@aptos-labs/ts-sdk/dist/account/FederatedKeylessAccount.js

Aptos TypeScript SDK

// Copyright © Aptos Foundation
// SPDX-License-Identifier: Apache-2.0
import { AccountAddress } from "../core/accountAddress.js";
import { getIssAudAndUidVal } from "../core/crypto/keyless.js";
import { Deserializer } from "../bcs/index.js";
import { FederatedKeylessPublicKey } from "../core/crypto/federatedKeyless.js";
import { AbstractKeylessAccount } from "./AbstractKeylessAccount.js";
/**
 * Account implementation for the FederatedKeyless authentication scheme.
 *
 * Used to represent a FederatedKeyless based account and sign transactions with it.
 *
 * Use `FederatedKeylessAccount.create()` to instantiate a KeylessAccount with a JSON Web Token (JWT), proof, EphemeralKeyPair and the
 * address the JSON Web Key Set (JWKS) are installed that will be used to verify the JWT.
 *
 * When the proof expires or the JWT becomes invalid, the KeylessAccount must be instantiated again with a new JWT,
 * EphemeralKeyPair, and corresponding proof.
 * @group Implementation
 * @category Account (On-Chain Model)
 */
export class FederatedKeylessAccount extends AbstractKeylessAccount {
    /**
     * The FederatedKeylessPublicKey associated with the account
     * @group Implementation
     * @category Account (On-Chain Model)
     */
    publicKey;
    audless;
    /**
     * Use the static generator `FederatedKeylessAccount.create(...)` instead.
     * Creates a KeylessAccount instance using the provided parameters.
     * This function allows you to set up a KeylessAccount with specific attributes such as address, proof, and JWT.
     *
     * @param args - The parameters for creating a KeylessAccount.
     * @param args.address - Optional account address associated with the KeylessAccount.
     * @param args.proof - A Zero Knowledge Signature or a promise that resolves to one.
     * @param args.jwt - A JSON Web Token used for authentication.
     * @param args.ephemeralKeyPair - The ephemeral key pair used in the account creation.
     * @param args.jwkAddress - The address which stores the JSON Web Key Set (JWKS) used to verify the JWT.
     * @param args.uidKey - Optional key for user identification, defaults to "sub".
     * @param args.proofFetchCallback - Optional callback function for fetching proof.
     */
    constructor(args) {
        const publicKey = FederatedKeylessPublicKey.create(args);
        super({ publicKey, ...args });
        this.publicKey = publicKey;
        this.audless = args.audless ?? false;
    }
    /**
     * Serializes the transaction data into a format suitable for transmission or storage.
     * This function ensures that both the transaction bytes and the proof are properly serialized.
     *
     * @param serializer - The serializer instance used to convert the transaction data into bytes.
     */
    serialize(serializer) {
        super.serialize(serializer);
        this.publicKey.jwkAddress.serialize(serializer);
    }
    /**
     * Deserializes the provided deserializer to create a KeylessAccount instance.
     * This function extracts necessary components such as the JWT, UID key, pepper, ephemeral key pair, and proof from the deserializer.
     *
     * @param deserializer - The deserializer instance used to retrieve the serialized data.
     * @returns A KeylessAccount instance created from the deserialized data.
     */
    static deserialize(deserializer) {
        const { address, proof, ephemeralKeyPair, jwt, uidKey, pepper, verificationKeyHash } = AbstractKeylessAccount.partialDeserialize(deserializer);
        const jwkAddress = AccountAddress.deserialize(deserializer);
        const { iss, aud, uidVal } = getIssAudAndUidVal({ jwt, uidKey });
        return new FederatedKeylessAccount({
            address,
            proof,
            ephemeralKeyPair,
            iss,
            uidKey,
            uidVal,
            aud,
            pepper,
            jwt,
            verificationKeyHash,
            jwkAddress,
        });
    }
    /**
     * Deserialize bytes using this account's information.
     *
     * @param bytes The bytes being interpreted.
     * @returns
     */
    static fromBytes(bytes) {
        return FederatedKeylessAccount.deserialize(Deserializer.fromHex(bytes));
    }
    /**
     * Creates a KeylessAccount instance using the provided parameters.
     * This function allows you to set up a KeylessAccount with specific attributes such as address, proof, and JWT.
     * This is used instead of the KeylessAccount constructor.
     *
     * @param args - The parameters for creating a KeylessAccount.
     * @param args.address - Optional account address associated with the KeylessAccount.
     * @param args.proof - A Zero Knowledge Signature or a promise that resolves to one.
     * @param args.jwt - A JSON Web Token used for authentication.
     * @param args.ephemeralKeyPair - The ephemeral key pair used in the account creation.
     * @param args.jwkAddress - The address which stores the JSON Web Key Set (JWKS) used to verify the JWT.
     * @param args.uidKey - Optional key for user identification, defaults to "sub".
     * @param args.proofFetchCallback - Optional callback function for fetching proof.
     */
    static create(args) {
        const { address, proof, jwt, ephemeralKeyPair, pepper, jwkAddress, uidKey = "sub", proofFetchCallback, verificationKey, verificationKeyHash, } = args;
        if (verificationKeyHash && verificationKey) {
            throw new Error("Cannot provide both verificationKey and verificationKeyHash");
        }
        const { iss, aud, uidVal } = getIssAudAndUidVal({ jwt, uidKey });
        return new FederatedKeylessAccount({
            address,
            proof,
            ephemeralKeyPair,
            iss,
            uidKey,
            uidVal,
            aud,
            pepper,
            jwkAddress: AccountAddress.from(jwkAddress),
            jwt,
            proofFetchCallback,
            verificationKeyHash: verificationKeyHash ?? (verificationKey ? verificationKey.hash() : undefined),
        });
    }
}
//# sourceMappingURL=FederatedKeylessAccount.js.map