ns-auth-sdk 1.14.1 → 1.14.2

package/dist/browser-index.cjs

@@ -6,11 +6,11 @@ const require_prf_handler = require('./prf-handler-BNd7gmXJ.cjs');
 const require_group_coordination = require('./group-coordination-DL39hJ3R.cjs');
 const require_zkm_service = require('./zkm.service-DX06sSfB.cjs');
 let applesauce_core_helpers = require("applesauce-core/helpers");
-let _noble_curves_secp256k1 = require("@noble/curves/secp256k1");
-let _noble_hashes_sha256 = require("@noble/hashes/sha256");
-let _noble_hashes_pbkdf2 = require("@noble/hashes/pbkdf2");
-let _noble_ciphers_aes = require("@noble/ciphers/aes");
-let _noble_hashes_utils = require("@noble/hashes/utils");
+let _noble_curves_secp256k1_js = require("@noble/curves/secp256k1.js");
+let _noble_hashes_sha2_js = require("@noble/hashes/sha2.js");
+let _noble_hashes_pbkdf2_js = require("@noble/hashes/pbkdf2.js");
+let _noble_ciphers_aes_js = require("@noble/ciphers/aes.js");
+let _noble_hashes_utils_js = require("@noble/hashes/utils.js");
 
 //#region src/utils/utils.ts
 /**
@@ -183,7 +183,7 @@ var KeyCache = class {
 * This implementation uses @noble libraries for cryptographic operations,
 * ensuring functionality even when Web Crypto API is unavailable.
 */
-const aesGcm = _noble_ciphers_aes.gcm;
+const aesGcm = _noble_ciphers_aes_js.gcm;
 function toBase64(bytes) {
 	let binary = "";
 	for (let i = 0; i < bytes.byteLength; i++) binary += String.fromCharCode(bytes[i]);
@@ -214,14 +214,14 @@ async function checkPRFSupport() {
 	}
 }
 async function generatePasswordProtectedKey(password) {
-	const privateKey = _noble_curves_secp256k1.secp256k1.utils.randomPrivateKey();
-	const publicKeySpkiBase64 = toBase64(_noble_curves_secp256k1.secp256k1.getPublicKey(privateKey));
-	const salt = (0, _noble_hashes_utils.randomBytes)(16);
-	const derivedKey = (0, _noble_hashes_pbkdf2.pbkdf2)(_noble_hashes_sha256.sha256, new TextEncoder().encode(password), salt, {
+	const privateKey = _noble_curves_secp256k1_js.secp256k1.utils.randomPrivateKey();
+	const publicKeySpkiBase64 = toBase64(_noble_curves_secp256k1_js.secp256k1.getPublicKey(privateKey));
+	const salt = (0, _noble_hashes_utils_js.randomBytes)(16);
+	const derivedKey = (0, _noble_hashes_pbkdf2_js.pbkdf2)(_noble_hashes_sha2_js.sha256, new TextEncoder().encode(password), salt, {
 		c: 1e5,
 		dkLen: 32
 	});
-	const iv = (0, _noble_hashes_utils.randomBytes)(12);
+	const iv = (0, _noble_hashes_utils_js.randomBytes)(12);
 	return {
 		publicKeySpkiBase64,
 		wrappedPrivateKeyBase64: toBase64(aesGcm(derivedKey, iv).encrypt(privateKey)),
@@ -231,7 +231,7 @@ async function generatePasswordProtectedKey(password) {
 }
 async function unwrapPasswordProtectedPrivateKey(bundle, password) {
 	const salt = fromBase64(bundle.saltBase64);
-	const derivedKey = (0, _noble_hashes_pbkdf2.pbkdf2)(_noble_hashes_sha256.sha256, new TextEncoder().encode(password), salt, {
+	const derivedKey = (0, _noble_hashes_pbkdf2_js.pbkdf2)(_noble_hashes_sha2_js.sha256, new TextEncoder().encode(password), salt, {
 		c: 1e5,
 		dkLen: 32
 	});
@@ -244,7 +244,7 @@ function importPublicKeyFromBundle(bundle) {
 }
 const DEFAULT_SALT = "nostr-key-derivation";
 function deriveNostrPrivateKey(password, salt = DEFAULT_SALT) {
-	return (0, _noble_hashes_pbkdf2.pbkdf2)(_noble_hashes_sha256.sha256, new TextEncoder().encode(password), new TextEncoder().encode(salt), {
+	return (0, _noble_hashes_pbkdf2_js.pbkdf2)(_noble_hashes_sha2_js.sha256, new TextEncoder().encode(password), new TextEncoder().encode(salt), {
 		c: 1e5,
 		dkLen: 32
 	});
@@ -493,7 +493,7 @@ async function aesGcmDecrypt(key, iv, ct, tag) {
 */
 function deriveSaltFromUsername(username) {
 	if (!username) return "";
-	const hashBuffer = (0, _noble_hashes_sha256.sha256)(new TextEncoder().encode(username.toLowerCase().trim()));
+	const hashBuffer = (0, _noble_hashes_sha2_js.sha256)(new TextEncoder().encode(username.toLowerCase().trim()));
 	return bytesToHex(new Uint8Array(hashBuffer));
 }
 function parseRecoveryTag(tags) {
@@ -526,10 +526,10 @@ async function verifyRecoverySignature(kind0) {
 		if (!parseRecoveryTag(kind0.tags || [])) return false;
