@affinidi/cli 2.0.0-beta.4 → 2.0.0-beta.6

package/dist/services/affinidi/auth/token.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenService = exports.MockStorer = void 0;
+const tslib_1 = require("tslib");
+/* eslint-disable max-classes-per-file */
+const os = tslib_1.__importStar(require("os"));
+const path = tslib_1.__importStar(require("path"));
+const conf_1 = tslib_1.__importDefault(require("conf"));
+class TokenService {
+    constructor(storer) {
+        this.getUserToken = () => {
+            return this.store.getUserToken();
+        };
+        this.getProjectToken = () => {
+            return this.store.getProjectToken();
+        };
+        this.getPrincipalId = () => {
+            return this.store.getPrincipalId();
+        };
+        this.setUserToken = (token) => {
+            this.store.setUserToken(token);
+        };
+        this.setProjectToken = (token, projectId, projectName) => {
+            const project = JSON.parse(JSON.stringify(token));
+            const projectToken = {
+                projectName,
+                projectId,
+                projectAccessToken: project.accessToken,
+                expiresIn: project.expiresIn,
+                scope: project.scope,
+            };
+            this.store.setProjectToken(projectToken);
+        };
+        this.setPrincipalId = (principalId) => {
+            this.store.setPrincipalId(principalId);
+        };
+        this.clear = () => {
+            this.store.clear();
+        };
+        this.store = storer;
+    }
+}
+const credentialConf = new conf_1.default({
+    cwd: path.join(os.homedir(), '.affinidi'),
+    configName: 'oAuthCred',
+});
+const storer = {
+    clear: () => {
+        credentialConf.clear();
+    },
+    getUserToken: () => {
+        return credentialConf.get('userToken');
+    },
+    setUserToken: (token) => {
+        credentialConf.set('userToken', token);
+    },
+    getProjectToken: () => {
+        return credentialConf.get('projectToken');
+    },
+    setProjectToken: (token) => {
+        credentialConf.set('projectToken', token);
+    },
+    getPrincipalId: () => {
+        return credentialConf.get('principalId');
+    },
+    setPrincipalId: (principalId) => {
+        credentialConf.set('principalId', principalId);
+    },
+};
+const initUserToken = {
+    access_token: '',
+    expires_in: 0,
+    id_token: '',
+    refresh_token: '',
+    scope: '',
+    token_type: '',
+};
+const initProjectToken = {
+    projectName: '',
+    projectId: '',
+    projectAccessToken: '',
+    expiresIn: 0,
+    scope: '',
+};
+class MockStorer {
+    constructor() {
+        this.userToken = { ...initUserToken };
+        this.projectToken = { ...initProjectToken };
+        this.principalId = 'AwesomePrincipalId';
+    }
+    clear() {
+        this.userToken = { ...initUserToken };
+        this.projectToken = { ...initProjectToken };
+        this.principalId = 'AwesomePrincipalId';
+    }
+    getUserToken() {
+        return this.userToken;
+    }
+    setUserToken(token) {
+        this.userToken = token;
+    }
+    getProjectToken() {
+        return this.projectToken;
+    }
+    setProjectToken(token) {
+        this.projectToken = token;
+    }
+    getPrincipalId() {
+        return this.principalId;
+    }
+    setPrincipalId(principalId) {
+        this.principalId = principalId;
+    }
+}
+exports.MockStorer = MockStorer;
+exports.tokenService = new TokenService(process.env.NODE_ENV === 'test' ? new MockStorer() : storer);
+//# sourceMappingURL=token.js.map

