zedai-voice
Version:
Siri-like voice banking SDK for React Native - Complete voice-powered fintech solution with wake word detection and beautiful UI
342 lines (335 loc) • 14.8 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", {
value: true
});
exports["default"] = void 0;
var _Encryption = _interopRequireDefault(require("./Encryption"));
var _Logger = _interopRequireDefault(require("../utils/Logger"));
var _Constants = require("../utils/Constants");
function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
function _createForOfIteratorHelper(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
function _classCallCheck(a, n) { if (!(a instanceof n)) throw new TypeError("Cannot call a class as a function"); }
function _defineProperties(e, r) { for (var t = 0; t < r.length; t++) { var o = r[t]; o.enumerable = o.enumerable || !1, o.configurable = !0, "value" in o && (o.writable = !0), Object.defineProperty(e, _toPropertyKey(o.key), o); } }
function _createClass(e, r, t) { return r && _defineProperties(e.prototype, r), t && _defineProperties(e, t), Object.defineProperty(e, "prototype", { writable: !1 }), e; }
function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); } // src/security/SecurityManager.js
var SecurityManager = /*#__PURE__*/function () {
function SecurityManager(config) {
_classCallCheck(this, SecurityManager);
this.config = config;
this.encryption = new _Encryption["default"](config.encryptionKey);
this.activeSessions = new Map();
this.pinAttempts = new Map();
this.rateLimiter = new Map();
}
return _createClass(SecurityManager, [{
key: "createSession",
value: function createSession(userId) {
var sessionId = this.generateSessionId();
var session = {
id: sessionId,
userId: userId,
createdAt: Date.now(),
lastActivity: Date.now(),
isActive: true
};
this.activeSessions.set(sessionId, session);
_Logger["default"].info('Session created', {
sessionId: sessionId,
userId: userId
});
return sessionId;
}
}, {
key: "validateSession",
value: function validateSession(sessionId) {
var session = this.activeSessions.get(sessionId);
if (!session) {
_Logger["default"].warn('Session not found', {
sessionId: sessionId
});
return {
isValid: false,
error: 'Session not found'
};
}
if (!session.isActive) {
_Logger["default"].warn('Session inactive', {
sessionId: sessionId
});
return {
isValid: false,
error: 'Session inactive'
};
}
var age = Date.now() - session.createdAt;
if (age > this.config.timeout) {
this.invalidateSession(sessionId);
_Logger["default"].warn('Session expired', {
sessionId: sessionId,
age: age
});
return {
isValid: false,
error: 'Session expired'
};
}
// Update last activity
session.lastActivity = Date.now();
return {
isValid: true,
session: session
};
}
}, {
key: "invalidateSession",
value: function invalidateSession(sessionId) {
var session = this.activeSessions.get(sessionId);
if (session) {
session.isActive = false;
this.activeSessions["delete"](sessionId);
_Logger["default"].info('Session invalidated', {
sessionId: sessionId
});
}
}
}, {
key: "generateSessionId",
value: function generateSessionId() {
return this.encryption.hash(Date.now() + Math.random().toString()).substring(0, 32);
}
}, {
key: "encryptAPIPayload",
value: function encryptAPIPayload(payload) {
try {
var timestamp = Date.now().toString();
var signature = this.encryption.generateApiSignature(payload, timestamp, this.config.apiKey);
var securePayload = {
data: this.encryption.encryptForTransport(payload),
timestamp: timestamp,
signature: signature
};
return securePayload;
} catch (error) {
_Logger["default"].error('API payload encryption failed', {
error: error.message
});
throw new Error(_Constants.ERROR_CODES.NETWORK_ERROR);
}
}
}, {
key: "decryptAPIResponse",
value: function decryptAPIResponse(response) {
try {
if (response.encrypted) {
return this.encryption.decryptFromTransport(response.data);
}
return response;
} catch (error) {
_Logger["default"].error('API response decryption failed', {
error: error.message
});
throw new Error(_Constants.ERROR_CODES.NETWORK_ERROR);
}
}
}, {
key: "validatePIN",
value: function validatePIN(pin, sessionId) {
var validation = this.validateSession(sessionId);
if (!validation.isValid) {
return validation;
}
// Check PIN format
if (!pin || typeof pin !== 'string' || pin.length !== 4 || !/^\d{4}$/.test(pin)) {
this.recordPinAttempt(sessionId, false);
return {
isValid: false,
error: 'Invalid PIN format'
};
}
// Check rate limiting
var attempts = this.pinAttempts.get(sessionId) || {
count: 0,
lastAttempt: 0
};
var timeSinceLastAttempt = Date.now() - attempts.lastAttempt;
if (attempts.count >= 3 && timeSinceLastAttempt < 300000) {
// 5 minutes lockout
_Logger["default"].warn('PIN attempts exceeded', {
sessionId: sessionId,
attempts: attempts.count
});
return {
isValid: false,
error: 'Too many PIN attempts. Please try again later.'