 		const signature = getRecoverySignature(kind0);
 		if (!signature || !kind0.pubkey) return false;
-		const messageHash = (0, _noble_hashes_sha256.sha256)(new TextEncoder().encode(kind0.pubkey));
+		const messageHash = (0, _noble_hashes_sha2_js.sha256)(new TextEncoder().encode(kind0.pubkey));
 		const signatureBytes = hexToBytes(signature);
 		const pubkeyBytes = hexToBytes(kind0.pubkey);
-		return _noble_curves_secp256k1.secp256k1.verify(signatureBytes, messageHash, pubkeyBytes);
+		return _noble_curves_secp256k1_js.secp256k1.verify(signatureBytes, messageHash, pubkeyBytes);
 	} catch (e) {
 		return false;
 	}
@@ -10876,7 +10876,7 @@ async function verifyEUDITag(kind0Event) {
 		const signatureBytes = Uint8Array.from(atob(claims.signature), (c) => c.charCodeAt(0));
 		const messageBytes = new TextEncoder().encode(message);
 		const pubkeyBytes = hexToBytes$3(pubkey);
-		const { secp256k1: secp256k1$3 } = await import("@noble/curves/secp256k1");
+		const { secp256k1: secp256k1$3 } = await import("@noble/curves/secp256k1.js");
 		if (!secp256k1$3.verify(signatureBytes, messageBytes, pubkeyBytes)) return {
 			type: "eudi",
 			valid: false,
@@ -11237,7 +11237,7 @@ function parseSiopAuthorizationRequest(url) {
 async function generateSiopIdToken(config) {
 	const { secretKey, nonce, clientId, redirectUri, idTokenType, claims, clientMetadata } = config;
 	if (!nonce) throw new Error("nonce is required for SIOP v2 ID Token");
-	const did = pubkeyToDid(bytesToHex$1(_noble_curves_secp256k1.secp256k1.getPublicKey(secretKey).slice(1)));
+	const did = pubkeyToDid(bytesToHex$1(_noble_curves_secp256k1_js.secp256k1.getPublicKey(secretKey).slice(1)));
 	const aud = clientId || redirectUri || getDefaultIssuer();
 	const now = Math.floor(Date.now() / 1e3);
 	const payload = {
@@ -11257,8 +11257,8 @@ async function generateSiopIdToken(config) {
 		kid: `${did}#key1`
 	};
 	const signingInput = `${base64urlEncode$1(new TextEncoder().encode(JSON.stringify(header)))}.${base64urlEncode$1(new TextEncoder().encode(JSON.stringify(payload)))}`;
-	const messageHash = (0, _noble_hashes_sha256.sha256)(new TextEncoder().encode(signingInput));
-	return `${signingInput}.${base64urlEncode$1(_noble_curves_secp256k1.secp256k1.sign(messageHash, secretKey).toCompactRawBytes())}`;
+	const messageHash = (0, _noble_hashes_sha2_js.sha256)(new TextEncoder().encode(signingInput));
+	return `${signingInput}.${base64urlEncode$1(_noble_curves_secp256k1_js.secp256k1.sign(messageHash, secretKey).toCompactRawBytes())}`;
 }
 /**
 * Verify a SIOP v2 Self-Issued ID Token
@@ -11293,14 +11293,14 @@ async function verifySiopIdToken(token) {
 		};
 		const pubkeyXOnly = hexToBytes$1(sub.slice(10));
 		const signingInput = `${headerEncoded}.${payloadEncoded}`;
-		const messageHash = (0, _noble_hashes_sha256.sha256)(new TextEncoder().encode(signingInput));
+		const messageHash = (0, _noble_hashes_sha2_js.sha256)(new TextEncoder().encode(signingInput));
 		const signatureBytes = base64urlDecode$1(signatureEncoded);
 		let isValid = false;
 		for (const prefix of [2, 3]) {
 			const pubkeyBytes = new Uint8Array(33);
 			pubkeyBytes[0] = prefix;
 			pubkeyBytes.set(pubkeyXOnly, 1);
-			if (_noble_curves_secp256k1.secp256k1.verify(signatureBytes, messageHash, pubkeyBytes)) {
+			if (_noble_curves_secp256k1_js.secp256k1.verify(signatureBytes, messageHash, pubkeyBytes)) {
 				isValid = true;
 				break;
 			}
@@ -13222,8 +13222,8 @@ var EUDIService = class {
 		const payloadObj = JSON.parse(new TextDecoder().decode(payload));
 		const holderDID = payloadObj.iss || payloadObj.sub || "";
 		if (!holderDID) throw new Error("No holderDID found in VP token");
-		const sha256$1 = (await import("@noble/hashes/sha256")).sha256;
-		const bytesToHex$4 = (await import("@noble/hashes/utils")).bytesToHex;
+		const sha256$1 = (await import("@noble/hashes/sha2.js")).sha256;
+		const bytesToHex$4 = (await import("@noble/hashes/utils.js")).bytesToHex;
 		const uniqueIdentifier = bytesToHex$4(sha256$1(new TextEncoder().encode(holderDID))).slice(0, 16);
 		let nationality = "";
 		let isOver18 = false;