@ah-oh/ao-workspaces-api-sdk 1.0.23 → 1.0.24

package/src/lib/print.client.js

@@ -8,6 +8,9 @@ const common_1 = require("@nestjs/common");
 const axios_1 = require("axios");
 const auth_constants_1 = require("./auth.constants");
 const customer_center_service_1 = require("./customer-center.service");
+const axios_error_handler_1 = require("./utils/axios-error.handler");
+const http_client_1 = require("./utils/http-client");
+const url_path_1 = require("./utils/url-path");
 /**
  * Error of the hardware API. `code` is the machine-readable code of the body
  * `{ type: 'error', code, message }` (e.g. `target_unassigned`,
@@ -30,15 +33,19 @@ const CONTENT_MIME_TYPES = {
 };
 const DEFAULT_WAIT_TIMEOUT_MS = 60_000;
 const DEFAULT_WAIT_INTERVAL_MS = 2_000;
+/** Same limit as the server; larger content is rejected before the upload. */
+const MAX_CONTENT_BYTES = 50 * 1024 * 1024;
+/** Uploads of up to 50 MB need longer than the default timeout. */
+const MIN_UPLOAD_TIMEOUT_MS = 120_000;
 /** Creates print jobs on the hardware connector API and reads their state (HC-12). */
 let PrintClient = PrintClient_1 = class PrintClient {
-    options;
     customerCenterService;
-    BASE_URL;
+    http;
+    uploadTimeoutMs;
     constructor(options, customerCenterService) {
-        this.options = options;
         this.customerCenterService = customerCenterService;
-        this.BASE_URL = this.options.baseUrl;
+        this.http = (0, http_client_1.createHttpClient)(options);
+        this.uploadTimeoutMs = Math.max(this.http.defaults.timeout ?? 0, MIN_UPLOAD_TIMEOUT_MS);
     }
     /** True once the job will not change anymore (completed, failed, expired, canceled). */
     static isFinal(job) {
@@ -46,7 +53,9 @@ let PrintClient = PrintClient_1 = class PrintClient {
     }
     /** Creates a print job on a print target. Resolves as soon as the job is queued. */
     async print(args) {
-        const authorization = await this.getAuthorizationHeader(args);
+        if (args.content.byteLength > MAX_CONTENT_BYTES) {
+            throw new PrintClientError('content_too_large', 'Content is larger than 50 MB', common_1.HttpStatus.PAYLOAD_TOO_LARGE);
+        }
         const form = new FormData();
         form.append('target', args.target);
         form.append('contentType', args.contentType);
@@ -63,17 +72,16 @@ let PrintClient = PrintClient_1 = class PrintClient {
         form.append('content', new Blob([args.content], {
             type: CONTENT_MIME_TYPES[args.contentType],
         }), args.fileName ?? `content.${args.contentType}`);
-        return this.request({
+        return this.request(args, {
             method: 'POST',
-            url: `/auth-api/companies/${args.companyId}/hardware/print-jobs`,
-            headers: { accept: 'application/json', authorization },
+            url: (0, url_path_1.urlPath) `/auth-api/companies/${args.companyId}/hardware/print-jobs`,
             data: form,
-            maxBodyLength: Infinity,
+            maxBodyLength: MAX_CONTENT_BYTES + 1024 * 1024,
+            timeout: this.uploadTimeoutMs,
         });
     }
     async getJob(args) {
-        const authorization = await this.getAuthorizationHeader(args);
-        return this.fetchJob(args, authorization);
+        return this.customerCenterService.withToken(credentialsOf(args), authorization => this.fetchJob(args, authorization));
     }
     /**
      * Polls the job until it reaches a final state or `timeoutMs` has passed.
@@ -85,32 +93,31 @@ let PrintClient = PrintClient_1 = class PrintClient {
