partner_react_native_sdk 0.1.7 → 1.0.0

package/PartnerReactNativeSdk.podspec

@@ -14,7 +14,7 @@ Pod::Spec.new do |s|
   s.source       = { :git => "https://github.com/spense-fintech/partner-react-native-library.git.git", :tag => "#{s.version}" }
 
   s.source_files = "ios/**/*.{h,m,mm,cpp}"
-  s.private_header_files = "ios/**/*.h"
+  # s.private_header_files = "ios/**/*.h"
   s.exclude_files = "ios/generated/**" 
 
 # Use install_modules_dependencies helper to install the dependencies if React Native version >=0.71.0.
@@ -23,5 +23,9 @@ if respond_to?(:install_modules_dependencies, true)
   install_modules_dependencies(s)
 else
   s.dependency "React-Core"
+  s.dependency "React-Codegen"
+  s.dependency "RCTRequired"
+  s.dependency "RCTTypeSafety"
+  s.dependency "ReactCommon/turbomodule/core"
 end
 end

package/lib/module/helpers/network/APICall.js

@@ -3,16 +3,7 @@
 // APICall.ts (updated)
 import NetworkManager from "./network_manager.js";
 import { HeaderManager } from "../utils/headerManager.js";
-
-// import {
-//   generateAESKey,
-//   exportAESKeyBase64,
-//   encryptAESKeyWithRSA,
-//   encryptAES,
-//   decryptAES,
-//   getWebsiteKey,
-// } from './Encryption';
-
+import { generateAESKey, exportAESKeyBase64, encryptAESKeyWithRSA, encryptAES, decryptAES, getWebsiteKey } from "./Encryption.js";
 export class APICall {
   networkManager = new NetworkManager();
   headerManager = new HeaderManager();
@@ -20,7 +11,7 @@ export class APICall {
     const {
       body,
       headers,
-      encrypted = false
+      encrypted = true
     } = options || {};
     try {
       const response = encrypted ? await this._callAPIEncrypt(method, apiUrl, body, headers) : await this._callAPIRaw(method, apiUrl, body, headers);
@@ -42,92 +33,80 @@ export class APICall {
       headers: mergedHeaders
     });
   }
-
-  // ----------------- ENCRYPTED CALL -----------------
+  // ----------------- ENCRYPTED CALL (quick-crypto) -----------------
   async _callAPIEncrypt(method, apiUrl, body, headers) {
-    // 1) Generate ephemeral AES-256 key
-    //   const aesKey = await generateAESKey();
-    //   // 2) Export AES key bytes -> Base64 (for RSA input)
-    //   const aesKeyBase64 = await exportAESKeyBase64(aesKey);
-    //   // 3) Fetch server public key (cached) and RSA-wrap the AES key
-    //   const websiteKey = await getWebsiteKey(); // { kid, public, expiry }
-    //   const rsaEncryptedKey = await encryptAESKeyWithRSA(
-    //     aesKeyBase64,
-    //     websiteKey.public
-    //   );
-    //   // 4) Encrypt payload with AES-GCM -> Base64(IV||CT||TAG)
-    //   const encryptedPayload = await encryptAES(
-    //     JSON.stringify(body ?? {}),
-    //     aesKey
-    //   );
-    //   // 5) Merge headers (stringify all values)
-    //   const baseHeaders = await this.headerManager.generateHeaders();
-    //   const mergedHeaders: Record<string, string> = {
-    //     ...Object.fromEntries(
-    //       Object.entries(baseHeaders).map(([k, v]) => [k, String(v)])
-    //     ),
-    //     ...(headers
-    //       ? Object.fromEntries(
-    //           Object.entries(headers).map(([k, v]) => [k, String(v)])
-    //         )
-    //       : {}),
-    //   };
-    //   // 6) Add encryption headers
-    //   const encryptedHeaders: Record<string, string> = {
-    //     'Content-Type': 'application/json;charset=utf-8',
-    //     'Accept': 'application/json',
-    //     ...mergedHeaders,
-    //     'kid': websiteKey.kid ?? '',
-    //     'key': rsaEncryptedKey ?? '',
-    //   };
-    //   // 7) Make the encrypted request with { encrypted: "<blob>" }
-    //   const response = await this.networkManager.request({
-    //     url: apiUrl,
-    //     method,
-    //     body: { encrypted: encryptedPayload },
-    //     headers: encryptedHeaders,
-    //   });
-    //   // 8) Decrypt response if it has { encrypted }
-    //   const decrypted = await APICall.handleDecryptedResponse(response, aesKey);
-    //   if (decrypted != null) {
-    //     if (response) {
-    //       response.data = decrypted;
-    //     }
-    //   }
-    //   return response;
-    // }
-    // // ----------------- RESPONSE DECRYPT -----------------
-    // static async handleDecryptedResponse(
-    //   response: any,
-    //   aesKey: CryptoKey
-    // ): Promise<Record<string, any> | null> {
-    //   try {
-    //     if (!response) return null;
-    //     const raw = response.data;
-    //     // Accept string or object
