@authup/server-core 0.40.1 → 0.42.0

package/dist/index.mjs

@@ -1,805 +0,0 @@
-import path from 'node:path';
-import process$1 from 'node:process';
-import { hasOwnProperty as hasOwnProperty$1, isObject, TokenError, KeyType, DomainEventName, buildDomainEventFullName, parseProxyConnectionString } from '@authup/core';
-import { locateMany, load, getModuleExport } from 'locter';
-import { assign, isObject as isObject$1, merge } from 'smob';
-import { compare as compare$1, hash as hash$1 } from 'bcrypt';
-import { createPrivateKey, generateKeyPair, createPublicKey } from 'node:crypto';
-import fs from 'node:fs';
-import { decode, sign, verify } from 'jsonwebtoken';
-import { hasClient, hasConfig, useClient } from 'redis-extension';
-import { Emitter } from '@socket.io/redis-emitter';
-import http from 'node:http';
-import https from 'node:https';
-import { getProxyForUrl } from 'proxy-from-env';
-import { createTransport, createTestAccount } from 'nodemailer';
-
-function hasProcessEnv(key) {
-    const keys = Array.isArray(key) ? key : [
-        key
-    ];
-    for(let i = 0; i < keys.length; i++){
-        if (hasOwnProperty$1(process$1.env, keys[i])) {
-            return true;
-        }
-    }
-    return false;
-}
-function readFromProcessEnv(key, alt) {
-    const keys = Array.isArray(key) ? key : [
-        key
-    ];
-    for(let i = 0; i < keys.length; i++){
-        if (hasOwnProperty$1(process$1.env, keys[i])) {
-            return process$1.env[keys[i]];
-        }
-    }
-    return alt;
-}
-function readBoolFromProcessEnv(key, alt) {
-    const keys = Array.isArray(key) ? key : [
-        key
-    ];
-    for(let i = 0; i < keys.length; i++){
-        const value = readFromProcessEnv(keys[i], alt);
-        switch(value){
-            case true:
-            case 'true':
-            case 't':
-            case '1':
-                return true;
-            case false:
-            case 'false':
-            case 'f':
-            case '0':
-                return false;
-        }
-    }
-    return alt;
-}
-function readBoolOrStringFromProcessEnv(key, alt) {
-    if (hasProcessEnv(key)) {
-        const value = readBoolFromProcessEnv(key, undefined);
-        if (typeof value === 'undefined') {
-            return readFromProcessEnv(key, alt);
-        }
-        return value;
-    }
-    return alt;
-}
-function readIntFromProcessEnv(key, alt) {
-    const keys = Array.isArray(key) ? key : [
-        key
-    ];
-    for(let i = 0; i < keys.length; i++){
-        const value = readFromProcessEnv(keys[i], alt);
-        const intValue = parseInt(`${value}`, 10);
-        if (!Number.isNaN(intValue)) {
-            return intValue;
-        }
-    }
-    return alt;
-}
-
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */ function hasOwnProperty(obj, prop) {
-    return Object.prototype.hasOwnProperty.call(obj, prop);
-}
-
-function buildWorkingDirectoryPathsForConfigFile() {
-    const cwd = [
-        process$1.cwd()
-    ];
-    if (hasProcessEnv('WRITABLE_DIRECTORY_PATH')) {
-        let writableDirectoryPath = readFromProcessEnv('WRITABLE_DIRECTORY_PATH');
-        if (!path.isAbsolute(writableDirectoryPath)) {
-            writableDirectoryPath = path.join(process$1.cwd(), writableDirectoryPath);
-        }
-        cwd.push(writableDirectoryPath);
-    } else {
-        cwd.push(path.join(process$1.cwd(), 'writable'));
-    }
-    return cwd;
-}
-
-async function readConfigFile(context) {
-    context = context || {};
-    const cwd = [];
-    if (context.cwd) {
-        const arr = Array.isArray(context.cwd) ? context.cwd : [
-            context.cwd
-        ];
-        for(let i = 0; i < arr.length; i++){
-            if (path.isAbsolute(arr[i])) {
-                cwd.push(arr[i]);
-            } else {
-                cwd.push(path.join(process$1.cwd(), arr[i]));
-            }
-        }
-    }
-    if (cwd.length === 0) {
-        cwd.push(...buildWorkingDirectoryPathsForConfigFile());
-    }
-    const locations = await locateMany([
-        'authup.*.{conf,js,mjs,cjs,ts,mts,mts}',
-        'authup.{conf,js,mjs,cjs,ts,mts,mts}'
-    ], {
-        path: cwd
-    });
-    const content = {};
-    for(let i = 0; i < locations.length; i++){
-        const file = await load(locations[i]);
-        const fileExport = getModuleExport(file);
-        if (!isObject(fileExport.value)) {