         const timeoutMs = args.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
         const intervalMs = args.intervalMs ?? DEFAULT_WAIT_INTERVAL_MS;
         const deadline = Date.now() + timeoutMs;
-        const authorization = await this.getAuthorizationHeader(args);
-        let job = await this.fetchJob(args, authorization);
-        while (!PrintClient_1.isFinal(job) && Date.now() + intervalMs <= deadline) {
-            await new Promise(resolve => setTimeout(resolve, intervalMs));
-            job = await this.fetchJob(args, authorization);
-        }
-        return job;
+        return this.customerCenterService.withToken(credentialsOf(args), async (authorization) => {
+            let job = await this.fetchJob(args, authorization);
+            while (!PrintClient_1.isFinal(job) && Date.now() + intervalMs <= deadline) {
+                await new Promise(resolve => setTimeout(resolve, intervalMs));
+                job = await this.fetchJob(args, authorization);
+            }
+            return job;
+        });
     }
     fetchJob(args, authorization) {
-        return this.request({
+        return this.send(authorization, {
             method: 'GET',
-            url: `/auth-api/companies/${args.companyId}/hardware/print-jobs/${args.jobId}`,
-            headers: { accept: 'application/json', authorization },
+            url: (0, url_path_1.urlPath) `/auth-api/companies/${args.companyId}/hardware/print-jobs/${args.jobId}`,
         });
     }
-    async getAuthorizationHeader(credentials) {
-        const { token } = await this.customerCenterService.tokenSignIn({
-            tokenId: credentials.tokenId,
-            tokenKey: credentials.tokenKey,
-            product: credentials.product,
-        });
-        return `Bearer ${token}`;
+    /** Signs in with the credentials (token cached by `CustomerCenterService`) and sends the request. */
+    request(credentials, config) {
+        return this.customerCenterService.withToken(credentialsOf(credentials), authorization => this.send(authorization, config));
     }
-    async request(config) {
+    async send(authorization, config) {
         try {
-            const res = await axios_1.default.request({ ...config, baseURL: this.BASE_URL });
+            const res = await this.http.request({
+                ...config,
+                headers: { ...config.headers, authorization },
+            });
             return res.data;
         }
         catch (error) {
@@ -124,11 +131,18 @@ exports.PrintClient = PrintClient = PrintClient_1 = tslib_1.__decorate([
     tslib_1.__param(0, (0, common_1.Inject)(auth_constants_1.AUTH_MODULE_OPTIONS)),
     tslib_1.__metadata("design:paramtypes", [Object, customer_center_service_1.CustomerCenterService])
 ], PrintClient);
+function credentialsOf(args) {
+    return { tokenId: args.tokenId, tokenKey: args.tokenKey, product: args.product };
+}
 function toPrintClientError(error) {
     if (!(error instanceof axios_1.AxiosError))
         return error;
-    const status = error.response?.status ?? common_1.HttpStatus.BAD_GATEWAY;
-    const body = error.response?.data;
+    if (!error.response) {
+        const { status, message } = (0, axios_error_handler_1.describeTransportError)(error);
+        return new PrintClientError(undefined, message, status);
+    }
+    const status = error.response.status;
+    const body = error.response.data;
     const code = typeof body?.code === 'string' ? body.code : undefined;
     const message = Array.isArray(body?.message)
         ? body.message.join('; ')

