@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -21
- package/README.md +1 -1
- package/dist/config/build.d.ts.map +1 -1
- package/dist/config/build.js +2 -1
- package/dist/config/build.js.map +1 -1
- package/dist/config/utils/env.d.ts.map +1 -1
- package/dist/config/utils/env.js +69 -41
- package/dist/config/utils/env.js.map +1 -1
- package/dist/core/index.d.ts +1 -0
- package/dist/core/index.d.ts.map +1 -1
- package/dist/core/index.js +1 -0
- package/dist/core/index.js.map +1 -1
- package/dist/core/ldap/index.d.ts +3 -0
- package/dist/core/ldap/index.d.ts.map +1 -0
- package/dist/core/ldap/index.js +25 -0
- package/dist/core/ldap/index.js.map +1 -0
- package/dist/core/ldap/module.d.ts +19 -0
- package/dist/core/ldap/module.d.ts.map +1 -0
- package/dist/core/ldap/module.js +192 -0
- package/dist/core/ldap/module.js.map +1 -0
- package/dist/core/ldap/types.d.ts +10 -0
- package/dist/core/ldap/types.d.ts.map +1 -0
- package/dist/core/ldap/types.js +9 -0
- package/dist/core/ldap/types.js.map +1 -0
- package/dist/core/logger/module.js +2 -2
- package/dist/core/logger/module.js.map +1 -1
- package/dist/domains/identity-provider/flow/core/index.d.ts +1 -0
- package/dist/domains/identity-provider/flow/core/index.d.ts.map +1 -1
- package/dist/domains/identity-provider/flow/core/index.js +1 -0
- package/dist/domains/identity-provider/flow/core/index.js.map +1 -1
- package/dist/domains/identity-provider/flow/core/ldap.d.ts +14 -0
- package/dist/domains/identity-provider/flow/core/ldap.d.ts.map +1 -0
- package/dist/domains/identity-provider/flow/core/ldap.js +150 -0
- package/dist/domains/identity-provider/flow/core/ldap.js.map +1 -0
- package/dist/domains/identity-provider/flow/types.d.ts +7 -3
- package/dist/domains/identity-provider/flow/types.d.ts.map +1 -1
- package/dist/domains/identity-provider/protocol/ldap/extract.d.ts.map +1 -1
- package/dist/domains/identity-provider/protocol/ldap/extract.js +31 -2
- package/dist/domains/identity-provider/protocol/ldap/extract.js.map +1 -1
- package/dist/domains/identity-provider/protocol/ldap/validation.d.ts +5 -1
- package/dist/domains/identity-provider/protocol/ldap/validation.d.ts.map +1 -1
- package/dist/domains/identity-provider/protocol/ldap/validation.js +39 -4
- package/dist/domains/identity-provider/protocol/ldap/validation.js.map +1 -1
- package/dist/domains/identity-provider/protocol/oauth2/validation.d.ts +2 -2
- package/dist/domains/identity-provider/protocol/oauth2/validation.d.ts.map +1 -1
- package/dist/domains/identity-provider/protocol/oauth2/validation.js +6 -7
- package/dist/domains/identity-provider/protocol/oauth2/validation.js.map +1 -1
- package/dist/domains/identity-provider-account/utils.d.ts +1 -1
- package/dist/domains/identity-provider-account/utils.d.ts.map +1 -1
- package/dist/domains/identity-provider-account/utils.js +43 -14
- package/dist/domains/identity-provider-account/utils.js.map +1 -1
- package/dist/domains/identity-provider-attribute/entity.d.ts.map +1 -1
- package/dist/domains/identity-provider-attribute/entity.js +13 -1
- package/dist/domains/identity-provider-attribute/entity.js.map +1 -1
- package/dist/domains/robot/repository.js +1 -1
- package/dist/domains/robot/repository.js.map +1 -1
- package/dist/domains/robot-permission/entity.d.ts +2 -2
- package/dist/domains/robot-permission/entity.d.ts.map +1 -1
- package/dist/domains/robot-permission/entity.js +15 -2
- package/dist/domains/robot-permission/entity.js.map +1 -1
- package/dist/domains/role/repository.js +1 -1
- package/dist/domains/role/repository.js.map +1 -1
- package/dist/domains/role-attribute/entity.d.ts.map +1 -1
- package/dist/domains/role-attribute/entity.js +13 -1
- package/dist/domains/role-attribute/entity.js.map +1 -1
- package/dist/domains/role-permission/entity.d.ts +2 -2
- package/dist/domains/role-permission/entity.d.ts.map +1 -1
- package/dist/domains/role-permission/entity.js +15 -2
- package/dist/domains/role-permission/entity.js.map +1 -1
- package/dist/domains/user/repository.js +1 -1
- package/dist/domains/user/repository.js.map +1 -1
- package/dist/domains/user-attribute/entity.d.ts.map +1 -1
- package/dist/domains/user-attribute/entity.js +13 -1
- package/dist/domains/user-attribute/entity.js.map +1 -1
- package/dist/domains/user-permission/entity.d.ts +2 -2
- package/dist/domains/user-permission/entity.d.ts.map +1 -1
- package/dist/domains/user-permission/entity.js +15 -2
- package/dist/domains/user-permission/entity.js.map +1 -1
- package/dist/domains/utils/attribute.js +1 -1
- package/dist/domains/utils/attribute.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/custom.js +1 -1
- package/dist/http/controllers/identity-provider/handlers/custom.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/read.js +1 -1
- package/dist/http/controllers/identity-provider/handlers/read.js.map +1 -1
- package/dist/http/controllers/identity-provider/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/identity-provider/utils/validation.js +4 -0
- package/dist/http/controllers/identity-provider/utils/validation.js.map +1 -1
- package/dist/http/controllers/robot-permission/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/robot-permission/utils/validation.js +5 -0
- package/dist/http/controllers/robot-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/role-attribute/handlers/update.js +6 -6
- package/dist/http/controllers/role-attribute/handlers/update.js.map +1 -1
- package/dist/http/controllers/role-permission/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/role-permission/utils/validation.js +5 -0
- package/dist/http/controllers/role-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/user-permission/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/user-permission/utils/validation.js +5 -0
- package/dist/http/controllers/user-permission/utils/validation.js.map +1 -1
- package/dist/http/oauth2/grant-types/password.d.ts +2 -1
- package/dist/http/oauth2/grant-types/password.d.ts.map +1 -1
- package/dist/http/oauth2/grant-types/password.js +57 -4
- package/dist/http/oauth2/grant-types/password.js.map +1 -1
- package/dist/http/validation/utils.d.ts +2 -0
- package/dist/http/validation/utils.d.ts.map +1 -1
- package/dist/http/validation/utils.js +15 -2
- package/dist/http/validation/utils.js.map +1 -1
- package/package.json +13 -9
|
@@ -0,0 +1,192 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/*
|
|
3
|
+
* Copyright (c) 2024.
