@axinom/mosaic-id-guard 0.11.0-rc.3 → 0.11.0

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [0.11.0](https://dev.azure.com/axinom/CMS/_git/Navy/branchCompare?baseVersion=GT@axinom/mosaic-id-guard@0.10.1&targetVersion=GT@axinom/mosaic-id-guard@0.11.0) (2022-02-02)
+
+
+### Features
+
+* add new endpoint to generate Consumer Application token ([79e1123](https://dev.azure.com/axinom/CMS/_git/Navy/commit/79e11239b21bad8876a3ee0c173d0d043b32ab5e))
+* anonymous consumer token WIP ([280a075](https://dev.azure.com/axinom/CMS/_git/Navy/commit/280a075d4da97b24915c6a2c6a71158a1f4c03c5))
+* rebase with master branch ([fe969fa](https://dev.azure.com/axinom/CMS/_git/Navy/commit/fe969fac8a5e64c98174faefd61288907e10eefd))
+* remove additionalGqlOperations from permission definition ([305b448](https://dev.azure.com/axinom/CMS/_git/Navy/commit/305b4487db5292b41cbe6792abbbb4401bb2f9ee))
+* set default ts version ([16ce926](https://dev.azure.com/axinom/CMS/_git/Navy/commit/16ce92627bec279b93f5b21fe6ae830361f201a8))
+
+
+### Bug Fixes
+
+* update unit test for permission ([7b21914](https://dev.azure.com/axinom/CMS/_git/Navy/commit/7b2191419ffc11aec9579b7c2b0057a5c1427424))
+
+
+
 ### [0.10.1](https://dev.azure.com/axinom/CMS/_git/Navy/branchCompare?baseVersion=GT@axinom/mosaic-id-guard@0.10.0&targetVersion=GT@axinom/mosaic-id-guard@0.10.1) (2022-01-19)
 
 **Note:** Version bump only for package @axinom/mosaic-id-guard

package/dist/common/assert-consumer-token-type.d.ts

@@ -0,0 +1,14 @@
+import { AuthenticatedConsumer, AuthenticatedConsumerApplication } from './authenticated-subject.interface';
+/**
+ * Asserts if the passed subject object is of type AuthenticatedConsumer.
+ *
+ * @param subject subject object of type unknown
+ */
+export declare const assertAuthenticatedConsumer: (subject: unknown) => asserts subject is AuthenticatedConsumer;
+/**
+ * Asserts if the passed subject object is of type AuthenticatedConsumerApplication.
+ *
+ * @param subject subject object of type unknown
+ */
+export declare const assertConsumerApplication: (subject: unknown) => asserts subject is AuthenticatedConsumerApplication;
+//# sourceMappingURL=assert-consumer-token-type.d.ts.map

package/dist/common/assert-consumer-token-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-consumer-token-type.d.ts","sourceRoot":"","sources":["../../src/common/assert-consumer-token-type.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,qBAAqB,EACrB,gCAAgC,EACjC,MAAM,mCAAmC,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,CACxC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,OAAO,IAAI,qBASvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,CACtC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,OAAO,IAAI,gCASvB,CAAC"}

package/dist/common/assert-consumer-token-type.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertConsumerApplication = exports.assertAuthenticatedConsumer = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
+const _1 = require(".");
+/**
+ * Asserts if the passed subject object is of type AuthenticatedConsumer.
+ *
+ * @param subject subject object of type unknown
+ */
+const assertAuthenticatedConsumer = (subject) => {
+    if (subject.subjectType !==
+        _1.SubjectType.ConsumerAccount) {
+        throw new mosaic_service_common_1.GeneralError(`The token is not an Authenticated Consumer`);
+    }
+};
+exports.assertAuthenticatedConsumer = assertAuthenticatedConsumer;
+/**
+ * Asserts if the passed subject object is of type AuthenticatedConsumerApplication.
+ *
+ * @param subject subject object of type unknown
+ */
+const assertConsumerApplication = (subject) => {
+    if (subject.subjectType !==
+        _1.SubjectType.ConsumerApplication) {
+        throw new mosaic_service_common_1.GeneralError(`The token is not an Consumer Application`);
+    }
+};
+exports.assertConsumerApplication = assertConsumerApplication;
+//# sourceMappingURL=assert-consumer-token-type.js.map

