werift 0.24.1 → 0.24.2

package/lib/ice/src/turn/protocol.d.ts

@@ -2,7 +2,7 @@ import type { Candidate } from "../candidate";
 import { type Address, Event, type InterfaceAddresses, type TlsConnectionOptions, type Transport } from "../imports/common";
 import { Message } from "../stun/message";
 import { Transaction } from "../stun/transaction";
-import type { Protocol } from "../types/model";
+import type { Protocol, TransactionRequestOptions } from "../types/model";
 export declare class StunOverTurnProtocol implements Protocol {
     turn: TurnProtocol;
     static type: string;
@@ -13,7 +13,7 @@ export declare class StunOverTurnProtocol implements Protocol {
     onDataReceived: Event<[Buffer]>;
     constructor(turn: TurnProtocol);
     private handleStunMessage;
-    request(request: Message, addr: Address, integrityKey?: Buffer, _retransmissions?: number, onRequestSent?: (attempt: number) => void): Promise<[Message, readonly [string, number]]>;
+    request(request: Message, addr: Address, integrityKey?: Buffer, retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void): Promise<[Message, readonly [string, number]]>;
     connectionMade(): Promise<void>;
     sendData(data: Buffer, addr: Address): Promise<void>;
     sendStun(message: Message, addr: Address): Promise<void>;
@@ -65,7 +65,7 @@ export declare class TurnProtocol implements Protocol {
     private send;
     private createPermission;
     private refresh;
-    request(request: Message, addr: Address, _integrityKey?: Buffer, _retransmissions?: number, onRequestSent?: (attempt: number) => void): Promise<[Message, Address]>;
+    request(request: Message, addr: Address, _integrityKey?: Buffer, retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void): Promise<[Message, Address]>;
     requestWithRetry(request: Message, addr: Address): Promise<[Message, Address]>;
     sendData(data: Buffer, addr: Address): Promise<void>;
     getPermission(addr: Address): Promise<void>;

package/lib/ice/src/turn/protocol.js

@@ -73,7 +73,14 @@ class StunOverTurnProtocol {
                         message.messageClass === const_1.classes.ERROR) {
                         const transaction = this.turn.transactions[message.transactionIdHex];
                         if (transaction) {
-                            transaction.responseReceived(message, addr);
+                            const verified = transaction.integrityKey
+                                ? (0, message_1.parseMessage)(data, transaction.integrityKey)
+                                : message;
+                            if (!verified) {
+                                log("STUN over TURN response failed MESSAGE-INTEGRITY check");
+                                return;
+                            }
+                            transaction.responseReceived(verified, addr);
                         }
                     }
                     else if (message.messageClass === const_1.classes.REQUEST) {
@@ -91,7 +98,7 @@ class StunOverTurnProtocol {
         })
             .disposer(this.disposer);
     }
-    async request(request, addr, integrityKey, _retransmissions, onRequestSent) {
+    async request(request, addr, integrityKey, retransmissionsOrOptions, onRequestSent) {
         if (this.turn.transactions[request.transactionIdHex]) {
             throw new Error("exist");
         }
@@ -99,7 +106,13 @@ class StunOverTurnProtocol {
             request.addMessageIntegrity(integrityKey);
             request.addFingerprint();
         }
-        const transaction = new transaction_1.Transaction(request, addr, this, undefined, onRequestSent);
+        // Peer-facing STUN over TURN must honor retransmissions/responseTimeout
+        // (consent uses retransmissions: 0). Do not confuse with TURN server
+        // allocation/refresh policy on TurnProtocol.
+        // Peer addresses are already IPs from candidates; resolve for safety.
+        const resolvedAddr = await (0, transaction_1.resolveRequestAddress)(addr);
+        const options = (0, transaction_1.buildTransactionOptions)(integrityKey, retransmissionsOrOptions, onRequestSent);
+        const transaction = new transaction_1.Transaction(request, resolvedAddr, this, options);
         this.turn.transactions[request.transactionIdHex] = transaction;
         try {
             return await transaction.run();
@@ -362,7 +375,14 @@ class TurnProtocol {
                 message.messageClass === const_1.classes.ERROR) {
                 const transaction = this.transactions[message.transactionIdHex];
                 if (transaction) {
-                    transaction.responseReceived(message, addr);
+                    const verified = transaction.integrityKey
+                        ? (0, message_1.parseMessage)(data, transaction.integrityKey)
+                        : message;
+                    if (!verified) {
+                        log("TURN STUN response failed MESSAGE-INTEGRITY check");
+                        return;
+                    }
+                    transaction.responseReceived(verified, addr);
                 }
             }
             else if (message.messageClass === const_1.classes.REQUEST) {
@@ -417,7 +437,7 @@ class TurnProtocol {
             throw e;
         });
     }
-    async request(request, addr, _integrityKey, _retransmissions, onRequestSent) {
+    async request(request, addr, _integrityKey, retransmissionsOrOptions, onRequestSent) {
         if (this.transactions[request.transactionIdHex]) {
             throw new Error("exist");
         }
@@ -429,7 +449,12 @@ class TurnProtocol {
                 .addMessageIntegrity(this.integrityKey)
                 .addFingerprint();
         }
-        const transaction = new transaction_1.Transaction(request, addr, this, undefined, onRequestSent);
+        // TURN server allocation/refresh uses default STUN retry policy unless
+        // callers pass explicit options. Peer consent goes through StunOverTurnProtocol.
+        // Prefer the TURN session integrity key for response verification.
+        const resolvedAddr = await (0, transaction_1.resolveRequestAddress)(addr);
+        const options = (0, transaction_1.buildTransactionOptions)(this.integrityKey, retransmissionsOrOptions, onRequestSent);
+        const transaction = new transaction_1.Transaction(request, resolvedAddr, this, options);
         this.transactions[request.transactionIdHex] = transaction;
         try {
             return await transaction.run();

package/lib/ice/src/turn/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../../ice/src/turn/protocol.ts"],"names":[],"mappings":";;;AA2eA,4CA+BC;AAED,4DA2CC;AAED,4CAMC;AA/jBD,8CAA6C;AAE7C,4DAAyE;AAEzE,8CAAkD;AAClD,sCAA6E;AAC7E,8CAa2B;AAC3B,yCAAiD;AACjD,6CAAuE;AACvE,qDAAkD;AAClD,mCAMiB;AAIjB,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,8CAA8C,CAAC,CAAC;AAElE,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AACxC,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,SAAS,iBAAiB,CAAC,SAAoB;IAC7C,OAAO,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,MAAa,oBAAoB;IAQ/B,YAAmB,IAAkB;QAAzB;;;;mBAAO,IAAI;WAAc;QAN5B;;;;mBAAO,oBAAoB,CAAC,IAAI;WAAC;QAC1C;;;;;WAA2B;QACnB;;;;mBAAW,IAAI,sBAAa,EAAE;WAAC;QACvC;;;;mBAAuD,IAAI,cAAK,EAAE;WAAC;QACnE;;;;mBAAkC,IAAI,cAAK,EAAE;WAAC;QAUtC;;;;mBAAoB,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE;gBAC1D,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;oBACnC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAClC,OAAO;oBACT,CAAC;oBAED,IACE,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;wBACzC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,EACtC,CAAC;wBACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;wBACrE,IAAI,WAAW,EAAE,CAAC;4BAChB,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;wBAC9C,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;wBACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;WAAC;QA7BA,IAAI,CAAC,MAAM;aACR,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACxB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC;aACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IA0BD,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,YAAqB,EACrB,gBAAyB,EACzB,aAAyC;QAEzC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,yBAAW,CACjC,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,aAAa,CACd,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE/D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,cAAc,KAAI,CAAC;IACzB,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;;AAnFH,oDAoFC;AAnFQ;;;;WAAO,MAAM;EAAT,CAAU;AAqFvB,MAAa,YAAY;IA2BvB,YACS,MAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,SAAoB,EACpB,UAGH,EAAE;QARN;;;;mBAAO,MAAM;WAAS;QACtB;;;;mBAAO,QAAQ;WAAQ;QACvB;;;;mBAAO,QAAQ;WAAQ;QACvB;;;;mBAAO,QAAQ;WAAQ;QACvB;;;;mBAAO,SAAS;WAAW;QAC3B;;;;mBAAO,OAAO;WAGR;QAlCC;;;;mBAAO,YAAY,CAAC,IAAI;WAAC;QACzB;;;;mBAAS,IAAI,cAAK,EAAqB;WAAC;QACjD;;;;mBAAuD,IAAI,cAAK,EAAE;WAAC;QACnE;;;;mBAAkC,IAAI,cAAK,EAAE;WAAC;QAC9C;;;;;WAAsB;QACtB;;;;;WAAe;QACf;;;;;WAAe;QACf;;;;;WAAyB;QACzB;;;;;WAAwB;QACxB;;;;;WAA2B;QAC3B;;;;mBAAiD,EAAE;WAAC;QAC5C;;;;;WAAiC;QACjC;;;;mBAAgB,MAAM;WAAC;QACvB;;;;mBAEJ,EAAE;WAAC;QACC;;;;mBAAgD,EAAE;WAAC;QAC3D,SAAS;QACD;;;;;WAA2B;QAC3B;;;;;WAA+B;QAC/B;;;;mBAAmB,CAAC;WAAC;QACrB;;;;mBAAoB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;WAAC;QACpC;;;;mBAAgD,EAAE;WAAC;QACnD;;;;mBAAoC,OAAO,CAAC,OAAO,EAAE;WAAC;QA6HtD;;;;mBAAU,CAAC,GAAW,EAAE,EAAE;gBAChC,IAAI,CAAC,aAAa,GAAG,IAAA,mBAAU,EAAO,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;oBAC9D,IAAI,GAAG,GAAG,IAAI,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;wBACjB,GAAG,GAAG,KAAK,CAAC;oBACd,CAAC,CAAC,CAAC;oBAEH,OAAO,GAAG,EAAE,CAAC;wBACX,wBAAwB;wBACxB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;wBACnC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBACrC,MAAM,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAC;wBAExB,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,OAAO,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;wBAC9D,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;wBAEtC,IAAI,CAAC;4BACH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;4BACpE,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;4BAC5C,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC1B,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAzIA,IAAI,CAAC,kBAAkB;YACrB,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACrC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,QAAQ,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;aACJ,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;aACvC,YAAY,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;QAEtD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CACxE,CAAC,CAAC,EAAE,EAAE;YACJ,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,CAAC;QACV,CAAC,CACF,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QACxE,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,OAAO,GAAG,IAAA,yBAAiB,EAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAElE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY,EAAE,IAAa;QACnD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,CAAC;YAED,IACE,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;gBACzC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,EACtC,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAChE,IAAI,WAAW,EAAE,CAAC;oBAChB,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAW,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBACtD,MAAM,WAAW,GACf,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,IAAa;QAC9C,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE;YACvD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,0BAAkB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAa;QAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACvB,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAA,oBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAC7D,IAAI,CACL,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAAoB;QACjD,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,iBAAiB,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO;aACJ,YAAY,CAAC,kBAAkB,EAAE,WAAW,CAAC;aAC7C,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;aACvC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;aACjC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACnD,OAAO,CAAC;YACR,MAAM,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IA6BD,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,aAAsB,EACtB,gBAAyB,EACzB,aAAyC;QAEzC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;iBACJ,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;iBACvC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;iBACjC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;iBACjC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC;iBACtC,cAAc,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,yBAAW,CACjC,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,aAAa,CACd,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAgB,EAChB,IAAa;QAEb,IAAI,OAAgB,EAAE,OAAgB,CAAC;QACvC,IAAI,CAAC;YACH,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAiB,IAAI,KAAK,EAAE,CAAC;gBAChD,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YAEzB,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAExD,IACE,CAAC,CAAC,SAAS,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnE,KAAK,EACL,CAAC;gBACD,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAEnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;oBACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAClC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAM,EACX,IAAI,CAAC,QAAQ,CACd,CAAC;gBAEF,OAAO,CAAC,aAAa,GAAG,IAAA,4BAAmB,GAAE,CAAC;gBAC9C,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,CAAC,OAAQ,EAAE,OAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACtD,OAAO,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,IAAI,EAAE,eAAO,CAAC,UAAU,CAAC;iBAC3D,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;iBAC1B,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;YAE1C,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,IAAA,yBAAiB,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAa;QAC/B,MAAM,IAAI,CAAC,kBAAkB,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;YAC7C,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;gBACjC,MAAM,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAa;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG;gBACnC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC5B,OAAO,EAAE,IAAI;aACd,CAAC;YACF,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAE1C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7D,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,GAAG,IAAA,YAAG,EAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACzE,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,IAAI,CAAC,gBAAgB,GAAG,IAAA,YAAG,EAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,gBAAgB,GAAG,IAAA,YAAG,EAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACzE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAa;QAC5D,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,YAAY,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO;aACJ,YAAY,CAAC,gBAAgB,EAAE,aAAa,CAAC;aAC7C,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,aAAa,KAAK,eAAO,CAAC,YAAY,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;;AAzVH,oCA0VC;AAzVQ;;;;WAAO,MAAM;EAAT,CAAU;AAyWhB,KAAK,UAAU,gBAAgB,CACpC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAoB,EACjD,EACE,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,UAAU,EACV,SAAS,EAAE,aAAa,MACH,EAAE;IAEzB,QAAQ,KAAR,QAAQ,GAAK,2BAA2B,EAAC;IACzC,aAAa,KAAb,aAAa,GAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAC;IAEtC,MAAM,SAAS,GACb,aAAa,KAAK,KAAK;QACrB,CAAC,CAAC,MAAM,qBAAY,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;QACpE,CAAC,CAAC,aAAa,KAAK,KAAK;YACvB,CAAC,CAAC,MAAM,qBAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,MAAM,qBAAY,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,IAAI,YAAY,CAC3B,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,SAAS,CACV,CAAC;IAEF,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,EACE,OAAO,EACP,QAAQ,EACR,QAAQ,GAKT,EACD,EACE,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,UAAU,EACV,SAAS,EAAE,aAAa,MAQtB,EAAE;IAEN,MAAM,IAAI,GAAG,MAAM,gBAAgB,CACjC;QACE,OAAO;QACP,QAAQ;QACR,QAAQ;KACT,EACD;QACE,QAAQ;QACR,SAAS;QACT,kBAAkB;QAClB,GAAG;QACH,UAAU;QACV,SAAS,EAAE,aAAa;KACzB,CACF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAgB,gBAAgB,CAC9B,QAAgB,EAChB,KAAa,EACb,QAAgB;IAEhB,OAAO,IAAA,2BAAoB,EAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC","sourcesContent":["import { setTimeout } from \"timers/promises\";\n\nimport { makeTurnIntegrityKey } from \"../../../ice-server/src/turn/auth\";\nimport type { Candidate } from \"../candidate\";\nimport { TransactionFailed } from \"../exceptions\";\nimport { type Cancelable, cancelable, randomTransactionId } from \"../helper\";\nimport {\n  type Address,\n  Event,\n  EventDisposer,\n  type InterfaceAddresses,\n  TcpTransport,\n  type TlsConnectionOptions,\n  TlsTransport,\n  type Transport,\n  UdpTransport,\n  bufferReader,\n  debug,\n  int,\n} from \"../imports/common\";\nimport { classes, methods } from \"../stun/const\";\nimport { Message, paddingLength, parseMessage } from \"../stun/message\";\nimport { Transaction } from \"../stun/transaction\";\nimport {\n  decodeChannelData,\n  encodeChannelData,\n  isChannelData,\n  padTurnFrame,\n  splitTurnTcpFrames,\n} from \"./frame\";\n\nimport type { Protocol } from \"../types/model\";\n\nconst log = debug(\"werift-ice:packages/ice/src/turn/protocol.ts\");\n\nconst DEFAULT_CHANNEL_REFRESH_TIME = 500;\nconst DEFAULT_ALLOCATION_LIFETIME = 600;\nconst UDP_TRANSPORT = 0x11000000;\n\nfunction isStreamTransport(transport: Transport) {\n  return transport.type === \"tcp\" || transport.type === \"tls\";\n}\n\nexport class StunOverTurnProtocol implements Protocol {\n  static type = \"turn\";\n  readonly type = StunOverTurnProtocol.type;\n  localCandidate!: Candidate;\n  private disposer = new EventDisposer();\n  onRequestReceived: Event<[Message, Address, Buffer]> = new Event();\n  onDataReceived: Event<[Buffer]> = new Event();\n\n  constructor(public turn: TurnProtocol) {\n    turn.onData\n      .subscribe((data, addr) => {\n        this.handleStunMessage(data, addr);\n      })\n      .disposer(this.disposer);\n  }\n\n  private handleStunMessage = (data: Buffer, addr: Address) => {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        this.onDataReceived.execute(data);\n        return;\n      }\n\n      if (\n        message.messageClass === classes.RESPONSE ||\n        message.messageClass === classes.ERROR\n      ) {\n        const transaction = this.turn.transactions[message.transactionIdHex];\n        if (transaction) {\n          transaction.responseReceived(message, addr);\n        }\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onRequestReceived.execute(message, addr, data);\n      }\n    } catch (error) {\n      log(\"datagramReceived error\", error);\n    }\n  };\n\n  async request(\n    request: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    _retransmissions?: number,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    if (this.turn.transactions[request.transactionIdHex]) {\n      throw new Error(\"exist\");\n    }\n\n    if (integrityKey) {\n      request.addMessageIntegrity(integrityKey);\n      request.addFingerprint();\n    }\n\n    const transaction = new Transaction(\n      request,\n      addr,\n      this,\n      undefined,\n      onRequestSent,\n    );\n    this.turn.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } catch (e) {\n      throw e;\n    } finally {\n      delete this.turn.transactions[request.transactionIdHex];\n    }\n  }\n  async connectionMade() {}\n  async sendData(data: Buffer, addr: Address) {\n    await this.turn.sendData(data, addr);\n  }\n  async sendStun(message: Message, addr: Address) {\n    await this.turn.sendData(message.bytes, addr);\n  }\n  async close() {\n    this.disposer.dispose();\n    return this.turn.close();\n  }\n}\n\nexport class TurnProtocol implements Protocol {\n  static type = \"turn\";\n  readonly type = TurnProtocol.type;\n  readonly onData = new Event<[Buffer, Address]>();\n  onRequestReceived: Event<[Message, Address, Buffer]> = new Event();\n  onDataReceived: Event<[Buffer]> = new Event();\n  integrityKey?: Buffer;\n  nonce?: Buffer;\n  realm?: string;\n  relayedAddress!: Address;\n  mappedAddress!: Address;\n  localCandidate!: Candidate;\n  transactions: { [hexId: string]: Transaction } = {};\n  private refreshHandle?: Cancelable<void>;\n  private channelNumber = 0x4000;\n  private channelByAddr: {\n    [addr: string]: { number: number; address: Address };\n  } = {};\n  private addrByChannel: { [channel: number]: Address } = {};\n  /**sec */\n  private channelRefreshTime: number;\n  private channelBinding?: Promise<void>;\n  private channelRefreshAt = 0;\n  private tcpBuffer: Buffer = Buffer.alloc(0);\n  private permissionByAddr: { [addr: string]: boolean } = {};\n  private creatingPermission: Promise<void> = Promise.resolve();\n\n  constructor(\n    public server: Address,\n    public username: string,\n    public password: string,\n    public lifetime: number,\n    public transport: Transport,\n    public options: {\n      /**sec */\n      channelRefreshTime?: number;\n    } = {},\n  ) {\n    this.channelRefreshTime =\n      this.options.channelRefreshTime ?? DEFAULT_CHANNEL_REFRESH_TIME;\n  }\n\n  async connectionMade() {\n    this.transport.onData = (data, addr) => {\n      this.dataReceived(data, addr);\n    };\n\n    const request = new Message(methods.ALLOCATE, classes.REQUEST);\n    request\n      .setAttribute(\"LIFETIME\", this.lifetime)\n      .setAttribute(\"REQUESTED-TRANSPORT\", UDP_TRANSPORT);\n\n    const [response] = await this.requestWithRetry(request, this.server).catch(\n      (e) => {\n        log(\"connect error\", e);\n        throw e;\n      },\n    );\n    this.relayedAddress = response.getAttributeValue(\"XOR-RELAYED-ADDRESS\");\n    this.mappedAddress = response.getAttributeValue(\"XOR-MAPPED-ADDRESS\");\n    const exp = response.getAttributeValue(\"LIFETIME\");\n    log(\"connect\", this.relayedAddress, this.mappedAddress, { exp });\n\n    this.refresh(exp);\n  }\n\n  private handleChannelData(data: Buffer) {\n    const decoded = decodeChannelData(data);\n    const addr = decoded && this.addrByChannel[decoded.channelNumber];\n\n    if (addr && decoded) {\n      this.onData.execute(decoded.data, addr);\n    }\n  }\n\n  private handleSTUNMessage(data: Buffer, addr: Address) {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        