AACzC,UAAM,aAAa,eAAe,MAAM,GAAG,QAAQ;AAEnD,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,YACA,KACA,IACA,KACA,KACqB;AAErB,UAAM,eAAe,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;AAClE,iBAAa,IAAI,YAAY,CAAC;AAC9B,iBAAa,IAAI,KAAK,WAAW,MAAM;AAEvC,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN;AAAA,IACF;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO,IAAI,WAAW,aAAa;AAAA,EACrC;AAAA,EAEA,YAAY,QAA4B;AACtC,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,WAAO,gBAAgB,KAAK;AAC5B,WAAO;AAAA,EACT;AACF;AAIA,MAAM,iBAAiB,IAAI,MAAM,GAAG;AACpC,SAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,iBAAe,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACpD;","names":[]}

package/lib/common/crypto/{node-crypto-provider.d.ts → subtle-crypto-provider.d.cts}

@@ -1,10 +1,14 @@
-import { CryptoProvider } from './crypto-provider';
+import { CryptoProvider } from './crypto-provider.cjs';
+
 /**
- * `CryptoProvider which uses the Node `crypto` package for its computations.
+ * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
+ *
+ * This only supports asynchronous operations.
  */
-export declare class NodeCryptoProvider extends CryptoProvider {
-    /** @override */
-    computeHMACSignature(payload: string, secret: string): string;
+declare class SubtleCryptoProvider extends CryptoProvider {
+    subtleCrypto: SubtleCrypto;
+    constructor(subtleCrypto?: SubtleCrypto);
+    computeHMACSignature(_payload: string, _secret: string): string;
     /** @override */
     computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
     /** @override */
@@ -17,3 +21,5 @@ export declare class NodeCryptoProvider extends CryptoProvider {
     decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
     randomBytes(length: number): Uint8Array;
 }
+
+export { SubtleCryptoProvider };

package/lib/common/crypto/subtle-crypto-provider.d.ts

@@ -1,10 +1,11 @@
-import { CryptoProvider } from './crypto-provider';
+import { CryptoProvider } from './crypto-provider.js';
+
 /**
  * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
  *
  * This only supports asynchronous operations.
  */
-export declare class SubtleCryptoProvider extends CryptoProvider {
+declare class SubtleCryptoProvider extends CryptoProvider {
     subtleCrypto: SubtleCrypto;
     constructor(subtleCrypto?: SubtleCrypto);
     computeHMACSignature(_payload: string, _secret: string): string;
@@ -20,3 +21,5 @@ export declare class SubtleCryptoProvider extends CryptoProvider {
     decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
     randomBytes(length: number): Uint8Array;
 }
+
+export { SubtleCryptoProvider };

