@atom8n/n8n 2.2.0

package/dist/sso.ee/oidc/oidc.service.ee.d.ts

@@ -0,0 +1,56 @@
+import { OidcConfigDto } from '@n8n/api-types';
+import { Logger } from '@n8n/backend-common';
+import { GlobalConfig } from '@n8n/config';
+import { AuthIdentityRepository, SettingsRepository, type User, UserRepository } from '@n8n/db';
+import { Cipher, InstanceSettings } from 'n8n-core';
+import { ProvisioningService } from '../../modules/provisioning.ee/provisioning.service.ee';
+import { JwtService } from '../../services/jwt.service';
+import { UrlService } from '../../services/url.service';
+type OidcRuntimeConfig = Pick<OidcConfigDto, 'clientId' | 'clientSecret' | 'loginEnabled' | 'prompt' | 'authenticationContextClassReference'> & {
+    discoveryEndpoint: URL;
+};
+export declare class OidcService {
+    private readonly settingsRepository;
+    private readonly authIdentityRepository;
+    private readonly urlService;
+    private readonly globalConfig;
+    private readonly userRepository;
+    private readonly cipher;
+    private readonly logger;
+    private readonly jwtService;
+    private readonly instanceSettings;
+    private readonly provisioningService;
+    private oidcConfig;
+    constructor(settingsRepository: SettingsRepository, authIdentityRepository: AuthIdentityRepository, urlService: UrlService, globalConfig: GlobalConfig, userRepository: UserRepository, cipher: Cipher, logger: Logger, jwtService: JwtService, instanceSettings: InstanceSettings, provisioningService: ProvisioningService);
+    init(): Promise<void>;
+    getCallbackUrl(): string;
+    getRedactedConfig(): OidcConfigDto;
+    generateState(): {
+        signed: string;
+        plaintext: string;
+    };
+    verifyState(signedState: string): string;
+    generateNonce(): {
+        signed: string;
+        plaintext: string;
+    };
+    verifyNonce(signedNonce: string): string;
+    generateLoginUrl(): Promise<{
+        url: URL;
+        state: string;
+        nonce: string;
+    }>;
+    loginUser(callbackUrl: URL, storedState: string, storedNonce: string): Promise<User>;
+    private applySsoProvisioning;
+    private broadcastReloadOIDCConfigurationCommand;
+    private isReloading;
+    reload(): Promise<void>;
+    loadConfigurationFromDatabase(decryptSecret?: boolean): Promise<OidcRuntimeConfig | undefined>;
+    loadConfig(decryptSecret?: boolean): Promise<OidcRuntimeConfig>;
+    updateConfig(newConfig: OidcConfigDto): Promise<void>;
+    private setOidcLoginEnabled;
+    private cachedOidcConfiguration;
+    private createProxyAwareConfiguration;
+    private getOidcConfiguration;
+}
+export {};

package/dist/sso.ee/oidc/oidc.service.ee.js

@@ -0,0 +1,469 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcService = void 0;
+const api_types_1 = require("@n8n/api-types");
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const crypto_1 = require("crypto");
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const client = __importStar(require("openid-client"));
+const undici_1 = require("undici");
+const sso_helpers_1 = require("../sso-helpers");
+const constants_1 = require("./constants");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
+const internal_server_error_1 = require("../../errors/response-errors/internal-server.error");
+const provisioning_service_ee_1 = require("../../modules/provisioning.ee/provisioning.service.ee");
+const jwt_service_1 = require("../../services/jwt.service");
+const url_service_1 = require("../../services/url.service");
+const DEFAULT_OIDC_CONFIG = {
+    clientId: '',
+    clientSecret: '',
+    discoveryEndpoint: '',
+    loginEnabled: false,
+    prompt: 'select_account',
+    authenticationContextClassReference: [],
+};
+const DEFAULT_OIDC_RUNTIME_CONFIG = {
+    ...DEFAULT_OIDC_CONFIG,
+    discoveryEndpoint: new URL('http://n8n.io/not-set'),
+};
+let OidcService = class OidcService {
+    constructor(settingsRepository, authIdentityRepository, urlService, globalConfig, userRepository, cipher, logger, jwtService, instanceSettings, provisioningService) {
+        this.settingsRepository = settingsRepository;
+        this.authIdentityRepository = authIdentityRepository;
+        this.urlService = urlService;
+        this.globalConfig = globalConfig;
+        this.userRepository = userRepository;
+        this.cipher = cipher;
+        this.logger = logger;
+        this.jwtService = jwtService;
