[PM-19846] Mark network module implementation details internal (#5115)

2025-12-11 04:39:19 -06:00 · 2025-05-01 10:26:19 -04:00 · 2025-05-01 10:26:19 -04:00 · 7436122953
commit 7436122953
parent 23ef5b38fe
53 changed files with 57 additions and 64 deletions
--- a/authenticator/src/main/kotlin/com/bitwarden/authenticator/data/platform/datasource/network/di/PlatformNetworkModule.kt
+++ b/authenticator/src/main/kotlin/com/bitwarden/authenticator/data/platform/datasource/network/di/PlatformNetworkModule.kt
@ -9,7 +9,6 @@ import com.bitwarden.network.BitwardenServiceClient
 import com.bitwarden.network.bitwardenServiceClient
 import com.bitwarden.network.interceptor.AuthTokenProvider
 import com.bitwarden.network.interceptor.BaseUrlsProvider
-import com.bitwarden.network.interceptor.HeadersInterceptor
 import com.bitwarden.network.model.BitwardenServiceClientConfig
 import com.bitwarden.network.service.ConfigService
 import com.bitwarden.network.ssl.CertificateProvider
@ -37,14 +36,6 @@ object PlatformNetworkModule {
        bitwardenServiceClient: BitwardenServiceClient,
    ): ConfigService = bitwardenServiceClient.configService

-    @Provides
-    @Singleton
-    fun providesHeadersInterceptor(): HeadersInterceptor = HeadersInterceptor(
-        userAgent = HEADER_VALUE_USER_AGENT,
-        clientName = HEADER_VALUE_CLIENT_NAME,
-        clientVersion = HEADER_VALUE_CLIENT_VERSION,
-    )
-
    @Provides
    @Singleton
    fun provideBitwardenServiceClient(
--- a/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedAccountsApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedAccountsApi.kt
@ -13,7 +13,7 @@ import retrofit2.http.POST
 /**
 * Defines raw calls under the /accounts API with authentication applied.
 */
-interface AuthenticatedAccountsApi {
+internal interface AuthenticatedAccountsApi {

    /**
     * Converts the currently active account to a key-connector account.
--- a/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedAuthRequestsApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedAuthRequestsApi.kt
@ -14,7 +14,7 @@ import retrofit2.http.Path
 /**
 * Defines authenticated raw calls under the /auth-requests API.
 */
-interface AuthenticatedAuthRequestsApi {
+internal interface AuthenticatedAuthRequestsApi {

    /**
     * Notifies the server of a new admin authentication request.
--- a/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedDevicesApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedDevicesApi.kt
@ -12,7 +12,7 @@ import retrofit2.http.Path
 * Defines raw calls under the /devices API that require authentication.
 */
@Keep
-interface AuthenticatedDevicesApi {
+internal interface AuthenticatedDevicesApi {
    @PUT("/devices/{appId}/keys")
    suspend fun updateTrustedDeviceKeys(
        @Path(value = "appId") appId: String,
--- a/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedKeyConnectorApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedKeyConnectorApi.kt
@ -11,7 +11,7 @@ import retrofit2.http.Url
 * Defines raw calls specific for key connectors that use custom urls.
 */
@Keep
-interface AuthenticatedKeyConnectorApi {
+internal interface AuthenticatedKeyConnectorApi {
    @POST
    suspend fun storeMasterKeyToKeyConnector(
        @Url url: String,
--- a/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedOrganizationApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/AuthenticatedOrganizationApi.kt
@ -13,7 +13,7 @@ import retrofit2.http.Path
 /**
 * Defines raw calls under the authenticated /organizations API.
 */
-interface AuthenticatedOrganizationApi {
+internal interface AuthenticatedOrganizationApi {
    /**
     * Enrolls this user in the organization's password reset.
     */
--- a/network/src/main/kotlin/com/bitwarden/network/api/AzureApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/AzureApi.kt
@ -11,7 +11,7 @@ import retrofit2.http.Url
 /**
 * Defines raw calls to the Azure API without any authentication applied.
 */
-interface AzureApi {
+internal interface AzureApi {
    /**
     * Attempts to upload an encrypted file to Azure.
     */
--- a/network/src/main/kotlin/com/bitwarden/network/api/CiphersApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/CiphersApi.kt
@ -22,7 +22,7 @@ import retrofit2.http.Query
 * Defines raw calls under the /ciphers API with authentication applied.
 */
@Suppress("TooManyFunctions")
-interface CiphersApi {
+internal interface CiphersApi {

