jscrambler 5.5.35 → 6.1.0

package/LICENSE-MIT

@@ -1,4 +1,4 @@
-Copyright (c) 2014 magalhas
+Copyright (c) 2014 Jscrambler
 
 Permission is hereby granted, free of charge, to any person
 obtaining a copy of this software and associated documentation

package/README.md

@@ -2,6 +2,7 @@
 Jscrambler Client for Browser and Node.js
 
 - [Jscrambler](https://jscrambler.com/?utm_source=github.com&utm_medium=referral)
+  - [Version Compatibility](#version-compatibility)
   - [Installation](#installation)
   - [RC configuration](#rc-configuration)
   - [CLI](#cli)
@@ -22,6 +23,16 @@ Jscrambler Client for Browser and Node.js
     - [Quick example](#quick-example)
   - [Jscrambler Parameters](#jscrambler-parameters)
 
+## Version Compatibility
+
+The version's compatibility table match your [Jscrambler Version](https://app.jscrambler.com/settings) with the Jscrambler Client.
+Please make sure you install the right version, otherwise some functionalities might not work properly.
+
+| _Jscrambler Version_   |      _Client and Integrations_      |
+|:----------:|:-------------:|
+| _<= 7.1_ |  _<= 5.x.x_ |
+| _\>= 7.2_ |   _\>= 6.0.0_ |
+
 ## Installation
 
 On your project:
@@ -36,6 +47,12 @@ Or globally:
 npm i -g jscrambler
 ```
 
+Or a specific version:
+
+```js
+npm i jscrambler@5
+```
+
 ## RC configuration
 You may put your access and secret keys into a config file if found in [these directories](https://github.com/dominictarr/rc#standards). Besides simplifying the command entry, this has the added benefit of not logging your Jscrambler credentials.
 
@@ -112,6 +129,7 @@ Options:
   --debugMode                             Protect in debug mode
   --skip-sources                          Prevent source files from being updated
   --force-app-environment <environment>   (version 7.1 and above) Override application's environment detected automatically. Possible values: node,browser,isomorphic,automatic
+  -n <number>                             (version 7.2 and above) Create multiple protections at once.
   -h, --help                              output usage information
 ```
 

package/dist/bin/jscrambler.js

@@ -80,7 +80,7 @@ var validateForceAppEnvironment = function validateForceAppEnvironment(env) {
   return normalizeEnvironment;
 };
 