+        this.instanceSettings = instanceSettings;
+        this.provisioningService = provisioningService;
+        this.oidcConfig = DEFAULT_OIDC_RUNTIME_CONFIG;
+        this.isReloading = false;
+    }
+    async init() {
+        this.oidcConfig = await this.loadConfig(true);
+        this.logger.debug(`OIDC login is ${this.oidcConfig.loginEnabled ? 'enabled' : 'disabled'}.`);
+        await this.setOidcLoginEnabled(this.oidcConfig.loginEnabled);
+    }
+    getCallbackUrl() {
+        return `${this.urlService.getInstanceBaseUrl()}/${this.globalConfig.endpoints.rest}/sso/oidc/callback`;
+    }
+    getRedactedConfig() {
+        return {
+            ...this.oidcConfig,
+            discoveryEndpoint: this.oidcConfig.discoveryEndpoint.toString(),
+            clientSecret: constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE,
+        };
+    }
+    generateState() {
+        const state = `n8n_state:${(0, crypto_1.randomUUID)()}`;
+        return {
+            signed: this.jwtService.sign({ state }, { expiresIn: '15m' }),
+            plaintext: state,
+        };
+    }
+    verifyState(signedState) {
+        let state;
+        try {
+            const decodedState = this.jwtService.verify(signedState);
+            state = decodedState?.state;
+        }
+        catch (error) {
+            this.logger.error('Failed to verify state', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid state');
+        }
+        if (typeof state !== 'string') {
+            this.logger.error('Provided state has an invalid format');
+            throw new bad_request_error_1.BadRequestError('Invalid state');
+        }
+        const splitState = state.split(':');
+        if (splitState.length !== 2 || splitState[0] !== 'n8n_state') {
+            this.logger.error('Provided state is missing the well-known prefix');
+            throw new bad_request_error_1.BadRequestError('Invalid state');
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-5][0-9a-f]{3}-[089ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(splitState[1])) {
+            this.logger.error('Provided state is not formatted correctly');
+            throw new bad_request_error_1.BadRequestError('Invalid state');
+        }
+        return state;
+    }
+    generateNonce() {
+        const nonce = `n8n_nonce:${(0, crypto_1.randomUUID)()}`;
+        return {
+            signed: this.jwtService.sign({ nonce }, { expiresIn: '15m' }),
+            plaintext: nonce,
+        };
+    }
+    verifyNonce(signedNonce) {
+        let nonce;
+        try {
+            const decodedNonce = this.jwtService.verify(signedNonce);
+            nonce = decodedNonce?.nonce;
+        }
+        catch (error) {
+            this.logger.error('Failed to verify nonce', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid nonce');
+        }
+        if (typeof nonce !== 'string') {
+            this.logger.error('Provided nonce has an invalid format');
+            throw new bad_request_error_1.BadRequestError('Invalid nonce');
+        }
+        const splitNonce = nonce.split(':');
+        if (splitNonce.length !== 2 || splitNonce[0] !== 'n8n_nonce') {
+            this.logger.error('Provided nonce is missing the well-known prefix');
+            throw new bad_request_error_1.BadRequestError('Invalid nonce');
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-5][0-9a-f]{3}-[089ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(splitNonce[1])) {
+            this.logger.error('Provided nonce is not formatted correctly');
+            throw new bad_request_error_1.BadRequestError('Invalid nonce');
+        }
+        return nonce;
+    }
+    async generateLoginUrl() {
+        const configuration = await this.getOidcConfiguration();
+        const state = this.generateState();
+        const nonce = this.generateNonce();
+        const prompt = this.oidcConfig.prompt;
+        const authenticationContextClassReference = this.oidcConfig.authenticationContextClassReference;
+        const provisioningConfig = await this.provisioningService.getConfig();
+        const provisioningEnabled = provisioningConfig.scopesProvisionInstanceRole ||
+            provisioningConfig.scopesProvisionProjectRoles;
+        const scope = provisioningEnabled
+            ? `openid email profile ${provisioningConfig.scopesName}`
+            : 'openid email profile';