|
|
4
|
+
* Author Peter Placzek (tada5hi)
|
|
5
|
+
* For the full copyright and license information,
|
|
6
|
+
* view the LICENSE file that was distributed with this source code.
|
|
7
|
+
*/
|
|
8
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
|
+
exports.LdapClient = void 0;
|
|
10
|
+
const ldapjs_1 = require("ldapjs");
|
|
11
|
+
class LdapClient {
|
|
12
|
+
constructor(options) {
|
|
13
|
+
this.options = options;
|
|
14
|
+
this.driver = (0, ldapjs_1.createClient)({
|
|
15
|
+
url: options.url,
|
|
16
|
+
tlsOptions: options.tls,
|
|
17
|
+
connectTimeout: 3000,
|
|
18
|
+
});
|
|
19
|
+
}
|
|
20
|
+
async connect() {
|
|
21
|
+
return new Promise((resolve, reject) => {
|
|
22
|
+
const listener = () => {
|
|
23
|
+
if (this.options.startTLS) {
|
|
24
|
+
this.driver.starttls(this.options.tls, null, (err) => {
|
|
25
|
+
if (err) {
|
|
26
|
+
reject(err);
|
|
27
|
+
return;
|
|
28
|
+
}
|
|
29
|
+
resolve();
|
|
30
|
+
});
|
|
31
|
+
}
|
|
32
|
+
else {
|
|
33
|
+
resolve();
|
|
34
|
+
}
|
|
35
|
+
};
|
|
36
|
+
if (this.driver.connected) {
|
|
37
|
+
listener();
|
|
38
|
+
return;
|
|
39
|
+
}
|
|
40
|
+
const errorListener = (error) => {
|
|
41
|
+
if (error) {
|
|
42
|
+
reject(error);
|
|
43
|
+
}
|
|
44
|
+
resolve();
|
|
45
|
+
};
|
|
46
|
+
this.driver.connect();
|
|
47
|
+
this.driver.once('connect', listener);
|
|
48
|
+
this.driver.once('timeout', errorListener);
|
|
49
|
+
this.driver.once('connectTimeout', errorListener);
|
|
50
|
+
this.driver.once('error', errorListener);
|
|
51
|
+
this.driver.once('connectError', errorListener);
|
|
52
|
+
});
|
|
53
|
+
}
|
|
54
|
+
connected() {
|
|
55
|
+
return this.driver.connected;
|
|
56
|
+
}
|
|
57
|
+
async bind(user, password) {
|
|
58
|
+
return new Promise((resolve, reject) => {
|
|
59
|
+
this.connect()
|
|
60
|
+
.then(() => {
|
|
61
|
+
if (!user) {
|
|
62
|
+
user = this.options.user;
|
|
63
|
+
password = this.options.password;
|
|
64
|
+
}
|
|
65
|
+
this.driver.bind(user, password, (err) => {
|
|
66
|
+
if (err) {
|
|
67
|
+
reject(err);
|
|
68
|
+
return;
|
|
69
|
+
}
|
|
70
|
+
resolve();
|
|
71
|
+
});
|
|
72
|
+
})
|
|
73
|
+
.catch((e) => reject(e));
|
|
74
|
+
});
|
|
75
|
+
}
|
|
76
|
+
async unbind() {
|
|
77
|
+
return new Promise((resolve, reject) => {
|
|
78
|
+
this.driver.unbind((err) => {
|
|
79
|
+
if (err) {
|
|
80
|
+
reject(err);
|
|
81
|
+
return;
|
|
82
|
+
}
|
|
83
|
+
resolve();
|
|
84
|
+
});
|
|
85
|
+
});
|
|
86
|
+
}
|
|
87
|
+
async add(name, data) {
|
|
88
|
+
return new Promise((resolve, reject) => {
|
|
89
|
+
this.driver.add(name, data, (err) => {
|
|
90
|
+
if (err) {
|
|
91
|
+
reject(err);
|
|
92
|
+
return;
|
|
93
|
+
}
|
|
94
|
+
resolve();
|
|
95
|
+
});
|
|
96
|
+
});
|
|
97
|
+
}
|
|
98
|
+
async del(name) {
|
|
99
|
+
return new Promise((resolve, reject) => {
|
|
100
|
+
this.driver.del(name, (err) => {
|
|
101
|
+
if (err) {
|
|
102
|
+
reject(err);
|
|
103
|
+
return;
|
|
104
|
+
}
|
|
105
|
+
resolve();
|
|
106
|
+
});
|
|
107
|
+
});
|
|
108
|
+
}
|
|
109
|
+
async modify(name, change) {
|
|
110
|
+
return new Promise((resolve, reject) => {
|
|
111
|
+
this.driver.modify(name, change, (err) => {
|
|
112
|
+
if (err) {
|
|
113
|
+
reject(err);
|
|
114
|
+
return;
|
|
115
|
+
}
|
|
116
|
+
resolve();
|
|
117
|
+
});
|
|
118
|
+
});
|
|
119
|
+
}
|
|
120
|
+
async search(options, dn) {
|
|
121
|
+
return new Promise((resolve, reject) => {
|
|
122
|
+
this.driver.search(this.resolveDn(dn, this.options.baseDn), {
|
|
123
|
+
scope: 'sub',
|
|
124
|
+
...options,
|
|
125
|
+
}, (err, res) => {
|
|
126
|
+
if (err) {
|
|
127
|
+
reject(err);
|
|
128
|
+
return;
|
|
129
|
+
}
|
|
130
|
+
const entries = [];
|
|
131
|
+
res.on('searchEntry', (searchEntry) => {
|
|
132
|
+
const entry = {
|
|
133
|
+
dn: searchEntry.pojo.objectName,
|
|
134
|
+
};
|
|
135
|
+
for (let i = 0; i < searchEntry.attributes.length; i++) {
|
|
136
|
+
const attribute = searchEntry.attributes[i];
|
|
137
|
+
entry[attribute.type] = Array.isArray(attribute.values) ?
|
|
138
|
+
attribute.values.map((el) => el.trim()).filter(Boolean) :
|
|
139
|
+
attribute.values;
|
|
140
|
+
}
|
|
141
|
+
entries.push(entry);
|
|
142
|
+
});
|
|
143
|
+
res.on('error', (err) => {
|
|
144
|
+
reject(err);
|
|
145
|
+
});
|
|
146
|
+
res.on('end', (searchResult) => {
|
|
147
|
+
if (searchResult.status !== 0) {
|
|
148
|
+
reject(new Error('The ldap search was not successfully'));
|
|
149
|
+
}
|
|
150
|
+
else {
|
|