    /**
     * Create a cipher.
--- a/network/src/main/kotlin/com/bitwarden/network/api/ConfigApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/ConfigApi.kt
@ -7,7 +7,7 @@ import retrofit2.http.GET
 /**
 * This interface defines the API service for fetching configuration data.
 */
-interface ConfigApi {
+internal interface ConfigApi {

    @GET("config")
    suspend fun getConfig(): NetworkResult<ConfigResponseJson>
--- a/network/src/main/kotlin/com/bitwarden/network/api/DigitalAssetLinkApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/DigitalAssetLinkApi.kt
@ -10,7 +10,7 @@ import retrofit2.http.Query
 * Defines calls to a digital asset link file.
 */
@Keep
-interface DigitalAssetLinkApi {
+internal interface DigitalAssetLinkApi {

    /**
     * Checks if the given [relation] exists in a digital asset link file.
--- a/network/src/main/kotlin/com/bitwarden/network/api/DownloadApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/DownloadApi.kt
@ -9,7 +9,7 @@ import retrofit2.http.Url
 /**
 * Defines endpoints to retrieve content from arbitrary URLs.
 */
-interface DownloadApi {
+internal interface DownloadApi {
    /**
     * Streams data from a [url].
     */
--- a/network/src/main/kotlin/com/bitwarden/network/api/EventApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/EventApi.kt
@ -8,7 +8,7 @@ import retrofit2.http.POST
 /**
 * This interface defines the API service for posting event data.
 */
-interface EventApi {
+internal interface EventApi {
    @POST("/collect")
    suspend fun collectOrganizationEvents(
        @Body events: List<OrganizationEventJson>,
--- a/network/src/main/kotlin/com/bitwarden/network/api/FoldersApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/FoldersApi.kt
@ -13,7 +13,7 @@ import retrofit2.http.Path
 /**
 * Defines raw calls under the /folders API with authentication applied.
 */
-interface FoldersApi {
+internal interface FoldersApi {

    /**
     * Create a folder.
--- a/network/src/main/kotlin/com/bitwarden/network/api/HaveIBeenPwnedApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/HaveIBeenPwnedApi.kt
@ -9,7 +9,7 @@ import retrofit2.http.Path
 * Defines endpoints for the "have I been pwned" API. For docs see
 * https://haveibeenpwned.com/API/v2.
 */
-interface HaveIBeenPwnedApi {
+internal interface HaveIBeenPwnedApi {

    @GET("/range/{hashPrefix}")
    suspend fun fetchBreachedPasswords(
--- a/network/src/main/kotlin/com/bitwarden/network/api/PushApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/PushApi.kt
@ -9,7 +9,7 @@ import retrofit2.http.Path
 /**
 * Defines API calls for push tokens.
 */
-interface PushApi {
+internal interface PushApi {
    @PUT("/devices/identifier/{appId}/token")
    suspend fun putDeviceToken(
        @Path("appId") appId: String,
--- a/network/src/main/kotlin/com/bitwarden/network/api/SendsApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/SendsApi.kt
@ -17,7 +17,7 @@ import retrofit2.http.Path
 * Defines raw calls under the /send API with authentication applied.
 */
@Keep
-interface SendsApi {
+internal interface SendsApi {

