internxt-crypto 0.0.10-alpha → 0.0.13

package/dist/keystore-service.js

@@ -1,349 +0,0 @@
-'use strict';
-
-var axios = require('axios');
-require('@noble/hashes/utils.js');
-
-function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
-
-var axios__default = /*#__PURE__*/_interopDefault(axios);
-
-// src/keystore-service/api.ts
-
-// src/constants.ts
-var ECC_ALGORITHM = "X25519";
-function uint8ArrayToBase64(buffer) {
-  const array = Uint16Array.from(buffer);
-  const binaryString = new TextDecoder("UTF-16").decode(array);
-  return btoa(binaryString);
-}
-function base64ToUint8Array(str) {
-  const binaryString = atob(str);
-  const len = binaryString.length;
-  const array = new Uint8Array(len);
-  for (let i = 0; i < len; i++) {
-    array[i] = binaryString.charCodeAt(i);
-  }
-  return new Uint8Array(array.buffer);
-}
-
-// src/asymmetric-crypto/keys.ts
-async function importPublicKey(spkiKeyData) {
-  try {
-    return await crypto.subtle.importKey(
-      "spki",
-      spkiKeyData,
-      {
-        name: ECC_ALGORITHM
-      },
-      true,
-      []
-    );
-  } catch (error) {
-    throw new Error("Failed to import public key", { cause: error });
-  }
-}
-
-// src/utils/aesConverters.ts
-function ciphertextToBase64(encryptedMessage) {
-  try {
-    const ivBase64 = uint8ArrayToBase64(encryptedMessage.iv);
-    const ciphertextBase64 = uint8ArrayToBase64(encryptedMessage.ciphertext);
-    const json = JSON.stringify({ ciphertext: ciphertextBase64, iv: ivBase64 });
-    const base64 = btoa(json);
-    return base64;
-  } catch (error) {
-    throw new Error("Failed to convert ciphertext to base64", { cause: error });
-  }
-}
-function base64ToCiphertext(base64) {
-  try {
-    const json = atob(base64);
-    const obj = JSON.parse(json);
-    const iv = base64ToUint8Array(obj.iv);
-    const ciphertext = base64ToUint8Array(obj.ciphertext);
-    const result = {
-      ciphertext,
-      iv
-    };
-    return result;
-  } catch (error) {
-    throw new Error("Failed to convert base64 to ciphertext", { cause: error });
-  }
-}
-
-// src/utils/keyConverters.ts
-function encryptedKeystoreToBase64(keystore) {
-  try {
-    const ciphertext = ciphertextToBase64(keystore.encryptedKeys);
-    const json = JSON.stringify({
-      userID: keystore.userID,
-      type: keystore.type.toString(),
-      encryptedKeys: ciphertext
-    });
-    const base64 = btoa(json);
-    return base64;
-  } catch (error) {
-    throw new Error("Failed to convert encrypted keystore to base64", { cause: error });
-  }
-}
-function base64ToEncryptedKeystore(base64) {
-  try {
-    const json = atob(base64);
-    const obj = JSON.parse(json);
-    const ciphertext = base64ToCiphertext(obj.encryptedKeys);
-    const result = {
-      userID: obj.userID,
-      type: obj.type,
-      encryptedKeys: ciphertext
-    };
-    return result;
-  } catch (error) {
-    throw new Error("Failed to convert base64 to encrypted keystore", { cause: error });
-  }
-}
-async function base64ToPublicKey(base64) {
-  try {
-    const json = atob(base64);
-    const obj = JSON.parse(json);
-    const eccPublicKeyBytes = base64ToUint8Array(obj.eccPublicKey);
-    const eccPublicKey = await importPublicKey(eccPublicKeyBytes);
-    const kyberPublicKey = base64ToUint8Array(obj.kyberPublicKey);
-    return {
-      eccPublicKey,
-      kyberPublicKey
-    };
-  } catch (error) {
-    throw new Error("Failed to convert base64 to PublicKeys", { cause: error });
-  }
-}
-
-// src/storage-service/sessionStorageService.ts
-function get(key) {
-  return sessionStorage.getItem(key);
-}
-function set(key, value) {
-  return sessionStorage.setItem(key, value);
-}
-function removeItem(key) {
-  sessionStorage.removeItem(key);
-}
-function exists(key) {
-  return !!sessionStorage.getItem(key);
-}
-function clear() {
-  sessionStorage.clear();
-}
-var sessionStorageService = {
-  set,
-  get,
-  removeItem,
-  exists,
-  clear
-};
-var sessionStorageService_default = sessionStorageService;
-
-// src/keystore-crypto/core.ts
-function getUserID() {
-  try {
-    const userID = sessionStorageService_default.get("userID");
-    if (!userID) {
-      throw new Error("No UserID");
-    }
-    return userID;
-  } catch (error) {
-    throw new Error("Failed to get UserID from session storage", { cause: error });
-  }
-}
-
-// src/keystore-service/api.ts
-var KeyServiceAPI = class {
-  baseUrl;
-  constructor(baseUrl) {
-    this.baseUrl = baseUrl;
-  }
-  /**
-   * Converts the specific client error into a proprietary error for our apps
-   * @param error
-   * @private
-   */
-  normalizeError(error) {
-    let errorMessage;
-    if (error.response?.status === 401) {
-      errorMessage = "Unauthorized: Invalid or expired token";
-    } else if (error.response?.status === 403) {
-      errorMessage = "Forbidden: Insufficient permissions";
-    } else if (error.response?.status === 404) {
-      errorMessage = "Keystore not found for the specified user";
-    } else {
-      errorMessage = "AxiosError:" + (error.message ?? "Unknown error");
-    }
-    throw new Error(errorMessage);
-  }
-  /**
-   * Sends a user's encrypted keystore to the server
-   * @param keystore - The encrypted keystore
-   * @param url - The user specific part of the url
-   * @returns Server response
-   */
-  async sendEncryptedKeystoreToServer(encryptedKeystore, url) {
-    try {
-      const response = await axios__default.default.post(
-        this.baseUrl + `${url}`,
-        { encryptedKeystore },
-        {
-          withCredentials: true,
-          headers: {
-            "Content-Type": "application/json"
-          }
-        }
-      );
-      return response;
-    } catch (error) {