-    //     const data: Record<string, any> =
-    //       typeof raw === 'string' ? JSON.parse(raw) : (raw as any);
-    //     if (!data || typeof data !== 'object' || !('encrypted' in data)) {
-    //       // no encrypted field, return null to signal "not decrypted"
-    //       return null;
-    //     }
-    //     const encryptedPayload = String(data.encrypted ?? '');
-    //     if (!encryptedPayload) return null;
-    //     const decryptedJson = await decryptAES(encryptedPayload, aesKey);
-    //     try {
-    //       const obj = JSON.parse(decryptedJson);
-    //       if (obj && typeof obj === 'object') {
-    //         return obj as Record<string, any>;
-    //       }
-    //       return null;
-    //     } catch {
-    //       // decrypted payload wasn't valid JSON
-    //       return null;
-    //     }
-    //   } catch {
-    //     return null;
-    //   }
-    // }
+    // 1) Generate ephemeral AES-256 key (Uint8Array)
+    const aesKey = generateAESKey(); // Uint8Array (32 bytes)
+
+    // 2) Export AES key bytes -> Base64 (for RSA input)
+    const aesKeyBase64 = exportAESKeyBase64(aesKey); // string
+
+    // 3) Fetch server public key (cached) and RSA-wrap the AES key
+    const websiteKey = await getWebsiteKey(); // { kid, public, expiry }
+    const rsaEncryptedKey = encryptAESKeyWithRSA(aesKeyBase64, websiteKey.public); // string
+
+    // 4) Encrypt payload with AES-GCM -> Base64(IV||CT||TAG)
+    const encryptedPayload = encryptAES(JSON.stringify(body ?? {}), aesKey); // string
+
+    // 5) Merge headers (stringify all values)
+    const baseHeaders = await this.headerManager.generateHeaders();
+    const mergedHeaders = {
+      ...Object.fromEntries(Object.entries(baseHeaders).map(([k, v]) => [k, String(v)])),
+      ...(headers ? Object.fromEntries(Object.entries(headers).map(([k, v]) => [k, String(v)])) : {})
+    };
+
+    // 6) Add encryption headers
+    const encryptedHeaders = {
+      'Content-Type': 'application/json;charset=utf-8',
+      'Accept': 'application/json',
+      ...mergedHeaders,
+      'encryption_kid': websiteKey.kid ?? '',
+      'key': rsaEncryptedKey ?? ''
+    };
+
+    // 7) Make the encrypted request with { encrypted: "<blob>" }
+    const response = await this.networkManager.request({
+      url: apiUrl,
+      method,
+      body: {
+        encrypted: encryptedPayload
+      },
+      headers: encryptedHeaders
+    });
+
+    // 8) Decrypt response if it has { encrypted }
+    const decrypted = APICall.handleDecryptedResponse(response, aesKey);
+    if (decrypted != null) {
+      response.data = decrypted;
+    }
+    return response;
+  }
+
+  // ----------------- RESPONSE DECRYPT (quick-crypto) -----------------
+  static handleDecryptedResponse(response, aesKey) {
+    try {
+      if (!response) return null;
+      const raw = response.data;
+      // Accept string or object
+      const data = typeof raw === 'string' ? JSON.parse(raw) : raw;
+      if (!data || typeof data !== 'object' || !('encrypted' in data)) {
+        // no encrypted field, return null to signal "not decrypted"
+        return null;
+      }
+      const encryptedPayload = String(data.encrypted ?? '');
+      if (!encryptedPayload) return null;
+      const decryptedJson = decryptAES(encryptedPayload, aesKey); // sync
+
+      try {
+        const obj = JSON.parse(decryptedJson);
+        return obj && typeof obj === 'object' ? obj : null;
+      } catch {
+        // decrypted payload wasn't valid JSON
+        return null;
+      }
+    } catch {
+      return null;
+    }
   }
 }
 //# sourceMappingURL=APICall.js.map

package/lib/module/helpers/network/APICall.js.map

@@ -1 +1 @@
-{"version":3,"names":["NetworkManager","HeaderManager","APICall","networkManager","headerManager","callAPI","method","apiUrl","options","body","headers","encrypted","response","_callAPIEncrypt","_callAPIRaw","error","console","log","mergedHeaders","generateHeaders","request","url"],"sourceRoot":"../../../../src","sources":["helpers/network/APICall.tsx"],"mappings":";;AAAA;AACA,OAAOA,cAAc,MAAM,sBAAmB;AAC9C,SAASC,aAAa,QAAQ,2BAAwB;;AAEtD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,OAAO,CAAC;EACXC,cAAc,GAAmB,IAAIH,cAAc,CAAC,CAAC;EACrDI,aAAa,GAAkB,IAAIH,aAAa,CAAC,CAAC;EAE1D,MAAMI,OAAOA,CACXC,MAAc,EACdC,MAAc,EACdC,OAIC,EACa;IACd,MAAM;MAAEC,IAAI;MAAEC,OAAO;MAAEC,SAAS,GAAG;IAAM,CAAC,GAAGH,OAAO,IAAI,CAAC,CAAC;IAC1D,IAAI;MACF,MAAMI,QAAQ,GAAGD,SAAS,GACtB,MAAM,IAAI,CAACE,eAAe,CAACP,MAAM,EAAEC,MAAM,EAAEE,IAAI,EAAEC,OAAO,CAAC,GACzD,MAAM,IAAI,CAACI,WAAW,CAACR,MAAM,EAAEC,MAAM,EAAEE,IAAI,EAAEC,OAAO,CAAC;MAEzD,OAAOE,QAAQ;IACjB,CAAC,CAAC,OAAOG,KAAK,EAAE;MACdC,OAAO,CAACC,GAAG,CAAC,mBAAmB,EAAEF,KAAK,CAAC;MACvC,MAAMA,KAAK;IACb;EACF;EAEA,MAAcD,WAAWA,CACvBR,MAAc,EACdC,MAAc,EACdE,IAA0B,EAC1BC,OAA6B,EACf;IACd,MAAMQ,aAAa,GAAG;MACpB,IAAI,MAAM,IAAI,CAACd,aAAa,CAACe,eAAe,CAAC,CAAC,CAAC;MAC/C,IAAIT,OAAO,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAACP,cAAc,CAACiB,OAAO,CAAC;MACjCC,GAAG,EAAEd,MAAM;MACXD,MAAM,EAAEA,MAAM;MACdG,IAAI,EAAEA,IAAI;MACVC,OAAO,EAAEQ;IACX,CAAC,CAAC;EACJ;;EAEA;EACA,MAAcL,eAAeA,CAC3BP,MAAc,EACdC,MAAc,EACdE,IAA0B,EAC1BC,OAA6B,EACf;IACd;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;EAAA;AAEJ","ignoreList":[]}
+{"version":3,"names":["NetworkManager","HeaderManager","generateAESKey","exportAESKeyBase64","encryptAESKeyWithRSA","encryptAES","decryptAES","getWebsiteKey","APICall","networkManager","headerManager","callAPI","method","apiUrl","options","body","headers","encrypted","response","_callAPIEncrypt","_callAPIRaw","error","console","log","mergedHeaders","generateHeaders","request","url","aesKey","aesKeyBase64","websiteKey","rsaEncryptedKey","public","encryptedPayload","JSON","stringify","baseHeaders","Object","fromEntries","entries","map","k","v","String","encryptedHeaders","kid","decrypted","handleDecryptedResponse","data","raw","parse","decryptedJson","obj"],"sourceRoot":"../../../../src","sources":["helpers/network/APICall.tsx"],"mappings":";;AAAA;AACA,OAAOA,cAAc,MAAM,sBAAmB;AAC9C,SAASC,aAAa,QAAQ,2BAAwB;AAEtD,SACEC,cAAc,EACdC,kBAAkB,EAClBC,oBAAoB,EACpBC,UAAU,EACVC,UAAU,EACVC,aAAa,QACR,iBAAc;AAErB,OAAO,MAAMC,OAAO,CAAC;EACXC,cAAc,GAAmB,IAAIT,cAAc,CAAC,CAAC;EACrDU,aAAa,GAAkB,IAAIT,aAAa,CAAC,CAAC;EAE1D,MAAMU,OAAOA,CACXC,MAAc,EACdC,MAAc,EACdC,OAIC,EACa;IACd,MAAM;MAAEC,IAAI;MAAEC,OAAO;MAAEC,SAAS,GAAG;IAAK,CAAC,GAAGH,OAAO,IAAI,CAAC,CAAC;IACzD,IAAI;MACF,MAAMI,QAAQ,GAAGD,SAAS,GACtB,MAAM,IAAI,CAACE,eAAe,CAACP,MAAM,EAAEC,MAAM,EAAEE,IAAI,EAAEC,OAAO,CAAC,GACzD,MAAM,IAAI,CAACI,WAAW,CAACR,MAAM,EAAEC,MAAM,EAAEE,IAAI,EAAEC,OAAO,CAAC;MAEzD,OAAOE,QAAQ;IACjB,CAAC,CAAC,OAAOG,KAAK,EAAE;MACdC,OAAO,CAACC,GAAG,CAAC,mBAAmB,EAAEF,KAAK,CAAC;MACvC,MAAMA,KAAK;IACb;EACF;EAEA,MAAcD,WAAWA,CACvBR,MAAc,EACdC,MAAc,EACdE,IAA0B,EAC1BC,OAA6B,EACf;IACd,MAAMQ,aAAa,GAAG;MACpB,IAAI,MAAM,IAAI,CAACd,aAAa,CAACe,eAAe,CAAC,CAAC,CAAC;MAC/C,IAAIT,OAAO,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAACP,cAAc,CAACiB,OAAO,CAAC;MACjCC,GAAG,EAAEd,MAAM;MACXD,MAAM,EAAEA,MAAM;MACdG,IAAI,EAAEA,IAAI;MACVC,OAAO,EAAEQ;IACX,CAAC,CAAC;EACJ;EACA;EACA,MAAcL,eAAeA,CAC3BP,MAAc,EACdC,MAAc,EACdE,IAA0B,EAC1BC,OAA6B,EACf;IACd;IACA,MAAMY,MAAM,GAAG1B,cAAc,CAAC,CAAC,CAAC,CAAC;;IAEjC;IACA,MAAM2B,YAAY,GAAG1B,kBAAkB,CAACyB,MAAM,CAAC,CAAC,CAAC;;IAEjD;IACA,MAAME,UAAU,GAAG,MAAMvB,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAMwB,eAAe,GAAG3B,oBAAoB,CAC1CyB,YAAY,EACZC,UAAU,CAACE,MACb,CAAC,CAAC,CAAC;;IAEH;IACA,MAAMC,gBAAgB,GAAG5B,UAAU,CAAC6B,IAAI,CAACC,SAAS,CAACpB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAEa,MAAM,CAAC,CAAC,CAAC;;IAEzE;IACA,MAAMQ,WAAW,GAAG,MAAM,IAAI,CAAC1B,aAAa,CAACe,eAAe,CAAC,CAAC;IAC9D,MAAMD,aAAqC,GAAG;MAC5C,GAAGa,MAAM,CAACC,WAAW,CACnBD,MAAM,CAACE,OAAO,CAACH,WAAW,CAAC,CAACI,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAACD,CAAC,EAAEE,MAAM,CAACD,CAAC,CAAC,CAAC,CAC5D,CAAC;MACD,IAAI1B,OAAO,GACPqB,MAAM,CAACC,WAAW,CAChBD,MAAM,CAACE,OAAO,CAACvB,OAAO,CAAC,CAACwB,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAACD,CAAC,EAAEE,MAAM,CAACD,CAAC,CAAC,CAAC,CACxD,CAAC,GACD,CAAC,CAAC;IACR,CAAC;;IAED;IACA,MAAME,gBAAwC,GAAG;MAC/C,cAAc,EAAE,gCAAgC;MAChD,QAAQ,EAAE,kBAAkB;MAC5B,GAAGpB,aAAa;MAChB,gBAAgB,EAAEM,UAAU,CAACe,GAAG,IAAI,EAAE;MACtC,KAAK,EAAEd,eAAe,IAAI;IAC5B,CAAC;;IAED;IACA,MAAMb,QAAQ,GAAG,MAAM,IAAI,CAACT,cAAc,CAACiB,OAAO,CAAC;MACjDC,GAAG,EAAEd,MAAM;MACXD,MAAM;MACNG,IAAI,EAAE;QAAEE,SAAS,EAAEgB;MAAiB,CAAC;MACrCjB,OAAO,EAAE4B;IACX,CAAC,CAAC;;IAEF;IACA,MAAME,SAAS,GAAGtC,OAAO,CAACuC,uBAAuB,CAAC7B,QAAQ,EAAEU,MAAM,CAAC;IACnE,IAAIkB,SAAS,IAAI,IAAI,EAAE;MACrB5B,QAAQ,CAAE8B,IAAI,GAAGF,SAAS;IAC5B;IACA,OAAO5B,QAAQ;EACjB;;EAEA;EACA,OAAO6B,uBAAuBA,CAC5B7B,QAAa,EACbU,MAAkB,EACU;IAC5B,IAAI;MACF,IAAI,CAACV,QAAQ,EAAE,OAAO,IAAI;MAE1B,MAAM+B,GAAG,GAAG/B,QAAQ,CAAC8B,IAAI;MACzB;MACA,MAAMA,IAAyB,GAC7B,OAAOC,GAAG,KAAK,QAAQ,GAAGf,IAAI,CAACgB,KAAK,CAACD,GAAG,CAAC,GAAIA,GAAW;MAE1D,IAAI,CAACD,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAI,EAAE,WAAW,IAAIA,IAAI,CAAC,EAAE;QAC/D;QACA,OAAO,IAAI;MACb;MAEA,MAAMf,gBAAgB,GAAGU,MAAM,CAACK,IAAI,CAAC/B,SAAS,IAAI,EAAE,CAAC;MACrD,IAAI,CAACgB,gBAAgB,EAAE,OAAO,IAAI;MAElC,MAAMkB,aAAa,GAAG7C,UAAU,CAAC2B,gBAAgB,EAAEL,MAAM,CAAC,CAAC,CAAC;;MAE5D,IAAI;QACF,MAAMwB,GAAG,GAAGlB,IAAI,CAACgB,KAAK,CAACC,aAAa,CAAC;QACrC,OAAOC,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,GAChCA,GAAG,GACJ,IAAI;MACV,CAAC,CAAC,MAAM;QACN;QACA,OAAO,IAAI;MACb;IACF,CAAC,CAAC,MAAM;MACN,OAAO,IAAI;IACb;EACF;AACF","ignoreList":[]}

