auth-monitorias-uniandes 0.1.2-beta.58 → 0.1.2-beta.60

package/lib/encryption/encryption.module.d.ts

@@ -0,0 +1,2 @@
+export declare class EncryptionModule {
+}

package/lib/encryption/encryption.module.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var core_1 = require("@angular/core");
+var encryption_service_1 = require("./services/encryption.service");
+var EncryptionModule = /** @class */ (function () {
+    function EncryptionModule() {
+    }
+    EncryptionModule.decorators = [
+        { type: core_1.NgModule, args: [{
+                    providers: [
+                        encryption_service_1.EncryptionService
+                    ]
+                },] },
+    ];
+    return EncryptionModule;
+}());
+exports.EncryptionModule = EncryptionModule;
+//# sourceMappingURL=encryption.module.js.map

package/lib/encryption/encryption.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.module.js","sourceRoot":"","sources":["../../build/encryption/encryption.module.ts"],"names":[],"mappings":";;AAAA,sCAAyC;AAEzC,oEAAkE;;;;;gBAEjE,eAAQ,SAAC;oBACR,SAAS,EAAE;wBACT,sCAAiB;qBAClB;iBACF;;2BARD;;AAUa,4CAAgB"}

package/lib/encryption/encryption.module.metadata.json

@@ -0,0 +1 @@
+[{"__symbolic":"module","version":4,"metadata":{"EncryptionModule":{"__symbolic":"class","decorators":[{"__symbolic":"call","expression":{"__symbolic":"reference","module":"@angular/core","name":"NgModule","line":4,"character":1},"arguments":[{"providers":[{"__symbolic":"reference","module":"./services/encryption.service","name":"EncryptionService","line":6,"character":4}]}]}]}}}]

package/lib/encryption/index.d.ts

@@ -0,0 +1,3 @@
+export * from './encryption.module';
+export * from './interceptors/encryption.interceptor';
+export * from './rsa-public-key';

package/lib/encryption/index.js

@@ -0,0 +1,9 @@
+"use strict";
+function __export(m) {
+    for (var p in m) if (!exports.hasOwnProperty(p)) exports[p] = m[p];
+}
+Object.defineProperty(exports, "__esModule", { value: true });
+__export(require("./encryption.module"));
+__export(require("./interceptors/encryption.interceptor"));
+__export(require("./rsa-public-key"));
+//# sourceMappingURL=index.js.map

package/lib/encryption/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../build/encryption/index.ts"],"names":[],"mappings":";;;;;AAAA,yCAAmC;AACnC,2DAAsD;AACtD,sCAAgC"}

package/lib/encryption/index.metadata.json

@@ -0,0 +1 @@
+[{"__symbolic":"module","version":4,"metadata":{},"exports":[{"from":"./encryption.module"},{"from":"./interceptors/encryption.interceptor"},{"from":"./rsa-public-key"}]}]

package/lib/encryption/interceptors/encryption.interceptor.d.ts

@@ -0,0 +1,12 @@
+import { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';
+import { Observable } from 'rxjs';
+import { EncryptionService } from '../services/encryption.service';
+export declare class EncryptionInterceptor implements HttpInterceptor {
+    private rsaPublicKey;
+    private encryptionService;
+    private endpointsToEncrypt;
+    constructor(rsaPublicKey: string, encryptionService: EncryptionService);
+    intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>>;
+    private encryptLastUrlSegment(request, urlSegments, queryString?);
+    private encryptBody(request);
+}