throw new Error(\"not stun message\");\n      }\n\n      if (\n        message.messageClass === classes.RESPONSE ||\n        message.messageClass === classes.ERROR\n      ) {\n        const transaction = this.transactions[message.transactionIdHex];\n        if (transaction) {\n          transaction.responseReceived(message, addr);\n        }\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onData.execute(data, addr);\n      }\n\n      if (message.getAttributeValue(\"DATA\")) {\n        const buf: Buffer = message.getAttributeValue(\"DATA\");\n        const peerAddress =\n          message.getAttributeValue(\"XOR-PEER-ADDRESS\") ?? addr;\n        this.onData.execute(buf, peerAddress);\n      }\n    } catch (error) {\n      log(\"parse error\", data.toString());\n    }\n  }\n\n  private dataReceived(data: Buffer, addr: Address) {\n    const datagramReceived = (data: Buffer, addr: Address) => {\n      if (data.length >= 4 && isChannelData(data)) {\n        this.handleChannelData(data);\n      } else {\n        this.handleSTUNMessage(data, addr);\n      }\n    };\n\n    if (isStreamTransport(this.transport)) {\n      this.tcpBuffer = Buffer.concat([this.tcpBuffer, data]);\n      const { frames, rest } = splitTurnTcpFrames(this.tcpBuffer);\n      this.tcpBuffer = rest;\n      for (const frame of frames) {\n        datagramReceived(frame, addr);\n      }\n    } else {\n      datagramReceived(data, addr);\n    }\n  }\n\n  private async send(data: Buffer, addr: Address) {\n    if (this.transport.closed) {\n      return;\n    }\n\n    await this.transport.send(\n      isStreamTransport(this.transport) ? padTurnFrame(data) : data,\n      addr,\n    );\n  }\n\n  private async createPermission(peerAddress: Address) {\n    const request = new Message(methods.CREATE_PERMISSION, classes.REQUEST);\n    request\n      .setAttribute(\"XOR-PEER-ADDRESS\", peerAddress)\n      .setAttribute(\"USERNAME\", this.username)\n      .setAttribute(\"REALM\", this.realm)\n      .setAttribute(\"NONCE\", this.nonce);\n    await this.request(request, this.server).catch((e) => {\n      request;\n      throw e;\n    });\n  }\n\n  private refresh = (exp: number) => {\n    this.refreshHandle = cancelable<void>(async (_, __, onCancel) => {\n      let run = true;\n      onCancel.once(() => {\n        run = false;\n      });\n\n      while (run) {\n        // refresh before expire\n        const delay = (5 / 6) * exp * 1000;\n        log(\"refresh delay\", delay, { exp });\n        await setTimeout(delay);\n\n        const request = new Message(methods.REFRESH, classes.REQUEST);\n        request.setAttribute(\"LIFETIME\", exp);\n\n        try {\n          const [message] = await this.requestWithRetry(request, this.server);\n          exp = message.getAttributeValue(\"LIFETIME\");\n          log(\"refresh\", { exp });\n        } catch (error) {\n          log(\"refresh error\", error);\n        }\n      }\n    });\n  };\n\n  async request(\n    request: Message,\n    addr: Address,\n    _integrityKey?: Buffer,\n    _retransmissions?: number,\n    onRequestSent?: (attempt: number) => void,\n  ): Promise<[Message, Address]> {\n    if (this.transactions[request.transactionIdHex]) {\n      throw new Error(\"exist\");\n    }\n    if (this.integrityKey) {\n      request\n        .setAttribute(\"USERNAME\", this.username)\n        .setAttribute(\"REALM\", this.realm)\n        .setAttribute(\"NONCE\", this.nonce)\n        .addMessageIntegrity(this.integrityKey)\n        .addFingerprint();\n    }\n\n    const transaction = new Transaction(\n      request,\n      addr,\n      this,\n      undefined,\n      onRequestSent,\n    );\n    this.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } catch (e) {\n      throw e;\n    } finally {\n      delete this.transactions[request.transactionIdHex];\n    }\n  }\n\n  async requestWithRetry(\n    request: Message,\n    addr: Address,\n  ): Promise<[Message, Address]> {\n    let message: Message, address: Address;\n    try {\n      [message, address] = await this.request(request, addr);\n    } catch (error) {\n      if (error instanceof TransactionFailed == false) {\n        log(\"requestWithRetry error\", error);\n        throw error;\n      }\n\n      // resolve dns address\n      this.server = error.addr;\n\n      const [errorCode] = error.response.getAttributeValue(\"ERROR-CODE\");\n      const nonce = error.response.getAttributeValue(\"NONCE\");\n      const realm = error.response.getAttributeValue(\"REALM\");\n\n      if (\n        ((errorCode === 401 && realm) || (errorCode === 438 && this.realm)) &&\n        nonce\n      ) {\n        log(\"retry with nonce\", errorCode);\n\n        this.nonce = nonce;\n        if (errorCode === 401) {\n          this.realm = realm;\n        }\n        this.integrityKey = makeIntegrityKey(\n          this.username,\n          this.realm!,\n          this.password,\n        );\n\n        request.transactionId = randomTransactionId();\n        [message, address] = await this.request(request, this.server);\n      } else {\n        throw error;\n      }\n    }\n    return [message!, address!];\n  }\n\n  async sendData(data: Buffer, addr: Address) {\n    const channel = await this.getChannel(addr).catch((e) => {\n      return new Error(\"channelBind error\");\n    });\n\n    if (channel instanceof Error) {\n      await this.getPermission(addr);\n      const indicate = new Message(methods.SEND, classes.INDICATION)\n        .setAttribute(\"DATA\", data)\n        .setAttribute(\"XOR-PEER-ADDRESS\", addr);\n\n      await this.sendStun(indicate, this.server);\n      return;\n    }\n\n    await this.send(encodeChannelData(channel.number, data), this.server);\n  }\n\n  async getPermission(addr: Address) {\n    await this.creatingPermission;\n\n    const permitted = this.permissionByAddr[addr.join(\":\")];\n    if (!permitted) {\n      this.creatingPermission = this.createPermission(addr);\n      this.permissionByAddr[addr.join(\":\")] = true;\n      await this.creatingPermission.catch((e) => {\n        log(\"createPermission error\", e);\n        throw e;\n      });\n    }\n  }\n\n  async getChannel(addr: Address) {\n    if (this.channelBinding) {\n      await this.channelBinding;\n    }\n\n    let channel = this.channelByAddr[addr.join(\":\")];\n\n    if (!channel) {\n      this.channelByAddr[addr.join(\":\")] = {\n        number: this.channelNumber++,\n        address: addr,\n      };\n      channel = this.channelByAddr[addr.join(\":\")];\n      this.addrByChannel[channel.number] = addr;\n\n      this.channelBinding = this.channelBind(channel.number, addr);\n      await this.channelBinding.catch((e) => {\n        log(\"channelBind error\", e);\n        throw e;\n      });\n      this.channelRefreshAt = int(Date.now() / 1000) + this.channelRefreshTime;\n      this.channelBinding = undefined;\n      log(\"channelBind\", channel);\n    } else if (this.channelRefreshAt < int(Date.now() / 1000)) {\n      this.channelBinding = this.channelBind(channel.number, addr);\n      this.channelRefreshAt = int(Date.now() / 1000) + this.channelRefreshTime;\n      await this.channelBinding.catch((e) => {\n        log(\"channelBind error\", e);\n        throw e;\n      });\n      this.channelBinding = undefined;\n      log(\"channelBind refresh\", channel);\n    }\n    return channel;\n  }\n\n  private async channelBind(channelNumber: number, addr: Address) {\n    const request = new Message(methods.CHANNEL_BIND, classes.REQUEST);\n    request\n      .setAttribute(\"CHANNEL-NUMBER\", channelNumber)\n      .setAttribute(\"XOR-PEER-ADDRESS\", addr);\n    const [response] = await this.requestWithRetry(request, this.server);\n    if (response.messageMethod !== methods.CHANNEL_BIND) {\n      throw new Error(\"should be CHANNEL_BIND\");\n    }\n  }\n\n  async sendStun(message: Message, addr: Address) {\n    await this.send(message.bytes, addr);\n  }\n\n  async close() {\n    this.refreshHandle?.resolve?.();\n    await this.transport.close();\n  }\n}\n\nexport interface TurnClientConfig {\n  address: Address;\n  username: string;\n  password: string;\n}\nexport interface TurnClientOptions {\n  lifetime?: number;\n  ssl?: boolean;\n  transport?: \"udp\" | \"tcp\" | \"tls\";\n  tlsOptions?: TlsConnectionOptions;\n  portRange?: [number, number];\n  interfaceAddresses?: InterfaceAddresses;\n}\n\nexport async function createTurnClient(\n  { address, username, password }: TurnClientConfig,\n  {\n    lifetime,\n    portRange,\n    interfaceAddresses,\n    ssl,\n    tlsOptions,\n    transport: transportType,\n  }: TurnClientOptions = {},\n) {\n  lifetime ??= DEFAULT_ALLOCATION_LIFETIME;\n  transportType ??= ssl ? \"tls\" : \"udp\";\n\n  const transport =\n    transportType === \"udp\"\n      ? await UdpTransport.init(\"udp4\", { portRange, interfaceAddresses })\n      : transportType === \"tcp\"\n        ? await TcpTransport.init(address)\n        : await TlsTransport.init(address, tlsOptions);\n\n  const turn = new TurnProtocol(\n    address,\n    username,\n    password,\n    lifetime,\n    transport,\n  );\n\n  await turn.connectionMade();\n  return turn;\n}\n\nexport async function createStunOverTurnClient(\n  {\n    address,\n    username,\n    password,\n  }: {\n    address: Address;\n    username: string;\n    password: string;\n  },\n  {\n    lifetime,\n    portRange,\n    interfaceAddresses,\n    ssl,\n    tlsOptions,\n    transport: transportType,\n  }: {\n    lifetime?: number;\n    ssl?: boolean;\n    transport?: \"udp\" | \"tcp\" | \"tls\";\n    tlsOptions?: TlsConnectionOptions;\n    portRange?: [number, number];\n    interfaceAddresses?: InterfaceAddresses;\n  } = {},\n) {\n  const turn = await createTurnClient(\n    {\n      address,\n      username,\n      password,\n    },\n    {\n      lifetime,\n      portRange,\n      interfaceAddresses,\n      ssl,\n      tlsOptions,\n      transport: transportType,\n    },\n  );\n  const turnTransport = new StunOverTurnProtocol(turn);\n  return turnTransport;\n}\n\nexport function makeIntegrityKey(\n  username: string,\n  realm: string,\n  password: string,\n) {\n  return