package/src/lib/print.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"print.client.js","sourceRoot":"","sources":["../../../../../libs/api-sdk/src/lib/print.client.ts"],"names":[],"mappings":";;;;;AAAA,oEAOoC;AACpC,2CAA+E;AAC/E,iCAA8D;AAE9D,qDAAuD;AACvD,uEAAkE;AA8ClE;;;;;GAKG;AACH,MAAa,gBAAiB,SAAQ,sBAAa;IAE/B;IADlB,YACkB,IAAwB,EACxC,OAAe,EACf,MAAc;QAEd,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAJhC,SAAI,GAAJ,IAAI,CAAoB;QAKxC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAVD,4CAUC;AAED,MAAM,kBAAkB,GAAqC;IAC3D,CAAC,sCAAgB,CAAC,GAAG,CAAC,EAAE,iBAAiB;IACzC,CAAC,sCAAgB,CAAC,GAAG,CAAC,EAAE,0BAA0B;CACnD,CAAC;AAEF,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,sFAAsF;AAE/E,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAKH;IACA;IALF,QAAQ,CAAS;IAElC,YAEmB,OAA0B,EAC1B,qBAA4C;QAD5C,YAAO,GAAP,OAAO,CAAmB;QAC1B,0BAAqB,GAArB,qBAAqB,CAAuB;QAE7D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,wFAAwF;IACjF,MAAM,CAAC,OAAO,CAAC,GAA6B;QACjD,OAAO,4CAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,oFAAoF;IAC7E,KAAK,CAAC,KAAK,CAAC,IAAe;QAChC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACrC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CACT,SAAS,EACT,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,OAAkC,CAAC,EAAE;YAClD,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;SAC3C,CAAC,EACF,IAAI,CAAC,QAAQ,IAAI,WAAW,IAAI,CAAC,WAAW,EAAE,CAC/C,CAAC;QAEF,OAAO,IAAI,CAAC,OAAO,CAAY;YAC7B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,uBAAuB,IAAI,CAAC,SAAS,sBAAsB;YAChE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE;YACtD,IAAI,EAAE,IAAI;YACV,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAqB;QACvC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU,CAAC,IAAyB;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,CAAC;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,wBAAwB,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAE9D,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,aAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;YACxE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9D,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,QAAQ,CAAC,IAAqB,EAAE,aAAqB;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAY;YAC7B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,uBAAuB,IAAI,CAAC,SAAS,wBAAwB,IAAI,CAAC,KAAK,EAAE;YAC9E,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,WAA6B;QAChE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC;YAC7D,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,OAAO,EAAE,WAAW,CAAC,OAAO;SAC7B,CAAC,CAAC;QACH,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAA0B;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAK,CAAC,OAAO,CAAI,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1E,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF,CAAA;AA/FY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAKR,mBAAA,IAAA,eAAM,EAAC,oCAAmB,CAAC,CAAA;qDAEY,+CAAqB;GANpD,WAAW,CA+FvB;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,mBAAU,CAAC,WAAW,CAAC;IAChE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAyD,CAAC;IACvF,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;YACjC,CAAC,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACpB,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"print.client.js","sourceRoot":"","sources":["../../../../../libs/api-sdk/src/lib/print.client.ts"],"names":[],"mappings":";;;;;AAAA,oEAOoC;AACpC,2CAA+E;AAC/E,iCAAsE;AAEtE,qDAAuD;AACvD,uEAAkE;AAGlE,qEAAqE;AACrE,qDAAuD;AACvD,+CAA2C;AA4C3C;;;;;GAKG;AACH,MAAa,gBAAiB,SAAQ,sBAAa;IAE/B;IADlB,YACkB,IAAwB,EACxC,OAAe,EACf,MAAc;QAEd,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAJhC,SAAI,GAAJ,IAAI,CAAoB;QAKxC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAVD,4CAUC;AAED,MAAM,kBAAkB,GAAqC;IAC3D,CAAC,sCAAgB,CAAC,GAAG,CAAC,EAAE,iBAAiB;IACzC,CAAC,sCAAgB,CAAC,GAAG,CAAC,EAAE,0BAA0B;CACnD,CAAC;AAEF,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,mEAAmE;AACnE,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAEtC,sFAAsF;AAE/E,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAOH;IANF,IAAI,CAAgB;IACpB,eAAe,CAAS;IAEzC,YAEE,OAA0B,EACT,qBAA4C;QAA5C,0BAAqB,GAArB,qBAAqB,CAAuB;QAE7D,IAAI,CAAC,IAAI,GAAG,IAAA,8BAAgB,EAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC1F,CAAC;IAED,wFAAwF;IACjF,MAAM,CAAC,OAAO,CAAC,GAA6B;QACjD,OAAO,4CAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,oFAAoF;IAC7E,KAAK,CAAC,KAAK,CAAC,IAAe;QAChC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,8BAA8B,EAC9B,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACrC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CACT,SAAS,EACT,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,OAAkC,CAAC,EAAE;YAClD,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;SAC3C,CAAC,EACF,IAAI,CAAC,QAAQ,IAAI,WAAW,IAAI,CAAC,WAAW,EAAE,CAC/C,CAAC;QAEF,OAAO,IAAI,CAAC,OAAO,CAAY,IAAI,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,IAAA,kBAAO,EAAA,uBAAuB,IAAI,CAAC,SAAS,sBAAsB;YACvE,IAAI,EAAE,IAAI;YACV,aAAa,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;YAC9C,OAAO,EAAE,IAAI,CAAC,eAAe;SAC9B,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAqB;QACvC,OAAO,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,EAAE,CAC/E,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CACnC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU,CAAC,IAAyB;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,CAAC;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,wBAAwB,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,OAAO,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAC,aAAa,EAAC,EAAE;YACrF,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO,CAAC,aAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;gBACxE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC9D,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,IAAqB,EAAE,aAAqB;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAY,aAAa,EAAE;YACzC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAA,kBAAO,EAAA,uBAAuB,IAAI,CAAC,SAAS,wBAAwB,IAAI,CAAC,KAAK,EAAE;SACtF,CAAC,CAAC;IACL,CAAC;IAED,qGAAqG;IAC7F,OAAO,CAAI,WAA6B,EAAE,MAA0B;QAC1E,OAAO,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAAE,CACtF,IAAI,CAAC,IAAI,CAAI,aAAa,EAAE,MAAM,CAAC,CACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,aAAqB,EAAE,MAA0B;QACrE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI;gBACrC,GAAG,MAAM;gBACT,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE;aAC9C,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF,CAAA;AAzGY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IAMR,mBAAA,IAAA,eAAM,EAAC,oCAAmB,CAAC,CAAA;qDAEY,+CAAqB;GAPpD,WAAW,CAyGvB;AAED,SAAS,aAAa,CAAC,IAAsB;IAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,4CAAsB,EAAC,KAAK,CAAC,CAAC;QAC1D,OAAO,IAAI,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAyD,CAAC;IACtF,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;YACjC,CAAC,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACpB,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}