package/dist/common/assert-consumer-token-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-consumer-token-type.js","sourceRoot":"","sources":["../../src/common/assert-consumer-token-type.ts"],"names":[],"mappings":";;;AAAA,yEAA6D;AAC7D,wBAAgC;AAMhC;;;;GAIG;AACI,MAAM,2BAA2B,GAEQ,CAC9C,OAAgB,EAC0B,EAAE;IAC5C,IACG,OAAiC,CAAC,WAAW;QAC9C,cAAW,CAAC,eAAe,EAC3B;QACA,MAAM,IAAI,oCAAY,CAAC,4CAA4C,CAAC,CAAC;KACtE;AACH,CAAC,CAAC;AAXW,QAAA,2BAA2B,+BAWtC;AAEF;;;;GAIG;AACI,MAAM,yBAAyB,GAEqB,CACzD,OAAgB,EACqC,EAAE;IACvD,IACG,OAA4C,CAAC,WAAW;QACzD,cAAW,CAAC,mBAAmB,EAC/B;QACA,MAAM,IAAI,oCAAY,CAAC,0CAA0C,CAAC,CAAC;KACpE;AACH,CAAC,CAAC;AAXW,QAAA,yBAAyB,6BAWpC"}

package/dist/common/authenticated-subject.interface.d.ts

@@ -39,11 +39,17 @@ export interface AuthenticatedManagementSubject extends GenericAuthenticatedSubj
     [key: string]: unknown;
 }
 /**
- * Represents an Authenticated Consumer, created to be used in Consumer Applications.
+ * Represents an authenticated Consumer Application created to access consumer-facing APIs for a specific tenant + environment + application.
  * This will be created using a token issued by the ax-user-service.
  */
-export interface AuthenticatedConsumer extends GenericAuthenticatedSubject {
+export interface AuthenticatedConsumerApplication extends GenericAuthenticatedSubject {
     applicationId: string;
+}
+/**
+ * Represents an Authenticated Consumer, created to be used in Consumer Applications.
+ * This will be created using a token issued by the ax-user-service.
+ */
+export interface AuthenticatedConsumer extends AuthenticatedConsumerApplication {
     sessionId: string;
     profileId: string;
     extensions: unknown;

package/dist/common/authenticated-subject.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticated-subject.interface.d.ts","sourceRoot":"","sources":["../../src/common/authenticated-subject.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qEAAqE;AACrE,UAAU,2BAA4B,SAAQ,eAAe;IAC3D,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IAEZ,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IAEZ,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IAEZ,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC;IAEZ,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IAEb,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,0BAA0B;IAC1B,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,8BACf,SAAQ,2BAA2B;IACnC,0CAA0C;IAC1C,WAAW,EAAE;QACX,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KACzB,CAAC;IAEF,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,2BAA2B;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;CACrB"}
+{"version":3,"file":"authenticated-subject.interface.d.ts","sourceRoot":"","sources":["../../src/common/authenticated-subject.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qEAAqE;AACrE,UAAU,2BAA4B,SAAQ,eAAe;IAC3D,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IAEZ,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IAEZ,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IAEZ,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC;IAEZ,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IAEb,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,0BAA0B;IAC1B,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,8BACf,SAAQ,2BAA2B;IACnC,0CAA0C;IAC1C,WAAW,EAAE;QACX,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KACzB,CAAC;IAEF,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,gCACf,SAAQ,2BAA2B;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,qBACf,SAAQ,gCAAgC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;CACrB"}