-      if (axios__default.default.isAxiosError(error)) {
-        this.normalizeError(error);
-      }
-      throw new Error("Failed to send keystore", { cause: error });
-    }
-  }
-  /**
-   * Requests a user's encrypted keystore from the server
-   * @param url - The user-specific part of the url
-   * @returns The user's encrypted keystore as base64 string
-   */
-  async requestEncryptedKeystore(userID, keystoreType) {
-    try {
-      const url = `/downloadKeystore/${userID}/${keystoreType.toString()}`;
-      const response = await axios__default.default.get(this.baseUrl + `${url}`, {
-        withCredentials: true,
-        headers: {
-          "Content-Type": "application/json"
-        }
-      });
-      return response.data;
-    } catch (error) {
-      if (axios__default.default.isAxiosError(error)) {
-        this.normalizeError(error);
-      }
-      throw new Error("Failed to retrive keystore", { cause: error });
-    }
-  }
-  /**
-   * Uploads encrypted keystore to the server
-   *
-   * @param encryptedKeystore - The encrypted keystore
-   * @param type - The keystore's type
-   * @returns Server response
-   */
-  async uploadKeystoreToServer(encryptedKeystore) {
-    try {
-      const userID = getUserID();
-      const keystoreType = encryptedKeystore.type;
-      const url = `/uploadKeystore/${userID}/${keystoreType}`;
-      const ciphertextBase64 = encryptedKeystoreToBase64(encryptedKeystore);
-      const result = await this.sendEncryptedKeystoreToServer(ciphertextBase64, url);
-      return result;
-    } catch (error) {
-      throw new Error("Failed to upload keystore to the server", { cause: error });
-    }
-  }
-  /**
-   * Gets a user's encrypted keystore containing encryption keys from the server
-   *
-   * @returns Encrypted keystore containing encryption keys
-   */
-  async getEncryptionKeystoreFromServer() {
-    return this.getKeystoreFromServer("encryption" /* ENCRYPTION */);
-  }
-  /**
-   * Gets a user's encrypted Identity Keystore from the server
-   *
-   * @returns Encrypted Identity Keystore
-   */
-  async getIdentityKeystoreFromServer() {
-    return this.getKeystoreFromServer("identity" /* IDENTITY */);
-  }
-  /**
-   * Gets a user's encrypted Recovery Keystore from the server
-   *
-   * @returns Encrypted Recovery Keystore
-   */
-  async getRecoveryKeystoreFromServer() {
-    return this.getKeystoreFromServer("recovery" /* RECOVERY */);
-  }
-  /**
-   * Gets a user's encrypted Index Keystore from the server
-   *
-   * @returns Encrypted Index Keytore
-   */
-  async getIndexKeystoreFromServer() {
-    return this.getKeystoreFromServer("index" /* INDEX */);
-  }
-  /**
-   * Gets a user's encrypted keystore from the server
-   *
-   * @param type - The requested keystore's type
-   * @returns Encrypted  Keytore
-   */
-  async getKeystoreFromServer(type) {
-    try {
-      const userID = getUserID();
-      const response = await this.requestEncryptedKeystore(userID, type);
-      const result = base64ToEncryptedKeystore(response);
-      return result;
-    } catch (error) {
-      throw new Error("Failed to retrieve keystore from the server", { cause: error });
-    }
-  }
-  /**
-   * Obtains recipients public keys from the server
-   *
-   * @param emails - The recipients' emails
-   * @returns The list of recipients' public keys
-   */
-  async getRecipientsPublicKeysFromServer(emails) {
-    try {
-      const response = await axios__default.default.get("/api/getPublicKeys", {
-        params: {
-          emails
-        },
-        withCredentials: true,
-        headers: {
-          "Content-Type": "application/json"
-        }
-      });
-      return response.data;
-    } catch (error) {
-      if (axios__default.default.isAxiosError(error)) {
-        this.normalizeError(error);
-      }
-      throw new Error("Failed to retrieve public keys", { cause: error });
-    }
-  }
-  /**
-   * Obtains the recipient public keys from the server
-   *
-   * @param email - The recipients' emails
-   * @returns The list of recipients' public keys
-   */
-  async getRecipientsPublicKeys(emails) {
-    try {
-      const publicKeysBase64 = await this.getRecipientsPublicKeysFromServer(emails);
-      const result = [];
-      for (const keyBase64 of publicKeysBase64) {
-        const publicKeys = await base64ToPublicKey(keyBase64);
-        result.push(publicKeys);
-      }
-      return result;
-    } catch (error) {
-      throw new Error("Failed to get recipients public keys", { cause: error });
-    }
-  }
-};
-function getKeyServiceAPI(baseUrl) {
-  return new KeyServiceAPI(baseUrl);
-}
-
-exports.KeyServiceAPI = KeyServiceAPI;
-exports.getKeyServiceAPI = getKeyServiceAPI;
-//# sourceMappingURL=keystore-service.js.map
-//# sourceMappingURL=keystore-service.js.map

package/dist/keystore-service.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants.ts","../src/utils/converters.ts","../src/asymmetric-crypto/keys.ts","../src/utils/aesConverters.ts","../src/utils/keyConverters.ts","../src/storage-service/sessionStorageService.ts","../src/keystore-crypto/core.ts","../src/keystore-service/api.ts"],"names":["axios"],"mappings":";;;;;;;;;;;;AASO,IAAM,aAAA,GAAgB,QAAA;ACuCtB,SAAS,mBAAmB,MAAA,EAA4B;AAC7D,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,IAAA,CAAK,MAAM,CAAA;AACrC,EAAA,MAAM,eAAe,IAAI,WAAA,CAAY,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA;AAC3D,EAAA,OAAO,KAAK,YAAY,CAAA;AAC1B;AAQO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,YAAA,GAAe,KAAK,GAAG,CAAA;AAC7B,EAAA,MAAM,MAAM,YAAA,CAAa,MAAA;AACzB,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAG,CAAA;AAChC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,EAAK,CAAA,EAAA,EAAK;AAC5B,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,YAAA,CAAa,UAAA,CAAW,CAAC,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,IAAI,UAAA,CAAW,KAAA,CAAM,MAAM,CAAA;AACpC;;;AC5BA,eAAsB,gBAAgB,WAAA,EAA6C;AACjF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,MAAA,CAAO,SAAA;AAAA,MACzB,MAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA;AAAA,MACA;AAAC,KACH;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,6BAAA,EAA+B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACjE;AACF;;;AC7CO,SAAS,mBAAmB,gBAAA,EAA+C;AAChF,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,gBAAA,CAAiB,EAAE,CAAA;AACvD,IAAA,MAAM,gBAAA,GAAmB,kBAAA,CAAmB,gBAAA,CAAiB,UAAU,CAAA;AACvE,IAAA,MAAM,IAAA,GAAO,KAAK,SAAA,CAAU,EAAE,YAAY,gBAAA,EAAkB,EAAA,EAAI,UAAU,CAAA;AAC1E,IAAA,MAAM,MAAA,GAAS,KAAK,IAAI,CAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,wCAAA,EAA0C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC5E;AACF;AAQO,SAAS,mBAAmB,MAAA,EAAqC;AACtE,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,KAAK,MAAM,CAAA;AACxB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,MAAM,EAAA,GAAK,kBAAA,CAAmB,GAAA,CAAI,EAAE,CAAA;AACpC,IAAA,MAAM,UAAA,GAAa,kBAAA,CAAmB,GAAA,CAAI,UAAU,CAAA;AACpD,IAAA,MAAM,MAAA,GAA8B;AAAA,MAClC,UAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,wCAAA,EAA0C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC5E;AACF;;;ACcO,SAAS,0BAA0B,QAAA,EAAqC;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,kBAAA,CAAmB,QAAA,CAAS,aAAa,CAAA;AAC5D,IAAA,MAAM,IAAA,GAAO,KAAK,SAAA,CAAU;AAAA,MAC1B,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,QAAA,EAAS;AAAA,MAC7B,aAAA,EAAe;AAAA,KAChB,CAAA;AACD,IAAA,MAAM,MAAA,GAAS,KAAK,IAAI,CAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,gDAAA,EAAkD,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACpF;AACF;AA4DO,SAAS,0BAA0B,MAAA,EAAmC;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,KAAK,MAAM,CAAA;AACxB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,MAAM,UAAA,GAAa,kBAAA,CAAmB,GAAA,CAAI,aAAa,CAAA;AACvD,IAAA,MAAM,MAAA,GAA4B;AAAA,MAChC,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,aAAA,EAAe;AAAA,KACjB;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,gDAAA,EAAkD,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACpF;AACF;AAoDA,eAAsB,kBAAkB,MAAA,EAAqC;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,KAAK,MAAM,CAAA;AACxB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,MAAM,iBAAA,GAAoB,kBAAA,CAAmB,GAAA,CAAI,YAAY,CAAA;AAC7D,IAAA,MAAM,YAAA,GAAe,MAAM,eAAA,CAAgB,iBAAiB,CAAA;AAC5D,IAAA,MAAM,cAAA,GAAiB,kBAAA,CAAmB,GAAA,CAAI,cAAc,CAAA;AAC5D,IAAA,OAAO;AAAA,MACL,YAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,wCAAA,EAA0C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC5E;AACF;;;AChNA,SAAS,IAAI,GAAA,EAA4B;AACvC,EAAA,OAAO,cAAA,CAAe,QAAQ,GAAG,CAAA;AACnC;AAEA,SAAS,GAAA,CAAI,KAAa,KAAA,EAAqB;AAC7C,EAAA,OAAO,cAAA,CAAe,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAC1C;AAEA,SAAS,WAAW,GAAA,EAAmB;AACrC,EAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAC/B;AAEA,SAAS,OAAO,GAAA,EAAsB;AACpC,EAAA,OAAO,CAAC,CAAC,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA;AACrC;AAEA,SAAS,KAAA,GAAc;AACrB,EAAA,cAAA,CAAe,KAAA,EAAM;AACvB;AAEA,IAAM,qBAAA,GAAwB;AAAA,EAC5B,GAAA;AAAA,EACA,GAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA;AAEA,IAAO,6BAAA,GAAQ,qBAAA;;;ACmCR,SAAS,SAAA,GAAoB;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,6BAAA,CAAsB,GAAA,CAAI,QAAQ,CAAA;AACjD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,WAAW,CAAA;AAAA,IAC7B;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,KAAA,CAAM,2CAAA,EAA6C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC/E;AACF;;;ACpEO,IAAM,gBAAN,MAAoB;AAAA,EACR,OAAA;AAAA,EAEjB,YAAY,OAAA,EAAiB;AAC3B,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,KAAA,EAAmB;AACxC,IAAA,IAAI,YAAA;AACJ,IAAA,IAAI,KAAA,CAAM,QAAA,EAAU,MAAA,KAAW,GAAA,EAAK;AAClC,MAAA,YAAA,GAAe,wCAAA;AAAA,IACjB,CAAA,MAAA,IAAW,KAAA,CAAM,QAAA,EAAU,MAAA,KAAW,GAAA,EAAK;AACzC,MAAA,YAAA,GAAe,qCAAA;AAAA,IACjB,CAAA,MAAA,IAAW,KAAA,CAAM,QAAA,EAAU,MAAA,KAAW,GAAA,EAAK;AACzC,MAAA,YAAA,GAAe,2CAAA;AAAA,IACjB,CAAA,MAAO;AACL,MAAA,YAAA,GAAe,aAAA,IAAiB,MAAM,OAAA,IAAW,eAAA,CAAA;AAAA,IACnD;AAEA,IAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,6BAAA,CAA8B,iBAAA,EAA2B,GAAA,EAAqC;AAClG,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAMA,sBAAA,CAAM,IAAA;AAAA,QAC3B,IAAA,CAAK,OAAA,GAAU,CAAA,EAAG,GAAG,CAAA,CAAA;AAAA,QACrB,EAAE,iBAAA,EAAkB;AAAA,QACpB;AAAA,UACE,eAAA,EAAiB,IAAA;AAAA,UACjB,OAAA,EAAS;AAAA,YACP,cAAA,EAAgB;AAAA;AAClB;AACF,OACF;AACA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,IAAIA,sBAAA,CAAM,YAAA,CAAa,KAAK,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AAAA,MAC3B;AACA,MAAA,MAAM,IAAI,KAAA,CAAM,yBAAA,EAA2B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IAC7D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,wBAAA,CAAyB,MAAA,EAAgB,YAAA,EAA6C;AAC1F,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAA,EAAI,YAAA,CAAa,UAAU,CAAA,CAAA;AAClE,MAAA,MAAM,QAAA,GAAW,MAAMA,sBAAA,CAAM,GAAA,CAAY,KAAK,OAAA,GAAU,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI;AAAA,QAChE,eAAA,EAAiB,IAAA;AAAA,QACjB,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB;AAAA;AAClB,OACD,CAAA;AACD,MAAA,OAAO,QAAA,CAAS,IAAA;AAAA,IAClB,SAAS,KAAA,EAAO;AACd,MAAA,IAAIA,sBAAA,CAAM,YAAA,CAAa,KAAK,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AAAA,MAC3B;AAEA,MAAA,MAAM,IAAI,KAAA,CAAM,4BAAA,EAA8B,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,uBAAuB,iBAAA,EAA8D;AACzF,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,SAAA,EAAU;AACzB,MAAA,MAAM,eAAe,iBAAA,CAAkB,IAAA;AACvC,MAAA,MAAM,GAAA,GAAM,CAAA,gBAAA,EAAmB,MAAM,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AACrD,MAAA,MAAM,gBAAA,GAAmB,0BAA0B,iBAAiB,CAAA;AACpE,