matrix-js-sdk 41.4.0 → 41.5.0

package/lib/oidc/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/oidc/register.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAInD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,2BAA2B,CAAC,aAAa,CAAC,CAAC;IACvD,SAAS,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAClD,eAAe,EAAE,2BAA2B,CAAC,kBAAkB,CAAC,CAAC;IACjE,YAAY,EAAE,2BAA2B,CAAC,eAAe,CAAC,CAAC;IAC3D,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAC/C,SAAS,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,UAAU,2BAA2B;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,0BAA0B,EAAE,MAAM,CAAC;IACnC,gBAAgB,EAAE,KAAK,GAAG,QAAQ,CAAC;CACtC;AAED;;GAEG;AACH,oBAAY,cAAc;IACtB;;OAEG;IACH,iBAAiB,uBAAuB;IACxC;;OAEG;IACH,YAAY,kBAAkB;IAC9B;;;;;;OAMG;IACH,mBAAmB,iDAAiD;CACvE;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAA2C,CAAC;AAW5E;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,GAC3B,qBAAqB,gBAAgB,EACrC,gBAAgB,8BAA8B,KAC/C,OAAO,CAAC,MAAM,CA2DhB,CAAC"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/oidc/register.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAInD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,2BAA2B,CAAC,aAAa,CAAC,CAAC;IACvD,SAAS,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAClD,eAAe,EAAE,2BAA2B,CAAC,kBAAkB,CAAC,CAAC;IACjE,YAAY,EAAE,2BAA2B,CAAC,eAAe,CAAC,CAAC;IAC3D,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAC/C,SAAS,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,UAAU,2BAA2B;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,0BAA0B,EAAE,MAAM,CAAC;IACnC,gBAAgB,EAAE,KAAK,GAAG,QAAQ,CAAC;CACtC;AAED;;GAEG;AACH,oBAAY,cAAc;IACtB;;OAEG;IACH,iBAAiB,uBAAuB;IACxC;;OAEG;IACH,YAAY,kBAAkB;IAC9B;;;;;;OAMG;IACH,mBAAmB,iDAAiD;CACvE;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAA2C,CAAC;AAW5E;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,GAC3B,qBAAqB,gBAAgB,EACrC,gBAAgB,8BAA8B,KAC/C,OAAO,CAAC,MAAM,CAgEhB,CAAC"}

package/lib/oidc/register.js

@@ -83,6 +83,11 @@ export var registerOidcClient = /*#__PURE__*/function () {
     if (grantTypes.some(scope => !delegatedAuthConfig.grant_types_supported.includes(scope))) {
       throw new Error(OidcError.DynamicRegistrationNotSupported);
     }
+
+    // ask for device authorization grant if supported
+    if (delegatedAuthConfig.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {
+      grantTypes.push(OAuthGrantType.DeviceAuthorization);
+    }
     var commonBase = new URL(clientMetadata.clientUri);
 