    /**
     * Create a text send.
--- a/network/src/main/kotlin/com/bitwarden/network/api/SyncApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/SyncApi.kt
@ -7,7 +7,7 @@ import retrofit2.http.GET
 /**
 * This interface defines the API service for fetching vault data.
 */
-interface SyncApi {
+internal interface SyncApi {
    /**
     * Retrieves the vault data from the server.
     *
--- a/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedAccountsApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedAccountsApi.kt
@ -13,7 +13,7 @@ import retrofit2.http.POST
 /**
 * Defines raw calls under the /accounts API.
 */
-interface UnauthenticatedAccountsApi {
+internal interface UnauthenticatedAccountsApi {
    @POST("/accounts/password-hint")
    suspend fun passwordHintRequest(
        @Body body: PasswordHintRequestJson,
--- a/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedAuthRequestsApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedAuthRequestsApi.kt
@ -13,7 +13,7 @@ import retrofit2.http.Query
 /**
 * Defines unauthenticated raw calls under the /auth-requests API.
 */
-interface UnauthenticatedAuthRequestsApi {
+internal interface UnauthenticatedAuthRequestsApi {

    /**
     * Notifies the server of a new authentication request.
--- a/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedDevicesApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedDevicesApi.kt
@ -7,7 +7,7 @@ import retrofit2.http.Header
 /**
 * Defines raw calls under the /devices API that do not require authentication.
 */
-interface UnauthenticatedDevicesApi {
+internal interface UnauthenticatedDevicesApi {
    @GET("/devices/knowndevice")
    suspend fun getIsKnownDevice(
        @Header(value = "X-Request-Email") emailAddress: String,
--- a/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedIdentityApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedIdentityApi.kt
@ -24,7 +24,7 @@ import retrofit2.http.Query
 /**
 * Defines raw calls under the /identity API.
 */
-interface UnauthenticatedIdentityApi {
+internal interface UnauthenticatedIdentityApi {

    @POST("/connect/token")
    @Suppress("LongParameterList")
--- a/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedKeyConnectorApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedKeyConnectorApi.kt
@ -15,7 +15,7 @@ import retrofit2.http.Url
 * Defines raw calls specific for key connectors that use custom urls.
 */
@Keep
-interface UnauthenticatedKeyConnectorApi {
+internal interface UnauthenticatedKeyConnectorApi {
    @POST
    suspend fun storeMasterKeyToKeyConnector(
        @Url url: String,
--- a/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedOrganizationApi.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/api/UnauthenticatedOrganizationApi.kt
@ -11,7 +11,7 @@ import retrofit2.http.POST
 /**
 * Defines raw calls under the /organizations API.
 */
-interface UnauthenticatedOrganizationApi {
+internal interface UnauthenticatedOrganizationApi {
    /**
     * Checks for the claimed domain organization of an email for SSO purposes.
     */
--- a/network/src/main/kotlin/com/bitwarden/network/core/NetworkResultCall.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/core/NetworkResultCall.kt
@ -20,7 +20,7 @@ private const val NO_CONTENT_RESPONSE_CODE: Int = 204
 * A [Call] for wrapping a network request into a [NetworkResult].
 */
@Suppress("TooManyFunctions")
-class NetworkResultCall<T>(
+internal class NetworkResultCall<T>(
    private val backingCall: Call<T>,
    private val successType: Type,
 ) : Call<NetworkResult<T>> {
--- a/network/src/main/kotlin/com/bitwarden/network/core/NetworkResultCallAdapter.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/core/NetworkResultCallAdapter.kt
@ -8,7 +8,7 @@ import java.lang.reflect.Type
 /**
 * A [retrofit2.CallAdapter] for wrapping network requests into [NetworkResult].
 */
-class NetworkResultCallAdapter<T>(
+internal class NetworkResultCallAdapter<T>(
    private val successType: Type,
 ) : CallAdapter<T, Call<NetworkResult<T>>> {