package/dist/services/affinidi/auth/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../src/services/affinidi/auth/token.ts"],"names":[],"mappings":";;;;AAAA,yCAAyC;AACzC,+CAAwB;AACxB,mDAA4B;AAC5B,wDAAuB;AAmCvB,MAAM,YAAY;IAGhB,YAAY,MAAwB;QAI7B,iBAAY,GAAG,GAAc,EAAE;YACpC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAA;QAClC,CAAC,CAAA;QAEM,oBAAe,GAAG,GAAiB,EAAE;YAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;QACrC,CAAC,CAAA;QAEM,mBAAc,GAAG,GAAW,EAAE;YACnC,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAA;QACpC,CAAC,CAAA;QAEM,iBAAY,GAAG,CAAC,KAAgB,EAAQ,EAAE;YAC/C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC,CAAA;QAEM,oBAAe,GAAG,CAAC,KAAc,EAAE,SAAiB,EAAE,WAAmB,EAAQ,EAAE;YACxF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;YACjD,MAAM,YAAY,GAAiB;gBACjC,WAAW;gBACX,SAAS;gBACT,kBAAkB,EAAE,OAAO,CAAC,WAAW;gBACvC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAA;YACD,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;QAC1C,CAAC,CAAA;QAEM,mBAAc,GAAG,CAAC,WAAmB,EAAQ,EAAE;YACpD,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QACxC,CAAC,CAAA;QAEM,UAAK,GAAG,GAAS,EAAE;YACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC,CAAA;QArCC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAA;IACrB,CAAC;CAqCF;AAED,MAAM,cAAc,GAAG,IAAI,cAAI,CAAY;IACzC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC;IACzC,UAAU,EAAE,WAAW;CACxB,CAAC,CAAA;AAEF,MAAM,MAAM,GAAqB;IAC/B,KAAK,EAAE,GAAS,EAAE;QAChB,cAAc,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;IACD,YAAY,EAAE,GAAc,EAAE;QAC5B,OAAO,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC;IACD,YAAY,EAAE,CAAC,KAAgB,EAAQ,EAAE;QACvC,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACxC,CAAC;IACD,eAAe,EAAE,GAAiB,EAAE;QAClC,OAAO,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAC3C,CAAC;IACD,eAAe,EAAE,CAAC,KAAmB,EAAQ,EAAE;QAC7C,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IACD,cAAc,EAAE,GAAW,EAAE;QAC3B,OAAO,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC1C,CAAC;IACD,cAAc,EAAE,CAAC,WAAmB,EAAQ,EAAE;QAC5C,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC;CACF,CAAA;AAMD,MAAM,aAAa,GAAc;IAC/B,YAAY,EAAE,EAAE;IAChB,UAAU,EAAE,CAAC;IACb,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,EAAE;CACf,CAAA;AAED,MAAM,gBAAgB,GAAiB;IACrC,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,EAAE;IACb,kBAAkB,EAAE,EAAE;IACtB,SAAS,EAAE,CAAC;IACZ,KAAK,EAAE,EAAE;CACV,CAAA;AAED,MAAa,UAAU;IAAvB;QACU,cAAS,GAAc,EAAE,GAAG,aAAa,EAAE,CAAA;QAE3C,iBAAY,GAAiB,EAAE,GAAG,gBAAgB,EAAE,CAAA;QAEpD,gBAAW,GAAG,oBAAoB,CAAA;IA+B5C,CAAC;IA7BQ,KAAK;QACV,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,aAAa,EAAE,CAAA;QACrC,IAAI,CAAC,YAAY,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAA;QAC3C,IAAI,CAAC,WAAW,GAAG,oBAAoB,CAAA;IACzC,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAEM,YAAY,CAAC,KAAgB;QAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;IACxB,CAAC;IAEM,eAAe;QACpB,OAAO,IAAI,CAAC,YAAY,CAAA;IAC1B,CAAC;IAEM,eAAe,CAAC,KAAmB;QACxC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;IAC3B,CAAC;IAEM,cAAc;QACnB,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAEM,cAAc,CAAC,WAAmB;QACvC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;CACF;AApCD,gCAoCC;AAEY,QAAA,YAAY,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/services/affinidi/config.d.ts

@@ -0,0 +1,12 @@
+import { LoggerAdapter, LogLevel } from './adapters';
+export type Environment = 'dev' | 'prod';
+export type ClientSDKConfig = {
+    logger?: LoggerAdapter;
+    logLevel?: LogLevel;
+    environment?: Environment;
+    authConfig: {
+        clientId: string;
+        host: string;
+    };
+    component: 'Cli' | 'VsCodeExtension';
+};

package/dist/services/affinidi/config.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=config.js.map

package/dist/services/affinidi/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/services/affinidi/config.ts"],"names":[],"mappings":""}

package/dist/services/affinidi/errors/index.d.ts

@@ -0,0 +1 @@
+export declare function handleServiceError(error: unknown, serviceErrorMessageHandler?: (response: any) => string | null): never;

package/dist/services/affinidi/errors/index.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleServiceError = void 0;
+const tslib_1 = require("tslib");
+const errors_1 = require("@oclif/core/lib/errors");
+const axios_1 = require("axios");
+const chalk_1 = tslib_1.__importDefault(require("chalk"));
+const http_status_codes_1 = require("http-status-codes");
+const AuthTokenExpired = "Your session has expired. Please, run command 'affinidi start' and try again.";
+// eslint-disable-next-line  @typescript-eslint/no-explicit-any
+const getCommonAPIErrorMessage = (response) => {
+    switch (response.status) {
+        case http_status_codes_1.StatusCodes.FORBIDDEN:
+        case http_status_codes_1.StatusCodes.UNAUTHORIZED:
+            return "You are not authorized to perform this action\nPlease, make sure you are logged in and have an active project by running command 'affinidi start'";
+        case http_status_codes_1.StatusCodes.NOT_FOUND:
+            return 'The resource you are trying to access was not found\nPlease, check the entered resource identifier';
+        case http_status_codes_1.StatusCodes.TOO_MANY_REQUESTS:
+            return 'Rate limit exceeded for the request. Please try again later.';
+        case http_status_codes_1.StatusCodes.BAD_REQUEST:
+            switch (response.data?.name) {
+                case 'NotSupportedError':
+                    return 'Action not supported\nUse flag --help to get details about command usage';
+                default: {
+                    let message = 'Invalid input parameters';
+                    message +=
+                        '\nPlease, check the validity of entered values. Use flag --help to get details about input parameters.';
+                    const issues = response.data.details;
+                    if (issues && issues.length) {
+                        message += `\nIssues found:`;
+                        issues.forEach((issue) => {
+                            message += `\n- ${issue.issue}`;
+                        });
+                    }
+                    return message;
+                }
+            }
+        case http_status_codes_1.StatusCodes.CONFLICT:
+            switch (response.data?.name) {
+                case 'AlreadyExistsError':
+                    return 'The resource you are trying to create already exists\nPlease, make sure the resource identifier is unique';
+                case 'QuotaExceededError':
+                    return `You have exceeded your quota.\nIf you think this is a mistake please contact customer support ${chalk_1.default.underline('https://share.hsforms.com/1i-4HKZRXSsmENzXtPdIG4g8oa2v')}.\n`;
+                default:
+                    return 'Conflicting action with the current state of your resources';
+            }
+        default:
+            return `Unexpected error occurred\n
+        ${response.data.debugId || response.data.traceId
+                ? `\nDetails: ${JSON.stringify({
+                    debugId: response.data.debugId,
+                    traceId: response.data.traceId,
+                })}`
+                : ''}
+        \n\nReport above error to ${chalk_1.default.underline('https://share.hsforms.com/1i-4HKZRXSsmENzXtPdIG4g8oa2v')}.\n`;
+    }
+};
+function handleServiceError(error, serviceErrorMessageHandler) {
+    if (error instanceof axios_1.AxiosError && error.response) {
+        const { name, details } = error.response.data;
+        const isJwtExpired = name && name === 'InvalidJwtTokenError' && details?.some((err) => err.issue === 'jwt-expired');
+        if (isJwtExpired) {
+            throw new Error(AuthTokenExpired);
+        }
+        if (error.response) {
+            throw new errors_1.CLIError(serviceErrorMessageHandler
+                ? serviceErrorMessageHandler(error.response) ?? getCommonAPIErrorMessage(error.response)
+                : getCommonAPIErrorMessage(error.response));
+        }
+    }
+    throw error;
+}
+exports.handleServiceError = handleServiceError;
+//# sourceMappingURL=index.js.map

package/dist/services/affinidi/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/services/affinidi/errors/index.ts"],"names":[],"mappings":";;;;AAAA,mDAAiD;AACjD,iCAAkC;AAClC,0DAAyB;AACzB,yDAA+C;AAE/C,MAAM,gBAAgB,GAAG,+EAA+E,CAAA;AAExG,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,CAAC,QAAa,EAAU,EAAE;IACzD,QAAQ,QAAQ,CAAC,MAAM,EAAE;QACvB,KAAK,+BAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,+BAAW,CAAC,YAAY;YAC3B,OAAO,mJAAmJ,CAAA;QAC5J,KAAK,+BAAW,CAAC,SAAS;YACxB,OAAO,oGAAoG,CAAA;QAC7G,KAAK,+BAAW,CAAC,iBAAiB;YAChC,OAAO,8DAA8D,CAAA;QACvE,KAAK,+BAAW,CAAC,WAAW;YAC1B,QAAQ,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC3B,KAAK,mBAAmB;oBACtB,OAAO,0EAA0E,CAAA;gBACnF,OAAO,CAAC,CAAC;oBACP,IAAI,OAAO,GAAG,0BAA0B,CAAA;oBACxC,OAAO;wBACL,wGAAwG,CAAA;oBAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA;oBACpC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE;wBAC3B,OAAO,IAAI,iBAAiB,CAAA;wBAC5B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAwB,EAAE,EAAE;4BAC1C,OAAO,IAAI,OAAO,KAAK,CAAC,KAAK,EAAE,CAAA;wBACjC,CAAC,CAAC,CAAA;qBACH;oBACD,OAAO,OAAO,CAAA;iBACf;aACF;QACH,KAAK,+BAAW,CAAC,QAAQ;YACvB,QAAQ,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC3B,KAAK,oBAAoB;oBACvB,OAAO,2GAA2G,CAAA;gBACpH,KAAK,oBAAoB;oBACvB,OAAO,iGAAiG,eAAK,CAAC,SAAS,CACrH,wDAAwD,CACzD,KAAK,CAAA;gBACR;oBACE,OAAO,6DAA6D,CAAA;aACvE;QACH;YACE,OAAO;UAEH,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO;gBAC5C,CAAC,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC;oBAC3B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;oBAC9B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;iBAC/B,CAAC,EAAE;gBACN,CAAC,CAAC,EACN;oCAC4B,eAAK,CAAC,SAAS,CAAC,wDAAwD,CAAC,KAAK,CAAA;KAC/G;AACH,CAAC,CAAA;AAED,SAAgB,kBAAkB,CAChC,KAAc,EACd,0BAA6D;IAE7D,IAAI,KAAK,YAAY,kBAAU,IAAI,KAAK,CAAC,QAAQ,EAAE;QACjD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAA;QAE7C,MAAM,YAAY,GAChB,IAAI,IAAI,IAAI,KAAK,sBAAsB,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,CAAA;QAErG,IAAI,YAAY,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;SAClC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE;YAClB,MAAM,IAAI,iBAAQ,CAChB,0BAA0B;gBACxB,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACxF,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC7C,CAAA;SACF;KACF;IAED,MAAM,KAAK,CAAA;AACb,CAAC;AAxBD,gDAwBC"}

package/dist/services/affinidi/iam/iam.api.d.ts

@@ -0,0 +1,454 @@
+export interface ServiceErrorResponse {
+    /**
+     * unique id for correlating this specific error to logs
+     * @format uuid
+     */
+    debugId: string;
+    /** name of the error */
+    name: string;
+    /** backwards compatible Affinidi error code */
+    code: string;
+    details?: {
+        issue: string;
+        field?: string;
+        value?: string;
+        location?: string;
+    }[];
+}
+export interface UserDto {
+    principalId: string;
+}
+export interface TypedPricipalId {
+    principalId: string;
+}
+export interface AddUserToProjectInput {
+    principalId: string;
+    principalType: string;
+}
+export interface CreateProjectScopedTokenInput {
+    projectId: string;
+}
+export interface CreateProjectScopedTokenOutput {
+    accessToken: string;
+    expiresIn: number;
+    scope: string;
+}
+export interface ProjectDto {
+    id: string;
+    name: string;
+    description?: string;
+    /** creation date and time in ISO-8601 format, e.g. 2023-09-20T07:12:13 */
+    createdAt?: string;
+}
+export interface CreateProjectInput {
+    name: string;
+    description?: string;
+}
+export interface ProjectList {
+    projects: ProjectDto[];
+}
+export interface UserList {
+    records: UserDto[];
+}
+export interface PolicyStatementDto {
+    action: string[];
+    effect: string;
+    principal: string[];
+    resource: string[];
+}
+export interface WhoamiDto {
+    principalId: string;
+}
+export interface PolicyDto {
+    principalId?: string;
+    projectId?: string;
+    version: string;
+    statement: PolicyStatementDto[];
+}
+export interface JsonWebKeyDto {
+    kid: string;
+    kty: string;
+    n?: string;
+    e?: string;
+    alg: string;
+    use: string;
+}
+export interface JsonWebKeySetDto {
+    /** @minItems 1 */
+    keys: JsonWebKeyDto[];
+}
+/**
+ * Private Key JWT Authentication of Client with `private_key_jwt` oAuth Method
+ * @example "{"type": "PRIVATE_KEY", "signingAlgorithm": "RS256", "publicKeyInfo": { "jwks": {"keys":[{"use":"sig","kty":"RSA","kid":"some-kid","alg":"RS256","n":"some-n-value","e":"some-e-value"}]} }}"
+ */
+export interface MachineUserPrivateKeyAuthenticationMethodDto {
+    type: 'PRIVATE_KEY';
+    signingAlgorithm: 'RS256' | 'RS512' | 'ES256' | 'ES512';
+    /** Corresponding Public Key Info provided either as a URL or a Hardcoded Object */
+    publicKeyInfo: {
+        jwks: JsonWebKeySetDto;
+    } | {
+        /** @format url */
+        jwksUri: string;
+    };
+}
