@ambushsoftworks/nestjs-auth-graphql 0.10.0 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +248 -0
- package/README.md +212 -7
- package/dist/auth.module.d.ts +11 -1
- package/dist/auth.module.d.ts.map +1 -1
- package/dist/auth.module.js +92 -12
- package/dist/auth.module.js.map +1 -1
- package/dist/constants.d.ts +1 -0
- package/dist/constants.d.ts.map +1 -1
- package/dist/constants.js +2 -1
- package/dist/constants.js.map +1 -1
- package/dist/decorators/require-scopes.decorator.d.ts +2 -0
- package/dist/decorators/require-scopes.decorator.d.ts.map +1 -0
- package/dist/decorators/require-scopes.decorator.js +8 -0
- package/dist/decorators/require-scopes.decorator.js.map +1 -0
- package/dist/guards/create-auth-guard.d.ts.map +1 -1
- package/dist/guards/create-auth-guard.js +3 -6
- package/dist/guards/create-auth-guard.js.map +1 -1
- package/dist/guards/csrf.guard.d.ts +4 -0
- package/dist/guards/csrf.guard.d.ts.map +1 -1
- package/dist/guards/csrf.guard.js +33 -5
- package/dist/guards/csrf.guard.js.map +1 -1
- package/dist/guards/jwt-auth.guard.d.ts +2 -1
- package/dist/guards/jwt-auth.guard.d.ts.map +1 -1
- package/dist/guards/jwt-auth.guard.js +4 -0
- package/dist/guards/jwt-auth.guard.js.map +1 -1
- package/dist/guards/permission.guard.js +2 -2
- package/dist/guards/permission.guard.js.map +1 -1
- package/dist/guards/scope.guard.d.ts +8 -0
- package/dist/guards/scope.guard.d.ts.map +1 -0
- package/dist/guards/scope.guard.js +53 -0
- package/dist/guards/scope.guard.js.map +1 -0
- package/dist/guards/tenant.guard.d.ts.map +1 -1
- package/dist/guards/tenant.guard.js +3 -0
- package/dist/guards/tenant.guard.js.map +1 -1
- package/dist/index.d.ts +6 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +6 -0
- package/dist/index.js.map +1 -1
- package/dist/interfaces/api-key-repository.interface.d.ts +3 -0
- package/dist/interfaces/api-key-repository.interface.d.ts.map +1 -1
- package/dist/interfaces/refresh-retry-cache.interface.d.ts +6 -0
- package/dist/interfaces/refresh-retry-cache.interface.d.ts.map +1 -0
- package/dist/interfaces/refresh-retry-cache.interface.js +3 -0
- package/dist/interfaces/refresh-retry-cache.interface.js.map +1 -0
- package/dist/middleware/realm.middleware.d.ts +4 -2
- package/dist/middleware/realm.middleware.d.ts.map +1 -1
- package/dist/middleware/realm.middleware.js +50 -34
- package/dist/middleware/realm.middleware.js.map +1 -1
- package/dist/resolvers/base-auth.resolver.d.ts.map +1 -1
- package/dist/resolvers/base-auth.resolver.js +0 -15
- package/dist/resolvers/base-auth.resolver.js.map +1 -1
- package/dist/services/auth.service.d.ts +1 -3
- package/dist/services/auth.service.d.ts.map +1 -1
- package/dist/services/auth.service.js +22 -13
- package/dist/services/auth.service.js.map +1 -1
- package/dist/services/in-memory-refresh-retry-cache.d.ts +11 -0
- package/dist/services/in-memory-refresh-retry-cache.d.ts.map +1 -0
- package/dist/services/in-memory-refresh-retry-cache.js +45 -0
- package/dist/services/in-memory-refresh-retry-cache.js.map +1 -0
- package/dist/services/refresh-token.service.d.ts +13 -14
- package/dist/services/refresh-token.service.d.ts.map +1 -1
- package/dist/services/refresh-token.service.js +112 -33
- package/dist/services/refresh-token.service.js.map +1 -1
- package/dist/services/verification.service.d.ts +2 -1
- package/dist/services/verification.service.d.ts.map +1 -1
- package/dist/services/verification.service.js +38 -8
- package/dist/services/verification.service.js.map +1 -1
- package/dist/strategies/api-key.strategy.d.ts +6 -1
- package/dist/strategies/api-key.strategy.d.ts.map +1 -1
- package/dist/strategies/api-key.strategy.js +40 -6
- package/dist/strategies/api-key.strategy.js.map +1 -1
- package/dist/strategies/external-jwt.strategy.d.ts +19 -0
- package/dist/strategies/external-jwt.strategy.d.ts.map +1 -0
- package/dist/strategies/external-jwt.strategy.js +124 -0
- package/dist/strategies/external-jwt.strategy.js.map +1 -0
- package/dist/strategies/jwt.strategy.d.ts +3 -1
- package/dist/strategies/jwt.strategy.d.ts.map +1 -1
- package/dist/strategies/jwt.strategy.js +16 -11
- package/dist/strategies/jwt.strategy.js.map +1 -1
- package/dist/test-utils/execution-contexts.d.ts +7 -0
- package/dist/test-utils/execution-contexts.d.ts.map +1 -0
- package/dist/test-utils/execution-contexts.js +41 -0
- package/dist/test-utils/execution-contexts.js.map +1 -0
- package/dist/utils/cookies.d.ts +2 -0
- package/dist/utils/cookies.d.ts.map +1 -0
- package/dist/utils/cookies.js +34 -0
- package/dist/utils/cookies.js.map +1 -0
- package/dist/utils/execution-context.d.ts +3 -1
- package/dist/utils/execution-context.d.ts.map +1 -1
- package/dist/utils/execution-context.js +39 -4
- package/dist/utils/execution-context.js.map +1 -1
- package/dist/utils/provider-helpers.d.ts +6 -0
- package/dist/utils/provider-helpers.d.ts.map +1 -1
- package/dist/utils/provider-helpers.js +4 -0
- package/dist/utils/provider-helpers.js.map +1 -1
- package/dist/utils/verification-base-url.d.ts +2 -0
- package/dist/utils/verification-base-url.d.ts.map +1 -0
- package/dist/utils/verification-base-url.js +19 -0
- package/dist/utils/verification-base-url.js.map +1 -0
- package/package.json +4 -2
|
@@ -43,7 +43,8 @@ export declare class VerificationService {
|
|
|
43
43
|
verifyCredential(identifier: string, type: 'email' | 'password-reset', submitted: string, realm?: string): Promise<boolean>;
|
|
44
44
|
generateToken(identifier: string, type: 'email' | 'password-reset', realm?: string): Promise<string>;
|
|
45
45
|
verifyToken(identifier: string, type: 'email' | 'password-reset', token: string, realm?: string): Promise<boolean>;
|
|
46
|
-
buildVerificationUrl(token: string, type: 'email' | 'password-reset', email: string): string;
|
|
46
|
+
buildVerificationUrl(token: string, type: 'email' | 'password-reset', email: string, realm?: string): string;
|
|
47
|
+
private resolveBaseUrl;
|
|
47
48
|
private verificationPath;
|
|
48
49
|
private buildPageUrl;
|
|
49
50
|
private hashToken;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verification.service.d.ts","sourceRoot":"","sources":["../../src/services/verification.service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;
|
|
1
|
+
{"version":3,"file":"verification.service.d.ts","sourceRoot":"","sources":["../../src/services/verification.service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAY9D,MAAM,WAAW,4BAA4B;IAM3C,UAAU,EAAE,MAAM,CAAC;IAYnB,GAAG,CAAC,EAAE,MAAM,CAAC;IAMb,gBAAgB,EAAE,MAAM,CAAC;IAGzB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAgCD,qBACa,mBAAmB;IASC,OAAO,CAAC,OAAO;IAE5C,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAEvC,OAAO,CAAC,cAAc;IAdxB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAK;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAM;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAK;IAGjC,OAAO,CAAC,mBAAmB,CAAS;gBAGG,OAAO,EAAE,iBAAiB,EAE9C,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,EAE1C,sBAAsB,EAAE,uBAAuB,EAExD,cAAc,EAAE,WAAW;IAW/B,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuB3G,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,gBAAgB,EACxC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC;IAgBb,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB3G,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0B7G,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAqB7E,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,GAAG,KAAK,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC;IAmBb,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;YA2BvE,qBAAqB;YAwCrB,qBAAqB;IAyHnC,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,QAAQ;IAYV,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,gBAAgB,EACxC,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAsC1E,IAAI,gBAAgB,IAAI,MAAM,GAAG,OAAO,CAEvC;IAKD,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAKD,IAAI,qBAAqB,IAAI,MAAM,CAElC;IASD,IAAI,0BAA0B,IAAI,MAAM,CAIvC;IAuBK,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,GAAG,gBAAgB,EAChC,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,4BAA4B,CAAC;IA0ClC,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,GAAG,gBAAgB,EAChC,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC;IAgBb,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,GAAG,gBAAgB,EAChC,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC;IAkDZ,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,GAAG,gBAAgB,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC;IAsFnB,oBAAoB,CAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,GAAG,gBAAgB,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,MAAM;IA+CT,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,gBAAgB;IAoBxB,OAAO,CAAC,YAAY;IA0DpB,OAAO,CAAC,SAAS;YAUH,WAAW;IAUzB,OAAO,CAAC,mBAAmB;CAO5B"}