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,6BAAA,CAA8B,kBAAkB,GAAG,CAAA;AAC7E,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,yCAAA,EAA2C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IAC7E;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,+BAAA,GAA8D;AAClE,IAAA,OAAO,KAAK,qBAAA,CAAA,YAAA,kBAA6C;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,6BAAA,GAA4D;AAChE,IAAA,OAAO,KAAK,qBAAA,CAAA,UAAA,gBAA2C;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,6BAAA,GAA4D;AAChE,IAAA,OAAO,KAAK,qBAAA,CAAA,UAAA,gBAA2C;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,0BAAA,GAAyD;AAC7D,IAAA,OAAO,KAAK,qBAAA,CAAA,OAAA,aAAwC;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,sBAAsB,IAAA,EAAgD;AAC1E,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,SAAA,EAAU;AACzB,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,wBAAA,CAAyB,QAAQ,IAAI,CAAA;AACjE,MAAA,MAAM,MAAA,GAAS,0BAA0B,QAAQ,CAAA;AACjD,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,6CAAA,EAA+C,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IACjF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,kCAAkC,MAAA,EAAqC;AAC3E,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAMA,sBAAA,CAAM,GAAA,CAAc,oBAAA,EAAsB;AAAA,QAC/D,MAAA,EAAQ;AAAA,UACN;AAAA,SACF;AAAA,QACA,eAAA,EAAiB,IAAA;AAAA,QACjB,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB;AAAA;AAClB,OACD,CAAA;AACD,MAAA,OAAO,QAAA,CAAS,IAAA;AAAA,IAClB,SAAS,KAAA,EAAO;AACd,MAAA,IAAIA,sBAAA,CAAM,YAAA,CAAa,KAAK,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,eAAe,KAAK,CAAA;AAAA,MAC3B;AACA,MAAA,MAAM,IAAI,KAAA,CAAM,gCAAA,EAAkC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IACpE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,wBAAwB,MAAA,EAAyC;AACrE,IAAA,IAAI;AACF,MAAA,MAAM,gBAAA,GAA6B,MAAM,IAAA,CAAK,iCAAA,CAAkC,MAAM,CAAA;AACtF,MAAA,MAAM,SAAuB,EAAC;AAC9B,MAAA,KAAA,MAAW,aAAa,gBAAA,EAAkB;AACxC,QAAA,MAAM,UAAA,GAAa,MAAM,iBAAA,CAAkB,SAAS,CAAA;AACpD,QAAA,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,MACxB;AACA,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,sCAAA,EAAwC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IAC1E;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB,OAAA,EAAgC;AAC/D,EAAA,OAAO,IAAI,cAAc,OAAO,CAAA;AAClC","file":"keystore-service.js","sourcesContent":["export const AES_ALGORITHM = 'AES-GCM';\nexport const AES_KEY_BIT_LENGTH = 256;\nexport const AUX_LEN = 128;\nexport const IV_LEN_BYTES = 16;\n\nexport const KEY_WRAPPING_ALGORITHM = 'AES-KW';\nexport const KEY_FORMAT = 'raw';\nexport const CONTEXT_WRAPPING = 'CRYPTO library 2025-08-22 18:10:00 key derived from ecc and kyber secrets';\n\nexport const ECC_ALGORITHM = 'X25519';\n\nexport const CONTEXT_LOGIN = 'CRYPTO library 2025-07-26 16:18:03 key for opening identity keystore';\nexport const CONTEXT_ENC_KEYSTORE = 'CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore';\nexport const CONTEXT_RECOVERY = 'CRYPTO library 2025-07-30 16:20:00 key for account recovery';\nexport const CONTEXT_INDEX = 'CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices';\nexport const CONTEXT_DERIVE = 'CRYPTO library 2025-08-27 17:08:00 derive one key from two keys';\n\nexport const PREFIX_MEDIA_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys';\nexport const PREFIX_PUBLIC_KEY_COMMITMENT = 'CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys';\nexport const PREFIX_IDENTITY_KEY_COMMITMENT =\n  'CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys';\n\n// Second recommended parameter set from RFC 9106\nexport const ARGON2ID_PARALLELISM = 3;\nexport const ARGON2ID_ITERATIONS = 4;\nexport const ARGON2ID_MEMORY_SIZE = 65536;\nexport const ARGON2ID_SALT_BYTE_LENGTH = 16;\nexport const ARGON2ID_OUTPUT_BYTE_LENGTH = 32;\n\nexport const IDENTITY_KEYSTORE_TAG = 'Identity keystore';\nexport const ENCRYPTION_KEYSTORE_TAG = 'Encryption keystore';\nexport const RECOVERY_KEYSTORE_TAG = 'Key recovery keystroe';\nexport const INDEX_KEYSTORE_TAG = 'Current encrypted indices';\n\nexport const KYBER512_PUBLIC_KEY_LENGTH = 800;\nexport const KYBER512_SECRET_KEY_LENGTH = 1632;\n\nexport const KYBER768_PUBLIC_KEY_LENGTH = 1184;\nexport const KYBER768_SECRET_KEY_LENGTH = 2400;\n\nexport const KYBER1024_PUBLIC_KEY_LENGTH = 1568;\nexport const KYBER1024_SECRET_KEY_LENGTH = 3168;\n\nexport const KYBER_SEED_LENGTH = 64;\n\nexport const HASH_BIT_LEN = 256;\n\nexport const MAX_CACHE_SIZE = 600000000; // 600 MB\nexport const MAX_EMAIL_PER_BATCH = 100;\nexport const DB_LABEL = 'email';\nexport const DB_VERSION = 1;\n","import { bytesToHex, hexToBytes } from '@noble/hashes/utils.js';\n\n/**\n * Converts a Uint8Array into a hexadecimal string.\n *\n * @param array - The Uint8Array to convert.\n * @returns The hexadecimal string representation of the array.\n */\nexport function uint8ArrayToHex(array: Uint8Array): string {\n  return bytesToHex(array);\n}\n\n/**\n * Converts a UTF-8 string into a Uint8Array.\n *\n * @param str - The UTF-8 string to convert.\n * @returns A Uint8Array created from the UTF-8 string.\n */\nexport function UTF8ToUint8(str: string): Uint8Array {\n  return new TextEncoder().encode(str);\n}\n\n/**\n * Converts an Uint8Array into a UTF-8 string.\n *\n * @param array - The Uint8Array to convert.\n * @returns The UTF-8 string representation of the array.\n */\nexport function uint8ToUTF8(array: Uint8Array): string {\n  return new TextDecoder().decode(array);\n}\n\n/**\n * Converts a hexadecimal string into a Uint8Array.\n *\n * @param hex - The hexadecimal string to convert.\n * @returns A Uint8Array created from the hex string.\n */\nexport function hexToUint8Array(hex: string): Uint8Array {\n  return hexToBytes(hex);\n}\n\n/**\n * Converts a Uint8Array into a base64 string.\n *\n * @param array - The Uint8Array to convert.