package/lib/encryption/interceptors/encryption.interceptor.js

@@ -0,0 +1,109 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = y[op[0] & 2 ? "return" : op[0] ? "throw" : "next"]) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [0, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var core_1 = require("@angular/core");
+var from_1 = require("rxjs/observable/from");
+var operators_1 = require("rxjs/operators");
+var encryption_service_1 = require("../services/encryption.service");
+var rsa_public_key_1 = require("../rsa-public-key");
+var EncryptionInterceptor = /** @class */ (function () {
+    function EncryptionInterceptor(rsaPublicKey, encryptionService) {
+        this.rsaPublicKey = rsaPublicKey;
+        this.encryptionService = encryptionService;
+        this.endpointsToEncrypt = ['getPerson', 'getStudent', 'getStudentByUsername'];
+    }
+    EncryptionInterceptor.prototype.intercept = function (request, next) {
+        var _this = this;
+        var _a = request.urlWithParams.split('?'), url = _a[0], queryString = _a[1];
+        var urlSegments = url.split('/').filter(Boolean);
+        var endpointSegment = urlSegments[urlSegments.length - 2];
+        var requestPromise = Promise.resolve(request);
+        if (request.method === 'GET' && urlSegments.includes('core') && this.endpointsToEncrypt.includes(endpointSegment)) {
+            requestPromise = requestPromise.then(function (req) { return _this.encryptLastUrlSegment(req, urlSegments, queryString); });
+        }
+        if (request.body && urlSegments.includes('core')) {
+            requestPromise = requestPromise.then(function (req) { return _this.encryptBody(req); });
+        }
+        return from_1.from(requestPromise).pipe(operators_1.switchMap(function (clonedReq) { return next.handle(clonedReq); }));
+    };
+    EncryptionInterceptor.prototype.encryptLastUrlSegment = function (request, urlSegments, queryString) {
+        return __awaiter(this, void 0, void 0, function () {
+            var lastIndex, _a, _b, protocol, newUrl;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0:
+                        lastIndex = (urlSegments.length - 1);
+                        _a = urlSegments;
+                        _b = lastIndex;
+                        return [4 /*yield*/, this.encryptionService.encryptValue(urlSegments[lastIndex], this.rsaPublicKey)];
+                    case 1:
+                        _a[_b] = _c.sent();
+                        protocol = request.url.startsWith('https') ? 'https://' : 'http://';
+                        newUrl = protocol + urlSegments.slice(1).join('/');
+                        if (queryString) {
+                            newUrl += "?" + queryString;
+                        }
+                        return [2 /*return*/, request.clone({ url: newUrl })];
+                }
+            });
+        });
+    };
+    EncryptionInterceptor.prototype.encryptBody = function (request) {
+        return __awaiter(this, void 0, void 0, function () {
+            var encrypted;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.encryptionService.encryptValue(request.body, this.rsaPublicKey)];
+                    case 1:
+                        encrypted = _a.sent();
+                        return [2 /*return*/, request.clone({ body: { payload: encrypted } })];
+                }
+            });
+        });
+    };
+    EncryptionInterceptor.decorators = [
+        { type: core_1.Injectable },
+    ];
+    /** @nocollapse */
+    EncryptionInterceptor.ctorParameters = function () { return [
+        { type: undefined, decorators: [{ type: core_1.Inject, args: [rsa_public_key_1.RSA_PUBLIC_KEY,] },] },
+        { type: encryption_service_1.EncryptionService, },
+    ]; };
+    return EncryptionInterceptor;
+}());
+exports.EncryptionInterceptor = EncryptionInterceptor;
+//# sourceMappingURL=encryption.interceptor.js.map

