react-native-dpop 0.1.0 → 0.2.0

package/ios/DPoPModuleBridge.mm

@@ -0,0 +1,93 @@
+#import <React/RCTBridgeModule.h>
+#import <React/RCTUtils.h>
+
+#ifdef RCT_NEW_ARCH_ENABLED
+#if __has_include(<ReactNativeDPoPSpec/ReactNativeDPoPSpec.h>)
+#import <ReactNativeDPoPSpec/ReactNativeDPoPSpec.h>
+#else
+#import "ReactNativeDPoPSpec.h"
+#endif
+#endif
+
+#if __has_include(<ReactNativeDPoP/ReactNativeDPoP-Swift.h>)
+#import <ReactNativeDPoP/ReactNativeDPoP-Swift.h>
+#else
+#import "ReactNativeDPoP-Swift.h"
+#endif
+
+@interface RCT_EXTERN_MODULE(ReactNativeDPoP, NSObject)
+
+RCT_EXTERN_METHOD(assertHardwareBacked:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(calculateThumbprint:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(deleteKeyPair:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(getKeyInfo:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(getPublicKeyDer:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(getPublicKeyJwk:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(getPublicKeyRaw:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(hasKeyPair:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(isBoundToAlias:(NSString *)proof
+                  alias:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(rotateKeyPair:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(signWithDpopPrivateKey:(NSString *)payload
+                  alias:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(generateProof:(NSString *)htu
+                  htm:(NSString *)htm
+                  nonce:(NSString * _Nullable)nonce
+                  accessToken:(NSString * _Nullable)accessToken
+                  additional:(NSDictionary * _Nullable)additional
+                  kid:(NSString * _Nullable)kid
+                  jti:(NSString * _Nullable)jti
+                  iat:(NSNumber * _Nullable)iat
+                  alias:(NSString * _Nullable)alias
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+
+@end
+
+@implementation ReactNativeDPoP
+@end
+
+#if RCT_NEW_ARCH_ENABLED
+@implementation ReactNativeDPoP (TurboModule)
+
+- (std::shared_ptr<facebook::react::TurboModule>)getTurboModule:
+    (const facebook::react::ObjCTurboModule::InitParams &)params
+{
+    return std::make_shared<facebook::react::NativeReactNativeDPoPSpecJSI>(params);
+}
+
+@end
+#endif