package/src/lib/utils/axios-error.handler.d.ts

@@ -1 +1,12 @@
+import { AxiosError } from 'axios';
+/**
+ * Status and message for an axios error without a response. The message stays
+ * generic: the original names internal hosts and ports.
+ */
+export declare function describeTransportError(error: AxiosError): {
+    status: number;
+    message: string;
+};
 export declare function handleAxiosError(error: unknown): never;
+/** True for a 401 from the server, as axios error or already converted. */
+export declare function isUnauthorizedError(error: unknown): boolean;

package/src/lib/utils/axios-error.handler.js

@@ -1,14 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeTransportError = describeTransportError;
 exports.handleAxiosError = handleAxiosError;
+exports.isUnauthorizedError = isUnauthorizedError;
 const common_1 = require("@nestjs/common");
 const axios_1 = require("axios");
+const TIMEOUT_CODES = new Set(['ECONNABORTED', 'ETIMEDOUT']);
+/**
+ * Status and message for an axios error without a response. The message stays
+ * generic: the original names internal hosts and ports.
+ */
+function describeTransportError(error) {
+    return TIMEOUT_CODES.has(error.code ?? '')
+        ? { status: common_1.HttpStatus.GATEWAY_TIMEOUT, message: 'Upstream request timed out' }
+        : { status: common_1.HttpStatus.BAD_GATEWAY, message: 'Upstream request failed' };
+}
 function handleAxiosError(error) {
     if (error instanceof axios_1.AxiosError) {
-        const status = error.response?.status ?? common_1.HttpStatus.BAD_GATEWAY;
-        const message = error.response?.data?.message ?? error.message;
-        throw new common_1.HttpException(message, status);
+        if (!error.response) {
+            const { status, message } = describeTransportError(error);
+            throw new common_1.HttpException(message, status);
+        }
+        const message = error.response.data?.message ?? error.message;
+        throw new common_1.HttpException(message, error.response.status);
     }
     throw error;
 }
+/** True for a 401 from the server, as axios error or already converted. */
+function isUnauthorizedError(error) {
+    if (error instanceof axios_1.AxiosError)
+        return error.response?.status === common_1.HttpStatus.UNAUTHORIZED;
+    return error instanceof common_1.HttpException && error.getStatus() === common_1.HttpStatus.UNAUTHORIZED;
+}
 //# sourceMappingURL=axios-error.handler.js.map

