@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/setup.js +2 -2
- package/dist/commands/setup.js.map +1 -1
- package/dist/commands/start.d.ts.map +1 -1
- package/dist/commands/start.js +4 -5
- package/dist/commands/start.js.map +1 -1
- package/dist/config/build.d.ts +1 -1
- package/dist/config/build.d.ts.map +1 -1
- package/dist/config/build.js +12 -5
- package/dist/config/build.js.map +1 -1
- package/dist/config/constants.d.ts +13 -6
- package/dist/config/constants.d.ts.map +1 -1
- package/dist/config/constants.js +13 -6
- package/dist/config/constants.js.map +1 -1
- package/dist/config/index.d.ts +1 -1
- package/dist/config/index.d.ts.map +1 -1
- package/dist/config/index.js +1 -1
- package/dist/config/index.js.map +1 -1
- package/dist/config/module.d.ts +1 -1
- package/dist/config/module.d.ts.map +1 -1
- package/dist/config/parse.d.ts +1 -1
- package/dist/config/parse.d.ts.map +1 -1
- package/dist/config/parse.js +25 -9
- package/dist/config/parse.js.map +1 -1
- package/dist/config/setup.d.ts +1 -1
- package/dist/config/setup.d.ts.map +1 -1
- package/dist/config/{type.d.ts → types.d.ts} +31 -11
- package/dist/config/types.d.ts.map +1 -0
- package/dist/config/{type.js → types.js} +1 -1
- package/dist/config/types.js.map +1 -0
- package/dist/config/utils/env.d.ts +1 -1
- package/dist/config/utils/env.d.ts.map +1 -1
- package/dist/config/utils/env.js +52 -21
- package/dist/config/utils/env.js.map +1 -1
- package/dist/database/seeds/module.d.ts.map +1 -1
- package/dist/database/seeds/module.js +56 -65
- package/dist/database/seeds/module.js.map +1 -1
- package/dist/domains/client/repository.d.ts +4 -3
- package/dist/domains/client/repository.d.ts.map +1 -1
- package/dist/domains/client/repository.js +28 -16
- package/dist/domains/client/repository.js.map +1 -1
- package/dist/domains/identity-provider/flow/core/openid.js +1 -1
- package/dist/domains/identity-provider/flow/core/openid.js.map +1 -1
- package/dist/domains/key/utils/sign.d.ts +2 -2
- package/dist/domains/key/utils/sign.d.ts.map +1 -1
- package/dist/domains/key/utils/sign.js +12 -1
- package/dist/domains/key/utils/sign.js.map +1 -1
- package/dist/domains/key/utils/verify.d.ts +1 -2
- package/dist/domains/key/utils/verify.d.ts.map +1 -1
- package/dist/domains/key/utils/verify.js +5 -7
- package/dist/domains/key/utils/verify.js.map +1 -1
- package/dist/domains/robot/repository.d.ts +8 -6
- package/dist/domains/robot/repository.d.ts.map +1 -1
- package/dist/domains/robot/repository.js +30 -16
- package/dist/domains/robot/repository.js.map +1 -1
- package/dist/domains/robot/vault.js +3 -3
- package/dist/domains/robot/vault.js.map +1 -1
- package/dist/domains/role/repository.d.ts +3 -3
- package/dist/domains/role/repository.d.ts.map +1 -1
- package/dist/domains/role/repository.js +1 -1
- package/dist/domains/role/repository.js.map +1 -1
- package/dist/domains/user/repository.d.ts +7 -6
- package/dist/domains/user/repository.d.ts.map +1 -1
- package/dist/domains/user/repository.js +17 -9
- package/dist/domains/user/repository.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/custom.js +2 -2
- package/dist/http/controllers/identity-provider/handlers/custom.js.map +1 -1
- package/dist/http/controllers/permission/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/permission/utils/validation.js +0 -1
- package/dist/http/controllers/permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/robot/handlers/delete.d.ts.map +1 -1
- package/dist/http/controllers/robot/handlers/delete.js +3 -1
- package/dist/http/controllers/robot/handlers/delete.js.map +1 -1
- package/dist/http/controllers/robot/handlers/integrity.d.ts.map +1 -1
- package/dist/http/controllers/robot/handlers/integrity.js +26 -12
- package/dist/http/controllers/robot/handlers/integrity.js.map +1 -1
- package/dist/http/controllers/robot/handlers/update.d.ts.map +1 -1
- package/dist/http/controllers/robot/handlers/update.js +4 -2
- package/dist/http/controllers/robot/handlers/update.js.map +1 -1
- package/dist/http/controllers/robot-permission/handlers/delete.js +1 -1
- package/dist/http/controllers/robot-permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/robot-permission/utils/validation.js +4 -4
- package/dist/http/controllers/robot-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/role/handlers/delete.js +1 -1
- package/dist/http/controllers/role/handlers/delete.js.map +1 -1
- package/dist/http/controllers/role/handlers/update.js +1 -1
- package/dist/http/controllers/role/handlers/update.js.map +1 -1
- package/dist/http/controllers/role/utils/validaiton.js +4 -4
- package/dist/http/controllers/role/utils/validaiton.js.map +1 -1
- package/dist/http/controllers/role-permission/handlers/delete.js +1 -1
- package/dist/http/controllers/role-permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/role-permission/utils/validation.js +3 -3
- package/dist/http/controllers/role-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/root/authorize/handlers/run.js +2 -2
- package/dist/http/controllers/root/authorize/handlers/run.js.map +1 -1
- package/dist/http/controllers/root/status/module.js +2 -2
- package/dist/http/controllers/root/status/module.js.map +1 -1
- package/dist/http/controllers/root/token/handlers/create.js +2 -2
- package/dist/http/controllers/root/token/handlers/create.js.map +1 -1
- package/dist/http/controllers/user/handlers/update.js +1 -1
- package/dist/http/controllers/user-permission/handlers/delete.js +1 -1
- package/dist/http/controllers/user-permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/user-permission/utils/validation.js +2 -2
- package/dist/http/controllers/user-permission/utils/validation.js.map +1 -1