package/ios/DPoPUtils.swift

@@ -0,0 +1,203 @@
+import Foundation
+import CryptoKit
+import Security
+
+enum DPoPUtils {
+  static func base64UrlEncode(_ data: Data) -> String {
+    data.base64EncodedString()
+      .replacingOccurrences(of: "+", with: "-")
+      .replacingOccurrences(of: "/", with: "_")
+      .replacingOccurrences(of: "=", with: "")
+  }
+
+  static func base64UrlDecode(_ value: String) -> Data? {
+    let remainder = value.count % 4
+    let padded = remainder == 0 ? value : value + String(repeating: "=", count: 4 - remainder)
+    let base64 = padded
+      .replacingOccurrences(of: "-", with: "+")
+      .replacingOccurrences(of: "_", with: "/")
+    return Data(base64Encoded: base64)
+  }
+
+  static func sha256(_ data: Data) -> Data {
+    Data(SHA256.hash(data: data))
+  }
+
+  static func hashAccessToken(_ accessToken: String) -> String {
+    let data = Data(accessToken.utf8)
+    return base64UrlEncode(sha256(data))
+  }
+
+  static func calculateThumbprint(kty: String, crv: String, x: String, y: String) -> String {
+    let canonical = "{\"crv\":\"\(crv)\",\"kty\":\"\(kty)\",\"x\":\"\(x)\",\"y\":\"\(y)\"}"
+    return base64UrlEncode(sha256(Data(canonical.utf8)))
+  }
+
+  static func jsonData(_ object: Any) throws -> Data {
+    if #available(iOS 11.0, *) {
+      return try JSONSerialization.data(withJSONObject: object, options: [.sortedKeys])
+    }
+    return try JSONSerialization.data(withJSONObject: object, options: [])
+  }
+
+  static func derToJose(_ derSignature: Data, partLength: Int = 32) throws -> Data {
+    let bytes = [UInt8](derSignature)
+    guard !bytes.isEmpty, bytes[0] == 0x30 else {
+      throw DPoPError.invalidDerSignature
+    }
+
+    var index = 1
+    let (_, seqLengthBytes) = try readDerLength(bytes, startIndex: index)
+    index += seqLengthBytes
+
+    guard index < bytes.count, bytes[index] == 0x02 else {
+      throw DPoPError.invalidDerSignature
+    }
+
+    index += 1
+    let (rLength, rLengthBytes) = try readDerLength(bytes, startIndex: index)
+    index += rLengthBytes
+    let rEnd = index + rLength
+    guard rEnd <= bytes.count else {
+      throw DPoPError.invalidDerSignature
+    }
+    let r = Data(bytes[index..<rEnd])
+    index = rEnd
+
+    guard index < bytes.count, bytes[index] == 0x02 else {
+      throw DPoPError.invalidDerSignature
+    }
+
+    index += 1
+    let (sLength, sLengthBytes) = try readDerLength(bytes, startIndex: index)
+    index += sLengthBytes
+    let sEnd = index + sLength
+    guard sEnd <= bytes.count else {
+      throw DPoPError.invalidDerSignature
+    }
+    let s = Data(bytes[index..<sEnd])
+
+    let rFixed = try toUnsignedFixedLength(r, length: partLength)
+    let sFixed = try toUnsignedFixedLength(s, length: partLength)
+    return rFixed + sFixed
+  }
+
+  static func getPublicCoordinates(fromRawPublicKey raw: Data) throws -> (x: String, y: String) {
+    guard raw.count == 65, raw.first == 0x04 else {
+      throw DPoPError.invalidPublicKey
+    }
+
+    let x = raw.subdata(in: 1..<33)
+    let y = raw.subdata(in: 33..<65)
+    return (base64UrlEncode(x), base64UrlEncode(y))
+  }
+
+  static func toRawPublicKey(_ publicKey: SecKey) throws -> Data {
+    var error: Unmanaged<CFError>?
+    guard let publicKeyData = SecKeyCopyExternalRepresentation(publicKey, &error) as Data? else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+
+    guard publicKeyData.count == 65, publicKeyData.first == 0x04 else {
+      throw DPoPError.invalidPublicKey
+    }
+
+    return publicKeyData
+  }
+
+  static func toDerPublicKey(_ publicKey: SecKey) throws -> Data {
+    let raw = try toRawPublicKey(publicKey)
+    let cryptoKey = try P256.Signing.PublicKey(x963Representation: raw)
+    return cryptoKey.derRepresentation
+  }
+
+  static func isProofBoundToPublicKey(_ proof: String, publicKey: SecKey) throws -> Bool {
+    let parts = proof.split(separator: ".", omittingEmptySubsequences: false)
+    guard parts.count == 3 else {
+      throw DPoPError.invalidProofFormat
+    }
+
+    guard let headerData = base64UrlDecode(String(parts[0])) else {
+      throw DPoPError.invalidProofFormat
+    }
+
+    let json = try JSONSerialization.jsonObject(with: headerData, options: [])
+    guard let header = json as? [String: Any],
+          let jwk = header["jwk"] as? [String: Any],
+          let kty = jwk["kty"] as? String,
+          let crv = jwk["crv"] as? String,
+          let x = jwk["x"] as? String,
+          let y = jwk["y"] as? String else {
+      throw DPoPError.invalidProofFormat
+    }
+
+    let coordinates = try getPublicCoordinates(fromRawPublicKey: try toRawPublicKey(publicKey))
+    return kty == "EC" && crv == "P-256" && x == coordinates.x && y == coordinates.y
+  }
+
+  private static func readDerLength(_ input: [UInt8], startIndex: Int) throws -> (Int, Int) {
+    guard startIndex < input.count else {
+      throw DPoPError.invalidDerSignature
+    }
+
+    let first = Int(input[startIndex])
+    if (first & 0x80) == 0 {
+      return (first, 1)
+    }
+
+    let lengthBytesCount = first & 0x7F
+    guard lengthBytesCount > 0, lengthBytesCount <= 4, startIndex + lengthBytesCount < input.count else {
+      throw DPoPError.invalidDerSignature
+    }
+
+    var length = 0
+    for index in 0..<lengthBytesCount {
+      length = (length << 8) | Int(input[startIndex + 1 + index])
+    }
+
+    return (length, 1 + lengthBytesCount)
+  }
+
+  private static func toUnsignedFixedLength(_ value: Data, length: Int) throws -> Data {
+    let bytes = [UInt8](value)
+    if bytes.count == length {
+      return value
+    }
+
+    if bytes.count == length + 1, bytes.first == 0x00 {
+      return Data(bytes.dropFirst())
+    }
+
+    if bytes.count < length {
+      return Data(repeating: 0, count: length - bytes.count) + value
+    }
+
+    throw DPoPError.invalidDerSignature
+  }
+}
+
+enum DPoPError: LocalizedError {
+  case invalidDerSignature
+  case invalidPublicKey
+  case invalidProofFormat
+  case keyNotFound(alias: String)
+  case notHardwareBacked(alias: String)
+  case securityError(CFError?)
+
+  var errorDescription: String? {
+    switch self {
+    case .invalidDerSignature:
+      return "Invalid DER signature format"
+    case .invalidPublicKey:
+      return "Invalid P-256 public key"
+    case .invalidProofFormat:
+      return "Invalid DPoP proof format"
+    case .keyNotFound(let alias):
+      return "Key pair not found for alias: \(alias)"
+    case .notHardwareBacked(let alias):
+      return "Key pair is not hardware-backed for alias: \(alias)"
+    case .securityError(let error):
+      return (error as Error?)?.localizedDescription ?? "Security framework error"
+    }
+  }
+}