     // https://openid.net/specs/openid-connect-registration-1_0.html

package/lib/oidc/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","names":["OidcError","Method","logger","OAuthGrantType","DEVICE_CODE_SCOPE","DeviceAuthorization","urlHasCommonBase","base","urlStr","url","URL","protocol","hostname","endsWith","concat","registerOidcClient","_ref","_asyncToGenerator","delegatedAuthConfig","clientMetadata","registration_endpoint","Error","DynamicRegistrationNotSupported","grantTypes","AuthorizationCode","RefreshToken","some","scope","grant_types_supported","includes","commonBase","clientUri","metadata","client_name","clientName","client_uri","response_types","grant_types","redirect_uris","redirectUris","id_token_signed_response_alg","token_endpoint_auth_method","application_type","applicationType","contacts","logo_uri","logoUri","undefined","policy_uri","policyUri","tos_uri","tosUri","headers","response","fetch","method","Post","body","JSON","stringify","status","DynamicRegistrationFailed","json","clientId","DynamicRegistrationInvalid","error","Object","values","message","_x","_x2","apply","arguments"],"sources":["../../src/oidc/register.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type OidcClientConfig } from \"./index.ts\";\nimport { OidcError } from \"./error.ts\";\nimport { Method } from \"../http-api/index.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type NonEmptyArray } from \"../@types/common.ts\";\n\n/**\n * Client metadata passed to registration endpoint\n */\nexport type OidcRegistrationClientMetadata = {\n    clientName: OidcRegistrationRequestBody[\"client_name\"];\n    clientUri: OidcRegistrationRequestBody[\"client_uri\"];\n    logoUri?: OidcRegistrationRequestBody[\"logo_uri\"];\n    applicationType: OidcRegistrationRequestBody[\"application_type\"];\n    redirectUris: OidcRegistrationRequestBody[\"redirect_uris\"];\n    contacts: OidcRegistrationRequestBody[\"contacts\"];\n    tosUri: OidcRegistrationRequestBody[\"tos_uri\"];\n    policyUri: OidcRegistrationRequestBody[\"policy_uri\"];\n};\n\n/**\n * Request body for dynamic registration as defined by https://github.com/matrix-org/matrix-spec-proposals/pull/2966\n */\ninterface OidcRegistrationRequestBody {\n    client_name?: string;\n    client_uri: string;\n    logo_uri?: string;\n    contacts?: string[];\n    tos_uri?: string;\n    policy_uri?: string;\n    redirect_uris?: NonEmptyArray<string>;\n    response_types?: NonEmptyArray<string>;\n    grant_types?: NonEmptyArray<string>;\n    id_token_signed_response_alg?: string;\n    token_endpoint_auth_method: string;\n    application_type: \"web\" | \"native\";\n}\n\n/**\n * The OAuth 2.0 grant types that are defined for Matrix in https://spec.matrix.org/v1.17/client-server-api/#grant-types\n */\nexport enum OAuthGrantType {\n    /**\n     * See https://spec.matrix.org/v1.17/client-server-api/#authorization-code-grant\n     */\n    AuthorizationCode = \"authorization_code\",\n    /**\n     * https://spec.matrix.org/v1.17/client-server-api/#refresh-token-grant\n     */\n    RefreshToken = \"refresh_token\",\n    /**\n     * The OAuth 2.0 Device Authorization Grant type identifier as per\n     * https://www.rfc-editor.org/rfc/rfc8628.html#section-7.2 from\n     * [MSC4341](https://github.com/matrix-org/matrix-spec-proposals/pull/4341).\n     *\n     * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n     */\n    DeviceAuthorization = \"urn:ietf:params:oauth:grant-type:device_code\",\n}\n\n/**\n * The name \"scope\" is a misnomer here as it is actually a \"grant type\".\n *\n * @deprecated use `OAuthGrantType.DeviceAuthorization` instead\n */\nexport const DEVICE_CODE_SCOPE: string = OAuthGrantType.DeviceAuthorization;\n\n// Check that URIs have a common base, as per the MSC2966 definition\nconst urlHasCommonBase = (base: URL, urlStr?: string): boolean => {\n    if (!urlStr) return false;\n    const url = new URL(urlStr);\n    if (url.protocol !== base.protocol) return false;\n    if (url.hostname !== base.hostname && !url.hostname.endsWith(`.${base.hostname}`)) return false;\n    return true;\n};\n\n/**\n * Attempts dynamic registration against the configured registration endpoint.\n * Will ignore any URIs that do not use client_uri as a common base as per the spec.\n * @param delegatedAuthConfig - Auth config from {@link discoverAndValidateOIDCIssuerWellKnown}\n * @param clientMetadata - The metadata for the client which to register\n * @returns Promise<string> resolved with registered clientId\n * @throws when registration is not supported, on failed request or invalid response\n */\nexport const registerOidcClient = async (\n    delegatedAuthConfig: OidcClientConfig,\n    clientMetadata: OidcRegistrationClientMetadata,\n): Promise<string> => {\n    if (!delegatedAuthConfig.registration_endpoint) {\n        throw new Error(OidcError.DynamicRegistrationNotSupported);\n    }\n\n    const grantTypes: NonEmptyArray<string> = [OAuthGrantType.AuthorizationCode, OAuthGrantType.RefreshToken];\n    if (grantTypes.some((scope) => !delegatedAuthConfig.grant_types_supported.includes(scope))) {\n        throw new Error(OidcError.DynamicRegistrationNotSupported);\n    }\n\n    const commonBase = new URL(clientMetadata.clientUri);\n\n    // https://openid.net/specs/openid-connect-registration-1_0.html\n    const metadata: OidcRegistrationRequestBody = {\n        client_name: clientMetadata.clientName,\n        client_uri: clientMetadata.clientUri,\n        response_types: [\"code\"],\n        grant_types: grantTypes,\n        redirect_uris: clientMetadata.redirectUris,\n        id_token_signed_response_alg: \"RS256\",\n        token_endpoint_auth_method: \"none\",\n        application_type: clientMetadata.applicationType,\n        contacts: clientMetadata.contacts,\n        logo_uri: urlHasCommonBase(commonBase, clientMetadata.logoUri) ? clientMetadata.logoUri : undefined,\n        policy_uri: urlHasCommonBase(commonBase, clientMetadata.policyUri) ? clientMetadata.policyUri : undefined,\n        tos_uri: urlHasCommonBase(commonBase, clientMetadata.tosUri) ? clientMetadata.tosUri : undefined,\n    };\n\n    const headers = {\n        \"Accept\": \"application/json\",\n        \"Content-Type\": \"application/json\",\n    };\n\n    try {\n        const response = await fetch(delegatedAuthConfig.registration_endpoint, {\n            method: Method.Post,\n            headers,\n            body: JSON.stringify(metadata),\n        });\n\n        if (response.status >= 400) {\n            throw new Error(OidcError.DynamicRegistrationFailed);\n        }\n\n        const body = await response.json();\n        const clientId = body[\"client_id\"];\n        if (!clientId || typeof clientId !== \"string\") {\n            throw new Error(OidcError.DynamicRegistrationInvalid);\n        }\n\n        return clientId;\n    } catch (error) {\n        if (Object.values(OidcError).includes((error as Error).message as OidcError)) {\n            throw error;\n        } else {\n            logger.error(\"Dynamic registration request failed\", error);\n            throw new Error(OidcError.DynamicRegistrationFailed);\n        }\n    }\n};\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,SAAS,QAAQ,YAAY;AACtC,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,MAAM,QAAQ,cAAc;;AAGrC;AACA;AACA;;AAYA;AACA;AACA;;AAgBA;AACA;AACA;AACA,WAAYC,cAAc,0BAAdA,cAAc;EACtB;AACJ;AACA;EAHYA,cAAc;EAKtB;AACJ;AACA;EAPYA,cAAc;EAStB;AACJ;AACA;AACA;AACA;AACA;AACA;EAfYA,cAAc;EAAA,OAAdA,cAAc;AAAA;;AAmB1B;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,iBAAyB,GAAGD,cAAc,CAACE,mBAAmB;;AAE3E;AACA,IAAMC,gBAAgB,GAAGA,CAACC,IAAS,EAAEC,MAAe,KAAc;EAC9D,IAAI,CAACA,MAAM,EAAE,OAAO,KAAK;EACzB,IAAMC,GAAG,GAAG,IAAIC,GAAG,CAACF,MAAM,CAAC;EAC3B,IAAIC,GAAG,CAACE,QAAQ,KAAKJ,IAAI,CAACI,QAAQ,EAAE,OAAO,KAAK;EAChD,IAAIF,GAAG,CAACG,QAAQ,KAAKL,IAAI,CAACK,QAAQ,IAAI,CAACH,GAAG,CAACG,QAAQ,CAACC,QAAQ,KAAAC,MAAA,CAAKP,IAAI,CAACK,QAAQ,CAAE,CAAC,EAAE,OAAO,KAAK;EAC/F,OAAO,IAAI;AACf,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMG,kBAAkB;EAAA,IAAAC,IAAA,GAAAC,iBAAA,CAAG,WAC9BC,mBAAqC,EACrCC,cAA8C,EAC5B;IAClB,IAAI,CAACD,mBAAmB,CAACE,qBAAqB,EAAE;MAC5C,MAAM,IAAIC,KAAK,CAACrB,SAAS,CAACsB,+BAA+B,CAAC;IAC9D;IAEA,IAAMC,UAAiC,GAAG,CAACpB,cAAc,CAACqB,iBAAiB,EAAErB,cAAc,CAACsB,YAAY,CAAC;IACzG,IAAIF,UAAU,CAACG,IAAI,CAAEC,KAAK,IAAK,CAACT,mBAAmB,CAACU,qBAAqB,CAACC,QAAQ,CAACF,KAAK,CAAC,CAAC,EAAE;MACxF,MAAM,IAAIN,KAAK,CAACrB,SAAS,CAACsB,+BAA+B,CAAC;IAC9D;IAEA,IAAMQ,UAAU,GAAG,IAAIpB,GAAG,CAACS,cAAc,CAACY,SAAS,CAAC;;IAEpD;IACA,IAAMC,QAAqC,GAAG;MAC1CC,WAAW,EAAEd,cAAc,CAACe,UAAU;MACtCC,UAAU,EAAEhB,cAAc,CAACY,SAAS;MACpCK,cAAc,EAAE,CAAC,MAAM,CAAC;MACxBC,WAAW,EAAEd,UAAU;MACvBe,aAAa,EAAEnB,cAAc,CAACoB,YAAY;MAC1CC,4BAA4B,EAAE,OAAO;MACrCC,0BAA0B,EAAE,MAAM;MAClCC,gBAAgB,EAAEvB,cAAc,CAACwB,eAAe;MAChDC,QAAQ,EAAEzB,cAAc,CAACyB,QAAQ;MACjCC,QAAQ,EAAEvC,gBAAgB,CAACwB,UAAU,EAAEX,cAAc,CAAC2B,OAAO,CAAC,GAAG3B,cAAc,CAAC2B,OAAO,GAAGC,SAAS;MACnGC,UAAU,EAAE1C,gBAAgB,CAACwB,UAAU,EAAEX,cAAc,CAAC8B,SAAS,CAAC,GAAG9B,cAAc,CAAC8B,SAAS,GAAGF,SAAS;MACzGG,OAAO,EAAE5C,gBAAgB,CAACwB,UAAU,EAAEX,cAAc,CAACgC,MAAM,CAAC,GAAGhC,cAAc,CAACgC,MAAM,GAAGJ;IAC3F,CAAC;IAED,IAAMK,OAAO,GAAG;MACZ,QAAQ,EAAE,kBAAkB;MAC5B,cAAc,EAAE;IACpB,CAAC;IAED,IAAI;MACA,IAAMC,QAAQ,SAASC,KAAK,CAACpC,mBAAmB,CAACE,qBAAqB,EAAE;QACpEmC,MAAM,EAAEtD,MAAM,CAACuD,IAAI;QACnBJ,OAAO;QACPK,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC3B,QAAQ;MACjC,CAAC,CAAC;MAEF,IAAIqB,QAAQ,CAACO,MAAM,IAAI,GAAG,EAAE;QACxB,MAAM,IAAIvC,KAAK,CAACrB,SAAS,CAAC6D,yBAAyB,CAAC;MACxD;MAEA,IAAMJ,IAAI,SAASJ,QAAQ,CAACS,IAAI,CAAC,CAAC;MAClC,IAAMC,QAAQ,GAAGN,IAAI,CAAC,WAAW,CAAC;MAClC,IAAI,CAACM,QAAQ,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;QAC3C,MAAM,IAAI1C,KAAK,CAACrB,SAAS,CAACgE,0BAA0B,CAAC;MACzD;MAEA,OAAOD,QAAQ;IACnB,CAAC,CAAC,OAAOE,KAAK,EAAE;MACZ,IAAIC,MAAM,CAACC,MAAM,CAACnE,SAAS,CAAC,CAAC6B,QAAQ,CAAEoC,KAAK,CAAWG,OAAoB,CAAC,EAAE;QAC1E,MAAMH,KAAK;MACf,CAAC,MAAM;QACH/D,MAAM,CAAC+D,KAAK,CAAC,qCAAqC,EAAEA,KAAK,CAAC;QAC1D,MAAM,IAAI5C,KAAK,CAACrB,SAAS,CAAC6D,yBAAyB,CAAC;MACxD;IACJ;EACJ,CAAC;EAAA,gBA9DY9C,kBAAkBA,CAAAsD,EAAA,EAAAC,GAAA;IAAA,OAAAtD,IAAA,CAAAuD,KAAA,OAAAC,SAAA;EAAA;AAAA,GA8D9B","ignoreList":[]}
+{"version":3,"file":"register.js","names":["OidcError","Method","logger","OAuthGrantType","DEVICE_CODE_SCOPE","DeviceAuthorization","urlHasCommonBase","base","urlStr","url","URL","protocol","hostname","endsWith","concat","registerOidcClient","_ref","_asyncToGenerator","delegatedAuthConfig","clientMetadata","registration_endpoint","Error","DynamicRegistrationNotSupported","grantTypes","AuthorizationCode","RefreshToken","some","scope","grant_types_supported","includes","push","commonBase","clientUri","metadata","client_name","clientName","client_uri","response_types","grant_types","redirect_uris","redirectUris","id_token_signed_response_alg","token_endpoint_auth_method","application_type","applicationType","contacts","logo_uri","logoUri","undefined","policy_uri","policyUri","tos_uri","tosUri","headers","response","fetch","method","Post","body","JSON","stringify","status","DynamicRegistrationFailed","json","clientId","DynamicRegistrationInvalid","error","Object","values","message","_x","_x2","apply","arguments"],"sources":["../../src/oidc/register.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type OidcClientConfig } from \"./index.ts\";\nimport { OidcError } from \"./error.ts\";\nimport { Method } from \"../http-api/index.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type NonEmptyArray } from \"../@types/common.ts\";\n\n/**\n * Client metadata passed to registration endpoint\n */\nexport type OidcRegistrationClientMetadata = {\n    clientName: OidcRegistrationRequestBody[\"client_name\"];\n    clientUri: OidcRegistrationRequestBody[\"client_uri\"];\n    logoUri?: OidcRegistrationRequestBody[\"logo_uri\"];\n    applicationType: OidcRegistrationRequestBody[\"application_type\"];\n    redirectUris: OidcRegistrationRequestBody[\"redirect_uris\"];\n    contacts: OidcRegistrationRequestBody[\"contacts\"];\n    tosUri: OidcRegistrationRequestBody[\"tos_uri\"];\n    policyUri: OidcRegistrationRequestBody[\"policy_uri\"];\n};\n\n/**\n * Request body for dynamic registration as defined by https://github.com/matrix-org/matrix-spec-proposals/pull/2966\n */\ninterface OidcRegistrationRequestBody {\n    client_name?: string;\n    client_uri: string;\n    logo_uri?: string;\n    contacts?: string[];\n    tos_uri?: string;\n    policy_uri?: string;\n    redirect_uris?: NonEmptyArray<string>;\n    response_types?: NonEmptyArray<string>;\n    grant_types?: NonEmptyArray<string>;\n    id_token_signed_response_alg?: string;\n    token_endpoint_auth_method: string;\n    application_type: \"web\" | \"native\";\n}\n\n/**\n * The OAuth 2.0 grant types that are defined for Matrix in https://spec.matrix.org/v1.17/client-server-api/#grant-types\n */\nexport enum OAuthGrantType {\n    /**\n     * See https://spec.matrix.org/v1.17/client-server-api/#authorization-code-grant\n     */\n    AuthorizationCode = \"authorization_code\",\n    /**\n     * https://spec.matrix.org/v1.17/client-server-api/#refresh-token-grant\n     */\n    RefreshToken = \"refresh_token\",\n    /**\n     * The OAuth 2.0 Device Authorization Grant type identifier as per\n     * https://www.rfc-editor.org/rfc/rfc8628.html#section-7.2 from\n     * [MSC4341](https://github.com/matrix-org/matrix-spec-proposals/pull/4341).\n     *\n     * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n     */\n    DeviceAuthorization = \"urn:ietf:params:oauth:grant-type:device_code\",\n}\n\n/**\n * The name \"scope\" is a misnomer here as it is actually a \"grant type\".\n *\n * @deprecated use `OAuthGrantType.DeviceAuthorization` instead\n */\nexport const DEVICE_CODE_SCOPE: string = OAuthGrantType.DeviceAuthorization;\n\n// Check that URIs have a common base, as per the MSC2966 definition\nconst urlHasCommonBase = (base: URL, urlStr?: string): boolean => {\n    if (!urlStr) return false;\n    const url = new URL(urlStr);\n    if (url.protocol !== base.protocol) return false;\n    if (url.hostname !== base.hostname && !url.hostname.endsWith(`.${base.hostname}`)) return false;\n    return true;\n};\n\n/**\n * Attempts dynamic registration against the configured registration endpoint.\n * Will ignore any URIs that do not use client_uri as a common base as per the spec.\n * @param delegatedAuthConfig - Auth config from {@link discoverAndValidateOIDCIssuerWellKnown}\n * @param clientMetadata - The metadata for the client which to register\n * @returns Promise<string> resolved with registered clientId\n * @throws when registration is not supported, on failed request or invalid response\n */\nexport const registerOidcClient = async (\n    delegatedAuthConfig: OidcClientConfig,\n    clientMetadata: OidcRegistrationClientMetadata,\n): Promise<string> => {\n    if (!delegatedAuthConfig.registration_endpoint) {\n        throw new Error(OidcError.DynamicRegistrationNotSupported);\n    }\n\n    const grantTypes: NonEmptyArray<string> = [OAuthGrantType.AuthorizationCode, OAuthGrantType.RefreshToken];\n    if (grantTypes.some((scope) => !delegatedAuthConfig.grant_types_supported.includes(scope))) {\n        throw new Error(OidcError.DynamicRegistrationNotSupported);\n    }\n\n    // ask for device authorization grant if supported\n    if (delegatedAuthConfig.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n        grantTypes.push(OAuthGrantType.DeviceAuthorization);\n    }\n\n    const commonBase = new URL(clientMetadata.clientUri);\n\n    // https://openid.net/specs/openid-connect-registration-1_0.html\n    const metadata: OidcRegistrationRequestBody = {\n        client_name: clientMetadata.clientName,\n        client_uri: clientMetadata.clientUri,\n        response_types: [\"code\"],\n        grant_types: grantTypes,\n        redirect_uris: clientMetadata.redirectUris,\n        id_token_signed_response_alg: \"RS256\",\n        token_endpoint_auth_method: \"none\",\n        application_type: clientMetadata.applicationType,\n        contacts: clientMetadata.contacts,\n        logo_uri: urlHasCommonBase(commonBase, clientMetadata.logoUri) ? clientMetadata.logoUri : undefined,\n        policy_uri: urlHasCommonBase(commonBase, clientMetadata.policyUri) ? clientMetadata.policyUri : undefined,\n        tos_uri: urlHasCommonBase(commonBase, clientMetadata.tosUri) ? clientMetadata.tosUri : undefined,\n    };\n\n    const headers = {\n        \"Accept\": \"application/json\",\n        \"Content-Type\": \"application/json\",\n    };\n\n    try {\n        const response = await fetch(delegatedAuthConfig.registration_endpoint, {\n            method: Method.Post,\n            headers,\n            body: JSON.stringify(metadata),\n        });\n\n        if (response.status >= 400) {\n            throw new Error(OidcError.DynamicRegistrationFailed);\n        }\n\n        const body = await response.json();\n        const clientId = body[\"client_id\"];\n        if (!clientId || typeof clientId !== \"string\") {\n            throw new Error(OidcError.DynamicRegistrationInvalid);\n        }\n\n        return clientId;\n    } catch (error) {\n        if (Object.values(OidcError).includes((error as Error).message as OidcError)) {\n            throw error;\n        } else {\n            logger.error(\"Dynamic registration request failed\", error);\n            throw new Error(OidcError.DynamicRegistrationFailed);\n        }\n    }\n};\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,SAAS,QAAQ,YAAY;AACtC,SAASC,MAAM,QAAQ,sBAAsB;AAC7C,SAASC,MAAM,QAAQ,cAAc;;AAGrC;AACA;AACA;;AAYA;AACA;AACA;;AAgBA;AACA;AACA;AACA,WAAYC,cAAc,0BAAdA,cAAc;EACtB;AACJ;AACA;EAHYA,cAAc;EAKtB;AACJ;AACA;EAPYA,cAAc;EAStB;AACJ;AACA;AACA;AACA;AACA;AACA;EAfYA,cAAc;EAAA,OAAdA,cAAc;AAAA;;AAmB1B;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,iBAAyB,GAAGD,cAAc,CAACE,mBAAmB;;AAE3E;AACA,IAAMC,gBAAgB,GAAGA,CAACC,IAAS,EAAEC,MAAe,KAAc;EAC9D,IAAI,CAACA,MAAM,EAAE,OAAO,KAAK;EACzB,IAAMC,GAAG,GAAG,IAAIC,GAAG,CAACF,MAAM,CAAC;EAC3B,IAAIC,GAAG,CAACE,QAAQ,KAAKJ,IAAI,CAACI,QAAQ,EAAE,OAAO,KAAK;EAChD,IAAIF,GAAG,CAACG,QAAQ,KAAKL,IAAI,CAACK,QAAQ,IAAI,CAACH,GAAG,CAACG,QAAQ,CAACC,QAAQ,KAAAC,MAAA,CAAKP,IAAI,CAACK,QAAQ,CAAE,CAAC,EAAE,OAAO,KAAK;EAC/F,OAAO,IAAI;AACf,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMG,kBAAkB;EAAA,IAAAC,IAAA,GAAAC,iBAAA,CAAG,WAC9BC,mBAAqC,EACrCC,cAA8C,EAC5B;IAClB,IAAI,CAACD,mBAAmB,CAACE,qBAAqB,EAAE;MAC5C,MAAM,IAAIC,KAAK,CAACrB,SAAS,CAACsB,+BAA+B,CAAC;IAC9D;IAEA,IAAMC,UAAiC,GAAG,CAACpB,cAAc,CAACqB,iBAAiB,EAAErB,cAAc,CAACsB,YAAY,CAAC;IACzG,IAAIF,UAAU,CAACG,IAAI,CAAEC,KAAK,IAAK,CAACT,mBAAmB,CAACU,qBAAqB,CAACC,QAAQ,CAACF,KAAK,CAAC,CAAC,EAAE;MACxF,MAAM,IAAIN,KAAK,CAACrB,SAAS,CAACsB,+BAA+B,CAAC;IAC9D;;IAEA;IACA,IAAIJ,mBAAmB,CAACU,qBAAqB,CAACC,QAAQ,CAAC1B,cAAc,CAACE,mBAAmB,CAAC,EAAE;MACxFkB,UAAU,CAACO,IAAI,CAAC3B,cAAc,CAACE,mBAAmB,CAAC;IACvD;IAEA,IAAM0B,UAAU,GAAG,IAAIrB,GAAG,CAACS,cAAc,CAACa,SAAS,CAAC;;IAEpD;IACA,IAAMC,QAAqC,GAAG;MAC1CC,WAAW,EAAEf,cAAc,CAACgB,UAAU;MACtCC,UAAU,EAAEjB,cAAc,CAACa,SAAS;MACpCK,cAAc,EAAE,CAAC,MAAM,CAAC;MACxBC,WAAW,EAAEf,UAAU;MACvBgB,aAAa,EAAEpB,cAAc,CAACqB,YAAY;MAC1CC,4BAA4B,EAAE,OAAO;MACrCC,0BAA0B,EAAE,MAAM;MAClCC,gBAAgB,EAAExB,cAAc,CAACyB,eAAe;MAChDC,QAAQ,EAAE1B,cAAc,CAAC0B,QAAQ;MACjCC,QAAQ,EAAExC,gBAAgB,CAACyB,UAAU,EAAEZ,cAAc,CAAC4B,OAAO,CAAC,GAAG5B,cAAc,CAAC4B,OAAO,GAAGC,SAAS;MACnGC,UAAU,EAAE3C,gBAAgB,CAACyB,UAAU,EAAEZ,cAAc,CAAC+B,SAAS,CAAC,GAAG/B,cAAc,CAAC+B,SAAS,GAAGF,SAAS;MACzGG,OAAO,EAAE7C,gBAAgB,CAACyB,UAAU,EAAEZ,cAAc,CAACiC,MAAM,CAAC,GAAGjC,cAAc,CAACiC,MAAM,GAAGJ;IAC3F,CAAC;IAED,IAAMK,OAAO,GAAG;MACZ,QAAQ,EAAE,kBAAkB;MAC5B,cAAc,EAAE;IACpB,CAAC;IAED,IAAI;MACA,IAAMC,QAAQ,SAASC,KAAK,CAACrC,mBAAmB,CAACE,qBAAqB,EAAE;QACpEoC,MAAM,EAAEvD,MAAM,CAACwD,IAAI;QACnBJ,OAAO;QACPK,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC3B,QAAQ;MACjC,CAAC,CAAC;MAEF,IAAIqB,QAAQ,CAACO,MAAM,IAAI,GAAG,EAAE;QACxB,MAAM,IAAIxC,KAAK,CAACrB,SAAS,CAAC8D,yBAAyB,CAAC;MACxD;MAEA,IAAMJ,IAAI,SAASJ,QAAQ,CAACS,IAAI,CAAC,CAAC;MAClC,IAAMC,QAAQ,GAAGN,IAAI,CAAC,WAAW,CAAC;MAClC,IAAI,CAACM,QAAQ,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;QAC3C,MAAM,IAAI3C,KAAK,CAACrB,SAAS,CAACiE,0BAA0B,CAAC;MACzD;MAEA,OAAOD,QAAQ;IACnB,CAAC,CAAC,OAAOE,KAAK,EAAE;MACZ,IAAIC,MAAM,CAACC,MAAM,CAACpE,SAAS,CAAC,CAAC6B,QAAQ,CAAEqC,KAAK,CAAWG,OAAoB,CAAC,EAAE;QAC1E,MAAMH,KAAK;MACf,CAAC,MAAM;QACHhE,MAAM,CAACgE,KAAK,CAAC,qCAAqC,EAAEA,KAAK,CAAC;QAC1D,MAAM,IAAI7C,KAAK,CAACrB,SAAS,CAAC8D,yBAAyB,CAAC;MACxD;IACJ;EACJ,CAAC;EAAA,gBAnEY/C,kBAAkBA,CAAAuD,EAAA,EAAAC,GAAA;IAAA,OAAAvD,IAAA,CAAAwD,KAAA,OAAAC,SAAA;EAAA;AAAA,GAmE9B","ignoreList":[]}

package/lib/rendezvous/MSC4108SignInWithQR.d.ts

@@ -1,6 +1,7 @@
 import { ClientRendezvousFailureReason, MSC4108FailureReason, type RendezvousFailureListener } from "./index.ts";
 import { type MatrixClient } from "../client.ts";
 import { type MSC4108SecureChannel } from "./channels/MSC4108SecureChannel.ts";
+import { type DeviceAccessTokenResponse, type ValidatedAuthMetadata } from "../oidc/index.ts";
 import { type CryptoApi } from "../crypto-api/index.ts";
 /**
  * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
@@ -40,6 +41,8 @@ export declare class MSC4108SignInWithQR {
     private readonly ourIntent;
     private _code?;
     private expectingNewDeviceId?;
+    private metadata?;
+    private grantInProgress?;
     /**
      * Returns the check code for the secure channel or undefined if not generated yet.
      */
@@ -79,12 +82,26 @@ export declare class MSC4108SignInWithQR {
     /**
      * The second & third step in the OIDC QR login process.
      * To be called after `negotiateProtocols` for the existing device.
-     * To be called after OIDC negotiation for the new device. (Currently unsupported)
+     * To be called after OIDC negotiation for the new device.
+     *
+     * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login
      */
-    deviceAuthorizationGrant(): Promise<{
+    deviceAuthorizationGrant(input?: {
+        metadata: ValidatedAuthMetadata;
+        clientId: string;
+        deviceId: string;
+    }): Promise<{
         verificationUri?: string;
         userCode?: string;
     }>;
+    /**
+     * The fourth step in the OIDC QR login process.
+     * The reciprocating device must perform step 5 for this method to resolve.
+     * To be called after {@link deviceAuthorizationGrant} only on the new device.
+     */
+    completeLoginOnNewDevice({ clientId, }: {
+        clientId: string;
+    }): Promise<DeviceAccessTokenResponse | undefined>;
     /**
      * The fifth (and final) step in the OIDC QR login process.
      * To be called after the new device has completed authentication.