package/lib/module/helpers/network/Encryption.js

@@ -1,241 +1,148 @@
-// // Encryption.tsx
-// // Tested with RN 0.73+.
-
-// import AsyncStorage from '@react-native-async-storage/async-storage';
-// import { v4 as uuidv4 } from 'uuid';
-// import * as base64js from 'base64-js';
-// import { ServiceNames } from '../ServiceNames';
-
-// type WebsiteKey = {
-//   kid: string;
-//   public: string; // PEM
-//   expiry: string; // ISO8601
-// };
-
-// const KEY_WEB = 'KEY_WEB';
-// const KEY_WEB_EXPIRY = 'KEY_WEB_EXPIRY';
-
-// const GCM_NONCE_LEN = 12; // 12-byte IV
-// const GCM_TAG_LEN = 16; // 16-byte auth tag
-// const AES_KEY_LEN = 256; // bits
-
-// // ---------- Base64 helpers ----------
-// const bytesToB64 = (bytes: Uint8Array): string => base64js.fromByteArray(bytes);
-
-// const b64ToBytes = (b64: string): Uint8Array => base64js.toByteArray(b64);
-
-// // ---------- UTF-8 helpers ----------
-// const utf8Encode = (s: string): Uint8Array => new TextEncoder().encode(s);
-
-// const utf8Decode = (bytes: Uint8Array): string =>
-//   new TextDecoder().decode(bytes);
-
-// // ---------- AES-256-GCM ----------
-
-// /** Generate a random AES-256-GCM CryptoKey (extractable for raw export). */
-// export async function generateAESKey(): Promise<CryptoKey> {
-//   return await crypto.subtle.generateKey(
-//     { name: 'AES-GCM', length: AES_KEY_LEN },
-//     true, // extractable to raw for Base64 export
-//     ['encrypt', 'decrypt']
-//   );
-// }
-
-// /** Export AES key bytes → Base64 (to match your RSA input). */
-// export async function exportAESKeyBase64(key: CryptoKey): Promise<string> {
-//   const raw = new Uint8Array(await crypto.subtle.exportKey('raw', key));
-//   return bytesToB64(raw);
-// }
-
-// /**
-//  * Encrypt plaintext with AES-GCM and return Base64( IV || ciphertext || tag )
-//  * Exactly matches your Flutter packing:
-//  * - IV: 12 bytes
-//  * - SubtleCrypto returns ciphertext||tag; we prepend IV and then Base64 the whole blob.
-//  */
-// export async function encryptAES(
-//   plaintext: string,
-//   key: CryptoKey
-// ): Promise<string> {
-//   const iv = crypto.getRandomValues(new Uint8Array(GCM_NONCE_LEN));
-//   const ptBytes = utf8Encode(plaintext);
-
-//   const ctWithTag = new Uint8Array(
-//     await crypto.subtle.encrypt(
-//       { name: 'AES-GCM', iv }, // 96-bit nonce
-//       key,
-//       ptBytes
-//     )
-//   );
-//   // Pack IV || (ciphertext||tag)
-//   const out = new Uint8Array(iv.length + ctWithTag.length);
-//   out.set(iv, 0);
-//   out.set(ctWithTag, iv.length);
-//   return bytesToB64(out);
-// }
-
-// /**
-//  * Decrypt Base64( IV || ciphertext || tag ) to plaintext.
-//  * Splits IV (12), tag (16) and feeds ciphertext||tag to AES-GCM.
-//  */
-// export async function decryptAES(
-//   b64Data: string,
-//   key: CryptoKey
-// ): Promise<string> {
-//   const data = b64ToBytes(b64Data);
-//   if (data.length < GCM_NONCE_LEN + GCM_TAG_LEN + 1) {
-//     throw new Error('Invalid GCM payload length');
-//   }
-//   const iv = data.slice(0, GCM_NONCE_LEN);
-//   const ctPlusTag = data.slice(GCM_NONCE_LEN); // subtle needs ciphertext||tag
-//   const pt = new Uint8Array(
-//     await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, ctPlusTag)
-//   );
-//   return utf8Decode(pt);
-// }
-
-// // ---------- RSA-OAEP (SHA-256) ----------
-
-// /** Parse PEM public key and import as CryptoKey (RSA-OAEP with SHA-256). */
-// async function importRsaPublicKeyFromPem(pem: string): Promise<CryptoKey> {
-//   // Tolerate PEMs with/without headers
-//   const clean = pem
-//     .replace(/-----BEGIN PUBLIC KEY-----/g, '')
-//     .replace(/-----END PUBLIC KEY-----/g, '')
-//     .replace(/\s+/g, '');
-//   const der = b64ToBytes(clean);
-//   return await crypto.subtle.importKey(
-//     'spki',
-//     der,
-//     { name: 'RSA-OAEP', hash: 'SHA-256' },
-//     false,
-//     ['encrypt']
-//   );
-// }
-
-// /**
-//  * RSA-OAEP(SHA-256) encrypts the UTF-8 bytes of the **Base64(AES key)** string.