|
|
@@ -18,6 +18,7 @@ const crypto_1 = require("crypto");
|
|
|
18
18
|
const constants_1 = require("../constants");
|
|
19
19
|
const auth_logger_interface_1 = require("../interfaces/auth-logger.interface");
|
|
20
20
|
const verification_type_enum_1 = require("../enums/verification-type.enum");
|
|
21
|
+
const verification_base_url_1 = require("../utils/verification-base-url");
|
|
21
22
|
let VerificationService = class VerificationService {
|
|
22
23
|
constructor(options, userRepository, verificationRepository, securityLogger) {
|
|
23
24
|
this.options = options;
|
|
@@ -202,7 +203,7 @@ let VerificationService = class VerificationService {
|
|
|
202
203
|
const token = await this.generateToken(identifier, type, realm);
|
|
203
204
|
return {
|
|
204
205
|
credential: token,
|
|
205
|
-
url: this.buildVerificationUrl(token, type, identifier),
|
|
206
|
+
url: this.buildVerificationUrl(token, type, identifier, realm),
|
|
206
207
|
expiresInMinutes: this.tokenExpiresInMinutes,
|
|
207
208
|
mode,
|
|
208
209
|
};
|
|
@@ -210,7 +211,7 @@ let VerificationService = class VerificationService {
|
|
|
210
211
|
const code = await this.generateCode(identifier, type, realm);
|
|
211
212
|
return {
|
|
212
213
|
credential: code,
|
|
213
|
-
url: this.buildPageUrl(type),
|
|
214
|
+
url: this.buildPageUrl(type, realm),
|
|
214
215
|
expiresInMinutes: this.codeExpiresInMinutes,
|
|
215
216
|
mode,
|
|
216
217
|
};
|
|
@@ -281,22 +282,51 @@ let VerificationService = class VerificationService {
|
|
|
281
282
|
});
|
|
282
283
|
return true;
|
|
283
284
|
}
|
|
284
|
-
buildVerificationUrl(token, type, email) {
|
|
285
|
-
const
|
|
285
|
+
buildVerificationUrl(token, type, email, realm) {
|
|
286
|
+
const where = realm ? `realm "${realm}"` : 'a request with no realm';
|
|
287
|
+
let baseUrl;
|
|
288
|
+
try {
|
|
289
|
+
baseUrl = this.resolveBaseUrl(realm);
|
|
290
|
+
}
|
|
291
|
+
catch (error) {
|
|
292
|
+
throw new Error(`verification.baseUrl resolver threw for ${where}: ` +
|
|
293
|
+
`${error instanceof Error ? error.message : String(error)}. ` +
|
|
294
|
+
'In token mode the link is the credential, so there is no usable email ' +
|
|
295
|
+
'to send without it.');
|
|
296
|
+
}
|
|
286
297
|
if (!baseUrl) {
|
|
287
|
-
throw new Error(
|
|
288
|
-
'Configure it in AuthModuleOptions.verification.baseUrl
|
|
298
|
+
throw new Error(`verification.baseUrl produced no URL for ${where}. ` +
|
|
299
|
+
'Configure it in AuthModuleOptions.verification.baseUrl, and if it is a ' +
|
|
300
|
+
'resolver, make sure it returns a URL for every realm.');
|
|
289
301
|
}
|
|
302
|
+
(0, verification_base_url_1.assertUsableBaseUrl)(baseUrl, `verification.baseUrl for ${where}`);
|
|
290
303
|
const url = new URL(this.verificationPath(type), baseUrl);
|
|
291
304
|
url.searchParams.set('token', token);
|
|
292
305
|
url.searchParams.set('email', email);
|
|
293
306
|
return url.toString();
|
|
294
307
|
}
|
|
308
|
+
resolveBaseUrl(realm) {
|
|
309
|
+
const configured = this.options.verification?.baseUrl;
|
|
310
|
+
if (typeof configured === 'function') {
|
|
311
|
+
return configured(realm);
|
|
312
|
+
}
|
|
313
|
+
return configured;
|
|
314
|
+
}
|
|
295
315
|
verificationPath(type) {
|
|
296
316
|
return type === 'email' ? '/verify-email' : '/reset-password';
|
|
297
317
|
}
|
|
298
|
-
buildPageUrl(type) {
|
|
299
|
-
|
|
318
|
+
buildPageUrl(type, realm) {
|
|
319
|
+
let configured;
|
|
320
|
+
try {
|
|
321
|
+
configured = this.resolveBaseUrl(realm);
|
|
322
|
+
}
|
|
323
|
+
catch (error) {
|
|
324
|
+
this.securityLogger.warn('verification.baseUrl resolver threw for ' +
|
|
325
|
+
`${realm ? `realm "${realm}"` : 'a request with no realm'}: ` +
|
|
326
|
+
`${error instanceof Error ? error.message : String(error)}. ` +
|
|
327
|
+
'Sending the email without a link; the 6-digit code is unaffected.', 'VerificationService');
|
|
328
|
+
configured = undefined;
|
|
329
|
+
}
|
|
300
330
|
const legacy = process.env.FRONTEND_URL;
|
|
301
331
|
if (!configured && legacy && !this.warnedLegacyBaseUrl) {
|
|
302
332
|
this.warnedLegacyBaseUrl = true;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verification.service.js","sourceRoot":"","sources":["../../src/services/verification.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,mCAAyF;AACzF,4CAAmD;AAEnD,+EAAiF;AAIjF,4EAA+F;AAuExF,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAQ9B,YAC+B,OAAkC,EAE/D,cAA2D,EAE3D,sBAAgE,EAEhE,cAAmC;QANE,YAAO,GAAP,OAAO,CAAmB;QAE9C,mBAAc,GAAd,cAAc,CAA4B;QAE1C,2BAAsB,GAAtB,sBAAsB,CAAyB;QAExD,mBAAc,GAAd,cAAc,CAAa;QAdpB,eAAU,GAAG,CAAC,CAAC;QACf,kBAAa,GAAG,EAAE,CAAC;QACnB,gBAAW,GAAG,CAAC,CAAC;QAGzB,wBAAmB,GAAG,KAAK,CAAC;IAUjC,CAAC;IAUJ,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,IAAwC,EAAE,KAAc;QAC7F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAeD,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,IAAwC,EACxC,IAAY,EACZ,KAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAQD,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,IAAwC,EAAE,KAAc;QAC/F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;IACJ,CAAC;IAUD,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,IAAwC,EAAE,KAAc;QAC9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC;IAClD,CAAC;IAUD,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,IAAqB;QAE/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAYD,KAAK,CAAC,qBAAqB,CACzB,MAAc,EACd,IAAqB,EACrB,IAAY;QAGZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAUD,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,IAAqB;QAEhE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC;IAClD,CAAC;IAUO,KAAK,CAAC,qBAAqB,CAAC,IAAe,EAAE,IAAwC;QAE3F,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAGvC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAGvC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAExE,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAGtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,UAAU,EACV,SAAS,EACT,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,sBAAsB,EAAE;YAC5D,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACnE,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAYO,KAAK,CAAC,qBAAqB,CACjC,IAAe,EACf,IAAwC,EACxC,IAAY;QAEZ,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAGtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAC7B,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QAGD,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,yBAAyB,EAAE;gBAC/D,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACnE,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,CAAC,CAAC;QACnE,CAAC;QAGD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YACF,MAAM,IAAI,8BAAqB,CAC7B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAGD,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAIpD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,wBAAe,EAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YAEP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YAEb,MAAM,IAAI,CAAC,sBAAsB,CAAC,6BAA6B,CAC7D,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YAGF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACxE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YACF,MAAM,YAAY,GAAG,YAAY,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YAGlE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,wBAAwB,EAAE;gBAC9D,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACnE,gBAAgB,EAAE,IAAI;gBACtB,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC;YAC1D,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,iBAAiB,wBAAwB,CACxE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;gBACF,MAAM,IAAI,8BAAqB,CAC7B,kFAAkF,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QAGD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,2BAA2B,EAAE;YACjE,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACnE,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAMO,kBAAkB;QAExB,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEnC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAQO,QAAQ,CAAC,IAAY;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAMD,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,IAAwC,EACxC,KAAc;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC;QACrD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC;IAUD,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,IAAI,MAAM,CAAC;IAC3D,CAAC;IAKD,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAKD,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,qBAAqB,IAAI,EAAE,CAAC;IAChE,CAAC;IASD,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,gBAAgB,KAAK,OAAO;YACtC,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAChC,CAAC;IAuBD,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,IAAgC,EAChC,KAAc;QAEd,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAEnC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAEhE,OAAO;gBACL,UAAU,EAAE,KAAK;gBAEjB,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC;gBACvD,gBAAgB,EAAE,IAAI,CAAC,qBAAqB;gBAC5C,IAAI;aACL,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE9D,OAAO;YACL,UAAU,EAAE,IAAI;YAGhB,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAC5B,gBAAgB,EAAE,IAAI,CAAC,oBAAoB;YAC3C,IAAI;SACL,CAAC;IACJ,CAAC;IAiBD,KAAK,CAAC,gBAAgB,CACpB,UAAkB,EAClB,IAAgC,EAChC,SAAiB,EACjB,KAAc;QAEd,OAAO,IAAI,CAAC,gBAAgB,KAAK,OAAO;YACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAYD,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,IAAgC,EAChC,KAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAGjD,MAAM,QAAQ,GAAG,IAAA,oBAAW,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAG1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAG3C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEnE,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAGtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,SAAS,EACT,SAAS,EACT,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,sBAAsB,EAAE;YAC5D,KAAK,EAAE,UAAU;YACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;SAClC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAcD,KAAK,CAAC,WAAW,CACf,UAAkB,EAClB,IAAgC,EAChC,KAAa,EACb,KAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAAC,6CAA6C,CAAC,CAAC;QACjF,CAAC;QAGD,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAEjF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,yBAAyB,EAAE;gBAC/D,KAAK,EAAE,UAAU;gBACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;aAClC,CAAC,CAAC;YAEH,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEpD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,wBAAe,EAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YAEb,MAAM,IAAI,CAAC,sBAAsB,CAAC,6BAA6B,CAC7D,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,wBAAwB,EAAE;gBAC9D,KAAK,EAAE,UAAU;gBACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;aAClC,CAAC,CAAC;YAEH,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAGD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAEjF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,2BAA2B,EAAE;YACjE,KAAK,EAAE,UAAU;YACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAoBD,oBAAoB,CAAC,KAAa,EAAE,IAAgC,EAAE,KAAa;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,+DAA+D;gBAC/D,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IASO,gBAAgB,CAAC,IAAgC;QACvD,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAChE,CAAC;IAkBO,YAAY,CAAC,IAAgC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAExC,IAAI,CAAC,UAAU,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACvD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CACtB,0EAA0E;gBAC1E,wEAAwE;gBACxE,8DAA8D;gBAC9D,4BAA4B,EAC5B,qBAAqB,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,IAAI,MAAM,CAAC;QAErC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YAGP,IAAI,CAAC,cAAc,CAAC,IAAI,CACtB,0BAA0B,OAAO,iCAAiC;gBAClE,+EAA+E;gBAC/E,qDAAqD,EACrD,qBAAqB,CACtB,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAKO,SAAS,CAAC,KAAa;QAC7B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAQO,KAAK,CAAC,WAAW,CACvB,UAAkB,EAClB,IAAwC,EACxC,KAAc;QAEd,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB;YAClD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAEO,mBAAmB,CAAC,IAAwC;QAClE,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,KAAK,CAAC,CAAC,OAAO,yCAAgB,CAAC,KAAK,CAAC;YAC1C,KAAK,OAAO,CAAC,CAAC,OAAO,yCAAgB,CAAC,KAAK,CAAC;YAC5C,KAAK,gBAAgB,CAAC,CAAC,OAAO,yCAAgB,CAAC,cAAc,CAAC;QAChE,CAAC;IACH,CAAC;CACF,CAAA;AAtxBY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;IAC3B,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;IAEzB,WAAA,IAAA,eAAM,EAAC,yBAAyB,CAAC,CAAA;IAEjC,WAAA,IAAA,eAAM,EAAC,aAAa,CAAC,CAAA;;GAdb,mBAAmB,CAsxB/B"}
|
|
1
|
+
{"version":3,"file":"verification.service.js","sourceRoot":"","sources":["../../src/services/verification.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,mCAAyF;AACzF,4CAAmD;AAEnD,+EAAiF;AAIjF,4EAA+F;AAC/F,0EAAqE;AAuE9D,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAQ9B,YAC+B,OAAkC,EAE/D,cAA2D,EAE3D,sBAAgE,EAEhE,cAAmC;QANE,YAAO,GAAP,OAAO,CAAmB;QAE9C,mBAAc,GAAd,cAAc,CAA4B;QAE1C,2BAAsB,GAAtB,sBAAsB,CAAyB;QAExD,mBAAc,GAAd,cAAc,CAAa;QAdpB,eAAU,GAAG,CAAC,CAAC;QACf,kBAAa,GAAG,EAAE,CAAC;QACnB,gBAAW,GAAG,CAAC,CAAC;QAGzB,wBAAmB,GAAG,KAAK,CAAC;IAUjC,CAAC;IAUJ,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,IAAwC,EAAE,KAAc;QAC7F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAeD,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,IAAwC,EACxC,IAAY,EACZ,KAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAQD,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,IAAwC,EAAE,KAAc;QAC/F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;IACJ,CAAC;IAUD,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,IAAwC,EAAE,KAAc;QAC9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC;IAClD,CAAC;IAUD,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,IAAqB;QAE/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAYD,KAAK,CAAC,qBAAqB,CACzB,MAAc,EACd,IAAqB,EACrB,IAAY;QAGZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAUD,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,IAAqB;QAEhE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC;IAClD,CAAC;IAUO,KAAK,CAAC,qBAAqB,CAAC,IAAe,EAAE,IAAwC;QAE3F,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAGvC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAGvC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAExE,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAGtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,UAAU,EACV,SAAS,EACT,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,sBAAsB,EAAE;YAC5D,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACnE,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAYO,KAAK,CAAC,qBAAqB,CACjC,IAAe,EACf,IAAwC,EACxC,IAAY;QAEZ,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAGtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAC7B,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QAGD,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,yBAAyB,EAAE;gBAC/D,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACnE,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,CAAC,CAAC;QACnE,CAAC;QAGD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YACF,MAAM,IAAI,8BAAqB,CAC7B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAGD,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAIpD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,wBAAe,EAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YAEP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YAEb,MAAM,IAAI,CAAC,sBAAsB,CAAC,6BAA6B,CAC7D,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YAGF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACxE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YACF,MAAM,YAAY,GAAG,YAAY,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YAGlE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,wBAAwB,EAAE;gBAC9D,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACnE,gBAAgB,EAAE,IAAI;gBACtB,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC;YAC1D,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,iBAAiB,wBAAwB,CACxE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;gBACF,MAAM,IAAI,8BAAqB,CAC7B,kFAAkF,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QAGD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,2BAA2B,EAAE;YACjE,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC7E,WAAW,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACnE,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAMO,kBAAkB;QAExB,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEnC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAQO,QAAQ,CAAC,IAAY;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAMD,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,IAAwC,EACxC,KAAc;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC;QACrD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC;IAUD,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,IAAI,MAAM,CAAC;IAC3D,CAAC;IAKD,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAKD,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,qBAAqB,IAAI,EAAE,CAAC;IAChE,CAAC;IASD,IAAI,0BAA0B;QAC5B,OAAO,IAAI,CAAC,gBAAgB,KAAK,OAAO;YACtC,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAChC,CAAC;IAuBD,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,IAAgC,EAChC,KAAc;QAEd,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAEnC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAEhE,OAAO;gBACL,UAAU,EAAE,KAAK;gBAEjB,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC;gBAC9D,gBAAgB,EAAE,IAAI,CAAC,qBAAqB;gBAC5C,IAAI;aACL,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE9D,OAAO;YACL,UAAU,EAAE,IAAI;YAGhB,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC;YACnC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB;YAC3C,IAAI;SACL,CAAC;IACJ,CAAC;IAiBD,KAAK,CAAC,gBAAgB,CACpB,UAAkB,EAClB,IAAgC,EAChC,SAAiB,EACjB,KAAc;QAEd,OAAO,IAAI,CAAC,gBAAgB,KAAK,OAAO;YACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAYD,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,IAAgC,EAChC,KAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAGjD,MAAM,QAAQ,GAAG,IAAA,oBAAW,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAG1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAG3C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEnE,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAGtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CACrD,IAAI,CAAC,EAAE,EACP,SAAS,EACT,SAAS,EACT,cAAc,CACf,CAAC;QAGF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,sBAAsB,EAAE;YAC5D,KAAK,EAAE,UAAU;YACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;SAClC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAcD,KAAK,CAAC,WAAW,CACf,UAAkB,EAClB,IAAgC,EAChC,KAAa,EACb,KAAc;QAEd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CACjE,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAAC,6CAA6C,CAAC,CAAC;QACjF,CAAC;QAGD,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAEjF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,yBAAyB,EAAE;gBAC/D,KAAK,EAAE,UAAU;gBACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;aAClC,CAAC,CAAC;YAEH,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEpD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,wBAAe,EAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YAEb,MAAM,IAAI,CAAC,sBAAsB,CAAC,6BAA6B,CAC7D,IAAI,CAAC,EAAE,EACP,cAAc,CACf,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,wBAAwB,EAAE;gBAC9D,KAAK,EAAE,UAAU;gBACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;aAClC,CAAC,CAAC;YAEH,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAGD,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAEjF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,2BAA2B,EAAE;YACjE,KAAK,EAAE,UAAU;YACjB,gBAAgB,EAAE,GAAG,IAAI,QAAQ;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAoBD,oBAAoB,CAClB,KAAa,EACb,IAAgC,EAChC,KAAa,EACb,KAAc;QAEd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAErE,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,2CAA2C,KAAK,IAAI;gBACpD,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;gBAC7D,wEAAwE;gBACxE,qBAAqB,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,4CAA4C,KAAK,IAAI;gBACrD,yEAAyE;gBACzE,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAMD,IAAA,2CAAmB,EAAC,OAAO,EAAE,4BAA4B,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAcO,cAAc,CAAC,KAAc;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;QAEtD,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IASO,gBAAgB,CAAC,IAAgC;QACvD,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAChE,CAAC;IAkBO,YAAY,CAClB,IAAgC,EAChC,KAAc;QAEd,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YAIxB,IAAI,CAAC,cAAc,CAAC,IAAI,CACtB,0CAA0C;gBAC1C,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,IAAI;gBAC7D,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;gBAC7D,mEAAmE,EACnE,qBAAqB,CACtB,CAAC;YACF,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAExC,IAAI,CAAC,UAAU,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACvD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CACtB,0EAA0E;gBAC1E,wEAAwE;gBACxE,8DAA8D;gBAC9D,4BAA4B,EAC5B,qBAAqB,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,IAAI,MAAM,CAAC;QAErC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YAGP,IAAI,CAAC,cAAc,CAAC,IAAI,CACtB,0BAA0B,OAAO,iCAAiC;gBAClE,+EAA+E;gBAC/E,qDAAqD,EACrD,qBAAqB,CACtB,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAKO,SAAS,CAAC,KAAa;QAC7B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IAQO,KAAK,CAAC,WAAW,CACvB,UAAkB,EAClB,IAAwC,EACxC,KAAc;QAEd,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,gBAAgB;YAClD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAEO,mBAAmB,CAAC,IAAwC;QAClE,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,KAAK,CAAC,CAAC,OAAO,yCAAgB,CAAC,KAAK,CAAC;YAC1C,KAAK,OAAO,CAAC,CAAC,OAAO,yCAAgB,CAAC,KAAK,CAAC;YAC5C,KAAK,gBAAgB,CAAC,CAAC,OAAO,yCAAgB,CAAC,cAAc,CAAC;QAChE,CAAC;IACH,CAAC;CACF,CAAA;AAx1BY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;IAC3B,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;IAEzB,WAAA,IAAA,eAAM,EAAC,yBAAyB,CAAC,CAAA;IAEjC,WAAA,IAAA,eAAM,EAAC,aAAa,CAAC,CAAA;;GAdb,mBAAmB,CAw1B/B"}
|
|
@@ -1,11 +1,16 @@
|
|
|
1
1
|
import { Strategy } from 'passport-custom';
|
|
2
2
|
import { IApiKeyRepository, IApiKeyAccount } from '../interfaces/api-key-repository.interface';
|
|
3
|
+
import type { AuthModuleOptions } from '../auth.module';
|
|
3
4
|
declare const ApiKeyStrategy_base: new (...args: any[]) => Strategy;
|
|
4
5
|
export declare class ApiKeyStrategy extends ApiKeyStrategy_base {
|
|
5
6
|
private readonly apiKeyRepository?;
|
|
6
7
|
private readonly logger;
|
|
7
|
-
|
|
8
|
+
private readonly headerName?;
|
|
9
|
+
private readonly prefix?;
|
|
10
|
+
constructor(apiKeyRepository?: IApiKeyRepository | undefined, options?: AuthModuleOptions['apiKey']);
|
|
8
11
|
validate(req: Record<string, any>): Promise<IApiKeyAccount | null>;
|
|
12
|
+
private extractKey;
|
|
13
|
+
private touchLastUsed;
|
|
9
14
|
}
|
|
10
15
|
export {};
|
|
11
16
|
//# sourceMappingURL=api-key.strategy.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"api-key.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/api-key.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC
|
|
1
|
+
{"version":3,"file":"api-key.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/api-key.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;;AAcxD,qBACa,cAAe,SAAQ,mBAAqC;IAQrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAPpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;gBAKd,gBAAgB,CAAC,EAAE,iBAAiB,YAAA,EACrD,OAAO,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC;IAoCjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAyCxE,OAAO,CAAC,UAAU;IAiBlB,OAAO,CAAC,aAAa;CAetB"}
|
|
@@ -20,10 +20,12 @@ const passport_custom_1 = require("passport-custom");
|
|
|
20
20
|
const crypto_1 = require("crypto");
|
|
21
21
|
const constants_1 = require("../constants");
|
|
22
22
|
let ApiKeyStrategy = ApiKeyStrategy_1 = class ApiKeyStrategy extends (0, passport_1.PassportStrategy)(passport_custom_1.Strategy, 'api-key') {
|
|
23
|
-
constructor(apiKeyRepository) {
|
|
23
|
+
constructor(apiKeyRepository, options) {
|
|
24
24
|
super();
|
|
25
25
|
this.apiKeyRepository = apiKeyRepository;
|
|
26
26
|
this.logger = new common_1.Logger(ApiKeyStrategy_1.name);
|
|
27
|
+
this.headerName = options?.headerName?.toLowerCase();
|
|
28
|
+
this.prefix = options?.prefix;
|
|
27
29
|
if (!apiKeyRepository) {
|
|
28
30
|
this.logger.warn('ApiKeyStrategy instantiated without an IApiKeyRepository. ' +
|
|
29
31
|
'API key authentication will reject all requests. ' +
|
|
@@ -31,12 +33,11 @@ let ApiKeyStrategy = ApiKeyStrategy_1 = class ApiKeyStrategy extends (0, passpor
|
|
|
31
33
|
}
|
|
32
34
|
}
|
|
33
35
|
async validate(req) {
|
|
34
|
-
const
|
|
35
|
-
if (!