package/lib/rendezvous/MSC4108SignInWithQR.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SignInWithQR.d.ts","sourceRoot":"","sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"names":[],"mappings":"AAkBA,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EAEpB,KAAK,yBAAyB,EACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAI/E,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,oBAAY,WAAW;IACnB,SAAS,sBAAsB;IAC/B,QAAQ,qBAAqB;IAC7B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,gBAAgB,8BAA8B;IAC9C,QAAQ,qBAAqB;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,WAAW,CAAC;CACrB;AA8CD,UAAU,cAAe,SAAQ,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,mBAAmB;IAmBxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,yBAAyB;IArBhD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAC,CAAa;IAC3B,OAAO,CAAC,oBAAoB,CAAC,CAAS;IAEtC;;OAEG;IACH,IAAW,SAAS,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED;;;;;OAKG;gBAEkB,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,OAAO,EACpB,MAAM,CAAC,EAAE,YAAY,YAAA,EAC/B,SAAS,CAAC,EAAE,yBAAyB,YAAA;IAKhD;;OAEG;IACH,IAAW,IAAI,IAAI,UAAU,GAAG,SAAS,CAExC;IAED;;OAEG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAY1C;;OAEG;IACH,IAAW,gBAAgB,IAAI,OAAO,CAErC;IAED;;OAEG;IACH,IAAW,WAAW,IAAI,OAAO,CAEhC;IAED;;;;;OAKG;IACU,kBAAkB,IAAI,OAAO,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8DnE;;;;OAIG;IACU,wBAAwB,IAAI,OAAO,CAAC;QAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAiEF;;;OAGG;IACU,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;YAyFlE,OAAO;YAIP,IAAI;IAIlB;;OAEG;IACU,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC;IAU1D;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhG;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAGtC"}
+{"version":3,"file":"MSC4108SignInWithQR.d.ts","sourceRoot":"","sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"names":[],"mappings":"AAkBA,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EAEpB,KAAK,yBAAyB,EACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG/E,OAAO,EACH,KAAK,yBAAyB,EAK9B,KAAK,qBAAqB,EAG7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,oBAAY,WAAW;IACnB,SAAS,sBAAsB;IAC/B,QAAQ,qBAAqB;IAC7B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,OAAO,oBAAoB;IAC3B,gBAAgB,8BAA8B;IAC9C,QAAQ,qBAAqB;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,WAAW,CAAC;CACrB;AA8CD,UAAU,cAAe,SAAQ,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,mBAAmB;IAqBxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,yBAAyB;IAvBhD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAC,CAAa;IAC3B,OAAO,CAAC,oBAAoB,CAAC,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAwB;IACzC,OAAO,CAAC,eAAe,CAAC,CAA8B;IAEtD;;OAEG;IACH,IAAW,SAAS,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED;;;;;OAKG;gBAEkB,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,OAAO,EACpB,MAAM,CAAC,EAAE,YAAY,YAAA,EAC/B,SAAS,CAAC,EAAE,yBAAyB,YAAA;IAKhD;;OAEG;IACH,IAAW,IAAI,IAAI,UAAU,GAAG,SAAS,CAExC;IAED;;OAEG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAY1C;;OAEG;IACH,IAAW,gBAAgB,IAAI,OAAO,CAErC;IAED;;OAEG;IACH,IAAW,WAAW,IAAI,OAAO,CAEhC;IAED;;;;;OAKG;IACU,kBAAkB,IAAI,OAAO,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8DnE;;;;;;OAMG;IACU,wBAAwB,CAAC,KAAK,CAAC,EAAE;QAC1C,QAAQ,EAAE,qBAAqB,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QACR,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAkGF;;;;OAIG;IACU,wBAAwB,CAAC,EAClC,QAAQ,GACX,EAAE;QACC,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAsDlD;;;OAGG;IACU,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;YAyFlE,OAAO;YAIP,IAAI;IAIlB;;OAEG;IACU,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC;IAU1D;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhG;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAGtC"}

package/lib/rendezvous/MSC4108SignInWithQR.js

@@ -23,7 +23,7 @@ import { ClientRendezvousFailureReason, MSC4108FailureReason, RendezvousError }
 import { logger } from "../logger.js";
 import { MatrixError } from "../http-api/index.js";
 import { sleep } from "../utils.js";
-import { OAuthGrantType } from "../oidc/index.js";
+import { generateScope, OAuthGrantType, startDeviceAuthorization, waitForDeviceAuthorization } from "../oidc/index.js";
 /**
  * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)
  * secure channels.
@@ -77,6 +77,8 @@ export class MSC4108SignInWithQR {
     _defineProperty(this, "ourIntent", void 0);
     _defineProperty(this, "_code", void 0);
     _defineProperty(this, "expectingNewDeviceId", void 0);
+    _defineProperty(this, "metadata", void 0);
+    _defineProperty(this, "grantInProgress", void 0);
     this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;
   }
 
@@ -184,13 +186,47 @@ export class MSC4108SignInWithQR {
   /**
    * The second & third step in the OIDC QR login process.
    * To be called after `negotiateProtocols` for the existing device.
-   * To be called after OIDC negotiation for the new device. (Currently unsupported)
+   * To be called after OIDC negotiation for the new device.
+   *
+   * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login
    */
-  deviceAuthorizationGrant() {
+  deviceAuthorizationGrant(input) {
     var _this3 = this;
     return _asyncToGenerator(function* () {
       if (_this3.isNewDevice) {
-        throw new Error("New device flows around OIDC are not yet implemented");
+        var _dagResponse$verifica;
+        if (!input) {
+          throw new Error("Input must be provided for new device");
+        }
+        var {
+          metadata,
+          clientId,
+          deviceId
+        } = input;
+        var scope = generateScope(deviceId);
+
+        // MSC4108-Flow: NewDevice - start device authorization grant
+        var dagResponse = yield startDeviceAuthorization({
+          clientId,
+          scope,
+          metadata
+        });
+        _this3.metadata = metadata;
+        _this3.grantInProgress = dagResponse;
+        var protocol = {
+          type: PayloadType.Protocol,
+          protocol: "device_authorization_grant",
+          device_id: deviceId,
+          device_authorization_grant: {
+            verification_uri: dagResponse.verification_uri,
+            verification_uri_complete: dagResponse.verification_uri_complete
+          }
+        };
+        yield _this3.send(protocol);
+        return {
+          verificationUri: (_dagResponse$verifica = dagResponse.verification_uri_complete) !== null && _dagResponse$verifica !== void 0 ? _dagResponse$verifica : dagResponse.verification_uri,
+          userCode: dagResponse.user_code
+        };
       } else {
         // The user needs to do step 7 for the out-of-band confirmation
         // but, first we receive the protocol chosen by the other device so that
@@ -246,25 +282,79 @@ export class MSC4108SignInWithQR {
     })();
   }
 
+  /**
+   * The fourth step in the OIDC QR login process.
+   * The reciprocating device must perform step 5 for this method to resolve.
+   * To be called after {@link deviceAuthorizationGrant} only on the new device.
+   */
+  completeLoginOnNewDevice(_ref) {
+    var _this4 = this;
+    return _asyncToGenerator(function* () {
+      var {
+        clientId
+      } = _ref;
+      if (!_this4.isNewDevice || !_this4.grantInProgress || !_this4.metadata) {
+        throw new Error("Can only complete login on new device");
+      }
+      logger.info("Waiting for protocol accepted message");
+      // wait for accepted message
+      var payload = yield _this4.receive();
+      if (!payload) {
+        throw new RendezvousError("No response from existing device", MSC4108FailureReason.UnexpectedMessageReceived);
+      }
+      if (payload.type === PayloadType.Failure) {
+        throw new RendezvousError("Failed", payload.reason);
+      }
+      if (payload.type !== PayloadType.ProtocolAccepted) {
+        throw new RendezvousError("Unexpected message received", MSC4108FailureReason.UnexpectedMessageReceived);
+      }
+
+      // poll for DAG
+      var res = yield waitForDeviceAuthorization({
+        session: _this4.grantInProgress,
+        metadata: _this4.metadata,
+        clientId
+      });
+      if (!res) {
+        throw new RendezvousError("No response from device authorization endpoint", ClientRendezvousFailureReason.Unknown);
+      }
+      if ("error" in res) {
+        var reason = MSC4108FailureReason.UnexpectedMessageReceived;
+        if (res.error === "expired_token") {
+          reason = MSC4108FailureReason.AuthorizationExpired;
+        } else if (res.error === "access_denied") {
+          reason = MSC4108FailureReason.UserCancelled;
+        }
+        var _payload = {
+          type: PayloadType.Failure,
+          reason
+        };
+        yield _this4.send(_payload);
+        return undefined;
+      }
+      return res;
+    })();
+  }
+
   /**
    * The fifth (and final) step in the OIDC QR login process.
    * To be called after the new device has completed authentication.
    */
   shareSecrets() {
-    var _this4 = this;
+    var _this5 = this;
     return _asyncToGenerator(function* () {
-      if (_this4.isNewDevice) {
-        yield _this4.send({
+      if (_this5.isNewDevice) {
+        yield _this5.send({
           type: PayloadType.Success
         });
         // then wait for secrets
         logger.info("Waiting for secrets message");
-        var payload = yield _this4.receive();
+        var payload = yield _this5.receive();
         if ((payload === null || payload === void 0 ? void 0 : payload.type) === PayloadType.Failure) {
           throw new RendezvousError("Failed", payload.reason);
         }
         if ((payload === null || payload === void 0 ? void 0 : payload.type) !== PayloadType.Secrets) {
-          yield _this4.send({
+          yield _this5.send({
             type: PayloadType.Failure,
             reason: MSC4108FailureReason.UnexpectedMessageReceived
           });
@@ -275,22 +365,22 @@ export class MSC4108SignInWithQR {
         };
         // then done?
       } else {
-        if (!_this4.expectingNewDeviceId) {
+        if (!_this5.expectingNewDeviceId) {
           throw new Error("No new device ID expected");
         }
-        yield _this4.send({
+        yield _this5.send({
           type: PayloadType.ProtocolAccepted
         });
         logger.info("Waiting for outcome message");
-        var _payload = yield _this4.receive();
-        if ((_payload === null || _payload === void 0 ? void 0 : _payload.type) === PayloadType.Failure) {
-          throw new RendezvousError("Failed", _payload.reason);
+        var _payload2 = yield _this5.receive();
+        if ((_payload2 === null || _payload2 === void 0 ? void 0 : _payload2.type) === PayloadType.Failure) {
+          throw new RendezvousError("Failed", _payload2.reason);
         }
-        if ((_payload === null || _payload === void 0 ? void 0 : _payload.type) === PayloadType.Declined) {
+        if ((_payload2 === null || _payload2 === void 0 ? void 0 : _payload2.type) === PayloadType.Declined) {
           throw new RendezvousError("User declined", ClientRendezvousFailureReason.UserDeclined);
         }
-        if ((_payload === null || _payload === void 0 ? void 0 : _payload.type) !== PayloadType.Success) {
-          yield _this4.send({
+        if ((_payload2 === null || _payload2 === void 0 ? void 0 : _payload2.type) !== PayloadType.Success) {
+          yield _this5.send({
             type: PayloadType.Failure,
             reason: MSC4108FailureReason.UnexpectedMessageReceived
           });
@@ -300,16 +390,16 @@ export class MSC4108SignInWithQR {
         do {
           // is the device visible via the Homeserver?
           try {
-            var _this4$client;
-            var device = yield (_this4$client = _this4.client) === null || _this4$client === void 0 ? void 0 : _this4$client.getDevice(_this4.expectingNewDeviceId);
+            var _this5$client;
+            var device = yield (_this5$client = _this5.client) === null || _this5$client === void 0 ? void 0 : _this5$client.getDevice(_this5.expectingNewDeviceId);
             if (device) {
               // if so, return the secrets
-              var secretsBundle = yield _this4.client.getCrypto().exportSecretsBundle();
-              if (_this4.channel.cancelled) {
+              var secretsBundle = yield _this5.client.getCrypto().exportSecretsBundle();
+              if (_this5.channel.cancelled) {
                 throw new RendezvousError("User cancelled", MSC4108FailureReason.UserCancelled);
               }
               // send secrets
-              yield _this4.send(_objectSpread({
+              yield _this5.send(_objectSpread({
                 type: PayloadType.Secrets
               }, secretsBundle));
               return {
@@ -326,7 +416,7 @@ export class MSC4108SignInWithQR {
           }
           yield sleep(1000);
         } while (Date.now() < timeout);
-        yield _this4.send({
+        yield _this5.send({
           type: PayloadType.Failure,
           reason: MSC4108FailureReason.DeviceNotFound
         });
@@ -335,15 +425,15 @@ export class MSC4108SignInWithQR {
     })();
   }
   receive() {
-    var _this5 = this;
+    var _this6 = this;
     return _asyncToGenerator(function* () {
-      return yield _this5.channel.secureReceive();
+      return yield _this6.channel.secureReceive();
     })();
   }
   send(payload) {
-    var _this6 = this;
+    var _this7 = this;
     return _asyncToGenerator(function* () {
-      yield _this6.channel.secureSend(payload);
+      yield _this7.channel.secureSend(payload);
     })();
   }
 