+        const authorizationURL = client.buildAuthorizationUrl(configuration, {
+            redirect_uri: this.getCallbackUrl(),
+            response_type: 'code',
+            scope,
+            prompt,
+            state: state.plaintext,
+            nonce: nonce.plaintext,
+            ...(authenticationContextClassReference.length > 0 && {
+                acr_values: authenticationContextClassReference.join(' '),
+            }),
+        });
+        return { url: authorizationURL, state: state.signed, nonce: nonce.signed };
+    }
+    async loginUser(callbackUrl, storedState, storedNonce) {
+        const configuration = await this.getOidcConfiguration();
+        const expectedState = this.verifyState(storedState);
+        const expectedNonce = this.verifyNonce(storedNonce);
+        let tokens;
+        try {
+            tokens = await client.authorizationCodeGrant(configuration, callbackUrl, {
+                expectedState,
+                expectedNonce,
+            });
+        }
+        catch (error) {
+            this.logger.error('Failed to exchange authorization code for tokens', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid authorization code');
+        }
+        let claims;
+        try {
+            claims = tokens.claims();
+        }
+        catch (error) {
+            this.logger.error('Failed to extract claims from tokens', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid token');
+        }
+        if (!claims) {
+            throw new forbidden_error_1.ForbiddenError('No claims found in the OIDC token');
+        }
+        let userInfo;
+        try {
+            userInfo = await client.fetchUserInfo(configuration, tokens.access_token, claims.sub);
+        }
+        catch (error) {
+            this.logger.error('Failed to fetch user info', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid token');
+        }
+        if (!userInfo.email) {
+            throw new bad_request_error_1.BadRequestError('An email is required');
+        }
+        if (!(0, db_1.isValidEmail)(userInfo.email)) {
+            throw new bad_request_error_1.BadRequestError('Invalid email format');
+        }
+        const openidUser = await this.authIdentityRepository.findOne({
+            where: { providerId: claims.sub, providerType: 'oidc' },
+            relations: {
+                user: {
+                    role: true,
+                },
+            },
+        });
+        if (openidUser) {
+            await this.applySsoProvisioning(openidUser.user, claims);
+            return openidUser.user;
+        }
+        const foundUser = await this.userRepository.findOne({
+            where: { email: userInfo.email },
+            relations: ['authIdentities', 'role'],
+        });
+        if (foundUser) {
+            this.logger.debug(`OIDC login: User with email ${userInfo.email} already exists, linking OIDC identity.`);
+            const id = this.authIdentityRepository.create({
+                providerId: claims.sub,
+                providerType: 'oidc',
+                userId: foundUser.id,
+            });
+            await this.authIdentityRepository.save(id);
+            await this.applySsoProvisioning(foundUser, claims);
+            return foundUser;
+        }
+        return await this.userRepository.manager.transaction(async (trx) => {
+            const { user } = await this.userRepository.createUserWithProject({
+                firstName: userInfo.given_name,
+                lastName: userInfo.family_name,
+                email: userInfo.email,
+                authIdentities: [],
+                role: db_1.GLOBAL_MEMBER_ROLE,
+                password: 'no password set',
+            }, trx);
+            await trx.save(trx.create(db_1.AuthIdentity, {
+                providerId: claims.sub,
+                providerType: 'oidc',
+                userId: user.id,
+            }));
+            await this.applySsoProvisioning(user, claims);
+            return user;
+        });
+    }
+    async applySsoProvisioning(user, claims) {
+        const provisioningConfig = await this.provisioningService.getConfig();
+        const projectRoleMapping = claims[provisioningConfig.scopesProjectsRolesClaimName];
+        const instanceRole = claims[provisioningConfig.scopesInstanceRoleClaimName];
+        if (instanceRole) {
+            await this.provisioningService.provisionInstanceRoleForUser(user, instanceRole);
