@affinidi/cli 2.0.0-beta.9 → 2.1.0

package/dist/services/affinidi/auth/index.js

@@ -1,131 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Auth = void 0;
-const tslib_1 = require("tslib");
-const process_1 = tslib_1.__importDefault(require("process"));
-const errors_1 = require("@oclif/core/lib/errors");
-const chalk_1 = tslib_1.__importDefault(require("chalk"));
-const providers_1 = require("./providers");
-const token_1 = require("./token");
-const iam_1 = require("../iam");
-const DEFAULT_PROJECT_NAME = 'Default Project';
-/**
- * A class representing an authentication model that implements the AuthSDK interface.
- * It provides functionalities to authenticate, fetch user projects, and log out.
- */
-class Auth {
-    /**
-     * Construct an Auth instance.
-     *
-     * @param {AuthProviderConfig} config - The configuration object for the AuthProvider.
-     */
-    constructor(config) {
-        this.logger = config.logger;
-        // Ory project for prod uses PKCE, meanwhile for dev - doesn't
-        this.authProvider =
-            process_1.default.env.AFFINIDI_CLI_ENVIRONMENT === 'dev' ? new providers_1.OryAuthenticator(config) : new providers_1.OryAuthenticatorPKCE(config);
-    }
-    async authenticate() {
-        this.logger.debug('Authenticating');
-        const accessToken = await this.authProvider.authenticate();
-        this.logger.debug(`Authenticated successfully!`);
-        return accessToken;
-    }
-    async fetchProjects(accessToken) {
-        this.logger.debug('Fetching the list of projects');
-        const projects = await iam_1.iamService.listProjects(accessToken);
-        this.logger.debug(`Successfully fetched the list of projects`);
-        this.logger.debug(`Projects: ${JSON.stringify(projects)}`);
-        return projects;
-    }
-    getActiveProject(projects) {
-        const savedProjectId = token_1.tokenService.getProjectToken()?.projectId;
-        this.logger.debug(`Saved projectId: ${savedProjectId}`);
-        const savedProject = savedProjectId && projects.find((project) => project.id === savedProjectId);
-        return savedProject || projects[0];
-    }
-    async createProject(accessToken) {
-        this.logger.debug(`User doesn't have any project. Creating a project with default name: ${DEFAULT_PROJECT_NAME}`);
-        const project = await iam_1.iamService.createProject(accessToken, {
-            name: DEFAULT_PROJECT_NAME,
-        });
-        this.logger.debug(`Default project successfully created: ${JSON.stringify(project)}`);
-        return project;
-    }
-    async createProjectScopedToken(accessToken, projectId) {
-        this.logger.debug(`Creating a project-scoped token for project ${chalk_1.default.underline(projectId)}`);
-        const projectScopedToken = await iam_1.iamService.createProjectScopedToken(accessToken, projectId);
-        this.logger.debug(`project-scoped token for project ${chalk_1.default.underline(projectId)} has been successfully created`);
-        return projectScopedToken;
-    }
-    /**
-     * Authenticate a user and return an object containing the user's active project,
-     * a list of the user's projects, the user's principalId, and a project-scoped token.
-     *
-     * @returns {Promise<AuthResult>} - A Promise that resolves to an AuthResult object.
-     * @throws Will throw an error if the authentication fails.
-     */
-    async login(param) {
-        const { projectId, userAccessToken } = param;
-        const accessToken = (userAccessToken ?? (await this.authenticate()));
-        if (!param.hideProjectHints) {
-            this.logger.info('\nSetting your active project...');
-        }
-        const principal = await iam_1.iamService.whoAmI(accessToken);
-        let projects = await this.fetchProjects(accessToken);
-        let activeProject;
-        // check if specific projectId is provided
-        if (projectId) {
-            activeProject = projects.find((project) => project.id === projectId);
-            if (!activeProject) {
-                throw new errors_1.CLIError(`Cannot find project with id ${chalk_1.default.underline(projectId)}. Available projects are ${JSON.stringify(projects)}`);
-            }
-        }
-        // choose project from available list
-        // NOTE: Show project hints only if user has more than 1 project.
-        if (!activeProject && projects.length > 0) {
-            activeProject = this.getActiveProject(projects);
-        }
-        // no project available, creating one.
-        if (!activeProject) {
-            activeProject = await this.createProject(accessToken);
-            this.logger.info(`\nCreated default project with ID ${chalk_1.default.underline(activeProject.id)}`);
-            projects = [activeProject];
-        }
-        const projectScopedToken = await this.createProjectScopedToken(accessToken, activeProject.id);
-        token_1.tokenService.setProjectToken(projectScopedToken, activeProject.id, activeProject.name);
-        token_1.tokenService.setPrincipal(principal);
-        if (!param.hideProjectHints) {
-            this.logger.info(`\nYour active project has been set to the project ${chalk_1.default.underline(activeProject.name)} with ID ${chalk_1.default.underline(activeProject.id)}` +
-                '\n\nIf you want to change the active project, please follow these steps:' +
-                `\n\n💡 To list all your projects run: ${chalk_1.default.inverse('affinidi project list-projects')}` +
-                `\n\n💡 To change the active project run: ${chalk_1.default.inverse('affinidi project select-project -i <project-id>')}\n`);
-        }
-        return {
-            projectScopedToken: projectScopedToken.accessToken,
-            activeProject,
-            principal,
-            projects,
-        };
-    }
-    /**
-     * Logs out the user.
-     *
-     * @returns {Promise<void>} - A Promise that resolves when the logout operation has completed.
-     * @throws Will throw an error if the logout operation fails.
-     */
-    async logout() {
-        return this.authProvider.logout();
-    }
-    /**
-     * Returns PrincipalId
-     *
-     * @returns {string} - A value of PrincipalId
-     */
-    getPrincipalString() {
-        const principal = token_1.tokenService.getPrincipal();
-        return `${principal.principalType}/${principal.principalId}`;
-    }
-}
-exports.Auth = Auth;
-//# sourceMappingURL=index.js.map