@@ -351,12 +441,12 @@ export class MSC4108SignInWithQR {
    * Decline the login on the existing device.
    */
   declineLoginOnExistingDevice() {
-    var _this7 = this;
+    var _this8 = this;
     return _asyncToGenerator(function* () {
-      if (!_this7.isExistingDevice) {
+      if (!_this8.isExistingDevice) {
         throw new Error("Can only decline login on existing device");
       }
-      yield _this7.send({
+      yield _this8.send({
         type: PayloadType.Failure,
         reason: MSC4108FailureReason.UserCancelled
       });
@@ -368,11 +458,11 @@ export class MSC4108SignInWithQR {
    * @param reason the reason for the cancellation
    */
   cancel(reason) {
-    var _this8 = this;
+    var _this9 = this;
     return _asyncToGenerator(function* () {
-      var _this8$onFailure;
-      (_this8$onFailure = _this8.onFailure) === null || _this8$onFailure === void 0 || _this8$onFailure.call(_this8, reason);
-      yield _this8.channel.cancel(reason);
+      var _this9$onFailure;
+      (_this9$onFailure = _this9.onFailure) === null || _this9$onFailure === void 0 || _this9$onFailure.call(_this9, reason);
+      yield _this9.channel.cancel(reason);
     })();
   }
 
@@ -380,9 +470,9 @@ export class MSC4108SignInWithQR {
    * Closes the rendezvous session.
    */
   close() {
-    var _this9 = this;
+    var _this0 = this;
     return _asyncToGenerator(function* () {
-      yield _this9.channel.close();
+      yield _this0.channel.close();
     })();
   }
 }