- package/dist/http/middleware/built-in/auth/module.d.ts.map +1 -1
- package/dist/http/middleware/built-in/auth/module.js +8 -3
- package/dist/http/middleware/built-in/auth/module.js.map +1 -1
- package/dist/http/middleware/built-in/auth/verify.d.ts.map +1 -1
- package/dist/http/middleware/built-in/auth/verify.js +30 -30
- package/dist/http/middleware/built-in/auth/verify.js.map +1 -1
- package/dist/http/middleware/built-in/rate-limit.d.ts.map +1 -1
- package/dist/http/middleware/built-in/rate-limit.js +3 -1
- package/dist/http/middleware/built-in/rate-limit.js.map +1 -1
- package/dist/http/oauth2/authorize/module.d.ts.map +1 -1
- package/dist/http/oauth2/authorize/module.js +5 -5
- package/dist/http/oauth2/authorize/module.js.map +1 -1
- package/dist/http/oauth2/grant-types/abstract.js +1 -1
- package/dist/http/oauth2/grant-types/abstract.js.map +1 -1
- package/dist/http/oauth2/grant-types/authorize.js +2 -2
- package/dist/http/oauth2/grant-types/authorize.js.map +1 -1
- package/dist/http/oauth2/grant-types/client-credentials.js +2 -2
- package/dist/http/oauth2/grant-types/client-credentials.js.map +1 -1
- package/dist/http/oauth2/grant-types/internal.js +2 -2
- package/dist/http/oauth2/grant-types/internal.js.map +1 -1
- package/dist/http/oauth2/grant-types/password.js +2 -2
- package/dist/http/oauth2/grant-types/password.js.map +1 -1
- package/dist/http/oauth2/grant-types/refresh-token.js +2 -2
- package/dist/http/oauth2/grant-types/refresh-token.js.map +1 -1
- package/dist/http/oauth2/grant-types/robot-credentials.js +2 -2
- package/dist/http/oauth2/grant-types/robot-credentials.js.map +1 -1
- package/dist/http/oauth2/response/bearer.d.ts.map +1 -1
- package/dist/http/oauth2/response/bearer.js +4 -2
- package/dist/http/oauth2/response/bearer.js.map +1 -1
- package/dist/http/oauth2/token/builder/access-token.d.ts.map +1 -1
- package/dist/http/oauth2/token/builder/access-token.js +1 -0
- package/dist/http/oauth2/token/builder/access-token.js.map +1 -1
- package/dist/http/oauth2/token/builder/id-token.d.ts.map +1 -1
- package/dist/http/oauth2/token/builder/id-token.js +2 -1
- package/dist/http/oauth2/token/builder/id-token.js.map +1 -1
- package/dist/http/oauth2/token/builder/type.d.ts +1 -0
- package/dist/http/oauth2/token/builder/type.d.ts.map +1 -1
- package/dist/http/oauth2/token/payload/read.js +5 -5
- package/dist/http/oauth2/token/payload/read.js.map +1 -1
- package/dist/http/oauth2/token/permissions.d.ts +2 -2
- package/dist/http/oauth2/token/permissions.d.ts.map +1 -1
- package/dist/http/utils/owner.d.ts.map +1 -1
- package/dist/http/utils/owner.js +2 -3
- package/dist/http/utils/owner.js.map +1 -1
- package/package.json +8 -8
- package/dist/config/type.d.ts.map +0 -1
- package/dist/config/type.js.map +0 -1
|
@@ -93,21 +93,24 @@ class DatabaseSeeder {
|
|
|
93
93
|
*/
|
|
94
94
|
const userRepository = new domains_1.UserRepository(dataSource);
|
|
95
95
|
let user = await userRepository.findOneBy({
|
|
96
|
-
name: this.getOption('
|
|
96
|
+
name: this.getOption('userAdminName'),
|
|
97
97
|
});
|
|
98
|
+
const userPassword = this.getOption('userAdminPassword');
|
|
98
99
|
if (!user) {
|
|
99
100
|
user = userRepository.create({
|
|
100
|
-
name: this.getOption('
|
|
101
|
-
password: await (0, server_kit_1.hash)(
|
|
101
|
+
name: this.getOption('userAdminName'),
|
|
102
|
+
password: await (0, server_kit_1.hash)(userPassword),
|
|
102
103
|
email: 'peter.placzek1996@gmail.com',
|
|
103
104
|
realm_id: realm.id,
|
|
104
|
-
active:
|
|
105
|
+
active: this.getOption('userAdminEnabled'),
|
|
105
106
|
});
|
|
106
107
|
response.user = user;
|
|
107
108
|
}
|
|
108
|
-
else
|
|
109
|
-
|
|
110
|
-
|
|
109
|
+
else {
|
|
110
|
+
if (this.getOption('userAdminPasswordReset')) {
|
|
111
|
+
user.password = await (0, server_kit_1.hash)(userPassword);
|
|
112
|
+
}
|
|
113
|
+
user.active = this.getOption('userAdminEnabled');
|
|
111
114
|
}
|
|
112
115
|
await userRepository.save(user);
|
|
113
116
|
// -------------------------------------------------
|
|
@@ -125,6 +128,52 @@ class DatabaseSeeder {
|
|
|
125
128
|
}
|
|
126
129
|
await userRoleRepository.save(userRole);
|
|
127
130
|
// -------------------------------------------------
|
|
131
|
+
/**
|
|
132
|
+
* Create default robot account
|
|
133
|
+
*/
|
|
134
|
+
const robotRepository = dataSource.getRepository(domains_1.RobotEntity);
|
|
135
|
+
let robot = await robotRepository.findOneBy({
|
|
136
|
+
name: this.getOption('robotAdminName'),
|
|
137
|
+
realm_id: realm.id,
|
|
138
|
+
});
|
|
139
|
+
const secret = this.getOption('robotAdminSecret') || (0, core_1.createNanoID)(64);
|
|
140
|
+
if (!robot) {
|
|
141
|
+
robot = robotRepository.create({
|
|
142
|
+
name: this.getOption('robotAdminName'),
|
|
143
|
+
realm_id: realm.id,
|
|
144
|
+
secret: await (0, server_kit_1.hash)(secret),
|
|
145
|
+
active: this.getOption('robotAdminEnabled'),
|
|
146
|
+
});
|
|
147
|
+
await robotRepository.save(robot);
|
|
148
|
+
robot.secret = secret;
|
|
149
|
+
response.robot = robot;
|
|
150
|
+
}
|
|
151
|
+
else {
|
|
152
|
+
if (this.getOption('robotAdminSecretReset')) {
|
|
153
|
+
robot.secret = await (0, server_kit_1.hash)(secret);
|
|
154
|
+
}
|
|
155
|
+
robot.active = this.getOption('robotAdminEnabled');
|
|
156
|
+
await robotRepository.save(robot);
|
|
157
|
+
if (this.getOption('robotAdminSecretReset')) {
|
|
158
|
+
robot.secret = secret;
|
|
159
|
+
response.robot = robot;
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
// -------------------------------------------------
|
|
163
|
+
/**
|
|
164
|
+
* Create default robot - role association