package/lib/common/crypto/subtle-crypto-provider.js

@@ -1,123 +1,129 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SubtleCryptoProvider = void 0;
-const crypto_provider_1 = require("./crypto-provider");
-/**
- * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
- *
- * This only supports asynchronous operations.
- */
-class SubtleCryptoProvider extends crypto_provider_1.CryptoProvider {
-    constructor(subtleCrypto) {
-        super();
-        // If no subtle crypto is interface, default to the global namespace. This
-        // is to allow custom interfaces (eg. using the Node webcrypto interface in
-        // tests).
-        this.subtleCrypto = subtleCrypto || crypto.subtle;
-    }
-    computeHMACSignature(_payload, _secret) {
-        throw new Error('SubleCryptoProvider cannot be used in a synchronous context.');
-    }
-    /** @override */
-    computeHMACSignatureAsync(payload, secret) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const encoder = new TextEncoder();
-            const key = yield this.subtleCrypto.importKey('raw', encoder.encode(secret), {
-                name: 'HMAC',
-                hash: { name: 'SHA-256' },
-            }, false, ['sign']);
-            const signatureBuffer = yield this.subtleCrypto.sign('hmac', key, encoder.encode(payload));
-            // crypto.subtle returns the signature in base64 format. This must be
-            // encoded in hex to match the CryptoProvider contract. We map each byte in
-            // the buffer to its corresponding hex octet and then combine into a string.
-            const signatureBytes = new Uint8Array(signatureBuffer);
-            const signatureHexCodes = new Array(signatureBytes.length);
-            for (let i = 0; i < signatureBytes.length; i++) {
-                signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
-            }
-            return signatureHexCodes.join('');
-        });
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+import { CryptoProvider } from "./crypto-provider";
+class SubtleCryptoProvider extends CryptoProvider {
+  static {
+    __name(this, "SubtleCryptoProvider");
+  }
+  subtleCrypto;
+  constructor(subtleCrypto) {
+    super();
+    this.subtleCrypto = subtleCrypto || crypto.subtle;
+  }
+  computeHMACSignature(_payload, _secret) {
+    throw new Error(
+      "SubleCryptoProvider cannot be used in a synchronous context."
+    );
+  }
+  /** @override */
+  async computeHMACSignatureAsync(payload, secret) {
+    const encoder = new TextEncoder();
+    const key = await this.subtleCrypto.importKey(
+      "raw",
+      encoder.encode(secret),
+      {
+        name: "HMAC",
+        hash: { name: "SHA-256" }
+      },
+      false,
+      ["sign"]
+    );
+    const signatureBuffer = await this.subtleCrypto.sign(
+      "hmac",
+      key,
+      encoder.encode(payload)
+    );
+    const signatureBytes = new Uint8Array(signatureBuffer);
+    const signatureHexCodes = new Array(signatureBytes.length);
+    for (let i = 0; i < signatureBytes.length; i++) {
+      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
     }
-    /** @override */
-    secureCompare(stringA, stringB) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const bufferA = this.encoder.encode(stringA);
-            const bufferB = this.encoder.encode(stringB);
-            if (bufferA.length !== bufferB.length) {
-                return false;
-            }
-            const algorithm = { name: 'HMAC', hash: 'SHA-256' };
-            const key = (yield crypto.subtle.generateKey(algorithm, false, [
-                'sign',
-                'verify',
-            ]));
-            const hmac = yield crypto.subtle.sign(algorithm, key, bufferA);
-            const equal = yield crypto.subtle.verify(algorithm, key, hmac, bufferB);
-            return equal;
-        });
+    return signatureHexCodes.join("");
+  }
+  /** @override */
+  async secureCompare(stringA, stringB) {
+    const bufferA = this.encoder.encode(stringA);
+    const bufferB = this.encoder.encode(stringB);
+    if (bufferA.length !== bufferB.length) {
+      return false;
     }
-    encrypt(plaintext, key, iv, aad) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));