|
|
36
|
+
const token = this.extractKey(req);
|
|
37
|
+
if (!token) {
|
|
36
38
|
return null;
|
|
37
39
|
}
|
|
38
|
-
|
|
39
|
-
if (!token) {
|
|
40
|
+
if (this.prefix && !token.startsWith(this.prefix)) {
|
|
40
41
|
return null;
|
|
41
42
|
}
|
|
42
43
|
if (!this.apiKeyRepository) {
|
|
@@ -45,19 +46,52 @@ let ApiKeyStrategy = ApiKeyStrategy_1 = class ApiKeyStrategy extends (0, passpor
|
|
|
45
46
|
const keyHash = (0, crypto_1.createHash)('sha256').update(token).digest('hex');
|
|
46
47
|
const account = await this.apiKeyRepository.findByKeyHash(keyHash);
|
|
47
48
|
if (!account) {
|
|
49
|
+
if (this.prefix) {
|
|
50
|
+
throw new common_1.UnauthorizedException('Invalid API key');
|
|
51
|
+
}
|
|
48
52
|
return null;
|
|
49
53
|
}
|
|
50
54
|
if (!account.isActive) {
|
|
51
55
|
throw new common_1.UnauthorizedException('API key is inactive');
|
|
52
56
|
}
|
|
57
|
+
if (account.expiresAt && new Date(account.expiresAt).getTime() <= Date.now()) {
|
|
58
|
+
throw new common_1.UnauthorizedException('API key has expired');
|
|
59
|
+
}
|
|
60
|
+
this.touchLastUsed(account.id);
|
|
53
61
|
return account;
|
|
54
62
|
}
|
|
63
|
+
extractKey(req) {
|
|
64
|
+
if (this.headerName) {
|
|
65
|
+
const value = req.headers?.[this.headerName];
|
|
66
|
+
if (typeof value === 'string' && value.trim() !== '') {
|
|
67
|
+
return value.trim();
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
const authHeader = req.headers?.authorization ?? req.headers?.Authorization;
|
|
71
|
+
if (!authHeader || !authHeader.startsWith('Bearer ')) {
|
|
72
|
+
return null;
|
|
73
|
+
}
|
|
74
|
+
return authHeader.slice(7) || null;
|
|
75
|
+
}
|
|
76
|
+
touchLastUsed(id) {
|
|
77
|
+
const touch = this.apiKeyRepository?.touchLastUsed;
|
|
78
|
+
if (!touch) {
|
|
79
|
+
return;
|
|
80
|
+
}
|
|
81
|
+
const report = (err) => this.logger.error(`touchLastUsed failed for API key account ${id}: ${err instanceof Error ? err.message : String(err)}`);
|
|
82
|
+
try {
|
|
83
|
+
touch.call(this.apiKeyRepository, id).catch(report);
|
|
84
|
+
}
|
|
85
|
+
catch (err) {
|
|
86
|
+
report(err);
|
|
87
|
+
}
|
|
88
|
+
}
|
|
55
89
|
};
|
|
56
90
|
exports.ApiKeyStrategy = ApiKeyStrategy;
|
|
57
91
|
exports.ApiKeyStrategy = ApiKeyStrategy = ApiKeyStrategy_1 = __decorate([
|
|
58
92
|
(0, common_1.Injectable)(),
|
|
59
93
|
__param(0, (0, common_1.Optional)()),
|
|
60
94
|
__param(0, (0, common_1.Inject)(constants_1.API_KEY_REPOSITORY)),
|
|
61
|
-
__metadata("design:paramtypes", [Object])
|
|
95
|
+
__metadata("design:paramtypes", [Object, Object])
|
|
62
96
|
], ApiKeyStrategy);
|
|
63
97
|
//# sourceMappingURL=api-key.strategy.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"api-key.strategy.js","sourceRoot":"","sources":["../../src/strategies/api-key.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,+CAAoD;AACpD,qDAA2C;AAC3C,mCAAoC;AAEpC,4CAAkD;
|
|
1
|
+
{"version":3,"file":"api-key.strategy.js","sourceRoot":"","sources":["../../src/strategies/api-key.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,+CAAoD;AACpD,qDAA2C;AAC3C,mCAAoC;AAEpC,4CAAkD;AAgB3C,IAAM,cAAc,sBAApB,MAAM,cAAe,SAAQ,IAAA,2BAAgB,EAAC,0BAAQ,EAAE,SAAS,CAAC;IAKvE,YAGE,gBAAqD,EACrD,OAAqC;QAErC,KAAK,EAAE,CAAC;QAHS,qBAAgB,GAAhB,gBAAgB,CAAoB;QAPtC,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;QAaxD,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAE9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4DAA4D;gBAC5D,mDAAmD;gBACnD,0EAA0E,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAqBD,KAAK,CAAC,QAAQ,CAAC,GAAwB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAID,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAqB,CAAC,uCAAuC,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEnE,IAAI,CAAC,OAAO,EAAE,CAAC;YAEb,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;YACrD,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,UAAU,CAAC,GAAwB;QACzC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAGD,MAAM,UAAU,GAAuB,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC;QAChG,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAGO,aAAa,CAAC,EAAU;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE,CAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4CAA4C,EAAE,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtG,CAAC;QACJ,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAtHY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;;GAPlB,cAAc,CAsH1B"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import { Type } from '@nestjs/common';
|
|
2
|
+
export declare const DEFAULT_EXTERNAL_JWT_MAX_BYTES = 8192;
|
|
3
|
+
export type ExternalJwtKey = string | Buffer;
|
|
4
|
+
export interface ExternalJwtStrategyOptions {
|
|
5
|
+
secretProvider: (kid: string | undefined, request: Record<string, any>) => ExternalJwtKey | null | Promise<ExternalJwtKey | null>;
|
|
6
|
+
algorithms: string[];
|
|
7
|
+
issuer?: string | string[];
|
|
8
|
+
audience?: string | string[];
|
|
9
|
+
clockToleranceSec?: number;
|
|
10
|
+
maxTokenBytes?: number;
|
|
11
|
+
mapClaims?: (payload: Record<string, unknown>) => unknown;
|
|
12
|
+
jwtFromRequest?: (request: Record<string, any>) => string | null;
|
|
13
|
+
}
|
|
14
|
+
export interface ExternalJwtStrategyFactory {
|
|
15
|
+
inject?: Array<string | symbol | Type<unknown>>;
|
|
16
|
+
useFactory: (...deps: any[]) => ExternalJwtStrategyOptions;
|
|
17
|
+
}
|
|
18
|
+
export declare function createExternalJwtStrategy(name: string, config: ExternalJwtStrategyOptions | ExternalJwtStrategyFactory): Type<unknown>;
|
|
19
|
+
//# sourceMappingURL=external-jwt.strategy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"external-jwt.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/external-jwt.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAUlE,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAGnD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,0BAA0B;IAMzC,cAAc,EAAE,CACd,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KACzB,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAO5D,UAAU,EAAE,MAAM,EAAE,CAAC;IAGrB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAG3B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAG7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,aAAa,CAAC,EAAE,MAAM,CAAC;IAOvB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAG1D,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;CAClE;AAGD,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,0BAA0B,CAAC;CAC5D;AAgCD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,0BAA0B,GAAG,0BAA0B,GAC9D,IAAI,CAAC,OAAO,CAAC,CAyCf"}
|
|