package/lib/encryption/interceptors/encryption.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.interceptor.js","sourceRoot":"","sources":["../../../build/encryption/interceptors/encryption.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,sCAAmD;AAGnD,6CAA4C;AAC5C,4CAA2C;AAG3C,qEAAmE;AAEnE,oDAAmD;;IAO/C,+BAEY,cACA,iBAAqC;QADrC,iBAAY,GAAZ,YAAY;QACZ,sBAAiB,GAAjB,iBAAiB,CAAoB;kCALpB,CAAC,WAAW,EAAE,YAAY,EAAE,sBAAsB,CAAC;KAM3E;IAEL,yCAAS,GAAT,UAAU,OAAyB,EAAE,IAAiB;QAAtD,iBAoBC;QAlBG,2CAAQ,WAAG,EAAE,mBAAW,CAAsC;QAC9D,IAAM,WAAW,GAAY,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAM,eAAe,GAAQ,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEjE,IAAI,cAAc,GAAW,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtD,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAChH,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,UAAA,GAAG,IAAI,OAAA,KAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,EAAzD,CAAyD,CAAC,CAAC;SAC1G;QAED,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,UAAA,GAAG,IAAI,OAAA,KAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAArB,CAAqB,CAAC,CAAC;SACtE;QAED,MAAM,CAAC,WAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAC5B,qBAAS,CAAC,UAAA,SAAS,IAAI,OAAA,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAtB,CAAsB,CAAC,CACjD,CAAC;KAEL;IAEa,qDAAqB,GAAnC,UAAoC,OAAyB,EAAE,WAAqB,EAAE,WAAoB;;;;;;wBAEhG,SAAS,GAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;wBAClD,KAAA,WAAW,CAAA;wBAAC,KAAA,SAAS,CAAA;wBAAI,qBAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAC9D,WAAW,CAAC,SAAS,CAAC,EACtB,IAAI,CAAC,YAAY,CACpB,EAAA;;wBAHD,MAAsB,GAAG,SAGxB,CAAC;wBAEI,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;wBACtE,MAAM,GAAO,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAE3D,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;4BACd,MAAM,IAAI,MAAK,WAAc,CAAC;yBACjC;wBAED,sBAAO,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAC;;;;KAEzC;IAEa,2CAAW,GAAzB,UAA0B,OAAyB;;;;;4BAE7B,qBAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,EAAA;;wBAAtF,SAAS,GAAG,SAA0E;wBAC5F,sBAAO,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,EAAC;;;;KAE1D;;gBAzDJ,iBAAU;;;;gDAMF,aAAM,SAAC,+BAAc;gBAVrB,sCAAiB;;gCAP1B;;AAYa,sDAAqB"}

package/lib/encryption/interceptors/encryption.interceptor.metadata.json

@@ -0,0 +1 @@
+[{"__symbolic":"module","version":4,"metadata":{"EncryptionInterceptor":{"__symbolic":"class","decorators":[{"__symbolic":"call","expression":{"__symbolic":"reference","module":"@angular/core","name":"Injectable","line":11,"character":1}}],"members":{"__ctor__":[{"__symbolic":"constructor","parameterDecorators":[[{"__symbolic":"call","expression":{"__symbolic":"reference","module":"@angular/core","name":"Inject","line":17,"character":9},"arguments":[{"__symbolic":"reference","module":"../rsa-public-key","name":"RSA_PUBLIC_KEY","line":17,"character":16}]}],null],"parameters":[{"__symbolic":"reference","name":"string"},{"__symbolic":"reference","module":"../services/encryption.service","name":"EncryptionService","line":19,"character":36}]}],"intercept":[{"__symbolic":"method"}],"encryptLastUrlSegment":[{"__symbolic":"method"}],"encryptBody":[{"__symbolic":"method"}]}}}}]

package/lib/encryption/rsa-public-key.d.ts

@@ -0,0 +1,2 @@
+import { InjectionToken } from '@angular/core';
+export declare const RSA_PUBLIC_KEY: InjectionToken<string>;

package/lib/encryption/rsa-public-key.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var core_1 = require("@angular/core");
+exports.RSA_PUBLIC_KEY = new core_1.InjectionToken('RSA_PUBLIC_KEY');
+//# sourceMappingURL=rsa-public-key.js.map

package/lib/encryption/rsa-public-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa-public-key.js","sourceRoot":"","sources":["../../build/encryption/rsa-public-key.ts"],"names":[],"mappings":";;AAAA,sCAA+C;AAElC,QAAA,cAAc,GAAG,IAAI,qBAAc,CAAS,gBAAgB,CAAC"}

package/lib/encryption/rsa-public-key.metadata.json

@@ -0,0 +1 @@
+[{"__symbolic":"module","version":4,"metadata":{"RSA_PUBLIC_KEY":{"__symbolic":"new","expression":{"__symbolic":"reference","module":"@angular/core","name":"InjectionToken","line":2,"character":34},"arguments":["RSA_PUBLIC_KEY"]}}}]