--- a/network/src/main/kotlin/com/bitwarden/network/core/NetworkResultCallAdapterFactory.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/core/NetworkResultCallAdapterFactory.kt
@ -10,7 +10,7 @@ import java.lang.reflect.Type
 /**
 * A [retrofit2.CallAdapter.Factory] for wrapping network requests into [NetworkResult].
 */
-class NetworkResultCallAdapterFactory : CallAdapter.Factory() {
+internal class NetworkResultCallAdapterFactory : CallAdapter.Factory() {
    override fun get(
        returnType: Type,
        annotations: Array<out Annotation>,
--- a/network/src/main/kotlin/com/bitwarden/network/interceptor/AuthTokenInterceptor.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/interceptor/AuthTokenInterceptor.kt
@ -9,7 +9,7 @@ import java.io.IOException
 /**
 * Interceptor responsible for adding the auth token(Bearer) to API requests.
 */
-class AuthTokenInterceptor(
+internal class AuthTokenInterceptor(
    private val authTokenProvider: AuthTokenProvider,
 ) : Interceptor {
    private val missingTokenMessage = "Auth token is missing!"
--- a/network/src/main/kotlin/com/bitwarden/network/interceptor/BaseUrlInterceptor.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/interceptor/BaseUrlInterceptor.kt
@ -9,7 +9,7 @@ import okhttp3.Response
 * An [Interceptor] that optionally takes the current base URL of a request and replaces it with
 * the currently set base URL from the [baseUrlProvider].
 */
-class BaseUrlInterceptor(
+internal class BaseUrlInterceptor(
    private val baseUrlProvider: () -> String?,
 ) : Interceptor {

--- a/network/src/main/kotlin/com/bitwarden/network/interceptor/BaseUrlInterceptors.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/interceptor/BaseUrlInterceptors.kt
@ -6,7 +6,7 @@ import com.bitwarden.core.annotation.OmitFromCoverage
 * An overall container for various [BaseUrlInterceptor] implementations for different API groups.
 */
@OmitFromCoverage
-class BaseUrlInterceptors(
+internal class BaseUrlInterceptors(
    private val baseUrlsProvider: BaseUrlsProvider,
 ) {
    /**
--- a/network/src/main/kotlin/com/bitwarden/network/interceptor/HeadersInterceptor.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/interceptor/HeadersInterceptor.kt
@ -11,7 +11,7 @@ import okhttp3.Response
 /**
 * Interceptor responsible for adding various headers to all API requests.
 */
-class HeadersInterceptor(
+internal class HeadersInterceptor(
    private val userAgent: String,
    private val clientName: String,
    private val clientVersion: String,
--- a/network/src/main/kotlin/com/bitwarden/network/service/AccountsServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/AccountsServiceImpl.kt
@ -28,7 +28,7 @@ import kotlinx.serialization.json.Json
 * The default implementation of the [AccountsService].
 */
@Suppress("TooManyFunctions")
-class AccountsServiceImpl(
+internal class AccountsServiceImpl(
    private val unauthenticatedAccountsApi: UnauthenticatedAccountsApi,
    private val authenticatedAccountsApi: AuthenticatedAccountsApi,
    private val unauthenticatedKeyConnectorApi: UnauthenticatedKeyConnectorApi,
--- a/network/src/main/kotlin/com/bitwarden/network/service/AuthRequestsServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/AuthRequestsServiceImpl.kt
@ -5,7 +5,7 @@ import com.bitwarden.network.model.AuthRequestUpdateRequestJson
 import com.bitwarden.network.model.AuthRequestsResponseJson
 import com.bitwarden.network.util.toResult

-class AuthRequestsServiceImpl(
+internal class AuthRequestsServiceImpl(
    private val authenticatedAuthRequestsApi: AuthenticatedAuthRequestsApi,
 ) : AuthRequestsService {
    override suspend fun getAuthRequests(): Result<AuthRequestsResponseJson> =
--- a/network/src/main/kotlin/com/bitwarden/network/service/CiphersServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/CiphersServiceImpl.kt
@ -30,7 +30,7 @@ import java.time.ZonedDateTime
 import java.time.format.DateTimeFormatter