-            const cryptoKey = yield this.subtleCrypto.importKey('raw', key, { name: 'AES-GCM' }, false, ['encrypt']);
-            const encryptParams = {
-                name: 'AES-GCM',
-                iv: actualIv,
-            };
-            if (aad) {
-                encryptParams.additionalData = aad;
-            }
-            const encryptedData = yield this.subtleCrypto.encrypt(encryptParams, cryptoKey, plaintext);
-            const encryptedBytes = new Uint8Array(encryptedData);
-            // Extract tag (last 16 bytes)
-            const tagSize = 16;
-            const tagStart = encryptedBytes.length - tagSize;
-            const tag = encryptedBytes.slice(tagStart);
-            const ciphertext = encryptedBytes.slice(0, tagStart);
-            return {
-                ciphertext,
-                iv: actualIv,
-                tag,
-            };
-        });
+    const algorithm = { name: "HMAC", hash: "SHA-256" };
+    const key = await crypto.subtle.generateKey(algorithm, false, [
+      "sign",
+      "verify"
+    ]);
+    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);
+    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);
+    return equal;
+  }
+  async encrypt(plaintext, key, iv, aad) {
+    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));
+    const cryptoKey = await this.subtleCrypto.importKey(
+      "raw",
+      key,
+      { name: "AES-GCM" },
+      false,
+      ["encrypt"]
+    );
+    const encryptParams = {
+      name: "AES-GCM",
+      iv: actualIv
+    };
+    if (aad) {
+      encryptParams.additionalData = aad;
     }
-    decrypt(ciphertext, key, iv, tag, aad) {
-        return __awaiter(this, void 0, void 0, function* () {
-            // SubtleCrypto expects tag to be appended to ciphertext for AES-GCM
-            const combinedData = new Uint8Array(ciphertext.length + tag.length);
-            combinedData.set(ciphertext, 0);
-            combinedData.set(tag, ciphertext.length);
-            const cryptoKey = yield this.subtleCrypto.importKey('raw', key, { name: 'AES-GCM' }, false, ['decrypt']);
-            const decryptParams = {
-                name: 'AES-GCM',
-                iv,
-            };
-            if (aad) {
-                decryptParams.additionalData = aad;
-            }
-            const decryptedData = yield this.subtleCrypto.decrypt(decryptParams, cryptoKey, combinedData);
-            return new Uint8Array(decryptedData);
-        });
-    }
-    randomBytes(length) {
-        const bytes = new Uint8Array(length);
-        crypto.getRandomValues(bytes);
-        return bytes;
+    const encryptedData = await this.subtleCrypto.encrypt(
+      encryptParams,
+      cryptoKey,
+      plaintext
+    );
+    const encryptedBytes = new Uint8Array(encryptedData);
+    const tagSize = 16;
+    const tagStart = encryptedBytes.length - tagSize;
+    const tag = encryptedBytes.slice(tagStart);
+    const ciphertext = encryptedBytes.slice(0, tagStart);
+    return {
+      ciphertext,
+      iv: actualIv,
+      tag
+    };
+  }
+  async decrypt(ciphertext, key, iv, tag, aad) {
+    const combinedData = new Uint8Array(ciphertext.length + tag.length);
+    combinedData.set(ciphertext, 0);
+    combinedData.set(tag, ciphertext.length);
+    const cryptoKey = await this.subtleCrypto.importKey(
+      "raw",
+      key,
+      { name: "AES-GCM" },
+      false,
+      ["decrypt"]
+    );
+    const decryptParams = {
+      name: "AES-GCM",
+      iv
+    };
+    if (aad) {
+      decryptParams.additionalData = aad;
     }
+    const decryptedData = await this.subtleCrypto.decrypt(
+      decryptParams,
+      cryptoKey,
+      combinedData
+    );
+    return new Uint8Array(decryptedData);
+  }
+  randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return bytes;
+  }
 }
-exports.SubtleCryptoProvider = SubtleCryptoProvider;
-// Cached mapping of byte to hex representation. We do this once to avoid re-
-// computing every time we need to convert the result of a signature to hex.
 const byteHexMapping = new Array(256);
 for (let i = 0; i < byteHexMapping.length; i++) {
-    byteHexMapping[i] = i.toString(16).padStart(2, '0');
+  byteHexMapping[i] = i.toString(16).padStart(2, "0");
 }
+export {
+  SubtleCryptoProvider
+};
+//# sourceMappingURL=subtle-crypto-provider.js.map