package/lib/encryption/services/encryption.service.d.ts

@@ -0,0 +1,13 @@
+export declare class EncryptionService {
+    private generateAesGcmKey();
+    private generateAesGcmIv();
+    private encryptValueWithAesGcm(aesKey, iv, value);
+    private exportAesKeyToRaw(aesKey);
+    private pemPublicKeyToArrayBuffer(pem);
+    private importRsaOaepPublicKey(pem);
+    private encryptAesKeyWithRsaOaep(aesKeyRaw, rsaPublicKey);
+    private encodeBase64Url(buffer);
+    private buildEncryptedToken(encryptedAesKey, iv, encryptedData);
+    private safeExecute<T>(step, fn);
+    encryptValue(value: string | Record<string, any>, rsaPublicKeyPem: string): Promise<string>;
+}

package/lib/encryption/services/encryption.service.js

@@ -0,0 +1,211 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = y[op[0] & 2 ? "return" : op[0] ? "throw" : "next"]) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [0, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var core_1 = require("@angular/core");
+var EncryptionService = /** @class */ (function () {
+    function EncryptionService() {
+    }
+    // Genera una clave simétrica AES-GCM de 256 bits
+    // Genera una clave simétrica AES-GCM de 256 bits
+    EncryptionService.prototype.generateAesGcmKey = 
+    // Genera una clave simétrica AES-GCM de 256 bits
+    function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, true, ['encrypt', 'decrypt'])];
+            });
+        });
+    };
+    // Genera un vector de inicialización (IV) aleatorio de 12 bytes para AES-GCM
+    // Genera un vector de inicialización (IV) aleatorio de 12 bytes para AES-GCM
+    EncryptionService.prototype.generateAesGcmIv = 
+    // Genera un vector de inicialización (IV) aleatorio de 12 bytes para AES-GCM
+    function () {
+        return crypto.getRandomValues(new Uint8Array(12));
+    };
+    // Cifra el valor usando AES-GCM con la clave y IV proporcionados
+    // Cifra el valor usando AES-GCM con la clave y IV proporcionados
+    EncryptionService.prototype.encryptValueWithAesGcm = 
+    // Cifra el valor usando AES-GCM con la clave y IV proporcionados
+    function (aesKey, iv, value) {
+        return __awaiter(this, void 0, void 0, function () {
+            var subtle, encoder, valueAsString;
+            return __generator(this, function (_a) {
+                subtle = crypto.subtle;
+                encoder = new TextEncoder();
+                valueAsString = typeof value === 'string' ? value : JSON.stringify(value);
+                return [2 /*return*/, subtle.encrypt({
+                        name: 'AES-GCM',
+                        iv: iv
+                    }, aesKey, encoder.encode(valueAsString))];
+            });
+        });
+    };
+    // Exporta una clave AES-GCM a formato binario (raw)
+    // Exporta una clave AES-GCM a formato binario (raw)
+    EncryptionService.prototype.exportAesKeyToRaw = 
+    // Exporta una clave AES-GCM a formato binario (raw)
+    function (aesKey) {
+        return __awaiter(this, void 0, void 0, function () {
+            var subtle;
+            return __generator(this, function (_a) {
+                subtle = crypto.subtle;
+                return [2 /*return*/, subtle.exportKey('raw', aesKey)];
+            });
+        });
+    };
+    // Convierte una clave pública RSA en formato PEM a ArrayBuffer
+    // Convierte una clave pública RSA en formato PEM a ArrayBuffer
+    EncryptionService.prototype.pemPublicKeyToArrayBuffer = 
+    // Convierte una clave pública RSA en formato PEM a ArrayBuffer
+    function (pem) {
+        var cleanPem = pem.replace(/\s+/g, '');
+        var binary = atob(cleanPem);
+        var buffer = new Uint8Array(binary.length);
+        for (var i = 0; i < binary.length; i++) {
+            buffer[i] = binary.charCodeAt(i);
+        }
+        return buffer.buffer;
+    };
+    // Importa una clave pública RSA para cifrado usando RSA-OAEP
+    // Importa una clave pública RSA para cifrado usando RSA-OAEP
+    EncryptionService.prototype.importRsaOaepPublicKey = 
+    // Importa una clave pública RSA para cifrado usando RSA-OAEP
+    function (pem) {
+        return __awaiter(this, void 0, void 0, function () {
+            var subtle;
+            return __generator(this, function (_a) {
+                subtle = crypto.subtle;
+                return [2 /*return*/, subtle.importKey('spki', this.pemPublicKeyToArrayBuffer(pem), { name: 'RSA-OAEP', hash: { name: 'SHA-1' } }, true, ['encrypt'])];
+            });
+        });
+    };