package/dist/common/authentication-request-context.interface.d.ts

@@ -1,5 +1,5 @@
 import { Request } from 'express';
-import { AuthenticatedConsumer, AuthenticatedManagementSubject } from '.';
+import { AuthenticatedConsumer, AuthenticatedConsumerApplication, AuthenticatedManagementSubject } from '.';
 import { AxGuardErrorInfo } from './guard-error';
 /** Authenticated Subject and error information for Management Tokens */
 export interface ManagementAuthenticationContext {
@@ -8,10 +8,10 @@ export interface ManagementAuthenticationContext {
     /** Authentication error information */
     authErrorInfo?: AxGuardErrorInfo;
 }
-/** Authenticated Consumer and error information for Consumer Tokens */
+/** Authenticated Consumer/Application and error information for Consumer Tokens */
 export interface ConsumerAuthenticationContext {
     /** Authenticated End User information */
-    subject?: AuthenticatedConsumer;
+    subject?: AuthenticatedConsumer | AuthenticatedConsumerApplication;
     /** Authentication error information */
     authErrorInfo?: AxGuardErrorInfo;
 }

package/dist/common/authentication-request-context.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication-request-context.interface.d.ts","sourceRoot":"","sources":["../../src/common/authentication-request-context.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,GAAG,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,wEAAwE;AACxE,MAAM,WAAW,+BAA+B;IAC9C,mDAAmD;IACnD,OAAO,CAAC,EAAE,8BAA8B,CAAC;IAEzC,uCAAuC;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,uEAAuE;AACvE,MAAM,WAAW,6BAA6B;IAC5C,yCAAyC;IACzC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC,uCAAuC;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,8DAA8D;AAC9D,MAAM,WAAW,8BAA+B,SAAQ,OAAO;IAC7D,kDAAkD;IAClD,WAAW,EAAE,+BAA+B,CAAC;CAC9C;AAED,4DAA4D;AAC5D,MAAM,WAAW,4BAA6B,SAAQ,OAAO;IAC3D,kDAAkD;IAClD,WAAW,EAAE,6BAA6B,CAAC;CAC5C"}
+{"version":3,"file":"authentication-request-context.interface.d.ts","sourceRoot":"","sources":["../../src/common/authentication-request-context.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,wEAAwE;AACxE,MAAM,WAAW,+BAA+B;IAC9C,mDAAmD;IACnD,OAAO,CAAC,EAAE,8BAA8B,CAAC;IAEzC,uCAAuC;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,mFAAmF;AACnF,MAAM,WAAW,6BAA6B;IAC5C,yCAAyC;IACzC,OAAO,CAAC,EAAE,qBAAqB,GAAG,gCAAgC,CAAC;IAEnE,uCAAuC;IACvC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,8DAA8D;AAC9D,MAAM,WAAW,8BAA+B,SAAQ,OAAO;IAC7D,kDAAkD;IAClD,WAAW,EAAE,+BAA+B,CAAC;CAC9C;AAED,4DAA4D;AAC5D,MAAM,WAAW,4BAA6B,SAAQ,OAAO;IAC3D,kDAAkD;IAClD,WAAW,EAAE,6BAA6B,CAAC;CAC5C"}

package/dist/common/error-code.enum.d.ts

@@ -7,6 +7,7 @@ export declare enum ErrorCode {
     JwksError = "JWKS_ERROR",
     AccessTokenVerificationFailed = "ACCESS_TOKEN_VERIFICATION_FAILED",
     IdentityServiceNotAccessible = "IDENTITY_SERVICE_NOT_ACCESSIBLE",
+    UserServiceNotAccessible = "USER_SERVICE_NOT_ACCESSIBLE",
     AuthConfigInvalid = "AUTH_CONFIG_INVALID"
 }
 //# sourceMappingURL=error-code.enum.d.ts.map