151
|
+
resolve(entries);
|
|
152
|
+
}
|
|
153
|
+
});
|
|
154
|
+
});
|
|
155
|
+
});
|
|
156
|
+
}
|
|
157
|
+
resolveDn(...input) {
|
|
158
|
+
let output;
|
|
159
|
+
for (let i = 0; i <= input.length; i++) {
|
|
160
|
+
if (typeof input[i] === 'undefined') {
|
|
161
|
+
continue;
|
|
162
|
+
}
|
|
163
|
+
if (!output) {
|
|
164
|
+
output = input[i];
|
|
165
|
+
continue;
|
|
166
|
+
}
|
|
167
|
+
const dn = (0, ldapjs_1.parseDN)(output);
|
|
168
|
+
if (dn.childOf(input[i]) || dn.equals(input[i])) {
|
|
169
|
+
continue;
|
|
170
|
+
}
|
|
171
|
+
output += `,${input[i]}`;
|
|
172
|
+
}
|
|
173
|
+
return output;
|
|
174
|
+
}
|
|
175
|
+
isDn(input) {
|
|
176
|
+
try {
|
|
177
|
+
if (typeof input !== 'string') {
|
|
178
|
+
return ldapjs_1.DN.isDN(input);
|
|
179
|
+
}
|
|
180
|
+
if (typeof ldapjs_1.DN.fromString === 'function') {
|
|
181
|
+
const dn = ldapjs_1.DN.fromString(input);
|
|
182
|
+
return typeof dn !== 'undefined';
|
|
183
|
+
}
|
|
184
|
+
return /^(?:(?:(?:[a-zA-Z0-9]+(?:[-._][a-zA-Z0-9]+)*)=(?:[\s]*[^,+\n=]+[\s]*)*)(?:[,][\s]*)?)+$/.test(input);
|
|
185
|
+
}
|
|
186
|
+
catch (e) {
|
|
187
|
+
return false;
|
|
188
|
+
}
|
|
189
|
+
}
|
|
190
|
+
}
|
|
191
|
+
exports.LdapClient = LdapClient;
|
|
192
|
+
//# sourceMappingURL=module.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/core/ldap/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,mCAGgB;AAGhB,MAAa,UAAU;IAKnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAA,qBAAY,EAAC;YACvB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,OAAO,CAAC,GAAG;YACvB,cAAc,EAAE,IAAI;SACvB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,OAAO;QACT,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,GAAG,EAAE;gBAClB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;wBACjD,IAAI,GAAG,EAAE,CAAC;4BACN,MAAM,CAAC,GAAG,CAAC,CAAC;4BACZ,OAAO;wBACX,CAAC;wBAED,OAAO,EAAE,CAAC;oBACd,CAAC,CAAC,CAAC;gBACP,CAAC;qBAAM,CAAC;oBACJ,OAAO,EAAE,CAAC;gBACd,CAAC;YACL,CAAC,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACxB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACX,CAAC;YAED,MAAM,aAAa,GAAG,CAAC,KAAoB,EAAE,EAAE;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACR,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClB,CAAC;gBAED,OAAO,EAAE,CAAC;YACd,CAAC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QAC9C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,OAAO,EAAE;iBACT,IAAI,CAAC,GAAG,EAAE;gBACP,IAAI,CAAC,IAAI,EAAE,CAAC;oBACR,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;oBACzB,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACrC,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;oBACrC,IAAI,GAAG,EAAE,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;wBACZ,OAAO;oBACX,CAAC;oBAED,OAAO,EAAE,CAAC;gBACd,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,MAAM;QACR,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvB,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,IAAyB;QAC7C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;gBAChC,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC1B,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAyB;QAChD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrC,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE,EAAW;QAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CACd,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EACvC;gBACI,KAAK,EAAE,KAAK;gBACZ,GAAG,OAAO;aACb,EACD,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACT,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACX,CAAC;gBAED,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAE3C,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,EAAE;oBAClC,MAAM,KAAK,GAAyB;wBAChC,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU;qBAClC,CAAC;oBAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACrD,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;wBAE5C,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;4BACrD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;4BACzD,SAAS,CAAC,MAAM,CAAC;oBACzB,CAAC;oBAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE;oBAC3B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;oBAC9D,CAAC;yBAAM,CAAC;wBACJ,OAAO,CAAC,OAAO,CAAC,CAAC;oBACrB,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,SAAS,CAAC,GAAG,KAA6B;QACtC,IAAI,MAA2B,CAAC;QAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;gBAClC,SAAS;YACb,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClB,SAAS;YACb,CAAC;YAED,MAAM,EAAE,GAAG,IAAA,gBAAO,EAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACb,CAAC;YAED,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAkB;QACnB,IAAI,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,WAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YAED,IAAI,OAAQ,WAA0B,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC/D,MAAM,EAAE,GAAI,WAA0B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACzD,OAAO,OAAO,EAAE,KAAK,WAAW,CAAC;YACrC,CAAC;YAED,OAAO,yFAAyF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;CACJ;AA3ND,gCA2NC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/ldap/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,iBAAiB,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAA;CACjB,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/*
|
|
3
|
+
* Copyright (c) 2024.
|
|
4
|
+
* Author Peter Placzek (tada5hi)
|
|
5
|
+
* For the full copyright and license information,
|
|
6
|
+
* view the LICENSE file that was distributed with this source code.
|
|
7
|
+
*/
|
|
8
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
|
+
//# sourceMappingURL=types.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/ldap/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}
|
|
@@ -10,11 +10,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
|
10
10
|
};
|
|
11
11
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
12
|
exports.createLogger = void 0;
|
|
13
|
-
const
|
|
13
|
+
const envix_1 = require("envix");
|
|
14
14
|
const node_path_1 = __importDefault(require("node:path"));
|
|
15
15
|
const winston_1 = require("winston");
|
|
16
16
|
function createLogger(context) {
|
|
17
|
-
const env = context.env || (0,
|
|
17
|
+
const env = context.env || (0, envix_1.read)('NODE_ENV');
|
|
18
18
|
let items;
|
|
19
19
|
if (env === 'production') {
|
|
20
20
|
items = [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/core/logger/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,
|
|
1
|
+
{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/core/logger/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,iCAA6B;AAE7B,0DAA6B;AAC7B,qCAAqE;AAGrE,SAAgB,YAAY,CAAC,OAA2B;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAA,YAAI,EAAC,UAAU,CAAC,CAAC;IAE5C,IAAI,KAAmC,CAAC;IAExC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACvB,KAAK,GAAG;YACJ,IAAI,oBAAU,CAAC,OAAO,CAAC;gBACnB,KAAK,EAAE,MAAM;aAChB,CAAC;YACF,IAAI,oBAAU,CAAC,IAAI,CAAC;gBAChB,QAAQ,EAAE,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC;gBACpD,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;gBAClC,QAAQ,EAAE,CAAC;aACd,CAAC;YACF,IAAI,oBAAU,CAAC,IAAI,CAAC;gBAChB,QAAQ,EAAE,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC;gBACnD,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;gBAClC,QAAQ,EAAE,CAAC;aACd,CAAC;SACL,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,KAAK,GAAG;YACJ,IAAI,oBAAU,CAAC,OAAO,CAAC;gBACnB,KAAK,EAAE,OAAO;aACjB,CAAC;SACL,CAAC;IACN,CAAC;IAED,OAAO,IAAA,sBAAM,EAAC;QACV,MAAM,EAAE,gBAAM,CAAC,OAAO,CAClB,gBAAM,CAAC,SAAS,EAAE,EAClB,gBAAM,CAAC,IAAI,EAAE,CAChB;QACD,UAAU,EAAE,KAAK;KACpB,CAAC,CAAC;AACP,CAAC;AAtCD,oCAsCC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
|
|
@@ -20,6 +20,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
20
20
|
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
21
21
|
};
|
|
22
22
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
23
|
+
__exportStar(require("./ldap"), exports);
|
|
23
24
|
__exportStar(require("./oauth2"), exports);
|
|
24
25
|
__exportStar(require("./openid"), exports);
|
|
25
26
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,2CAAyB"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,yCAAuB;AACvB,2CAAyB;AACzB,2CAAyB"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import { LdapClient } from '../../../../core';
|
|
2
|
+
import type { ILdapIdentityProviderFlow, IdentityProviderFlowIdentity, LdapIdentityProviderFlowOptions } from '../types';
|
|
3
|
+
export declare class LdapIdentityProviderFlow implements ILdapIdentityProviderFlow {
|
|
4
|
+
protected options: LdapIdentityProviderFlowOptions;
|
|
5
|
+
protected client: LdapClient;
|
|
6
|
+
constructor(options: LdapIdentityProviderFlowOptions);
|
|
7
|
+
getIdentityForCredentials(user: string, password: string): Promise<IdentityProviderFlowIdentity>;
|
|
8
|
+
getIdentity(input: string): Promise<IdentityProviderFlowIdentity>;
|
|
9
|
+
bind(user?: string, password?: string): Promise<void>;
|
|
10
|
+
unbind(): Promise<void>;
|
|
11
|
+