+    // Cifra una clave AES usando una clave pública RSA-OAEP
+    // Cifra una clave AES usando una clave pública RSA-OAEP
+    EncryptionService.prototype.encryptAesKeyWithRsaOaep = 
+    // Cifra una clave AES usando una clave pública RSA-OAEP
+    function (aesKeyRaw, rsaPublicKey) {
+        return __awaiter(this, void 0, void 0, function () {
+            var subtle;
+            return __generator(this, function (_a) {
+                subtle = crypto.subtle;
+                return [2 /*return*/, subtle.encrypt({ name: 'RSA-OAEP' }, rsaPublicKey, aesKeyRaw)];
+            });
+        });
+    };
+    // Codifica bytes en formato Base64URL seguro para transporte
+    // Codifica bytes en formato Base64URL seguro para transporte
+    EncryptionService.prototype.encodeBase64Url = 
+    // Codifica bytes en formato Base64URL seguro para transporte
+    function (buffer) {
+        var bytes = buffer instanceof ArrayBuffer ? new Uint8Array(buffer) : buffer;
+        var binary = '';
+        for (var i = 0; i < bytes.length; i++) {
+            binary += String.fromCharCode(bytes[i]);
+        }
+        var base64 = btoa(binary);
+        return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    };
+    // Construye el token final con formato encryptedKey.iv.encryptedData (k.iv.d)
+    // Construye el token final con formato encryptedKey.iv.encryptedData (k.iv.d)
+    EncryptionService.prototype.buildEncryptedToken = 
+    // Construye el token final con formato encryptedKey.iv.encryptedData (k.iv.d)
+    function (encryptedAesKey, iv, encryptedData) {
+        return (this.encodeBase64Url(encryptedAesKey) +
+            '.' +
+            this.encodeBase64Url(iv) +
+            '.' +
+            this.encodeBase64Url(encryptedData));
+    };
+    // Ejecuta una función y registra errores en consola
+    // Ejecuta una función y registra errores en consola
+    EncryptionService.prototype.safeExecute = 
+    // Ejecuta una función y registra errores en consola
+    function (step, fn) {
+        return __awaiter(this, void 0, void 0, function () {
+            var error_1;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        _a.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, fn()];
+                    case 1: return [2 /*return*/, _a.sent()];
+                    case 2:
+                        error_1 = _a.sent();
+                        console.error("[Encryption] " + step + " failed", error_1);
+                        throw error_1;
+                    case 3: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    EncryptionService.prototype.encryptValue = function (value, rsaPublicKeyPem) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _this = this;
+            var aesKey, iv, encryptedData, aesKeyRaw, rsaPublicKey, encryptedAesKey;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.safeExecute('AES key generation', function () { return _this.generateAesGcmKey(); })];
+                    case 1:
+                        aesKey = _a.sent();
+                        return [4 /*yield*/, this.safeExecute('AES IV generation', function () { return _this.generateAesGcmIv(); })];
+                    case 2:
+                        iv = _a.sent();
+                        return [4 /*yield*/, this.safeExecute('AES encryption', function () { return _this.encryptValueWithAesGcm(aesKey, iv, value); })];
+                    case 3:
+                        encryptedData = _a.sent();
+                        return [4 /*yield*/, this.safeExecute('AES key export', function () { return _this.exportAesKeyToRaw(aesKey); })];
+                    case 4:
+                        aesKeyRaw = _a.sent();
+                        return [4 /*yield*/, this.safeExecute('RSA public key import', function () { return _this.importRsaOaepPublicKey(rsaPublicKeyPem); })];
+                    case 5:
+                        rsaPublicKey = _a.sent();
+                        return [4 /*yield*/, this.safeExecute('AES key RSA encryption', function () { return _this.encryptAesKeyWithRsaOaep(aesKeyRaw, rsaPublicKey); })];
+                    case 6:
+                        encryptedAesKey = _a.sent();
+                        return [2 /*return*/, this.buildEncryptedToken(encryptedAesKey, iv, encryptedData)];
+                }
+            });
+        });
+    };
+    EncryptionService.decorators = [
+        { type: core_1.Injectable },
+    ];
+    return EncryptionService;
+}());
+exports.EncryptionService = EncryptionService;
+//# sourceMappingURL=encryption.service.js.map