@@ -0,0 +1,124 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.DEFAULT_EXTERNAL_JWT_MAX_BYTES = void 0;
|
|
4
|
+
exports.createExternalJwtStrategy = createExternalJwtStrategy;
|
|
5
|
+
const common_1 = require("@nestjs/common");
|
|
6
|
+
const passport_1 = require("@nestjs/passport");
|
|
7
|
+
const passport_jwt_1 = require("passport-jwt");
|
|
8
|
+
const invalid_auth_config_exception_1 = require("../exceptions/invalid-auth-config.exception");
|
|
9
|
+
const HMAC_ALGORITHMS = ['HS256', 'HS384', 'HS512'];
|
|
10
|
+
const ASYMMETRIC_ALGORITHMS = ['RS256', 'RS384', 'RS512', 'PS256', 'PS384', 'PS512', 'ES256', 'ES384', 'ES512'];
|
|
11
|
+
const RESERVED_NAMES = ['jwt', 'api-key'];
|
|
12
|
+
exports.DEFAULT_EXTERNAL_JWT_MAX_BYTES = 8192;
|
|
13
|
+
function createExternalJwtStrategy(name, config) {
|
|
14
|
+
assertName(name);
|
|
15
|
+
const logger = new common_1.Logger(`ExternalJwtStrategy:${name}`);
|
|
16
|
+
let factory;
|
|
17
|
+
if ('useFactory' in config) {
|
|
18
|
+
factory = config;
|
|
19
|
+
}
|
|
20
|
+
else {
|
|
21
|
+
validateOptions(name, config);
|
|
22
|
+
factory = { useFactory: () => config };
|
|
23
|
+
}
|
|
24
|
+
class ExternalJwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy, name) {
|
|
25
|
+
constructor(...deps) {
|
|
26
|
+
const options = factory.useFactory(...deps);
|
|
27
|
+
validateOptions(name, options);
|
|
28
|
+
super(passportOptions(options, logger));
|
|
29
|
+
this.mapClaims = options.mapClaims;
|
|
30
|
+
}
|
|
31
|
+
validate(payload) {
|
|
32
|
+
if (!this.mapClaims) {
|
|
33
|
+
return payload;
|
|
34
|
+
}
|
|
35
|
+
try {
|
|
36
|
+
return this.mapClaims(payload) ?? null;
|
|
37
|
+
}
|
|
38
|
+
catch (err) {
|
|
39
|
+
logger.error(`mapClaims threw, so the token is rejected: ${err instanceof Error ? err.message : String(err)}`);
|
|
40
|
+
return null;
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
(0, common_1.Injectable)()(ExternalJwtStrategy);
|
|
45
|
+
(factory.inject ?? []).forEach((token, index) => {
|
|
46
|
+
(0, common_1.Inject)(token)(ExternalJwtStrategy, undefined, index);
|
|
47
|
+
});
|
|
48
|
+
return ExternalJwtStrategy;
|
|
49
|
+
}
|
|
50
|
+
function passportOptions(options, logger) {
|
|
51
|
+
const extract = options.jwtFromRequest ?? passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken();
|
|
52
|
+
const maxBytes = options.maxTokenBytes ?? exports.DEFAULT_EXTERNAL_JWT_MAX_BYTES;
|
|
53
|
+
return {
|
|
54
|
+
jwtFromRequest: (request) => {
|
|
55
|
+
const token = extract(request);
|
|
56
|
+
return token && Buffer.byteLength(token, 'utf8') <= maxBytes ? token : null;
|
|
57
|
+
},
|
|
58
|
+
secretOrKeyProvider: (request, rawJwtToken, done) => {
|
|
59
|
+
Promise.resolve()
|
|
60
|
+
.then(() => options.secretProvider(keyIdOf(rawJwtToken), request))
|
|
61
|
+
.then((key) => (key ? done(null, key) : done(new Error('No verification key for this token'))), (err) => {
|
|
62
|
+
logger.error(`secretProvider threw, so the token is rejected: ${err instanceof Error ? err.message : String(err)}`);
|
|
63
|
+
done(err);
|
|
64
|
+
});
|
|
65
|
+
},
|
|
66
|
+
algorithms: options.algorithms,
|
|
67
|
+
issuer: options.issuer,
|
|
68
|
+
audience: options.audience,
|
|
69
|
+
ignoreExpiration: false,
|
|
70
|
+
jsonWebTokenOptions: { clockTolerance: options.clockToleranceSec ?? 0 },
|
|
71
|
+
};
|
|
72
|
+
}
|
|
73
|
+
function keyIdOf(token) {
|
|
74
|
+
try {
|
|
75
|
+
const header = JSON.parse(Buffer.from(token.split('.')[0], 'base64url').toString('utf8'));
|
|
76
|
+
return typeof header?.kid === 'string' ? header.kid : undefined;
|
|
77
|
+
}
|
|
78
|
+
catch {
|
|
79
|
+
return undefined;
|
|
80
|
+
}
|
|
81
|
+
}
|
|
82
|
+
function assertName(name) {
|
|
83
|
+
if (typeof name !== 'string' || name.trim() === '') {
|
|
84
|
+
throw new invalid_auth_config_exception_1.InvalidAuthConfigException('[createExternalJwtStrategy] name must be a non-empty string.');
|
|
85
|
+
}
|
|
86
|
+
if (RESERVED_NAMES.includes(name)) {
|
|
87
|
+
throw new invalid_auth_config_exception_1.InvalidAuthConfigException(`[createExternalJwtStrategy('${name}')] '${name}' is the name of the package's own strategy; ` +
|
|
88
|
+
'Passport would replace it. Choose another name, such as customer-jwt.');
|
|
89
|
+
}
|
|
90
|
+
}
|
|
91
|
+
function validateOptions(name, options) {
|
|
92
|
+
const fail = (message) => {
|
|
93
|
+
throw new invalid_auth_config_exception_1.InvalidAuthConfigException(`[createExternalJwtStrategy('${name}')] ${message}`);
|
|
94
|
+
};
|
|
95
|
+
if (typeof options?.secretProvider !== 'function') {
|
|
96
|
+
fail('secretProvider must be a function (kid, request) => key.');
|
|
97
|
+
}
|
|
98
|
+
const { algorithms } = options;
|
|
99
|
+
if (!Array.isArray(algorithms) || algorithms.length === 0) {
|
|
100
|
+
fail("algorithms is required: list the algorithms the issuer signs with, e.g. ['HS256']. " +
|
|
101
|
+
'Left open, a token would choose how it is verified.');
|
|
102
|
+
}
|
|
103
|
+
const unsupported = algorithms.filter((algorithm) => !HMAC_ALGORITHMS.includes(algorithm) && !ASYMMETRIC_ALGORITHMS.includes(algorithm));
|
|
104
|
+
if (unsupported.length > 0) {
|
|
105
|
+
const none = unsupported.some((algorithm) => String(algorithm).toLowerCase() === 'none');
|
|
106
|
+
fail(`algorithms contains ${unsupported.map((algorithm) => JSON.stringify(algorithm)).join(', ')}. ` +
|
|
107
|
+
(none ? '"none" accepts unsigned tokens. ' : '') +
|
|
108
|
+
`Supported: ${[...HMAC_ALGORITHMS, ...ASYMMETRIC_ALGORITHMS].join(', ')}.`);
|
|
109
|
+
}
|
|
110
|
+
const hmac = algorithms.some((algorithm) => HMAC_ALGORITHMS.includes(algorithm));
|
|
111
|
+
const asymmetric = algorithms.some((algorithm) => ASYMMETRIC_ALGORITHMS.includes(algorithm));
|
|
112
|
+
if (hmac && asymmetric) {
|
|
113
|
+
fail('algorithms mixes HMAC (HS*) with asymmetric algorithms, which lets a public key be used as an ' +
|
|
114
|
+
'HMAC secret. Register one strategy per algorithm family.');
|
|
115
|
+
}
|
|
116
|
+
const { maxTokenBytes, clockToleranceSec } = options;
|
|
117
|
+
if (maxTokenBytes !== undefined && (!Number.isInteger(maxTokenBytes) || maxTokenBytes <= 0)) {
|
|
118
|
+
fail(`maxTokenBytes must be a positive integer; received ${String(maxTokenBytes)}.`);
|
|
119
|
+
}
|
|
120
|
+
if (clockToleranceSec !== undefined && (!Number.isFinite(clockToleranceSec) || clockToleranceSec < 0)) {
|
|
121
|
+
fail(`clockToleranceSec must be a non-negative number; received ${String(clockToleranceSec)}.`);
|
|
122
|
+
}
|
|
123
|
+
}
|
|
124
|
+