package/dist/services/affinidi/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/services/affinidi/auth/index.ts"],"names":[],"mappings":";;;;AAAA,8DAA6B;AAC7B,mDAAiD;AACjD,0DAAyB;AACzB,2CAAsG;AACtG,mCAAiD;AAEjD,gCAAmC;AAiBnC,MAAM,oBAAoB,GAAG,iBAAiB,CAAA;AAE9C;;;GAGG;AACH,MAAa,IAAI;IAKf;;;;OAIG;IACH,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAE3B,8DAA8D;QAC9D,IAAI,CAAC,YAAY;YACf,iBAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,4BAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,gCAAoB,CAAC,MAAM,CAAC,CAAA;IACpH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QACnC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAA;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,OAAO,WAAW,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,MAAM,gBAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC1D,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEM,gBAAgB,CAAC,QAA2B;QACjD,MAAM,cAAc,GAAG,oBAAY,CAAC,eAAe,EAAE,EAAE,SAAS,CAAA;QAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,cAAc,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,cAAc,CAAC,CAAA;QAChG,OAAO,YAAY,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,oBAAoB,EAAE,CAAC,CAAA;QACjH,MAAM,OAAO,GAAG,MAAM,gBAAU,CAAC,aAAa,CAAC,WAAW,EAAE;YAC1D,IAAI,EAAE,oBAAoB;SAC3B,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACrF,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,WAAmB,EAAE,SAAiB;QAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,eAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAC9F,MAAM,kBAAkB,GAAG,MAAM,gBAAU,CAAC,wBAAwB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC5F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,eAAK,CAAC,SAAS,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAA;QACjH,OAAO,kBAAkB,CAAA;IAC3B,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,KAAK,CAAC,KAIlB;QACC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,KAAK,CAAA;QAC5C,MAAM,WAAW,GAAG,CAAC,eAAe,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAW,CAAA;QAC9E,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;SACrD;QAED,MAAM,SAAS,GAAc,MAAM,gBAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAEjE,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;QAEpD,IAAI,aAAqC,CAAA;QAEzC,0CAA0C;QAC1C,IAAI,SAAS,EAAE;YACb,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAA;YACpE,IAAI,CAAC,aAAa,EAAE;gBAClB,MAAM,IAAI,iBAAQ,CAChB,+BAA+B,eAAK,CAAC,SAAS,CAAC,SAAS,CAAC,4BAA4B,IAAI,CAAC,SAAS,CACjG,QAAQ,CACT,EAAE,CACJ,CAAA;aACF;SACF;QAED,qCAAqC;QACrC,iEAAiE;QACjE,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;YACzC,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;SAChD;QAED,sCAAsC;QACtC,IAAI,CAAC,aAAa,EAAE;YAClB,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,eAAK,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1F,QAAQ,GAAG,CAAC,aAAa,CAAC,CAAA;SAC3B;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC,CAAA;QAC7F,oBAAY,CAAC,eAAe,CAAC,kBAAkB,EAAE,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC,CAAA;QACtF,oBAAY,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QAEpC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qDAAqD,eAAK,CAAC,SAAS,CAClE,aAAa,CAAC,IAAI,CACnB,YAAY,eAAK,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE;gBAC9C,0EAA0E;gBAC1E,yCAAyC,eAAK,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE;gBAC1F,4CAA4C,eAAK,CAAC,OAAO,CACvD,iDAAiD,CAClD,IAAI,CACR,CAAA;SACF;QAED,OAAO;YACL,kBAAkB,EAAE,kBAAkB,CAAC,WAAW;YAClD,aAAa;YACb,SAAS;YACT,QAAQ;SACT,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,MAAM;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACI,kBAAkB;QACvB,MAAM,SAAS,GAAG,oBAAY,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,EAAE,CAAA;IAC9D,CAAC;CACF;AArJD,oBAqJC"}