-_commander2.default.version(require('../../package.json').version).usage('[options] <file ...>').option('-a, --access-key <accessKey>', 'Access key').option('-c, --config <config>', 'Jscrambler configuration options').option('-H, --host <host>', 'Hostname').option('-i, --application-id <id>', 'Application ID').option('-o, --output-dir <dir>', 'Output directory').option('-p, --port <port>', 'Port').option('--base-path <path>', 'Base Path').option('--protocol <protocol>', 'Protocol (http or https)').option('--cafile <path>', 'Internal certificate authority').option('-C, --cwd <dir>', 'Current Working Directory').option('-s, --secret-key <secretKey>', 'Secret key').option('-m, --source-maps <id>', 'Download source maps').option('-R, --randomization-seed <seed>', 'Set randomization seed').option('--instrument', 'Instrument file(s) before start profiling. ATTENTION: previous profiling information will be deleted').option('--start-profiling', 'Starts profiling (assumes an already instrumented application)').option('--stop-profiling', 'Stops profiling').option('--code-hardening-threshold <threshold>', 'Set code hardening file size threshold. Format: {value}{unit="b,kb,mb"}. Example: 200kb', validateCodeHardeningThreshold).option('--recommended-order <bool>', 'Use recommended order', validateBool('recommended-order')).option('-W, --werror <bool>', 'Set werror flag value (default: true)', validateBool('werror')).option('--utc <bool>', 'Set UTC as the request time zone. Otherwise it uses the local time zone (default: true)', validateBool('utc')).option('--tolerate-minification <bool>', 'Don\'t detect minification as malicious tampering (default: true)', validateBool('tolerate-minification')).option('--use-profiling-data <bool>', '(version 6.2 only) Protection should use the existing profiling data (default: true)', validateBool('use-profiling-data')).option('--profiling-data-mode <mode>', '(version 6.3 and above) Select profiling mode (default: automatic)', validateProfilingDataMode).option('--remove-profiling-data', 'Removes the current application profiling information').option('--use-app-classification <bool>', '(version 6.3 and above) Protection should use Application Classification metadata when protecting (default: true)', validateBool('--use-app-classification')).option('--input-symbol-table <file>', '(version 6.3 and above) Protection should use symbol table when protecting. (default: no file)').option('--output-symbol-table <id>', '(version 6.3 and above) Download output symbol table (json)').option('--jscramblerVersion <version>', 'Use a specific Jscrambler version').option('--debugMode', 'Protect in debug mode').option('--skip-sources', 'Prevent source files from being updated').option('--force-app-environment <environment>', '(version 7.1 and above) Override application\'s environment detected automatically. Possible values: ' + availableEnvironments.toString(), validateForceAppEnvironment).parse(process.argv);
+_commander2.default.version(require('../../package.json').version).usage('[options] <file ...>').option('-a, --access-key <accessKey>', 'Access key').option('-c, --config <config>', 'Jscrambler configuration options').option('-H, --host <host>', 'Hostname').option('-i, --application-id <id>', 'Application ID').option('-o, --output-dir <dir>', 'Output directory').option('-p, --port <port>', 'Port').option('--base-path <path>', 'Base Path').option('--protocol <protocol>', 'Protocol (http or https)').option('--cafile <path>', 'Internal certificate authority').option('-C, --cwd <dir>', 'Current Working Directory').option('-s, --secret-key <secretKey>', 'Secret key').option('-m, --source-maps <id>', 'Download source maps').option('-R, --randomization-seed <seed>', 'Set randomization seed').option('--instrument', 'Instrument file(s) before start profiling. ATTENTION: previous profiling information will be deleted').option('--start-profiling', 'Starts profiling (assumes an already instrumented application)').option('--stop-profiling', 'Stops profiling').option('--code-hardening-threshold <threshold>', 'Set code hardening file size threshold. Format: {value}{unit="b,kb,mb"}. Example: 200kb', validateCodeHardeningThreshold).option('--recommended-order <bool>', 'Use recommended order', validateBool('recommended-order')).option('-W, --werror <bool>', 'Set werror flag value (default: true)', validateBool('werror')).option('--utc <bool>', 'Set UTC as the request time zone. Otherwise it uses the local time zone (default: true)', validateBool('utc')).option('--tolerate-minification <bool>', 'Don\'t detect minification as malicious tampering (default: true)', validateBool('tolerate-minification')).option('--use-profiling-data <bool>', '(version 6.2 only) Protection should use the existing profiling data (default: true)', validateBool('use-profiling-data')).option('--profiling-data-mode <mode>', '(version 6.3 and above) Select profiling mode (default: automatic)', validateProfilingDataMode).option('--remove-profiling-data', 'Removes the current application profiling information').option('--use-app-classification <bool>', '(version 6.3 and above) Protection should use Application Classification metadata when protecting (default: true)', validateBool('--use-app-classification')).option('--input-symbol-table <file>', '(version 6.3 and above) Protection should use symbol table when protecting. (default: no file)').option('--output-symbol-table <id>', '(version 6.3 and above) Download output symbol table (json)').option('--jscramblerVersion <version>', 'Use a specific Jscrambler version').option('--debugMode', 'Protect in debug mode').option('--skip-sources', 'Prevent source files from being updated').option('--force-app-environment <environment>', '(version 7.1 and above) Override application\'s environment detected automatically. Possible values: ' + availableEnvironments.toString(), validateForceAppEnvironment).option('-n <number>', '(version 7.2 and above) Create multiple protections at once.').parse(process.argv);
 
 var globSrc = void 0,
     filesSrc = void 0,
@@ -154,6 +154,8 @@ if (_commander2.default.forceAppEnvironment) {
 
 config = (0, _lodash2.default)(config, _config4.default);
 
+config.numberOfProtections = (0, _utils.validateNProtections)(_commander2.default.N);
+
 if (config.codeHardeningThreshold) {
   config.codeHardeningThreshold = validateCodeHardeningThreshold(config.codeHardeningThreshold);
 }
@@ -244,6 +246,7 @@ var _config2 = config,
     utc = _config2.utc,
     entryPoint = _config2.entryPoint,
     excludeList = _config2.excludeList,
+    numberOfProtections = _config2.numberOfProtections,
     forceAppEnvironment = _config2.forceAppEnvironment;
 
 
@@ -421,6 +424,7 @@ if (_commander2.default.sourceMaps) {
               inputSymbolTable: inputSymbolTable,
               entryPoint: entryPoint,
               excludeList: excludeList,
+              numberOfProtections: numberOfProtections,
               forceAppEnvironment: forceAppEnvironment
             });
             _context3.prev = 1;

package/dist/cli.js

@@ -50,7 +50,7 @@ var isBoolFlag = {
   preserveAnnotations: true
 };
 
-// Convert from command line option format to JScrambler API format.
+// Convert from command line option format to Jscrambler API format.
 function mergeAndParseParams(commander, params) {
   var finalParams = (0, _lodash2.default)(params || {});
 

package/dist/client.js

@@ -46,6 +46,10 @@ var _generateSignedParams = require('./generate-signed-params');
 
 var _generateSignedParams2 = _interopRequireDefault(_generateSignedParams);
 
+var _constants = require('./constants');
+
+var _package = require('../package.json');
+
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
@@ -80,7 +84,7 @@ var ClientError = function (_Error) {
  * @param {String} [options.port=443]
  * @param {String} [options.basePath]
  * @param {String} [options.clientId=0]
- * @author José Magalhães (magalhas@gmail.com)
+ * @author Jscrambler
  * @license MIT <http://opensource.org/licenses/MIT>
  */
 