package/ios/KeychainKeyStore.swift

@@ -0,0 +1,82 @@
+import Foundation
+import Security
+
+final class KeychainKeyStore {
+  private let service = "com.dpop.keychain"
+
+  func generateKeyPair(alias: String) throws {
+    try deleteKeyPair(alias: alias)
+
+    let tag = keyTag(alias: alias)
+    var error: Unmanaged<CFError>?
+
+    let attributes: [String: Any] = [
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrKeySizeInBits as String: 256,
+      kSecPrivateKeyAttrs as String: [
+        kSecAttrIsPermanent as String: true,
+        kSecAttrApplicationTag as String: tag,
+        kSecAttrLabel as String: service,
+        kSecAttrAccessible as String: kSecAttrAccessibleWhenUnlockedThisDeviceOnly
+      ]
+    ]
+
+    guard SecKeyCreateRandomKey(attributes as CFDictionary, &error) != nil else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+  }
+
+  func deleteKeyPair(alias: String) throws {
+    let tag = keyTag(alias: alias)
+
+    let privateQuery: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom
+    ]
+
+    let status = SecItemDelete(privateQuery as CFDictionary)
+    guard status == errSecSuccess || status == errSecItemNotFound else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(status))
+    }
+  }
+
+  func getPrivateKey(alias: String) throws -> SecKey {
+    let tag = keyTag(alias: alias)
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecReturnRef as String: true
+    ]
+
+    var result: CFTypeRef?
+    let status = SecItemCopyMatching(query as CFDictionary, &result)
+    guard status == errSecSuccess, let key = result as! SecKey? else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return key
+  }
+
+  func getPublicKey(alias: String) throws -> SecKey {
+    let privateKey = try getPrivateKey(alias: alias)
+    guard let publicKey = SecKeyCopyPublicKey(privateKey) else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return publicKey
+  }
+
+  func hasKeyPair(alias: String) -> Bool {
+    do {
+      _ = try getPrivateKey(alias: alias)
+      _ = try getPublicKey(alias: alias)
+      return true
+    } catch {
+      return false
+    }
+  }
+
+  private func keyTag(alias: String) -> Data {
+    Data("\(service).\(alias)".utf8)
+  }
+}