package/src/lib/utils/axios-error.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"axios-error.handler.js","sourceRoot":"","sources":["../../../../../../libs/api-sdk/src/lib/utils/axios-error.handler.ts"],"names":[],"mappings":";;AAGA,4CAOC;AAVD,2CAA2D;AAC3D,iCAAmC;AAEnC,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,mBAAU,CAAC,WAAW,CAAC;QAChE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;QAC/D,MAAM,IAAI,sBAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC"}
+{"version":3,"file":"axios-error.handler.js","sourceRoot":"","sources":["../../../../../../libs/api-sdk/src/lib/utils/axios-error.handler.ts"],"names":[],"mappings":";;AASA,wDAIC;AAED,4CAUC;AAGD,kDAGC;AA/BD,2CAA2D;AAC3D,iCAAmC;AAEnC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;AAE7D;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,KAAiB;IACtD,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACxC,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAU,CAAC,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE;QAC/E,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAU,CAAC,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAC7E,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,sBAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;QAC9D,MAAM,IAAI,sBAAa,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAgB,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,YAAY,kBAAU;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,mBAAU,CAAC,YAAY,CAAC;IAC3F,OAAO,KAAK,YAAY,sBAAa,IAAI,KAAK,CAAC,SAAS,EAAE,KAAK,mBAAU,CAAC,YAAY,CAAC;AACzF,CAAC"}

package/src/lib/utils/http-client.d.ts

@@ -0,0 +1,9 @@
+import { AxiosInstance } from 'axios';
+import { AuthModuleOptions } from '../models/auth.options';
+export declare const DEFAULT_TIMEOUT_MS = 30000;
+/**
+ * Axios instance of the SDK. Its own instance keeps interceptors of the
+ * consuming app, which might log or rewrite requests, away from calls that
+ * carry tokens.
+ */
+export declare function createHttpClient(options: AuthModuleOptions): AxiosInstance;

package/src/lib/utils/http-client.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_TIMEOUT_MS = void 0;
+exports.createHttpClient = createHttpClient;
+const axios_1 = require("axios");
+exports.DEFAULT_TIMEOUT_MS = 30_000;
+/**
+ * Axios instance of the SDK. Its own instance keeps interceptors of the
+ * consuming app, which might log or rewrite requests, away from calls that
+ * carry tokens.
+ */
+function createHttpClient(options) {
+    return axios_1.default.create({
+        baseURL: validateBaseUrl(options.baseUrl),
+        timeout: options.timeoutMs ?? exports.DEFAULT_TIMEOUT_MS,
+        headers: { accept: 'application/json' },
+    });
+}
+function validateBaseUrl(baseUrl) {
+    let url;
+    try {
+        url = new URL(baseUrl ?? '');
+    }
+    catch {
+        throw new Error(`AuthModule: baseUrl "${baseUrl}" is not a valid URL`);
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:') {
+        throw new Error(`AuthModule: baseUrl must use http or https, got "${url.protocol}"`);
+    }
+    if (url.username || url.password) {
+        throw new Error('AuthModule: baseUrl must not contain credentials');
+    }
+    return baseUrl;
+}
+//# sourceMappingURL=http-client.js.map