};
}
return {
isValid: true
};
}
}, {
key: "recordPinAttempt",
value: function recordPinAttempt(sessionId, success) {
var attempts = this.pinAttempts.get(sessionId) || {
count: 0,
lastAttempt: 0
};
if (success) {
// Reset attempts on successful PIN
this.pinAttempts["delete"](sessionId);
} else {
attempts.count += 1;
attempts.lastAttempt = Date.now();
this.pinAttempts.set(sessionId, attempts);
}
_Logger["default"].info('PIN attempt recorded', {
sessionId: sessionId,
success: success,
attempts: attempts.count
});
}
}, {
key: "checkRateLimit",
value: function checkRateLimit(identifier) {
var maxRequests = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 10;
var windowMs = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 60000;
var now = Date.now();
var windowStart = now - windowMs;
if (!this.rateLimiter.has(identifier)) {
this.rateLimiter.set(identifier, []);
}
var requests = this.rateLimiter.get(identifier);
// Remove old requests outside the window
var recentRequests = requests.filter(function (time) {
return time > windowStart;
});
if (recentRequests.length >= maxRequests) {
_Logger["default"].warn('Rate limit exceeded', {
identifier: identifier,
requests: recentRequests.length
});
return {
allowed: false,
retryAfter: windowMs - (now - recentRequests[0])
};
}
recentRequests.push(now);
this.rateLimiter.set(identifier, recentRequests);
return {
allowed: true
};
}
}, {
key: "sanitizeForLogging",
value: function sanitizeForLogging(data) {
if (_typeof(data) !== 'object' || data === null) {
return data;
}
var sensitiveFields = ['pin', 'password', 'apiKey', 'token', 'authorization'];
var sanitized = _objectSpread({}, data);
for (var _i = 0, _sensitiveFields = sensitiveFields; _i < _sensitiveFields.length; _i++) {
var field = _sensitiveFields[_i];
if (sanitized[field]) {
sanitized[field] = '***REDACTED***';
}
}
return sanitized;
}
}, {
key: "generateSecureHeaders",
value: function generateSecureHeaders(payload) {
var timestamp = Date.now().toString();
var signature = this.encryption.generateApiSignature(payload, timestamp, this.config.apiKey);
return {
'X-API-Key': this.config.apiKey,
'X-Timestamp': timestamp,
'X-Signature': signature,
'Content-Type': 'application/json',
'User-Agent': 'VoiceFintech-SDK/1.0.0'
};
}
}, {
key: "validateWebhookSignature",
value: function validateWebhookSignature(payload, signature, secret) {
try {
var expectedSignature = this.encryption.hash(JSON.stringify(payload) + secret);
return expectedSignature === signature;
} catch (error) {
_Logger["default"].error('Webhook signature validation failed', {
error: error.message
});
return false;
}
}
}, {
key: "clearSensitiveData",
value: function clearSensitiveData() {
// Clear PIN attempts
this.pinAttempts.clear();
// Clear old sessions
var now = Date.now();
var _iterator = _createForOfIteratorHelper(this.activeSessions),
_step;
try {
for (_iterator.s(); !(_step = _iterator.n()).done;) {
var _step$value = _slicedToArray(_step.value, 2),
sessionId = _step$value[0],
session = _step$value[1];
if (now - session.lastActivity > this.config.timeout) {
this.invalidateSession(sessionId);
}
}
// Clear old rate limit data
} catch (err) {
_iterator.e(err);
} finally {
_iterator.f();
}
var oldRequests = Date.now() - 3600000; // 1 hour
var _iterator2 = _createForOfIteratorHelper(this.rateLimiter),
_step2;
try {
for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
var _step2$value = _slicedToArray(_step2.value, 2),
identifier = _step2$value[0],
requests = _step2$value[1];
var recentRequests = requests.filter(function (time) {
return time > oldRequests;
});
if (recentRequests.length === 0) {
this.rateLimiter["delete"](identifier);
} else {
this.rateLimiter.set(identifier, recentRequests);
}
}
} catch (err) {
_iterator2.e(err);
} finally {
_iterator2.f();
}
}
}, {
key: "getSecurityMetrics",
value: function getSecurityMetrics() {
return {
activeSessions: this.activeSessions.size,
rateLimitedClients: this.rateLimiter.size,
failedPinAttempts: Array.from(this.pinAttempts.values()).reduce(function (sum, attempts) {
return sum + attempts.count;
}, 0)
};
}
}]);
}();
var _default = exports["default"] = SecurityManager;