-            continue;
-        }
-        const [root, name] = locations[i].name.split('.');
-        if (root && name) {
-            if (context.name === name) {
-                assign(content, fileExport.value);
-            } else if (!context.name) {
-                content[name] = content[name] || {};
-                assign(content[name], fileExport.value);
-            }
-        }
-        if (root && !name) {
-            if (context.name) {
-                if (isObject(fileExport.value[context.name])) {
-                    assign(content, fileExport.value[context.name]);
-                }
-            } else {
-                assign(content, fileExport.value);
-            }
-        }
-    }
-    return content;
-}
-
-async function compare(value, hashedValue) {
-    return compare$1(value, hashedValue);
-}
-
-async function hash(str, saltOrRounds = 10) {
-    return hash$1(str, saltOrRounds);
-}
-
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */ var KeyPairKind;
-(function(KeyPairKind) {
-    KeyPairKind["PRIVATE"] = 'private';
-    KeyPairKind["PUBLIC"] = 'public';
-})(KeyPairKind || (KeyPairKind = {}));
-
-function isKeyPair(data) {
-    return isObject(data) && typeof data.privateKey !== 'undefined' && typeof data.publicKey !== 'undefined';
-}
-function isKeyPairWithPublicKey(data) {
-    return isObject(data) && typeof data.publicKey !== 'undefined';
-}
-
-function extendKeyPairOptions(options) {
-    var _options;
-    options = options ?? {};
-    options.directory = options.directory || process.cwd();
-    options.directory = path.isAbsolute(options.directory) ? options.directory : path.resolve(process.cwd(), options.directory);
-    (_options = options).type ?? (_options.type = 'rsa');
-    if (options.type === 'rsa' || options.type === 'rsa-pss' || options.type === 'dsa') {
-        options.modulusLength = 2048;
-    }
-    if (!options.privateKeyEncoding) {
-        options.privateKeyEncoding = {
-            type: 'pkcs8',
-            format: 'pem'
-        };
-    }
-    if (!options.publicKeyEncoding) {
-        options.publicKeyEncoding = {
-            type: 'spki',
-            format: 'pem'
-        };
-    }
-    if (options.privateKeyEncoding.passphrase && !options.privateKeyEncoding.cipher) {
-        options.privateKeyEncoding.cipher = 'aes-256-cbc';
-    }
-    return options;
-}
-
-function buildKeyFileName(type, context) {
-    const options = extendKeyPairOptions(context);
-    const parts = [];
-    switch(type){
-        case KeyPairKind.PRIVATE:
-            {
-                if (options.privateName) {
-                    parts.push(options.privateName);
-                } else {
-                    parts.push(type);
-                }
-                if (options.privateExtension) {
-                    if (options.privateExtension.startsWith('.')) {
-                        options.privateExtension = options.privateExtension.slice(1);
-                    }
-                    parts.push(options.privateExtension);
-                } else {
-                    parts.push('pem');
-                }
-                break;
-            }
-        case KeyPairKind.PUBLIC:
-            {
-                if (options.publicName) {
-                    parts.push(options.publicName);
-                } else {
-                    parts.push(type);
-                }
-                if (options.publicExtension) {
-                    if (options.publicExtension.startsWith('.')) {
-                        options.publicExtension = options.publicExtension.slice(1);
-                    }
-                    parts.push(options.publicExtension);
-                } else {
-                    parts.push('pem');
-                }
-                break;
-            }
-    }
-    return parts.join('.');
-}
-
-function decryptRSAPrivateKey(context, key) {
-    const privateKey = createPrivateKey({
-        type: context.privateKeyEncoding.type,
-        format: context.privateKeyEncoding.format,
-        key,
-        passphrase: context.privateKeyEncoding.passphrase || context.passphrase
-    });
-    let content = privateKey.export({
-        type: context.privateKeyEncoding.type,
-        format: context.privateKeyEncoding.format
-    });
-    if (typeof content !== 'string') {
-        content = Buffer.from(content).toString('utf-8');