-//  * Returns Base64 ciphertext.
-//  */
-// export async function encryptAESKeyWithRSA(
-//   aesKeyBase64: string,
-//   publicKeyPem: string
-// ): Promise<string> {
-//   const pub = await importRsaPublicKeyFromPem(publicKeyPem);
-//   const data = utf8Encode(aesKeyBase64);
-//   const enc = new Uint8Array(
-//     await crypto.subtle.encrypt({ name: 'RSA-OAEP' }, pub, data)
-//   );
-//   return bytesToB64(enc);
-// }
-
-// // ---------- Website key fetch / cache ----------
-
-// /**
-//  * Fetches & caches the server public key.
-//  * Accepts two shapes (same as your Flutter):
-//  *  A) { "<kid>": { kid, public, expiry } }
-//  *  B) { kid, public, expiry }
-//  */
-// export async function getWebsiteKey(): Promise<WebsiteKey> {
-//   const cachedJson = await AsyncStorage.getItem(KEY_WEB);
-//   const cachedExpiry = await AsyncStorage.getItem(KEY_WEB_EXPIRY);
-
-//   if (cachedJson && cachedExpiry) {
-//     try {
-//       const expiry = new Date(cachedExpiry);
-//       if (new Date() < expiry) {
-//         return JSON.parse(cachedJson) as WebsiteKey;
-//       }
-//     } catch {
-//       // ignore and refetch
-//     }
-//   }
-//   const txnId = uuidv4();
-//   const resp = await fetch(ServiceNames.WEBSITE_KEYS, {
-//     method: 'GET',
-//     headers: {
-//       'X-Txn-ID': txnId,
-//     },
-//   });
-
-//   if (!resp.ok) {
-//     throw new Error(`Website keys fetch failed: ${resp.status}`);
-//   }
-//   const raw = await resp.json();
-//   console.log('Fetched website key', { txnId, raw });
-
-//   let obj: any;
-//   if (
-//     raw &&
-//     typeof raw === 'object' &&
-//     !(
-//       Object.prototype.hasOwnProperty.call(raw, 'kid') &&
-//       (Object.prototype.hasOwnProperty.call(raw, 'public') ||
-//         Object.prototype.hasOwnProperty.call(raw, 'public_key'))
-//     )
-//   ) {
-//     // Assume single-entry map keyed by KID
-//     const values = Object.values(raw);
-//     if (!values.length || typeof values[0] !== 'object') {
-//       throw new Error('Unexpected keyset response shape');
-//     }
-//     obj = values[0];
-//   } else {
-//     obj = raw;
-//   }
-
-//   const kid: string | undefined = obj.kid ?? obj.KID;
-//   const publicKey: string | undefined = obj.public ?? obj.public_key;
-//   const expiry: string | undefined = obj.expiry ?? obj.exp ?? obj.expiresAt;
-
-//   if (!kid || !publicKey || !expiry) {
-//     throw new Error('Missing kid/public/expiry in website key response');
-//   }
-
-//   const normalized: WebsiteKey = { kid, public: publicKey, expiry };
-
-//   await AsyncStorage.setItem(KEY_WEB, JSON.stringify(normalized));
-//   await AsyncStorage.setItem(KEY_WEB_EXPIRY, expiry);
-
-//   return normalized;
-// }
-
-// // ---------- Optional: Hybrid helpers (one-liners) ----------
-
-// export type HybridEnvelope = {
-//   kid: string;
-//   rsaWrappedAESKey: string; // Base64 RSA(OAEP) of Base64(AES key)
-//   cipherData: string; // Base64( IV || ciphertext || tag )
-// };
-
-// export async function encryptHybrid(
-//   plaintext: string
-// ): Promise<HybridEnvelope> {
-//   // 1) fetch server key
-//   const { kid, public: publicPem } = await getWebsiteKey();
-
-//   // 2) generate AES key & encrypt data
-//   const aesKey = await generateAESKey();
-//   const cipherData = await encryptAES(plaintext, aesKey);
-
-//   // 3) export AES key to Base64 and RSA-wrap it
-//   const aesKeyB64 = await exportAESKeyBase64(aesKey);
-//   const rsaWrappedAESKey = await encryptAESKeyWithRSA(aesKeyB64, publicPem);
-
-//   return { kid, rsaWrappedAESKey, cipherData };
-// }
-
-// /**
-//  * Decrypt using an already-imported AES key (symmetric path).
-//  * Use this for local decrypts (e.g., testing) or when the server sends you encrypted data
-//  * and you already have the AES key.
