What is the equivalent to CognitoDeviceHelper.java or CognitoDeviceHelper.cs for JavaScript / Node / React JS

[ManuelGuerreroVana]

In C#, we have https://github.com/aws/aws-sdk-net-extensions-cognito/blob/master/src/Amazon.Extensions.CognitoAuthentication/Util/CognitoDeviceHelper.cs

In Android/Java, we have https://github.com/aws-amplify/aws-sdk-android/blob/main/aws-android-sdk-cognitoidentityprovider/src/main/java/com/amazonaws/mobileconnectors/cognitoidentityprovider/util/CognitoDeviceHelper.java

Where can I find a CognitoDeviceHelper for JS / React JS?

I ask because I want to get the Salt and PasswordVerifier to call the ConfirmDeviceCommand in JS, and even though it says that the Salt and PasswordVerifier are not needed, I get an error If I don't pass those values 😅

In java is as easy as this:

final Map<String, String> verifier = CognitoDeviceHelper.generateVerificationParameters(deviceKey, deviceGroupKey);
          
verifier.get("verifier");
verifier.get("salt")

I tried to create a function to get those values, but it works sometimes and sometime it does not (the error I get is that one of the values have a negative value which I do not see).

__type | "InvalidParameterException"
message | "Found negative value for salt or password verifier."

Can somebody help me, I just want the equivalent to the CognitoDeviceHelper in JS ?

This is the function I created for it but it does not work.

import { type DeviceSecretVerifierConfigType } from "@aws-sdk/client-cognito-identity-provider";
import bigInt from "big-integer";
import CryptoJS from "crypto-js";

// Define the constants N and g
const initN =
  "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" +
  "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" +
  "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" +
  "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" +
  "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" +
  "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" +
  "83655D23DCA3AD961C62F356208552BB9ED529077096966D" +
  "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" +
  "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" +
  "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" +
  "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" +
  "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" +
  "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" +
  "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" +
  "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" +
  "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF";
const N = bigInt(initN, 16);
const g = bigInt("2", 16);

export function createDeviceSecretVerifierConfig(
  deviceGroupKey: string,
  username: string,
): DeviceSecretVerifierConfigType {
  try {
    // Generate a random password (40 random bytes, base64-encoded)
    const RANDOM_PASSWORD = CryptoJS.lib.WordArray.random(40).toString(
      CryptoJS.enc.Base64,
    );
    console.log("RANDOM_PASSWORD:", RANDOM_PASSWORD);

    // Calculate FULL_PASSWORD = SHA256_HASH(DeviceGroupKey + username + ":" + RANDOM_PASSWORD)
    const FULL_PASSWORD = CryptoJS.SHA256(
      deviceGroupKey + username + ":" + RANDOM_PASSWORD,
    ).toString(CryptoJS.enc.Base64);
    console.log("FULL_PASSWORD:", FULL_PASSWORD);

    // Generate a random salt (16 random bytes, base64-encoded)
    const salt = CryptoJS.lib.WordArray.random(16).toString(
      CryptoJS.enc.Base64,
    );
    console.log("salt:", salt);

    // Calculate PasswordVerifier = g^(SHA256_HASH(salt + FULL_PASSWORD)) mod N
    const hashedPassword = bigInt(
      CryptoJS.SHA256(salt + FULL_PASSWORD).toString(CryptoJS.enc.Hex),
      16,
    );
    console.log("hashedPassword:", hashedPassword.toString(16));

    const passwordVerifier = g.modPow(hashedPassword.abs(), N).toString(16);
    console.log("PasswordVerifier:", passwordVerifier);

    const deviceSecretVerifierConfig: DeviceSecretVerifierConfigType = {
      Salt: salt,
      PasswordVerifier: passwordVerifier,
    };

    return deviceSecretVerifierConfig;
  } catch (error) {
    console.error("Error in createDeviceSecretVerifierConfig:", error);
    throw error;
  }
}

[ManuelGuerreroVana]

Maybe the generateHashDevice function here can help me ?

https://github.com/aws-amplify/amplify-js/blob/master/packages/amazon-cognito-identity-js/src/AuthenticationHelper.js#L149

But it seems that is not available in amazon-cognito-identity-js

[ManuelGuerreroVana]

Hello @RanVaknin , sorry for tagging you like this, can you help me man, or one of your coworker 😔