package/dist/services/affinidi/auth/providers/config.d.ts

@@ -1,15 +0,0 @@
-export declare const isOryAuthCallbackPortInUse: () => Promise<boolean>;
-export declare const config: {
-    redirectHost: string;
-    expressPort: number;
-    redirectPath: string;
-    redirectTimeoutMs: number;
-    codeChallengeMethod: string;
-    stateBytes: number;
-    PKCEBytes: number;
-    scope: string;
-    getSSOMessage: (ssoUrl: string) => string;
-    successHTML: string;
-    erroredLoginPage: (title?: string, context?: string) => string;
-    oryAuthCallbackPortUnavailableMessage: string;
-};

package/dist/services/affinidi/auth/providers/config.js

@@ -1,33 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.config = exports.isOryAuthCallbackPortInUse = void 0;
-const tslib_1 = require("tslib");
-const chalk_1 = tslib_1.__importDefault(require("chalk"));
-const tcp_port_used_1 = require("tcp-port-used");
-const error_login_page_1 = require("./error-login-page");
-const successful_login_page_1 = require("./successful-login-page");
-const oryAuthCallbackPort = 2777;
-const isOryAuthCallbackPortInUse = async () => {
-    return (0, tcp_port_used_1.check)(oryAuthCallbackPort);
-};
-exports.isOryAuthCallbackPortInUse = isOryAuthCallbackPortInUse;
-exports.config = {
-    redirectHost: 'http://127.0.0.1',
-    expressPort: oryAuthCallbackPort,
-    redirectPath: '/callback',
-    redirectTimeoutMs: 5 * 60 * 1000,
-    codeChallengeMethod: 'S256',
-    stateBytes: 32,
-    PKCEBytes: 64,
-    scope: 'openid offline_access',
-    getSSOMessage: (ssoUrl) => {
-        return (`\nAttempting to automatically open the SSO authorization page in your default browser.\n` +
-            `\nIf the browser doesn't open automatically, or if your default browser isn't Google Chrome, please open the following URL in the Chrome browser:\n` +
-            `\n${chalk_1.default.underline(ssoUrl)}\n`);
-    },
-    successHTML: successful_login_page_1.successfulLoginPage,
-    erroredLoginPage: error_login_page_1.erroredLoginPage,
-    oryAuthCallbackPortUnavailableMessage: `\n💥 Port [${oryAuthCallbackPort}] is unavailable. Affinidi CLI is currently relying on it.\n` +
-        `Please close the process that is using port [${oryAuthCallbackPort}] and try again.`,
-};
-//# sourceMappingURL=config.js.map