-//  */
-// export async function decryptHybridLocal(
-//   cipherData: string,
-//   aesKey: CryptoKey
-// ): Promise<string> {
-//   return await decryptAES(cipherData, aesKey);
-// }
 "use strict";
+
+// Encryption.ts
+import AsyncStorage from '@react-native-async-storage/async-storage';
+import * as base64js from 'base64-js';
+import { ServiceNames } from "../ServiceNames.js";
+import crypto from 'react-native-quick-crypto';
+import { Buffer } from '@craftzdog/react-native-buffer';
+const {
+  randomBytes,
+  createCipheriv,
+  createDecipheriv,
+  publicEncrypt,
+  constants,
+  createPublicKey
+} = crypto;
+const KEY_WEB = 'KEY_WEB';
+const KEY_WEB_EXPIRY = 'KEY_WEB_EXPIRY';
+const GCM_NONCE_LEN = 12; // 12-byte IV
+const GCM_TAG_LEN = 16; // 16-byte tag
+const AES_KEY_LEN_BYTES = 32; // 256 bits
+
+// --- small utils ---
+const bytesToB64 = u8 => base64js.fromByteArray(u8);
+const b64ToBytes = b64 => base64js.toByteArray(b64);
+
+// ---------- AES-256-GCM ----------
+
+/** Generate random 32-byte AES key */
+export function generateAESKey() {
+  return new Uint8Array(randomBytes(AES_KEY_LEN_BYTES));
+}
+
+/** Export AES key bytes -> Base64 (for RSA input) */
+export function exportAESKeyBase64(keyBytes) {
+  return bytesToB64(keyBytes);
+}
+
+/** Encrypt plaintext -> Base64( IV || ciphertext || tag ) */
+export function encryptAES(plaintext, keyBytes) {
+  const iv = new Uint8Array(randomBytes(GCM_NONCE_LEN));
+  const cipher = createCipheriv('aes-256-gcm', Buffer.from(keyBytes), Buffer.from(iv));
+  const ct1 = cipher.update(plaintext, 'utf8');
+  const ct2 = cipher.final();
+  const ciphertext = Buffer.concat([ct1, ct2]);
+  const tag = cipher.getAuthTag(); // 16 bytes
+
+  const out = new Uint8Array(iv.length + ciphertext.length + tag.length);
+  out.set(iv, 0);
+  out.set(ciphertext, iv.length);
+  out.set(tag, iv.length + ciphertext.length);
+  return bytesToB64(out);
+}
+
+/** Decrypt Base64( IV || ciphertext || tag ) -> plaintext */
+export function decryptAES(b64Data, keyBytes) {
+  const data = b64ToBytes(b64Data);
+  if (data.length < GCM_NONCE_LEN + GCM_TAG_LEN + 1) {
+    throw new Error('Invalid GCM payload length');
+  }
+  const iv = data.slice(0, GCM_NONCE_LEN);
+  const tag = data.slice(data.length - GCM_TAG_LEN);
+  const ct = data.slice(GCM_NONCE_LEN, data.length - GCM_TAG_LEN);
+  const decipher = createDecipheriv('aes-256-gcm', Buffer.from(keyBytes), Buffer.from(iv));
+  decipher.setAuthTag(Buffer.from(tag));
+  const pt1 = decipher.update(Buffer.from(ct));
+  const pt2 = decipher.final();
+  return Buffer.concat([pt1, pt2]).toString('utf8');
+}
+
+// ---------- RSA-OAEP (SHA-256) ----------
+
+/** RSA-OAEP(SHA-256) encrypt UTF-8 bytes of Base64(AES key) -> Base64 ciphertext */
+export function encryptAESKeyWithRSA(aesKeyBase64, publicKeyPem) {
+  const buf = Buffer.from(aesKeyBase64, 'utf8');
+  const enc = publicEncrypt({
+    key: publicKeyPem,
+    padding: constants.RSA_PKCS1_OAEP_PADDING,
+    oaepHash: 'sha256'
+  }, buf);
+  return enc.toString('base64');
+}
+
+// ---------- Website key fetch / cache ----------
+
+export async function getWebsiteKey() {
+  // const cachedJson = await AsyncStorage.getItem(KEY_WEB);
+  // const cachedExpiry = await AsyncStorage.getItem(KEY_WEB_EXPIRY);
+  // if (cachedJson && cachedExpiry) {
+  //   try {
+  //     if (new Date() < new Date(cachedExpiry)) {
+  //       return JSON.parse(cachedJson) as WebsiteKey;
+  //     }
+  //   } catch {
+  //     /* ignore */
+  //   }
+  // }
+
+  // const txnId = uuidv4();
+  const resp = await fetch(ServiceNames.WEBSITE_KEYS, {
+    method: 'GET'
+    // headers: { 'X-Txn-ID': txnId },
+  });
+  if (!resp.ok) throw new Error(`Website keys fetch failed: ${resp.status}`);
+  const raw = await resp.json();
