livekit-client 2.11.2 → 2.11.3

package/dist/livekit-client.e2ee.worker.mjs

@@ -482,7 +482,8 @@ const KEY_PROVIDER_DEFAULTS = {
   ratchetSalt: SALT,
   ratchetWindowSize: 8,
   failureTolerance: DECRYPTION_FAILURE_TOLERANCE,
-  keyringSize: 16
+  keyringSize: 16,
+  allowKeyExtraction: false
 };
 const MAX_SIF_COUNT = 100;
 const MAX_SIF_DURATION = 2000;
@@ -962,9 +963,10 @@ function importKey(keyBytes_1) {
       name: ENCRYPTION_ALGORITHM
     };
     let usage = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'encrypt';
+    let extractable = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
     return function* () {
       // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey
-      return crypto.subtle.importKey('raw', keyBytes, algorithm, false, usage === 'derive' ? ['deriveBits', 'deriveKey'] : ['encrypt', 'decrypt']);
+      return crypto.subtle.importKey('raw', keyBytes, algorithm, extractable, usage === 'derive' ? ['deriveBits', 'deriveKey'] : ['encrypt', 'decrypt']);
     }();
   });
 }
@@ -1718,10 +1720,12 @@ class ParticipantKeyHandler extends eventsExports.EventEmitter {
    * returns the ratcheted material
    * if `setKey` is true (default), it will also set the ratcheted key directly on the crypto key ring
    * @param keyIndex
-   * @param setKey
+   * @param setKey set the new key. Will emit KeyHandlerEvent.KeyRatcheted after key generation (default: true)
+   * @param extractable allow key extraction (get the key in plaintext) on the ratcheted new key (default: false)
    */
   ratchetKey(keyIndex) {
     let setKey = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : true;
+    let extractable = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
     const currentKeyIndex = keyIndex !== null && keyIndex !== void 0 ? keyIndex : this.getCurrentKeyIndex();
     const existingPromise = this.ratchetPromiseMap.get(currentKeyIndex);
     if (typeof existingPromise !== 'undefined') {
@@ -1734,7 +1738,7 @@ class ParticipantKeyHandler extends eventsExports.EventEmitter {
           throw new TypeError("Cannot ratchet key without a valid keyset of participant ".concat(this.participantIdentity));
         }
         const currentMaterial = keySet.material;
-        const newMaterial = yield importKey(yield ratchet(currentMaterial, this.keyProviderOptions.ratchetSalt), currentMaterial.algorithm.name, 'derive');
+        const newMaterial = yield importKey(yield ratchet(currentMaterial, this.keyProviderOptions.ratchetSalt), currentMaterial.algorithm.name, 'derive', extractable);
         if (setKey) {
           yield this.setKeyFromMaterial(newMaterial, currentKeyIndex, true);
           this.emit(KeyHandlerEvent.KeyRatcheted, newMaterial, this.participantIdentity, currentKeyIndex);
@@ -1897,11 +1901,11 @@ function handleRatchetRequest(data) {
   return __awaiter(this, void 0, void 0, function* () {
     if (useSharedKey) {
       const keyHandler = getSharedKeyHandler();
-      yield keyHandler.ratchetKey(data.keyIndex);
+      yield keyHandler.ratchetKey(data.keyIndex, true, data.extractable);
       keyHandler.resetKeyStatus();
     } else if (data.participantIdentity) {
       const keyHandler = getParticipantKeyHandler(data.participantIdentity);
-      yield keyHandler.ratchetKey(data.keyIndex);
+      yield keyHandler.ratchetKey(data.keyIndex, true, data.extractable);
       keyHandler.resetKeyStatus();
     } else {
       workerLogger.error('no participant Id was provided for ratchet request and shared key usage is disabled');