package/dist/services/affinidi/auth/providers/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../src/services/affinidi/auth/providers/config.ts"],"names":[],"mappings":";;;;AAAA,0DAAyB;AACzB,iDAAqC;AACrC,yDAAqD;AACrD,mEAA6D;AAE7D,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAEzB,MAAM,0BAA0B,GAAG,KAAK,IAAI,EAAE;IACnD,OAAO,IAAA,qBAAK,EAAC,mBAAmB,CAAC,CAAA;AACnC,CAAC,CAAA;AAFY,QAAA,0BAA0B,8BAEtC;AAEY,QAAA,MAAM,GAAG;IACpB,YAAY,EAAE,kBAAkB;IAChC,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,WAAW;IACzB,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;IAEhC,mBAAmB,EAAE,MAAM;IAC3B,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,EAAE;IACb,KAAK,EAAE,uBAAuB;IAE9B,aAAa,EAAE,CAAC,MAAc,EAAE,EAAE;QAChC,OAAO,CACL,0FAA0F;YAC1F,qJAAqJ;YACrJ,KAAK,eAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CACjC,CAAA;IACH,CAAC;IACD,WAAW,EAAE,2CAAmB;IAChC,gBAAgB,EAAE,mCAAgB;IAClC,qCAAqC,EACnC,cAAc,mBAAmB,8DAA8D;QAC/F,gDAAgD,mBAAmB,kBAAkB;CACxF,CAAA"}

package/dist/services/affinidi/auth/providers/error-login-page.d.ts

@@ -1 +0,0 @@
-export declare const erroredLoginPage: (title?: string, context?: string) => string;

package/dist/services/affinidi/auth/providers/error-login-page.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"error-login-page.js","sourceRoot":"","sources":["../../../../../src/services/affinidi/auth/providers/error-login-page.ts"],"names":[],"mappings":";;;AAAO,MAAM,gBAAgB,GAAG,CAAC,KAAK,GAAG,OAAO,EAAE,OAAO,GAAG,mBAAmB,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAgGxE,KAAK;;;UAGP,OAAO;;;;;;CAMhB,CAAA;AAzGY,QAAA,gBAAgB,oBAyG5B"}

package/dist/services/affinidi/auth/providers/index.d.ts

@@ -1,3 +0,0 @@
-export { OryAuthenticatorPKCE } from './ory-pkce';
-export { OryAuthenticator } from './ory';
-export { AuthProvider, AuthProviderConfig } from './types';

package/dist/services/affinidi/auth/providers/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OryAuthenticator = exports.OryAuthenticatorPKCE = void 0;
-var ory_pkce_1 = require("./ory-pkce");
-Object.defineProperty(exports, "OryAuthenticatorPKCE", { enumerable: true, get: function () { return ory_pkce_1.OryAuthenticatorPKCE; } });
-var ory_1 = require("./ory");
-Object.defineProperty(exports, "OryAuthenticator", { enumerable: true, get: function () { return ory_1.OryAuthenticator; } });
-//# sourceMappingURL=index.js.map

package/dist/services/affinidi/auth/providers/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/services/affinidi/auth/providers/index.ts"],"names":[],"mappings":";;;AAAA,uCAAiD;AAAxC,gHAAA,oBAAoB,OAAA;AAC7B,6BAAwC;AAA/B,uGAAA,gBAAgB,OAAA"}