findUser(input: string): Promise<Record<string, any> | undefined>;
|
|
12
|
+
findUserGroups(user: Record<string, any>): Promise<string[]>;
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=ldap.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ldap.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAEzH,qBAAa,wBAAyB,YAAW,yBAAyB;IACtE,SAAS,CAAC,OAAO,EAAG,+BAA+B,CAAC;IAEpD,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;gBAEjB,OAAO,EAAE,+BAA+B;IAc9C,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,4BAA4B,CAAC;IAQjG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAmB1D,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;IAa7D,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;IAIjB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IA0ClE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAuD7E"}
|
|
@@ -0,0 +1,150 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/*
|
|
3
|
+
* Copyright (c) 2024.
|
|
4
|
+
* Author Peter Placzek (tada5hi)
|
|
5
|
+
* For the full copyright and license information,
|
|
6
|
+
* view the LICENSE file that was distributed with this source code.
|
|
7
|
+
*/
|
|
8
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
|
+
exports.LdapIdentityProviderFlow = void 0;
|
|
10
|
+
const core_1 = require("@authup/core");
|
|
11
|
+
const ldapjs_1 = require("ldapjs");
|
|
12
|
+
const core_2 = require("../../../../core");
|
|
13
|
+
class LdapIdentityProviderFlow {
|
|
14
|
+
constructor(options) {
|
|
15
|
+
this.options = options;
|
|
16
|
+
this.client = new core_2.LdapClient({
|
|
17
|
+
url: options.url,
|
|
18
|
+
tls: options.tls,
|
|
19
|
+
startTLS: options.start_tls,
|
|
20
|
+
baseDn: options.base_dn,
|
|
21
|
+
user: options.user,
|
|
22
|
+
password: options.password,
|
|
23
|
+
userNameAttribute: options.user_name_attribute,
|
|
24
|
+
});
|
|
25
|
+
}
|
|
26
|
+
async getIdentityForCredentials(user, password) {
|
|
27
|
+
const identity = await this.getIdentity(user);
|
|
28
|
+
await this.bind(identity.id, password);
|
|
29
|
+
return identity;
|
|
30
|
+
}
|
|
31
|
+
async getIdentity(input) {
|
|
32
|
+
await this.bind();
|
|
33
|
+
const user = await this.findUser(input);
|
|
34
|
+
const identity = {
|
|
35
|
+
id: user.dn,
|
|
36
|
+
name: user[this.options.user_name_attribute || 'cn'] || user.dn,
|
|
37
|
+
email: user[this.options.user_mail_attribute || 'mail'],
|
|
38
|
+
};
|
|
39
|
+
try {
|
|
40
|
+
identity.roles = await this.findUserGroups(user);
|
|
41
|
+
}
|
|
42
|
+
catch (e) {
|
|
43
|
+
// todo: log event
|
|
44
|
+
}
|
|
45
|
+
return identity;
|
|
46
|
+
}
|
|
47
|
+
async bind(user, password) {
|
|
48
|
+
if (!user) {
|
|
49
|
+
return this.client.bind();
|
|
50
|
+
}
|
|
51
|
+
if (!this.client.isDn(user)) {
|
|
52
|
+
const nameAttribute = this.options.user_name_attribute || 'cn';
|
|
53
|
+
user = `${nameAttribute}=${user},${this.client.resolveDn(this.options.user_base_dn, this.options.base_dn)}`;
|
|
54
|
+
}
|
|
55
|
+
return this.client.bind(user, password);
|
|
56
|
+
}
|
|
57
|
+
async unbind() {
|
|
58
|
+
return this.client.unbind();
|
|
59
|
+
}
|
|
60
|
+
async findUser(input) {
|
|
61
|
+
let filter;
|
|
62
|
+
if (this.options.user_filter) {
|
|
63
|
+
filter = (0, core_1.template)(this.options.user_filter, {
|
|
64
|
+
input,
|
|
65
|
+
name_attribute: this.options.user_name_attribute || 'cn',
|
|
66
|
+
mail_attribute: this.options.user_mail_attribute || 'mail',
|
|
67
|
+
display_name_attribute: this.options.user_display_name_attribute || 'cn',
|
|
68
|
+
});
|
|
69
|
+
}
|
|
70
|
+
else if (this.options.user_name_attribute) {
|
|
71
|
+
filter = new ldapjs_1.EqualityFilter({
|
|
72
|
+
attribute: this.options.user_name_attribute,
|
|
73
|
+
value: input,
|
|
74
|
+
});
|
|
75
|
+
}
|
|
76
|
+
else {
|
|
77
|
+
filter = new ldapjs_1.OrFilter({
|
|
78
|
+
filters: [
|
|
79
|
+
new ldapjs_1.EqualityFilter({
|
|
80
|
+
attribute: 'cn',
|
|
81
|
+
value: input,
|
|
82
|
+
}),
|
|
83
|
+
new ldapjs_1.EqualityFilter({
|
|
84
|
+
attribute: 'sAMAccountName',
|
|
85
|
+
value: input,
|
|
86
|
+
}),
|
|
87
|
+
],
|
|
88
|
+
});
|
|
89
|
+
}
|
|
90
|
+
const entities = await this.client.search({
|
|
91
|
+
filter,
|
|
92
|
+
scope: 'sub',
|
|
93
|
+
}, this.client.resolveDn(this.options.user_base_dn, this.options.base_dn));
|
|
94
|
+
if (entities.length === 0) {
|
|
95
|
+
return undefined;
|
|
96
|
+
}
|
|
97
|
+
return entities[0];
|
|
98
|
+
}
|
|
99
|
+
async findUserGroups(user) {
|
|
100
|
+