//# sourceMappingURL=external-jwt.strategy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"external-jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/external-jwt.strategy.ts"],"names":[],"mappings":";;;AA6FA,8DA4CC;AAzID,2CAAkE;AAClE,+CAAoD;AACpD,+CAAoD;AACpD,+FAAyF;AAEzF,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACpD,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAChH,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAG7B,QAAA,8BAA8B,GAAG,IAAI,CAAC;AAmFnD,SAAgB,yBAAyB,CACvC,IAAY,EACZ,MAA+D;IAE/D,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IAEzD,IAAI,OAAmC,CAAC;IACxC,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,mBAAoB,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,EAAE,IAAI,CAAC;QAGhE,YAAY,GAAG,IAAe;YAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5C,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,QAAQ,CAAC,OAAgC;YACvC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;YACzC,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC/G,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF;IAED,IAAA,mBAAU,GAAE,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9C,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,OAAmC,EAAE,MAAc;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,yBAAU,CAAC,2BAA2B,EAAE,CAAC;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,sCAA8B,CAAC;IAEzE,OAAO;QAEL,cAAc,EAAE,CAAC,OAA4B,EAAiB,EAAE;YAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,CAAC;QACD,mBAAmB,EAAE,CACnB,OAA4B,EAC5B,WAAmB,EACnB,IAAkD,EAClD,EAAE;YACF,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;iBACjE,IAAI,CACH,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC,EACxF,CAAC,GAAY,EAAE,EAAE;gBACf,MAAM,CAAC,KAAK,CAAC,mDAAmD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpH,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC,CACF,CAAC;QACN,CAAC;QACD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,KAAK;QACvB,mBAAmB,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAAE;KAC3B,CAAC;AACjD,CAAC;AAGD,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1F,OAAO,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,0DAA0B,CAAC,8DAA8D,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,0DAA0B,CAClC,+BAA+B,IAAI,QAAQ,IAAI,+CAA+C;YAC5F,uEAAuE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAmC;IACxE,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;QACtC,MAAM,IAAI,0DAA0B,CAAC,+BAA+B,IAAI,OAAO,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC;IAEF,IAAI,OAAO,OAAO,EAAE,cAAc,KAAK,UAAU,EAAE,CAAC;QAClD,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,IAAI,CACF,qFAAqF;YACnF,qDAAqD,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CACnC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClG,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;QACzF,IAAI,CACF,uBAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC7F,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,cAAc,CAAC,GAAG,eAAe,EAAE,GAAG,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QACvB,IAAI,CACF,gGAAgG;YAC9F,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IACrD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5F,IAAI,CAAC,sDAAsD,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC,CAAC,EAAE,CAAC;QACtG,IAAI,CAAC,6DAA6D,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}
|
|
@@ -9,9 +9,11 @@ import type { JwtPayloadUser } from '../guards/create-auth-guard';
|
|
|
9
9
|
declare const JwtStrategy_base: new (...args: any[]) => Strategy;
|
|
10
10
|
export declare class JwtStrategy extends JwtStrategy_base {
|
|
11
11
|
private authService;
|
|
12
|
+
private readonly logger;
|
|
12
13
|
private readonly jwtValidation;
|
|
13
14
|
private readonly jwtPayloadFactory;
|
|
14
|
-
private readonly
|
|
15
|
+
private readonly realmExtractor?;
|
|
16
|
+
private readonly realmSkip;
|
|
15
17
|
constructor(options: AuthModuleOptions, authService: AuthService, jwtPayloadFactory?: IJwtPayloadFactory);
|
|
16
18
|
validate(req: Request, payload: JwtPayload): Promise<IAuthUser | JwtPayloadUser>;
|
|
17
19
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;
|
|
1
|
+
{"version":3,"file":"jwt.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;;AAalE,qBACa,WAAY,SAAQ,gBAA0B;IASvD,OAAO,CAAC,WAAW;IARrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IACvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkD;gBAG7C,OAAO,EAAE,iBAAiB,EAC/C,WAAW,EAAE,WAAW,EAGhC,iBAAiB,CAAC,EAAE,kBAAkB;IAkClC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;CA6CvF"}
|
|
@@ -11,6 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
|
|
|
11
11
|
var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
12
12
|
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
13
|
};
|
|
14
|
+
var JwtStrategy_1;
|
|
14
15
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
16
|
exports.JwtStrategy = void 0;
|
|
16
17
|
const common_1 = require("@nestjs/common");
|
|
@@ -19,15 +20,12 @@ const passport_jwt_1 = require("passport-jwt");
|
|
|
19
20
|
const auth_service_1 = require("../services/auth.service");
|
|
20
21
|
const default_jwt_payload_factory_1 = require("../services/default-jwt-payload-factory");
|
|
21
22
|
const constants_1 = require("../constants");
|
|
23
|
+
const cookies_1 = require("../utils/cookies");
|
|
24
|
+
const realm_middleware_1 = require("../middleware/realm.middleware");
|
|
22
25
|
function fromCookie(cookieName) {
|
|
23
|
-
return (req) =>
|
|
24
|
-
if (req && req.cookies && req.cookies[cookieName]) {
|
|
25
|
-
return req.cookies[cookieName];
|
|
26
|
-
}
|
|
27
|
-
return null;
|
|
28
|
-
};
|
|
26
|
+
return (req) => (0, cookies_1.readCookie)(req, cookieName);
|
|
29
27
|
}
|
|
30
|
-
let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
|
|
28
|
+
let JwtStrategy = JwtStrategy_1 = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
|
|
31
29
|
constructor(options, authService, jwtPayloadFactory) {
|
|
32
30
|
const bearerExtractor = passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken();
|
|
33
31
|
const cookieAuthEnabled = options.features?.cookieAuth === true;
|
|
@@ -42,16 +40,23 @@ let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(pas
|
|
|
42
40
|
jwtFromRequest: jwtExtractor,
|
|
43
41
|
ignoreExpiration: false,
|
|
44
42
|
secretOrKey: options.jwtSecret,
|
|
43
|
+
algorithms: ['HS256'],
|
|
45
44
|
passReqToCallback: true,
|
|
46
45
|
});
|
|
47
46
|
this.authService = authService;
|
|
47
|
+
this.logger = new common_1.Logger(JwtStrategy_1.name);
|
|
48
48
|
this.jwtValidation = options.jwtValidation || 'full';
|
|
49
49
|
this.jwtPayloadFactory = jwtPayloadFactory || new default_jwt_payload_factory_1.DefaultJwtPayloadFactory();
|
|
50
|
-
this.