+        }
+        if (projectRoleMapping) {
+            await this.provisioningService.provisionProjectRolesForUser(user.id, projectRoleMapping);
+        }
+    }
+    async broadcastReloadOIDCConfigurationCommand() {
+        if (this.instanceSettings.isMultiMain) {
+            const { Publisher } = await Promise.resolve().then(() => __importStar(require('../../scaling/pubsub/publisher.service')));
+            await di_1.Container.get(Publisher).publishCommand({ command: 'reload-oidc-config' });
+        }
+    }
+    async reload() {
+        if (this.isReloading) {
+            this.logger.warn('OIDC configuration reload already in progress');
+            return;
+        }
+        this.isReloading = true;
+        try {
+            this.logger.debug('OIDC configuration changed, starting to load it from the database');
+            const configFromDB = await this.loadConfigurationFromDatabase(true);
+            if (configFromDB) {
+                this.oidcConfig = configFromDB;
+                this.cachedOidcConfiguration = undefined;
+            }
+            else {
+                this.logger.warn('OIDC configuration not found in database, ignoring reload message');
+            }
+            await (0, sso_helpers_1.reloadAuthenticationMethod)();
+            const isOidcLoginEnabled = (0, sso_helpers_1.isOidcCurrentAuthenticationMethod)();
+            this.logger.debug(`OIDC login is now ${isOidcLoginEnabled ? 'enabled' : 'disabled'}.`);
+            di_1.Container.get(config_1.GlobalConfig).sso.oidc.loginEnabled = isOidcLoginEnabled;
+        }
+        catch (error) {
+            this.logger.error('OIDC configuration changed, failed to reload OIDC configuration', {
+                error,
+            });
+        }
+        finally {
+            this.isReloading = false;
+        }
+    }
+    async loadConfigurationFromDatabase(decryptSecret = false) {
+        const configFromDB = await this.settingsRepository.findByKey(constants_1.OIDC_PREFERENCES_DB_KEY);
+        if (configFromDB) {
+            try {
+                const configValue = (0, n8n_workflow_1.jsonParse)(configFromDB.value);
+                if (configValue.discoveryEndpoint === '')
+                    return undefined;
+                const oidcConfig = api_types_1.OidcConfigDto.parse(configValue);
+                const discoveryUrl = new URL(oidcConfig.discoveryEndpoint);
+                if (oidcConfig.clientSecret && decryptSecret) {
+                    oidcConfig.clientSecret = this.cipher.decrypt(oidcConfig.clientSecret);
+                }
+                return {
+                    ...oidcConfig,
+                    discoveryEndpoint: discoveryUrl,
+                };
+            }
+            catch (error) {
+                this.logger.warn('Failed to load OIDC configuration from database, falling back to default configuration.', { error });
+            }
+        }
+        return undefined;
+    }
+    async loadConfig(decryptSecret = false) {
+        const currentConfig = await this.loadConfigurationFromDatabase(decryptSecret);
+        if (currentConfig) {
+            return currentConfig;
+        }
+        return DEFAULT_OIDC_RUNTIME_CONFIG;
+    }
+    async updateConfig(newConfig) {
+        const isEnablingOidcWhileOtherSsoProtocolIsAlreadyEnabled = newConfig.loginEnabled &&
+            !(0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() &&
+            !(0, sso_helpers_1.isOidcCurrentAuthenticationMethod)();
+        if (isEnablingOidcWhileOtherSsoProtocolIsAlreadyEnabled) {
+            throw new internal_server_error_1.InternalServerError(`Cannot switch OIDC login enabled state when an authentication method other than email or OIDC is active (current: ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()})`);
+        }
+        let discoveryEndpoint;
+        try {
+            discoveryEndpoint = new URL(newConfig.discoveryEndpoint);
+        }
+        catch (error) {
+            this.logger.error(`The provided endpoint is not a valid URL: ${newConfig.discoveryEndpoint}`);
+            throw new n8n_workflow_1.UserError('Provided discovery endpoint is not a valid URL');
+        }
+        if (newConfig.clientSecret === constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE) {
+            newConfig.clientSecret = this.oidcConfig.clientSecret;
+        }
+        try {