package/dist/services/affinidi/auth/providers/ory-pkce.d.ts

@@ -1,47 +0,0 @@
-import { AuthProvider, AuthProviderConfig } from './types';
-export declare class OryAuthenticatorPKCE implements AuthProvider {
-    private readonly clientId;
-    private readonly host;
-    private readonly logger;
-    private readonly pConfig;
-    private request;
-    constructor({ clientId, host, logger }: AuthProviderConfig);
-    private exchangeForToken;
-    /**
-     * Handles callback endpoint call.
-     * Covers 2 use cases:
-     *  - user `Allow` request to access the personal data
-     *  - user `Decline` request to access the personal data
-     * @param params
-     * @private
-     */
-    private endpointHandler;
-    /**
-     * Handles `Allow` case when the user accepts
-     * the access to the personal data.
-     * This is the example of accept endpoint call:
-     * http://127.0.0.1:2777/callback?code=ory_ac_1234&scope=openid+offline_access&state=1234
-     * @param params
-     * @private
-     */
-    private handleAllow;
-    /**
-     * Handles `Decline` case when the user rejects
-     * the access to the personal data
-     * This is the example of the reject endpoint call:
-     * http://127.0.0.1:2777/callback?error=access_denied&error_description=request_declined'
-     * @param params
-     * @private
-     */
-    private handleDecline;
-    private generateErrorMessages;
-    private generateAuthRequest;
-    authenticate(): Promise<string>;
-    logout(): Promise<void>;
-    private static generateRandomString;
-    private static createPKCE;
-    private static createState;
-    private static sha256;
-    private static safeBase64UrlEncode;
-    private shutDownServer;
-}