const nameAttribute = this.options.group_name_attribute || 'cn';
|
|
101
|
+
const memberAttribute = this.options.group_member_attribute || 'member';
|
|
102
|
+
let filter;
|
|
103
|
+
if (this.options.group_filter) {
|
|
104
|
+
filter = (0, core_1.template)(this.options.group_filter, {
|
|
105
|
+
...user,
|
|
106
|
+
name_attribute: nameAttribute,
|
|
107
|
+
member_attribute: memberAttribute,
|
|
108
|
+
});
|
|
109
|
+
}
|
|
110
|
+
else {
|
|
111
|
+
filter = new ldapjs_1.AndFilter({
|
|
112
|
+
filters: [
|
|
113
|
+
new ldapjs_1.EqualityFilter({
|
|
114
|
+
attribute: 'objectClass',
|
|
115
|
+
value: this.options.group_class || 'group',
|
|
116
|
+
}),
|
|
117
|
+
new ldapjs_1.EqualityFilter({
|
|
118
|
+
attribute: memberAttribute,
|
|
119
|
+
value: user[this.options.group_member_user_attribute || 'dn'],
|
|
120
|
+
}),
|
|
121
|
+
],
|
|
122
|
+
});
|
|
123
|
+
}
|
|
124
|
+
const entities = await this.client.search({
|
|
125
|
+
filter,
|
|
126
|
+
scope: 'sub',
|
|
127
|
+
}, this.client.resolveDn(this.options.group_base_dn, this.options.base_dn));
|
|
128
|
+
if (entities.length === 0) {
|
|
129
|
+
return [];
|
|
130
|
+
}
|
|
131
|
+
const attributeKey = this.options.group_name_attribute || 'cn';
|
|
132
|
+
const names = [];
|
|
133
|
+
for (let i = 0; i < entities.length; i++) {
|
|
134
|
+
const attribute = entities[i][attributeKey];
|
|
135
|
+
if (typeof attribute === 'undefined') {
|
|
136
|
+
continue;
|
|
137
|
+
}
|
|
138
|
+
if (typeof attribute === 'string') {
|
|
139
|
+
names.push(attribute);
|
|
140
|
+
continue;
|
|
141
|
+
}
|
|
142
|
+
if (Array.isArray(attribute)) {
|
|
143
|
+
names.push(...attribute.filter((el) => typeof el === 'string'));
|
|
144
|
+
}
|
|
145
|
+
}
|
|
146
|
+
return names;
|
|
147
|
+
}
|
|
148
|
+
}
|
|
149
|
+
exports.LdapIdentityProviderFlow = LdapIdentityProviderFlow;
|
|
150
|
+
//# sourceMappingURL=ldap.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ldap.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAwC;AACxC,mCAEgB;AAEhB,2CAA8C;AAG9C,MAAa,wBAAwB;IAKjC,YAAY,OAAwC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAU,CAAC;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,IAAY,EAAE,QAAgB;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAkC;YAC5C,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAC/D,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC;SAC1D,CAAC;QAEF,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,kBAAkB;QACtB,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;YAC/D,IAAI,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC/B,IAAI,MAAwB,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAA,eAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBACxC,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI;gBACxD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM;gBAC1D,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI;aAC3E,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC1C,MAAM,GAAG,IAAI,uBAAc,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;gBAC3C,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,iBAAQ,CAAC;gBAClB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,KAAK;qBACf,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,gBAAgB;wBAC3B,KAAK,EAAE,KAAK;qBACf,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAyB;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,QAAQ,CAAC;QAExE,IAAI,MAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAA,eAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBACzC,GAAG,IAAI;gBACP,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,kBAAS,CAAC;gBACnB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,aAAa;wBACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO;qBAC7C,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI,CAAC;qBAChE,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAhKD,4DAgKC"}
|
|
@@ -1,13 +1,17 @@
|
|
|
1
|
-
import type { IdentityProvider, OAuth2IdentityProviderBase } from '@authup/core';
|
|
1
|
+
import type { IdentityProvider, LdapIdentityProvider, OAuth2IdentityProviderBase } from '@authup/core';
|
|
2
2
|
import type { Request } from 'routup';
|
|
3
3
|
export type IdentityProviderFlowIdentity = {
|
|
4
|
-
id: string
|
|
4
|
+
id: string;
|
|
5
5
|
name: string | string[];
|
|
6
|
-
email?: string;
|
|
6
|
+
email?: string | string[];
|
|
7
7
|
roles?: string[];
|
|
8
8
|
first_name?: string;
|
|
9
9
|
last_name?: string;
|
|
10
10
|
};
|
|
11
|
+
export type LdapIdentityProviderFlowOptions = Omit<LdapIdentityProvider, keyof IdentityProvider>;