package/lib/rendezvous/MSC4108SignInWithQR.js.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SignInWithQR.js","names":["QrCodeIntent","ClientRendezvousFailureReason","MSC4108FailureReason","RendezvousError","logger","MatrixError","sleep","OAuthGrantType","PayloadType","isDeviceAuthorizationGrantProtocolPayload","payload","protocol","MSC4108SignInWithQR","checkCode","_this$channel","channel","getCheckCode","constructor","didScanCode","client","onFailure","_defineProperty","ourIntent","Reciprocate","Login","code","_code","generateCode","_this","_asyncToGenerator","getDomain","isExistingDevice","isNewDevice","negotiateProtocols","_this2","info","concat","connect","_oidcClientConfig","oidcClientConfig","getAuthMetadata","e","error","grant_types_supported","includes","DeviceAuthorization","send","type","Protocols","protocols","homeserver","Failure","reason","UnsupportedProtocol","receive","UnexpectedMessageReceived","serverName","deviceAuthorizationGrant","_this3","Error","Protocol","device_authorization_grant","dag","device_id","expectingNewDeviceId","verification_uri","verificationUri","verification_uri_complete","verificationUriComplete","deviceAlreadyExists","_this3$client","getDevice","err","httpStatus","DeviceAlreadyExists","shareSecrets","_this4","Success","Secrets","secrets","ProtocolAccepted","Declined","UserDeclined","timeout","Date","now","_this4$client","device","secretsBundle","getCrypto","exportSecretsBundle","cancelled","UserCancelled","_objectSpread","DeviceNotFound","_this5","secureReceive","_this6","secureSend","declineLoginOnExistingDevice","_this7","cancel","_this8","_this8$onFailure","call","close","_this9"],"sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"sourcesContent":["/*\nCopyright 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { QrCodeIntent } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    ClientRendezvousFailureReason,\n    MSC4108FailureReason,\n    RendezvousError,\n    type RendezvousFailureListener,\n} from \"./index.ts\";\nimport { type MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { MatrixError } from \"../http-api/index.ts\";\nimport { sleep } from \"../utils.ts\";\nimport { OAuthGrantType, type OidcClientConfig } from \"../oidc/index.ts\";\nimport { type CryptoApi } from \"../crypto-api/index.ts\";\n\n/**\n * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * secure channels.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport enum PayloadType {\n    Protocols = \"m.login.protocols\",\n    Protocol = \"m.login.protocol\",\n    Failure = \"m.login.failure\",\n    Success = \"m.login.success\",\n    Secrets = \"m.login.secrets\",\n    ProtocolAccepted = \"m.login.protocol_accepted\",\n    Declined = \"m.login.declined\",\n}\n\n/**\n * Type representing the base payload format for [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * messages sent over the secure channel.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport interface MSC4108Payload {\n    type: PayloadType;\n}\n\ninterface ProtocolsPayload extends MSC4108Payload {\n    type: PayloadType.Protocols;\n    protocols: string[];\n    homeserver: string;\n}\n\ninterface ProtocolPayload extends MSC4108Payload {\n    type: PayloadType.Protocol;\n    protocol: Exclude<string, \"device_authorization_grant\">;\n    device_id: string;\n}\n\ninterface DeviceAuthorizationGrantProtocolPayload extends ProtocolPayload {\n    protocol: \"device_authorization_grant\";\n    device_authorization_grant: {\n        verification_uri: string;\n        verification_uri_complete?: string;\n    };\n}\n\nfunction isDeviceAuthorizationGrantProtocolPayload(\n    payload: ProtocolPayload,\n): payload is DeviceAuthorizationGrantProtocolPayload {\n    return payload.protocol === \"device_authorization_grant\";\n}\n\ninterface FailurePayload extends MSC4108Payload {\n    type: PayloadType.Failure;\n    reason: MSC4108FailureReason;\n    homeserver?: string;\n}\n\ninterface DeclinedPayload extends MSC4108Payload {\n    type: PayloadType.Declined;\n}\n\ninterface SuccessPayload extends MSC4108Payload {\n    type: PayloadType.Success;\n}\n\ninterface AcceptedPayload extends MSC4108Payload {\n    type: PayloadType.ProtocolAccepted;\n}\n\ninterface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>>> {\n    type: PayloadType.Secrets;\n}\n\n/**\n * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * sign in with QR + OIDC flow.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport class MSC4108SignInWithQR {\n    private readonly ourIntent: QrCodeIntent;\n    private _code?: Uint8Array;\n    private expectingNewDeviceId?: string;\n\n    /**\n     * Returns the check code for the secure channel or undefined if not generated yet.\n     */\n    public get checkCode(): string | undefined {\n        return this.channel?.getCheckCode();\n    }\n\n    /**\n     * @param channel - The secure channel used for communication\n     * @param client - The Matrix client in used on the device already logged in\n     * @param didScanCode - Whether this side of the channel scanned the QR code from the other party\n     * @param onFailure - Callback for when the rendezvous fails\n     */\n    public constructor(\n        private readonly channel: MSC4108SecureChannel,\n        private readonly didScanCode: boolean,\n        private readonly client?: MatrixClient,\n        public onFailure?: RendezvousFailureListener,\n    ) {\n        this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;\n    }\n\n    /**\n     * Returns the code representing the rendezvous suitable for rendering in a QR code or undefined if not generated yet.\n     */\n    public get code(): Uint8Array | undefined {\n        return this._code;\n    }\n\n    /**\n     * Generate the code including doing partial set up of the channel where required.\n     */\n    public async generateCode(): Promise<void> {\n        if (this._code) {\n            return;\n        }\n\n        if (this.ourIntent === QrCodeIntent.Reciprocate && this.client) {\n            this._code = await this.channel.generateCode(this.ourIntent, this.client.getDomain()!);\n        } else if (this.ourIntent === QrCodeIntent.Login) {\n            this._code = await this.channel.generateCode(this.ourIntent);\n        }\n    }\n\n    /**\n     * Returns true if the device is the already logged in device reciprocating a new login on the other side of the channel.\n     */\n    public get isExistingDevice(): boolean {\n        return this.ourIntent === QrCodeIntent.Reciprocate;\n    }\n\n    /**\n     * Returns true if the device is the new device logging in being reciprocated by the device on the other side of the channel.\n     */\n    public get isNewDevice(): boolean {\n        return !this.isExistingDevice;\n    }\n\n    /**\n     * The first step in the OIDC QR login process.\n     * To be called after the QR code has been rendered or scanned.\n     * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.\n     * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.\n     */\n    public async negotiateProtocols(): Promise<{ serverName?: string }> {\n        logger.info(`negotiateProtocols(isNewDevice=${this.isNewDevice} didScanCode=${this.didScanCode})`);\n        await this.channel.connect();\n\n        if (this.didScanCode) {\n            // Secure Channel step 6 completed, we trust the channel\n\n            if (this.isNewDevice) {\n                // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set\n            } else {\n                // MSC4108-Flow: NewScanned -send protocols message\n                let oidcClientConfig: OidcClientConfig | undefined;\n                try {\n                    oidcClientConfig = await this.client!.getAuthMetadata();\n                } catch (e) {\n                    logger.error(\"Failed to discover OIDC metadata\", e);\n                }\n\n                if (oidcClientConfig?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n                    await this.send<ProtocolsPayload>({\n                        type: PayloadType.Protocols,\n                        protocols: [\"device_authorization_grant\"],\n                        homeserver: this.client!.getDomain()!,\n                    });\n                } else {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.UnsupportedProtocol,\n                    });\n                    throw new RendezvousError(\n                        \"Device code grant unsupported\",\n                        MSC4108FailureReason.UnsupportedProtocol,\n                    );\n                }\n            }\n        } else if (this.isNewDevice) {\n            // MSC4108-Flow: ExistingScanned - wait for protocols message\n            logger.info(\"Waiting for protocols message\");\n            const payload = await this.receive<ProtocolsPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocols) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            return { serverName: payload.homeserver };\n        } else {\n            // MSC4108-Flow: NewScanned - nothing to do\n        }\n        return {};\n    }\n\n    /**\n     * The second & third step in the OIDC QR login process.\n     * To be called after `negotiateProtocols` for the existing device.\n     * To be called after OIDC negotiation for the new device. (Currently unsupported)\n     */\n    public async deviceAuthorizationGrant(): Promise<{\n        verificationUri?: string;\n        userCode?: string;\n    }> {\n        if (this.isNewDevice) {\n            throw new Error(\"New device flows around OIDC are not yet implemented\");\n        } else {\n            // The user needs to do step 7 for the out-of-band confirmation\n            // but, first we receive the protocol chosen by the other device so that\n            // the confirmation_uri is ready to go\n            logger.info(\"Waiting for protocol message\");\n            const payload = await this.receive<ProtocolPayload | DeviceAuthorizationGrantProtocolPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocol) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            if (isDeviceAuthorizationGrantProtocolPayload(payload)) {\n                const { device_authorization_grant: dag, device_id: expectingNewDeviceId } = payload;\n                const { verification_uri: verificationUri, verification_uri_complete: verificationUriComplete } = dag;\n\n                let deviceAlreadyExists = true;\n                try {\n                    await this.client?.getDevice(expectingNewDeviceId);\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        deviceAlreadyExists = false;\n                    }\n                }\n\n                if (deviceAlreadyExists) {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.DeviceAlreadyExists,\n                    });\n                    throw new RendezvousError(\n                        \"Specified device ID already exists\",\n                        MSC4108FailureReason.DeviceAlreadyExists,\n                    );\n                }\n\n                this.expectingNewDeviceId = expectingNewDeviceId;\n\n                return { verificationUri: verificationUriComplete ?? verificationUri };\n            }\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.UnsupportedProtocol,\n            });\n            throw new RendezvousError(\n                \"Received a request for an unsupported protocol\",\n                MSC4108FailureReason.UnsupportedProtocol,\n            );\n        }\n    }\n\n    /**\n     * The fifth (and final) step in the OIDC QR login process.\n     * To be called after the new device has completed authentication.\n     */\n    public async shareSecrets(): Promise<{ secrets?: Omit<SecretsPayload, \"type\"> }> {\n        if (this.isNewDevice) {\n            await this.send<SuccessPayload>({\n                type: PayloadType.Success,\n            });\n            // then wait for secrets\n            logger.info(\"Waiting for secrets message\");\n            const payload = await this.receive<SecretsPayload>();\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Secrets) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n            return { secrets: payload };\n            // then done?\n        } else {\n            if (!this.expectingNewDeviceId) {\n                throw new Error(\"No new device ID expected\");\n            }\n            await this.send<AcceptedPayload>({\n                type: PayloadType.ProtocolAccepted,\n            });\n\n            logger.info(\"Waiting for outcome message\");\n            const payload = await this.receive<SuccessPayload | DeclinedPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type === PayloadType.Declined) {\n                throw new RendezvousError(\"User declined\", ClientRendezvousFailureReason.UserDeclined);\n            }\n\n            if (payload?.type !== PayloadType.Success) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\"Unexpected message\", MSC4108FailureReason.UnexpectedMessageReceived);\n            }\n\n            const timeout = Date.now() + 10000; // wait up to 10 seconds\n            do {\n                // is the device visible via the Homeserver?\n                try {\n                    const device = await this.client?.getDevice(this.expectingNewDeviceId);\n\n                    if (device) {\n                        // if so, return the secrets\n                        const secretsBundle = await this.client!.getCrypto()!.exportSecretsBundle!();\n                        if (this.channel.cancelled) {\n                            throw new RendezvousError(\"User cancelled\", MSC4108FailureReason.UserCancelled);\n                        }\n                        // send secrets\n                        await this.send<SecretsPayload>({\n                            type: PayloadType.Secrets,\n                            ...secretsBundle,\n                        });\n                        return { secrets: secretsBundle };\n                        // let the other side close the rendezvous session\n                    }\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        // not found, so keep waiting until timeout\n                    } else {\n                        throw err;\n                    }\n                }\n                await sleep(1000);\n            } while (Date.now() < timeout);\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.DeviceNotFound,\n            });\n            throw new RendezvousError(\"New device not found\", MSC4108FailureReason.DeviceNotFound);\n        }\n    }\n\n    private async receive<T extends MSC4108Payload>(): Promise<T | FailurePayload | undefined> {\n        return (await this.channel.secureReceive()) as T | undefined;\n    }\n\n    private async send<T extends MSC4108Payload>(payload: T): Promise<void> {\n        await this.channel.secureSend(payload);\n    }\n\n    /**\n     * Decline the login on the existing device.\n     */\n    public async declineLoginOnExistingDevice(): Promise<void> {\n        if (!this.isExistingDevice) {\n            throw new Error(\"Can only decline login on existing device\");\n        }\n        await this.send<FailurePayload>({\n            type: PayloadType.Failure,\n            reason: MSC4108FailureReason.UserCancelled,\n        });\n    }\n\n    /**\n     * Cancels the rendezvous session.\n     * @param reason the reason for the cancellation\n     */\n    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {\n        this.onFailure?.(reason);\n        await this.channel.cancel(reason);\n    }\n\n    /**\n     * Closes the rendezvous session.\n     */\n    public async close(): Promise<void> {\n        await this.channel.close();\n    }\n}\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,QAAQ,oCAAoC;AAEjE,SACIC,6BAA6B,EAC7BC,oBAAoB,EACpBC,eAAe,QAEZ,YAAY;AAEnB,SAASC,MAAM,QAAQ,cAAc;AAErC,SAASC,WAAW,QAAQ,sBAAsB;AAClD,SAASC,KAAK,QAAQ,aAAa;AACnC,SAASC,cAAc,QAA+B,kBAAkB;AAGxE;AACA;AACA;AACA;AACA;AACA,WAAYC,WAAW,0BAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAA,OAAXA,WAAW;AAAA;;AAUvB;AACA;AACA;AACA;AACA;;AAyBA,SAASC,yCAAyCA,CAC9CC,OAAwB,EAC0B;EAClD,OAAOA,OAAO,CAACC,QAAQ,KAAK,4BAA4B;AAC5D;AAwBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mBAAmB,CAAC;EAK7B;AACJ;AACA;EACI,IAAWC,SAASA,CAAA,EAAuB;IAAA,IAAAC,aAAA;IACvC,QAAAA,aAAA,GAAO,IAAI,CAACC,OAAO,cAAAD,aAAA,uBAAZA,aAAA,CAAcE,YAAY,CAAC,CAAC;EACvC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWC,WAAWA,CACGF,OAA6B,EAC7BG,WAAoB,EACpBC,MAAqB,EAC/BC,SAAqC,EAC9C;IAAA,KAJmBL,OAA6B,GAA7BA,OAA6B;IAAA,KAC7BG,WAAoB,GAApBA,WAAoB;IAAA,KACpBC,MAAqB,GAArBA,MAAqB;IAAA,KAC/BC,SAAqC,GAArCA,SAAqC;IAAAC,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAE5C,IAAI,CAACC,SAAS,GAAGH,MAAM,GAAGnB,YAAY,CAACuB,WAAW,GAAGvB,YAAY,CAACwB,KAAK;EAC3E;;EAEA;AACJ;AACA;EACI,IAAWC,IAAIA,CAAA,EAA2B;IACtC,OAAO,IAAI,CAACC,KAAK;EACrB;;EAEA;AACJ;AACA;EACiBC,YAAYA,CAAA,EAAkB;IAAA,IAAAC,KAAA;IAAA,OAAAC,iBAAA;MACvC,IAAID,KAAI,CAACF,KAAK,EAAE;QACZ;MACJ;MAEA,IAAIE,KAAI,CAACN,SAAS,KAAKtB,YAAY,CAACuB,WAAW,IAAIK,KAAI,CAACT,MAAM,EAAE;QAC5DS,KAAI,CAACF,KAAK,SAASE,KAAI,CAACb,OAAO,CAACY,YAAY,CAACC,KAAI,CAACN,SAAS,EAAEM,KAAI,CAACT,MAAM,CAACW,SAAS,CAAC,CAAE,CAAC;MAC1F,CAAC,MAAM,IAAIF,KAAI,CAACN,SAAS,KAAKtB,YAAY,CAACwB,KAAK,EAAE;QAC9CI,KAAI,CAACF,KAAK,SAASE,KAAI,CAACb,OAAO,CAACY,YAAY,CAACC,KAAI,CAACN,SAAS,CAAC;MAChE;IAAC;EACL;;EAEA;AACJ;AACA;EACI,IAAWS,gBAAgBA,CAAA,EAAY;IACnC,OAAO,IAAI,CAACT,SAAS,KAAKtB,YAAY,CAACuB,WAAW;EACtD;;EAEA;AACJ;AACA;EACI,IAAWS,WAAWA,CAAA,EAAY;IAC9B,OAAO,CAAC,IAAI,CAACD,gBAAgB;EACjC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBE,kBAAkBA,CAAA,EAAqC;IAAA,IAAAC,MAAA;IAAA,OAAAL,iBAAA;MAChEzB,MAAM,CAAC+B,IAAI,mCAAAC,MAAA,CAAmCF,MAAI,CAACF,WAAW,mBAAAI,MAAA,CAAgBF,MAAI,CAAChB,WAAW,MAAG,CAAC;MAClG,MAAMgB,MAAI,CAACnB,OAAO,CAACsB,OAAO,CAAC,CAAC;MAE5B,IAAIH,MAAI,CAAChB,WAAW,EAAE;QAClB;;QAEA,IAAIgB,MAAI,CAACF,WAAW,EAAE;UAClB;QAAA,CACH,MAAM;UAAA,IAAAM,iBAAA;UACH;UACA,IAAIC,gBAA8C;UAClD,IAAI;YACAA,gBAAgB,SAASL,MAAI,CAACf,MAAM,CAAEqB,eAAe,CAAC,CAAC;UAC3D,CAAC,CAAC,OAAOC,CAAC,EAAE;YACRrC,MAAM,CAACsC,KAAK,CAAC,kCAAkC,EAAED,CAAC,CAAC;UACvD;UAEA,KAAAH,iBAAA,GAAIC,gBAAgB,cAAAD,iBAAA,eAAhBA,iBAAA,CAAkBK,qBAAqB,CAACC,QAAQ,CAACrC,cAAc,CAACsC,mBAAmB,CAAC,EAAE;YACtF,MAAMX,MAAI,CAACY,IAAI,CAAmB;cAC9BC,IAAI,EAAEvC,WAAW,CAACwC,SAAS;cAC3BC,SAAS,EAAE,CAAC,4BAA4B,CAAC;cACzCC,UAAU,EAAEhB,MAAI,CAACf,MAAM,CAAEW,SAAS,CAAC;YACvC,CAAC,CAAC;UACN,CAAC,MAAM;YACH,MAAMI,MAAI,CAACY,IAAI,CAAiB;cAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;cACzBC,MAAM,EAAElD,oBAAoB,CAACmD;YACjC,CAAC,CAAC;YACF,MAAM,IAAIlD,eAAe,CACrB,+BAA+B,EAC/BD,oBAAoB,CAACmD,mBACzB,CAAC;UACL;QACJ;MACJ,CAAC,MAAM,IAAInB,MAAI,CAACF,WAAW,EAAE;QACzB;QACA5B,MAAM,CAAC+B,IAAI,CAAC,+BAA+B,CAAC;QAC5C,IAAMzB,OAAO,SAASwB,MAAI,CAACoB,OAAO,CAAmB,CAAC;QAEtD,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAIhD,eAAe,CAAC,QAAQ,EAAEO,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACwC,SAAS,EAAE;UACzC,MAAMd,MAAI,CAACY,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAElD,oBAAoB,CAACqD