package/lib/common/crypto/subtle-crypto-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/common/crypto/subtle-crypto-provider.ts"],"sourcesContent":["import { CryptoProvider } from './crypto-provider';\n\n/**\n * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.\n *\n * This only supports asynchronous operations.\n */\nexport class SubtleCryptoProvider extends CryptoProvider {\n  subtleCrypto: SubtleCrypto;\n\n  constructor(subtleCrypto?: SubtleCrypto) {\n    super();\n\n    // If no subtle crypto is interface, default to the global namespace. This\n    // is to allow custom interfaces (eg. using the Node webcrypto interface in\n    // tests).\n    this.subtleCrypto = subtleCrypto || crypto.subtle;\n  }\n\n  computeHMACSignature(_payload: string, _secret: string): string {\n    throw new Error(\n      'SubleCryptoProvider cannot be used in a synchronous context.',\n    );\n  }\n\n  /** @override */\n  async computeHMACSignatureAsync(\n    payload: string,\n    secret: string,\n  ): Promise<string> {\n    const encoder = new TextEncoder();\n\n    const key = await this.subtleCrypto.importKey(\n      'raw',\n      encoder.encode(secret),\n      {\n        name: 'HMAC',\n        hash: { name: 'SHA-256' },\n      },\n      false,\n      ['sign'],\n    );\n\n    const signatureBuffer = await this.subtleCrypto.sign(\n      'hmac',\n      key,\n      encoder.encode(payload),\n    );\n\n    // crypto.subtle returns the signature in base64 format. This must be\n    // encoded in hex to match the CryptoProvider contract. We map each byte in\n    // the buffer to its corresponding hex octet and then combine into a string.\n    const signatureBytes = new Uint8Array(signatureBuffer);\n    const signatureHexCodes = new Array(signatureBytes.length);\n\n    for (let i = 0; i < signatureBytes.length; i++) {\n      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];\n    }\n\n    return signatureHexCodes.join('');\n  }\n\n  /** @override */\n  async secureCompare(stringA: string, stringB: string): Promise<boolean> {\n    const bufferA = this.encoder.encode(stringA);\n    const bufferB = this.encoder.encode(stringB);\n\n    if (bufferA.length !== bufferB.length) {\n      return false;\n    }\n\n    const algorithm = { name: 'HMAC', hash: 'SHA-256' };\n    const key = (await crypto.subtle.generateKey(algorithm, false, [\n      'sign',\n      'verify',\n    ])) as CryptoKey;\n    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);\n    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);\n\n    return equal;\n  }\n\n  async encrypt(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n    iv?: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<{\n    ciphertext: Uint8Array;\n    iv: Uint8Array;\n    tag: Uint8Array;\n  }> {\n    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key,\n      { name: 'AES-GCM' },\n      false,\n      ['encrypt'],\n    );\n\n    const encryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv: actualIv,\n    };\n\n    if (aad) {\n      encryptParams.additionalData = aad;\n    }\n\n    const encryptedData = await this.subtleCrypto.encrypt(\n      encryptParams,\n      cryptoKey,\n      plaintext,\n    );\n\n    const encryptedBytes = new Uint8Array(encryptedData);\n\n    // Extract tag (last 16 bytes)\n    const tagSize = 16;\n    const tagStart = encryptedBytes.length - tagSize;\n    const tag = encryptedBytes.slice(tagStart);\n    const ciphertext = encryptedBytes.slice(0, tagStart);\n\n    return {\n      ciphertext,\n      iv: actualIv,\n      tag,\n    };\n  }\n\n  async decrypt(\n    ciphertext: Uint8Array,\n    key: Uint8Array,\n    iv: Uint8Array,\n    tag: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<Uint8Array> {\n    // SubtleCrypto expects tag to be appended to ciphertext for AES-GCM\n    const combinedData = new Uint8Array(ciphertext.length + tag.length);\n    combinedData.set(ciphertext, 0);\n    combinedData.set(tag, ciphertext.length);\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key,\n      { name: 'AES-GCM' },\n      false,\n      ['decrypt'],\n    );\n\n    const decryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv,\n    };\n\n    if (aad) {\n      decryptParams.additionalData = aad;\n    }\n\n    const decryptedData = await this.subtleCrypto.decrypt(\n      decryptParams,\n      cryptoKey,\n      combinedData,\n    );\n\n    return new Uint8Array(decryptedData);\n  }\n\n  randomBytes(length: number): Uint8Array {\n    const bytes = new Uint8Array(length);\n    crypto.getRandomValues(bytes);\n    return bytes;\n  }\n}\n\n// Cached mapping of byte to hex representation. We do this once to avoid re-\n// computing every time we need to convert the result of a signature to hex.\nconst byteHexMapping = new Array(256);\nfor (let i = 0; i < byteHexMapping.length; i++) {\n  byteHexMapping[i] = i.toString(16).padStart(2, '0');\n}\n"],"mappings":";;AAAA,SAAS,sBAAsB;AAOxB,MAAM,6BAA6B,eAAe;AAAA,EAPzD,OAOyD;AAAA;AAAA;AAAA,EACvD;AAAA,EAEA,YAAY,cAA6B;AACvC,UAAM;AAKN,SAAK,eAAe,gBAAgB,OAAO;AAAA,EAC7C;AAAA,EAEA,qBAAqB,UAAkB,SAAyB;AAC9D,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,0BACJ,SACA,QACiB;AACjB,UAAM,UAAU,IAAI,YAAY;AAEhC,UAAM,MAAM,MAAM,KAAK,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB;AAAA,QACE,MAAM;AAAA,QACN,MAAM,EAAE,MAAM,UAAU;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,UAAM,kBAAkB,MAAM,KAAK,aAAa;AAAA,MAC9C;AAAA,MACA;AAAA,MACA,QAAQ,OAAO,OAAO;AAAA,IACxB;AAKA,UAAM,iBAAiB,IAAI,WAAW,eAAe;AACrD,UAAM,oBAAoB,IAAI,MAAM,eAAe,MAAM;AAEzD,aAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,wBAAkB,CAAC,IAAI,eAAe,eAAe,CAAC,CAAC;AAAA,IACzD;AAEA,WAAO,kBAAkB,KAAK,EAAE;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,cAAc,SAAiB,SAAmC;AACtE,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAC3C,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAE3C,QAAI,QAAQ,WAAW,QAAQ,QAAQ;AACrC,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,EAAE,MAAM,QAAQ,MAAM,UAAU;AAClD,UAAM,MAAO,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO;AAAA,MAC7D;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,OAAO,MAAM,OAAO,OAAO,KAAK,WAAW,KAAK,OAAO;AAC7D,UAAM,QAAQ,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK,MAAM,OAAO;AAEtE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QACJ,WACA,KACA,IACA,KAKC;AACD,UAAM,WAAW,MAAM,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAEhE,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN,IAAI;AAAA,IACN;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,WAAW,aAAa;AAGnD,UAAM,UAAU;AAChB,UAAM,WAAW,eAAe,SAAS;AACzC,UAAM,MAAM,eAAe,MAAM,QAAQ;AACzC,UAAM,aAAa,eAAe,MAAM,GAAG,QAAQ;AAEnD,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,YACA,KACA,IACA,KACA,KACqB;AAErB,UAAM,eAAe,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;AAClE,iBAAa,IAAI,YAAY,CAAC;AAC9B,iBAAa,IAAI,KAAK,WAAW,MAAM;AAEvC,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN;AAAA,IACF;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO,IAAI,WAAW,aAAa;AAAA,EACrC;AAAA,EAEA,YAAY,QAA4B;AACtC,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,WAAO,gBAAgB,KAAK;AAC5B,WAAO;AAAA,EACT;AACF;AAIA,MAAM,iBAAiB,IAAI,MAAM,GAAG;AACpC,SAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,iBAAe,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACpD;","names":[]}