+  console.log('Website keys response:', raw);
+  let obj;
+  if (raw && typeof raw === 'object' && !(Object.prototype.hasOwnProperty.call(raw, 'kid') && (Object.prototype.hasOwnProperty.call(raw, 'public') || Object.prototype.hasOwnProperty.call(raw, 'public_key')))) {
+    const values = Object.values(raw);
+    if (!values.length || typeof values[0] !== 'object') {
+      throw new Error('Unexpected keyset response shape');
+    }
+    obj = values[0];
+  } else {
+    obj = raw;
+  }
+  const kid = obj.kid ?? obj.KID;
+  const publicKey = obj.public ?? obj.public_key;
+  const expiry = obj.expiry ?? obj.exp ?? obj.expiresAt;
+  if (!kid || !publicKey || !expiry) throw new Error('Missing kid/public/expiry');
+  const normalized = {
+    kid,
+    public: publicKey,
+    expiry
+  };
+  await AsyncStorage.setItem(KEY_WEB, JSON.stringify(normalized));
+  await AsyncStorage.setItem(KEY_WEB_EXPIRY, expiry);
+  return normalized;
+}
+
+// ---------- Optional: one-liners ----------
+
+export async function encryptHybrid(plaintext) {
+  const {
+    kid,
+    public: publicPem
+  } = await getWebsiteKey();
+  const aesKey = generateAESKey();
+  const cipherData = encryptAES(plaintext, aesKey);
+  const aesKeyB64 = exportAESKeyBase64(aesKey);
+  const rsaWrappedAESKey = encryptAESKeyWithRSA(aesKeyB64, publicPem);
+  return {
+    kid,
+    rsaWrappedAESKey,
+    cipherData
+  };
+}
 //# sourceMappingURL=Encryption.js.map

package/lib/module/helpers/network/Encryption.js.map

@@ -1 +1 @@
-{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["helpers/network/Encryption.tsx"],"mappings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ignoreList":[]}
+{"version":3,"names":["AsyncStorage","base64js","ServiceNames","crypto","Buffer","randomBytes","createCipheriv","createDecipheriv","publicEncrypt","constants","createPublicKey","KEY_WEB","KEY_WEB_EXPIRY","GCM_NONCE_LEN","GCM_TAG_LEN","AES_KEY_LEN_BYTES","bytesToB64","u8","fromByteArray","b64ToBytes","b64","toByteArray","generateAESKey","Uint8Array","exportAESKeyBase64","keyBytes","encryptAES","plaintext","iv","cipher","from","ct1","update","ct2","final","ciphertext","concat","tag","getAuthTag","out","length","set","decryptAES","b64Data","data","Error","slice","ct","decipher","setAuthTag","pt1","pt2","toString","encryptAESKeyWithRSA","aesKeyBase64","publicKeyPem","buf","enc","key","padding","RSA_PKCS1_OAEP_PADDING","oaepHash","getWebsiteKey","resp","fetch","WEBSITE_KEYS","method","ok","status","raw","json","console","log","obj","Object","prototype","hasOwnProperty","call","values","kid","KID","publicKey","public","public_key","expiry","exp","expiresAt","normalized","setItem","JSON","stringify","encryptHybrid","publicPem","aesKey","cipherData","aesKeyB64","rsaWrappedAESKey"],"sourceRoot":"../../../../src","sources":["helpers/network/Encryption.tsx"],"mappings":";;AAAA;AACA,OAAOA,YAAY,MAAM,2CAA2C;AAEpE,OAAO,KAAKC,QAAQ,MAAM,WAAW;AACrC,SAASC,YAAY,QAAQ,oBAAiB;AAE9C,OAAOC,MAAM,MAAM,2BAA2B;AAC9C,SAASC,MAAM,QAAQ,gCAAgC;AAEvD,MAAM;EACJC,WAAW;EACXC,cAAc;EACdC,gBAAgB;EAChBC,aAAa;EACbC,SAAS;EACTC;AACF,CAAC,GAAGP,MAAM;AAIV,MAAMQ,OAAO,GAAG,SAAS;AACzB,MAAMC,cAAc,GAAG,gBAAgB;AACvC,MAAMC,aAAa,GAAG,EAAE,CAAC,CAAC;AAC1B,MAAMC,WAAW,GAAG,EAAE,CAAC,CAAC;AACxB,MAAMC,iBAAiB,GAAG,EAAE,CAAC,CAAC;;AAE9B;AACA,MAAMC,UAAU,GAAIC,EAAc,IAAKhB,QAAQ,CAACiB,aAAa,CAACD,EAAE,CAAC;AACjE,MAAME,UAAU,GAAIC,GAAW,IAAKnB,QAAQ,CAACoB,WAAW,CAACD,GAAG,CAAC;;AAE7D;;AAEA;AACA,OAAO,SAASE,cAAcA,CAAA,EAAe;EAC3C,OAAO,IAAIC,UAAU,CAAClB,WAAW,CAACU,iBAAiB,CAAC,CAAC;AACvD;;AAEA;AACA,OAAO,SAASS,kBAAkBA,CAACC,QAAoB,EAAU;EAC/D,OAAOT,UAAU,CAACS,QAAQ,CAAC;AAC7B;;AAEA;AACA,OAAO,SAASC,UAAUA,CAACC,SAAiB,EAAEF,QAAoB,EAAU;EAC1E,MAAMG,EAAE,GAAG,IAAIL,UAAU,CAAClB,WAAW,CAACQ,aAAa,CAAC,CAAC;EACrD,MAAMgB,MAAM,GAAGvB,cAAc,CAC3B,aAAa,EACbF,MAAM,CAAC0B,IAAI,CAACL,QAAQ,CAAC,