-    }
-    return content;
-}
-
-async function saveKeyPair(keyPair, context) {
-    context = extendKeyPairOptions(context);
-    await fs.promises.mkdir(context.directory, {
-        recursive: true
-    });
-    await Promise.all([
-        {
-            path: path.resolve(context.directory, buildKeyFileName(KeyPairKind.PRIVATE, context)),
-            content: keyPair.privateKey
-        },
-        {
-            path: path.resolve(context.directory, buildKeyFileName(KeyPairKind.PUBLIC, context)),
-            content: keyPair.publicKey
-        }
-    ].map((file)=>fs.promises.writeFile(file.path, file.content)));
-    return keyPair;
-}
-
-async function createKeyPair(context) {
-    const options = extendKeyPairOptions(context);
-    const keyPair = await new Promise((resolve, reject)=>{
-        const callback = (err, publicKey, privateKey)=>{
-            if (err) reject(err);
-            resolve({
-                privateKey,
-                publicKey
-            });
-        };
-        switch(options.type){
-            case 'dsa':
-                generateKeyPair(options.type, options, callback);
-                break;
-            case 'ec':
-                generateKeyPair(options.type, options, callback);
-                break;
-            case 'rsa':
-                generateKeyPair(options.type, options, callback);
-                break;
-            case 'rsa-pss':
-                generateKeyPair(options.type, options, callback);
-                break;
-        }
-    });
-    if (options.save) {
-        await saveKeyPair(keyPair, options);
-    }
-    if (options.passphrase || options.privateKeyEncoding.passphrase) {
-        keyPair.privateKey = decryptRSAPrivateKey(options, keyPair.privateKey);
-    }
-    return keyPair;
-}
-
-async function deleteKeyPair(context) {
-    const options = extendKeyPairOptions(context);
-    const privateKeyPath = path.resolve(options.directory, buildKeyFileName(KeyPairKind.PRIVATE, options));
-    const publicKeyPath = path.resolve(options.directory, buildKeyFileName(KeyPairKind.PUBLIC, options));
-    try {
-        await Promise.all([
-            privateKeyPath,
-            publicKeyPath
-        ].map((filePath)=>fs.promises.stat(filePath)));
-    } catch (e) {
-        return;
-    }
-    await Promise.all([
-        privateKeyPath,
-        publicKeyPath
-    ].map((filePath)=>fs.promises.rm(filePath)));
-}
-
-async function loadKeyPair(context) {
-    const options = extendKeyPairOptions(context);
-    const privateKeyPath = path.resolve(options.directory, buildKeyFileName(KeyPairKind.PRIVATE, options));
-    try {
-        await fs.promises.stat(privateKeyPath);
-    } catch (e) {
-        return undefined;
-    }
-    const privateKeyBuffer = await fs.promises.readFile(privateKeyPath);
-    let privateKey = privateKeyBuffer.toString();
-    if (options.passphrase || options.privateKeyEncoding.passphrase) {
-        privateKey = decryptRSAPrivateKey(options, privateKey);
-    }
-    const publicKeyPath = path.resolve(options.directory, buildKeyFileName(KeyPairKind.PUBLIC, options));
-    let publicKey;
-    try {
-        await fs.promises.stat(publicKeyPath);
-        const publicKeyBuffer = await fs.promises.readFile(publicKeyPath);
-        publicKey = publicKeyBuffer.toString();
-    } catch (e) {
-        const publicKeyObject = createPublicKey({
-            key: privateKey,
-            format: options.privateKeyEncoding.format,
-            type: options.publicKeyEncoding.type
-        });
-        const stringOrBuffer = publicKeyObject.export({
-            format: options.publicKeyEncoding.format,
-            type: options.publicKeyEncoding.type
-        });
-        if (typeof stringOrBuffer !== 'string') {
-            publicKey = stringOrBuffer.toString();
-        } else {
-            publicKey = stringOrBuffer;
-        }
-        if (options.save) {
-            await saveKeyPair({
-                privateKey,
-                publicKey
-            }, options);
-        }
-    }
-    return {
-        privateKey,
-        publicKey
-    };
-}
-
-const keyPairCache = {};
-async function useKeyPair(value) {
-    let options;
-    if (typeof value === 'string') {
-        options = extendKeyPairOptions({
-            privateName: value
-        });
-    } else {