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIpD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACqD,yBACzB,CAAC;QACL;QAEA,OAAO;UAAEC,UAAU,EAAE9C,OAAO,CAACwC;QAAW,CAAC;MAC7C,CAAC,MAAM;QACH;MAAA;MAEJ,OAAO,CAAC,CAAC;IAAC;EACd;;EAEA;AACJ;AACA;AACA;AACA;EACiBO,wBAAwBA,CAAA,EAGlC;IAAA,IAAAC,MAAA;IAAA,OAAA7B,iBAAA;MACC,IAAI6B,MAAI,CAAC1B,WAAW,EAAE;QAClB,MAAM,IAAI2B,KAAK,CAAC,sDAAsD,CAAC;MAC3E,CAAC,MAAM;QACH;QACA;QACA;QACAvD,MAAM,CAAC+B,IAAI,CAAC,8BAA8B,CAAC;QAC3C,IAAMzB,OAAO,SAASgD,MAAI,CAACJ,OAAO,CAA4D,CAAC;QAE/F,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAIhD,eAAe,CAAC,QAAQ,EAAEO,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACoD,QAAQ,EAAE;UACxC,MAAMF,MAAI,CAACZ,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAElD,oBAAoB,CAACqD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIpD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACqD,yBACzB,CAAC;QACL;QAEA,IAAI9C,yCAAyC,CAACC,OAAO,CAAC,EAAE;UACpD,IAAM;YAAEmD,0BAA0B,EAAEC,GAAG;YAAEC,SAAS,EAAEC;UAAqB,CAAC,GAAGtD,OAAO;UACpF,IAAM;YAAEuD,gBAAgB,EAAEC,eAAe;YAAEC,yBAAyB,EAAEC;UAAwB,CAAC,GAAGN,GAAG;UAErG,IAAIO,mBAAmB,GAAG,IAAI;UAC9B,IAAI;YAAA,IAAAC,aAAA;YACA,OAAAA,aAAA,GAAMZ,MAAI,CAACvC,MAAM,cAAAmD,aAAA,uBAAXA,aAAA,CAAaC,SAAS,CAACP,oBAAoB,CAAC;UACtD,CAAC,CAAC,OAAOQ,GAA0B,EAAE;YACjC,IAAIA,GAAG,YAAYnE,WAAW,IAAImE,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;cACtDJ,mBAAmB,GAAG,KAAK;YAC/B;UACJ;UAEA,IAAIA,mBAAmB,EAAE;YACrB,MAAMX,MAAI,CAACZ,IAAI,CAAiB;cAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;cACzBC,MAAM,EAAElD,oBAAoB,CAACwE;YACjC,CAAC,CAAC;YACF,MAAM,IAAIvE,eAAe,CACrB,oCAAoC,EACpCD,oBAAoB,CAACwE,mBACzB,CAAC;UACL;UAEAhB,MAAI,CAACM,oBAAoB,GAAGA,oBAAoB;UAEhD,OAAO;YAAEE,eAAe,EAAEE,uBAAuB,aAAvBA,uBAAuB,cAAvBA,uBAAuB,GAAIF;UAAgB,CAAC;QAC1E;QAEA,MAAMR,MAAI,CAACZ,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC,MAAM,EAAElD,oBAAoB,CAACmD;QACjC,CAAC,CAAC;QACF,MAAM,IAAIlD,eAAe,CACrB,gDAAgD,EAChDD,oBAAoB,CAACmD,mBACzB,CAAC;MACL;IAAC;EACL;;EAEA;AACJ;AACA;AACA;EACiBsB,YAAYA,CAAA,EAAwD;IAAA,IAAAC,MAAA;IAAA,OAAA/C,iBAAA;MAC7E,IAAI+C,MAAI,CAAC5C,WAAW,EAAE;QAClB,MAAM4C,MAAI,CAAC9B,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAACqE;QACtB,CAAC,CAAC;QACF;QACAzE,MAAM,CAAC+B,IAAI,CAAC,6BAA6B,CAAC;QAC1C,IAAMzB,OAAO,SAASkE,MAAI,CAACtB,OAAO,CAAiB,CAAC;QACpD,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAIhD,eAAe,CAAC,QAAQ,EAAEO,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACsE,OAAO,EAAE;UACvC,MAAMF,MAAI,CAAC9B,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAElD,oBAAoB,CAACqD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIpD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACqD,yBACzB,CAAC;QACL;QACA,OAAO;UAAEwB,OAAO,EAAErE;QAAQ,CAAC;QAC3B;MACJ,CAAC,MAAM;QACH,IAAI,CAACkE,MAAI,CAACZ,oBAAoB,EAAE;UAC5B,MAAM,IAAIL,KAAK,CAAC,2BAA2B,CAAC;QAChD;QACA,MAAMiB,MAAI,CAAC9B,IAAI,CAAkB;UAC7BC,IAAI,EAAEvC,WAAW,CAACwE;QACtB,CAAC,CAAC;QAEF5E,MAAM,CAAC+B,IAAI,CAAC,6BAA6B,CAAC;QAC1C,IAAMzB,QAAO,SAASkE,MAAI,CAACtB,OAAO,CAAmC,CAAC;QAEtE,IAAI,CAAA5C,QAAO,aAAPA,QAAO,uBAAPA,QAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAIhD,eAAe,CAAC,QAAQ,EAAEO,QAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,QAAO,aAAPA,QAAO,uBAAPA,QAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACyE,QAAQ,EAAE;UACxC,MAAM,IAAI9E,eAAe,CAAC,eAAe,EAAEF,6BAA6B,CAACiF,YAAY,CAAC;QAC1F;QAEA,IAAI,CAAAxE,QAAO,aAAPA,QAAO,uBAAPA,QAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACqE,OAAO,EAAE;UACvC,MAAMD,MAAI,CAAC9B,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAElD,oBAAoB,CAACqD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIpD,eAAe,CAAC,oBAAoB,EAAED,oBAAoB,CAACqD,yBAAyB,CAAC;QACnG;QAEA,IAAM4B,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACpC,GAAG;UACC;UACA,IAAI;YAAA,IAAAC,aAAA;YACA,IAAMC,MAAM,UAAAD,aAAA,GAASV,MAAI,CAACzD,MAAM,cAAAmE,aAAA,uBAAXA,aAAA,CAAaf,SAAS,CAACK,MAAI,CAACZ,oBAAoB,CAAC;YAEtE,IAAIuB,MAAM,EAAE;cACR;cACA,IAAMC,aAAa,SAASZ,MAAI,CAACzD,MAAM,CAAEsE,SAAS,CAAC,CAAC,CAAEC,mBAAmB,CAAE,CAAC;cAC5E,IAAId,MAAI,CAAC7D,OAAO,CAAC4E,SAAS,EAAE;gBACxB,MAAM,IAAIxF,eAAe,CAAC,gBAAgB,EAAED,oBAAoB,CAAC0F,aAAa,CAAC;cACnF;cACA;cACA,MAAMhB,MAAI,CAAC9B,IAAI,CAAA+C,aAAA;gBACX9C,IAAI,EAAEvC,WAAW,CAACsE;cAAO,GACtBU,aAAa,CACnB,CAAC;cACF,OAAO;gBAAET,OAAO,EAAES;cAAc,CAAC;cACjC;YACJ;UACJ,CAAC,CAAC,OAAOhB,GAA0B,EAAE;YACjC,IAAIA,GAAG,YAAYnE,WAAW,IAAImE,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;cACtD;YAAA,CACH,MAAM;cACH,MAAMD,GAAG;YACb;UACJ;UACA,MAAMlE,KAAK,CAAC,IAAI,CAAC;QACrB,CAAC,QAAQ8E,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGF,OAAO;QAE7B,MAAMP,MAAI,CAAC9B,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC,MAAM,EAAElD,oBAAoB,CAAC4F;QACjC,CAAC,CAAC;QACF,MAAM,IAAI3F,eAAe,CAAC,sBAAsB,EAAED,oBAAoB,CAAC4F,cAAc,CAAC;MAC1F;IAAC;EACL;EAEcxC,OAAOA,CAAA,EAAsE;IAAA,IAAAyC,MAAA;IAAA,OAAAlE,iBAAA;MACvF,aAAckE,MAAI,CAAChF,OAAO,CAACiF,aAAa,CAAC,CAAC;IAAmB;EACjE;EAEclD,IAAIA,CAA2BpC,OAAU,EAAiB;IAAA,IAAAuF,MAAA;IAAA,OAAApE,iBAAA;MACpE,MAAMoE,MAAI,CAAClF,OAAO,CAACmF,UAAU,CAACxF,OAAO,CAAC;IAAC;EAC3C;;EAEA;AACJ;AACA;EACiByF,4BAA4BA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAAvE,iBAAA;MACvD,IAAI,CAACuE,MAAI,CAACrE,gBAAgB,EAAE;QACxB,MAAM,IAAI4B,KAAK,CAAC,2CAA2C,CAAC;MAChE;MACA,MAAMyC,MAAI,CAACtD,IAAI,CAAiB;QAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;QACzBC,MAAM,EAAElD,oBAAoB,CAAC0F;MACjC,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;EACiBS,MAAMA,CAACjD,MAA4D,EAAiB;IAAA,IAAAkD,MAAA;IAAA,OAAAzE,iBAAA;MAAA,IAAA0E,gBAAA;MAC7F,CAAAA,gBAAA,GAAAD,MAAI,CAAClF,SAAS,cAAAmF,gBAAA,eAAdA,gBAAA,CAAAC,IAAA,CAAAF,MAAI,EAAalD,MAAM,CAAC;MACxB,MAAMkD,MAAI,CAACvF,OAAO,CAACsF,MAAM,CAACjD,MAAM,CAAC;IAAC;EACtC;;EAEA;AACJ;AACA;EACiBqD,KAAKA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAA7E,iBAAA;MAChC,MAAM6E,MAAI,CAAC3F,OAAO,CAAC0F,KAAK,CAAC,CAAC;IAAC;EAC/B;AACJ","ignoreList":[]}
+{"version":3,"file":"MSC4108SignInWithQR.js","names":["QrCodeIntent","ClientRendezvousFailureReason","MSC4108FailureReason","RendezvousError","logger","MatrixError","sleep","generateScope","OAuthGrantType","startDeviceAuthorization","waitForDeviceAuthorization","PayloadType","isDeviceAuthorizationGrantProtocolPayload","payload","protocol","MSC4108SignInWithQR","checkCode","_this$channel","channel","getCheckCode","constructor","didScanCode","client","onFailure","_defineProperty","ourIntent","Reciprocate","Login","code","_code","generateCode","_this","_asyncToGenerator","getDomain","isExistingDevice","isNewDevice","negotiateProtocols","_this2","info","concat","connect","_oidcClientConfig","oidcClientConfig","getAuthMetadata","e","error","grant_types_supported","includes","DeviceAuthorization","send","type","Protocols","protocols","homeserver","Failure","reason","UnsupportedProtocol","receive","UnexpectedMessageReceived","serverName","deviceAuthorizationGrant","input","_this3","_dagResponse$verifica","Error","metadata","clientId","deviceId","scope","dagResponse","grantInProgress","Protocol","device_id","device_authorization_grant","verification_uri","verification_uri_complete","verificationUri","userCode","user_code","dag","expectingNewDeviceId","verificationUriComplete","deviceAlreadyExists","_this3$client","getDevice","err","httpStatus","DeviceAlreadyExists","completeLoginOnNewDevice","_ref","_this4","ProtocolAccepted","res","session","Unknown","AuthorizationExpired","UserCancelled","undefined","shareSecrets","_this5","Success","Secrets","secrets","Declined","UserDeclined","timeout","Date","now","_this5$client","device","secretsBundle","getCrypto","exportSecretsBundle","cancelled","_objectSpread","DeviceNotFound","_this6","secureReceive","_this7","secureSend","declineLoginOnExistingDevice","_this8","cancel","_this9","_this9$onFailure","call","close","_this0"],"sources":["../../src/rendezvous/MSC4108SignInWithQR.ts"],"sourcesContent":["/*\nCopyright 2024 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { QrCodeIntent } from \"@matrix-org/matrix-sdk-crypto-wasm\";\n\nimport {\n    ClientRendezvousFailureReason,\n    MSC4108FailureReason,\n    RendezvousError,\n    type RendezvousFailureListener,\n} from \"./index.ts\";\nimport { type MatrixClient } from \"../client.ts\";\nimport { logger } from \"../logger.ts\";\nimport { type MSC4108SecureChannel } from \"./channels/MSC4108SecureChannel.ts\";\nimport { MatrixError } from \"../http-api/index.ts\";\nimport { sleep } from \"../utils.ts\";\nimport {\n    type DeviceAccessTokenResponse,\n    type DeviceAuthorizationResponse,\n    generateScope,\n    OAuthGrantType,\n    startDeviceAuthorization,\n    type ValidatedAuthMetadata,\n    waitForDeviceAuthorization,\n    type OidcClientConfig,\n} from \"../oidc/index.ts\";\nimport { type CryptoApi } from \"../crypto-api/index.ts\";\n\n/**\n * Enum representing the payload types transmissible over [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * secure channels.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport enum PayloadType {\n    Protocols = \"m.login.protocols\",\n    Protocol = \"m.login.protocol\",\n    Failure = \"m.login.failure\",\n    Success = \"m.login.success\",\n    Secrets = \"m.login.secrets\",\n    ProtocolAccepted = \"m.login.protocol_accepted\",\n    Declined = \"m.login.declined\",\n}\n\n/**\n * Type representing the base payload format for [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * messages sent over the secure channel.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport interface MSC4108Payload {\n    type: PayloadType;\n}\n\ninterface ProtocolsPayload extends MSC4108Payload {\n    type: PayloadType.Protocols;\n    protocols: string[];\n    homeserver: string;\n}\n\ninterface ProtocolPayload extends MSC4108Payload {\n    type: PayloadType.Protocol;\n    protocol: Exclude<string, \"device_authorization_grant\">;\n    device_id: string;\n}\n\ninterface DeviceAuthorizationGrantProtocolPayload extends ProtocolPayload {\n    protocol: \"device_authorization_grant\";\n    device_authorization_grant: {\n        verification_uri: string;\n        verification_uri_complete?: string;\n    };\n}\n\nfunction isDeviceAuthorizationGrantProtocolPayload(\n    payload: ProtocolPayload,\n): payload is DeviceAuthorizationGrantProtocolPayload {\n    return payload.protocol === \"device_authorization_grant\";\n}\n\ninterface FailurePayload extends MSC4108Payload {\n    type: PayloadType.Failure;\n    reason: MSC4108FailureReason;\n    homeserver?: string;\n}\n\ninterface DeclinedPayload extends MSC4108Payload {\n    type: PayloadType.Declined;\n}\n\ninterface SuccessPayload extends MSC4108Payload {\n    type: PayloadType.Success;\n}\n\ninterface AcceptedPayload extends MSC4108Payload {\n    type: PayloadType.ProtocolAccepted;\n}\n\ninterface SecretsPayload extends MSC4108Payload, Awaited<ReturnType<NonNullable<CryptoApi[\"exportSecretsBundle\"]>>> {\n    type: PayloadType.Secrets;\n}\n\n/**\n * Prototype of the unstable [MSC4108](https://github.com/matrix-org/matrix-spec-proposals/pull/4108)\n * sign in with QR + OIDC flow.\n * @experimental Note that this is UNSTABLE and may have breaking changes without notice.\n */\nexport class MSC4108SignInWithQR {\n    private readonly ourIntent: QrCodeIntent;\n    private _code?: Uint8Array;\n    private expectingNewDeviceId?: string;\n    private metadata?: ValidatedAuthMetadata;\n    private grantInProgress?: DeviceAuthorizationResponse;\n\n    /**\n     * Returns the check code for the secure channel or undefined if not generated yet.\n     */\n    public get checkCode(): string | undefined {\n        return this.channel?.getCheckCode();\n    }\n\n    /**\n     * @param channel - The secure channel used for communication\n     * @param client - The Matrix client in used on the device already logged in\n     * @param didScanCode - Whether this side of the channel scanned the QR code from the other party\n     * @param onFailure - Callback for when the rendezvous fails\n     */\n    public constructor(\n        private readonly channel: MSC4108SecureChannel,\n        private readonly didScanCode: boolean,\n        private readonly client?: MatrixClient,\n        public onFailure?: RendezvousFailureListener,\n    ) {\n        this.ourIntent = client ? QrCodeIntent.Reciprocate : QrCodeIntent.Login;\n    }\n\n    /**\n     * Returns the code representing the rendezvous suitable for rendering in a QR code or undefined if not generated yet.\n     */\n    public get code(): Uint8Array | undefined {\n        return this._code;\n    }\n\n    /**\n     * Generate the code including doing partial set up of the channel where required.\n     */\n    public async generateCode(): Promise<void> {\n        if (this._code) {\n            return;\n        }\n\n        if (this.ourIntent === QrCodeIntent.Reciprocate && this.client) {\n            this._code = await this.channel.generateCode(this.ourIntent, this.client.getDomain()!);\n        } else if (this.ourIntent === QrCodeIntent.Login) {\n            this._code = await this.channel.generateCode(this.ourIntent);\n        }\n    }\n\n    /**\n     * Returns true if the device is the already logged in device reciprocating a new login on the other side of the channel.\n     */\n    public get isExistingDevice(): boolean {\n        return this.ourIntent === QrCodeIntent.Reciprocate;\n    }\n\n    /**\n     * Returns true if the device is the new device logging in being reciprocated by the device on the other side of the channel.\n     */\n    public get isNewDevice(): boolean {\n        return !this.isExistingDevice;\n    }\n\n    /**\n     * The first step in the OIDC QR login process.\n     * To be called after the QR code has been rendered or scanned.\n     * The scanning device has to discover the homeserver details, if they scanned the code then they already have it.\n     * If the new device is the one rendering the QR code then it has to wait be sent the homeserver details via the rendezvous channel.\n     */\n    public async negotiateProtocols(): Promise<{ serverName?: string }> {\n        logger.info(`negotiateProtocols(isNewDevice=${this.isNewDevice} didScanCode=${this.didScanCode})`);\n        await this.channel.connect();\n\n        if (this.didScanCode) {\n            // Secure Channel step 6 completed, we trust the channel\n\n            if (this.isNewDevice) {\n                // MSC4108-Flow: ExistingScanned - take homeserver from QR code which should already be set\n            } else {\n                // MSC4108-Flow: NewScanned -send protocols message\n                let oidcClientConfig: OidcClientConfig | undefined;\n                try {\n                    oidcClientConfig = await this.client!.getAuthMetadata();\n                } catch (e) {\n                    logger.error(\"Failed to discover OIDC metadata\", e);\n                }\n\n                if (oidcClientConfig?.grant_types_supported.includes(OAuthGrantType.DeviceAuthorization)) {\n                    await this.send<ProtocolsPayload>({\n                        type: PayloadType.Protocols,\n                        protocols: [\"device_authorization_grant\"],\n                        homeserver: this.client!.getDomain()!,\n                    });\n                } else {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.UnsupportedProtocol,\n                    });\n                    throw new RendezvousError(\n                        \"Device code grant unsupported\",\n                        MSC4108FailureReason.UnsupportedProtocol,\n                    );\n                }\n            }\n        } else if (this.isNewDevice) {\n            // MSC4108-Flow: ExistingScanned - wait for protocols message\n            logger.info(\"Waiting for protocols message\");\n            const payload = await this.receive<ProtocolsPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocols) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            return { serverName: payload.homeserver };\n        } else {\n            // MSC4108-Flow: NewScanned - nothing to do\n        }\n        return {};\n    }\n\n    /**\n     * The second & third step in the OIDC QR login process.\n     * To be called after `negotiateProtocols` for the existing device.\n     * To be called after OIDC negotiation for the new device.\n     *\n     * @param input - Required for the new device to start the device authorization grant, not required for the existing device reciprocating the login\n     */\n    public async deviceAuthorizationGrant(input?: {\n        metadata: ValidatedAuthMetadata;\n        clientId: string;\n        deviceId: string;\n    }): Promise<{\n        verificationUri?: string;\n        userCode?: string;\n    }> {\n        if (this.isNewDevice) {\n            if (!input) {\n                throw new Error(\"Input must be provided for new device\");\n            }\n\n            const { metadata, clientId, deviceId } = input;\n\n            const scope = generateScope(deviceId);\n\n            // MSC4108-Flow: NewDevice - start device authorization grant\n            const dagResponse = await startDeviceAuthorization({\n                clientId,\n                scope,\n                metadata,\n            });\n\n            this.metadata = metadata;\n            this.grantInProgress = dagResponse;\n\n            const protocol: DeviceAuthorizationGrantProtocolPayload = {\n                type: PayloadType.Protocol,\n                protocol: \"device_authorization_grant\",\n                device_id: deviceId,\n                device_authorization_grant: {\n                    verification_uri: dagResponse.verification_uri,\n                    verification_uri_complete: dagResponse.verification_uri_complete,\n                },\n            };\n\n            await this.send(protocol);\n\n            return {\n                verificationUri: dagResponse.verification_uri_complete ?? dagResponse.verification_uri,\n                userCode: dagResponse.user_code,\n            };\n        } else {\n            // The user needs to do step 7 for the out-of-band confirmation\n            // but, first we receive the protocol chosen by the other device so that\n            // the confirmation_uri is ready to go\n            logger.info(\"Waiting for protocol message\");\n            const payload = await this.receive<ProtocolPayload | DeviceAuthorizationGrantProtocolPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Protocol) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n\n            if (isDeviceAuthorizationGrantProtocolPayload(payload)) {\n                const { device_authorization_grant: dag, device_id: expectingNewDeviceId } = payload;\n                const { verification_uri: verificationUri, verification_uri_complete: verificationUriComplete } = dag;\n\n                let deviceAlreadyExists = true;\n                try {\n                    await this.client?.getDevice(expectingNewDeviceId);\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        deviceAlreadyExists = false;\n                    }\n                }\n\n                if (deviceAlreadyExists) {\n                    await this.send<FailurePayload>({\n                        type: PayloadType.Failure,\n                        reason: MSC4108FailureReason.DeviceAlreadyExists,\n                    });\n                    throw new RendezvousError(\n                        \"Specified device ID already exists\",\n                        MSC4108FailureReason.DeviceAlreadyExists,\n                    );\n                }\n\n                this.expectingNewDeviceId = expectingNewDeviceId;\n\n                return { verificationUri: verificationUriComplete ?? verificationUri };\n            }\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.UnsupportedProtocol,\n            });\n            throw new RendezvousError(\n                \"Received a request for an unsupported protocol\",\n                MSC4108FailureReason.UnsupportedProtocol,\n            );\n        }\n    }\n\n    /**\n     * The fourth step in the OIDC QR login process.