|
|
165
|
+
*/
|
|
166
|
+
const robotRoleData = {
|
|
167
|
+
role_id: role.id,
|
|
168
|
+
robot_id: robot.id,
|
|
169
|
+
};
|
|
170
|
+
const robotRoleRepository = dataSource.getRepository(domains_1.RobotRoleEntity);
|
|
171
|
+
let robotRole = await robotRoleRepository.findOneBy(robotRoleData);
|
|
172
|
+
if (!robotRole) {
|
|
173
|
+
robotRole = robotRoleRepository.create(robotRoleData);
|
|
174
|
+
}
|
|
175
|
+
await robotRoleRepository.save(robotRole);
|
|
176
|
+
// -------------------------------------------------
|
|
128
177
|
/**
|
|
129
178
|
* Create all permissions
|
|
130
179
|
*/
|
|
@@ -186,64 +235,6 @@ class DatabaseSeeder {
|
|
|
186
235
|
if (rolePermissions.length > 0) {
|
|
187
236
|
await rolePermissionRepository.save(rolePermissions);
|
|
188
237
|
}
|
|
189
|
-
// -------------------------------------------------
|
|
190
|
-
/**
|
|
191
|
-
* Create default robot account
|
|
192
|
-
*/
|
|
193
|
-
const robotRepository = dataSource.getRepository(domains_1.RobotEntity);
|
|
194
|
-
let robot = await robotRepository.findOneBy({
|
|
195
|
-
name: core_1.ROBOT_SYSTEM_NAME,
|
|
196
|
-
realm_id: realm.id,
|
|
197
|
-
});
|
|
198
|
-
const secret = this.getOption('robotSecret') || (0, core_1.createNanoID)(64);
|
|
199
|
-
if (!robot) {
|
|
200
|
-
robot = robotRepository.create({
|
|
201
|
-
name: core_1.ROBOT_SYSTEM_NAME,
|
|
202
|
-
realm_id: realm.id,
|
|
203
|
-
secret: await (0, server_kit_1.hash)(secret),
|
|
204
|
-
active: this.getOption('robotEnabled'),
|
|
205
|
-
});
|
|
206
|
-
await robotRepository.save(robot);
|
|
207
|
-
robot.secret = secret;
|
|
208
|
-
response.robot = robot;
|
|
209
|
-
}
|
|
210
|
-
else {
|
|
211
|
-
if (this.getOption('robotSecretReset')) {
|
|
212
|
-
robot.secret = await (0, server_kit_1.hash)(secret);
|
|
213
|
-
}
|
|
214
|
-
robot.active = this.getOption('robotEnabled');
|
|
215
|
-
await robotRepository.save(robot);
|
|
216
|
-
if (this.getOption('robotSecretReset')) {
|
|
217
|
-
robot.secret = secret;
|
|
218
|
-
response.robot = robot;
|
|
219
|
-
}
|
|
220
|
-
}
|
|
221
|
-
// -------------------------------------------------
|
|
222
|
-
/**
|
|
223
|
-
* Assign all permissions to default robot.
|
|
224
|
-
*/
|
|
225
|
-
const robotPermissionIds = [...permissionIds];
|
|
226
|
-
const robotPermissionRepository = dataSource.getRepository(domains_1.RobotPermissionEntity);
|
|
227
|
-
const existingRobotPermissions = await robotPermissionRepository.findBy({
|
|
228
|
-
permission_id: (0, typeorm_1.In)(robotPermissionIds),
|
|
229
|
-
robot_id: robot.id,
|
|
230
|
-
});
|
|
231
|
-
for (let i = 0; i < existingRobotPermissions.length; i++) {
|
|
232
|
-
const index = robotPermissionIds.indexOf(existingRobotPermissions[i].permission_id);
|
|
233
|
-
if (index !== -1) {
|
|
234
|
-
robotPermissionIds.splice(index, 1);
|
|
235
|
-
}
|
|
236
|
-
}
|
|
237
|
-
const robotPermissions = [];
|
|
238
|
-
for (let j = 0; j < robotPermissionIds.length; j++) {
|
|
239
|
-
robotPermissions.push(robotPermissionRepository.create({
|
|
240
|
-
robot_id: robot.id,
|
|
241
|
-
permission_id: robotPermissionIds[j],
|
|
242
|
-
}));
|
|
243
|
-
}
|
|
244
|
-
if (robotPermissions.length > 0) {
|
|
245
|
-
await robotPermissionRepository.save(robotPermissions);
|
|
246
|
-
}
|
|
247
238
|
return response;
|
|
248
239
|
}
|
|
249
240
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/database/seeds/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA6B;
|
|
1
|
+
{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/database/seeds/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA6B;AAS7B,uCAIsB;AACtB,mDAA0D;AAC1D,2CAUuB;AAEvB,yCAAyC;AAGzC,SAAS,cAAc,CAAC,WAAsB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACtB,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAc,CAAC;QAChC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;KACzB,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAa,cAAc;IAKvB,YAAY,OAAyB;QACjC,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IACjC,CAAC;IAEO,SAAS,CAAyB,GAAM;QAC5C,IACI,IAAA,2BAAc,EAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,EAC1C,CAAC;YACC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAc,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,UAAsB;QACnC,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAE/C;;WAEG;QACH,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,wBAAiB;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE,wBAAiB;gBACvB,QAAQ,EAAE,KAAK;aAClB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAElC,oDAAoD;QAEpD,+CAA+C;QAE/C,MAAM,UAAU,GAAc,MAAM,CAAC,MAAM,CAAC,gBAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,EAAE,CAAC;QAEpB,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;QAE9D,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;YAChD,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,eAAe,GAAmB,EAAE,CAAC;QAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACJ,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CACzB,CAAC,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CACrE,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,oDAAoD;QAEpD;;WAEG;QACH,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,oBAAU,CAAC,CAAC;QAC5D,IAAI,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACtC,IAAI,EAAE,OAAO;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzB,IAAI,EAAE,OAAO;aAChB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhC,oDAAoD;QAEpD;;WAEG;QACH,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACtC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;SACxC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;gBACrC,QAAQ,EAAE,MAAM,IAAA,iBAAI,EAAC,YAAY,CAAC;gBAClC,KAAK,EAAE,6BAA6B;gBACpC,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;aAC7C,CAAC,CAAC;YAEH,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,CAAC;YACJ,IAAI,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAA,iBAAI,EAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,oDAAoD;QAEpD;;WAEG;QACH,MAAM,YAAY,GAAuB;YACrC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC;QAEF,MAAM,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;QACpE,IAAI,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,YAA0C,CAAC,CAAC;QAE9F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAExC,oDAAoD;QAEpD;;WAEG;QACH,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAQ,qBAAW,CAAC,CAAC;QACrE,IAAI,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;YACtC,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,IAAA,mBAAY,EAAC,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;gBACtC,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,MAAM,EAAE,MAAM,IAAA,iBAAI,EAAC,MAAM,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;aAC9C,CAAC,CAAC;YAEH,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAElC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,IAAI,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,MAAM,GAAG,MAAM,IAAA,iBAAI,EAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAEnD,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAElC,IAAI,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;gBACtB,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;YAC3B,CAAC;QACL,CAAC;QAED,oDAAoD;QAEpD;;WAEG;QACH,MAAM,aAAa,GAAwB;YACvC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,mBAAmB,GAAG,UAAU,CAAC,aAAa,CAAC,yBAAe,CAAC,CAAC;QACtE,IAAI,SAAS,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,aAA4C,CAAC,CAAC;QAElG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1C,oDAAoD;QAEpD;;WAEG;QACH,IAAI,eAA0B,CAAC;QAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpC,eAAe,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAChD,eAAe,GAAG,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,aAAa,GAAc,EAAE,CAAC;QAEpC,MAAM,oBAAoB,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;QAExE,MAAM,mBAAmB,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC;YAC1D,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,oBAAoB,GAAwB,EAAE,CAAC;QAErD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACJ,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9C,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;QACL,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,oBAAoB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,WAAW,GAAkB,eAAe,CAAC,GAAG,CAClD,CAAC,IAAY,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC1E,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE7C,aAAa,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,oDAAoD;QAEpD;;WAEG;QACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QAC7C,MAAM,wBAAwB,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;QAEhF,MAAM,uBAAuB,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC;YAClE,aAAa,EAAE,IAAA,YAAE,EAAC,iBAAiB,CAAC;YACpC,OAAO,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;QAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAClF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACvC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAsB,EAAE,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,eAAe,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;gBACjD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,aAAa,EAAE,iBAAiB,CAAC,CAAC,CAAC;aACtC,CAAC,CAAC,CAAC;QACR,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,wBAAwB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ;AAxRD,wCAwRC"}
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
import type { DataSource, EntityManager } from 'typeorm';
|
|
2
2
|
import { Repository } from 'typeorm';
|
|
3
3
|
import { ClientEntity } from './entity';
|
|
4
|
-
export declare class
|
|
4
|
+
export declare class ClientRepository extends Repository<ClientEntity> {
|
|
5
5
|
constructor(instance: DataSource | EntityManager);
|
|
6
6
|
/**
|
|
7
7
|
* Verify a client by id and secret.
|
|
8
8
|
*
|
|
9
|
-
* @param
|
|
9
|
+
* @param idOrName
|
|
10
10
|
* @param secret
|
|
11
|
+
* @param realmId
|
|
11
12
|
*/
|
|
12
|
-
verifyCredentials(
|
|
13
|
+
verifyCredentials(idOrName: string, secret: string, realmId?: string): Promise<ClientEntity | undefined>;
|
|
13
14
|
}
|
|
14
15
|
//# sourceMappingURL=repository.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAmB,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,qBAAa,gBAAiB,SAAQ,UAAU,CAAC,YAAY,CAAC;gBAC9C,QAAQ,EAAE,UAAU,GAAG,aAAa;IAIhD;;;;;;OAMG;IACG,iBAAiB,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;CA8BxC"}
|
|
@@ -6,34 +6,46 @@
|
|
|
6
6
|
* view the LICENSE file that was distributed with this source code.
|
|
7
7
|
*/
|
|
8
8
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
|
-
exports.
|
|
9
|
+
exports.ClientRepository = void 0;
|
|
10
|
+
const core_1 = require("@authup/core");
|
|
10
11
|
const typeorm_1 = require("typeorm");
|
|
11
12
|
const entity_1 = require("./entity");
|
|
12
|
-
class
|
|
13
|
+
class ClientRepository extends typeorm_1.Repository {
|
|
13
14
|
constructor(instance) {
|
|
14
15
|
super(entity_1.ClientEntity, typeorm_1.InstanceChecker.isDataSource(instance) ? instance.manager : instance);
|
|
15
16
|
}
|
|
16
17
|
/**
|
|
17
18
|
* Verify a client by id and secret.
|
|
18
19
|
*
|
|
19
|
-
* @param
|
|
20
|
+
* @param idOrName
|
|
20
21
|
* @param secret
|
|
22
|
+
* @param realmId
|
|
21
23
|
*/
|
|
22
|
-
async verifyCredentials(
|
|
23
|
-
const
|
|
24
|
-
.
|
|
25
|
-
|
|
26
|
-
.