\n * @returns The base64 string representation of the array.\n */\nexport function uint8ArrayToBase64(buffer: Uint8Array): string {\n  const array = Uint16Array.from(buffer);\n  const binaryString = new TextDecoder('UTF-16').decode(array);\n  return btoa(binaryString);\n}\n\n/**\n * Converts a base64 string into a Uint8Array.\n *\n * @param str - The base64 string to convert.\n * @returns A Uint8Array created from the base64 string.\n */\nexport function base64ToUint8Array(str: string): Uint8Array {\n  const binaryString = atob(str);\n  const len = binaryString.length;\n  const array = new Uint8Array(len);\n  for (let i = 0; i < len; i++) {\n    array[i] = binaryString.charCodeAt(i);\n  }\n  return new Uint8Array(array.buffer);\n}\n","import { ECC_ALGORITHM } from '../constants';\n\n/**\n * Generates elliptic curve key pair\n *\n * @returns The generated key pair\n */\nexport async function generateEccKeys(): Promise<CryptoKeyPair> {\n  try {\n    return (await crypto.subtle.generateKey(\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    )) as CryptoKeyPair;\n  } catch (error) {\n    throw new Error('Failed to generate elliptic curve key pair', { cause: error });\n  }\n}\n\n/**\n * Converts public CryptoKey into Uint8Array using SubjectPublicKeyInfo format (RFC 5280)\n *\n * @returns The Uint8Array representation of the public key\n */\nexport async function exportPublicKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('spki', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export public key', { cause: error });\n  }\n}\n\n/**\n * Converts public key in SubjectPublicKeyInfo format (RFC 5280) to CryptoKey\n *\n * @returns The CryptoKey representation of the public key\n */\nexport async function importPublicKey(spkiKeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'spki',\n      spkiKeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      [],\n    );\n  } catch (error) {\n    throw new Error('Failed to import public key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in CryptoKey to PKCS #8 format (RFC 5208)\n *\n * @returns The Uint8Array representation of the private key\n */\nexport async function exportPrivateKey(key: CryptoKey): Promise<Uint8Array> {\n  try {\n    const result = await crypto.subtle.exportKey('pkcs8', key);\n    return new Uint8Array(result);\n  } catch (error) {\n    throw new Error('Failed to export private key', { cause: error });\n  }\n}\n\n/**\n * Converts private key in PKCS #8 format (RFC 5208) to CryptoKey\n *\n * @returns The CryptoKey representation of the private key\n */\nexport async function importPrivateKey(pkcs8KeyData: Uint8Array): Promise<CryptoKey> {\n  try {\n    return await crypto.subtle.importKey(\n      'pkcs8',\n      pkcs8KeyData as BufferSource,\n      {\n        name: ECC_ALGORITHM,\n      },\n      true,\n      ['deriveBits'],\n    );\n  } catch (error) {\n    throw new Error('Failed to import private key', { cause: error });\n  }\n}\n","import { uint8ArrayToBase64, base64ToUint8Array } from './converters';\nimport { SymmetricCiphertext } from '../types';\n\n/**\n * Converts encrypted message to base64 string\n *\n * @param encryptedMessage - The encrypted message\n * @returns The resulting base64 string.\n */\nexport function ciphertextToBase64(encryptedMessage: SymmetricCiphertext): string {\n  try {\n    const ivBase64 = uint8ArrayToBase64(encryptedMessage.iv);\n    const ciphertextBase64 = uint8ArrayToBase64(encryptedMessage.ciphertext);\n    const json = JSON.stringify({ ciphertext: ciphertextBase64, iv: ivBase64 });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert ciphertext to base64', { cause: error });\n  }\n}\n\n/**\n * Converts base64 string to encrypted message\n *\n * @param base64 - The base64 representation of the encrypted message\n * @returns The resulting encrypted message.\n */\nexport function base64ToCiphertext(base64: string): SymmetricCiphertext {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const iv = base64ToUint8Array(obj.iv);\n    const ciphertext = base64ToUint8Array(obj.ciphertext);\n    const result: SymmetricCiphertext = {\n      ciphertext,\n      iv,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to convert base64 to ciphertext', { cause: error });\n  }\n}\n","import { uint8ArrayToBase64, base64ToUint8Array } from '.';\nimport { IdentityKeys, EncryptionKeys, EncryptedKeystore, MediaKeys, PublicKeys } from '../types';\nimport { exportPublicKey, exportPrivateKey, importPublicKey, importPrivateKey } from '../asymmetric-crypto';\nimport { base64ToCiphertext, ciphertextToBase64 } from './aesConverters';\n\n/**\n * Converts identity keys to base64\n *\n * @param keys - The identity keys\n * @returns The resulting base64 string\n */\nexport async function identityKeysToBase64(keys: IdentityKeys): Promise<string> {\n  try {\n    const pkArray = await exportPublicKey(keys.userPublicKey);\n    const skArray = await exportPrivateKey(keys.userPrivateKey);\n    const json = JSON.stringify({\n      userPublicKey: uint8ArrayToBase64(pkArray),\n      userPrivateKey: uint8ArrayToBase64(skArray),\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert identity keys to base64', { cause: error });\n  }\n}\n\n/**\n * Converts encryption keys to base64\n *\n * @param keys - The encryption keys\n * @returns The resulting base64 string\n */\nexport async function encryptionKeysToBase64(keys: EncryptionKeys): Promise<string> {\n  try {\n    const pkArray = await exportPublicKey(keys.userPublicKey);\n    const skArray = await exportPrivateKey(keys.userPrivateKey);\n    const json = JSON.stringify({\n      userPublicKey: uint8ArrayToBase64(pkArray),\n      userPrivateKey: uint8ArrayToBase64(skArray),\n      