package/ios/SecureEnclaveKeyStore.swift

@@ -0,0 +1,110 @@
+import Foundation
+import Security
+
+final class SecureEnclaveKeyStore {
+  private let service = "com.dpop.secureenclave"
+
+  func generateKeyPair(alias: String) throws {
+    try deleteKeyPair(alias: alias)
+
+    let tag = keyTag(alias: alias)
+    var error: Unmanaged<CFError>?
+
+    guard let access = SecAccessControlCreateWithFlags(
+      nil,
+      kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
+      .privateKeyUsage,
+      &error
+    ) else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+
+    let attributes: [String: Any] = [
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrKeySizeInBits as String: 256,
+      kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave,
+      kSecPrivateKeyAttrs as String: [
+        kSecAttrIsPermanent as String: true,
+        kSecAttrApplicationTag as String: tag,
+        kSecAttrLabel as String: service,
+        kSecAttrAccessControl as String: access
+      ]
+    ]
+
+    guard SecKeyCreateRandomKey(attributes as CFDictionary, &error) != nil else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+  }
+
+  func deleteKeyPair(alias: String) throws {
+    let tag = keyTag(alias: alias)
+
+    let privateQuery: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave
+    ]
+
+    let status = SecItemDelete(privateQuery as CFDictionary)
+    guard status == errSecSuccess || status == errSecItemNotFound else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(status))
+    }
+  }
+
+  func getPrivateKey(alias: String) throws -> SecKey {
+    let tag = keyTag(alias: alias)
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave,
+      kSecReturnRef as String: true
+    ]
+
+    var result: CFTypeRef?
+    let status = SecItemCopyMatching(query as CFDictionary, &result)
+    guard status == errSecSuccess, let key = result as! SecKey? else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return key
+  }
+
+  func getPublicKey(alias: String) throws -> SecKey {
+    let privateKey = try getPrivateKey(alias: alias)
+    guard let publicKey = SecKeyCopyPublicKey(privateKey) else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return publicKey
+  }
+
+  func hasKeyPair(alias: String) -> Bool {
+    do {
+      _ = try getPrivateKey(alias: alias)
+      _ = try getPublicKey(alias: alias)
+      return true
+    } catch {
+      return false
+    }
+  }
+
+  func isHardwareBacked(alias: String) -> Bool {
+    guard let attrs = try? attributes(alias: alias) else {
+      return false
+    }
+
+    return (attrs[kSecAttrTokenID as String] as? String) == (kSecAttrTokenIDSecureEnclave as String)
+  }
+
+  private func attributes(alias: String) throws -> [String: Any] {
+    let privateKey = try getPrivateKey(alias: alias)
+    guard let attrs = SecKeyCopyAttributes(privateKey) as? [String: Any] else {
+      return [:]
+    }
+    return attrs
+  }
+
+  private func keyTag(alias: String) -> Data {
+    Data("\(service).\(alias)".utf8)
+  }
+}

package/lib/module/NativeReactNativeDPoP.js

@@ -0,0 +1,6 @@
+"use strict";
+
+import { NativeModules, TurboModuleRegistry } from 'react-native';
+const nativeDpopModule = TurboModuleRegistry.get('ReactNativeDPoP') ?? NativeModules.ReactNativeDPoP;
+export default nativeDpopModule;
+//# sourceMappingURL=NativeReactNativeDPoP.js.map

package/lib/module/NativeReactNativeDPoP.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeModules","TurboModuleRegistry","nativeDpopModule","get","ReactNativeDPoP"],"sourceRoot":"../../src","sources":["NativeReactNativeDPoP.ts"],"mappings":";;AACA,SAASA,aAAa,EAAEC,mBAAmB,QAAQ,cAAc;AA4BjE,MAAMC,gBAAgB,GACpBD,mBAAmB,CAACE,GAAG,CAAO,iBAAiB,CAAC,IAAKH,aAAa,CAACI,eAAoC;AAEzG,eAAeF,gBAAgB","ignoreList":[]}

package/lib/module/index.js

@@ -1,16 +1,6 @@
 "use strict";
 