makeTurnIntegrityKey(username, realm, password);\n}\n"]}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../../ice/src/turn/protocol.ts"],"names":[],"mappings":";;;AAmgBA,4CA+BC;AAED,4DA2CC;AAED,4CAMC;AAvlBD,8CAA6C;AAE7C,4DAAyE;AAEzE,8CAAkD;AAClD,sCAA6E;AAC7E,8CAa2B;AAC3B,yCAAiD;AACjD,6CAAuE;AACvE,qDAI6B;AAE7B,mCAMiB;AAEjB,MAAM,GAAG,GAAG,IAAA,cAAK,EAAC,8CAA8C,CAAC,CAAC;AAElE,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AACxC,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,SAAS,iBAAiB,CAAC,SAAoB;IAC7C,OAAO,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,MAAa,oBAAoB;IAQ/B,YAAmB,IAAkB;QAAzB;;;;mBAAO,IAAI;WAAc;QAN5B;;;;mBAAO,oBAAoB,CAAC,IAAI;WAAC;QAC1C;;;;;WAA2B;QACnB;;;;mBAAW,IAAI,sBAAa,EAAE;WAAC;QACvC;;;;mBAAuD,IAAI,cAAK,EAAE;WAAC;QACnE;;;;mBAAkC,IAAI,cAAK,EAAE;WAAC;QAUtC;;;;mBAAoB,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE;gBAC1D,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;oBACnC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAClC,OAAO;oBACT,CAAC;oBAED,IACE,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;wBACzC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,EACtC,CAAC;wBACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;wBACrE,IAAI,WAAW,EAAE,CAAC;4BAChB,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY;gCACvC,CAAC,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;gCAC9C,CAAC,CAAC,OAAO,CAAC;4BACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,GAAG,CAAC,wDAAwD,CAAC,CAAC;gCAC9D,OAAO;4BACT,CAAC;4BACD,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;wBAC/C,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;wBACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;WAAC;QApCA,IAAI,CAAC,MAAM;aACR,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACxB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC;aACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAiCD,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,YAAqB,EACrB,wBAA6D,EAC7D,aAAyC;QAEzC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,wEAAwE;QACxE,qEAAqE;QACrE,6CAA6C;QAC7C,sEAAsE;QACtE,MAAM,YAAY,GAAG,MAAM,IAAA,mCAAqB,EAAC,IAAI,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAA,qCAAuB,EACrC,YAAY,EACZ,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE/D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,cAAc,KAAI,CAAC;IACzB,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;;AA9FH,oDA+FC;AA9FQ;;;;WAAO,MAAM;EAAT,CAAU;AAgGvB,MAAa,YAAY;IA2BvB,YACS,MAAe,EACf,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,SAAoB,EACpB,UAGH,EAAE;QARN;;;;mBAAO,MAAM;WAAS;QACtB;;;;mBAAO,QAAQ;WAAQ;QACvB;;;;mBAAO,QAAQ;WAAQ;QACvB;;;;mBAAO,QAAQ;WAAQ;QACvB;;;;mBAAO,SAAS;WAAW;QAC3B;;;;mBAAO,OAAO;WAGR;QAlCC;;;;mBAAO,YAAY,CAAC,IAAI;WAAC;QACzB;;;;mBAAS,IAAI,cAAK,EAAqB;WAAC;QACjD;;;;mBAAuD,IAAI,cAAK,EAAE;WAAC;QACnE;;;;mBAAkC,IAAI,cAAK,EAAE;WAAC;QAC9C;;;;;WAAsB;QACtB;;;;;WAAe;QACf;;;;;WAAe;QACf;;;;;WAAyB;QACzB;;;;;WAAwB;QACxB;;;;;WAA2B;QAC3B;;;;mBAAiD,EAAE;WAAC;QAC5C;;;;;WAAiC;QACjC;;;;mBAAgB,MAAM;WAAC;QACvB;;;;mBAEJ,EAAE;WAAC;QACC;;;;mBAAgD,EAAE;WAAC;QAC3D,SAAS;QACD;;;;;WAA2B;QAC3B;;;;;WAA+B;QAC/B;;;;mBAAmB,CAAC;WAAC;QACrB;;;;mBAAoB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;WAAC;QACpC;;;;mBAAgD,EAAE;WAAC;QACnD;;;;mBAAoC,OAAO,CAAC,OAAO,EAAE;WAAC;QAoItD;;;;mBAAU,CAAC,GAAW,EAAE,EAAE;gBAChC,IAAI,CAAC,aAAa,GAAG,IAAA,mBAAU,EAAO,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;oBAC9D,IAAI,GAAG,GAAG,IAAI,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;wBACjB,GAAG,GAAG,KAAK,CAAC;oBACd,CAAC,CAAC,CAAC;oBAEH,OAAO,GAAG,EAAE,CAAC;wBACX,wBAAwB;wBACxB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;wBACnC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBACrC,MAAM,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAC;wBAExB,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,OAAO,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;wBAC9D,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;wBAEtC,IAAI,CAAC;4BACH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;4BACpE,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;4BAC5C,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC1B,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAhJA,IAAI,CAAC,kBAAkB;YACrB,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACrC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,QAAQ,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;aACJ,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;aACvC,YAAY,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;QAEtD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CACxE,CAAC,CAAC,EAAE,EAAE;YACJ,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,CAAC;QACV,CAAC,CACF,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QACxE,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,OAAO,GAAG,IAAA,yBAAiB,EAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAElE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY,EAAE,IAAa;QACnD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,CAAC;YAED,IACE,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,QAAQ;gBACzC,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,KAAK,EACtC,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAChE,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY;wBACvC,CAAC,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;wBAC9C,CAAC,CAAC,OAAO,CAAC;oBACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,GAAG,CAAC,mDAAmD,CAAC,CAAC;wBACzD,OAAO;oBACT,CAAC;oBACD,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,eAAO,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAW,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBACtD,MAAM,WAAW,GACf,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,IAAa;QAC9C,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE;YACvD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,0BAAkB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAa;QAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACvB,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAA,oBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAC7D,IAAI,CACL,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAAoB;QACjD,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,iBAAiB,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO;aACJ,YAAY,CAAC,kBAAkB,EAAE,WAAW,CAAC;aAC7C,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;aACvC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;aACjC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACnD,OAAO,CAAC;YACR,MAAM,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IA6BD,KAAK,CAAC,OAAO,CACX,OAAgB,EAChB,IAAa,EACb,aAAsB,EACtB,wBAA6D,EAC7D,aAAyC;QAEzC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;iBACJ,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;iBACvC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;iBACjC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;iBACjC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC;iBACtC,cAAc,EAAE,CAAC;QACtB,CAAC;QAED,uEAAuE;QACvE,iFAAiF;QACjF,mEAAmE;QACnE,MAAM,YAAY,GAAG,MAAM,IAAA,mCAAqB,EAAC,IAAI,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAA,qCAAuB,EACrC,IAAI,CAAC,YAAY,EACjB,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;QAE1D,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAgB,EAChB,IAAa;QAEb,IAAI,OAAgB,EAAE,OAAgB,CAAC;QACvC,IAAI,CAAC;YACH,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAiB,IAAI,KAAK,EAAE,CAAC;gBAChD,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YAEzB,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAExD,IACE,CAAC,CAAC,SAAS,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnE,KAAK,EACL,CAAC;gBACD,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAEnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;oBACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAClC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAM,EACX,IAAI,CAAC,QAAQ,CACd,CAAC;gBAEF,OAAO,CAAC,aAAa,GAAG,IAAA,4BAAmB,GAAE,CAAC;gBAC9C,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,CAAC,OAAQ,EAAE,OAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACtD,OAAO,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,IAAI,EAAE,eAAO,CAAC,UAAU,CAAC;iBAC3D,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;iBAC1B,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;YAE1C,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,IAAA,yBAAiB,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAa;QAC/B,MAAM,IAAI,CAAC,kBAAkB,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;YAC7C,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;gBACjC,MAAM,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAa;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG;gBACnC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC5B,OAAO,EAAE,IAAI;aACd,CAAC;YACF,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAE1C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7D,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,GAAG,IAAA,YAAG,EAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACzE,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,IAAI,CAAC,gBAAgB,GAAG,IAAA,YAAG,EAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,gBAAgB,GAAG,IAAA,YAAG,EAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACzE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,IAAa;QAC5D,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,eAAO,CAAC,YAAY,EAAE,eAAO,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO;aACJ,YAAY,CAAC,gBAAgB,EAAE,aAAa,CAAC;aAC7C,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,aAAa,KAAK,eAAO,CAAC,YAAY,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,IAAa;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;;AAnWH,oCAoWC;AAnWQ;;;;WAAO,MAAM;EAAT,CAAU;AAmXhB,KAAK,UAAU,gBAAgB,CACpC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAoB,EACjD,EACE,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,UAAU,EACV,SAAS,EAAE,aAAa,MACH,EAAE;IAEzB,QAAQ,KAAR,QAAQ,GAAK,2BAA2B,EAAC;IACzC,aAAa,KAAb,aAAa,GAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAC;IAEtC,MAAM,SAAS,GACb,aAAa,KAAK,KAAK;QACrB,CAAC,CAAC,MAAM,qBAAY,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;QACpE,CAAC,CAAC,aAAa,KAAK,KAAK;YACvB,CAAC,CAAC,MAAM,qBAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,MAAM,qBAAY,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,IAAI,YAAY,CAC3B,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,SAAS,CACV,CAAC;IAEF,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,EACE,OAAO,EACP,QAAQ,EACR,QAAQ,GAKT,EACD,EACE,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,GAAG,EACH,UAAU,EACV,SAAS,EAAE,aAAa,MAQtB,EAAE;IAEN,MAAM,IAAI,GAAG,MAAM,gBAAgB,CACjC;QACE,OAAO;QACP,QAAQ;QACR,QAAQ;KACT,EACD;QACE,QAAQ;QACR,SAAS;QACT,kBAAkB;QAClB,GAAG;QACH,UAAU;QACV,SAAS,EAAE,aAAa;KACzB,CACF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAgB,gBAAgB,CAC9B,QAAgB,EAChB,KAAa,EACb,QAAgB;IAEhB,OAAO,IAAA,2BAAoB,EAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC","sourcesContent":["import { setTimeout } from \"timers/promises\";\n\nimport { makeTurnIntegrityKey } from \"../../../ice-server/src/turn/auth\";\nimport type { Candidate } from \"../candidate\";\nimport { TransactionFailed } from \"../exceptions\";\nimport { type Cancelable, cancelable, randomTransactionId } from \"../helper\";\nimport {\n  type Address,\n  Event,\n  EventDisposer,\n  type InterfaceAddresses,\n  TcpTransport,\n  type TlsConnectionOptions,\n  TlsTransport,\n  type Transport,\n  UdpTransport,\n  bufferReader,\n  debug,\n  int,\n} from \"../imports/common\";\nimport { classes, methods } from \"../stun/const\";\nimport { Message, paddingLength, parseMessage } from \"../stun/message\";\nimport {\n  Transaction,\n  buildTransactionOptions,\n  resolveRequestAddress,\n} from \"../stun/transaction\";\nimport type { Protocol, TransactionRequestOptions } from \"../types/model\";\nimport {\n  decodeChannelData,\n  encodeChannelData,\n  isChannelData,\n  padTurnFrame,\n  splitTurnTcpFrames,\n} from \"./frame\";\n\nconst log = debug(\"werift-ice:packages/ice/src/turn/protocol.ts\");\n\nconst DEFAULT_CHANNEL_REFRESH_TIME = 500;\nconst DEFAULT_ALLOCATION_LIFETIME = 600;\nconst UDP_TRANSPORT = 0x11000000;\n\nfunction isStreamTransport(transport: Transport) {\n  return transport.type === \"tcp\" || transport.type === \"tls\";\n}\n\nexport class StunOverTurnProtocol implements Protocol {\n  static type = \"turn\";\n  readonly type = StunOverTurnProtocol.type;\n  localCandidate!: Candidate;\n  private disposer = new EventDisposer();\n  onRequestReceived: Event<[Message, Address, Buffer]> = new Event();\n  onDataReceived: Event<[Buffer]> = new Event();\n\n  constructor(public turn: TurnProtocol) {\n    turn.onData\n      .subscribe((data, addr) => {\n        this.handleStunMessage(data, addr);\n      })\n      .disposer(this.disposer);\n  }\n\n  private handleStunMessage = (data: Buffer, addr: Address) => {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        this.onDataReceived.execute(data);\n        return;\n      }\n\n      if (\n        message.messageClass === classes.RESPONSE ||\n        message.messageClass === classes.ERROR\n      ) {\n        const transaction = this.turn.transactions[message.transactionIdHex];\n        if (transaction) {\n          const verified = transaction.integrityKey\n            ? parseMessage(data, transaction.integrityKey)\n            : message;\n          if (!verified) {\n            log(\"STUN over TURN response failed MESSAGE-INTEGRITY check\");\n            return;\n          }\n          transaction.responseReceived(verified, addr);\n        }\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onRequestReceived.execute(message, addr, data);\n      }\n    } catch (error) {\n      log(\"datagramReceived error\", error);\n    }\n  };\n\n  async request(\n    request: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissionsOrOptions?: number | TransactionRequestOptions,\n    onRequestSent?: (attempt: number) => void,\n  ) {\n    if (this.turn.transactions[request.transactionIdHex]) {\n      throw new Error(\"exist\");\n    }\n\n    if (integrityKey) {\n      request.addMessageIntegrity(integrityKey);\n      request.addFingerprint();\n    }\n\n    // Peer-facing STUN over TURN must honor retransmissions/responseTimeout\n    // (consent uses retransmissions: 0). Do not confuse with TURN server\n    // allocation/refresh policy on TurnProtocol.\n    // Peer addresses are already IPs from candidates; resolve for safety.\n    const resolvedAddr = await resolveRequestAddress(addr);\n    const options = buildTransactionOptions(\n      integrityKey,\n      retransmissionsOrOptions,\n      onRequestSent,\n    );\n    const transaction = new Transaction(request, resolvedAddr, this, options);\n    this.turn.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } catch (e) {\n      throw e;\n    } finally {\n      delete this.turn.transactions[request.transactionIdHex];\n    }\n  }\n  async connectionMade() {}\n  async sendData(data: Buffer, addr: Address) {\n    await this.turn.sendData(data, addr);\n  }\n  async sendStun(message: Message, addr: Address) {\n    await this.turn.sendData(message.bytes, addr);\n  }\n  async close() {\n    this.disposer.dispose();\n    return this.turn.close();\n  }\n}\n\nexport class TurnProtocol implements Protocol {\n  static type = \"turn\";\n  readonly type = TurnProtocol.type;\n  readonly onData = new Event<[Buffer, Address]>();\n  onRequestReceived: Event<[Message, Address, Buffer]> = new Event();\n  onDataReceived: Event<[Buffer]> = new Event();\n  integrityKey?: Buffer;\n  nonce?: Buffer;\n  realm?: string;\n  relayedAddress!: Address;\n  mappedAddress!: Address;\n  localCandidate!: Candidate;\n  transactions: { [hexId: string]: Transaction } = {};\n  private refreshHandle?: Cancelable<void>;\n  private channelNumber = 0x4000;\n  private channelByAddr: {\n    [addr: string]: { number: number; address: Address };\n  } = {};\n  private addrByChannel: { [channel: number]: Address } = {};\n  /**sec */\n  private channelRefreshTime: number;\n  private channelBinding?: Promise<void>;\n  private channelRefreshAt = 0;\n  private tcpBuffer: Buffer = Buffer.alloc(0);\n  private permissionByAddr: { [addr: string]: boolean } = {};\n  private creatingPermission: Promise<void> = Promise.resolve();\n\n  constructor(\n    public server: Address,\n    public username: string,\n    public password: string,\n    public lifetime: number,\n    public transport: Transport,\n    public options: {\n      /**sec */\n      channelRefreshTime?: number;\n    } = {},\n  ) {\n    this.channelRefreshTime =\n      this.options.channelRefreshTime ?? DEFAULT_CHANNEL_REFRESH_TIME;\n  }\n\n  async connectionMade() {\n    this.transport.onData = (data, addr) => {\n      this.dataReceived(data, addr);\n    };\n\n    const request = new Message(methods.ALLOCATE, classes.REQUEST);\n    request\n      .setAttribute(\"LIFETIME\", this.lifetime)\n      .setAttribute(\"REQUESTED-TRANSPORT\", UDP_TRANSPORT);\n\n    const [response] = await this.requestWithRetry(request, this.server).catch(\n      (e) => {\n        log(\"connect error\", e);\n        throw e;\n      },\n    );\n    this.relayedAddress = response.getAttributeValue(\"XOR-RELAYED-ADDRESS\");\n    this.mappedAddress = response.getAttributeValue(\"XOR-MAPPED-ADDRESS\");\n    const exp = response.getAttributeValue(\"LIFETIME\");\n    log(\"connect\", this.relayedAddress, this.mappedAddress, { exp });\n\n    this.refresh(exp);\n  }\n\n  private handleChannelData(data: Buffer) {\n    const decoded = decodeChannelData(data);\n    const addr = decoded && this.addrByChannel[decoded.channelNumber];\n\n    if (addr && decoded) {\n      this.onData.execute(decoded.data, addr);\n    }\n  }\n\n  private handleSTUNMessage(data: Buffer, addr: Address) {\n    try {\n      const message = parseMessage(data);\n      if (!message) {\n        throw new Error(\"not stun message\");\n      }\n\n      if (\n        message.messageClass === classes.RESPONSE ||\n        message.messageClass === classes.ERROR\n      ) {\n        const transaction = this.transactions[message.transactionIdHex];\n        if (transaction) {\n          const verified = transaction.integrityKey\n            ? parseMessage(data, transaction.integrityKey)\n            : message;\n          if (!verified) {\n            log(\"TURN STUN response failed MESSAGE-INTEGRITY check\");\n            return;\n          }\n          transaction.responseReceived(verified, addr);\n        }\n      } else if (message.messageClass === classes.REQUEST) {\n        this.onData.execute(data, addr);\n      }\n\n      if (message.getAttributeValue(\"DATA\")) {\n        const buf: Buffer = message.getAttributeValue(\"DATA\");\n        const peerAddress =\n          message.getAttributeValue(\"XOR-PEER-ADDRESS\") ?? addr;\n        this.onData.execute(buf, peerAddress);\n      }\n    } catch (error) {\n      log(\"parse error\", data.toString());\n    }\n  }\n\n  private dataReceived(data: Buffer, addr: Address) {\n    const datagramReceived = (data: Buffer, addr: Address) => {\n      if (data.length >= 4 && isChannelData(data)) {\n        this.handleChannelData(data);\n      } else {\n        this.handleSTUNMessage(data, addr);\n      }\n    };\n\n    if (isStreamTransport(this.transport)) {\n      this.tcpBuffer = Buffer.concat([this.tcpBuffer, data]);\n      const { frames, rest } = splitTurnTcpFrames(this.tcpBuffer);\n      this.tcpBuffer = rest;\n      for (const frame of frames) {\n        datagramReceived(frame, addr);\n      }\n    } else {\n      datagramReceived(data, addr);\n    }\n  }\n\n  private async send(data: Buffer, addr: Address) {\n    if (this.transport.closed) {\n      return;\n    }\n\n    await this.transport.send(\n      isStreamTransport(this.transport) ? padTurnFrame(data) : data,\n      addr,\n    );\n  }\n\n  private async createPermission(peerAddress: Address) {\n    const request = new Message(methods.CREATE_PERMISSION, classes.REQUEST);\n    request\n      .setAttribute(\"XOR-PEER-ADDRESS\", peerAddress)\n      .setAttribute(\"USERNAME\", this.username)\n      .setAttribute(\"REALM\", this.realm)\n      .setAttribute(\"NONCE\", this.nonce);\n    await this.request(request, this.server).catch((e) => {\n      request;\n      throw e;\n    });\n  }\n\n  private refresh = (exp: number) => {\n    this.refreshHandle = cancelable<void>(async (_, __, onCancel) => {\n      let run = true;\n      onCancel.once(() => {\n        run = false;\n      });\n\n      while (run) {\n        // refresh before expire\n        const delay = (5 / 6) * exp * 1000;\n        log(\"refresh delay\", delay, { exp });\n        await setTimeout(delay);\n\n        const request = new Message(methods.REFRESH, classes.REQUEST);\n        request.setAttribute(\"LIFETIME\", exp);\n\n        try {\n          const [message] = await this.requestWithRetry(request, this.server);\n          exp = message.getAttributeValue(\"LIFETIME\");\n          log(\"refresh\", { exp });\n        } catch (error) {\n          log(\"refresh error\", error);\n        }\n      }\n    });\n  };\n\n  async request(\n    request: Message,\n    addr: Address,\n    _integrityKey?: Buffer,\n    retransmissionsOrOptions?: number | TransactionRequestOptions,\n    onRequestSent?: (attempt: number) => void,\n  ): Promise<[Message, Address]> {\n    if (this.transactions[request.transactionIdHex]) {\n      throw new Error(\"exist\");\n    }\n    if (this.integrityKey) {\n      request\n        .setAttribute(\"USERNAME\", this.username)\n        .setAttribute(\"REALM\", this.realm)\n        .setAttribute(\"NONCE\", this.nonce)\n        .addMessageIntegrity(this.integrityKey)\n        .addFingerprint();\n    }\n\n    // TURN server allocation/refresh uses default STUN retry policy unless\n    // callers pass explicit options. Peer consent goes through StunOverTurnProtocol.\n    // Prefer the TURN session integrity key for response verification.\n    const resolvedAddr = await resolveRequestAddress(addr);\n    const options = buildTransactionOptions(\n      this.integrityKey,\n      retransmissionsOrOptions,\n      onRequestSent,\n    );\n    const transaction = new Transaction(request, resolvedAddr, this, options);\n    this.transactions[request.transactionIdHex] = transaction;\n\n    try {\n      return await transaction.run();\n    } catch (e) {\n      throw e;\n    } finally {\n      delete this.transactions[request.transactionIdHex];\n    }\n  }\n\n  async requestWithRetry(\n    request: Message,\n    addr: Address,\n  ): Promise<[Message, Address]> {\n    let message: Message, address: Address;\n    try {\n      [message, address] = await this.request(request, addr);\n    } catch (error) {\n      if (error instanceof TransactionFailed == false) {\n        log(\"requestWithRetry error\", error);\n        throw error;\n      }\n\n      // resolve dns address\n      this.server = error.addr;\n\n      const [errorCode] = error.response.getAttributeValue(\"ERROR-CODE\");\n      const nonce = error.response.getAttributeValue(\"NONCE\");\n      const realm = error.response.getAttributeValue(\"REALM\");\n\n      if (\n        ((errorCode === 401 && realm) || (errorCode === 438 && this.realm)) &&\n        nonce\n      ) {\n        log(\"retry with nonce\", errorCode);\n\n        this.nonce = nonce;\n        if (errorCode === 401) {\n          this.realm = realm;\n        }\n        this.integrityKey = makeIntegrityKey(\n          this.username,\n          this.realm!,\n          this.password,\n        );\n\n        request.transactionId = randomTransactionId();\n        [message, address] = await this.request(request, this.server);\n      } else {\n        throw error;\n      }\n    }\n    return [message!, address!];\n  }\n\n  async sendData(data: Buffer, addr: Address) {\n    const channel = await this.getChannel(addr).catch((e) => {\n      return new Error(\"channelBind error\");\n    });\n\n    if (channel instanceof Error) {\n      await this.getPermission(addr);\n      const indicate = new Message(methods.SEND, classes.INDICATION)\n        .setAttribute(\"DATA\", data)\n        .setAttribute(\"XOR-PEER-ADDRESS\", addr);\n\n      await this.sendStun(indicate, this.server);\n      return;\n    }\n\n    await this.send(encodeChannelData(channel.number, data), this.server);\n  }\n\n  async getPermission(addr: Address) {\n    await this.creatingPermission;\n\n    const permitted = this.permissionByAddr[addr.join(\":\")];\n    if (!permitted) {\n      this.creatingPermission = this.createPermission(addr);\n      this.permissionByAddr[addr.join(\":\")] = true;\n      await this.creatingPermission.catch((e) => {\n        log(\"createPermission error\", e);\n        throw e;\n      });\n    }\n  }\n\n  async getChannel(addr: Address) {\n    if (this.channelBinding) {\n      await this.channelBinding;\n    }\n\n    let channel = this.channelByAddr[addr.join(\":\")];\n\n    if (!channel) {\n      this.channelByAddr[addr.join(\":\")] = {\n        number: this.channelNumber++,\n        address: addr,\n      };\n      channel = this.channelByAddr[addr.join(\":\")];\n      this.addrByChannel[channel.number] = addr;\n\n      this.channelBinding = this.channelBind(channel.number, addr);\n      await this.channelBinding.catch((e) => {\n        log(\"channelBind error\", e);\n        throw e;\n      });\n      this.channelRefreshAt = int(Date.now() / 1000) + this.channelRefreshTime;\n      this.channelBinding = undefined;\n      log(\"channelBind\", channel);\n    } else if (this.channelRefreshAt < int(Date.now() / 1000)) {\n      this.channelBinding = this.channelBind(channel.number, addr);\n      this.channelRefreshAt = int(Date.now() / 1000) + this.channelRefreshTime;\n      await this.channelBinding.catch((e) => {\n        log(\"channelBind error\", e);\n        throw e;\n      });\n      this.channelBinding = undefined;\n      log(\"channelBind refresh\", channel);\n    }\n    return channel;\n  }\n\n  private async channelBind(channelNumber: number, addr: Address) {\n    const request = new Message(methods.CHANNEL_BIND, classes.REQUEST);\n    request\n      .setAttribute(\"CHANNEL-NUMBER\", channelNumber)\n      .setAttribute(\"XOR-PEER-ADDRESS\", addr);\n    const [response] = await this.requestWithRetry(request, this.server);\n    if (response.messageMethod !== methods.CHANNEL_BIND) {\n      throw new Error(\"should be CHANNEL_BIND\");\n    }\n  }\n\n  async sendStun(message: Message, addr: Address) {\n    await this.send(message.bytes, addr);\n  }\n\n  async close() {\n    this.refreshHandle?.resolve?.();\n    await this.transport.close();\n  }\n}\n\nexport interface TurnClientConfig {\n  address: Address;\n  username: string;\n  password: string;\n}\nexport interface TurnClientOptions {\n  lifetime?: number;\n  ssl?: boolean;\n  transport?: \"udp\" | \"tcp\" | \"tls\";\n  tlsOptions?: TlsConnectionOptions;\n  portRange?: [number, number];\n  interfaceAddresses?: InterfaceAddresses;\n}\n\nexport async function createTurnClient(\n  { address, username, password }: TurnClientConfig,\n  {\n    lifetime,\n    portRange,\n    interfaceAddresses,\n    ssl,\n    tlsOptions,\n    transport: transportType,\n  }: TurnClientOptions = {},\n) {\n  lifetime ??= DEFAULT_ALLOCATION_LIFETIME;\n  transportType ??= ssl ? \"tls\" : \"udp\";\n\n  const transport =\n    transportType === \"udp\"\n      ? await UdpTransport.init(\"udp4\", { portRange, interfaceAddresses })\n      : transportType === \"tcp\"\n        ? await TcpTransport.init(address)\n        : await TlsTransport.init(address, tlsOptions);\n\n  const turn = new TurnProtocol(\n    address,\n    username,\n    password,\n    lifetime,\n    transport,\n  );\n\n  await turn.connectionMade();\n  return turn;\n}\n\nexport async function createStunOverTurnClient(\n  {\n    address,\n    username,\n    password,\n  }: {\n    address: Address;\n    username: string;\n    password: string;\n  },\n  {\n    lifetime,\n    portRange,\n    interfaceAddresses,\n    ssl,\n    tlsOptions,\n    transport: transportType,\n  }: {\n    lifetime?: number;\n    ssl?: boolean;\n    transport?: \"udp\" | \"tcp\" | \"tls\";\n    tlsOptions?: TlsConnectionOptions;\n    portRange?: [number, number];\n    interfaceAddresses?: InterfaceAddresses;\n  } = {},\n) {\n  const turn = await createTurnClient(\n    {\n      address,\n      username,\n      password,\n    },\n    {\n      lifetime,\n      portRange,\n      interfaceAddresses,\n      ssl,\n      tlsOptions,\n      transport: transportType,\n    },\n  );\n  const turnTransport = new StunOverTurnProtocol(turn);\n  return turnTransport;\n}\n\nexport function makeIntegrityKey(\n  username: string,\n  realm: string,\n  password: string,\n) {\n  return makeTurnIntegrityKey(username, realm, password);\n}\n"]}

package/lib/ice/src/types/model.d.ts

@@ -1,11 +1,37 @@
 import type { Candidate } from "../candidate";
 import type { Address, Event } from "../imports/common";
 import type { Message } from "../stun/message";
+/**
+ * Options for a STUN transaction / Protocol.request.
+ * Retransmission count and response wait deadline are independent
+ * so consent freshness (retransmissions: 0, longer timeout) can be expressed.
+ */
+export interface TransactionRequestOptions {
+    /** Number of retransmissions after the initial send. 0 = send once. */
+    retransmissions?: number;
+    /**
+     * Initial response wait deadline in milliseconds.
+     * Doubled after each retransmission when retransmissions > 0.
+     * Defaults to RETRY_RTO when omitted.
+     */
+    responseTimeout?: number;
+    /** Called for each wire send (attempt 0 is the initial transmission). */
+    onRequestSent?: (attempt: number) => void;
+    /** Abort the outstanding transaction (e.g. consent lifecycle teardown). */
+    signal?: AbortSignal;
+    /**
+     * When set, responses must include MESSAGE-INTEGRITY and pass HMAC
+     * verification (protocol re-parses the wire bytes with this key; the
+     * transaction also rejects unsigned Messages as defense-in-depth).
+     * Unsigned or forged responses must not complete the transaction.
+     */
+    integrityKey?: Buffer;
+}
 export interface Protocol {
     type: string;
     onRequestReceived: Event<[Message, Address, Buffer]>;
     onDataReceived: Event<[Buffer]>;
-    request: (message: Message, addr: Address, integrityKey?: Buffer, retransmissions?: any, onRequestSent?: (attempt: number) => void) => Promise<[Message, Address]>;
+    request: (message: Message, addr: Address, integrityKey?: Buffer, retransmissionsOrOptions?: number | TransactionRequestOptions, onRequestSent?: (attempt: number) => void) => Promise<[Message, Address]>;
     close: () => Promise<void>;
     connectionMade: (...args: any) => Promise<void>;
     sendStun: (message: Message, addr: Address) => Promise<void>;

package/lib/ice/src/types/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../../../ice/src/types/model.ts"],"names":[],"mappings":"","sourcesContent":["import type { Candidate } from \"../candidate\";\nimport type { Address, Event } from \"../imports/common\";\nimport type { Message } from \"../stun/message\";\n\nexport interface Protocol {\n  type: string;\n  onRequestReceived: Event<[Message, Address, Buffer]>;\n  onDataReceived: Event<[Buffer]>;\n  request: (\n    message: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissions?: any,\n    onRequestSent?: (attempt: number) => void,\n  ) => Promise<[Message, Address]>;\n  close: () => Promise<void>;\n  connectionMade: (...args: any) => Promise<void>;\n  sendStun: (message: Message, addr: Address) => Promise<void>;\n  sendData: (data: Buffer, addr: Address) => Promise<void>;\n  localCandidate?: Candidate;\n  sentMessage?: Message;\n  responseAddr?: Address;\n  responseMessage?: string;\n  localIp?: string;\n}\n"]}
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../../../ice/src/types/model.ts"],"names":[],"mappings":"","sourcesContent":["import type { Candidate } from \"../candidate\";\nimport type { Address, Event } from \"../imports/common\";\nimport type { Message } from \"../stun/message\";\n\n/**\n * Options for a STUN transaction / Protocol.request.\n * Retransmission count and response wait deadline are independent\n * so consent freshness (retransmissions: 0, longer timeout) can be expressed.\n */\nexport interface TransactionRequestOptions {\n  /** Number of retransmissions after the initial send. 0 = send once. */\n  retransmissions?: number;\n  /**\n   * Initial response wait deadline in milliseconds.\n   * Doubled after each retransmission when retransmissions > 0.\n   * Defaults to RETRY_RTO when omitted.\n   */\n  responseTimeout?: number;\n  /** Called for each wire send (attempt 0 is the initial transmission). */\n  onRequestSent?: (attempt: number) => void;\n  /** Abort the outstanding transaction (e.g. consent lifecycle teardown). */\n  signal?: AbortSignal;\n  /**\n   * When set, responses must include MESSAGE-INTEGRITY and pass HMAC\n   * verification (protocol re-parses the wire bytes with this key; the\n   * transaction also rejects unsigned Messages as defense-in-depth).\n   * Unsigned or forged responses must not complete the transaction.\n   */\n  integrityKey?: Buffer;\n}\n\nexport interface Protocol {\n  type: string;\n  onRequestReceived: Event<[Message, Address, Buffer]>;\n  onDataReceived: Event<[Buffer]>;\n  request: (\n    message: Message,\n    addr: Address,\n    integrityKey?: Buffer,\n    retransmissionsOrOptions?: number | TransactionRequestOptions,\n    onRequestSent?: (attempt: number) => void,\n  ) => Promise<[Message, Address]>;\n  close: () => Promise<void>;\n  connectionMade: (...args: any) => Promise<void>;\n  sendStun: (message: Message, addr: Address) => Promise<void>;\n  sendData: (data: Buffer, addr: Address) => Promise<void>;\n  localCandidate?: Candidate;\n  sentMessage?: Message;\n  responseAddr?: Address;\n  responseMessage?: string;\n  localIp?: string;\n}\n"]}

package/lib/ice-server/src/stun/message.js

@@ -15,6 +15,9 @@ function parseMessage(data, integrityKey) {
     const transactionId = Buffer.from(data.slice(const_1.HEADER_LENGTH - 12, const_1.HEADER_LENGTH));
     const attributeRepository = new attributes_1.AttributeRepository();
     const rawAttributes = [];
+    // When integrityKey is provided, MESSAGE-INTEGRITY must be present and valid
+    // (RFC 5389 short-term credentials / RFC 7675 authenticated consent responses).
+    let messageIntegrityVerified = false;
     for (let pos = const_1.HEADER_LENGTH; pos < data.length;) {
         if (pos + 4 > data.length) {
             return undefined;
@@ -57,6 +60,7 @@ function parseMessage(data, integrityKey) {
                 if (!integrity.equals(expected)) {
                     return undefined;
                 }
+                messageIntegrityVerified = true;
             }
         }
         else {
@@ -68,6 +72,10 @@ function parseMessage(data, integrityKey) {
         }
         pos = valueEnd + padLen;
     }
+    // Reject unsigned messages when the caller required authentication.
+    if (integrityKey && !messageIntegrityVerified) {
+        return undefined;
+    }
     return new Message(messageType & 0x3eef, messageType & 0x0110, transactionId, attributeRepository.getAttributes(), rawAttributes);
 }
 class Message extends attributes_1.AttributeRepository {

package/lib/ice-server/src/stun/message.js.map

@@ -1 +1 @@
-{"version":3,"file":"message.js","sourceRoot":"","sources":["../../../../../ice-server/src/stun/message.ts"],"names":[],"mappings":";;;AAyBA,oCAmFC;AA0ID,sCAGC;AAzPD,mCAAiD;AAEjD,6CAA4C;AAE5C,6CASsB;AACtB,mCASiB;AAEjB,SAAgB,YAAY,CAC1B,IAAY,EACZ,YAAqB;IAErB,IAAI,CAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,IAAI,CAAC,KAAK,CAAC,qBAAa,GAAG,EAAE,EAAE,qBAAa,CAAC,CAC9C,CAAC;IAEF,MAAM,mBAAmB,GAAG,IAAI,gCAAmB,EAAE,CAAC;IACtD,MAAM,aAAa,GAAmB,EAAE,CAAC;IAEzC,KAAK,IAAI,GAAG,GAAG,qBAAa,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;QAClD,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;QAEtC,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,+BAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,QAAQ,EAAE,AAAD,EAAG,UAAU,CAAC,GAAG,SAAS,CAAC;YAC7C,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK;oBACH,UAAU,CAAC,IAAI,KAAK,6BAAgB,CAAC,IAAI;wBACvC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC;wBACpC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,mBAAmB,CAAC,YAAY,CAAC,QAAwB,EAAE,KAAK,CAAC,CAAC;YAElE,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC3D,IACE,mBAAmB,CAAC,iBAAiB,CAAC,aAAa,CAAC,KAAK,WAAW,EACpE,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,KAAK,mBAAmB,IAAI,YAAY,EAAE,CAAC;gBAC5D,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;gBACrE,MAAM,QAAQ,GACZ,mBAAmB,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;gBAC7D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChC,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,OAAO,CAChB,WAAW,GAAG,MAAM,EACpB,WAAW,GAAG,MAAM,EACpB,aAAa,EACb,mBAAmB,CAAC,aAAa,EAAE,EACnC,aAAa,CACd,CAAC;AACJ,CAAC;AAED,MAAa,OAAQ,SAAQ,gCAAmB;IAC9C,YACS,aAAsB,EACtB,YAAqB,EACrB,gBAAwB,IAAA,oBAAW,EAAC,EAAE,CAAC,EAC9C,aAA8B,EAAE,EACzB,gBAAgC,EAAE;QAEzC,KAAK,CAAC,UAAU,CAAC,CAAC;QANlB;;;;mBAAO,aAAa;WAAS;QAC7B;;;;mBAAO,YAAY;WAAS;QAC5B;;;;mBAAO,aAAa;WAA0B;QAE9C;;;;mBAAO,aAAa;WAAqB;IAG3C,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,IAAI;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;aAC/B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,kBAAkB,CAAC,IAAY,EAAE,KAAa;QAC5C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK;QACP,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CACxB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1C,kBAAkB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CACpD,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,cAAM,EAAE,CAAC,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,mBAAmB,CAAC,GAAW;QAC7B,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,qBAAa,GAAG,wBAAgB,CACrD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAA,mBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACvD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAY,oBAAoB;QAC9B,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,CAAC,QAAQ,EAAE,AAAD,EAAG,QAAQ,CAAC,GAAG,+BAAkB,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,KAAK,GACT,QAAQ,CAAC,IAAI,KAAK,2BAAc,CAAC,IAAI;gBACnC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;gBACzC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,UAAU,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACpC,CAAC,CAAC,CACJ,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAlGD,0BAkGC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,EACJ,IAAI,CAAC,MAAM,GAAG,qBAAa,GAAG,0BAAkB,CACjD,CAAC;IACF,OAAO,CAAC,IAAA,WAAK,EAAC,SAAS,CAAC,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,EACJ,IAAI,CAAC,MAAM,GAAG,qBAAa,GAAG,wBAAgB,CAC/C,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAA,mBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACvD,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc;IAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC;IACxB,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;AACnC,CAAC","sourcesContent":["import { createHmac, randomBytes } from \"crypto\";\n\nimport { crc32 } from \"../../../common/src\";\n\nimport {\n  ATTRIBUTES_BY_NAME,\n  ATTRIBUTES_BY_TYPE,\n  type AttributeKey,\n  type AttributePair,\n  AttributeRepository,\n  type RawAttribute,\n  packXorAddress,\n  unpackXorAddress,\n} from \"./attributes\";\nimport {\n  COOKIE,\n  FINGERPRINT_LENGTH,\n  FINGERPRINT_XOR,\n  HEADER_LENGTH,\n  INTEGRITY_LENGTH,\n  type classes,\n  isStunMessage,\n  type methods,\n} from \"./const\";\n\nexport function parseMessage(\n  data: Buffer,\n  integrityKey?: Buffer,\n): Message | undefined {\n  if (!isStunMessage(data)) {\n    return undefined;\n  }\n\n  const messageType = data.readUInt16BE(0);\n  const transactionId = Buffer.from(\n    data.slice(HEADER_LENGTH - 12, HEADER_LENGTH),\n  );\n\n  const attributeRepository = new AttributeRepository();\n  const rawAttributes: RawAttribute[] = [];\n\n  for (let pos = HEADER_LENGTH; pos < data.length; ) {\n    if (pos + 4 > data.length) {\n      return undefined;\n    }\n\n    const attrType = data.readUInt16BE(pos);\n    const attrLen = data.readUInt16BE(pos + 2);\n    const valueStart = pos + 4;\n    const valueEnd = valueStart + attrLen;\n\n    if (valueEnd > data.length) {\n      return undefined;\n    }\n\n    const payload = data.slice(valueStart, valueEnd);\n    const padLen = paddingLength(attrLen);\n    if (valueEnd + padLen > data.length) {\n      return undefined;\n    }\n\n    const attribute = ATTRIBUTES_BY_TYPE[attrType];\n    if (attribute) {\n      const [, attrName, , attrUnpack] = attribute;\n      let value: unknown;\n      try {\n        value =\n          attrUnpack.name === unpackXorAddress.name\n            ? attrUnpack(payload, transactionId)\n            : attrUnpack(payload);\n      } catch {\n        return undefined;\n      }\n      attributeRepository.setAttribute(attrName as AttributeKey, value);\n\n      if (attrName === \"FINGERPRINT\") {\n        const fingerprint = messageFingerprint(data.slice(0, pos));\n        if (\n          attributeRepository.getAttributeValue(\"FINGERPRINT\") !== fingerprint\n        ) {\n          return undefined;\n        }\n      } else if (attrName === \"MESSAGE-INTEGRITY\" && integrityKey) {\n        const integrity = messageIntegrity(data.slice(0, pos), integrityKey);\n        const expected =\n          attributeRepository.getAttributeValue(\"MESSAGE-INTEGRITY\");\n        if (!integrity.equals(expected)) {\n          return undefined;\n        }\n      }\n    } else {\n      rawAttributes.push({\n        type: attrType,\n        length: attrLen,\n        value: Buffer.from(payload),\n      });\n    }\n\n    pos = valueEnd + padLen;\n  }\n\n  return new Message(\n    messageType & 0x3eef,\n    messageType & 0x0110,\n    transactionId,\n    attributeRepository.getAttributes(),\n    rawAttributes,\n  );\n}\n\nexport class Message extends AttributeRepository {\n  constructor(\n    public messageMethod: methods,\n    public messageClass: classes,\n    public transactionId: Buffer = randomBytes(12),\n    attributes: AttributePair[] = [],\n    public rawAttributes: RawAttribute[] = [],\n  ) {\n    super(attributes);\n  }\n\n  toJSON() {\n    return this.json;\n  }\n\n  get json() {\n    return {\n      messageMethod: this.messageMethod,\n      messageClass: this.messageClass,\n      attributes: this.attributes,\n      rawAttributes: this.rawAttributes.map((attribute) => ({\n        type: attribute.type,\n        length: attribute.value.length,\n      })),\n    };\n  }\n\n  get transactionIdHex() {\n    return this.transactionId.toString(\"hex\");\n  }\n\n  appendRawAttribute(type: number, value: Buffer) {\n    this.rawAttributes.push({ type, value: Buffer.from(value) });\n    return this;\n  }\n\n  get unknownAttributeTypes() {\n    return this.rawAttributes.map((attribute) => attribute.type);\n  }\n\n  get bytes() {\n    const body = Buffer.concat(\n      this.serializedAttributes.map((attribute) =>\n        serializeAttribute(attribute.type, attribute.value),\n      ),\n    );\n\n    const header = Buffer.alloc(8);\n    header.writeUInt16BE(this.messageMethod | this.messageClass, 0);\n    header.writeUInt16BE(body.length, 2);\n    header.writeUInt32BE(COOKIE, 4);\n\n    return Buffer.concat([header, this.transactionId, body]);\n  }\n\n  addMessageIntegrity(key: Buffer) {\n    this.setAttribute(\"MESSAGE-INTEGRITY\", this.messageIntegrity(key));\n    return this;\n  }\n\n  messageIntegrity(key: Buffer) {\n    const checkData = setBodyLength(\n      this.bytes,\n      this.bytes.length - HEADER_LENGTH + INTEGRITY_LENGTH,\n    );\n    return Buffer.from(\n      createHmac(\"sha1\", key).update(checkData).digest(\"hex\"),\n      \"hex\",\n    );\n  }\n\n  addFingerprint() {\n    this.setAttribute(\"FINGERPRINT\", messageFingerprint(this.bytes));\n    return this;\n  }\n\n  private get serializedAttributes() {\n    const attributes: RawAttribute[] = [];\n\n    for (const attrName of this.attributesKeys) {\n      const attrValue = this.getAttributeValue(attrName);\n      const [attrType, , attrPack] = ATTRIBUTES_BY_NAME[attrName];\n      const value =\n        attrPack.name === packXorAddress.name\n          ? attrPack(attrValue, this.transactionId)\n          : attrPack(attrValue);\n      attributes.push({ type: attrType, value });\n    }\n\n    attributes.push(\n      ...this.rawAttributes.map((attribute) => ({\n        type: attribute.type,\n        value: Buffer.from(attribute.value),\n      })),\n    );\n\n    return attributes;\n  }\n}\n\nfunction serializeAttribute(type: number, value: Buffer) {\n  const attrLen = value.length;\n  const padLen = paddingLength(attrLen);\n  const header = Buffer.alloc(4);\n  header.writeUInt16BE(type, 0);\n  header.writeUInt16BE(attrLen, 2);\n  return Buffer.concat([header, value, Buffer.alloc(padLen)]);\n}\n\nconst setBodyLength = (data: Buffer, length: number) => {\n  const output = Buffer.alloc(data.length);\n  data.copy(output, 0, 0, 2);\n  output.writeUInt16BE(length, 2);\n  data.copy(output, 4, 4);\n  return output;\n};\n\nfunction messageFingerprint(data: Buffer) {\n  const checkData = setBodyLength(\n    data,\n    data.length - HEADER_LENGTH + FINGERPRINT_LENGTH,\n  );\n  return (crc32(checkData) ^ FINGERPRINT_XOR) >>> 0;\n}\n\nfunction messageIntegrity(data: Buffer, key: Buffer) {\n  const checkData = setBodyLength(\n    data,\n    data.length - HEADER_LENGTH + INTEGRITY_LENGTH,\n  );\n  return Buffer.from(\n    createHmac(\"sha1\", key).update(checkData).digest(\"hex\"),\n    \"hex\",\n  );\n}\n\nexport function paddingLength(length: number) {\n  const rest = length % 4;\n  return rest === 0 ? 0 : 4 - rest;\n}\n"]}