package/lib/common/exceptions/bad-request.exception.cjs

@@ -0,0 +1,58 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var bad_request_exception_exports = {};
+__export(bad_request_exception_exports, {
+  BadRequestException: () => BadRequestException
+});
+module.exports = __toCommonJS(bad_request_exception_exports);
+class BadRequestException extends Error {
+  static {
+    __name(this, "BadRequestException");
+  }
+  status = 400;
+  name = "BadRequestException";
+  message = "Bad request";
+  code;
+  errors;
+  requestID;
+  constructor({
+    code,
+    errors,
+    message,
+    requestID
+  }) {
+    super();
+    this.requestID = requestID;
+    if (message) {
+      this.message = message;
+    }
+    if (code) {
+      this.code = code;
+    }
+    if (errors) {
+      this.errors = errors;
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BadRequestException
+});
+//# sourceMappingURL=bad-request.exception.cjs.map

package/lib/common/exceptions/bad-request.exception.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/common/exceptions/bad-request.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class BadRequestException extends Error implements RequestException {\n  readonly status = 400;\n  readonly name = 'BadRequestException';\n  readonly message: string = 'Bad request';\n  readonly code?: string;\n  readonly errors?: unknown[];\n  readonly requestID: string;\n\n  constructor({\n    code,\n    errors,\n    message,\n    requestID,\n  }: {\n    code?: string;\n    errors?: unknown[];\n    message?: string;\n    requestID: string;\n  }) {\n    super();\n\n    this.requestID = requestID;\n\n    if (message) {\n      this.message = message;\n    }\n\n    if (code) {\n      this.code = code;\n    }\n\n    if (errors) {\n      this.errors = errors;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,MAAM,4BAA4B,MAAkC;AAAA,EAF3E,OAE2E;AAAA;AAAA;AAAA,EAChE,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAkB;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKG;AACD,UAAM;AAEN,SAAK,YAAY;AAEjB,QAAI,SAAS;AACX,WAAK,UAAU;AAAA,IACjB;AAEA,QAAI,MAAM;AACR,WAAK,OAAO;AAAA,IACd;AAEA,QAAI,QAAQ;AACV,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;","names":[]}