-        options = extendKeyPairOptions(value || {});
-    }
-    if (Object.prototype.hasOwnProperty.call(keyPairCache, options.privateName)) {
-        return keyPairCache[options.privateName];
-    }
-    let keyPair = await loadKeyPair(options);
-    if (typeof keyPair === 'undefined') {
-        keyPair = await createKeyPair(options);
-    }
-    keyPairCache[options.privateName] = keyPair;
-    return keyPair;
-}
-
-function createErrorForJWTError(e) {
-    if (isObject$1(e) && typeof e.name === 'string') {
-        switch(e.name){
-            case 'TokenExpiredError':
-                {
-                    return TokenError.expired();
-                }
-            case 'NotBeforeError':
-                {
-                    if (typeof e.date === 'string' || e.date instanceof Date) {
-                        return TokenError.notActiveBefore(e.date);
-                    }
-                    break;
-                }
-            case 'JsonWebTokenError':
-                {
-                    if (typeof e.message === 'string') {
-                        return TokenError.payloadInvalid(e.message);
-                    }
-                    break;
-                }
-        }
-    }
-    return new TokenError({
-        previous: e,
-        decorateMessage: true,
-        logMessage: true,
-        message: 'The JWT error could not be determined.'
-    });
-}
-
-function decodeToken(token, options) {
-    options ?? (options = {});
-    try {
-        return decode(token, {
-            ...options
-        });
-    } catch (e) {
-        createErrorForJWTError(e);
-        throw e;
-    }
-}
-
-async function signToken(payload, context) {
-    context.expiresIn = context.expiresIn || 3600;
-    switch(context.type){
-        case KeyType.RSA:
-        case KeyType.EC:
-            {
-                const { type, keyPair, ...options } = context;
-                const { privateKey } = isKeyPair(keyPair) ? keyPair : await useKeyPair(keyPair);
-                if (type === KeyType.RSA) {
-                    options.algorithm = options.algorithm || 'RS256';
-                } else {
-                    options.algorithm = options.algorithm || 'ES256';
-                }
-                return sign(payload, privateKey, options);
-            }
-        case KeyType.OCT:
-            {
-                const { type, secret, ...options } = context;
-                options.algorithm = options.algorithm || 'HS256';
-                return sign(payload, secret, options);
-            }
-    }
-    throw new TokenError();
-}
-
-async function verifyToken(token, context) {
-    let output;
-    try {
-        switch(context.type){
-            case KeyType.RSA:
-            case KeyType.EC:
-                {
-                    const { type, keyPair, ...options } = context;
-                    const { publicKey } = isKeyPairWithPublicKey(keyPair) ? keyPair : await useKeyPair(keyPair);
-                    if (type === KeyType.RSA) {
-                        options.algorithms = options.algorithms || [
-                            'RS256',
-                            'RS384',
-                            'RS512',
-                            'PS256',
-                            'PS384',
-                            'PS512'
-                        ];
-                    } else {
-                        options.algorithms = options.algorithms || [
-                            'ES256',
-                            'ES384',
-                            'ES512'
-                        ];
-                    }
-                    output = await verify(token, publicKey, {
-                        ...options
-                    });
-                    break;
-                }
-            case KeyType.OCT:
-                {
-                    const { type, secret, ...options } = context;
-                    options.algorithms = options.algorithms || [
-                        'HS256',
-                        'HS384',
-                        'HS512'
-                    ];
-                    output = await verify(token, secret, {
-                        ...options
-                    });
-                }
-        }
-    } catch (e) {
-        throw createErrorForJWTError(e);
-    }
-    if (typeof output === 'undefined') {
-        throw new TokenError({
-            message: 'Invalid type.'
