@coinbase/cdp-sdk/_cjs/auth/utils/http.js

SDK for interacting with the Coinbase Developer Platform Wallet API

"use strict";
/**
 * @module HTTP
 */
Object.defineProperty(exports, "__esModule", { value: true });
exports.getAuthHeaders = getAuthHeaders;
exports.getCorrelationData = getCorrelationData;
const jwt_js_1 = require("./jwt.js");
const errors_js_1 = require("../../errors.js");
const version_js_1 = require("../../version.js");
/**
 * Gets authentication headers for a request.
 *
 * @param options - The configuration options for generating auth headers
 * @returns Object containing the authentication headers
 */
async function getAuthHeaders(options) {
    const headers = {};
    // Generate and add JWT token
    const jwt = await (0, jwt_js_1.generateJwt)({
        apiKeyId: options.apiKeyId,
        apiKeySecret: options.apiKeySecret,
        requestMethod: options.requestMethod,
        requestHost: options.requestHost,
        requestPath: options.requestPath,
        expiresIn: options.expiresIn,
        audience: options.audience,
    });
    headers["Authorization"] = `Bearer ${jwt}`;
    headers["Content-Type"] = "application/json";
    // Add wallet auth if needed
    if (requiresWalletAuth(options.requestMethod, options.requestPath)) {
        if (!options.walletSecret) {
            throw new errors_js_1.UserInputValidationError("Wallet Secret not configured. Please set the CDP_WALLET_SECRET environment variable, or pass it as an option to the CdpClient constructor.");
        }
        const walletAuthToken = await (0, jwt_js_1.generateWalletJwt)({
            walletSecret: options.walletSecret,
            requestMethod: options.requestMethod,
            requestHost: options.requestHost,
            requestPath: options.requestPath,
            requestData: options.requestBody || {},
        });
        headers["X-Wallet-Auth"] = walletAuthToken;
    }
    // Add correlation data
    headers["Correlation-Context"] = getCorrelationData(options.source, options.sourceVersion);
    return headers;
}
/**
 * Returns true if the request indicated by the method and URL requires wallet authentication.
 *
 * @param requestMethod - The HTTP method of the request
 * @param requestPath - The URL path of the request
 * @returns True if the request requires wallet authentication, false otherwise
 */
function requiresWalletAuth(requestMethod, requestPath) {
    return (
    /*
     * Match the wallet account endpoints (/v2/evm/accounts, /v2/solana/accounts)
     * but NOT the custodial /v2/accounts endpoint, which authenticates with the
     * API key alone (see openapi.yaml: POST /v2/accounts declares apiKeyAuth and
     * no X-Wallet-Auth parameter). A bare includes("/accounts") over-matched it.
     */
    (/\/(evm|solana)\/accounts/.test(requestPath ?? "") ||
        requestPath?.includes("/spend-permissions") ||
        requestPath?.includes("/user-operations/prepare-and-send") ||
        requestPath?.includes("/embedded-wallet-api/") ||
        requestPath?.endsWith("/end-users") ||
        requestPath?.endsWith("/end-users/import") ||
        /\/end-users\/[^/]+\/evm$/.test(requestPath) ||
        /\/end-users\/[^/]+\/evm-smart-account$/.test(requestPath) ||
        /\/end-users\/[^/]+\/solana$/.test(requestPath)) &&
        (requestMethod === "POST" || requestMethod === "DELETE" || requestMethod === "PUT"));
}
/**
 * Returns encoded correlation data including the SDK version and language.
 *
 * @param source - The source identifier for the request
 * @param sourceVersion - The version of the source making the request
 * @returns Encoded correlation data as a query string
 */
function getCorrelationData(source, sourceVersion) {
    const data = {
        sdk_version: version_js_1.version,
        sdk_language: "typescript",
        source: source || "sdk-auth",
    };
    if (sourceVersion) {
        data["source_version"] = sourceVersion;
    }
    return Object.keys(data)
        .map(key => `${key}=${encodeURIComponent(data[key])}`)
        .join(",");
}
//# sourceMappingURL=http.js.map