+/** How the Machine User will be authenticate against our Authorization Server */
+export type MachineUserAuthenticationMethodDto = MachineUserPrivateKeyAuthenticationMethodDto;
+export interface MachineUserDto {
+    /**
+     * MachineUser Id
+     * @format uuid
+     * @example "c5817ea6-8367-4458-9131-54cd2c5b9b48"
+     */
+    id: string;
+    /**
+     * MachineUser ARI
+     * @example "machine/c5817ea6-8367-4458-9131-54cd2c5b9b48"
+     */
+    ari: string;
+    /**
+     * The MachineUser owner's ARI
+     * @example "ari:iam:::user/2f4b3468-516f-4af3-87db-8816b0d320cc"
+     */
+    ownerAri: string;
+    /**
+     * Owner defined MachineUser display name
+     * @example "AIV/Concierge API - affinidi-elements-iam-dev"
+     */
+    name: string;
+    /** How the Machine User will be authenticate against our Authorization Server */
+    authenticationMethod: MachineUserAuthenticationMethodDto;
+    /** Scopes that will be assigned to the MachineUser on authentication */
+    scopes: string[];
+}
+export interface MachineUserList {
+    machineUsers: MachineUserDto[];
+}
+export interface CreateMachineUserInput {
+    /** @example "AIV/Concierge API - affinidi-elements-iam-dev" */
+    name: string;
+    /** How the Machine User will be authenticate against our Authorization Server */
+    authenticationMethod: MachineUserAuthenticationMethodDto;
+}
+export interface UpdateMachineUserInput {
+    /** @example "AIV/Concierge API - affinidi-elements-iam-dev" */
+    name: string;
+    /** How the Machine User will be authenticate against our Authorization Server */
+    authenticationMethod: MachineUserAuthenticationMethodDto;
+}
+export interface UnexpectedError {
+    name: 'UnexpectedError';
+    message: 'Unexpected Error Occurred.';
+    httpStatusCode: 500;
+    traceId: string;
+    details?: {
+        issue: string;
+        field?: string;
+        value?: string;
+        location?: string;
+    }[];
+}
+export interface InvalidParameterError {
+    name: 'InvalidParameterError';
+    message: 'Invalid parameter: ${param}.';
+    httpStatusCode: 400;
+    traceId: string;
+    details?: {
+        issue: string;
+        field?: string;
+        value?: string;
+        location?: string;
+    }[];
+}
+export interface NotFoundError {
+    name: 'NotFoundError';
+    message: 'Not found: ${param}.';
+    httpStatusCode: 404;
+    traceId: string;
+    details?: {
+        issue: string;
+        field?: string;
+        value?: string;
+        location?: string;
+    }[];
+}
+export interface PrincipalDoesNotBelongToProjectError {
+    name: 'PrincipalDoesNotBelongToProjectError';
+    message: 'Principal does not belong to the given project';
+    httpStatusCode: 403;
+    traceId: string;
+    details?: {
+        issue: string;
+        field?: string;
+        value?: string;
+        location?: string;
+    }[];
+}
+export interface ActionForbiddenError {
+    name: 'ActionForbiddenError';
+    message: 'Principal can not execute action on given resource';
+    httpStatusCode: 403;
+    traceId: string;
+    details?: {
+        issue: string;
+        field?: string;
+        value?: string;
+        location?: string;
+    }[];
+}
+import axios, { AxiosInstance, AxiosRequestConfig, AxiosResponse, ResponseType } from 'axios';
+export type QueryParamsType = Record<string | number, any>;
+export interface FullRequestParams extends Omit<AxiosRequestConfig, 'data' | 'params' | 'url' | 'responseType'> {
+    /** set parameter to `true` for call `securityWorker` for this request */
+    secure?: boolean;
+    /** request path */
+    path: string;
+    /** content type of request body */
+    type?: ContentType;
+    /** query params */
+    query?: QueryParamsType;
+    /** format of response (i.e. response.json() -> format: "json") */
+    format?: ResponseType;
+    /** request body */
+    body?: unknown;
+}
+export type RequestParams = Omit<FullRequestParams, 'body' | 'method' | 'query' | 'path'>;
+export interface ApiConfig<SecurityDataType = unknown> extends Omit<AxiosRequestConfig, 'data' | 'cancelToken'> {
+    securityWorker?: (securityData: SecurityDataType | null) => Promise<AxiosRequestConfig | void> | AxiosRequestConfig | void;