@Suppress("TooManyFunctions")
-class CiphersServiceImpl(
+internal class CiphersServiceImpl(
    private val azureApi: AzureApi,
    private val ciphersApi: CiphersApi,
    private val json: Json,
--- a/network/src/main/kotlin/com/bitwarden/network/service/ConfigServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/ConfigServiceImpl.kt
@ -8,6 +8,6 @@ import com.bitwarden.network.util.toResult
 * Default implementation of [ConfigService] for querying app configurations.
 */
 // TODO [PM-19846] Make internal when dependents are migrated.
-class ConfigServiceImpl(private val configApi: ConfigApi) : ConfigService {
+internal class ConfigServiceImpl(private val configApi: ConfigApi) : ConfigService {
    override suspend fun getConfig(): Result<ConfigResponseJson> = configApi.getConfig().toResult()
 }
--- a/network/src/main/kotlin/com/bitwarden/network/service/DevicesServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/DevicesServiceImpl.kt
@ -10,7 +10,7 @@ import com.bitwarden.network.util.toResult
 /**
 * The default implementation of the [DevicesService].
 */
-class DevicesServiceImpl(
+internal class DevicesServiceImpl(
    private val authenticatedDevicesApi: AuthenticatedDevicesApi,
    private val unauthenticatedDevicesApi: UnauthenticatedDevicesApi,
 ) : DevicesService {
--- a/network/src/main/kotlin/com/bitwarden/network/service/DigitalAssetLinkServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/DigitalAssetLinkServiceImpl.kt
@ -7,7 +7,7 @@ import com.bitwarden.network.util.toResult
 /**
 * Primary implementation of [DigitalAssetLinkService].
 */
-class DigitalAssetLinkServiceImpl(
+internal class DigitalAssetLinkServiceImpl(
    private val digitalAssetLinkApi: DigitalAssetLinkApi,
 ) : DigitalAssetLinkService {

--- a/network/src/main/kotlin/com/bitwarden/network/service/DownloadServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/DownloadServiceImpl.kt
@ -7,7 +7,7 @@ import okhttp3.ResponseBody
 /**
 * Default implementation of [DownloadService].
 */
-class DownloadServiceImpl(
+internal class DownloadServiceImpl(
    private val downloadApi: DownloadApi,
 ) : DownloadService {
    override suspend fun getDataStream(
--- a/network/src/main/kotlin/com/bitwarden/network/service/EventServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/EventServiceImpl.kt
@ -7,7 +7,7 @@ import com.bitwarden.network.util.toResult
 /**
 * The default implementation of the [EventService].
 */
-class EventServiceImpl(
+internal class EventServiceImpl(
    private val eventApi: EventApi,
 ) : EventService {
    override suspend fun sendOrganizationEvents(
--- a/network/src/main/kotlin/com/bitwarden/network/service/FolderServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/FolderServiceImpl.kt
@ -10,7 +10,7 @@ import com.bitwarden.network.util.parseErrorBodyOrNull
 import com.bitwarden.network.util.toResult
 import kotlinx.serialization.json.Json

-class FolderServiceImpl(
+internal class FolderServiceImpl(
    private val foldersApi: FoldersApi,
    private val json: Json,
 ) : FolderService {
--- a/network/src/main/kotlin/com/bitwarden/network/service/HaveIBeenPwnedServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/HaveIBeenPwnedServiceImpl.kt
@ -4,7 +4,9 @@ import com.bitwarden.network.api.HaveIBeenPwnedApi
 import com.bitwarden.network.util.toResult
 import java.security.MessageDigest

-class HaveIBeenPwnedServiceImpl(private val api: HaveIBeenPwnedApi) : HaveIBeenPwnedService {
+internal class HaveIBeenPwnedServiceImpl(
+    private val api: HaveIBeenPwnedApi,
+) : HaveIBeenPwnedService {

    @Suppress("MagicNumber")
    override suspend fun getPasswordBreachCount(password: String): Result<Int> {
--- a/network/src/main/kotlin/com/bitwarden/network/service/IdentityServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/IdentityServiceImpl.kt
@ -24,7 +24,7 @@ import com.bitwarden.network.util.parseErrorBodyOrNull
 import com.bitwarden.network.util.toResult
 import kotlinx.serialization.json.Json