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
24
|
+
async verifyCredentials(idOrName, secret, realmId) {
|
|
25
|
+
const query = this.createQueryBuilder('client')
|
|
26
|
+
.leftJoinAndSelect('client.realm', 'realm');
|
|
27
|
+
if ((0, core_1.isUUID)(idOrName)) {
|
|
28
|
+
query.where('client.id = :id', { id: idOrName });
|
|
29
|
+
}
|
|
30
|
+
else {
|
|
31
|
+
query.where('client.name LIKE :name', { name: idOrName });
|
|
32
|
+
if (realmId) {
|
|
33
|
+
query.andWhere('client.realm_id = :realmId', { realmId });
|
|
34
|
+
}
|
|
31
35
|
}
|
|
32
|
-
|
|
33
|
-
|
|
36
|
+
const entities = await query
|
|
37
|
+
.addSelect('client.secret')
|
|
38
|
+
.getMany();
|
|
39
|
+
for (let i = 0; i < entities.length; i++) {
|
|
40
|
+
if (!entities[i].secret) {
|
|
41
|
+
continue;
|
|
42
|
+
}
|
|
43
|
+
if (secret === entities[i].secret) {
|
|
44
|
+
return entities[i];
|
|
45
|
+
}
|
|
34
46
|
}
|
|
35
|
-
return
|
|
47
|
+
return undefined;
|
|
36
48
|
}
|
|
37
49
|
}
|
|
38
|
-
exports.
|
|
50
|
+
exports.ClientRepository = ClientRepository;
|
|
39
51
|
//# sourceMappingURL=repository.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;
|
|
1
|
+
{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAsC;AAEtC,qCAAsD;AACtD,qCAAwC;AAExC,MAAa,gBAAiB,SAAQ,oBAAwB;IAC1D,YAAY,QAAoC;QAC5C,KAAK,CAAC,qBAAY,EAAE,yBAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACnB,QAAgB,EAChB,MAAc,EACd,OAAgB;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;aAC1C,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAEhD,IAAI,IAAA,aAAM,EAAC,QAAQ,CAAC,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE1D,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK;aACvB,SAAS,CAAC,eAAe,CAAC;aAC1B,OAAO,EAAE,CAAC;QAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AA9CD,4CA8CC"}
|
|
@@ -22,7 +22,7 @@ class OpenIDIdentityProviderFlow extends oauth2_1.OAuth2IdentityProviderFlow {
|
|
|
22
22
|
code: code,
|
|
23
23
|
state: state,
|
|
24
24
|
});
|
|
25
|
-
const payload = (0, server_kit_1.
|
|
25
|
+
const payload = (0, server_kit_1.extractTokenPayload)(token.access_token);
|
|
26
26
|
if (typeof payload === 'string') {
|
|
27
27
|
throw core_1.TokenError.payloadInvalid();
|
|
28
28
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAA0C;AAE1C,
|
|
1
|
+
{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAA0C;AAE1C,mDAAyD;AACzD,+CAAsD;AAGtD,qCAAsD;AAEtD,MAAa,0BAA2B,SAAQ,mCAA0B;IACtE,4FAA4F;IAC5F,YAAY,OAA0C;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,gCAAmB,EAAC,KAAK,CAAC,YAAY,CAAgC,CAAC;QAEvF,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,iBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACF,OAAO,CAAC,kBAAkB;gBAC1B,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG;aACd;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;SACpD,CAAC;IACN,CAAC;CACJ;AA/BD,gEA+BC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
/// <reference types="node" />
|
|
2
1
|
import type { TokenSignOptions } from '@authup/server-kit';
|
|
2
|
+
import type { OAuth2OpenIdTokenPayload, OAuth2TokenPayload } from '@authup/core';
|
|
3
3
|
import type { KeyEntity } from '../entity';
|
|
4
|
-
export declare function signOAuth2TokenWithKey(payload:
|
|
4
|
+
export declare function signOAuth2TokenWithKey(payload: Partial<OAuth2TokenPayload | OAuth2OpenIdTokenPayload>, entity: KeyEntity, options?: Omit<TokenSignOptions, 'type' | 'algorithm' | 'keyPair' | 'secret'>): Promise<string>;
|
|
5
5
|
//# sourceMappingURL=sign.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../src/domains/key/utils/sign.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../src/domains/key/utils/sign.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACsE,gBAAgB,EACjG,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,wBAAsB,sBAAsB,CACxC,OAAO,EAAE,OAAO,CAAC,kBAAkB,GAAG,wBAAwB,CAAC,EAC/D,MAAM,EAAE,SAAS,EACjB,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC,GAC7E,OAAO,CAAC,MAAM,CAAC,CAuClB"}
|
|
@@ -13,7 +13,18 @@ async function signOAuth2TokenWithKey(payload, entity, options) {
|
|
|
13
13
|
if (entity.type === core_1.KeyType.OCT) {
|
|
14
14
|
return (0, server_kit_1.signToken)(payload, {
|
|
15
15
|
type: core_1.KeyType.OCT,
|
|
16
|
-
|
|
16
|
+
key: Buffer.from(entity.decryption_key, 'base64'),
|
|
17
|
+
...options,
|
|
18
|
+
});
|
|
19
|
+
}
|
|
20
|
+
if (entity.type === core_1.KeyType.EC) {
|
|
21
|
+
return (0, server_kit_1.signToken)(payload, {
|
|
22
|
+
type: entity.type,
|
|
23
|
+
keyPair: {
|
|
24
|
+
publicKey: (0, core_1.wrapPublicKeyPem)(entity.encryption_key),
|
|
25
|
+
privateKey: (0, core_1.wrapPrivateKeyPem)(entity.decryption_key),
|
|
26
|
+
},
|
|
27
|
+
algorithm: entity.signature_algorithm,
|
|
17
28
|
...options,
|
|
18
29
|
});
|
|
19
30
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../src/domains/key/utils/sign.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;
|
|
1
|
+
