GlcoinCore/RTL
1
0
Fork 0
mirror of https://github.com/Ride-The-Lightning/RTL.git synced 2026-08-13 12:33:07 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
RTL/frontend/193.5eec0042e2c6f1a7.js

1 line
32 KiB
JavaScript
Raw Permalink Normal View History

Drop crypto-browserify polyfills by moving 2FA TOTP to WebCrypto The frontend build pulled in crypto-browserify, stream-browserify and vm-browserify (via tsconfig paths) only because otplib's @otplib/plugin-crypto requires Node's crypto. That chain carried the last production npm audit findings - the elliptic advisory (GHSA-848j-6mx2-7j84, no fixed release) plus browserify-sign/create-ecdh (issue #1634, item 3). The two-factor-auth settings dialog is the only browser consumer of otplib. It now uses a small WebCrypto TOTP service (src/app/shared/services/totp.service.ts, RFC 6238: HMAC-SHA1, 6 digits, 30s step) instead, so otplib is no longer bundled and the three polyfills plus their tsconfig path mappings are removed. The backend still verifies login tokens with otplib, so the new service must match it exactly - verified byte-for-byte against otplib and the RFC 6238 test vectors (generateSecret/keyuri/generate/check parity). Existing authenticator enrollments keep working. token check() is now async (WebCrypto's digest is promise-based); the dialog's verify handler was updated to match, and the value was never used for control flow. Production npm audit now reports zero vulnerabilities (from 13, incl. 2 critical, at the start of this cleanup series). Verified on the docker fixture: enrolled a 2FA secret from the new service, confirmed the backend otplib accepts a token it produces at login, rejected wrong/absent tokens. Unit spec covers RFC 6238 vectors, keyuri parity and base32 round-trip; both API suites and the full frontend suite (204 specs) pass.
2026-07-19 18:22:50 -07:00
"use strict";(self.webpackChunkRTLApp=self.webpackChunkRTLApp||[]).push([[193],{5837(c1,j,t){t.d(j,{f:()=>U});var e=t(1413),T=t(6977),f=t(4416),c=t(9647),l=t(3664),B=t(2571),b=t(9640),P=t(2200),w=t(2629),S=t(2920),a=t(455),N=t(6850);function k(C,x){if(1&C&&(l.j41(0,"mat-icon",10),l.EFF(1,"info_outline"),l.k0s()),2&C){const v=l.XpG().$implicit;l.Y8G("matTooltip",v.tooltip)}}function R(C,x){if(1&C&&(l.j41(0,"span",11),l.EFF(1),l.nI1(2,"number"),l.k0s()),2&C){const v=l.XpG().$implicit;l.R7$(),l.SpI(" ",l.i5U(2,1,v.dataValue,"1.0-0")," ")}}function V(C,x){if(1&C&&(l.j41(0,"span",11),l.EFF(1),l.nI1(2,"number"),l.k0s()),2&C){const v=l.XpG().$implicit,n=l.XpG(2);l.R7$(),l.SpI(" ",l.i5U(2,1,v[n.currencyUnitEnum.BTC],n.currencyUnitFormats.BTC)," ")}}function O(C,x){if(1&C&&(l.j41(0,"span",11),l.EFF(1),l.nI1(2,"number"),l.k0s()),2&C){const v=l.XpG().$implicit,n=l.XpG(2);l.R7$(),l.SpI(" ",l.i5U(2,1,v[n.currencyUnitEnum.OTHER],n.currencyUnitFormats.OTHER)," ")}}function A(C,x){if(1&C&&(l.j41(0,"div",6)(1,"div",7),l.EFF(2),l.DNE(3,k,2,1,"mat-icon",8),l.k0s(),l.DNE(4,R,3,4,"span",9)(5,V,3,4,"span",9)(6,O,3,4,"span",9),l.k0s()),2&C){const v=x.