package/dist/common/error-code.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-code.enum.d.ts","sourceRoot":"","sources":["../../src/common/error-code.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,SAAS;IACnB,mBAAmB,0BAA0B;IAC7C,kBAAkB,yBAAyB;IAC3C,kBAAkB,yBAAyB;IAC3C,iBAAiB,wBAAwB;IACzC,kBAAkB,0BAA0B;IAC5C,SAAS,eAAe;IACxB,6BAA6B,qCAAqC;IAClE,4BAA4B,oCAAoC;IAChE,iBAAiB,wBAAwB;CAC1C"}
+{"version":3,"file":"error-code.enum.d.ts","sourceRoot":"","sources":["../../src/common/error-code.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,SAAS;IACnB,mBAAmB,0BAA0B;IAC7C,kBAAkB,yBAAyB;IAC3C,kBAAkB,yBAAyB;IAC3C,iBAAiB,wBAAwB;IACzC,kBAAkB,0BAA0B;IAC5C,SAAS,eAAe;IACxB,6BAA6B,qCAAqC;IAClE,4BAA4B,oCAAoC;IAChE,wBAAwB,gCAAgC;IACxD,iBAAiB,wBAAwB;CAC1C"}

package/dist/common/error-code.enum.js

@@ -11,6 +11,7 @@ var ErrorCode;
     ErrorCode["JwksError"] = "JWKS_ERROR";
     ErrorCode["AccessTokenVerificationFailed"] = "ACCESS_TOKEN_VERIFICATION_FAILED";
     ErrorCode["IdentityServiceNotAccessible"] = "IDENTITY_SERVICE_NOT_ACCESSIBLE";
+    ErrorCode["UserServiceNotAccessible"] = "USER_SERVICE_NOT_ACCESSIBLE";
     ErrorCode["AuthConfigInvalid"] = "AUTH_CONFIG_INVALID";
 })(ErrorCode = exports.ErrorCode || (exports.ErrorCode = {}));
 //# sourceMappingURL=error-code.enum.js.map

package/dist/common/error-code.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-code.enum.js","sourceRoot":"","sources":["../../src/common/error-code.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAUX;AAVD,WAAY,SAAS;IACnB,0DAA6C,CAAA;IAC7C,wDAA2C,CAAA;IAC3C,wDAA2C,CAAA;IAC3C,sDAAyC,CAAA;IACzC,yDAA4C,CAAA;IAC5C,qCAAwB,CAAA;IACxB,+EAAkE,CAAA;IAClE,6EAAgE,CAAA;IAChE,sDAAyC,CAAA;AAC3C,CAAC,EAVW,SAAS,GAAT,iBAAS,KAAT,iBAAS,QAUpB"}
+{"version":3,"file":"error-code.enum.js","sourceRoot":"","sources":["../../src/common/error-code.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAWX;AAXD,WAAY,SAAS;IACnB,0DAA6C,CAAA;IAC7C,wDAA2C,CAAA;IAC3C,wDAA2C,CAAA;IAC3C,sDAAyC,CAAA;IACzC,yDAA4C,CAAA;IAC5C,qCAAwB,CAAA;IACxB,+EAAkE,CAAA;IAClE,6EAAgE,CAAA;IAChE,qEAAwD,CAAA;IACxD,sDAAyC,CAAA;AAC3C,CAAC,EAXW,SAAS,GAAT,iBAAS,KAAT,iBAAS,QAWpB"}

package/dist/common/get-authenticated-subject.d.ts

@@ -1,4 +1,4 @@
-import { AuthenticatedConsumer, AuthenticatedManagementSubject } from '.';
+import { AuthenticatedConsumer, AuthenticatedConsumerApplication, AuthenticatedManagementSubject } from '.';
 import { AuthenticationConfig } from './authentication-config.interface';
 /**
  * Parses a JWT token to produce an `AuthenticatedManagementSubject`.
@@ -10,12 +10,12 @@ import { AuthenticationConfig } from './authentication-config.interface';
  */
 export declare const getAuthenticatedManagementSubject: (token: string, authParams: string | AuthenticationConfig) => Promise<AuthenticatedManagementSubject>;
 /**
- * Parses a JWT token to produce an `AuthenticatedConsumer`.
+ * Parses a JWT token to produce an `AuthenticatedConsumer` or an `AuthenticatedConsumerApplication`.
  * This function is intended to be used by any service which works with Consumer Applications.
  *
  * @param {string} token JWT token without `Bearer ` prefix.
  * @param {string | AuthenticationConfig} authParams This could be either a string containing the Auth Endpoint for the User Service or an instance of `AuthenticationConfig`.
- * @returns {Promise<AuthenticatedConsumer>} AuthenticatedConsumer
+ * @returns {Promise<AuthenticatedConsumer | AuthenticatedConsumerApplication>} AuthenticatedConsumer/AuthenticatedConsumerApplication
  */
-export declare const getAuthenticatedConsumer: (token: string, authParams: string | AuthenticationConfig) => Promise<AuthenticatedConsumer>;
+export declare const getAuthenticatedConsumer: (token: string, authParams: string | AuthenticationConfig) => Promise<AuthenticatedConsumer | AuthenticatedConsumerApplication>;
 //# sourceMappingURL=get-authenticated-subject.d.ts.map

