Method tryUserPasswordR56

src/security/standard-handler.ts:275–322

* Try user password for R5-R6 encryption.

(password: Uint8Array)

   * Try user password for R5-R6 encryption.
   */
  private tryUserPasswordR56(password: Uint8Array): AuthResult {
    const { userHash, userEncryptionKey, revision, permsValue, permissionsRaw, encryptMetadata } =
      this.encryptDict;

    if (!userEncryptionKey) {
      return {
        authenticated: false,
        permissions: this.encryptDict.permissions,
        isOwner: false,
      };
    }

    const result = verifyUserPasswordR56(password, userHash, userEncryptionKey, revision);

    if (result.isValid && result.encryptionKey) {
      // For R6, verify Perms entry
      if (revision === 6 && permsValue) {
        const permsValid = verifyPermsEntry(
          result.encryptionKey,
          permsValue,
          permissionsRaw,
          encryptMetadata,
        );
        if (!permsValid) {
          return {
            authenticated: false,
            permissions: this.encryptDict.permissions,
            isOwner: false,
          };
        }
      }

      this.setAuthenticated(result.encryptionKey, false);

      return {
        authenticated: true,
        passwordType: "user",
        permissions: this.encryptDict.permissions,
        isOwner: false,
      };
    }

    return {
      authenticated: false,
      permissions: this.encryptDict.permissions,
      isOwner: false,
    };
  }

  /**
   * Try owner password for R5-R6 encryption.