-        });
-    }
-    return output;
-}
-
-function transformDomainEventData(input) {
-    if (isObject(input)) {
-        const keys = Object.keys(input);
-        for(let i = 0; i < keys.length; i++){
-            const value = input[keys[i]];
-            if (value instanceof Date) {
-                input[keys[i]] = value.toISOString();
-            }
-        }
-    }
-    return input;
-}
-function buildDomainEventChannelName(input, id) {
-    if (typeof input === 'string') {
-        return input;
-    }
-    return input(id);
-}
-
-async function publishDomainRedisEvent(context, destinations) {
-    if (!hasClient() && !hasConfig()) {
-        return Promise.resolve();
-    }
-    context = transformDomainEventData(context);
-    const json = JSON.stringify(context);
-    const client = useClient();
-    const pipeline = client.pipeline();
-    for(let i = 0; i < destinations.length; i++){
-        const { namespace } = destinations[i];
-        const keyPrefix = namespace ? `${namespace}:` : '';
-        let key = keyPrefix + buildDomainEventChannelName(destinations[i].channel);
-        pipeline.publish(key, json);
-        if (context.event !== DomainEventName.CREATED && typeof destinations[i].channel === 'function') {
-            key = keyPrefix + buildDomainEventChannelName(destinations[i].channel, context.data.id);
-            pipeline.publish(key, json);
-        }
-    }
-    return pipeline.exec();
-}
-
-let instance$3;
-function useSocketEmitter() {
-    if (typeof instance$3 !== 'undefined') {
-        return instance$3;
-    }
-    instance$3 = new Emitter(useClient());
-    return instance$3;
-}
-
-function publishDomainSocketEvent(context, destinations) {
-    if (!hasClient() && !hasConfig()) {
-        return;
-    }
-    context = transformDomainEventData(context);
-    for(let i = 0; i < destinations.length; i++){
-        let emitter = useSocketEmitter();
-        if (destinations[i].namespace) {
-            emitter = emitter.of(destinations[i].namespace);
-        }
-        let roomName = buildDomainEventChannelName(destinations[i].channel);
-        const fullEventName = buildDomainEventFullName(context.type, context.event);
-        emitter.in(roomName)// eslint-disable-next-line @typescript-eslint/ban-ts-comment
-        // @ts-ignore
-        .emit(fullEventName, {
-            ...context,
-            meta: {
-                roomName
-            }
-        });
-        if (context.event !== DomainEventName.CREATED && typeof destinations[i].channel === 'function') {
-            roomName = buildDomainEventChannelName(destinations[i].channel, context.data.id);
-            emitter.in(roomName)// eslint-disable-next-line @typescript-eslint/ban-ts-comment
-            // @ts-ignore
-            .emit(fullEventName, {
-                ...context,
-                meta: {
-                    roomName,
-                    roomId: context.data.id
-                }
-            });
-        }
-    }
-}
-
-async function publishDomainEvent(context, destinations) {
-    await publishDomainRedisEvent(context, destinations);
-    publishDomainSocketEvent(context, destinations);
-}
-
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */ class VoidLogger {
-    error(message, ...meta) {
-        return this;
-    }
-    warn(message, ...meta) {
-        return this;
-    }
-    info(message, ...meta) {
-        return this;
-    }
-    http(message, ...meta) {
-        return this;
-    }
-    verbose(message, ...meta) {
-        return this;
-    }
-    debug(message, ...meta) {
-        return this;
-    }
-}
-
-let instance$2;
-function useLogger() {
-    if (typeof instance$2 !== 'undefined') {
-        return instance$2;
-    }
-    instance$2 = new VoidLogger();
-    return instance$2;
-}
-function setLogger(logger) {
-    instance$2 = logger;
-}
-
-class ProxyClient {
-    /**
-     * Create a http agent for an url.