package/lib/common/exceptions/bad-request.exception.d.cts

@@ -0,0 +1,18 @@
+import { RequestException } from '../interfaces/request-exception.interface.cjs';
+
+declare class BadRequestException extends Error implements RequestException {
+    readonly status = 400;
+    readonly name = "BadRequestException";
+    readonly message: string;
+    readonly code?: string;
+    readonly errors?: unknown[];
+    readonly requestID: string;
+    constructor({ code, errors, message, requestID, }: {
+        code?: string;
+        errors?: unknown[];
+        message?: string;
+        requestID: string;
+    });
+}
+
+export { BadRequestException };

package/lib/common/exceptions/bad-request.exception.d.ts

@@ -1,5 +1,6 @@
-import { RequestException } from '../interfaces/request-exception.interface';
-export declare class BadRequestException extends Error implements RequestException {
+import { RequestException } from '../interfaces/request-exception.interface.js';
+
+declare class BadRequestException extends Error implements RequestException {
     readonly status = 400;
     readonly name = "BadRequestException";
     readonly message: string;
@@ -13,3 +14,5 @@ export declare class BadRequestException extends Error implements RequestExcepti
         requestID: string;
     });
 }
+
+export { BadRequestException };

package/lib/common/exceptions/bad-request.exception.js

@@ -1,22 +1,35 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BadRequestException = void 0;
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 class BadRequestException extends Error {
-    constructor({ code, errors, message, requestID, }) {
-        super();
-        this.status = 400;
-        this.name = 'BadRequestException';
-        this.message = 'Bad request';
-        this.requestID = requestID;
-        if (message) {
-            this.message = message;
-        }
-        if (code) {
-            this.code = code;
-        }
-        if (errors) {
-            this.errors = errors;
-        }
+  static {
+    __name(this, "BadRequestException");
+  }
+  status = 400;
+  name = "BadRequestException";
+  message = "Bad request";
+  code;
+  errors;
+  requestID;
+  constructor({
+    code,
+    errors,
+    message,
+    requestID
+  }) {
+    super();
+    this.requestID = requestID;
+    if (message) {
+      this.message = message;
     }
+    if (code) {
+      this.code = code;
+    }
+    if (errors) {
+      this.errors = errors;
+    }
+  }
 }
-exports.BadRequestException = BadRequestException;
+export {
+  BadRequestException
+};
+//# sourceMappingURL=bad-request.exception.js.map

package/lib/common/exceptions/bad-request.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/common/exceptions/bad-request.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class BadRequestException extends Error implements RequestException {\n  readonly status = 400;\n  readonly name = 'BadRequestException';\n  readonly message: string = 'Bad request';\n  readonly code?: string;\n  readonly errors?: unknown[];\n  readonly requestID: string;\n\n  constructor({\n    code,\n    errors,\n    message,\n    requestID,\n  }: {\n    code?: string;\n    errors?: unknown[];\n    message?: string;\n    requestID: string;\n  }) {\n    super();\n\n    this.requestID = requestID;\n\n    if (message) {\n      this.message = message;\n    }\n\n    if (code) {\n      this.code = code;\n    }\n\n    if (errors) {\n      this.errors = errors;\n    }\n  }\n}\n"],"mappings":";;AAEO,MAAM,4BAA4B,MAAkC;AAAA,EAF3E,OAE2E;AAAA;AAAA;AAAA,EAChE,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAkB;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKG;AACD,UAAM;AAEN,SAAK,YAAY;AAEjB,QAAI,SAAS;AACX,WAAK,UAAU;AAAA,IACjB;AAEA,QAAI,MAAM;AACR,WAAK,OAAO;AAAA,IACd;AAEA,QAAI,QAAQ;AACV,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;","names":[]}