-import { Platform } from 'react-native';
-import Dpop from "./NativeDpop.js";
-const LINKING_ERROR = 'Dpop module nao encontrado. Verifique se o app Android foi recompilado apos adicionar o modulo nativo.';
-function requireAndroid() {
-  if (Platform.OS !== 'android') {
-    throw new Error('react-native-dpop (MVP atual) suporta somente Android.');
-  }
-  if (!Dpop) {
-    throw new Error(LINKING_ERROR);
-  }
-}
+import NativeReactNativeDPoP from "./NativeReactNativeDPoP.js";
 export class DPoP {
   constructor(proof, proofContext, alias) {
     this.proof = proof;
@@ -18,51 +8,41 @@ export class DPoP {
     this.alias = alias;
   }
   async calculateThumbprint() {
-    requireAndroid();
-    return Dpop.calculateThumbprint(this.alias ?? null);
+    return NativeReactNativeDPoP.calculateThumbprint(this.alias ?? null);
   }
   async getPublicKey(format) {
-    requireAndroid();
     if (format === 'DER') {
-      return Dpop.getPublicKeyDer(this.alias ?? null);
+      return NativeReactNativeDPoP.getPublicKeyDer(this.alias ?? null);
     }
     if (format === 'RAW') {
-      return Dpop.getPublicKeyRaw(this.alias ?? null);
+      return NativeReactNativeDPoP.getPublicKeyRaw(this.alias ?? null);
     }
-    return Dpop.getPublicKeyJwk(this.alias ?? null);
+    return NativeReactNativeDPoP.getPublicKeyJwk(this.alias ?? null);
   }
   async signWithDpopPrivateKey(payload) {
-    requireAndroid();
-    return Dpop.signWithDpopPrivateKey(payload, this.alias ?? null);
+    return NativeReactNativeDPoP.signWithDpopPrivateKey(payload, this.alias ?? null);
   }
   async isBoundToAlias(alias) {
-    requireAndroid();
-    return Dpop.isBoundToAlias(this.proof, alias ?? this.alias ?? null);
+    return NativeReactNativeDPoP.isBoundToAlias(this.proof, alias ?? this.alias ?? null);
   }
   static async generateProof(input) {
-    requireAndroid();
-    const result = await Dpop.generateProof(input.htu, input.htm, input.nonce ?? null, input.accessToken ?? null, input.additional ?? null, input.kid ?? null, input.jti ?? null, input.iat ?? null, input.alias ?? null);
+    const result = await NativeReactNativeDPoP.generateProof(input.htu, input.htm, input.nonce ?? null, input.accessToken ?? null, input.additional ?? null, input.kid ?? null, input.jti ?? null, input.iat ?? null, input.alias ?? null);
     return new DPoP(result.proof, result.proofContext, input.alias);
   }
   static async assertHardwareBacked(alias) {
-    requireAndroid();
-    await Dpop.assertHardwareBacked(alias ?? null);
+    await NativeReactNativeDPoP.assertHardwareBacked(alias ?? null);
   }
   static async deleteKeyPair(alias) {
-    requireAndroid();
-    await Dpop.deleteKeyPair(alias ?? null);
+    await NativeReactNativeDPoP.deleteKeyPair(alias ?? null);
   }
   static async getKeyInfo(alias) {
-    requireAndroid();
-    return Dpop.getKeyInfo(alias ?? null);
+    return NativeReactNativeDPoP.getKeyInfo(alias ?? null);
