Add get_configuration_controller and workflow API messages

keeperapi/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@keeper-security/keeperapi",
     "description": "Keeper API Javascript SDK",
-    "version": "18.0.2",
+    "version": "18.0.3",
     "browser": "dist/browser/index.js",
     "main": "dist/index.cjs.js",
     "types": "dist/node/index.d.ts",

keeperapi/scripts/generate-proto.mjs

@@ -26,6 +26,7 @@ const PROTO_FILES = [
     'router.proto',
     'record_endpoints.proto',
     'remove.proto',
+    'workflow.proto',
 ]
 
 // Explicit filename overrides. 'folder' (lowercase) collides with 'Folder' on case-insensitive
@@ -94,7 +95,10 @@ async function main() {
     for (let i = 0; i < splits.length; i++) {
         const { name, startLine } = splits[i]
         const endLine = i + 1 < splits.length ? splits[i + 1].startLine : lines.length
-        const body = lines.slice(startLine, endLine).join('\n')
+        const body = lines
+            .slice(startLine, endLine)
+            .filter((l) => l !== 'export { $root as default };')
+            .join('\n')
         const filename = FILENAME_OVERRIDES[name] ?? name
 
         writeFileSync(

keeperapi/src/__tests__/endpoint.test.ts

@@ -9,7 +9,7 @@ import { ClientConfigurationInternal, TransmissionKey } from '../configuration'
 import { AllowedMlKemKeyIds, isAllowedEcKeyId, isAllowedMlKemKeyId } from '../transmissionKeys'
 import { KeeperError } from '../configuration'
 import { Authentication, Router, GraphSync, PAM } from '../proto'
-import { startLoginMessage, pamGetLeafsMessage, getControllers } from '../restMessages'
+import { startLoginMessage, pamGetLeafsMessage, getControllers, requestWorkflowAccessMessage } from '../restMessages'
 import { HPKE_ECDH_KYBER, Ciphersuite, MlKemVariant, mlKemKeygen, encodeMlKemPublicKeyToPem } from '../qrc'
 import { getKeeperMlKemKeyVariant } from '../transmissionKeys'
 import { KeeperHttpResponse } from '../commands'
@@ -605,6 +605,18 @@ describe('executeRouterRest', () => {
         const message = getControllers()
         expect(message.path).toBe('pam/get_controllers')
     })
+
+    it('returns void for RestInMessage with empty 200 response', async () => {
+        jest.spyOn(platform, 'post').mockResolvedValue({
+            data: new Uint8Array(0),
+            statusCode: 200,
+            headers: new Headers(),
+        })
+
+        const message = requestWorkflowAccessMessage({ resource: { value: new Uint8Array([1, 2, 3]) } })
+        const result = await endpoint.executeRouterRest(message, sessionToken)
+        expect(result).toBeUndefined()
+    })
 })
 
 async function mockPlatformPost(_, requestBody): Promise<KeeperHttpResponse> {

keeperapi/src/auth.ts

@@ -1300,6 +1300,10 @@ export class Auth {
         return this.endpoint.executeRouterRest(message, this._sessionToken)
     }
 
+    async executeRouterRestAction<TIn>(message: RestInMessage<TIn>): Promise<void> {
+        return this.endpoint.executeRouterRest(message, this._sessionToken)
+    }
+
     async executeRestCommand<Request, Response>(command: RestCommand<Request, Response>): Promise<Response> {
         if (!command.baseRequest.username) {
             command.baseRequest.username = this._username

keeperapi/src/endpoint.ts

@@ -193,7 +193,13 @@ export class KeeperEndpoint {
     async executeRouterRest<TIn, TOut>(
         message: RestMessage<TIn, TOut> | RestOutMessage<TOut>,
         sessionToken: string
-    ): Promise<TOut> {
+    ): Promise<TOut>
+    async executeRouterRest<TIn>(message: RestInMessage<TIn>, sessionToken: string): Promise<void>
+    async executeRouterRest<TOut>(message: RestOutMessage<TOut>, sessionToken: string): Promise<TOut>
+    async executeRouterRest<TIn, TOut>(
+        message: RestMessage<TIn, TOut> | RestOutMessage<TOut> | RestInMessage<TIn>,
+        sessionToken: string
+    ): Promise<TOut | void> {
         const transmissionKey = await this.getTransmissionKey()
         const sessionTokenBytes = normal64Bytes(sessionToken)
         const encryptedSessionToken = await platform.aesGcmEncrypt(sessionTokenBytes, transmissionKey.key)
@@ -211,7 +217,8 @@ export class KeeperEndpoint {
         const startTime = Date.now()
         const response = await platform.post(url, encryptedPayload, headers)
         if (!response.data || response.data.length === 0) {
-            throw new Error(`Empty response from router for ${message.path}`)
+            if ('fromBytes' in message) throw new Error(`Empty response from router for ${message.path}`)
+            return
         }
         if (response.statusCode !== 200) {
             logger.debug(`← ${requestId} Response code:`, response.statusCode)
@@ -233,6 +240,7 @@ export class KeeperEndpoint {
             } as KeeperError
         }
         const decryptedPayload = await platform.aesGcmDecrypt(routerResponse.encryptedPayload, transmissionKey.key)
+        if (!('fromBytes' in message)) return
         const result = message.fromBytes(decryptedPayload)
         if (isLevelEnabled('debug')) {
             logger.debug(...formatProto(`← ${requestId} ${formatTimeDiff(new Date(Date.now() - startTime))}s`, result))