userPublicKyberKey: uint8ArrayToBase64(keys.userPublicKyberKey),\n      userPrivateKyberKey: uint8ArrayToBase64(keys.userPrivateKyberKey),\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert identity keys to base64', { cause: error });\n  }\n}\n\n/**\n * Converts encrypted keystore to base64\n *\n * @param keystore - The encrypted keystore\n * @returns The resulting base64 string\n */\nexport function encryptedKeystoreToBase64(keystore: EncryptedKeystore): string {\n  try {\n    const ciphertext = ciphertextToBase64(keystore.encryptedKeys);\n    const json = JSON.stringify({\n      userID: keystore.userID,\n      type: keystore.type.toString(),\n      encryptedKeys: ciphertext,\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert encrypted keystore to base64', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to identity keys\n *\n * @param base64 - The base64 input\n * @returns The resulting idenity keys\n */\nexport async function base64ToIdentityKeys(base64: string): Promise<IdentityKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const pkArray = base64ToUint8Array(obj.userPublicKey);\n    const skArray = base64ToUint8Array(obj.userPrivateKey);\n    const pkCryptoKey = await importPublicKey(pkArray);\n    const skCryptoKey = await importPrivateKey(skArray);\n    const result: IdentityKeys = {\n      userPublicKey: pkCryptoKey,\n      userPrivateKey: skCryptoKey,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed convert base64 to idenity key', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to encryption keys\n *\n * @param base64 - The base64 input\n * @returns The resulting encryption keys\n */\nexport async function base64ToEncryptionKeys(base64: string): Promise<EncryptionKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const pkArray = base64ToUint8Array(obj.userPublicKey);\n    const skArray = base64ToUint8Array(obj.userPrivateKey);\n    const pkCryptoKey = await importPublicKey(pkArray);\n    const skCryptoKey = await importPrivateKey(skArray);\n    const pkKyber = base64ToUint8Array(obj.userPublicKyberKey);\n    const skKyber = base64ToUint8Array(obj.userPrivateKyberKey);\n    const result: EncryptionKeys = {\n      userPublicKey: pkCryptoKey,\n      userPrivateKey: skCryptoKey,\n      userPublicKyberKey: pkKyber,\n      userPrivateKyberKey: skKyber,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to convert base64 to encryption key', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to encrypted keystore\n *\n * @param base64 - The base64 input\n * @returns The resulting encrypted keystore\n */\nexport function base64ToEncryptedKeystore(base64: string): EncryptedKeystore {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const ciphertext = base64ToCiphertext(obj.encryptedKeys);\n    const result: EncryptedKeystore = {\n      userID: obj.userID,\n      type: obj.type,\n      encryptedKeys: ciphertext,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed to convert base64 to encrypted keystore', { cause: error });\n  }\n}\n\n/**\n * Converts media keys to base64\n *\n * @param keys - The media keys\n * @returns The resulting base64 string\n */\nexport function mediaKeysToBase64(keys: MediaKeys): string {\n  try {\n    const json = JSON.stringify({\n      olmKey: uint8ArrayToBase64(keys.olmKey),\n      pqKey: uint8ArrayToBase64(keys.pqKey),\n      index: keys.index.toString(),\n      userID: keys.userID,\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert media keys to base64', { cause: error });\n  }\n}\n\n/**\n * Converts base64 to media keys\n *\n * @param base64 - The base64 input\n * @returns The resulting media keys\n */\nexport async function base64ToMediaKeys(base64: string): Promise<MediaKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n\n    const result: MediaKeys = {\n      olmKey: base64ToUint8Array(obj.olmKey),\n      pqKey: base64ToUint8Array(obj.pqKey),\n      index: Number(obj.index),\n      userID: obj.userID,\n    };\n    return result;\n  } catch (error) {\n    throw new Error('Failed convert base64 to media keys', { cause: error });\n  }\n}\n\n/**\n * Converts a base64 string into PublicKeys type.\n *\n * @param base64 - The base64 representation of the public key.\n * @returns The resulting PublicKeys.\n */\nexport async function base64ToPublicKey(base64: string): Promise<PublicKeys> {\n  try {\n    const json = atob(base64);\n    const obj = JSON.parse(json);\n    const eccPublicKeyBytes = base64ToUint8Array(obj.eccPublicKey);\n    const eccPublicKey = await importPublicKey(eccPublicKeyBytes);\n    const kyberPublicKey = base64ToUint8Array(obj.kyberPublicKey);\n    return {\n      eccPublicKey: eccPublicKey,\n      kyberPublicKey: kyberPublicKey,\n    };\n  } catch (error) {\n    throw new Error('Failed to convert base64 to PublicKeys', { cause: error });\n  }\n}\n\n/**\n * Converts a PublicKeys type into base64 string.\n *\n * @param key - The PublicKeys key.\n * @returns The resulting base64 string.