package/src/lib/utils/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../../../../../libs/api-sdk/src/lib/utils/http-client.ts"],"names":[],"mappings":";;;AAWA,4CAMC;AAjBD,iCAA6C;AAIhC,QAAA,kBAAkB,GAAG,MAAM,CAAC;AAEzC;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,OAA0B;IACzD,OAAO,eAAK,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;QACzC,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,0BAAkB;QAChD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,sBAAsB,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/src/lib/utils/jwt.util.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Expiry of a JWT in epoch milliseconds, read from the `exp` claim without
+ * verifying the signature. Only use it to decide how long to cache a token,
+ * never to trust it. Undefined if the token is not a JWT or has no `exp`.
+ */
+export declare function getJwtExpiresAt(token: string): number | undefined;

package/src/lib/utils/jwt.util.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getJwtExpiresAt = getJwtExpiresAt;
+/**
+ * Expiry of a JWT in epoch milliseconds, read from the `exp` claim without
+ * verifying the signature. Only use it to decide how long to cache a token,
+ * never to trust it. Undefined if the token is not a JWT or has no `exp`.
+ */
+function getJwtExpiresAt(token) {
+    const payload = token.split('.')[1];
+    if (!payload)
+        return undefined;
+    try {
+        const { exp } = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+        return typeof exp === 'number' && Number.isFinite(exp) ? exp * 1000 : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=jwt.util.js.map

package/src/lib/utils/jwt.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.util.js","sourceRoot":"","sources":["../../../../../../libs/api-sdk/src/lib/utils/jwt.util.ts"],"names":[],"mappings":";;AAKA,0CAWC;AAhBD;;;;GAIG;AACH,SAAgB,eAAe,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAE5E,CAAC;QACF,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/src/lib/utils/ttl-cache.d.ts

@@ -0,0 +1,26 @@
+export interface CacheLoadResult<T> {
+    value: T;
+    /** How long the value stays valid. `0` or less returns it without caching. */
+    ttlMs: number;
+}
+/**
+ * In-memory cache with a lifetime per entry and a fixed maximum size; the
+ * least recently used entry goes first. Concurrent loads of the same key share
+ * one request. Failed loads are not cached.
+ */
+export declare class TtlCache<T> {
+    private readonly maxEntries;
+    private readonly entries;
+    private readonly pending;
+    constructor(maxEntries: number);
+    /** `fromCache` is false when this call ran `load` itself. */
+    getOrLoad(key: string, load: () => Promise<CacheLoadResult<T>>): Promise<{
+        value: T;
+        fromCache: boolean;
+    }>;
+    /** Removes the entry; with `value` only if it still holds that value. */
+    delete(key: string, value?: T): void;
+    clear(): void;
+    get size(): number;
+    private set;
+}