   }
   static async hasKeyPair(alias) {
-    requireAndroid();
-    return Dpop.hasKeyPair(alias ?? null);
+    return NativeReactNativeDPoP.hasKeyPair(alias ?? null);
   }
   static async rotateKeyPair(alias) {
-    requireAndroid();
-    await Dpop.rotateKeyPair(alias ?? null);
+    await NativeReactNativeDPoP.rotateKeyPair(alias ?? null);
   }
 }
 //# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["Platform","Dpop","LINKING_ERROR","requireAndroid","OS","Error","DPoP","constructor","proof","proofContext","alias","calculateThumbprint","getPublicKey","format","getPublicKeyDer","getPublicKeyRaw","getPublicKeyJwk","signWithDpopPrivateKey","payload","isBoundToAlias","generateProof","input","result","htu","htm","nonce","accessToken","additional","kid","jti","iat","assertHardwareBacked","deleteKeyPair","getKeyInfo","hasKeyPair","rotateKeyPair"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,QAAQ,QAAQ,cAAc;AACvC,OAAOC,IAAI,MAAM,iBAAc;AAoD/B,MAAMC,aAAa,GACjB,wGAAwG;AAE1G,SAASC,cAAcA,CAAA,EAAG;EACxB,IAAIH,QAAQ,CAACI,EAAE,KAAK,SAAS,EAAE;IAC7B,MAAM,IAAIC,KAAK,CAAC,wDAAwD,CAAC;EAC3E;EACA,IAAI,CAACJ,IAAI,EAAE;IACT,MAAM,IAAII,KAAK,CAACH,aAAa,CAAC;EAChC;AACF;AAEA,OAAO,MAAMI,IAAI,CAAC;EAKRC,WAAWA,CAACC,KAAa,EAAEC,YAA8B,EAAEC,KAAc,EAAE;IACjF,IAAI,CAACF,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,YAAY,GAAGA,YAAY;IAChC,IAAI,CAACC,KAAK,GAAGA,KAAK;EACpB;EAEA,MAAaC,mBAAmBA,CAAA,EAAoB;IAClDR,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACU,mBAAmB,CAAC,IAAI,CAACD,KAAK,IAAI,IAAI,CAAC;EACrD;EAEA,MAAaE,YAAYA,CAACC,MAAuB,EAA+B;IAC9EV,cAAc,CAAC,CAAC;IAChB,IAAIU,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOZ,IAAI,CAACa,eAAe,CAAC,IAAI,CAACJ,KAAK,IAAI,IAAI,CAAC;IACjD;IACA,IAAIG,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOZ,IAAI,CAACc,eAAe,CAAC,IAAI,CAACL,KAAK,IAAI,IAAI,CAAC;IACjD;IAEA,OAAOT,IAAI,CAACe,eAAe,CAAC,IAAI,CAACN,KAAK,IAAI,IAAI,CAAC;EACjD;EAEA,MAAaO,sBAAsBA,CAACC,OAAe,EAAmB;IACpEf,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACgB,sBAAsB,CAACC,OAAO,EAAE,IAAI,CAACR,KAAK,IAAI,IAAI,CAAC;EACjE;EAEA,MAAaS,cAAcA,CAACT,KAAc,EAAoB;IAC5DP,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACkB,cAAc,CAAC,IAAI,CAACX,KAAK,EAAEE,KAAK,IAAI,IAAI,CAACA,KAAK,IAAI,IAAI,CAAC;EACrE;EAEA,aAAoBU,aAAaA,CAACC,KAAyB,EAAiB;IAC1ElB,cAAc,CAAC,CAAC;IAChB,MAAMmB,MAAM,GAAI,MAAMrB,IAAI,CAACmB,aAAa,CACtCC,KAAK,CAACE,GAAG,EACTF,KAAK,CAACG,GAAG,EACTH,KAAK,CAACI,KAAK,IAAI,IAAI,EACnBJ,KAAK,CAACK,WAAW,IAAI,IAAI,EACzBL,KAAK,CAACM,UAAU,IAAI,IAAI,EACxBN,KAAK,CAACO,GAAG,IAAI,IAAI,EACjBP,KAAK,CAACQ,GAAG,IAAI,IAAI,EACjBR,KAAK,CAACS,GAAG,IAAI,IAAI,EACjBT,KAAK,CAACX,KAAK,IAAI,IACjB,CAAyB;IAEzB,OAAO,IAAIJ,IAAI,CAACgB,MAAM,CAACd,KAAK,EAAEc,MAAM,CAACb,YAAY,EAAEY,KAAK,CAACX,KAAK,CAAC;EACjE;EAEA,aAAoBqB,oBAAoBA,CAACrB,KAAc,EAAiB;IACtEP,cAAc,CAAC,CAAC;IAChB,MAAMF,IAAI,CAAC8B,oBAAoB,CAACrB,KAAK,IAAI,IAAI,CAAC;EAChD;EAEA,aAAoBsB,aAAaA,CAACtB,KAAc,EAAiB;IAC/DP,cAAc,CAAC,CAAC;IAChB,MAAMF,IAAI,CAAC+B,aAAa,CAACtB,KAAK,IAAI,IAAI,CAAC;EACzC;EAEA,aAAoBuB,UAAUA,CAACvB,KAAc,EAAwB;IACnEP,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACgC,UAAU,CAACvB,KAAK,IAAI,IAAI,CAAC;EACvC;EAEA,aAAoBwB,UAAUA,CAACxB,KAAc,EAAoB;IAC/DP,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACiC,UAAU,CAACxB,KAAK,IAAI,IAAI,CAAC;EACvC;EAEA,aAAoByB,aAAaA,CAACzB,KAAc,EAAiB;IAC/DP,cAAc,CAAC,CAAC;IAChB,MAAMF,IAAI,CAACkC,aAAa,CAACzB,KAAK,IAAI,IAAI,CAAC;EACzC;AACF","ignoreList":[]}
+{"version":3,"names":["NativeReactNativeDPoP","DPoP","constructor","proof","proofContext","alias","calculateThumbprint","getPublicKey","format","getPublicKeyDer","getPublicKeyRaw","getPublicKeyJwk","signWithDpopPrivateKey","payload","isBoundToAlias","generateProof","input","result","htu","htm","nonce","accessToken","additional","kid","jti","iat","assertHardwareBacked","deleteKeyPair","getKeyInfo","hasKeyPair","rotateKeyPair"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,OAAOA,qBAAqB,MAAM,4BAAyB;AAoD3D,OAAO,MAAMC,IAAI,CAAC;EAKRC,WAAWA,CAACC,KAAa,EAAEC,YAA8B,EAAEC,KAAc,EAAE;IACjF,IAAI,CAACF,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,YAAY,GAAGA,YAAY;IAChC,IAAI,CAACC,KAAK,GAAGA,KAAK;EACpB;EAEA,MAAaC,mBAAmBA,CAAA,EAAoB;IAClD,OAAON,qBAAqB,CAACM,mBAAmB,CAAC,IAAI,CAACD,KAAK,IAAI,IAAI,CAAC;EACtE;EAEA,MAAaE,YAAYA,CAACC,MAAuB,EAA+B;IAC9E,IAAIA,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOR,qBAAqB,CAACS,eAAe,CAAC,IAAI,CAACJ,KAAK,IAAI,IAAI,CAAC;IAClE;IACA,IAAIG,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOR,qBAAqB,CAACU,eAAe,CAAC,IAAI,CAACL,KAAK,IAAI,IAAI,CAAC;IAClE;IAEA,OAAOL,qBAAqB,CAACW,eAAe,CAAC,IAAI,CAACN,KAAK,IAAI,IAAI,CAAC;EAClE;EAEA,MAAaO,sBAAsBA,CAACC,OAAe,EAAmB;IACpE,OAAOb,qBAAqB,CAACY,sBAAsB,CAACC,OAAO,EAAE,IAAI,CAACR,KAAK,IAAI,IAAI,CAAC;EAClF;EAEA,MAAaS,cAAcA,CAACT,KAAc,EAAoB;IAC5D,OAAOL,qBAAqB,CAACc,cAAc,CAAC,IAAI,CAACX,KAAK,EAAEE,KAAK,IAAI,IAAI,CAACA,KAAK,IAAI,IAAI,CAAC;EACtF;EAEA,aAAoBU,aAAaA,CAACC,KAAyB,EAAiB;IAC1E,MAAMC,MAAM,GAAI,MAAMjB,qBAAqB,CAACe,aAAa,CACvDC,KAAK,CAACE,GAAG,EACTF,KAAK,CAACG,GAAG,EACTH,KAAK,CAACI,KAAK,IAAI,IAAI,EACnBJ,KAAK,CAACK,WAAW,IAAI,IAAI,EACzBL,KAAK,CAACM,UAAU,IAAI,IAAI,EACxBN,KAAK,CAACO,GAAG,IAAI,IAAI,EACjBP,KAAK,CAACQ,GAAG,IAAI,IAAI,EACjBR,KAAK,CAACS,GAAG,IAAI,IAAI,EACjBT,KAAK,CAACX,KAAK,IAAI,IACjB,CAAyB;IAEzB,OAAO,IAAIJ,IAAI,CAACgB,MAAM,CAACd,KAAK,EAAEc,MAAM,CAACb,YAAY,EAAEY,KAAK,CAACX,KAAK,CAAC;EACjE;EAEA,aAAoBqB,oBAAoBA,CAACrB,KAAc,EAAiB;IACtE,MAAML,qBAAqB,CAAC0B,oBAAoB,CAACrB,KAAK,IAAI,IAAI,CAAC;EACjE;EAEA,aAAoBsB,aAAaA,CAACtB,KAAc,EAAiB;IAC/D,MAAML,qBAAqB,CAAC2B,aAAa,CAACtB,KAAK,IAAI,IAAI,CAAC;EAC1D;EAEA,aAAoBuB,UAAUA,CAACvB,KAAc,EAAwB;IACnE,OAAOL,qBAAqB,CAAC4B,UAAU,CAACvB,KAAK,IAAI,IAAI,CAAC;EACxD;EAEA,aAAoBwB,UAAUA,CAACxB,KAAc,EAAoB;IAC/D,OAAOL,qBAAqB,CAAC6B,UAAU,CAACxB,KAAK,IAAI,IAAI,CAAC;EACxD;EAEA,aAAoByB,aAAaA,CAACzB,KAAc,EAAiB;IAC/D,MAAML,qBAAqB,CAAC8B,aAAa,CAACzB,KAAK,IAAI,IAAI,CAAC;EAC1D;AACF","ignoreList":[]}