+            const discoveredMetadata = await this.createProxyAwareConfiguration(discoveryEndpoint, newConfig.clientId, newConfig.clientSecret);
+            this.logger.debug(`Discovered OIDC metadata: ${JSON.stringify(discoveredMetadata)}`);
+        }
+        catch (error) {
+            this.logger.error('Failed to discover OIDC metadata', { error });
+            throw new n8n_workflow_1.UserError('Failed to discover OIDC metadata, based on the provided configuration');
+        }
+        await this.settingsRepository.save({
+            key: constants_1.OIDC_PREFERENCES_DB_KEY,
+            value: JSON.stringify({
+                ...newConfig,
+                clientSecret: this.cipher.encrypt(newConfig.clientSecret),
+            }),
+            loadOnStartup: true,
+        });
+        this.oidcConfig = {
+            ...newConfig,
+            discoveryEndpoint,
+        };
+        this.cachedOidcConfiguration = undefined;
+        this.logger.debug(`OIDC login is now ${this.oidcConfig.loginEnabled ? 'enabled' : 'disabled'}.`);
+        await this.setOidcLoginEnabled(this.oidcConfig.loginEnabled);
+        await this.broadcastReloadOIDCConfigurationCommand();
+    }
+    async setOidcLoginEnabled(enabled) {
+        const currentAuthenticationMethod = (0, sso_helpers_1.getCurrentAuthenticationMethod)();
+        const isEnablingOidcWhileOtherSsoProtocolIsAlreadyEnabled = enabled && !(0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() && !(0, sso_helpers_1.isOidcCurrentAuthenticationMethod)();
+        if (isEnablingOidcWhileOtherSsoProtocolIsAlreadyEnabled) {
+            throw new internal_server_error_1.InternalServerError(`Cannot switch OIDC login enabled state when an authentication method other than email or OIDC is active (current: ${currentAuthenticationMethod})`);
+        }
+        const targetAuthenticationMethod = !enabled && currentAuthenticationMethod === 'oidc' ? 'email' : currentAuthenticationMethod;
+        di_1.Container.get(config_1.GlobalConfig).sso.oidc.loginEnabled = enabled;
+        await (0, sso_helpers_1.setCurrentAuthenticationMethod)(enabled ? 'oidc' : targetAuthenticationMethod);
+    }
+    async createProxyAwareConfiguration(discoveryUrl, clientId, clientSecret) {
+        const configuration = await client.discovery(discoveryUrl, clientId, clientSecret);
+        const hasProxyConfig = process.env.HTTP_PROXY ?? process.env.HTTPS_PROXY ?? process.env.ALL_PROXY;
+        if (hasProxyConfig) {
+            this.logger.debug('Configuring OIDC client with proxy support', {
+                HTTP_PROXY: process.env.HTTP_PROXY,
+                HTTPS_PROXY: process.env.HTTPS_PROXY,
+                NO_PROXY: process.env.NO_PROXY,
+                ALL_PROXY: process.env.ALL_PROXY,
+            });
+            const proxyAgent = new undici_1.EnvHttpProxyAgent();
+            configuration[client.customFetch] = async (...args) => {
+                const [url, options] = args;
+                return await fetch(url, {
+                    ...options,
+                    dispatcher: proxyAgent,
+                });
+            };
+        }
+        return configuration;
+    }
+    async getOidcConfiguration() {
+        const now = Date.now();
+        if (this.cachedOidcConfiguration === undefined ||
+            now >= this.cachedOidcConfiguration.validTill.getTime() ||
+            this.oidcConfig.discoveryEndpoint.toString() !==
+                this.cachedOidcConfiguration.discoveryEndpoint.toString() ||
+            this.oidcConfig.clientId !== this.cachedOidcConfiguration.clientId ||
+            this.oidcConfig.clientSecret !== this.cachedOidcConfiguration.clientSecret) {
+            this.cachedOidcConfiguration = {
+                ...this.oidcConfig,
+                configuration: this.createProxyAwareConfiguration(this.oidcConfig.discoveryEndpoint, this.oidcConfig.clientId, this.oidcConfig.clientSecret),
+                validTill: new Date(Date.now() + 60 * 60 * 1000),
+            };
+        }
+        return await this.cachedOidcConfiguration.configuration;
+    }
+};
+exports.OidcService = OidcService;
+__decorate([
+    (0, decorators_1.OnPubSubEvent)('reload-oidc-config'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], OidcService.prototype, "reload", null);
+exports.OidcService = OidcService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.SettingsRepository,
+        db_1.AuthIdentityRepository,