-     *
-     * @param input
-     */ async createAgent(input) {
-        return new Promise((resolve, reject)=>{
-            const headers = {};
-            if (this.options.user && this.options.password) {
-                headers['Proxy-Authorization'] = `Basic ${Buffer.from(`${this.options.user}:${this.options.password}`).toString('base64')}`;
-            }
-            const urlParsed = new URL(input);
-            const request = http.request({
-                host: this.options.host,
-                port: this.options.port,
-                method: 'CONNECT',
-                path: `${urlParsed.hostname}:443`,
-                headers
-            });
-            request.on('connect', (res, socket)=>{
-                if (res.statusCode >= 200 && res.statusCode < 300) {
-                    resolve(new https.Agent({
-                        socket,
-                        ...this.agentOptions
-                    }));
-                } else {
-                    reject(new Error('Could not connect to proxy!'));
-                }
-            });
-            request.on('error', (err)=>{
-                reject(err);
-            });
-            request.on('timeout', (err)=>{
-                reject(err);
-            });
-            request.end();
-        });
-    }
-    constructor(options, agentOptions){
-        this.options = options;
-        this.agentOptions = merge(agentOptions || {}, {
-            keepAlive: false
-        });
-    }
-}
-
-async function buildHTTPClientConfigForProxy(url) {
-    const connectionString = getProxyForUrl(url);
-    if (connectionString) {
-        const connectionDetails = parseProxyConnectionString(connectionString);
-        const proxyClient = new ProxyClient({
-            host: connectionDetails.host,
-            port: connectionDetails.port || 3128,
-            ...connectionDetails.auth.username ? {
-                user: connectionDetails.auth.username
-            } : {},
-            ...connectionDetails.auth.password ? {
-                password: connectionDetails.auth.password
-            } : {}
-        });
-        const agent = await proxyClient.createAgent(url);
-        return {
-            agent
-        };
-    }
-    return {};
-}
-
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */ let instance$1;
-function hasSmtpConfig() {
-    return !!instance$1;
-}
-function setSmtpConfig(value) {
-    instance$1 = value;
-}
-function useSmtpConfig() {
-    if (typeof instance$1 !== 'undefined') {
-        return instance$1;
-    }
-    instance$1 = {};
-    return instance$1;
-}
-
-function createSmtpClient(options) {
-    let transport;
-    options = options || {};
-    if (typeof options === 'string') {
-        transport = createTransport(options);
-    } else if (options.connectionString) {
-        transport = createTransport(options.connectionString);
-    } else {
-        let auth;
-        if (options.user && options.password) {
-            auth = {
-                type: 'login',
-                user: options.user,
-                pass: options.password
-            };
-        }
-        transport = createTransport({
-            host: options.host,
-            port: options.port,
-            auth,
-            secure: options.ssl,
-            opportunisticTLS: options.starttls,
-            tls: {
-                rejectUnauthorized: false
-            }
-        });
-    }
-    transport.on('error', (e)=>{
-        useLogger().error(e.message);
-    });
-    return transport;
-}
-
-let instance;
-async function useSMTPClient() {
-    if (typeof instance !== 'undefined') {
-        return instance;
-    }
-    let options;
-    if (process.env.NODE_ENV === 'test') {
-        const testAccount = await createTestAccount();
-        options = {
-            host: 'smtp.ethereal.email',
-            port: 587,
-            ssl: false,
-            user: testAccount.user,
-            password: testAccount.pass
-        };
-    } else {
-        options = useSmtpConfig();
-    }
-    instance = createSmtpClient(options);
-    return instance;
-}
-
-export { KeyPairKind, ProxyClient, VoidLogger, buildHTTPClientConfigForProxy, buildKeyFileName, buildWorkingDirectoryPathsForConfigFile, compare, createKeyPair, createSmtpClient, decodeToken, decryptRSAPrivateKey, deleteKeyPair, extendKeyPairOptions, hasOwnProperty, hasProcessEnv, hasSmtpConfig, hash, isKeyPair, isKeyPairWithPublicKey, loadKeyPair, publishDomainEvent, publishDomainRedisEvent, publishDomainSocketEvent, readBoolFromProcessEnv, readBoolOrStringFromProcessEnv, readConfigFile, readFromProcessEnv, readIntFromProcessEnv, saveKeyPair, setLogger, setSmtpConfig, signToken, useKeyPair, useLogger, useSMTPClient, useSmtpConfig, useSocketEmitter, verifyToken };
-//# sourceMappingURL=index.mjs.map