$implicit,n=l.XpG().$implicit,z=l.XpG();l.R7$(2),l.SpI(" ",v.title," "),l.R7$(),l.Y8G("ngIf",v.tooltip),l.R7$(),l.Y8G("ngIf",n===z.currencyUnitEnum.SATS),l.R7$(),l.Y8G("ngIf",n===z.currencyUnitEnum.BTC),l.R7$(),l.Y8G("ngIf",z.fiatConversion&&n!==z.currencyUnitEnum.SATS&&n!==z.currencyUnitEnum.BTC&&""===z.conversionErrorMsg)}}function G(C,x){if(1&C&&(l.j41(0,"div",12)(1,"div",13),l.EFF(2),l.k0s()()),2&C){const v=l.XpG(2);l.R7$(2),l.JRh(v.conversionErrorMsg)}}function H(C,x){if(1&C&&(l.j41(0,"mat-tab",2)(1,"div",3),l.DNE(2,A,7,5,"div",4),l.k0s(),l.DNE(3,G,3,1,"div",5),l.k0s()),2&C){const v=x.$implicit,n=l.XpG();l.Y8G("label",l.mNQ(v)),l.R7$(2),l.Y8G("ngForOf",n.values),l.R7$(),l.Y8G("ngIf",n.fiatConversion&&v!==n.currencyUnitEnum.SATS&&v!==n.currencyUnitEnum.BTC&&""!==n.conversionErrorMsg)}}let U=(()=>{var C;class x{constructor(n,z){this.commonService=n,this.store=z,this.values=[],this.currencyUnitEnum=f.BQ,this.currencyUnitFormats=f.k,this.currencyUnits=[],this.fiatConversion=!1,this.conversionErrorMsg="",this.unSubs=[new e.B,new e.B,new e.B,new e.B,new e.B]}ngOnChanges(){this.currencyUnits.length>1&&this.values[0]&&this.values[0].dataValue>=0&&this.getCurrencyValues()}ngOnInit(){this.store.select(c._c).pipe((0,T.Q)(this.unSubs[0])).subscribe(n=>{this.fiatConversion=n.settings.fiatConversion,this.currencyUnits=n.settings.currencyUnits,this.fiatConversion||this.currencyUnits.splice(2,1),this.currencyUnits.length>1&&this.values[0]&&this.values[0].dataValue>=0&&this.getCurrencyValues()})}getCurrencyValues(){this.commonService.convertCurrency(this.values[0].dataValue,f.BQ.SATS,f.BQ.BTC,"",!0).pipe((0,T.Q)(this.unSubs[1])).subscribe(n=>{this.values[0][f.BQ.BTC]=n.BTC}),this.commonService.convertCurrency(this.values[0].dataValue,f.BQ.SATS,f.BQ.OTHER,this.currencyUnits[2],this.fiatConversion).pipe((0,T.Q)(this.unSubs[2])).subscribe({next:n=>{if(this.values[0][f.BQ.OTHER]=n.OTHER,n.unit&&""!==n.unit)for(let z=1;z<this.values.length;z++){const g=this.values[z];this.commonService.convertCurrency(g.dataValue,f.BQ.SATS,f.BQ.BTC,"",!0).pipe((0,T.Q)(this.unSubs[3])).subscribe(F=>{this.values[z][f.BQ.BTC]=F.BTC}),this.commonService.convertCurrency(g.dataValue,f.BQ.SATS,f.BQ.OTHER,this.currencyUnits[2],this.fiatConversion).pipe((0,T.Q)(this.unSubs[4])).subscribe({next:F=>{this.values[z][f.BQ.OTHER]=F.OTHER},error:F=>{this.conversionErrorMsg="Conversion Error: "+F}})}},error:n=>{this.conversionErrorMsg="Conversion Error: "+n}})}ngOnDestroy(){this.unSubs.forEach(n=>{n.next(null),n.complete()})}static#a=C=()=>(this.\u0275fac=function(z){return new(z||x)(l.rXU(B.h),l.rXU(b.il))},this.\u0275cmp=l.VBU({type:x,selectors:[["rtl-currency-unit-converter"]],inputs:{values:"values"},standalone:!1,features:[l.OA$],decls:2,vars:1,consts:[["mat-stretch-tabs","false","mat-align-tabs","start"],[3,"label",4,"ngFor","ngForOf"],[3,"label"],["fxLayout","row","fxFlex","100","fxLayoutAlign","start start"],["fxLayout","column","fxLayout
Reference in a new issue Copy permalink