package/lib/encryption/services/encryption.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.js","sourceRoot":"","sources":["../../../build/encryption/services/encryption.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,sCAA2C;;;;IAOvC,iDAAiD;;IACnC,6CAAiB;;IAA/B;;;gBACI,sBAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,EAAC;;;KACL;IAED,6EAA6E;;IACrE,4CAAgB;;IAAxB;QACI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAe,CAAC;KACnE;IAED,iEAAiE;;IACnD,kDAAsB;;IAApC,UAAqC,MAAiB,EAAE,EAAc,EAAE,KAAmC;;;;gBACjG,MAAM,GAAG,MAAM,CAAC,MAAa,CAAC;gBAC9B,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC5B,aAAa,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAChF,sBAAO,MAAM,CAAC,OAAO,CACjB;wBACI,IAAI,EAAE,SAAS;wBACf,EAAE,EAAE,EAAE;qBACT,EACD,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAChC,EAAC;;;KACL;IAED,oDAAoD;;IACtC,6CAAiB;;IAA/B,UAAgC,MAAiB;;;;gBACvC,MAAM,GAAG,MAAM,CAAC,MAAa,CAAC;gBACpC,sBAAO,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAC;;;KAC1C;IAED,+DAA+D;;IACvD,qDAAyB;;IAAjC,UAAkC,GAAW;QACzC,IAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEzC,IAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7C,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SACpC;QAED,MAAM,CAAC,MAAM,CAAC,MAAqB,CAAC;KAEvC;IAED,6DAA6D;;IAC/C,kDAAsB;;IAApC,UAAqC,GAAW;;;;gBACtC,MAAM,GAAG,MAAM,CAAC,MAAa,CAAC;gBACpC,sBAAO,MAAM,CAAC,SAAS,CACnB,MAAM,EACN,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EACnC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAC7C,IAAI,EACJ,CAAC,SAAS,CAAC,CACd,EAAC;;;KACL;IAED,wDAAwD;;IAC1C,oDAAwB;;IAAtC,UAAuC,SAAsB,EAAE,YAAuB;;;;gBAC5E,MAAM,GAAG,MAAM,CAAC,MAAa,CAAC;gBACpC,sBAAO,MAAM,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,UAAU,EAAE,EACpB,YAAY,EACZ,SAAS,CACZ,EAAC;;;KACL;IAED,6DAA6D;;IACrD,2CAAe;;IAAvB,UAAwB,MAAgC;QACpD,IAAM,KAAK,GAAG,MAAM,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9E,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SAC3C;QAED,IAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;KAC5E;IAED,8EAA8E;;IACtE,+CAAmB;;IAA3B,UAA4B,eAA4B,EAAE,EAAc,EAAE,aAA0B;QAChG,MAAM,CAAC,CACH,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC;YACrC,GAAG;YACH,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACxB,GAAG;YACH,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CACtC,CAAC;KACL;IAED,oDAAoD;;IACtC,uCAAW;;IAAzB,UAA6B,IAAY,EAAE,EAAwB;;;;;;;wBAEpD,qBAAM,EAAE,EAAE,EAAA;4BAAjB,sBAAO,SAAU,EAAC;;;wBAElB,OAAO,CAAC,KAAK,CAAC,kBAAiB,IAAI,YAAU,EAAE,OAAK,CAAC,CAAC;wBACtD,MAAM,OAAK,CAAC;;;;;KAEnB;IAEY,wCAAY,GAAzB,UAA0B,KAAmC,EAAE,eAAuB;;;;;;4BAC1D,qBAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,cAAM,OAAA,KAAI,CAAC,iBAAiB,EAAE,EAAxB,CAAwB,CAAC,EAAA;;wBAA9F,MAAM,GAAY,SAA4E;wBAC5E,qBAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,cAAM,OAAA,KAAI,CAAC,gBAAgB,EAAE,EAAvB,CAAuB,CAAC,EAAA;;wBAA5F,EAAE,GAAgB,SAA0E;wBAC1E,qBAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,cAAM,OAAA,KAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAA9C,CAA8C,CAAC,EAAA;;wBAAhH,aAAa,GAAK,SAA8F;wBAC9F,qBAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,cAAM,OAAA,KAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAA9B,CAA8B,CAAC,EAAA;;wBAAhG,SAAS,GAAS,SAA8E;wBAC9E,qBAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,EAAE,cAAM,OAAA,KAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAA5C,CAA4C,CAAC,EAAA;;wBAArH,YAAY,GAAM,SAAmG;wBACnG,qBAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,EAAE,cAAM,OAAA,KAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,YAAY,CAAC,EAAtD,CAAsD,CAAC,EAAA;;wBAAhI,eAAe,GAAG,SAA8G;wBACtI,sBAAO,IAAI,CAAC,mBAAmB,CAAC,eAAe,EAAE,EAAE,EAAE,aAAa,CAAC,EAAC;;;;KACvE;;gBArHJ,iBAAU;;4BAJX;;AAKa,8CAAiB"}