package/dist/services/affinidi/auth/providers/ory-pkce.js

@@ -1,216 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OryAuthenticatorPKCE = void 0;
-const tslib_1 = require("tslib");
-const crypto_1 = tslib_1.__importDefault(require("crypto"));
-const core_1 = require("@oclif/core");
-const axios_1 = tslib_1.__importDefault(require("axios"));
-const express_1 = tslib_1.__importDefault(require("express"));
-const open_1 = tslib_1.__importDefault(require("open"));
-const config_1 = require("./config");
-const token_1 = require("../token");
-const CHARACTERS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
-class OryAuthenticatorPKCE {
-    constructor({ clientId, host, logger }) {
-        this.clientId = clientId;
-        this.host = host;
-        this.logger = logger;
-        this.pConfig = {
-            server: {
-                authUrl: `${this.host}/oauth2/auth`,
-                tokenUrl: `${this.host}/oauth2/token`,
-            },
-            client: {
-                clientId,
-            },
-            redirectUri: `${config_1.config.redirectHost}:${config_1.config.expressPort}${config_1.config.redirectPath}`,
-        };
-    }
-    async exchangeForToken({ code, pkce: { verifier } }) {
-        const form = new FormData();
-        form.append('grant_type', 'authorization_code');
-        form.append('client_id', this.pConfig.client.clientId);
-        form.append('redirect_uri', this.pConfig.redirectUri);
-        form.append('code_verifier', verifier);
-        form.append('code', code);
-        const { data } = await axios_1.default.post(this.pConfig.server.tokenUrl, form);
-        this.logger.debug(`User token has been received: ${JSON.stringify(data)}`);
-        return data;
-    }
-    /**
-     * Handles callback endpoint call.
-     * Covers 2 use cases:
-     *  - user `Allow` request to access the personal data
-     *  - user `Decline` request to access the personal data
-     * @param params
-     * @private
-     */
-    async endpointHandler(params) {
-        const { resolve, reject, server, res, req, timeout } = params;
-        try {
-            await this.handleAllow({ resolve, res, req, timeout });
-            this.handleDecline({ reject, res, req, timeout });
-        }
-        catch (e) {
-            core_1.ux.action.stop('Failed to authenticate');
-            this.logger.error(e.toString());
-            reject(e);
-        }
-        finally {
-            this.shutDownServer(server);
-        }
-    }
-    /**
-     * Handles `Allow` case when the user accepts
-     * the access to the personal data.
-     * This is the example of accept endpoint call:
-     * http://127.0.0.1:2777/callback?code=ory_ac_1234&scope=openid+offline_access&state=1234
-     * @param params
-     * @private
-     */
-    async handleAllow(params) {
-        const { res, req, resolve, timeout } = params;
-        if (req.query.code) {
-            const code = String(req.query.code);
-            this.logger.debug(`Callback request has been received. Code: ${code}\n----------------8<----------------------------\n`);
-            clearTimeout(timeout);
-            const token = await this.exchangeForToken({
-                code,
-                pkce: this.request.pkce,
-            });
-            token_1.tokenService.setUserToken(token);
-            core_1.ux.action.stop('Authenticated successfully!');
-            resolve(token.access_token);
-            res.end(config_1.config.successHTML);
-        }
-    }
-    /**
-     * Handles `Decline` case when the user rejects
-     * the access to the personal data
-     * This is the example of the reject endpoint call:
-     * http://127.0.0.1:2777/callback?error=access_denied&error_description=request_declined'
-     * @param params
-     * @private
-     */
-    handleDecline(params) {
-        const { res, req, reject, timeout } = params;
-        const { error } = req.query;
-        const errorDescription = req.query.error_description;
-        if (error) {
-            clearTimeout(timeout);
-            const { errorMessage, errorPageTitle, errorPageContext } = this.generateErrorMessages(error, errorDescription);
-            core_1.ux.action.stop(`Authenticated failed!\n\n ${errorMessage}`);
-            reject(errorMessage);
-            res.end(config_1.config.erroredLoginPage(errorPageTitle, errorPageContext));
-        }
-    }
-    generateErrorMessages(error, errorDescription) {
-        const errorPageTitle = 'Login failed';
-        let errorMessage;
-        let errorPageContext;
-        switch (error) {
-            case 'access_denied':
-                errorMessage =