|
|
12
|
+
export interface ILdapIdentityProviderFlow {
|
|
13
|
+
getIdentity(user: string, password: string): Promise<IdentityProviderFlowIdentity>;
|
|
14
|
+
}
|
|
11
15
|
export type OAuth2IdentityProviderFlowOptions = IdentityProvider & Partial<OAuth2IdentityProviderBase>;
|
|
12
16
|
export interface IOAuth2IdentityProviderFlow {
|
|
13
17
|
buildAuthorizeURL(): string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/domains/identity-provider/flow/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/domains/identity-provider/flow/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,MAAM,MAAM,4BAA4B,GAAG;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,IAAI,CAAC,oBAAoB,EAAE,MAAM,gBAAgB,CAAC,CAAC;AACjG,MAAM,WAAW,yBAAyB;IACtC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACvF;AAED,MAAM,MAAM,iCAAiC,GAAG,gBAAgB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IACxC,iBAAiB,IAAK,MAAM,CAAC;IAC7B,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACnF"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/extract.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/extract.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEzD,wBAAgB,6CAA6C,CACzD,KAAK,EAAE,OAAO,GACd,OAAO,CAAC,oBAAoB,CAAC,CAsChC"}
|
|
@@ -7,11 +7,40 @@
|
|
|
7
7
|
*/
|
|
8
8
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
9
|
exports.extractLdapIdentityProviderProtocolAttributes = void 0;
|
|
10
|
+
const core_1 = require("@authup/core");
|
|
10
11
|
function extractLdapIdentityProviderProtocolAttributes(input) {
|
|
11
|
-
if (
|
|
12
|
+
if (!(0, core_1.isObject)(input)) {
|
|
12
13
|
return {};
|
|
13
14
|
}
|
|
14
|
-
|
|
15
|
+
const attributes = [
|
|
16
|
+
'url',
|
|
17
|
+
'timeout',
|
|
18
|
+
'start_tls',
|
|
19
|
+
'tls',
|
|
20
|
+
'base_dn',
|
|
21
|
+
'user',
|
|
22
|
+
'password',
|
|
23
|
+
'user_base_dn',
|
|
24
|
+
'user_filter',
|
|
25
|
+
'user_name_attribute',
|
|
26
|
+
'user_mail_attribute',
|
|
27
|
+
'user_display_name_attribute',
|
|
28
|
+
'group_base_dn',
|
|
29
|
+
'group_filter',
|
|
30
|
+
'group_name_attribute',
|
|
31
|
+
'group_class',
|
|
32
|
+
'group_member_attribute',
|
|
33
|
+
'group_member_user_attribute',
|
|
34
|
+
];
|
|
35
|
+
const output = {};
|
|
36
|
+
for (let i = 0; i < attributes.length; i++) {
|
|
37
|
+
const attribute = attributes[i];
|
|
38
|
+
if (!(0, core_1.hasOwnProperty)(input, attribute)) {
|
|
39
|
+
continue;
|
|
40
|
+
}
|
|
41
|
+
output[attributes[i]] = input[attribute];
|
|
42
|
+
}
|
|
43
|
+
return output;
|
|
15
44
|
}
|
|
16
45
|
exports.extractLdapIdentityProviderProtocolAttributes = extractLdapIdentityProviderProtocolAttributes;
|
|
17
46
|
//# sourceMappingURL=extract.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/extract.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;
|
|
1
|
+
{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/extract.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAwD;AAGxD,SAAgB,6CAA6C,CACzD,KAAc;IAEd,IAAI,CAAC,IAAA,eAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAoC;QAChD,KAAK;QACL,SAAS;QACT,WAAW;QACX,KAAK;QACL,SAAS;QACT,MAAM;QACN,UAAU;QACV,cAAc;QACd,aAAa;QACb,qBAAqB;QACrB,qBAAqB;QACrB,6BAA6B;QAC7B,eAAe;QACf,cAAc;QACd,sBAAsB;QACtB,aAAa;QACb,wBAAwB;QACxB,6BAA6B;KAChC,CAAC;IAEF,MAAM,MAAM,GAAmC,EAAE,CAAC;IAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAA,qBAAc,EAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACpC,SAAS;QACb,CAAC;QAED,MAAM,CAAC,UAAU,CAAC,CAAC,CAAW,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAxCD,sGAwCC"}
|
|
@@ -1,4 +1,8 @@
|
|
|
1
1
|
import type { LdapIdentityProvider } from '@authup/core';
|
|
2
2
|
import type { Request } from 'routup';
|
|
3
|
-
|
|
3
|
+
/**
|
|
4
|
+
* @throws ZodError
|
|
5
|
+
* @param req
|
|
6
|
+
*/
|
|
7
|
+
export declare function validateLdapIdentityProviderProtocol(req: Request): Partial<LdapIdentityProvider>;
|
|
4
8
|
//# sourceMappingURL=validation.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/validation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;
|
|
1
|
+
{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/validation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AA0BtC;;;GAGG;AACH,wBAAgB,oCAAoC,CAChD,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,oBAAoB,CAAC,CAShC"}
|
|
@@ -5,12 +5,47 @@
|
|
|
5
5
|
* For the full copyright and license information,
|
|
6
6
|
* view the LICENSE file that was distributed with this source code.
