[PB-5654] feat(auth): add public keys validation for account recovery

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@internxt/sdk",
   "author": "Internxt <hello@internxt.com>",
-  "version": "1.11.26",
+  "version": "1.12.0",
   "description": "An sdk for interacting with Internxt's services",
   "repository": {
     "type": "git",

src/auth/index.ts

@@ -9,6 +9,7 @@ import {
   Keys,
   LoginDetails,
   PrivateKeys,
+  RecoveryKeys,
   RegisterDetails,
   RegisterOpaqueDetails,
   RegisterPreCreatedUser,
@@ -669,15 +670,16 @@ export class Auth {
     password: string,
     salt: string,
     mnemonic: string,
-    keys?: PrivateKeys,
+    keys?: RecoveryKeys,
   ): Promise<void> {
     return this.client.put(
       `/users/recover-account-v2?token=${token}&reset=false`,
       {
         password: password,
         salt: salt,
         mnemonic: mnemonic,
-        privateKeys: keys,
+        privateKeys: keys?.private,
+        publicKeys: keys?.public,
       },
       this.basicHeaders(),
     );

src/auth/types.ts

@@ -97,6 +97,16 @@ export interface PrivateKeys {
   kyber?: string;
 }
 
+export interface PublicKeys {
+  ecc?: string;
+  kyber?: string;
+}
+
+export interface RecoveryKeys {
+  private?: PrivateKeys;
+  public?: PublicKeys;
+}
+
 export interface PrivateKeysExtended {
   ecc: {
     public: string;

test/auth/index.test.ts

@@ -838,7 +838,7 @@ describe('# auth service tests', () => {
     });
   });
   describe('-> change password with link v2', () => {
-    it('Should call with right params without private keys', async () => {
+    it('Should call with right params without keys', async () => {
       const callStub = sinon.stub(httpClient, 'put').resolves({});
       const { client, headers } = clientAndHeaders();
       const token = 'token';
@@ -871,7 +871,42 @@ describe('# auth service tests', () => {
         kyber: 'newKyberKey',
       };
 
-      await client.changePasswordWithLinkV2(token, password, salt, mnemonic, privateKeys);
+      await client.changePasswordWithLinkV2(token, password, salt, mnemonic, { private: privateKeys });
+
+      // Assert
+      expect(callStub.firstCall.args).toEqual([
+        `/users/recover-account-v2?token=${token}&reset=false`,
+        {
+          password,
+          salt,
+          mnemonic,
+          privateKeys,
+          publicKeys: undefined,
+        },
+        headers,
+      ]);
+    });
+
+    it('Should call with right params including private and public keys', async () => {
+      const callStub = sinon.stub(httpClient, 'put').resolves({});
+      const { client, headers } = clientAndHeaders();
+      const token = 'token';
+      const password = 'newPassword';
+      const salt = 'newSalt';
+      const mnemonic = 'newMnemonic';
+      const privateKeys = {
+        ecc: 'newEccPrivateKey',
+        kyber: 'newKyberPrivateKey',
+      };
+      const publicKeys = {
+        ecc: 'eccPublicKey',
+        kyber: 'kyberPublicKey',
+      };
+
+      await client.changePasswordWithLinkV2(token, password, salt, mnemonic, {
+        private: privateKeys,
+        public: publicKeys,
+      });
 
       // Assert
       expect(callStub.firstCall.args).toEqual([
@@ -881,6 +916,37 @@ describe('# auth service tests', () => {
           salt,
           mnemonic,
           privateKeys,
+          publicKeys,
+        },
+        headers,
+      ]);
+    });
+
+    it('Should call with right params including only public keys (legacy backup without private keys)', async () => {
+      const callStub = sinon.stub(httpClient, 'put').resolves({});
+      const { client, headers } = clientAndHeaders();
+      const token = 'token';
+      const password = 'newPassword';
+      const salt = 'newSalt';
+      const mnemonic = 'newMnemonic';
+      const publicKeys = {
+        ecc: 'eccPublicKey',
+        kyber: 'kyberPublicKey',
+      };
+
+      await client.changePasswordWithLinkV2(token, password, salt, mnemonic, {
+        public: publicKeys,
+      });
+
+      // Assert
+      expect(callStub.firstCall.args).toEqual([
+        `/users/recover-account-v2?token=${token}&reset=false`,
+        {
+          password,
+          salt,
+          mnemonic,
+          privateKeys: undefined,
+          publicKeys,
         },
         headers,
       ]);