package/src/lib/utils/ttl-cache.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TtlCache = void 0;
+/**
+ * In-memory cache with a lifetime per entry and a fixed maximum size; the
+ * least recently used entry goes first. Concurrent loads of the same key share
+ * one request. Failed loads are not cached.
+ */
+class TtlCache {
+    maxEntries;
+    entries = new Map();
+    pending = new Map();
+    constructor(maxEntries) {
+        this.maxEntries = maxEntries;
+    }
+    /** `fromCache` is false when this call ran `load` itself. */
+    async getOrLoad(key, load) {
+        const entry = this.entries.get(key);
+        if (entry && entry.expiresAt > Date.now()) {
+            // Re-insert to mark the entry as recently used.
+            this.entries.delete(key);
+            this.entries.set(key, entry);
+            return { value: entry.value, fromCache: true };
+        }
+        if (entry)
+            this.entries.delete(key);
+        const running = this.pending.get(key);
+        if (running)
+            return { value: await running, fromCache: true };
+        const loading = load().then(({ value, ttlMs }) => {
+            if (ttlMs > 0 && this.pending.get(key) === loading)
+                this.set(key, value, ttlMs);
+            return value;
+        });
+        this.pending.set(key, loading);
+        try {
+            return { value: await loading, fromCache: false };
+        }
+        finally {
+            if (this.pending.get(key) === loading)
+                this.pending.delete(key);
+        }
+    }
+    /** Removes the entry; with `value` only if it still holds that value. */
+    delete(key, value) {
+        if (value === undefined || this.entries.get(key)?.value === value) {
+            this.entries.delete(key);
+        }
+    }
+    clear() {
+        this.entries.clear();
+        this.pending.clear();
+    }
+    get size() {
+        return this.entries.size;
+    }
+    set(key, value, ttlMs) {
+        this.entries.delete(key);
+        this.entries.set(key, { value, expiresAt: Date.now() + ttlMs });
+        while (this.entries.size > this.maxEntries) {
+            this.entries.delete(this.entries.keys().next().value);
+        }
+    }
+}
+exports.TtlCache = TtlCache;
+//# sourceMappingURL=ttl-cache.js.map

package/src/lib/utils/ttl-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ttl-cache.js","sourceRoot":"","sources":["../../../../../../libs/api-sdk/src/lib/utils/ttl-cache.ts"],"names":[],"mappings":";;;AAWA;;;;GAIG;AACH,MAAa,QAAQ;IAIU;IAHZ,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC3C,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,YAA6B,UAAkB;QAAlB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAEnD,6DAA6D;IACtD,KAAK,CAAC,SAAS,CACpB,GAAW,EACX,IAAuC;QAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC1C,gDAAgD;YAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAE9D,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;YAC/C,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAChF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,yEAAyE;IAClE,MAAM,CAAC,GAAW,EAAE,KAAS;QAClC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YAClE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEO,GAAG,CAAC,GAAW,EAAE,KAAQ,EAAE,KAAa;QAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;CACF;AA1DD,4BA0DC"}

package/src/lib/utils/url-path.d.ts

@@ -0,0 +1,7 @@
+/** True if the value can be used as a single URL path segment. */
+export declare function isValidPathSegment(value: unknown): boolean;
+/**
+ * Builds a request path and encodes every interpolated value as one path
+ * segment, so a value like `../x` or `a/b` cannot reach another endpoint.
+ */
+export declare function urlPath(strings: TemplateStringsArray, ...values: (string | number)[]): string;

package/src/lib/utils/url-path.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isValidPathSegment = isValidPathSegment;
+exports.urlPath = urlPath;
+const common_1 = require("@nestjs/common");
+/** True if the value can be used as a single URL path segment. */
+function isValidPathSegment(value) {
+    if (typeof value !== 'string' && typeof value !== 'number')
+        return false;
+    const segment = String(value);
+    return segment.length > 0 && segment !== '.' && segment !== '..';
+}
+/**
+ * Builds a request path and encodes every interpolated value as one path
+ * segment, so a value like `../x` or `a/b` cannot reach another endpoint.
+ */
+function urlPath(strings, ...values) {
+    return strings.reduce((path, part, i) => {
+        if (i >= values.length)
+            return path + part;
+        const value = values[i];
+        if (!isValidPathSegment(value)) {
+            throw new common_1.BadRequestException('Invalid path parameter');
+        }
+        return path + part + encodeURIComponent(String(value));
+    }, '');
+}
+//# sourceMappingURL=url-path.js.map

package/src/lib/utils/url-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-path.js","sourceRoot":"","sources":["../../../../../../libs/api-sdk/src/lib/utils/url-path.ts"],"names":[],"mappings":";;AAGA,gDAIC;AAMD,0BASC;AAtBD,2CAAqD;AAErD,kEAAkE;AAClE,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CAAC,OAA6B,EAAE,GAAG,MAA2B;IACnF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,GAAG,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,GAAG,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC"}