+    secure?: boolean;
+    format?: ResponseType;
+}
+export declare enum ContentType {
+    Json = "application/json",
+    FormData = "multipart/form-data",
+    UrlEncoded = "application/x-www-form-urlencoded",
+    Text = "text/plain"
+}
+export declare class HttpClient<SecurityDataType = unknown> {
+    instance: AxiosInstance;
+    private securityData;
+    private securityWorker?;
+    private secure?;
+    private format?;
+    constructor({ securityWorker, secure, format, ...axiosConfig }?: ApiConfig<SecurityDataType>);
+    setSecurityData: (data: SecurityDataType | null) => void;
+    protected mergeRequestParams(params1: AxiosRequestConfig, params2?: AxiosRequestConfig): AxiosRequestConfig;
+    protected stringifyFormItem(formItem: unknown): string;
+    protected createFormData(input: Record<string, unknown>): FormData;
+    request: <T = any, _E = any>({ secure, path, type, query, format, body, ...params }: FullRequestParams) => Promise<axios.AxiosResponse<T, any>>;
+}
+/**
+ * @title Iam
+ * @version 1.0.0
+ * @baseUrl /
+ * @contact nucleus <nucleus.team@affinidi.com>
+ *
+ * Affinidi IAM
+ */
+export declare class Api<SecurityDataType extends unknown> extends HttpClient<SecurityDataType> {
+    wellKnown: {
+        /**
+         * No description
+         *
+         * @tags well-known
+         * @name GetWellKnownJwks
+         * @request GET:/.well-known/jwks.json
+         */
+        getWellKnownJwks: (params?: RequestParams) => Promise<axios.AxiosResponse<JsonWebKeySetDto, any>>;
+    };
+    v1: {
+        /**
+         * @description This is deprecated endpoint, please use /v1/sts/create-project-scoped-token
+         *
+         * @tags sts
+         * @name DeprecatedCreateProjectScopedToken
+         * @request POST:/v1/create-project-scoped-token
+         * @deprecated
+         * @secure
+         */
+        deprecatedCreateProjectScopedToken: (data: CreateProjectScopedTokenInput, params?: RequestParams) => Promise<axios.AxiosResponse<CreateProjectScopedTokenOutput, any>>;
+        /**
+         * No description
+         *
+         * @tags sts
+         * @name CreateProjectScopedToken
+         * @request POST:/v1/sts/create-project-scoped-token
+         * @secure
+         */
+        createProjectScopedToken: (data: CreateProjectScopedTokenInput, params?: RequestParams) => Promise<axios.AxiosResponse<CreateProjectScopedTokenOutput, any>>;
+        /**
+         * No description
+         *
+         * @tags sts
+         * @name Whoami
+         * @request GET:/v1/sts/whoami
+         * @secure
+         */
+        whoami: (params?: RequestParams) => Promise<axios.AxiosResponse<WhoamiDto, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name CreateProject
+         * @request POST:/v1/projects
+         * @secure
+         */
+        createProject: (data: CreateProjectInput, params?: RequestParams) => Promise<axios.AxiosResponse<ProjectDto, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name ListProject
+         * @request GET:/v1/projects
+         * @secure
+         */
+        listProject: (params?: RequestParams) => Promise<axios.AxiosResponse<ProjectList, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name AddUserToProject
+         * @request POST:/v1/projects/users
+         * @deprecated
+         * @secure
+         */
+        addUserToProject: (data: AddUserToProjectInput, params?: RequestParams) => Promise<axios.AxiosResponse<void, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name ListUsersOfProject
+         * @request GET:/v1/projects/users
+         * @deprecated
+         * @secure
+         */
+        listUsersOfProject: (params?: RequestParams) => Promise<axios.AxiosResponse<UserList, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name DeleteUserFromProject
+         * @request DELETE:/v1/projects/users/{userId}
+         * @deprecated
+         * @secure
+         */
+        deleteUserFromProject: (userId: string, params?: RequestParams) => Promise<axios.AxiosResponse<void, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name ListPrincipalsOfProject