|
|
7
7
|
*/
|
|
8
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
9
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
10
|
+
};
|
|
8
11
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
12
|
exports.validateLdapIdentityProviderProtocol = void 0;
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
13
|
+
const body_1 = require("@routup/basic/body");
|
|
14
|
+
const zod_1 = __importDefault(require("zod"));
|
|
15
|
+
const extract_1 = require("./extract");
|
|
16
|
+
const schema = zod_1.default.object({
|
|
17
|
+
url: zod_1.default.string().url(),
|
|
18
|
+
timeout: zod_1.default.number().min(0).optional().nullable(),
|
|
19
|
+
start_tls: zod_1.default.boolean().optional().nullable(),
|
|
20
|
+
tls: zod_1.default.any().optional().nullable(),
|
|
21
|
+
base_dn: zod_1.default.string().min(3).max(2000).optional()
|
|
22
|
+
.nullable(),
|
|
23
|
+
user: zod_1.default.string().min(3),
|
|
24
|
+
password: zod_1.default.string().min(3),
|
|
25
|
+
user_base_dn: zod_1.default.string().optional().nullable(),
|
|
26
|
+
user_filter: zod_1.default.string().optional().nullable(),
|
|
27
|
+
username_attribute: zod_1.default.string().optional().nullable(),
|
|
28
|
+
mail_attribute: zod_1.default.string().optional().nullable(),
|
|
29
|
+
display_name_attribute: zod_1.default.string().optional().nullable(),
|
|
30
|
+
group_base_dn: zod_1.default.string().optional().nullable(),
|
|
31
|
+
group_filter: zod_1.default.string().optional().nullable(),
|
|
32
|
+
group_name_attribute: zod_1.default.string().optional().nullable(),
|
|
33
|
+
group_class: zod_1.default.string().optional().nullable(),
|
|
34
|
+
group_member_attribute: zod_1.default.string().optional().nullable(),
|
|
35
|
+
group_member_user_attribute: zod_1.default.string().optional().nullable(),
|
|
36
|
+
});
|
|
37
|
+
/**
|
|
38
|
+
* @throws ZodError
|
|
39
|
+
* @param req
|
|
40
|
+
*/
|
|
41
|
+
function validateLdapIdentityProviderProtocol(req) {
|
|
42
|
+
const body = (0, body_1.useRequestBody)(req);
|
|
43
|
+
const attributes = (0, extract_1.extractLdapIdentityProviderProtocolAttributes)(body);
|
|
44
|
+
const result = schema.safeParse(attributes);
|
|
45
|
+
if (result.success === false) {
|
|
46
|
+
throw result.error;
|
|
47
|
+
}
|
|
48
|
+
return result.data;
|
|
14
49
|
}
|
|
15
50
|
exports.validateLdapIdentityProviderProtocol = validateLdapIdentityProviderProtocol;
|
|
16
51
|
//# sourceMappingURL=validation.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;
|
|
1
|
+
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/ldap/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAGH,6CAAoD;AAEpD,8CAAsB;AACtB,uCAA0E;AAE1E,MAAM,MAAM,GAAG,aAAG,CAAC,MAAM,CAAC;IACtB,GAAG,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,OAAO,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,aAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,GAAG,EAAE,aAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SAC5C,QAAQ,EAAE;IACf,IAAI,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,YAAY,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,cAAc,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,sBAAsB,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,YAAY,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,oBAAoB,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,sBAAsB,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1D,2BAA2B,EAAE,aAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClE,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAgB,oCAAoC,CAChD,GAAY;IAEZ,MAAM,IAAI,GAAG,IAAA,qBAAc,EAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,IAAA,uDAA6C,EAAC,IAAI,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC;AAXD,oFAWC"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { IdentityProviderPreset } from '@authup/core';
|
|
1
|
+
import type { IdentityProviderPreset, OAuth2IdentityProvider } from '@authup/core';
|
|
2
2
|
import type { Request } from 'routup';
|
|
3
|
-
export declare function validateOAuth2IdentityProviderProtocol(req: Request, protocolConfig: `${IdentityProviderPreset}`): Partial<
|
|
3
|
+
export declare function validateOAuth2IdentityProviderProtocol(req: Request, protocolConfig: `${IdentityProviderPreset}`): Partial<OAuth2IdentityProvider>;
|
|
4
4
|
//# sourceMappingURL=validation.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/oauth2/validation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;
|
|
1
|
+
{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/protocol/oauth2/validation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEnF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAuBtC,wBAAgB,sCAAsC,CAClD,GAAG,EAAE,OAAO,EACZ,cAAc,EAAE,GAAG,sBAAsB,EAAE,GAC3C,OAAO,CAAC,sBAAsB,CAAC,CAoBlC"}
|