EACrBrB,MAAM,CAAC0B,IAAI,CAACF,EAAE,CAChB,CAAC;EAED,MAAMG,GAAG,GAAGF,MAAM,CAACG,MAAM,CAACL,SAAS,EAAE,MAAM,CAAC;EAC5C,MAAMM,GAAG,GAAGJ,MAAM,CAACK,KAAK,CAAC,CAAC;EAC1B,MAAMC,UAAU,GAAG/B,MAAM,CAACgC,MAAM,CAAC,CAACL,GAAG,EAAEE,GAAG,CAAC,CAAC;EAE5C,MAAMI,GAAG,GAAGR,MAAM,CAACS,UAAU,CAAC,CAAC,CAAC,CAAC;;EAEjC,MAAMC,GAAG,GAAG,IAAIhB,UAAU,CAACK,EAAE,CAACY,MAAM,GAAGL,UAAU,CAACK,MAAM,GAAGH,GAAG,CAACG,MAAM,CAAC;EACtED,GAAG,CAACE,GAAG,CAACb,EAAE,EAAE,CAAC,CAAC;EACdW,GAAG,CAACE,GAAG,CAACN,UAAU,EAAEP,EAAE,CAACY,MAAM,CAAC;EAC9BD,GAAG,CAACE,GAAG,CAACJ,GAAG,EAAET,EAAE,CAACY,MAAM,GAAGL,UAAU,CAACK,MAAM,CAAC;EAE3C,OAAOxB,UAAU,CAACuB,GAAG,CAAC;AACxB;;AAEA;AACA,OAAO,SAASG,UAAUA,CAACC,OAAe,EAAElB,QAAoB,EAAU;EACxE,MAAMmB,IAAI,GAAGzB,UAAU,CAACwB,OAAO,CAAC;EAChC,IAAIC,IAAI,CAACJ,MAAM,GAAG3B,aAAa,GAAGC,WAAW,GAAG,CAAC,EAAE;IACjD,MAAM,IAAI+B,KAAK,CAAC,4BAA4B,CAAC;EAC/C;EACA,MAAMjB,EAAE,GAAGgB,IAAI,CAACE,KAAK,CAAC,CAAC,EAAEjC,aAAa,CAAC;EACvC,MAAMwB,GAAG,GAAGO,IAAI,CAACE,KAAK,CAACF,IAAI,CAACJ,MAAM,GAAG1B,WAAW,CAAC;EACjD,MAAMiC,EAAE,GAAGH,IAAI,CAACE,KAAK,CAACjC,aAAa,EAAE+B,IAAI,CAACJ,MAAM,GAAG1B,WAAW,CAAC;EAE/D,MAAMkC,QAAQ,GAAGzC,gBAAgB,CAC/B,aAAa,EACbH,MAAM,CAAC0B,IAAI,CAACL,QAAQ,CAAC,EACrBrB,MAAM,CAAC0B,IAAI,CAACF,EAAE,CAChB,CAAC;EACDoB,QAAQ,CAACC,UAAU,CAAC7C,MAAM,CAAC0B,IAAI,CAACO,GAAG,CAAC,CAAC;EAErC,MAAMa,GAAG,GAAGF,QAAQ,CAAChB,MAAM,CAAC5B,MAAM,CAAC0B,IAAI,CAACiB,EAAE,CAAC,CAAC;EAC5C,MAAMI,GAAG,GAAGH,QAAQ,CAACd,KAAK,CAAC,CAAC;EAC5B,OAAO9B,MAAM,CAACgC,MAAM,CAAC,CAACc,GAAG,EAAEC,GAAG,CAAC,CAAC,CAACC,QAAQ,CAAC,MAAM,CAAC;AACnD;;AAEA;;AAEA;AACA,OAAO,SAASC,oBAAoBA,CAClCC,YAAoB,EACpBC,YAAoB,EACZ;EACR,MAAMC,GAAG,GAAGpD,MAAM,CAAC0B,IAAI,CAACwB,YAAY,EAAE,MAAM,CAAC;EAC7C,MAAMG,GAAG,GAAGjD,aAAa,CACvB;IACEkD,GAAG,EAAEH,YAAY;IACjBI,OAAO,EAAElD,SAAS,CAACmD,sBAAsB;IACzCC,QAAQ,EAAE;EACZ,CAAC,EACDL,GACF,CAAC;EACD,OAAOC,GAAG,CAACL,QAAQ,CAAC,QAAQ,CAAC;AAC/B;;AAEA;;AAEA,OAAO,eAAeU,aAAaA,CAAA,EAAwB;EACzD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA,MAAMC,IAAI,GAAG,MAAMC,KAAK,CAAC9D,YAAY,CAAC+D,YAAY,EAAE;IAClDC,MAAM,EAAE;IACR;EACF,CAAC,CAAC;EACF,IAAI,CAACH,IAAI,CAACI,EAAE,EAAE,MAAM,IAAItB,KAAK,CAAC,8BAA8BkB,IAAI,CAACK,MAAM,EAAE,CAAC;EAE1E,MAAMC,GAAG,GAAG,MAAMN,IAAI,CAACO,IAAI,CAAC,CAAC;EAC7BC,OAAO,CAACC,GAAG,CAAC,wBAAwB,EAAEH,GAAG,CAAC;EAC1C,IAAII,GAAQ;EACZ,IACEJ,GAAG,IACH,OAAOA,GAAG,KAAK,QAAQ,IACvB,EACEK,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACR,GAAG,EAAE,KAAK,CAAC,KAC/CK,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACR,GAAG,EAAE,QAAQ,CAAC,IAClDK,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACR,GAAG,EAAE,YAAY,CAAC,CAAC,CAC3D,EACD;IACA,MAAMS,MAAM,GAAGJ,MAAM,CAACI,MAAM,CAACT,GAAG,CAAC;IACjC,IAAI,CAACS,MAAM,CAACtC,MAAM,IAAI,OAAOsC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE;MACnD,MAAM,IAAIjC,KAAK,CAAC,kCAAkC,CAAC;IACrD;IACA4B,GAAG,GAAGK,MAAM,CAAC,CAAC,CAAC;EACjB,CAAC,MAAM;IACLL,GAAG,GAAGJ,GAAG;EACX;EAEA,MAAMU,GAAuB,GAAGN,GAAG,CAACM,GAAG,IAAIN,GAAG,CAACO,GAAG;EAClD,MAAMC,SAA6B,GAAGR,GAAG,CAACS,MAAM,IAAIT,GAAG,CAACU,UAAU;EAClE,MAAMC,MAA0B,GAAGX,GAAG,CAACW,MAAM,IAAIX,GAAG,CAACY,GAAG,IAAIZ,GAAG,CAACa,SAAS;EACzE,IAAI,CAACP,GAAG,IAAI,CAACE,SAAS,IAAI,CAACG,MAAM,EAC/B,MAAM,IAAIvC,KAAK,CAAC,2BAA2B,CAAC;EAE9C,MAAM0C,UAAsB,GAAG;IAAER,GAAG;IAAEG,MAAM,EAAED,SAAS;IAAEG;EAAO,CAAC;EACjE,MAAMpF,YAAY,CAACwF,OAAO,CAAC7E,OAAO,EAAE8E,IAAI,CAACC,SAAS,CAACH,UAAU,CAAC,CAAC;EAC/D,MAAMvF,YAAY,CAACwF,OAAO,CAAC5E,cAAc,EAAEwE,MAAM,CAAC;EAClD,OAAOG,UAAU;AACnB;;AAEA;;AAQA,OAAO,eAAeI,aAAaA,CACjChE,SAAiB,EACQ;EACzB,MAAM;IAAEoD,GAAG;IAAEG,MAAM,EAAEU;EAAU,CAAC,GAAG,MAAM9B,aAAa,CAAC,CAAC;EACxD,MAAM+B,MAAM,GAAGvE,cAAc,CAAC,CAAC;EAC/B,MAAMwE,UAAU,GAAGpE,UAAU,CAACC,SAAS,EAAEkE,MAAM,CAAC;EAChD,MAAME,SAAS,GAAGvE,kBAAkB,CAACqE,MAAM,CAAC;EAC5C,MAAMG,gBAAgB,GAAG3C,oBAAoB,CAAC0C,SAAS,EAAEH,SAAS,CAAC;EACnE,OAAO;IAAEb,GAAG;IAAEiB,gBAAgB;IAAEF;EAAW,CAAC;AAC9C","ignoreList":[]}