|
|
50
|
+
this.realmExtractor = options.realmExtractorInstance;
|
|
51
|
+
this.realmSkip = options.realm?.skip;
|
|
51
52
|
}
|
|
52
53
|
async validate(req, payload) {
|
|
53
|
-
if (this.
|
|
54
|
-
const
|
|
54
|
+
if (this.realmExtractor) {
|
|
55
|
+
const request = req;
|
|
56
|
+
if (request._realm === undefined) {
|
|
57
|
+
await (0, realm_middleware_1.resolveRealm)(request, this.realmExtractor, this.realmSkip, this.logger);
|
|
58
|
+
}
|
|
59
|
+
const requestRealm = request._realm;
|
|
55
60
|
const tokenRealm = payload.realm;
|
|
56
61
|
if (!tokenRealm || tokenRealm !== requestRealm) {
|
|
57
62
|
throw new common_1.UnauthorizedException('Invalid token');
|
|
@@ -69,7 +74,7 @@ let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(pas
|
|
|
69
74
|
}
|
|
70
75
|
};
|
|
71
76
|
exports.JwtStrategy = JwtStrategy;
|
|
72
|
-
exports.JwtStrategy = JwtStrategy = __decorate([
|
|
77
|
+
exports.JwtStrategy = JwtStrategy = JwtStrategy_1 = __decorate([
|
|
73
78
|
(0, common_1.Injectable)(),
|
|
74
79
|
__param(0, (0, common_1.Inject)(constants_1.AUTH_MODULE_OPTIONS)),
|
|
75
80
|
__param(2, (0, common_1.Optional)()),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../src/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,+CAAoD;AACpD,+CAAoD;AAEpD,2DAAuD;AAKvD,yFAAmF;AACnF,4CAAwE;AAGxE,8CAA8C;AAC9C,qEAA8D;AAO9D,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,CAAC,GAAY,EAAiB,EAAE,CAAC,IAAA,oBAAU,EAAC,GAAqC,EAAE,UAAU,CAAC,CAAC;AACxG,CAAC;AAGM,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IAOzD,YAC+B,OAA0B,EAC/C,WAAwB,EAGhC,iBAAsC;QAEtC,MAAM,eAAe,GAAG,yBAAU,CAAC,2BAA2B,EAAE,CAAC;QAIjE,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,KAAK,IAAI,CAAC;QAChE,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,eAAe,IAAI,cAAc,CAAC;QAGzE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa;YAC9C,CAAC,CAAC,UAAU,cAAc,EAAE;YAC5B,CAAC,CAAC,cAAc,CAAC;QAEnB,MAAM,YAAY,GAAG,iBAAiB;YACpC,CAAC,CAAC,yBAAU,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;YACtE,CAAC,CAAC,eAAe,CAAC;QAEpB,KAAK,CAAC;YACJ,cAAc,EAAE,YAAY;YAC5B,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,OAAO,CAAC,SAAS;YAG9B,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QA7BK,gBAAW,GAAX,WAAW,CAAa;QARjB,WAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;QAuCrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;QACrD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,IAAI,sDAAwB,EAAE,CAAC;QAC7E,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,OAAmB;QAE9C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,GAAqC,CAAC;YAQtD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAA,+BAAY,EAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAKD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;YAI1C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,CAAC;QAKD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAE9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA3FY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;IAE3B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;6CAFP,0BAAW;GATvB,WAAW,CA2FvB"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
import { ExecutionContext } from '@nestjs/common';
|
|
2
|
+
type Operation = 'query' | 'mutation' | 'subscription';
|
|
3
|
+
export declare function httpExecutionContext(request: unknown): ExecutionContext;
|
|
4
|
+
export declare function graphqlExecutionContext(gqlContext: unknown, operation?: Operation, operationName?: string): ExecutionContext;
|
|
5
|
+
export declare function graphqlWsConnection(upgradeRequest: Record<string, any>): Record<string, any>;
|
|
6
|
+
export {};
|
|
7
|
+
//# sourceMappingURL=execution-contexts.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"execution-contexts.d.ts","sourceRoot":"","sources":["../../src/test-utils/execution-contexts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,KAAK,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;AAMvD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAUvE;AAMD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,OAAO,EACnB,SAAS,GAAE,SAAmB,EAC9B,aAAa,CAAC,EAAE,MAAM,GACrB,gBAAgB,CAalB;AAMD,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAQ5F"}
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.httpExecutionContext = httpExecutionContext;
|
|
4
|
+
exports.graphqlExecutionContext = graphqlExecutionContext;
|
|
5
|
+
exports.graphqlWsConnection = graphqlWsConnection;
|
|
6
|
+
const handler = () => undefined;
|
|
7
|
+
class Resolver {
|
|
8
|
+
}
|
|
9
|
+
function httpExecutionContext(request) {
|
|
10
|
+
const args = [request, {}, () => undefined];
|
|
11
|
+
return {
|
|
12
|
+
getType: () => 'http',
|
|
13
|
+
getArgs: () => args,
|
|
14
|
+
getArgByIndex: (index) => args[index],
|
|
15
|
+
getHandler: () => handler,
|
|
16
|
+
getClass: () => Resolver,
|
|
17
|
+
switchToHttp: () => ({ getRequest: () => request }),
|
|
18
|
+
};
|
|
19
|
+
}
|
|
20
|
+
function graphqlExecutionContext(gqlContext, operation = 'query', operationName) {
|
|
21
|
+
const info = { operation: { operation, name: operationName ? { value: operationName } : undefined } };
|
|
22
|
+
const args = [{}, {}, gqlContext, info];
|
|
23
|
+
return {
|
|
24
|
+
getType: () => 'graphql',
|
|
25
|
+
getArgs: () => args,
|
|
26
|
+
getArgByIndex: (index) => args[index],
|
|
27
|
+
getHandler: () => handler,
|
|
28
|
+
getClass: () => Resolver,
|
|
29
|
+
switchToHttp: () => ({ getRequest: () => args[0], getResponse: () => args[1], getNext: () => args[2] }),
|
|
30
|
+
};
|
|
31
|
+
}
|
|
32
|
+
function graphqlWsConnection(upgradeRequest) {
|
|
33
|
+
return {
|
|
34
|
+
connectionInitReceived: true,
|
|
35
|
+
acknowledged: true,
|
|
36
|
+
subscriptions: {},
|
|
37
|
+
extra: { socket: {}, request: upgradeRequest },
|
|
38
|
+
connectionParams: {},
|
|
39
|
+
};
|
|
40
|
+
}
|
|
41
|
+
//# sourceMappingURL=execution-contexts.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"execution-contexts.js","sourceRoot":"","sources":["../../src/test-utils/execution-contexts.ts"],"names":[],"mappings":";;AAQA,oDAUC;AAMD,0DAiBC;AAMD,kDAQC;AAnDD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;AAChC,MAAM,QAAQ;CAAG;AAGjB,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM;QACrB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7C,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;KACrB,CAAC;AACnC,CAAC;AAMD,SAAgB,uBAAuB,CACrC,UAAmB,EACnB,YAAuB,OAAO,EAC9B,aAAsB;IAEtB,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;IACtG,MAAM,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7C,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QAGxB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACnC,CAAC;AAMD,SAAgB,mBAAmB,CAAC,cAAmC;IACrE,OAAO;QACL,sBAAsB,EAAE,IAAI;QAC5B,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QAC9C,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC"}
|