@@ -140,6 +144,8 @@ JScramblerClient.prototype.get = function (path, params) {
  * @param {Callback} callback
  */
 JScramblerClient.prototype.request = function (method, path) {
+  var _this2 = this;
+
   var params = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {};
   var isJSON = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true;
 
@@ -284,8 +290,16 @@ JScramblerClient.prototype.request = function (method, path) {
       errorMessage += err.response.status + ' ' + err.response.statusText;
       statusCode = err.response.status;
 
+      var incompatibleApi = false;
+      if (statusCode === _constants.HTTP_STATUS_CODES.UNAUTHORIZED) {
+        incompatibleApi = err.response.data.errorCode !== _constants.JSCRAMBLER_ERROR_CODES.INVALID_SIGNATURE;
+      }
+
+      if (incompatibleApi) {
+        errorMessage = 'Incompatible jscrambler CLI version (' + _package.version + '). Please downgrade to: \n\t$ npm install ' + _constants.CLIENT_PACKAGES[_this2.options.clientId] + '@5';
+      } else if (
       // For when we have API error messages
-      if (err.response.data && err.response.data.error && err.response.data.message) {
+      err.response.data && err.response.data.error && err.response.data.message) {
         errorMessage += ' - ' + err.response.data.message;
       } else if (err.response.data && err.response.data.errors && err.response.data.errors.length > 0) {
         errorMessage += ' - ' + err.response.data.errors;

package/dist/config.js

@@ -8,6 +8,8 @@ var _rc = require('rc');
 
 var _rc2 = _interopRequireDefault(_rc);
 
+var _constants = require('./constants');
+
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 // Load RC configuration if present. Pass `[]` as last argument to avoid
@@ -18,7 +20,7 @@ var config = (0, _rc2.default)('jscrambler', {
   basePath: '',
   jscramblerVersion: 'stable',
   werror: true,
-  clientId: 0,
+  clientId: _constants.CLIENT_IDS.CLI,
   utc: true,
   maxRetries: 5
 }, []);

package/dist/constants.js

@@ -1,11 +1,33 @@
-"use strict";
+'use strict';
 
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+
+var _Object$freeze;
+
+function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
+
 var HTTP_STATUS_CODES = exports.HTTP_STATUS_CODES = Object.freeze({
+  UNAUTHORIZED: 401,
   FORBIDDEN: 403,
   NOT_FOUND: 404,
   SERVICE_UNAVAILABLE: 503,
   GATEWAY_TIMEOUT: 504
-});
+});
+
+var JSCRAMBLER_ERROR_CODES = exports.JSCRAMBLER_ERROR_CODES = Object.freeze({
+  INVALID_SIGNATURE: '254'
+});
+
+var CLIENT_IDS = exports.CLIENT_IDS = Object.freeze({
+  CLI: 0,
+  APP: 1,
+  WEBPACK: 2,
+  GULP: 3,
+  GRUNT: 4,
+  EMBER: 5,
+  METRO: 6
+});
+
+var CLIENT_PACKAGES = exports.CLIENT_PACKAGES = Object.freeze((_Object$freeze = {}, _defineProperty(_Object$freeze, CLIENT_IDS.CLI, 'jscrambler'), _defineProperty(_Object$freeze, CLIENT_IDS.APP, 'app'), _defineProperty(_Object$freeze, CLIENT_IDS.WEBPACK, 'jscrambler-webpack-plugin'), _defineProperty(_Object$freeze, CLIENT_IDS.GULP, 'gulp-jscrambler'), _defineProperty(_Object$freeze, CLIENT_IDS.GRUNT, 'grunt-jscrambler'), _defineProperty(_Object$freeze, CLIENT_IDS.EMBER, 'ember-cli-jscrambler'), _defineProperty(_Object$freeze, CLIENT_IDS.METRO, 'jscrambler-metro-plugin'), _Object$freeze));

package/dist/generate-signed-params.js

@@ -3,6 +3,9 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+
+var _typeof = typeof Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };
+
 exports.default = signedParams;
 
 var _lodash = require('lodash.clone');
@@ -51,7 +54,8 @@ function buildSortedQuery(params) {
   var _keys = (0, _lodash6.default)(params).sort();
   var query = '';
   for (var i = 0, l = _keys.length; i < l; i++) {
-    query += encodeURIComponent(_keys[i]) + '=' + encodeURIComponent(params[_keys[i]]) + '&';
+    var value = _typeof(params[_keys[i]]) === 'object' ? JSON.stringify(params[_keys[i]]) : params[_keys[i]];
+    query += encodeURIComponent(_keys[i]) + '=' + encodeURIComponent(value) + '&';
   }
   query = query.replace(/\*/g, '%2A').replace(/[!'()]/g, escape).replace(/%7E/g, '~').replace(/\+/g, '%20');
   // Strip the last separator and return

package/dist/get-protection-default-fragments.js

@@ -92,6 +92,8 @@ var protectionFields = {
   growthWarning: 1,
   errorMessage: 1,
   size: 1,
+  startedAt: 1,
+  finishedAt: 1,
   transformedSize: 1
 };