\n     * The reciprocating device must perform step 5 for this method to resolve.\n     * To be called after {@link deviceAuthorizationGrant} only on the new device.\n     */\n    public async completeLoginOnNewDevice({\n        clientId,\n    }: {\n        clientId: string;\n    }): Promise<DeviceAccessTokenResponse | undefined> {\n        if (!this.isNewDevice || !this.grantInProgress || !this.metadata) {\n            throw new Error(\"Can only complete login on new device\");\n        }\n\n        logger.info(\"Waiting for protocol accepted message\");\n        // wait for accepted message\n        const payload = await this.receive<AcceptedPayload | FailurePayload>();\n\n        if (!payload) {\n            throw new RendezvousError(\n                \"No response from existing device\",\n                MSC4108FailureReason.UnexpectedMessageReceived,\n            );\n        }\n        if (payload.type === PayloadType.Failure) {\n            throw new RendezvousError(\"Failed\", (payload as FailurePayload).reason);\n        }\n        if (payload.type !== PayloadType.ProtocolAccepted) {\n            throw new RendezvousError(\"Unexpected message received\", MSC4108FailureReason.UnexpectedMessageReceived);\n        }\n\n        // poll for DAG\n        const res = await waitForDeviceAuthorization({\n            session: this.grantInProgress,\n            metadata: this.metadata,\n            clientId,\n        });\n\n        if (!res) {\n            throw new RendezvousError(\n                \"No response from device authorization endpoint\",\n                ClientRendezvousFailureReason.Unknown,\n            );\n        }\n\n        if (\"error\" in res) {\n            let reason: MSC4108FailureReason = MSC4108FailureReason.UnexpectedMessageReceived;\n            if (res.error === \"expired_token\") {\n                reason = MSC4108FailureReason.AuthorizationExpired;\n            } else if (res.error === \"access_denied\") {\n                reason = MSC4108FailureReason.UserCancelled;\n            }\n            const payload: FailurePayload = {\n                type: PayloadType.Failure,\n                reason,\n            };\n            await this.send(payload);\n            return undefined;\n        }\n\n        return res;\n    }\n\n    /**\n     * The fifth (and final) step in the OIDC QR login process.\n     * To be called after the new device has completed authentication.\n     */\n    public async shareSecrets(): Promise<{ secrets?: Omit<SecretsPayload, \"type\"> }> {\n        if (this.isNewDevice) {\n            await this.send<SuccessPayload>({\n                type: PayloadType.Success,\n            });\n            // then wait for secrets\n            logger.info(\"Waiting for secrets message\");\n            const payload = await this.receive<SecretsPayload>();\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type !== PayloadType.Secrets) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\n                    \"Unexpected message received\",\n                    MSC4108FailureReason.UnexpectedMessageReceived,\n                );\n            }\n            return { secrets: payload };\n            // then done?\n        } else {\n            if (!this.expectingNewDeviceId) {\n                throw new Error(\"No new device ID expected\");\n            }\n            await this.send<AcceptedPayload>({\n                type: PayloadType.ProtocolAccepted,\n            });\n\n            logger.info(\"Waiting for outcome message\");\n            const payload = await this.receive<SuccessPayload | DeclinedPayload>();\n\n            if (payload?.type === PayloadType.Failure) {\n                throw new RendezvousError(\"Failed\", payload.reason);\n            }\n\n            if (payload?.type === PayloadType.Declined) {\n                throw new RendezvousError(\"User declined\", ClientRendezvousFailureReason.UserDeclined);\n            }\n\n            if (payload?.type !== PayloadType.Success) {\n                await this.send<FailurePayload>({\n                    type: PayloadType.Failure,\n                    reason: MSC4108FailureReason.UnexpectedMessageReceived,\n                });\n                throw new RendezvousError(\"Unexpected message\", MSC4108FailureReason.UnexpectedMessageReceived);\n            }\n\n            const timeout = Date.now() + 10000; // wait up to 10 seconds\n            do {\n                // is the device visible via the Homeserver?\n                try {\n                    const device = await this.client?.getDevice(this.expectingNewDeviceId);\n\n                    if (device) {\n                        // if so, return the secrets\n                        const secretsBundle = await this.client!.getCrypto()!.exportSecretsBundle!();\n                        if (this.channel.cancelled) {\n                            throw new RendezvousError(\"User cancelled\", MSC4108FailureReason.UserCancelled);\n                        }\n                        // send secrets\n                        await this.send<SecretsPayload>({\n                            type: PayloadType.Secrets,\n                            ...secretsBundle,\n                        });\n                        return { secrets: secretsBundle };\n                        // let the other side close the rendezvous session\n                    }\n                } catch (err: MatrixError | unknown) {\n                    if (err instanceof MatrixError && err.httpStatus === 404) {\n                        // not found, so keep waiting until timeout\n                    } else {\n                        throw err;\n                    }\n                }\n                await sleep(1000);\n            } while (Date.now() < timeout);\n\n            await this.send<FailurePayload>({\n                type: PayloadType.Failure,\n                reason: MSC4108FailureReason.DeviceNotFound,\n            });\n            throw new RendezvousError(\"New device not found\", MSC4108FailureReason.DeviceNotFound);\n        }\n    }\n\n    private async receive<T extends MSC4108Payload>(): Promise<T | FailurePayload | undefined> {\n        return (await this.channel.secureReceive()) as T | undefined;\n    }\n\n    private async send<T extends MSC4108Payload>(payload: T): Promise<void> {\n        await this.channel.secureSend(payload);\n    }\n\n    /**\n     * Decline the login on the existing device.\n     */\n    public async declineLoginOnExistingDevice(): Promise<void> {\n        if (!this.isExistingDevice) {\n            throw new Error(\"Can only decline login on existing device\");\n        }\n        await this.send<FailurePayload>({\n            type: PayloadType.Failure,\n            reason: MSC4108FailureReason.UserCancelled,\n        });\n    }\n\n    /**\n     * Cancels the rendezvous session.\n     * @param reason the reason for the cancellation\n     */\n    public async cancel(reason: MSC4108FailureReason | ClientRendezvousFailureReason): Promise<void> {\n        this.onFailure?.(reason);\n        await this.channel.cancel(reason);\n    }\n\n    /**\n     * Closes the rendezvous session.\n     */\n    public async close(): Promise<void> {\n        await this.channel.close();\n    }\n}\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,QAAQ,oCAAoC;AAEjE,SACIC,6BAA6B,EAC7BC,oBAAoB,EACpBC,eAAe,QAEZ,YAAY;AAEnB,SAASC,MAAM,QAAQ,cAAc;AAErC,SAASC,WAAW,QAAQ,sBAAsB;AAClD,SAASC,KAAK,QAAQ,aAAa;AACnC,SAGIC,aAAa,EACbC,cAAc,EACdC,wBAAwB,EAExBC,0BAA0B,QAEvB,kBAAkB;AAGzB;AACA;AACA;AACA;AACA;AACA,WAAYC,WAAW,0BAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAXA,WAAW;EAAA,OAAXA,WAAW;AAAA;;AAUvB;AACA;AACA;AACA;AACA;;AAyBA,SAASC,yCAAyCA,CAC9CC,OAAwB,EAC0B;EAClD,OAAOA,OAAO,CAACC,QAAQ,KAAK,4BAA4B;AAC5D;AAwBA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mBAAmB,CAAC;EAO7B;AACJ;AACA;EACI,IAAWC,SAASA,CAAA,EAAuB;IAAA,IAAAC,aAAA;IACvC,QAAAA,aAAA,GAAO,IAAI,CAACC,OAAO,cAAAD,aAAA,uBAAZA,aAAA,CAAcE,YAAY,CAAC,CAAC;EACvC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACWC,WAAWA,CACGF,OAA6B,EAC7BG,WAAoB,EACpBC,MAAqB,EAC/BC,SAAqC,EAC9C;IAAA,KAJmBL,OAA6B,GAA7BA,OAA6B;IAAA,KAC7BG,WAAoB,GAApBA,WAAoB;IAAA,KACpBC,MAAqB,GAArBA,MAAqB;IAAA,KAC/BC,SAAqC,GAArCA,SAAqC;IAAAC,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAAAA,eAAA;IAE5C,IAAI,CAACC,SAAS,GAAGH,MAAM,GAAGtB,YAAY,CAAC0B,WAAW,GAAG1B,YAAY,CAAC2B,KAAK;EAC3E;;EAEA;AACJ;AACA;EACI,IAAWC,IAAIA,CAAA,EAA2B;IACtC,OAAO,IAAI,CAACC,KAAK;EACrB;;EAEA;AACJ;AACA;EACiBC,YAAYA,CAAA,EAAkB;IAAA,IAAAC,KAAA;IAAA,OAAAC,iBAAA;MACvC,IAAID,KAAI,CAACF,KAAK,EAAE;QACZ;MACJ;MAEA,IAAIE,KAAI,CAACN,SAAS,KAAKzB,YAAY,CAAC0B,WAAW,IAAIK,KAAI,CAACT,MAAM,EAAE;QAC5DS,KAAI,CAACF,KAAK,SAASE,KAAI,CAACb,OAAO,CAACY,YAAY,CAACC,KAAI,CAACN,SAAS,EAAEM,KAAI,CAACT,MAAM,CAACW,SAAS,CAAC,CAAE,CAAC;MAC1F,CAAC,MAAM,IAAIF,KAAI,CAACN,SAAS,KAAKzB,YAAY,CAAC2B,KAAK,EAAE;QAC9CI,KAAI,CAACF,KAAK,SAASE,KAAI,CAACb,OAAO,CAACY,YAAY,CAACC,KAAI,CAACN,SAAS,CAAC;MAChE;IAAC;EACL;;EAEA;AACJ;AACA;EACI,IAAWS,gBAAgBA,CAAA,EAAY;IACnC,OAAO,IAAI,CAACT,SAAS,KAAKzB,YAAY,CAAC0B,WAAW;EACtD;;EAEA;AACJ;AACA;EACI,IAAWS,WAAWA,CAAA,EAAY;IAC9B,OAAO,CAAC,IAAI,CAACD,gBAAgB;EACjC;;EAEA;AACJ;AACA;AACA;AACA;AACA;EACiBE,kBAAkBA,CAAA,EAAqC;IAAA,IAAAC,MAAA;IAAA,OAAAL,iBAAA;MAChE5B,MAAM,CAACkC,IAAI,mCAAAC,MAAA,CAAmCF,MAAI,CAACF,WAAW,mBAAAI,MAAA,CAAgBF,MAAI,CAAChB,WAAW,MAAG,CAAC;MAClG,MAAMgB,MAAI,CAACnB,OAAO,CAACsB,OAAO,CAAC,CAAC;MAE5B,IAAIH,MAAI,CAAChB,WAAW,EAAE;QAClB;;QAEA,IAAIgB,MAAI,CAACF,WAAW,EAAE;UAClB;QAAA,CACH,MAAM;UAAA,IAAAM,iBAAA;UACH;UACA,IAAIC,gBAA8C;UAClD,IAAI;YACAA,gBAAgB,SAASL,MAAI,CAACf,MAAM,CAAEqB,eAAe,CAAC,CAAC;UAC3D,CAAC,CAAC,OAAOC,CAAC,EAAE;YACRxC,MAAM,CAACyC,KAAK,CAAC,kCAAkC,EAAED,CAAC,CAAC;UACvD;UAEA,KAAAH,iBAAA,GAAIC,gBAAgB,cAAAD,iBAAA,eAAhBA,iBAAA,CAAkBK,qBAAqB,CAACC,QAAQ,CAACvC,cAAc,CAACwC,mBAAmB,CAAC,EAAE;YACtF,MAAMX,MAAI,CAACY,IAAI,CAAmB;cAC9BC,IAAI,EAAEvC,WAAW,CAACwC,SAAS;cAC3BC,SAAS,EAAE,CAAC,4BAA4B,CAAC;cACzCC,UAAU,EAAEhB,MAAI,CAACf,MAAM,CAAEW,SAAS,CAAC;YACvC,CAAC,CAAC;UACN,CAAC,MAAM;YACH,MAAMI,MAAI,CAACY,IAAI,CAAiB;cAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;cACzBC,MAAM,EAAErD,oBAAoB,CAACsD;YACjC,CAAC,CAAC;YACF,MAAM,IAAIrD,eAAe,CACrB,+BAA+B,EAC/BD,oBAAoB,CAACsD,mBACzB,CAAC;UACL;QACJ;MACJ,CAAC,MAAM,IAAInB,MAAI,CAACF,WAAW,EAAE;QACzB;QACA/B,MAAM,CAACkC,IAAI,CAAC,+BAA+B,CAAC;QAC5C,IAAMzB,OAAO,SAASwB,MAAI,CAACoB,OAAO,CAAmB,CAAC;QAEtD,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACwC,SAAS,EAAE;UACzC,MAAMd,MAAI,CAACY,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACwD,yBACzB,CAAC;QACL;QAEA,OAAO;UAAEC,UAAU,EAAE9C,OAAO,CAACwC;QAAW,CAAC;MAC7C,CAAC,MAAM;QACH;MAAA;MAEJ,OAAO,CAAC,CAAC;IAAC;EACd;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;EACiBO,wBAAwBA,CAACC,KAIrC,EAGE;IAAA,IAAAC,MAAA;IAAA,OAAA9B,iBAAA;MACC,IAAI8B,MAAI,CAAC3B,WAAW,EAAE;QAAA,IAAA4B,qBAAA;QAClB,IAAI,CAACF,KAAK,EAAE;UACR,MAAM,IAAIG,KAAK,CAAC,uCAAuC,CAAC;QAC5D;QAEA,IAAM;UAAEC,QAAQ;UAAEC,QAAQ;UAAEC;QAAS,CAAC,GAAGN,KAAK;QAE9C,IAAMO,KAAK,GAAG7D,aAAa,CAAC4D,QAAQ,CAAC;;QAErC;QACA,IAAME,WAAW,SAAS5D,wBAAwB,CAAC;UAC/CyD,QAAQ;UACRE,KAAK;UACLH;QACJ,CAAC,CAAC;QAEFH,MAAI,CAACG,QAAQ,GAAGA,QAAQ;QACxBH,MAAI,CAACQ,eAAe,GAAGD,WAAW;QAElC,IAAMvD,QAAiD,GAAG;UACtDoC,IAAI,EAAEvC,WAAW,CAAC4D,QAAQ;UAC1BzD,QAAQ,EAAE,4BAA4B;UACtC0D,SAAS,EAAEL,QAAQ;UACnBM,0BAA0B,EAAE;YACxBC,gBAAgB,EAAEL,WAAW,CAACK,gBAAgB;YAC9CC,yBAAyB,EAAEN,WAAW,CAACM;UAC3C;QACJ,CAAC;QAED,MAAMb,MAAI,CAACb,IAAI,CAACnC,QAAQ,CAAC;QAEzB,OAAO;UACH8D,eAAe,GAAAb,qBAAA,GAAEM,WAAW,CAACM,yBAAyB,cAAAZ,qBAAA,cAAAA,qBAAA,GAAIM,WAAW,CAACK,gBAAgB;UACtFG,QAAQ,EAAER,WAAW,CAACS;QAC1B,CAAC;MACL,CAAC,MAAM;QACH;QACA;QACA;QACA1E,MAAM,CAACkC,IAAI,CAAC,8BAA8B,CAAC;QAC3C,IAAMzB,OAAO,SAASiD,MAAI,CAACL,OAAO,CAA4D,CAAC;QAE/F,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC4D,QAAQ,EAAE;UACxC,MAAMT,MAAI,CAACb,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACwD,yBACzB,CAAC;QACL;QAEA,IAAI9C,yCAAyC,CAACC,OAAO,CAAC,EAAE;UACpD,IAAM;YAAE4D,0BAA0B,EAAEM,GAAG;YAAEP,SAAS,EAAEQ;UAAqB,CAAC,GAAGnE,OAAO;UACpF,IAAM;YAAE6D,gBAAgB,EAAEE,eAAe;YAAED,yBAAyB,EAAEM;UAAwB,CAAC,GAAGF,GAAG;UAErG,IAAIG,mBAAmB,GAAG,IAAI;UAC9B,IAAI;YAAA,IAAAC,aAAA;YACA,OAAAA,aAAA,GAAMrB,MAAI,CAACxC,MAAM,cAAA6D,aAAA,uBAAXA,aAAA,CAAaC,SAAS,CAACJ,oBAAoB,CAAC;UACtD,CAAC,CAAC,OAAOK,GAA0B,EAAE;YACjC,IAAIA,GAAG,YAAYhF,WAAW,IAAIgF,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;cACtDJ,mBAAmB,GAAG,KAAK;YAC/B;UACJ;UAEA,IAAIA,mBAAmB,EAAE;YACrB,MAAMpB,MAAI,CAACb,IAAI,CAAiB;cAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;cACzBC,MAAM,EAAErD,oBAAoB,CAACqF;YACjC,CAAC,CAAC;YACF,MAAM,IAAIpF,eAAe,CACrB,oCAAoC,EACpCD,oBAAoB,CAACqF,mBACzB,CAAC;UACL;UAEAzB,MAAI,CAACkB,oBAAoB,GAAGA,oBAAoB;UAEhD,OAAO;YAAEJ,eAAe,EAAEK,uBAAuB,aAAvBA,uBAAuB,cAAvBA,uBAAuB,GAAIL;UAAgB,CAAC;QAC1E;QAEA,MAAMd,MAAI,CAACb,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC,MAAM,EAAErD,oBAAoB,CAACsD;QACjC,CAAC,CAAC;QACF,MAAM,IAAIrD,eAAe,CACrB,gDAAgD,EAChDD,oBAAoB,CAACsD,mBACzB,CAAC;MACL;IAAC;EACL;;EAEA;AACJ;AACA;AACA;AACA;EACiBgC,wBAAwBA,CAAAC,IAAA,EAIc;IAAA,IAAAC,MAAA;IAAA,OAAA1D,iBAAA;MAAA,IAJb;QAClCkC;MAGJ,CAAC,GAAAuB,IAAA;MACG,IAAI,CAACC,MAAI,CAACvD,WAAW,IAAI,CAACuD,MAAI,CAACpB,eAAe,IAAI,CAACoB,MAAI,CAACzB,QAAQ,EAAE;QAC9D,MAAM,IAAID,KAAK,CAAC,uCAAuC,CAAC;MAC5D;MAEA5D,MAAM,CAACkC,IAAI,CAAC,uCAAuC,CAAC;MACpD;MACA,IAAMzB,OAAO,SAAS6E,MAAI,CAACjC,OAAO,CAAmC,CAAC;MAEtE,IAAI,CAAC5C,OAAO,EAAE;QACV,MAAM,IAAIV,eAAe,CACrB,kCAAkC,EAClCD,oBAAoB,CAACwD,yBACzB,CAAC;MACL;MACA,IAAI7C,OAAO,CAACqC,IAAI,KAAKvC,WAAW,CAAC2C,OAAO,EAAE;QACtC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAGU,OAAO,CAAoB0C,MAAM,CAAC;MAC3E;MACA,IAAI1C,OAAO,CAACqC,IAAI,KAAKvC,WAAW,CAACgF,gBAAgB,EAAE;QAC/C,MAAM,IAAIxF,eAAe,CAAC,6BAA6B,EAAED,oBAAoB,CAACwD,yBAAyB,CAAC;MAC5G;;MAEA;MACA,IAAMkC,GAAG,SAASlF,0BAA0B,CAAC;QACzCmF,OAAO,EAAEH,MAAI,CAACpB,eAAe;QAC7BL,QAAQ,EAAEyB,MAAI,CAACzB,QAAQ;QACvBC;MACJ,CAAC,CAAC;MAEF,IAAI,CAAC0B,GAAG,EAAE;QACN,MAAM,IAAIzF,eAAe,CACrB,gDAAgD,EAChDF,6BAA6B,CAAC6F,OAClC,CAAC;MACL;MAEA,IAAI,OAAO,IAAIF,GAAG,EAAE;QAChB,IAAIrC,MAA4B,GAAGrD,oBAAoB,CAACwD,yBAAyB;QACjF,IAAIkC,GAAG,CAAC/C,KAAK,KAAK,eAAe,EAAE;UAC/BU,MAAM,GAAGrD,oBAAoB,CAAC6F,oBAAoB;QACtD,CAAC,MAAM,IAAIH,GAAG,CAAC/C,KAAK,KAAK,eAAe,EAAE;UACtCU,MAAM,GAAGrD,oBAAoB,CAAC8F,aAAa;QAC/C;QACA,IAAMnF,QAAuB,GAAG;UAC5BqC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC;QACJ,CAAC;QACD,MAAMmC,MAAI,CAACzC,IAAI,CAACpC,QAAO,CAAC;QACxB,OAAOoF,SAAS;MACpB;MAEA,OAAOL,GAAG;IAAC;EACf;;EAEA;AACJ;AACA;AACA;EACiBM,YAAYA,CAAA,EAAwD;IAAA,IAAAC,MAAA;IAAA,OAAAnE,iBAAA;MAC7E,IAAImE,MAAI,CAAChE,WAAW,EAAE;QAClB,MAAMgE,MAAI,CAAClD,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAACyF;QACtB,CAAC,CAAC;QACF;QACAhG,MAAM,CAACkC,IAAI,CAAC,6BAA6B,CAAC;QAC1C,IAAMzB,OAAO,SAASsF,MAAI,CAAC1C,OAAO,CAAiB,CAAC;QACpD,IAAI,CAAA5C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,OAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,OAAO,aAAPA,OAAO,uBAAPA,OAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC0F,OAAO,EAAE;UACvC,MAAMF,MAAI,CAAClD,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CACrB,6BAA6B,EAC7BD,oBAAoB,CAACwD,yBACzB,CAAC;QACL;QACA,OAAO;UAAE4C,OAAO,EAAEzF;QAAQ,CAAC;QAC3B;MACJ,CAAC,MAAM;QACH,IAAI,CAACsF,MAAI,CAACnB,oBAAoB,EAAE;UAC5B,MAAM,IAAIhB,KAAK,CAAC,2BAA2B,CAAC;QAChD;QACA,MAAMmC,MAAI,CAAClD,IAAI,CAAkB;UAC7BC,IAAI,EAAEvC,WAAW,CAACgF;QACtB,CAAC,CAAC;QAEFvF,MAAM,CAACkC,IAAI,CAAC,6BAA6B,CAAC;QAC1C,IAAMzB,SAAO,SAASsF,MAAI,CAAC1C,OAAO,CAAmC,CAAC;QAEtE,IAAI,CAAA5C,SAAO,aAAPA,SAAO,uBAAPA,SAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC2C,OAAO,EAAE;UACvC,MAAM,IAAInD,eAAe,CAAC,QAAQ,EAAEU,SAAO,CAAC0C,MAAM,CAAC;QACvD;QAEA,IAAI,CAAA1C,SAAO,aAAPA,SAAO,uBAAPA,SAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAAC4F,QAAQ,EAAE;UACxC,MAAM,IAAIpG,eAAe,CAAC,eAAe,EAAEF,6BAA6B,CAACuG,YAAY,CAAC;QAC1F;QAEA,IAAI,CAAA3F,SAAO,aAAPA,SAAO,uBAAPA,SAAO,CAAEqC,IAAI,MAAKvC,WAAW,CAACyF,OAAO,EAAE;UACvC,MAAMD,MAAI,CAAClD,IAAI,CAAiB;YAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;YACzBC,MAAM,EAAErD,oBAAoB,CAACwD;UACjC,CAAC,CAAC;UACF,MAAM,IAAIvD,eAAe,CAAC,oBAAoB,EAAED,oBAAoB,CAACwD,yBAAyB,CAAC;QACnG;QAEA,IAAM+C,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACpC,GAAG;UACC;UACA,IAAI;YAAA,IAAAC,aAAA;YACA,IAAMC,MAAM,UAAAD,aAAA,GAAST,MAAI,CAAC7E,MAAM,cAAAsF,aAAA,uBAAXA,aAAA,CAAaxB,SAAS,CAACe,MAAI,CAACnB,oBAAoB,CAAC;YAEtE,IAAI6B,MAAM,EAAE;cACR;cACA,IAAMC,aAAa,SAASX,MAAI,CAAC7E,MAAM,CAAEyF,SAAS,CAAC,CAAC,CAAEC,mBAAmB,CAAE,CAAC;cAC5E,IAAIb,MAAI,CAACjF,OAAO,CAAC+F,SAAS,EAAE;gBACxB,MAAM,IAAI9G,eAAe,CAAC,gBAAgB,EAAED,oBAAoB,CAAC8F,aAAa,CAAC;cACnF;cACA;cACA,MAAMG,MAAI,CAAClD,IAAI,CAAAiE,aAAA;gBACXhE,IAAI,EAAEvC,WAAW,CAAC0F;cAAO,GACtBS,aAAa,CACnB,CAAC;cACF,OAAO;gBAAER,OAAO,EAAEQ;cAAc,CAAC;cACjC;YACJ;UACJ,CAAC,CAAC,OAAOzB,GAA0B,EAAE;YACjC,IAAIA,GAAG,YAAYhF,WAAW,IAAIgF,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;cACtD;YAAA,CACH,MAAM;cACH,MAAMD,GAAG;YACb;UACJ;UACA,MAAM/E,KAAK,CAAC,IAAI,CAAC;QACrB,CAAC,QAAQoG,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGF,OAAO;QAE7B,MAAMN,MAAI,CAAClD,IAAI,CAAiB;UAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;UACzBC,MAAM,EAAErD,oBAAoB,CAACiH;QACjC,CAAC,CAAC;QACF,MAAM,IAAIhH,eAAe,CAAC,sBAAsB,EAAED,oBAAoB,CAACiH,cAAc,CAAC;MAC1F;IAAC;EACL;EAEc1D,OAAOA,CAAA,EAAsE;IAAA,IAAA2D,MAAA;IAAA,OAAApF,iBAAA;MACvF,aAAcoF,MAAI,CAAClG,OAAO,CAACmG,aAAa,CAAC,CAAC;IAAmB;EACjE;EAEcpE,IAAIA,CAA2BpC,OAAU,EAAiB;IAAA,IAAAyG,MAAA;IAAA,OAAAtF,iBAAA;MACpE,MAAMsF,MAAI,CAACpG,OAAO,CAACqG,UAAU,CAAC1G,OAAO,CAAC;IAAC;EAC3C;;EAEA;AACJ;AACA;EACiB2G,4BAA4BA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAAzF,iBAAA;MACvD,IAAI,CAACyF,MAAI,CAACvF,gBAAgB,EAAE;QACxB,MAAM,IAAI8B,KAAK,CAAC,2CAA2C,CAAC;MAChE;MACA,MAAMyD,MAAI,CAACxE,IAAI,CAAiB;QAC5BC,IAAI,EAAEvC,WAAW,CAAC2C,OAAO;QACzBC,MAAM,EAAErD,oBAAoB,CAAC8F;MACjC,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;EACiB0B,MAAMA,CAACnE,MAA4D,EAAiB;IAAA,IAAAoE,MAAA;IAAA,OAAA3F,iBAAA;MAAA,IAAA4F,gBAAA;MAC7F,CAAAA,gBAAA,GAAAD,MAAI,CAACpG,SAAS,cAAAqG,gBAAA,eAAdA,gBAAA,CAAAC,IAAA,CAAAF,MAAI,EAAapE,MAAM,CAAC;MACxB,MAAMoE,MAAI,CAACzG,OAAO,CAACwG,MAAM,CAACnE,MAAM,CAAC;IAAC;EACtC;;EAEA;AACJ;AACA;EACiBuE,KAAKA,CAAA,EAAkB;IAAA,IAAAC,MAAA;IAAA,OAAA/F,iBAAA;MAChC,MAAM+F,MAAI,CAAC7G,OAAO,CAAC4G,KAAK,CAAC,CAAC;IAAC;EAC/B;AACJ","ignoreList":[]}