\n */\nexport async function publicKeyToBase64(key: PublicKeys): Promise<string> {\n  try {\n    const eccPublicKeyArray = await exportPublicKey(key.eccPublicKey);\n    const json = JSON.stringify({\n      eccPublicKey: uint8ArrayToBase64(eccPublicKeyArray),\n      kyberPublicKey: uint8ArrayToBase64(key.kyberPublicKey),\n    });\n    const base64 = btoa(json);\n    return base64;\n  } catch (error) {\n    throw new Error('Failed to convert key of the type PublicKeys to base64', { cause: error });\n  }\n}\n","function get(key: string): string | null {\n  return sessionStorage.getItem(key);\n}\n\nfunction set(key: string, value: string): void {\n  return sessionStorage.setItem(key, value);\n}\n\nfunction removeItem(key: string): void {\n  sessionStorage.removeItem(key);\n}\n\nfunction exists(key: string): boolean {\n  return !!sessionStorage.getItem(key);\n}\n\nfunction clear(): void {\n  sessionStorage.clear();\n}\n\nconst sessionStorageService = {\n  set,\n  get,\n  removeItem,\n  exists,\n  clear,\n};\n\nexport default sessionStorageService;\n\nexport interface SessionStorageService {\n  set: (key: string, value: string) => void;\n  get: (key: string) => string | null;\n  removeItem: (key: string) => void;\n  exists: (key: string) => boolean;\n  clear: () => void;\n}\n","import { encryptSymmetrically, decryptSymmetrically } from '../symmetric-crypto';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../utils';\nimport { SymmetricCiphertext } from '../types';\nimport sessionStorageService from '../storage-service/sessionStorageService';\nimport { deriveSymmetricCryptoKeyFromContext } from '../derive-key';\nimport { CONTEXT_LOGIN, CONTEXT_ENC_KEYSTORE, AES_KEY_BIT_LENGTH, CONTEXT_RECOVERY } from '../constants';\nimport { getBytesFromString } from '../hash';\n\n/**\n * Encrypts the keystore content using symmetric encryption\n *\n * @param secretKey - The symmetric key to encrypt the keystore content\n * @param content - The content of the keystore\n * @param userID - The ID of the user\n * @param tag - The keystore type-specific tag string\n * @returns The encrypted keystore content\n */\nexport async function encryptKeystoreContent(\n  secretKey: CryptoKey,\n  content: string,\n  userID: string,\n  tag: string,\n): Promise<SymmetricCiphertext> {\n  try {\n    const aux = userID + tag;\n    const message = base64ToUint8Array(content);\n    const result = await encryptSymmetrically(secretKey, message, aux);\n    return result;\n  } catch (error) {\n    throw new Error('Failed to encrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Decrypts the keystore content using symmetric encryption\n *\n * @param secretKey - The symmetric key to decrypt the keystore content\n * @param encryptedKeys - The encrypted keystore content\n * @param userID - The ID of the user\n * @param tag - The keystore type-specific tag string\n * @returns The decrypted keystore content\n */\nexport async function decryptKeystoreContent(\n  secretKey: CryptoKey,\n  encryptedKeys: SymmetricCiphertext,\n  userID: string,\n  tag: string,\n): Promise<string> {\n  try {\n    const aux = userID + tag;\n    const content = await decryptSymmetrically(secretKey, encryptedKeys, aux);\n    const result = uint8ArrayToBase64(content);\n    return result;\n  } catch (error) {\n    throw new Error('Failed to decrypt keystore content', { cause: error });\n  }\n}\n\n/**\n * Gets User ID from the session storage\n *\n * @returns The ID of the user\n */\nexport function getUserID(): string {\n  try {\n    const userID = sessionStorageService.get('userID');\n    if (!userID) {\n      throw new Error('No UserID');\n    }\n    return userID;\n  } catch (error) {\n    throw new Error('Failed to get UserID from session storage', { cause: error });\n  }\n}\n\n/**\n * Gets user's base key from the session storage\n *\n * @returns The user's base key\n */\nexport function getBaseKey(): Uint8Array {\n  try {\n    const baseKeyBase64 = sessionStorageService.get('baseKey');\n    if (!baseKeyBase64) {\n      throw new Error('No base key');\n    }\n    return base64ToUint8Array(baseKeyBase64);\n  } catch (error) {\n    throw new Error('Failed to get base key from session storage', { cause: error });\n  }\n}\n\n/**\n * Derives a secret key for protecting the idenity keystore\n *\n * @param baseKey - The base secret key from which a new key secret will be derived\n * @returns The derived secret key for protecting the idenity keystore\n */\nexport async function deriveIdentityKeystoreKey(baseKey: Uint8Array): Promise<CryptoKey> {\n  return deriveSymmetricCryptoKeyFromContext(CONTEXT_LOGIN, baseKey);\n}\n\n/**\n * Derives a secret key for protecting the recovery keystore\n *\n * @param recoveryCodes - The recovery codes\n * @returns The derived secret key for protecting the recovery keystore\n */\nexport async function deriveRecoveryKey(recoveryCodes: string): Promise<CryptoKey> {\n  const recoveryCodesBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, recoveryCodes);\n  return deriveSymmetricCryptoKeyFromContext(CONTEXT_RECOVERY, recoveryCodesBuffer);\n}\n\n/**\n * Derives a secret key for protecting the encryption keystore\n * \n * @param baseKey - The base secret key from which a new key secret will be derived\n * @returns The derived secret key for protecting the encryption keystore\n\n*/\nexport async function deriveEncryptionKeystoreKey(baseKey: Uint8Array): Promise<CryptoKey> {\n  return deriveSymmetricCryptoKeyFromContext(CONTEXT_ENC_KEYSTORE, baseKey);\n}\n","import axios, { AxiosResponse, AxiosError } from 'axios';\nimport { KeystoreType, EncryptedKeystore, PublicKeys } from '../types';\nimport { getUserID } from '../keystore-crypto/core';\nimport { base64ToEncryptedKeystore, encryptedKeystoreToBase64, base64ToPublicKey } from '../utils';\n\nexport class KeyServiceAPI {\n  private readonly baseUrl: string;\n\n  constructor(baseUrl: string) {\n    this.baseUrl = baseUrl;\n  }\n\n  /**\n   * Converts the specific client error into a proprietary error for our apps\n   * @param error\n   * @private\n   */\n  private normalizeError(error: AxiosError) {\n    let errorMessage: string;\n    if (error.response?.status === 401) {\n      errorMessage = 'Unauthorized: Invalid or expired token';\n    } else if (error.response?.status === 403) {\n      errorMessage = 'Forbidden: Insufficient permissions';\n    } else if (error.response?.status === 404) {\n      errorMessage = 'Keystore not found for the specified user';\n    } else {\n      errorMessage = 'AxiosError:' + (error.message ?? 