{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../src/domains/key/utils/sign.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAKH,mDAA+C;AAC/C,uCAA4E;AAIrE,KAAK,UAAU,sBAAsB,CACxC,OAA+D,EAC/D,MAAiB,EACjB,OAA6E;IAE7E,IAAI,MAAM,CAAC,IAAI,KAAK,cAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAA,sBAAS,EACZ,OAAO,EACP;YACI,IAAI,EAAE,cAAO,CAAC,GAAG;YACjB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC;YACjD,GAAG,OAAO;SACiB,CAClC,CAAC;IACN,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,cAAO,CAAC,EAAE,EAAE,CAAC;QAC7B,OAAO,IAAA,sBAAS,EACZ,OAAO,EACP;YACI,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE;gBACL,SAAS,EAAE,IAAA,uBAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;gBAClD,UAAU,EAAE,IAAA,wBAAiB,EAAC,MAAM,CAAC,cAAc,CAAC;aACvD;YACD,SAAS,EAAE,MAAM,CAAC,mBAAuC;YACzD,GAAG,OAAO;SACgB,CACjC,CAAC;IACN,CAAC;IAED,OAAO,IAAA,sBAAS,EACZ,OAAO,EACP;QACI,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE;YACL,SAAS,EAAE,IAAA,uBAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;YAClD,UAAU,EAAE,IAAA,wBAAiB,EAAC,MAAM,CAAC,cAAc,CAAC;SACvD;QACD,SAAS,EAAE,MAAM,CAAC,mBAAwC;QAC1D,GAAG,OAAO;KACiB,CAClC,CAAC;AACN,CAAC;AA3CD,wDA2CC"}
|
|
@@ -1,5 +1,4 @@
|
|
|
1
|
-
import type { TokenVerifyOptions } from '@authup/server-kit';
|
|
2
1
|
import type { OAuth2TokenPayload } from '@authup/core';
|
|
3
2
|
import type { KeyEntity } from '../entity';
|
|
4
|
-
export declare function verifyOAuth2TokenWithKey(token: string, entity: KeyEntity
|
|
3
|
+
export declare function verifyOAuth2TokenWithKey(token: string, entity: KeyEntity): Promise<OAuth2TokenPayload>;
|
|
5
4
|
//# sourceMappingURL=verify.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../src/domains/key/utils/verify.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../src/domains/key/utils/verify.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,wBAAsB,wBAAwB,CAC1C,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,SAAS,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAsB9B"}
|
|
@@ -9,22 +9,20 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
9
9
|
exports.verifyOAuth2TokenWithKey = void 0;
|
|
10
10
|
const server_kit_1 = require("@authup/server-kit");
|
|
11
11
|
const core_1 = require("@authup/core");
|
|
12
|
-
async function verifyOAuth2TokenWithKey(token, entity
|
|
12
|
+
async function verifyOAuth2TokenWithKey(token, entity) {
|
|
13
13
|
if (entity.type === core_1.KeyType.OCT) {
|
|
14
|
-
return
|
|
14
|
+
return (0, server_kit_1.verifyToken)(token, {
|
|
15
15
|
type: core_1.KeyType.OCT,
|
|
16
|
-
|
|
17
|
-
...options,
|
|
16
|
+
key: Buffer.from(entity.decryption_key, 'base64'),
|
|
18
17
|
});
|
|
19
18
|
}
|
|
20
|
-
return
|
|
19
|
+
return (0, server_kit_1.verifyToken)(token, {
|
|
21
20
|
type: entity.type,
|
|
22
21
|
keyPair: {
|
|
23
22
|
publicKey: (0, core_1.wrapPublicKeyPem)(entity.encryption_key),
|
|
24
23
|
privateKey: (0, core_1.wrapPrivateKeyPem)(entity.decryption_key),
|
|
25
24
|
},
|
|
26
|
-
...(entity.signature_algorithm ? { algorithms: [entity.signature_algorithm] } :
|
|
27
|
-
...options,
|
|
25
|
+
...(entity.signature_algorithm ? { algorithms: [entity.signature_algorithm] } : []),
|
|
28
26
|
});
|
|
29
27
|
}
|
|
30
28
|
exports.verifyOAuth2TokenWithKey = verifyOAuth2TokenWithKey;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../src/domains/key/utils/verify.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,mDAAiD;AAEjD,uCAEsB;AAGf,KAAK,UAAU,wBAAwB,CAC1C,KAAa,EACb,MAAiB
|
|
1
|
+
{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../src/domains/key/utils/verify.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,mDAAiD;AAEjD,uCAEsB;AAGf,KAAK,UAAU,wBAAwB,CAC1C,KAAa,EACb,MAAiB;IAEjB,IAAI,MAAM,CAAC,IAAI,KAAK,cAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAA,wBAAW,EACd,KAAK,EACL;YACI,IAAI,EAAE,cAAO,CAAC,GAAG;YACjB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC;SACpD,CACJ,CAAC;IACN,CAAC;IAED,OAAO,IAAA,wBAAW,EACd,KAAK,EACL;QACI,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE;YACL,SAAS,EAAE,IAAA,uBAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;YAClD,UAAU,EAAE,IAAA,wBAAiB,EAAC,MAAM,CAAC,cAAc,CAAC;SACvD;QACD,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAC1B,CAAC;AACN,CAAC;AAzBD,4DAyBC"}
|
|
@@ -1,22 +1,24 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { Ability, Robot } from '@authup/core';
|
|
2
2
|
import type { DataSource, EntityManager } from 'typeorm';
|
|
3
3
|
import { Repository } from 'typeorm';
|
|
4
4
|
import { RobotEntity } from './entity';
|
|
5
5
|
export declare class RobotRepository extends Repository<RobotEntity> {
|
|
6
6
|
constructor(instance: DataSource | EntityManager);
|
|
7
|
-
getOwnedPermissions(id: Robot['id']): Promise<
|
|
8
|
-
getSelfOwnedPermissions(id: string): Promise<
|
|
7
|
+
getOwnedPermissions(id: Robot['id']): Promise<Ability[]>;
|
|
8
|
+
getSelfOwnedPermissions(id: string): Promise<Ability[]>;
|
|
9
9
|
/**
|
|
10
|
-
* Verify a client by id and secret.
|
|
10
|
+
* Verify a client by id/name and secret.