package/lib/rendezvous/channels/MSC4108SecureChannel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MSC4108SecureChannel.d.ts","sourceRoot":"","sources":["../../../src/rendezvous/channels/MSC4108SecureChannel.ts"],"names":[],"mappings":"AAgBA,OAAO,EACH,KAAK,mBAAmB,EAIxB,YAAY,EACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,cAAc,EAEnB,KAAK,yBAAyB,EACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F;;;;;GAKG;AACH,qBAAa,oBAAoB;IAMzB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,cAAc,CAAC;IAChB,SAAS,CAAC,EAAE,yBAAyB;IAPhD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,SAAS,CAAS;gBAGd,iBAAiB,EAAE,wBAAwB,EAC3C,cAAc,CAAC,EAAE,mBAAmB,YAAA,EACrC,SAAS,CAAC,EAAE,yBAAyB,YAAA;IAKhD;;;;OAIG;IACU,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;IAC3D,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAelG;;OAEG;IACI,YAAY,IAAI,MAAM,GAAG,SAAS;IAWzC;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAsGvB,OAAO;YAQP,OAAO;IAQrB;;;OAGG;IACU,UAAU,CAAC,CAAC,SAAS,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5E;;OAEG;IACU,aAAa,CAAC,CAAC,SAAS,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IAgBvF;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAShG;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;CACJ"}
+{"version":3,"file":"MSC4108SecureChannel.d.ts","sourceRoot":"","sources":["../../../src/rendezvous/channels/MSC4108SecureChannel.ts"],"names":[],"mappings":"AAgBA,OAAO,EACH,KAAK,mBAAmB,EAIxB,YAAY,EACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACH,6BAA6B,EAC7B,oBAAoB,EACpB,KAAK,cAAc,EAEnB,KAAK,yBAAyB,EACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F;;;;;GAKG;AACH,qBAAa,oBAAoB;IAMzB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,cAAc,CAAC;IAChB,SAAS,CAAC,EAAE,yBAAyB;IAPhD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,SAAS,CAAS;gBAGd,iBAAiB,EAAE,wBAAwB,EAC3C,cAAc,CAAC,EAAE,mBAAmB,YAAA,EACrC,SAAS,CAAC,EAAE,yBAAyB,YAAA;IAKhD;;;;OAIG;IACU,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;IAC3D,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAelG;;OAEG;IACI,YAAY,IAAI,MAAM,GAAG,SAAS;IAWzC;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAyGvB,OAAO;YAQP,OAAO;IAQrB;;;OAGG;IACU,UAAU,CAAC,CAAC,SAAS,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5E;;OAEG;IACU,aAAa,CAAC,CAAC,SAAS,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IAgBvF;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC;;;OAGG;IACU,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAchG;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;CACJ"}

package/lib/rendezvous/channels/MSC4108SecureChannel.js

@@ -132,7 +132,7 @@ export class MSC4108SecureChannel {
         logger.info("Waiting for LoginInitiateMessage");
         var loginInitiateMessage = yield _this2.rendezvousSession.receive();
         if (!loginInitiateMessage) {
-          throw new Error("No response from other device");
+          throw new RendezvousError("No response from other device", MSC4108FailureReason.UnexpectedMessageReceived);
         }
         var {
           channel,
@@ -231,7 +231,9 @@ export class MSC4108SecureChannel {
         yield _this8.rendezvousSession.cancel(reason);
         (_this8$onFailure = _this8.onFailure) === null || _this8$onFailure === void 0 || _this8$onFailure.call(_this8, reason);
       } finally {
-        yield _this8.close();
+        if (reason !== ClientRendezvousFailureReason.UserDeclined && reason !== MSC4108FailureReason.UserCancelled) {
+          yield _this8.close();
+        }
       }
     })();
   }