gdc-sdk-node-ts 2.9.21 → 2.9.22

package/dist/server-profile-session.js

@@ -461,16 +461,14 @@ export class ServerProfileSessionManager {
         const walletKeyDerivationId = normalizedWalletKeyDerivationId(profile.walletKeyDerivationId, profile.profileId);
         const wallet = await this.createWallet(walletKeyDerivationId, seed);
         await requireRegisteredProfileKeys(wallet, walletContext(walletKeyDerivationId), profile);
-        const updated = {
-            ...profile,
+        const updated = withProfileUnlockState(profile, {
             protectedWalletSeed: await protectServerProfileSecret(seed, input.newPin, `${profile.profileId}:wallet-seed`, this.options.sealer, this.options.profileProtection),
             ...(profile.protectedVpToken ? {
                 protectedVpToken: await protectServerProfileSecret(String(input.authorizedVpToken), input.newPin, `${profile.profileId}:vp-token`, this.options.sealer, this.options.profileProtection),
             } : {}),
             failedUnlocks: 0,
-            lockedUntil: undefined,
             updatedAt: this.now().toISOString(),
-        };
+        });
         await this.options.store.putProfile(updated);
         await this.options.store.deleteSessionsForProfile(profile.profileId);
         return updated;
@@ -498,7 +496,11 @@ export class ServerProfileSessionManager {
             const lockedUntil = failures >= max
                 ? new Date(now.getTime() + (this.options.lockSeconds ?? 300) * 1000).toISOString()
                 : undefined;
-            await this.options.store.putProfile({ ...profile, failedUnlocks: failures, lockedUntil, updatedAt: now.toISOString() });
+            await this.options.store.putProfile(withProfileUnlockState(profile, {
+                failedUnlocks: failures,
+                lockedUntil,
+                updatedAt: now.toISOString(),
+            }));
             throw new Error('Profile PIN rejected.');
         }
         profile = await this.ensureRequiredStorageProfile(profile, seed);
@@ -531,7 +533,10 @@ export class ServerProfileSessionManager {
             throw new Error('SMART token exchange failed.');
         const sessionId = randomBytes(32).toString('base64url');
         const expiresAt = new Date(now.getTime() + (this.options.sessionTtlSeconds ?? 300) * 1000);
-        await this.options.store.putProfile({ ...profile, failedUnlocks: 0, lockedUntil: undefined, updatedAt: now.toISOString() });
+        await this.options.store.putProfile(withProfileUnlockState(profile, {
+            failedUnlocks: 0,
+            updatedAt: now.toISOString(),
+        }));
         await this.options.store.putSession({
             sessionId,
             ownerId: input.ownerId,
@@ -577,22 +582,19 @@ export class ServerProfileSessionManager {
             const lockedUntil = failures >= max
                 ? new Date(now.getTime() + (this.options.lockSeconds ?? 300) * 1000).toISOString()
                 : undefined;
-            await this.options.store.putProfile({
-                ...profile,
+            await this.options.store.putProfile(withProfileUnlockState(profile, {
                 failedUnlocks: failures,
                 lockedUntil,
                 updatedAt: now.toISOString(),
-            });
+            }));
             throw new Error('Profile PIN rejected.');
         }
         profile = await this.ensureRequiredStorageProfile(profile, seed);
         const sessionId = randomBytes(32).toString('base64url');
-        await this.options.store.putProfile({
-            ...profile,
+        await this.options.store.putProfile(withProfileUnlockState(profile, {
             failedUnlocks: 0,
-            lockedUntil: undefined,
             updatedAt: now.toISOString(),
-        });
+        }));
         await this.options.store.putSession({
             sessionId,
             ownerId: input.ownerId,
@@ -1354,6 +1356,20 @@ function sameGovernedRole(left, right) {
         && leftRole.codingSystem === rightRole.codingSystem
         && leftRole.code === rightRole.code);
 }
+/**
+ * Resets or advances the persisted PIN lock state without writing an
+ * `undefined` optional property. Firestore rejects `undefined`, so durable
+ * adapters must receive an omitted `lockedUntil` field when no lock exists.
+ */
+function withProfileUnlockState(profile, updates) {
+    const { lockedUntil: _previousLock, ...unlockedProfile } = profile;
+    const { lockedUntil, ...definedUpdates } = updates;
+    return {
+        ...unlockedProfile,
+        ...definedUpdates,
+        ...(lockedUntil ? { lockedUntil } : {}),
+    };
+}
 function unique(values) {
     return [...new Set(values.map((value) => String(value).trim()).filter(Boolean))].sort();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.9.21",
+  "version": "2.9.22",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",