-                    errorDescription === 'request_declined'
-                        ? 'You have declined a request to access your data.\n\n'
-                        : `Access denied with the description: ${errorDescription}.\n\n`;
-                errorPageContext =
-                    errorDescription === 'request_declined'
-                        ? `You have declined permission to access your data. Granting access to your data is necessary to avail our services.<br>Please, return to the command prompt or terminal if you wish to attempt once more.`
-                        : `Access denied with the description: ${errorDescription}.\n\n`;
-                break;
-            default:
-                errorMessage = 'Unknown problem.\n\n';
-                errorPageContext = 'Specified error is unexpected';
-        }
-        return {
-            errorPageTitle,
-            errorMessage,
-            errorPageContext,
-        };
-    }
-    async generateAuthRequest(scope) {
-        const pkce = await OryAuthenticatorPKCE.createPKCE();
-        const state = OryAuthenticatorPKCE.createState();
-        const params = new URLSearchParams({
-            response_type: 'code',
-            client_id: this.pConfig.client.clientId,
-            redirect_uri: this.pConfig.redirectUri,
-            code_challenge: pkce.challenge,
-            code_challenge_method: config_1.config.codeChallengeMethod,
-            scope,
-            state,
-        });
-        return {
-            ssoUrl: `${this.pConfig.server.authUrl}?${params.toString()}`,
-            request: { state, pkce: { verifier: pkce.verifier } },
-        };
-    }
-    async authenticate() {
-        const isPortInUse = await (0, config_1.isOryAuthCallbackPortInUse)();
-        if (isPortInUse) {
-            throw new Error(config_1.config.oryAuthCallbackPortUnavailableMessage);
-        }
-        const { ssoUrl, request } = await this.generateAuthRequest(config_1.config.scope);
-        this.request = request;
-        return new Promise((resolve, reject) => {
-            this.logger.debug('Start express server');
-            const app = (0, express_1.default)();
-            const server = app.listen(config_1.config.expressPort, () => {
-                this.logger.debug(`Express server started listening on port ${config_1.config.expressPort}`);
-            });
-            const timeout = setTimeout(() => {
-                this.shutDownServer(server);
-                reject(new Error(`Authentication timeout (${config_1.config.redirectTimeoutMs / 1000}s) exceeded`));
-            }, config_1.config.redirectTimeoutMs);
-            app.get(config_1.config.redirectPath, async (req, res) => {
-                await this.endpointHandler({ req, res, resolve, reject, timeout, server });
-            });
-            this.logger.info(config_1.config.getSSOMessage(ssoUrl));
-            core_1.ux.action.start('Authenticating in browser');
-            // eslint-disable-next-line @typescript-eslint/no-floating-promises
-            (0, open_1.default)(ssoUrl);
-        });
-    }
-    async logout() {
-        return new Promise((resolve) => {
-            resolve();
-        });
-    }
-    static generateRandomString(length) {
-        return Array(length)
-            .fill(null)
-            .map(() => CHARACTERS.charAt(Math.floor(Math.random() * CHARACTERS.length)))
-            .join('');
-    }
-    static createPKCE() {
-        const verifier = this.generateRandomString(config_1.config.PKCEBytes);
-        const challenge = this.safeBase64UrlEncode(this.sha256(verifier));
-        return { verifier, challenge };
-    }
-    static createState() {
-        return this.generateRandomString(config_1.config.stateBytes);
-    }
-    static sha256(str) {
-        return crypto_1.default.createHash('sha256').update(str).digest();
-    }
-    static safeBase64UrlEncode(input) {
-        let byteString = '';
-        // eslint-disable-next-line no-plusplus
-        for (let i = 0; i < input.byteLength; i++) {
-            byteString += String.fromCharCode(input[i]);
-        }
-        return btoa(byteString).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-    }
-    shutDownServer(server) {
-        server.close((error) => {
-            if (error) {
-                this.logger.error(`Error while shutting down the express server: ${error.message}`);
-                return;
-            }
-            this.logger.debug('Express server has been successfully shut down');
-        });
-    }
-}
-exports.OryAuthenticatorPKCE = OryAuthenticatorPKCE;
-//# sourceMappingURL=ory-pkce.js.map