-class IdentityServiceImpl(
+internal class IdentityServiceImpl(
    private val unauthenticatedIdentityApi: UnauthenticatedIdentityApi,
    private val json: Json,
    private val deviceModelProvider: DeviceModelProvider = DeviceModelProvider(),
--- a/network/src/main/kotlin/com/bitwarden/network/service/NewAuthRequestServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/NewAuthRequestServiceImpl.kt
@ -11,7 +11,7 @@ import com.bitwarden.network.util.toResult
 /**
 * The default implementation of the [NewAuthRequestService].
 */
-class NewAuthRequestServiceImpl(
+internal class NewAuthRequestServiceImpl(
    private val authenticatedAuthRequestsApi: AuthenticatedAuthRequestsApi,
    private val unauthenticatedAuthRequestsApi: UnauthenticatedAuthRequestsApi,
 ) : NewAuthRequestService {
--- a/network/src/main/kotlin/com/bitwarden/network/service/OrganizationServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/OrganizationServiceImpl.kt
@ -14,7 +14,7 @@ import com.bitwarden.network.util.toResult
 /**
 * Default implementation of [OrganizationService].
 */
-class OrganizationServiceImpl(
+internal class OrganizationServiceImpl(
    private val authenticatedOrganizationApi: AuthenticatedOrganizationApi,
    private val unauthenticatedOrganizationApi: UnauthenticatedOrganizationApi,
 ) : OrganizationService {
--- a/network/src/main/kotlin/com/bitwarden/network/service/PushServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/PushServiceImpl.kt
@ -7,7 +7,7 @@ import com.bitwarden.network.util.toResult
 /**
 * Default implementation of [PushService].
 */
-class PushServiceImpl(
+internal class PushServiceImpl(
    private val pushApi: PushApi,
    private val appId: String,
 ) : PushService {
--- a/network/src/main/kotlin/com/bitwarden/network/service/SendsServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/SendsServiceImpl.kt
@ -27,7 +27,7 @@ import java.time.format.DateTimeFormatter
 /**
 * Default implementation of the [SendsService].
 */
-class SendsServiceImpl(
+internal class SendsServiceImpl(
    private val azureApi: AzureApi,
    private val sendsApi: SendsApi,
    private val clock: Clock,
--- a/network/src/main/kotlin/com/bitwarden/network/service/SyncServiceImpl.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/service/SyncServiceImpl.kt
@ -4,7 +4,7 @@ import com.bitwarden.network.api.SyncApi
 import com.bitwarden.network.model.SyncResponseJson
 import com.bitwarden.network.util.toResult

-class SyncServiceImpl(
+internal class SyncServiceImpl(
    private val syncApi: SyncApi,
 ) : SyncService {
    override suspend fun sync(): Result<SyncResponseJson> = syncApi
--- a/network/src/main/kotlin/com/bitwarden/network/util/CallExtensions.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/CallExtensions.kt
@ -7,7 +7,7 @@ import retrofit2.Call
 /**
 * Synchronously executes the [Call] and returns the [NetworkResult].
 */
-inline fun <reified T : Any> Call<T>.executeForNetworkResult(): NetworkResult<T> =
+internal inline fun <reified T : Any> Call<T>.executeForNetworkResult(): NetworkResult<T> =
    this
        .toNetworkResultCall()
        .executeForResult()
@ -15,7 +15,7 @@ inline fun <reified T : Any> Call<T>.executeForNetworkResult(): NetworkResult<T>
 /**
 * Wraps the existing [Call] in a [NetworkResultCall].
 */
-inline fun <reified T : Any> Call<T>.toNetworkResultCall(): NetworkResultCall<T> =
+internal inline fun <reified T : Any> Call<T>.toNetworkResultCall(): NetworkResultCall<T> =
    NetworkResultCall(
        backingCall = this,
        successType = T::class.java,
--- a/network/src/main/kotlin/com/bitwarden/network/util/DeviceModelProvider.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/DeviceModelProvider.kt
@ -7,7 +7,7 @@ import com.bitwarden.core.annotation.OmitFromCoverage
 * Provides device model string. Useful for mocking static [Build.MODEL] call tests.
 */
@OmitFromCoverage
-class DeviceModelProvider {
+internal class DeviceModelProvider {