|
|
11
11
|
*
|
|
12
|
-
* @param
|
|
12
|
+
* @param idOrName
|
|
13
13
|
* @param secret
|
|
14
|
+
* @param realmId
|
|
14
15
|
*/
|
|
15
|
-
verifyCredentials(
|
|
16
|
+
verifyCredentials(idOrName: string, secret: string, realmId?: string): Promise<RobotEntity | undefined>;
|
|
16
17
|
createWithSecret(data: Partial<Robot>): Promise<{
|
|
17
18
|
entity: RobotEntity;
|
|
18
19
|
secret: string;
|
|
19
20
|
}>;
|
|
20
21
|
hashSecret(secret: string): Promise<string>;
|
|
22
|
+
verifySecret(secret: string, secretHashed: string): Promise<boolean>;
|
|
21
23
|
}
|
|
22
24
|
//# sourceMappingURL=repository.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/robot/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,
|
|
1
|
+
{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/robot/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,OAAO,EAAE,KAAK,EAEjB,MAAM,cAAc,CAAC;AAQtB,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAmB,UAAU,EAAE,MAAM,SAAS,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAKvC,qBAAa,eAAgB,SAAQ,UAAU,CAAC,WAAW,CAAC;gBAC5C,QAAQ,EAAE,UAAU,GAAG,aAAa;IAI1C,mBAAmB,CACrB,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GACf,OAAO,CAAC,OAAO,EAAE,CAAC;IA8BhB,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IA2B9D;;;;;;OAMG;IACG,iBAAiB,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAgC9B,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAI,OAAO,CAAC;QACnD,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,EAAE,MAAM,CAAA;KACjB,CAAC;IAYI,UAAU,CAAC,MAAM,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;IAI5C,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAI,OAAO,CAAC,OAAO,CAAC;CAG9E"}
|
|
@@ -63,31 +63,42 @@ class RobotRepository extends typeorm_1.Repository {
|
|
|
63
63
|
});
|
|
64
64
|
const result = [];
|
|
65
65
|
for (let i = 0; i < entities.length; i++) {
|
|
66
|
-
result.push((0, core_1.
|
|
66
|
+
result.push((0, core_1.buildAbility)(entities[i]));
|
|
67
67
|
}
|
|
68
68
|
return result;
|
|
69
69
|
}
|
|
70
70
|
/**
|
|
71
|
-
* Verify a client by id and secret.
|
|
71
|
+
* Verify a client by id/name and secret.
|
|
72
72
|
*
|
|
73
|
-
* @param
|
|
73
|
+
* @param idOrName
|
|
74
74
|
* @param secret
|
|
75
|
+
* @param realmId
|
|
75
76
|
*/
|
|
76
|
-
async verifyCredentials(
|
|
77
|
-
const
|
|
78
|
-
.
|
|
79
|
-
|
|
80
|
-
.
|
|
81
|
-
.getOne();
|
|
82
|
-
if (!entity ||
|
|
83
|
-
!entity.secret) {
|
|
84
|
-
return undefined;
|
|
77
|
+
async verifyCredentials(idOrName, secret, realmId) {
|
|
78
|
+
const query = this.createQueryBuilder('robot')
|
|
79
|
+
.leftJoinAndSelect('robot.realm', 'realm');
|
|
80
|
+
if ((0, core_1.isUUID)(idOrName)) {
|
|
81
|
+
query.where('robot.id = :id', { id: idOrName });
|
|
85
82
|
}
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
83
|
+
else {
|
|
84
|
+
query.where('robot.name LIKE :name', { name: idOrName });
|
|
85
|
+
if (realmId) {
|
|
86
|
+
query.andWhere('robot.realm_id = :realmId', { realmId });
|
|
87
|
+
}
|
|
89
88
|
}
|
|
90
|
-
|
|
89
|
+
const entities = await query
|
|
90
|
+
.addSelect('robot.secret')
|
|
91
|
+
.getMany();
|
|
92
|
+
for (let i = 0; i < entities.length; i++) {
|
|
93
|
+
if (!entities[i].secret) {
|
|
94
|
+
continue;
|
|
95
|
+
}
|
|
96
|
+
const verified = await this.verifySecret(secret, entities[i].secret);
|
|
97
|
+
if (verified) {
|
|
98
|
+
return entities[i];
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
return undefined;
|
|
91
102
|
}
|
|
92
103
|
async createWithSecret(data) {
|
|
93
104
|
const entity = this.create(data);
|
|
@@ -101,6 +112,9 @@ class RobotRepository extends typeorm_1.Repository {
|
|
|
101
112
|
async hashSecret(secret) {
|
|
102
113
|
return (0, server_kit_1.hash)(secret);
|
|
103
114
|
}
|
|
115
|
+
async verifySecret(secret, secretHashed) {
|
|
116
|
+
return (0, server_kit_1.compare)(secret, secretHashed);
|
|
117
|
+
}
|
|
104
118
|
}
|
|
105
119
|
exports.RobotRepository = RobotRepository;
|
|
106
120
|
//# sourceMappingURL=repository.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/domains/robot/repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAMH,
|
|
1
|
+
{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/domains/robot/repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAMH,uCAIsB;AAEtB,mDAAmD;AAEnD,qCAAsD;AACtD,qDAA+C;AAC/C,kCAAyC;AACzC,qCAAuC;AACvC,8CAAgD;AAChD,0DAA4D;AAC5D,wDAAuD;AAEvD,MAAa,eAAgB,SAAQ,oBAAuB;IACxD,YAAY,QAAoC;QAC5C,KAAK,CAAC,oBAAW,EAAE,yBAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,EAAe;QAEf,MAAM,WAAW,GAAe,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO;aAC3B,aAAa,CAAC,4BAAe,CAAC;aAC9B,IAAI,CAAC;YACF,KAAK,EAAE;gBACH,QAAQ,EAAE,EAAE;aACf;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,uBAAW,CAAC,iBAAiB;oBACrC,EAAE;iBACL,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB;SACJ,CAAC,CAAC;QAEP,MAAM,OAAO,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAExE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,qBAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,cAAc,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7E,OAAO,WAAW,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,EAAU;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,wCAAqB,CAAC,CAAC;QAErE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE;gBACH,QAAQ,EAAE,EAAE;aACf;YACD,SAAS,EAAE;gBACP,UAAU,EAAE,IAAI;aACnB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,uBAAW,CAAC,uBAAuB;oBAC3C,EAAE;iBACL,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAA,mBAAY,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACnB,QAAgB,EAChB,MAAc,EACd,OAAgB;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;aACzC,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAE/C,IAAI,IAAA,aAAM,EAAC,QAAQ,CAAC,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEzD,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,CAAC,QAAQ,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK;aACvB,SAAS,CAAC,cAAc,CAAC;aACzB,OAAO,EAAE,CAAC;QAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACrE,IAAI,QAAQ,EAAE,CAAC;gBACX,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAoB;QAIvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAA,mBAAY,EAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE9C,OAAO;YACH,MAAM;YACN,MAAM;SACT,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC3B,OAAO,IAAA,iBAAI,EAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,YAAoB;QACnD,OAAO,IAAA,oBAAO,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,CAAC;CACJ;AAjID,0CAiIC"}
