Tdf3 + Nano = ❤️

cli/package.json

@@ -31,6 +31,8 @@
   "devDependencies": {
     "@esm-bundle/chai": "4.3.4-fix.0",
     "@types/mocha": "9.1.0",
+    "@types/node": "^17.0.30",
+    "@types/readable-stream": "^2.3.13",
     "@types/sinon": "^10.0.11",
     "@types/yargs": "^17.0.10",
     "@typescript-eslint/eslint-plugin": "^5.18.0",

cli/src/cli.ts

@@ -1,7 +1,7 @@
 import yargs from 'yargs';
 import { readFile, stat, writeFile } from 'fs/promises';
 import { hideBin } from 'yargs/helpers';
-import { AuthProviders, NanoTDFClient, version } from '@opentdf/client';
+import { AuthProviders, NanoTDFClient, version } from '@opentdf/client/nano-node-esm';
 
 import { CLIError, Level, log } from './logger.js';
 

lib/fasade/FileClient.ts

@@ -0,0 +1,67 @@
+import { Client as ClientTdf3 } from '../tdf3/src/client';
+import { DecryptParamsBuilder, EncryptParamsBuilder } from '../tdf3/src/client/builders';
+import { TDFCiphertextStream } from '../tdf3/src/client/tdf-cipher-text-stream';
+import { PlaintextStream } from '../tdf3/src/client/tdf-stream';
+
+interface FileClientConfig {
+  clientId: string,
+  organizationName: string,
+  oidcOrigin: string,
+  kasEndpoint: string,
+  clientSecret?: string,
+  oidcRefreshToken?: string,
+}
+
+export class FileClient {
+  private client: ClientTdf3;
+
+  constructor({ clientId, clientSecret, oidcRefreshToken, organizationName, oidcOrigin, kasEndpoint }: FileClientConfig) {
+    this.client = new ClientTdf3({
+      clientId,
+      organizationName,
+      clientSecret,
+      oidcRefreshToken,
+      kasEndpoint,
+      virtruOIDCEndpoint: oidcOrigin,
+    });
+  }
+
+  private static setSource (source: ReadableStream | TDFCiphertextStream | Buffer | String | ArrayBuffer, params: EncryptParamsBuilder | DecryptParamsBuilder) {
+    // @ts-ignore
+    if(source.pipe !== undefined) {
+      // @ts-ignore
+      params.setStreamSource(source);
+    }
+    if(Buffer && Buffer.isBuffer(source)) {
+      params.setBufferSource(source);
+    }
+    if(typeof source === 'string') {
+      // there is not point to used tdf3.js withStringSource, after merging we have nanoTdf for that
+      params.setFileSource(source);
+    }
+    if(source instanceof ArrayBuffer) {
+      params.setArrayBufferSource(source)
+    }
+    return params.build();
+  }
+
+  async encrypt(source: ReadableStream | Buffer | String | ArrayBuffer = '', users: string[] = [], params?: any ): Promise<TDFCiphertextStream> {
+    const encryptParams = new EncryptParamsBuilder().withOffline().withUsersWithAccess(users);
+
+    if (params) {
+      return await this.client.encrypt(params);
+    }
+    // @ts-ignore
+    return await this.client.encrypt(FileClient.setSource(source, encryptParams));
+  }
+
+  async decrypt(source: ReadableStream | Buffer | String | ArrayBuffer = '', params?: any): Promise<PlaintextStream> {
+    const decryptParams = new DecryptParamsBuilder();
+
+    if (params) {
+      return await this.client.decrypt(params);
+    }
+    // @ts-ignore
+    return await this.client.decrypt(FileClient.setSource(source, decryptParams));
+  }
+}

lib/lic-checker-config.yaml

@@ -0,0 +1,8 @@
+# renamed from license-checker-config.yml because GH gets confused and thinks this is the license file
+blacklisted-licenses:
+  - gpl
+
+whitelisted-modules:
+  - [email protected]
+  - [email protected]
+  - [email protected]