package/lib/encryption/services/encryption.service.metadata.json

@@ -0,0 +1 @@
+[{"__symbolic":"module","version":4,"metadata":{"EncryptionService":{"__symbolic":"class","decorators":[{"__symbolic":"call","expression":{"__symbolic":"reference","module":"@angular/core","name":"Injectable","line":4,"character":1}}],"members":{"generateAesGcmKey":[{"__symbolic":"method"}],"generateAesGcmIv":[{"__symbolic":"method"}],"encryptValueWithAesGcm":[{"__symbolic":"method"}],"exportAesKeyToRaw":[{"__symbolic":"method"}],"pemPublicKeyToArrayBuffer":[{"__symbolic":"method"}],"importRsaOaepPublicKey":[{"__symbolic":"method"}],"encryptAesKeyWithRsaOaep":[{"__symbolic":"method"}],"encodeBase64Url":[{"__symbolic":"method"}],"buildEncryptedToken":[{"__symbolic":"method"}],"safeExecute":[{"__symbolic":"method"}],"encryptValue":[{"__symbolic":"method"}]}}}}]

package/lib/index.d.ts

@@ -1,2 +1,3 @@
 export * from "./auth-monitorias";
 export * from "./session-models-monitorias";
+export * from "./encryption";

package/lib/index.js

@@ -5,4 +5,5 @@ function __export(m) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __export(require("./auth-monitorias"));
 __export(require("./session-models-monitorias"));
+__export(require("./encryption"));
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../build/index.ts"],"names":[],"mappings":";;;;;AAAA,uCAAiC;AACjC,iDAA2C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../build/index.ts"],"names":[],"mappings":";;;;;AAAA,uCAAiC;AACjC,iDAA2C;AAC3C,kCAA4B"}

package/lib/index.metadata.json

@@ -1 +1 @@
-[{"__symbolic":"module","version":4,"metadata":{},"exports":[{"from":"./auth-monitorias"},{"from":"./session-models-monitorias"}]}]
+[{"__symbolic":"module","version":4,"metadata":{},"exports":[{"from":"./auth-monitorias"},{"from":"./session-models-monitorias"},{"from":"./encryption"}]}]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth-monitorias-uniandes",
-  "version": "0.1.2-beta.58",
+  "version": "0.1.2-beta.60",
   "license": "MIT",
   "authors": [
     "Jhonatan A, Edgar S"