+         * @request GET:/v1/projects/principals
+         * @secure
+         */
+        listPrincipalsOfProject: (params?: RequestParams) => Promise<axios.AxiosResponse<UserList, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name AddPrincipalToProject
+         * @request POST:/v1/projects/principals
+         * @secure
+         */
+        addPrincipalToProject: (data: AddUserToProjectInput, params?: RequestParams) => Promise<axios.AxiosResponse<void, any>>;
+        /**
+         * No description
+         *
+         * @tags projects
+         * @name DeletePrincipalFromProject
+         * @request DELETE:/v1/projects/principals/{principalId}
+         * @secure
+         */
+        deletePrincipalFromProject: (principalId: string, query: {
+            /** type of principal */
+            principalType: 'user' | 'machine_user';
+        }, params?: RequestParams) => Promise<axios.AxiosResponse<void, any>>;
+        /**
+         * No description
+         *
+         * @tags policies
+         * @name DeprecatedGetPolicies
+         * @request GET:/v1/policies/users/{userId}
+         * @deprecated
+         * @secure
+         */
+        deprecatedGetPolicies: (userId: string, params?: RequestParams) => Promise<axios.AxiosResponse<PolicyDto, any>>;
+        /**
+         * No description
+         *
+         * @tags policies
+         * @name DeprecatedUpdatePolicies
+         * @request PUT:/v1/policies/users/{userId}
+         * @deprecated
+         * @secure
+         */
+        deprecatedUpdatePolicies: (userId: string, data: PolicyDto, params?: RequestParams) => Promise<axios.AxiosResponse<PolicyDto, any>>;
+        /**
+         * No description
+         *
+         * @tags policies
+         * @name GetPolicies
+         * @request GET:/v1/policies/principals/{principalId}
+         * @secure
+         */
+        getPolicies: (principalId: string, query: {
+            principalType: 'user' | 'machine_user';
+        }, params?: RequestParams) => Promise<axios.AxiosResponse<PolicyDto, any>>;
+        /**
+         * No description
+         *
+         * @tags policies
+         * @name UpdatePolicies
+         * @request PUT:/v1/policies/principals/{principalId}
+         * @secure
+         */
+        updatePolicies: (principalId: string, query: {
+            principalType: 'user' | 'machine_user';
+        }, data: PolicyDto, params?: RequestParams) => Promise<axios.AxiosResponse<PolicyDto, any>>;
+        /**
+         * No description
+         *
+         * @tags machine-users
+         * @name CreateMachineUser
+         * @request POST:/v1/machine-users
+         * @secure
+         */
+        createMachineUser: (data: CreateMachineUserInput, params?: RequestParams) => Promise<axios.AxiosResponse<MachineUserDto, any>>;
+        /**
+         * No description
+         *
+         * @tags machine-users
+         * @name ListMachineUser
+         * @request GET:/v1/machine-users
+         * @secure
+         */
+        listMachineUser: (params?: RequestParams) => Promise<axios.AxiosResponse<MachineUserList, any>>;
+        /**
+         * No description
+         *
+         * @tags machine-users
+         * @name GetMachineUser
+         * @request GET:/v1/machine-users/{machineUserId}
+         * @secure
+         */
+        getMachineUser: (machineUserId: string, params?: RequestParams) => Promise<axios.AxiosResponse<MachineUserDto, any>>;
+        /**
+         * No description
+         *
+         * @tags machine-users
+         * @name UpdateMachineUser
+         * @request PATCH:/v1/machine-users/{machineUserId}
+         * @secure
+         */
+        updateMachineUser: (machineUserId: string, data: UpdateMachineUserInput, params?: RequestParams) => Promise<axios.AxiosResponse<MachineUserDto, any>>;
+        /**
+         * No description
+         *
+         * @tags machine-users
+         * @name DeleteMachineUser
+         * @request DELETE:/v1/machine-users/{machineUserId}
+         * @secure
+         */
+        deleteMachineUser: (machineUserId: string, params?: RequestParams) => Promise<axios.AxiosResponse<void, any>>;
+    };
+}