package/dist/services/affinidi/auth/providers/ory-pkce.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ory-pkce.js","sourceRoot":"","sources":["../../../../../src/services/affinidi/auth/providers/ory-pkce.ts"],"names":[],"mappings":";;;;AAAA,4DAA2B;AAE3B,sCAAgC;AAChC,0DAAyB;AACzB,8DAA6B;AAC7B,wDAAuB;AACvB,qCAA6D;AAG7D,oCAAkD;AAElD,MAAM,UAAU,GAAG,gEAAgE,CAAA;AAyBnF,MAAa,oBAAoB;IAW/B,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAsB;QACxD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,IAAI,CAAC,OAAO,GAAG;YACb,MAAM,EAAE;gBACN,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,cAAc;gBACnC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,eAAe;aACtC;YACD,MAAM,EAAE;gBACN,QAAQ;aACT;YACD,WAAW,EAAE,GAAG,eAAM,CAAC,YAAY,IAAI,eAAM,CAAC,WAAW,GAAG,eAAM,CAAC,YAAY,EAAE;SAClF,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAsB;QAC7E,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;QAC3B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAEzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAK,CAAC,IAAI,CAAY,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAChF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAE1E,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,eAAe,CAAC,MAO7B;QACC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;QAC7D,IAAI;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;YACtD,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;SAClD;QAAC,OAAO,CAAC,EAAE;YACV,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;YAC1C,MAAM,CAAC,CAAC,CAAC,CAAA;SACV;gBAAS;YACR,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;SAC5B;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,WAAW,CAAC,MAKzB;QACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;QAC7C,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;YAClB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6CAA6C,IAAI,oDAAoD,CACtG,CAAA;YAED,YAAY,CAAC,OAAO,CAAC,CAAA;YAErB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;gBACxC,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,CAAC,CAAA;YACF,oBAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;YAChC,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;YAC7C,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YAC3B,GAAG,CAAC,GAAG,CAAC,eAAM,CAAC,WAAW,CAAC,CAAA;SAC5B;IACH,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,MAKrB;QACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;QAC5C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAA;QAC3B,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAA;QAEpD,IAAI,KAAK,EAAE;YACT,YAAY,CAAC,OAAO,CAAC,CAAA;YAErB,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,qBAAqB,CACnF,KAAe,EACf,gBAAsC,CACvC,CAAA;YAED,SAAE,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAA;YAC3D,MAAM,CAAC,YAAY,CAAC,CAAA;YACpB,GAAG,CAAC,GAAG,CAAC,eAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAA;SACnE;IACH,CAAC;IAEO,qBAAqB,CAAC,KAAa,EAAE,gBAAoC;QAC/E,MAAM,cAAc,GAAG,cAAc,CAAA;QACrC,IAAI,YAAoB,CAAA;QACxB,IAAI,gBAAwB,CAAA;QAE5B,QAAQ,KAAK,EAAE;YACb,KAAK,eAAe;gBAClB,YAAY;oBACV,gBAAgB,KAAK,kBAAkB;wBACrC,CAAC,CAAC,sDAAsD;wBACxD,CAAC,CAAC,uCAAuC,gBAAgB,OAAO,CAAA;gBAEpE,gBAAgB;oBACd,gBAAgB,KAAK,kBAAkB;wBACrC,CAAC,CAAC,0MAA0M;wBAC5M,CAAC,CAAC,uCAAuC,gBAAgB,OAAO,CAAA;gBACpE,MAAK;YACP;gBACE,YAAY,GAAG,sBAAsB,CAAA;gBACrC,gBAAgB,GAAG,+BAA+B,CAAA;SACrD;QAED,OAAO;YACL,cAAc;YACd,YAAY;YACZ,gBAAgB;SACjB,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,KAAa;QAI7C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,CAAA;QACpD,MAAM,KAAK,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAA;QAChD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ;YACvC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACtC,cAAc,EAAE,IAAI,CAAC,SAAS;YAC9B,qBAAqB,EAAE,eAAM,CAAC,mBAAmB;YACjD,KAAK;YACL,KAAK;SACN,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;YAC7D,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;SACtD,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,YAAY;QACvB,MAAM,WAAW,GAAG,MAAM,IAAA,mCAA0B,GAAE,CAAA;QAEtD,IAAI,WAAW,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,eAAM,CAAC,qCAAqC,CAAC,CAAA;SAC9D;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAM,CAAC,KAAK,CAAC,CAAA;QAExE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;YAEzC,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;YACrB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,eAAM,CAAC,WAAW,EAAE,GAAG,EAAE;gBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,eAAM,CAAC,WAAW,EAAE,CAAC,CAAA;YACrF,CAAC,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,eAAM,CAAC,iBAAiB,GAAG,IAAI,aAAa,CAAC,CAAC,CAAA;YAC5F,CAAC,EAAE,eAAM,CAAC,iBAAiB,CAAC,CAAA;YAE5B,GAAG,CAAC,GAAG,CAAC,eAAM,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC9C,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YAC5E,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;YAE9C,SAAE,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC5C,mEAAmE;YACnE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,MAAM,CAAC,oBAAoB,CAAC,MAAc;QAChD,OAAO,KAAK,CAAC,MAAM,CAAC;aACjB,IAAI,CAAC,IAAI,CAAC;aACV,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3E,IAAI,CAAC,EAAE,CAAC,CAAA;IACb,CAAC;IAEO,MAAM,CAAC,UAAU;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAM,CAAC,SAAS,CAAC,CAAA;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;IAChC,CAAC;IAEO,MAAM,CAAC,WAAW;QACxB,OAAO,IAAI,CAAC,oBAAoB,CAAC,eAAM,CAAC,UAAU,CAAC,CAAA;IACrD,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,GAAW;QAC/B,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAA;IACzD,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,KAAiB;QAClD,IAAI,UAAU,GAAG,EAAE,CAAA;QACnB,uCAAuC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE;YACzC,UAAU,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;SAC5C;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC;IAEO,cAAc,CAAC,MAAmB;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,KAAK,EAAE;gBACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAkD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC9F,OAAM;aACP;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AA/QD,oDA+QC"}

package/dist/services/affinidi/auth/providers/ory.d.ts

@@ -1,22 +0,0 @@
-import { AuthProvider } from './types';
-import { LoggerAdapter } from '../../adapters';
-export type AuthProviderConfig = {
-    clientId: string;
-    host: string;
-    logger: LoggerAdapter;
-};
-export declare class OryAuthenticator implements AuthProvider {
-    private readonly clientId;
-    private readonly host;
-    private readonly logger;
-    constructor({ clientId, host, logger }: AuthProviderConfig);
-    private createAuthorizationClient;
-    private exchangeForToken;
-    private endpointHandler;
-    private handleAllow;
-    private handleDecline;
-    private generateErrorMessages;
-    authenticate(): Promise<string>;
-    logout(): Promise<void>;
-    private shutDownServer;
-}