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../../../../ice-server/src/stun/message.ts"],"names":[],"mappings":";;;AAyBA,oCA4FC;AA0ID,sCAGC;AAlQD,mCAAiD;AAEjD,6CAA4C;AAE5C,6CASsB;AACtB,mCASiB;AAEjB,SAAgB,YAAY,CAC1B,IAAY,EACZ,YAAqB;IAErB,IAAI,CAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,IAAI,CAAC,KAAK,CAAC,qBAAa,GAAG,EAAE,EAAE,qBAAa,CAAC,CAC9C,CAAC;IAEF,MAAM,mBAAmB,GAAG,IAAI,gCAAmB,EAAE,CAAC;IACtD,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,6EAA6E;IAC7E,gFAAgF;IAChF,IAAI,wBAAwB,GAAG,KAAK,CAAC;IAErC,KAAK,IAAI,GAAG,GAAG,qBAAa,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;QAClD,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;QAEtC,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,+BAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,QAAQ,EAAE,AAAD,EAAG,UAAU,CAAC,GAAG,SAAS,CAAC;YAC7C,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK;oBACH,UAAU,CAAC,IAAI,KAAK,6BAAgB,CAAC,IAAI;wBACvC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC;wBACpC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,mBAAmB,CAAC,YAAY,CAAC,QAAwB,EAAE,KAAK,CAAC,CAAC;YAElE,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC3D,IACE,mBAAmB,CAAC,iBAAiB,CAAC,aAAa,CAAC,KAAK,WAAW,EACpE,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,KAAK,mBAAmB,IAAI,YAAY,EAAE,CAAC;gBAC5D,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;gBACrE,MAAM,QAAQ,GACZ,mBAAmB,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;gBAC7D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,wBAAwB,GAAG,IAAI,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,OAAO,CAChB,WAAW,GAAG,MAAM,EACpB,WAAW,GAAG,MAAM,EACpB,aAAa,EACb,mBAAmB,CAAC,aAAa,EAAE,EACnC,aAAa,CACd,CAAC;AACJ,CAAC;AAED,MAAa,OAAQ,SAAQ,gCAAmB;IAC9C,YACS,aAAsB,EACtB,YAAqB,EACrB,gBAAwB,IAAA,oBAAW,EAAC,EAAE,CAAC,EAC9C,aAA8B,EAAE,EACzB,gBAAgC,EAAE;QAEzC,KAAK,CAAC,UAAU,CAAC,CAAC;QANlB;;;;mBAAO,aAAa;WAAS;QAC7B;;;;mBAAO,YAAY;WAAS;QAC5B;;;;mBAAO,aAAa;WAA0B;QAE9C;;;;mBAAO,aAAa;WAAqB;IAG3C,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,IAAI;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;aAC/B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,kBAAkB,CAAC,IAAY,EAAE,KAAa;QAC5C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK;QACP,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CACxB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1C,kBAAkB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CACpD,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,cAAM,EAAE,CAAC,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,mBAAmB,CAAC,GAAW;QAC7B,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,qBAAa,GAAG,wBAAgB,CACrD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAA,mBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACvD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAY,oBAAoB;QAC9B,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,CAAC,QAAQ,EAAE,AAAD,EAAG,QAAQ,CAAC,GAAG,+BAAkB,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,KAAK,GACT,QAAQ,CAAC,IAAI,KAAK,2BAAc,CAAC,IAAI;gBACnC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;gBACzC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,UAAU,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACpC,CAAC,CAAC,CACJ,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAlGD,0BAkGC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,EACJ,IAAI,CAAC,MAAM,GAAG,qBAAa,GAAG,0BAAkB,CACjD,CAAC;IACF,OAAO,CAAC,IAAA,WAAK,EAAC,SAAS,CAAC,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,SAAS,GAAG,aAAa,CAC7B,IAAI,EACJ,IAAI,CAAC,MAAM,GAAG,qBAAa,GAAG,wBAAgB,CAC/C,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAA,mBAAU,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACvD,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc;IAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC;IACxB,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;AACnC,CAAC","sourcesContent":["import { createHmac, randomBytes } from \"crypto\";\n\nimport { crc32 } from \"../../../common/src\";\n\nimport {\n  ATTRIBUTES_BY_NAME,\n  ATTRIBUTES_BY_TYPE,\n  type AttributeKey,\n  type AttributePair,\n  AttributeRepository,\n  type RawAttribute,\n  packXorAddress,\n  unpackXorAddress,\n} from \"./attributes\";\nimport {\n  COOKIE,\n  FINGERPRINT_LENGTH,\n  FINGERPRINT_XOR,\n  HEADER_LENGTH,\n  INTEGRITY_LENGTH,\n  type classes,\n  isStunMessage,\n  type methods,\n} from \"./const\";\n\nexport function parseMessage(\n  data: Buffer,\n  integrityKey?: Buffer,\n): Message | undefined {\n  if (!isStunMessage(data)) {\n    return undefined;\n  }\n\n  const messageType = data.readUInt16BE(0);\n  const transactionId = Buffer.from(\n    data.slice(HEADER_LENGTH - 12, HEADER_LENGTH),\n  );\n\n  const attributeRepository = new AttributeRepository();\n  const rawAttributes: RawAttribute[] = [];\n  // When integrityKey is provided, MESSAGE-INTEGRITY must be present and valid\n  // (RFC 5389 short-term credentials / RFC 7675 authenticated consent responses).\n  let messageIntegrityVerified = false;\n\n  for (let pos = HEADER_LENGTH; pos < data.length; ) {\n    if (pos + 4 > data.length) {\n      return undefined;\n    }\n\n    const attrType = data.readUInt16BE(pos);\n    const attrLen = data.readUInt16BE(pos + 2);\n    const valueStart = pos + 4;\n    const valueEnd = valueStart + attrLen;\n\n    if (valueEnd > data.length) {\n      return undefined;\n    }\n\n    const payload = data.slice(valueStart, valueEnd);\n    const padLen = paddingLength(attrLen);\n    if (valueEnd + padLen > data.length) {\n      return undefined;\n    }\n\n    const attribute = ATTRIBUTES_BY_TYPE[attrType];\n    if (attribute) {\n      const [, attrName, , attrUnpack] = attribute;\n      let value: unknown;\n      try {\n        value =\n          attrUnpack.name === unpackXorAddress.name\n            ? attrUnpack(payload, transactionId)\n            : attrUnpack(payload);\n      } catch {\n        return undefined;\n      }\n      attributeRepository.setAttribute(attrName as AttributeKey, value);\n\n      if (attrName === \"FINGERPRINT\") {\n        const fingerprint = messageFingerprint(data.slice(0, pos));\n        if (\n          attributeRepository.getAttributeValue(\"FINGERPRINT\") !== fingerprint\n        ) {\n          return undefined;\n        }\n      } else if (attrName === \"MESSAGE-INTEGRITY\" && integrityKey) {\n        const integrity = messageIntegrity(data.slice(0, pos), integrityKey);\n        const expected =\n          attributeRepository.getAttributeValue(\"MESSAGE-INTEGRITY\");\n        if (!integrity.equals(expected)) {\n          return undefined;\n        }\n        messageIntegrityVerified = true;\n      }\n    } else {\n      rawAttributes.push({\n        type: attrType,\n        length: attrLen,\n        value: Buffer.from(payload),\n      });\n    }\n\n    pos = valueEnd + padLen;\n  }\n\n  // Reject unsigned messages when the caller required authentication.\n  if (integrityKey && !messageIntegrityVerified) {\n    return undefined;\n  }\n\n  return new Message(\n    messageType & 0x3eef,\n    messageType & 0x0110,\n    transactionId,\n    attributeRepository.getAttributes(),\n    rawAttributes,\n  );\n}\n\nexport class Message extends AttributeRepository {\n  constructor(\n    public messageMethod: methods,\n    public messageClass: classes,\n    public transactionId: Buffer = randomBytes(12),\n    attributes: AttributePair[] = [],\n    public rawAttributes: RawAttribute[] = [],\n  ) {\n    super(attributes);\n  }\n\n  toJSON() {\n    return this.json;\n  }\n\n  get json() {\n    return {\n      messageMethod: this.messageMethod,\n      messageClass: this.messageClass,\n      attributes: this.attributes,\n      rawAttributes: this.rawAttributes.map((attribute) => ({\n        type: attribute.type,\n        length: attribute.value.length,\n      })),\n    };\n  }\n\n  get transactionIdHex() {\n    return this.transactionId.toString(\"hex\");\n  }\n\n  appendRawAttribute(type: number, value: Buffer) {\n    this.rawAttributes.push({ type, value: Buffer.from(value) });\n    return this;\n  }\n\n  get unknownAttributeTypes() {\n    return this.rawAttributes.map((attribute) => attribute.type);\n  }\n\n  get bytes() {\n    const body = Buffer.concat(\n      this.serializedAttributes.map((attribute) =>\n        serializeAttribute(attribute.type, attribute.value),\n      ),\n    );\n\n    const header = Buffer.alloc(8);\n    header.writeUInt16BE(this.messageMethod | this.messageClass, 0);\n    header.writeUInt16BE(body.length, 2);\n    header.writeUInt32BE(COOKIE, 4);\n\n    return Buffer.concat([header, this.transactionId, body]);\n  }\n\n  addMessageIntegrity(key: Buffer) {\n    this.setAttribute(\"MESSAGE-INTEGRITY\", this.messageIntegrity(key));\n    return this;\n  }\n\n  messageIntegrity(key: Buffer) {\n    const checkData = setBodyLength(\n      this.bytes,\n      this.bytes.length - HEADER_LENGTH + INTEGRITY_LENGTH,\n    );\n    return Buffer.from(\n      createHmac(\"sha1\", key).update(checkData).digest(\"hex\"),\n      \"hex\",\n    );\n  }\n\n  addFingerprint() {\n    this.setAttribute(\"FINGERPRINT\", messageFingerprint(this.bytes));\n    return this;\n  }\n\n  private get serializedAttributes() {\n    const attributes: RawAttribute[] = [];\n\n    for (const attrName of this.attributesKeys) {\n      const attrValue = this.getAttributeValue(attrName);\n      const [attrType, , attrPack] = ATTRIBUTES_BY_NAME[attrName];\n      const value =\n        attrPack.name === packXorAddress.name\n          ? attrPack(attrValue, this.transactionId)\n          : attrPack(attrValue);\n      attributes.push({ type: attrType, value });\n    }\n\n    attributes.push(\n      ...this.rawAttributes.map((attribute) => ({\n        type: attribute.type,\n        value: Buffer.from(attribute.value),\n      })),\n    );\n\n    return attributes;\n  }\n}\n\nfunction serializeAttribute(type: number, value: Buffer) {\n  const attrLen = value.length;\n  const padLen = paddingLength(attrLen);\n  const header = Buffer.alloc(4);\n  header.writeUInt16BE(type, 0);\n  header.writeUInt16BE(attrLen, 2);\n  return Buffer.concat([header, value, Buffer.alloc(padLen)]);\n}\n\nconst setBodyLength = (data: Buffer, length: number) => {\n  const output = Buffer.alloc(data.length);\n  data.copy(output, 0, 0, 2);\n  output.writeUInt16BE(length, 2);\n  data.copy(output, 4, 4);\n  return output;\n};\n\nfunction messageFingerprint(data: Buffer) {\n  const checkData = setBodyLength(\n    data,\n    data.length - HEADER_LENGTH + FINGERPRINT_LENGTH,\n  );\n  return (crc32(checkData) ^ FINGERPRINT_XOR) >>> 0;\n}\n\nfunction messageIntegrity(data: Buffer, key: Buffer) {\n  const checkData = setBodyLength(\n    data,\n    data.length - HEADER_LENGTH + INTEGRITY_LENGTH,\n  );\n  return Buffer.from(\n    createHmac(\"sha1\", key).update(checkData).digest(\"hex\"),\n    \"hex\",\n  );\n}\n\nexport function paddingLength(length: number) {\n  const rest = length % 4;\n  return rest === 0 ? 0 : 4 - rest;\n}\n"]}