'Unknown error');\n    }\n\n    throw new Error(errorMessage);\n  }\n\n  /**\n   * Sends a user's encrypted keystore to the server\n   * @param keystore - The encrypted keystore\n   * @param url - The user specific part of the url\n   * @returns Server response\n   */\n  async sendEncryptedKeystoreToServer(encryptedKeystore: string, url: string): Promise<AxiosResponse> {\n    try {\n      const response = await axios.post(\n        this.baseUrl + `${url}`,\n        { encryptedKeystore },\n        {\n          withCredentials: true,\n          headers: {\n            'Content-Type': 'application/json',\n          },\n        },\n      );\n      return response;\n    } catch (error) {\n      if (axios.isAxiosError(error)) {\n        this.normalizeError(error);\n      }\n      throw new Error('Failed to send keystore', { cause: error });\n    }\n  }\n\n  /**\n   * Requests a user's encrypted keystore from the server\n   * @param url - The user-specific part of the url\n   * @returns The user's encrypted keystore as base64 string\n   */\n  async requestEncryptedKeystore(userID: string, keystoreType: KeystoreType): Promise<string> {\n    try {\n      const url = `/downloadKeystore/${userID}/${keystoreType.toString()}`;\n      const response = await axios.get<string>(this.baseUrl + `${url}`, {\n        withCredentials: true,\n        headers: {\n          'Content-Type': 'application/json',\n        },\n      });\n      return response.data;\n    } catch (error) {\n      if (axios.isAxiosError(error)) {\n        this.normalizeError(error);\n      }\n\n      throw new Error('Failed to retrive keystore', { cause: error });\n    }\n  }\n\n  /**\n   * Uploads encrypted keystore to the server\n   *\n   * @param encryptedKeystore - The encrypted keystore\n   * @param type - The keystore's type\n   * @returns Server response\n   */\n  async uploadKeystoreToServer(encryptedKeystore: EncryptedKeystore): Promise<AxiosResponse> {\n    try {\n      const userID = getUserID();\n      const keystoreType = encryptedKeystore.type;\n      const url = `/uploadKeystore/${userID}/${keystoreType}`;\n      const ciphertextBase64 = encryptedKeystoreToBase64(encryptedKeystore);\n      const result = await this.sendEncryptedKeystoreToServer(ciphertextBase64, url);\n      return result;\n    } catch (error) {\n      throw new Error('Failed to upload keystore to the server', { cause: error });\n    }\n  }\n\n  /**\n   * Gets a user's encrypted keystore containing encryption keys from the server\n   *\n   * @returns Encrypted keystore containing encryption keys\n   */\n  async getEncryptionKeystoreFromServer(): Promise<EncryptedKeystore> {\n    return this.getKeystoreFromServer(KeystoreType.ENCRYPTION);\n  }\n\n  /**\n   * Gets a user's encrypted Identity Keystore from the server\n   *\n   * @returns Encrypted Identity Keystore\n   */\n  async getIdentityKeystoreFromServer(): Promise<EncryptedKeystore> {\n    return this.getKeystoreFromServer(KeystoreType.IDENTITY);\n  }\n\n  /**\n   * Gets a user's encrypted Recovery Keystore from the server\n   *\n   * @returns Encrypted Recovery Keystore\n   */\n  async getRecoveryKeystoreFromServer(): Promise<EncryptedKeystore> {\n    return this.getKeystoreFromServer(KeystoreType.RECOVERY);\n  }\n\n  /**\n   * Gets a user's encrypted Index Keystore from the server\n   *\n   * @returns Encrypted Index Keytore\n   */\n  async getIndexKeystoreFromServer(): Promise<EncryptedKeystore> {\n    return this.getKeystoreFromServer(KeystoreType.INDEX);\n  }\n\n  /**\n   * Gets a user's encrypted keystore from the server\n   *\n   * @param type - The requested keystore's type\n   * @returns Encrypted  Keytore\n   */\n  async getKeystoreFromServer(type: KeystoreType): Promise<EncryptedKeystore> {\n    try {\n      const userID = getUserID();\n      const response = await this.requestEncryptedKeystore(userID, type);\n      const result = base64ToEncryptedKeystore(response);\n      return result;\n    } catch (error) {\n      throw new Error('Failed to retrieve keystore from the server', { cause: error });\n    }\n  }\n  /**\n   * Obtains recipients public keys from the server\n   *\n   * @param emails - The recipients' emails\n   * @returns The list of recipients' public keys\n   */\n  async getRecipientsPublicKeysFromServer(emails: string[]): Promise<string[]> {\n    try {\n      const response = await axios.get<string[]>('/api/getPublicKeys', {\n        params: {\n          emails: emails,\n        },\n        withCredentials: true,\n        headers: {\n          'Content-Type': 'application/json',\n        },\n      });\n      return response.data;\n    } catch (error) {\n      if (axios.isAxiosError(error)) {\n        this.normalizeError(error);\n      }\n      throw new Error('Failed to retrieve public keys', { cause: error });\n    }\n  }\n\n  /**\n   * Obtains the recipient public keys from the server\n   *\n   * @param email - The recipients' emails\n   * @returns The list of recipients' public keys\n   */\n  async getRecipientsPublicKeys(emails: string[]): Promise<PublicKeys[]> {\n    try {\n      const publicKeysBase64: string[] = await this.getRecipientsPublicKeysFromServer(emails);\n      const result: PublicKeys[] = [];\n      for (const keyBase64 of publicKeysBase64) {\n        const publicKeys = await base64ToPublicKey(keyBase64);\n        result.push(publicKeys);\n      }\n      return result;\n    } catch (error) {\n      throw new Error('Failed to get recipients public keys', { cause: error });\n    }\n  }\n}\n\nexport function getKeyServiceAPI(baseUrl: string): KeyServiceAPI {\n  return new KeyServiceAPI(baseUrl);\n}\n"]}