+        url_service_1.UrlService,
+        config_1.GlobalConfig,
+        db_1.UserRepository,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger,
+        jwt_service_1.JwtService,
+        n8n_core_1.InstanceSettings,
+        provisioning_service_ee_1.ProvisioningService])
+], OidcService);
+//# sourceMappingURL=oidc.service.ee.js.map

package/dist/sso.ee/oidc/oidc.service.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.service.ee.js","sourceRoot":"","sources":["../../../src/sso.ee/oidc/oidc.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAQiB;AACjB,gDAAgD;AAChD,gCAA6C;AAC7C,mCAAoC;AACpC,uCAAoD;AACpD,+CAAoD;AACpD,sDAAwC;AACxC,mCAA2C;AAE3C,gDAMwB;AACxB,2CAAyF;AAEzF,kFAA6E;AAC7E,8EAA0E;AAC1E,0FAAqF;AACrF,+FAAwF;AACxF,wDAAoD;AACpD,wDAAoD;AAEpD,MAAM,mBAAmB,GAAkB;IAC1C,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,KAAK;IACnB,MAAM,EAAE,gBAAgB;IACxB,mCAAmC,EAAE,EAAE;CACvC,CAAC;AASF,MAAM,2BAA2B,GAAsB;IACtD,GAAG,mBAAmB;IACtB,iBAAiB,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC;CACnD,CAAC;AAGK,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGvB,YACkB,kBAAsC,EACtC,sBAA8C,EAC9C,UAAsB,EACtB,YAA0B,EAC1B,cAA8B,EAC9B,MAAc,EACd,MAAc,EACd,UAAsB,EACtB,gBAAkC,EAClC,mBAAwC;QATxC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,wBAAmB,GAAnB,mBAAmB,CAAqB;QAZlD,eAAU,GAAsB,2BAA2B,CAAC;QAqR5D,gBAAW,GAAG,KAAK,CAAC;IAxQzB,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,cAAc;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC;IACxG,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,GAAG,IAAI,CAAC,UAAU;YAClB,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC/D,YAAY,EAAE,6CAAiC;SAC/C,CAAC;IACH,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACtC,MAAM,mCAAmC,GAAG,IAAI,CAAC,UAAU,CAAC,mCAAmC,CAAC;QAEhG,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,mBAAmB,GACxB,kBAAkB,CAAC,2BAA2B;YAC9C,kBAAkB,CAAC,2BAA2B,CAAC;QAGhD,MAAM,KAAK,GAAG,mBAAmB;YAChC,CAAC,CAAC,wBAAwB,kBAAkB,CAAC,UAAU,EAAE;YACzD,CAAC,CAAC,sBAAsB,CAAC;QAE1B,MAAM,gBAAgB,GAAG,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE;YACpE,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,GAAG,CAAC,mCAAmC,CAAC,MAAM,GAAG,CAAC,IAAI;gBACrD,UAAU,EAAE,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC;aACzD,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAgB,EAAE,WAAmB,EAAE,WAAmB;QACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,EAAE;gBACxE,aAAa;gBACb,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,IAAA,iBAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;YACvD,SAAS,EAAE;gBACV,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI;iBACV;aACD;SACD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAEzD,OAAO,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;YAChC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,+BAA+B,QAAQ,CAAC,KAAK,yCAAyC,CACtF,CAAC;YAEF,MAAM,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAC7C,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,SAAS,CAAC,EAAE;aACpB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAC/D;gBACC,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,EAAE;gBAClB,IAAI,EAAE,uBAAkB;gBACxB,QAAQ,EAAE,iBAAiB;aAC3B,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,IAAI,CAAC,EAAE;aACf,CAAC,CACF,CAAC;YAEF,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAE9C,OAAO,IAAI,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAU,EAAE,MAAW;QACzD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5E,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;gBAC/B,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,kBAAkB,GAAG,IAAA,+CAAiC,GAAE,CAAC;YAE/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAEvF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,6BAA6B,CAClC,aAAa,GAAG,KAAK;QAErB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,mCAAuB,CAAC,CAAC;QAEtF,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAA,wBAAS,EAAgB,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEjE,IAAI,WAAW,CAAC,iBAAiB,KAAK,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAE3D,MAAM,UAAU,GAAG,yBAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAEpD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE3D,IAAI,UAAU,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;oBAC9C,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO;oBACN,GAAG,UAAU;oBACb,iBAAiB,EAAE,YAAY;iBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,yFAAyF,EAEzF,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAa,GAAG,KAAK;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,CAAC;QAE9E,IAAI,aAAa,EAAE,CAAC;YACnB,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,OAAO,2BAA2B,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAwB;QAC1C,MAAM,mDAAmD,GACxD,SAAS,CAAC,YAAY;YACtB,CAAC,IAAA,gDAAkC,GAAE;YACrC,CAAC,IAAA,+CAAiC,GAAE,CAAC;QACtC,IAAI,mDAAmD,EAAE,CAAC;YACzD,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,4CAA8B,GAAE,GAAG,CACxJ,CAAC;QACH,CAAC;QAED,IAAI,iBAAsB,CAAC;QAC3B,IAAI,CAAC;YAEJ,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,wBAAS,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,6CAAiC,EAAE,CAAC;YAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAClE,iBAAiB,EACjB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,YAAY,CACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,wBAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,SAAS;gBACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;aACzD,CAAC;YACF,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;QAOH,IAAI,CAAC,UAAU,GAAG;YACjB,GAAG,SAAS;YACZ,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,qBAAqB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAC7E,CAAC;QAEF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;QAErE,MAAM,mDAAmD,GACxD,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,CAAC;QAC1F,IAAI,mDAAmD,EAAE,CAAC;YACzD,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;QACH,CAAC;QAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACrF,CAAC;IAaO,KAAK,CAAC,6BAA6B,CAC1C,YAAiB,EACjB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAGnF,MAAM,cAAc,GACnB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAE5E,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBAC/D,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;gBAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;gBACpC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;gBAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;aAChC,CAAC,CAAC;YAGH,MAAM,UAAU,GAAG,IAAI,0BAAiB,EAAE,CAAC;YAG3C,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;gBACrD,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;gBAC5B,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;oBACvB,GAAG,OAAO;oBAEV,UAAU,EAAE,UAAU;iBACtB,CAAC,CAAC;YACJ,CAAC,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC1C,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBAC3C,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,uBAAuB,CAAC,QAAQ;YAClE,IAAI,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,uBAAuB,CAAC,YAAY,EACzE,CAAC;YACF,IAAI,CAAC,uBAAuB,GAAG;gBAC9B,GAAG,IAAI,CAAC,UAAU;gBAClB,aAAa,EAAE,IAAI,CAAC,6BAA6B,CAChD,IAAI,CAAC,UAAU,CAAC,iBAAiB,EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAC5B;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC;IACzD,CAAC;CACD,CAAA;AAzfY,kCAAW;AAyRjB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCA8BnC;sBAtTW,WAAW;IADvB,IAAA,YAAO,GAAE;qCAK6B,uBAAkB;QACd,2BAAsB;QAClC,wBAAU;QACR,qBAAY;QACV,mBAAc;QACtB,iBAAM;QACN,uBAAM;QACF,wBAAU;QACJ,2BAAgB;QACb,6CAAmB;GAb9C,WAAW,CAyfvB"}

package/dist/sso.ee/oidc/routes/oidc.controller.ee.d.ts

@@ -0,0 +1,23 @@
+import { OidcConfigDto } from '@n8n/api-types';
+import { Logger } from '@n8n/backend-common';
+import { GlobalConfig } from '@n8n/config';
+import { AuthenticatedRequest } from '@n8n/db';
+import { Request, Response } from 'express';
+import { AuthService } from '../../../auth/auth.service';
+import { AuthlessRequest } from '../../../requests';
+import { UrlService } from '../../../services/url.service';
+import { OidcService } from '../oidc.service.ee';
+export declare class OidcController {
+    private readonly oidcService;
+    private readonly authService;
+    private readonly urlService;
+    private readonly globalConfig;
+    private readonly logger;
+    constructor(oidcService: OidcService, authService: AuthService, urlService: UrlService, globalConfig: GlobalConfig, logger: Logger);
+    retrieveConfiguration(_req: AuthenticatedRequest): Promise<Pick<OidcConfigDto, "loginEnabled" | "clientId" | "clientSecret" | "prompt" | "authenticationContextClassReference"> & {
+        discoveryEndpoint: URL;
+    }>;
+    saveConfiguration(_req: AuthenticatedRequest, _res: Response, payload: OidcConfigDto): Promise<OidcConfigDto>;
+    redirectToAuthProvider(_req: Request, res: Response): Promise<void>;
+    callbackHandler(req: AuthlessRequest, res: Response): Promise<void>;
+}