    /**
     * Device model.
--- a/network/src/main/kotlin/com/bitwarden/network/util/ExceptionExtensions.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/ExceptionExtensions.kt
@ -17,7 +17,7 @@ import retrofit2.HttpException
 * will be attempted to be parsed.
 * @param json [Json] serializer to use.
 */
-inline fun <reified T> BitwardenError.parseErrorBodyOrNull(
+internal inline fun <reified T> BitwardenError.parseErrorBodyOrNull(
    codes: List<NetworkErrorCode>,
    json: Json,
 ): T? =
@ -31,7 +31,7 @@ inline fun <reified T> BitwardenError.parseErrorBodyOrNull(
 /**
 * Helper for calling [parseErrorBodyOrNull] with a single code.
 */
-inline fun <reified T> BitwardenError.parseErrorBodyOrNull(
+internal inline fun <reified T> BitwardenError.parseErrorBodyOrNull(
    code: NetworkErrorCode,
    json: Json,
 ): T? = parseErrorBodyOrNull(codes = listOf(code), json = json)
--- a/network/src/main/kotlin/com/bitwarden/network/util/HeaderUtils.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/HeaderUtils.kt
@ -3,7 +3,7 @@ package com.bitwarden.network.util
 /**
 * The key used for the 'authorization' headers.
 */
-const val HEADER_KEY_AUTHORIZATION: String = "Authorization"
+internal const val HEADER_KEY_AUTHORIZATION: String = "Authorization"

 /**
 * The key used for the 'bitwarden-client-name' headers.
@ -28,7 +28,7 @@ internal const val HEADER_KEY_DEVICE_TYPE: String = "Device-Type"
 /**
 * The bearer prefix used for the 'authorization' headers value.
 */
-const val HEADER_VALUE_BEARER_PREFIX: String = "Bearer "
+internal const val HEADER_VALUE_BEARER_PREFIX: String = "Bearer "

 /**
 * The value used for the 'device-type' headers.
--- a/network/src/main/kotlin/com/bitwarden/network/util/NetworkErrorCode.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/NetworkErrorCode.kt
@ -3,7 +3,7 @@ package com.bitwarden.network.util
 /**
 * An enum that represents HTTP error codes that we may need to parse for specific responses.
 */
-enum class NetworkErrorCode(
+internal enum class NetworkErrorCode(
    val code: Int,
 ) {
    BAD_REQUEST(code = 400),
--- a/network/src/main/kotlin/com/bitwarden/network/util/NetworkResultExtensions.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/NetworkResultExtensions.kt
@ -7,7 +7,7 @@ import com.bitwarden.network.model.NetworkResult
 /**
 * Converts the [NetworkResult] to a [Result].
 */
-fun <T> NetworkResult<T>.toResult(): Result<T> =
+internal fun <T> NetworkResult<T>.toResult(): Result<T> =
    when (this) {
        is NetworkResult.Failure -> this.throwable.asFailure()
        is NetworkResult.Success -> this.value.asSuccess()
--- a/network/src/main/kotlin/com/bitwarden/network/util/TwoFactorAuthMethodExtensions.kt
+++ b/network/src/main/kotlin/com/bitwarden/network/util/TwoFactorAuthMethodExtensions.kt
@ -7,7 +7,7 @@ import com.bitwarden.network.model.TwoFactorAuthMethod
 * (Higher value = preference to use the method if it's available)
 */
@Suppress("MagicNumber")
-val TwoFactorAuthMethod.priority: Int
+internal val TwoFactorAuthMethod.priority: Int
    get() = when (this) {
        TwoFactorAuthMethod.AUTHENTICATOR_APP -> 1
        TwoFactorAuthMethod.EMAIL -> 0