package/lib/typescript/src/{NativeDpop.d.ts → NativeReactNativeDPoP.d.ts}

@@ -16,4 +16,4 @@ export interface Spec extends TurboModule {
 }
 declare const _default: Spec;
 export default _default;
-//# sourceMappingURL=NativeDpop.d.ts.map
+//# sourceMappingURL=NativeReactNativeDPoP.d.ts.map

package/lib/typescript/src/NativeReactNativeDPoP.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeReactNativeDPoP.d.ts","sourceRoot":"","sources":["../../../src/NativeReactNativeDPoP.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,MAAM,WAAW,IAAK,SAAQ,WAAW;IACvC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,UAAU,EAAE,YAAY,GAAG,IAAI,EAC/B,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC,YAAY,CAAC,CAAC;CAC1B;wBAKkC,IAAI;AAAvC,wBAAwC"}

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAGA,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAmBF,qBAAa,IAAI;IACf,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAgB,YAAY,EAAE,gBAAgB,CAAC;IAE/C,OAAO;IAMM,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAKtC,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC;IAYlE,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKxD,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAKzC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;WAiBvD,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAKnD,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAK5C,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;WAKhD,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAK5C,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAIjE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAEA,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAOF,qBAAa,IAAI;IACf,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAgB,YAAY,EAAE,gBAAgB,CAAC;IAE/C,OAAO;IAMM,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAItC,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC;IAWlE,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxD,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAIzC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;WAgBvD,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAInD,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAI5C,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;WAIhD,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAI5C,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-dpop",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "React Native library for DPoP proof generation and key management.",
   "keywords": [
     "android",
@@ -110,11 +110,11 @@
     ]
   },
   "codegenConfig": {
-    "name": "DpopSpec",
+    "name": "ReactNativeDPoPSpec",
     "type": "modules",
     "jsSrcsDir": "src",
     "android": {
-      "javaPackageName": "com.dpop"
+      "javaPackageName": "com.reactnativedpop"
     }
   }
 }

package/src/{NativeDpop.ts → NativeReactNativeDPoP.ts}

@@ -1,5 +1,5 @@
 import type { TurboModule } from 'react-native';
-import { TurboModuleRegistry } from 'react-native';
+import { NativeModules, TurboModuleRegistry } from 'react-native';
 import type { UnsafeObject } from 'react-native/Libraries/Types/CodegenTypes';
 
 export interface Spec extends TurboModule {
@@ -27,4 +27,7 @@ export interface Spec extends TurboModule {
   ): Promise<UnsafeObject>;
 }
 
-export default TurboModuleRegistry.getEnforcing<Spec>('Dpop');
+const nativeDpopModule =
+  TurboModuleRegistry.get<Spec>('ReactNativeDPoP') ?? (NativeModules.ReactNativeDPoP as Spec | undefined);
+
+export default nativeDpopModule as Spec;