|
|
@@ -27,7 +27,7 @@ async function saveRobotCredentialsToVault(entity) {
|
|
|
27
27
|
}
|
|
28
28
|
const client = (0, vault_1.useClient)();
|
|
29
29
|
try {
|
|
30
|
-
await client.keyValueV1.create('robots', entity.name, {
|
|
30
|
+
await client.keyValueV1.create('robots', entity.name.toLowerCase(), {
|
|
31
31
|
id: entity.id,
|
|
32
32
|
secret: entity.secret,
|
|
33
33
|
});
|
|
@@ -48,7 +48,7 @@ async function removeRobotCredentialsFromVault(entity) {
|
|
|
48
48
|
}
|
|
49
49
|
const client = (0, vault_1.useClient)();
|
|
50
50
|
try {
|
|
51
|
-
await client.keyValueV1.delete('robots', entity.name);
|
|
51
|
+
await client.keyValueV1.delete('robots', entity.name.toLowerCase());
|
|
52
52
|
}
|
|
53
53
|
catch (e) {
|
|
54
54
|
if ((0, vault_1.isClientErrorWithStatusCode)(e, 404)) {
|
|
@@ -64,7 +64,7 @@ async function findRobotCredentialsInVault(entity) {
|
|
|
64
64
|
}
|
|
65
65
|
const client = (0, vault_1.useClient)();
|
|
66
66
|
try {
|
|
67
|
-
const response = await client.keyValueV1.getOne('robots', entity.name);
|
|
67
|
+
const response = await client.keyValueV1.getOne('robots', entity.name.toLowerCase());
|
|
68
68
|
if (response && response.data) {
|
|
69
69
|
return response.data;
|
|
70
70
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/domains/robot/vault.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,wCAIsB;AAEf,KAAK,UAAU,sBAAsB;IACxC,IAAI,CAAC,IAAA,iBAAS,GAAE,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAE3B,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CACrB,QAAQ,EACR;QACI,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACL,OAAO,EAAE,CAAC;SACb;KACJ,CACJ,CAAC;AACN,CAAC;AAhBD,wDAgBC;AAEM,KAAK,UAAU,2BAA2B,CAAC,MAA6C;IAC3F,IAAI,CAAC,IAAA,iBAAS,GAAE,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAE3B,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAC1B,QAAQ,EACR,MAAM,CAAC,IAAI,
|
|
1
|
+
{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/domains/robot/vault.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,wCAIsB;AAEf,KAAK,UAAU,sBAAsB;IACxC,IAAI,CAAC,IAAA,iBAAS,GAAE,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAE3B,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CACrB,QAAQ,EACR;QACI,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACL,OAAO,EAAE,CAAC;SACb;KACJ,CACJ,CAAC;AACN,CAAC;AAhBD,wDAgBC;AAEM,KAAK,UAAU,2BAA2B,CAAC,MAA6C;IAC3F,IAAI,CAAC,IAAA,iBAAS,GAAE,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAE3B,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAC1B,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EACzB;YACI,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;SACxB,CACJ,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,IAAA,mCAA2B,EAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,sBAAsB,EAAE,CAAC;YAC/B,MAAM,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO;QACX,CAAC;QAED,MAAM,CAAC,CAAC;IACZ,CAAC;AACL,CAAC;AAzBD,kEAyBC;AAEM,KAAK,UAAU,+BAA+B,CAAC,MAA2B;IAC7E,IAAI,CAAC,IAAA,iBAAS,GAAE,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAE3B,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAC1B,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAC5B,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,IAAA,mCAA2B,EAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO;QACX,CAAC;QAED,MAAM,CAAC,CAAC;IACZ,CAAC;AACL,CAAC;AAnBD,0EAmBC;AAEM,KAAK,UAAU,2BAA2B,CAC7C,MAA2B;IAE3B,IAAI,CAAC,IAAA,iBAAS,GAAE,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAE3B,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAC3C,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAC5B,CAAC;QACF,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC,IAAa,CAAC;QAClC,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,IAAA,mCAA2B,EAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,CAAC,CAAC;IACZ,CAAC;AACL,CAAC;AA1BD,kEA0BC"}
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
import type { DataSource, EntityManager } from 'typeorm';
|
|
2
2
|
import { Repository } from 'typeorm';
|
|
3
|
-
import type {
|
|
3
|
+
import type { Ability, Role } from '@authup/core';
|
|
4
4
|
import { RoleEntity } from './entity';
|
|
5
5
|
export declare class RoleRepository extends Repository<RoleEntity> {
|
|
6
6
|
constructor(instance: DataSource | EntityManager);
|
|
7
|
-
getOwnedPermissionsByMany(ids: Role['id'][]): Promise<
|
|
8
|
-
getOwnedPermissions(id: Role['id']): Promise<
|
|
7
|
+
getOwnedPermissionsByMany(ids: Role['id'][]): Promise<Ability[]>;
|
|
8
|
+
getOwnedPermissions(id: Role['id']): Promise<Ability[]>;
|
|
9
9
|
}
|
|
10
10
|
//# sourceMappingURL=repository.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/role/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAmB,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EACR,
|
|
1
|
+
{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/role/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAmB,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EACR,OAAO,EACP,IAAI,EACP,MAAM,cAAc,CAAC;AAMtB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAItC,qBAAa,cAAe,SAAQ,UAAU,CAAC,UAAU,CAAC;gBAC1C,QAAQ,EAAE,UAAU,GAAG,aAAa;IAI1C,yBAAyB,CAC3B,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GACjB,OAAO,CAAC,OAAO,EAAE,CAAC;IAUhB,mBAAmB,CACrB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GACd,OAAO,CAAC,OAAO,EAAE,CAAC;CA0BzB"}
|
|
@@ -43,7 +43,7 @@ class RoleRepository extends typeorm_1.Repository {
|
|
|
43
43
|
});
|
|
44
44
|
const result = [];
|
|
45
45
|
for (let i = 0; i < entities.length; i++) {
|
|
46
|
-
result.push((0, core_1.
|
|
46
|
+
result.push((0, core_1.buildAbility)(entities[i]));
|
|
47
47
|
}
|
|
48
48
|
return result;
|
|
49
49
|
}
|