package/dist/common/get-authenticated-subject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-authenticated-subject.d.ts","sourceRoot":"","sources":["../../src/common/get-authenticated-subject.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAE/B,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAOzE;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,UACrC,MAAM,cACD,MAAM,GAAG,oBAAoB,KACxC,QAAQ,8BAA8B,CAsDxC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,UAC5B,MAAM,cACD,MAAM,GAAG,oBAAoB,KACxC,QAAQ,qBAAqB,CA0C/B,CAAC"}
+{"version":3,"file":"get-authenticated-subject.d.ts","sourceRoot":"","sources":["../../src/common/get-authenticated-subject.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EACrB,gCAAgC,EAChC,8BAA8B,EAE/B,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAOzE;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,UACrC,MAAM,cACD,MAAM,GAAG,oBAAoB,KACxC,QAAQ,8BAA8B,CAsDxC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,UAC5B,MAAM,cACD,MAAM,GAAG,oBAAoB,KACxC,QAAQ,qBAAqB,GAAG,gCAAgC,CAkDlE,CAAC"}

package/dist/common/get-authenticated-subject.js

@@ -57,12 +57,12 @@ const getAuthenticatedManagementSubject = async (token, authParams) => {
 };
 exports.getAuthenticatedManagementSubject = getAuthenticatedManagementSubject;
 /**
- * Parses a JWT token to produce an `AuthenticatedConsumer`.
+ * Parses a JWT token to produce an `AuthenticatedConsumer` or an `AuthenticatedConsumerApplication`.
  * This function is intended to be used by any service which works with Consumer Applications.
  *
  * @param {string} token JWT token without `Bearer ` prefix.
  * @param {string | AuthenticationConfig} authParams This could be either a string containing the Auth Endpoint for the User Service or an instance of `AuthenticationConfig`.
- * @returns {Promise<AuthenticatedConsumer>} AuthenticatedConsumer
+ * @returns {Promise<AuthenticatedConsumer | AuthenticatedConsumerApplication>} AuthenticatedConsumer/AuthenticatedConsumerApplication
  */
 const getAuthenticatedConsumer = async (token, authParams) => {
     let tenantId = '';
@@ -72,8 +72,7 @@ const getAuthenticatedConsumer = async (token, authParams) => {
     const issuer = decoded.iss;
     tenantId = decoded.tenantId;
     environmentId = decoded.environmentId;
-    const applicationId = jwt.decode(token)
-        .applicationId;
+    const applicationId = decoded.applicationId;
     // If token is not issued by the User Service, the jwks URI will not be set, and the verification will fail.
     if (issuer === jwt_verify_options_1.TOKEN_ISSUER_USER_SERVICE) {
         if (typeof authParams === 'string') {
@@ -89,8 +88,14 @@ const getAuthenticatedConsumer = async (token, authParams) => {
             jwksUri = new URL(`/${tenantId}/${environmentId}/${applicationId}/.well-known/jwks.json`, authParams.authEndpoint).href;
         }
     }
-    // Verify access token using JWKS
-    return (await verifyTokenAndGetAuthenticatedSubject(token, jwksUri, 'CONSUMER'));
+    if (decoded.subjectType === _1.SubjectType.ConsumerApplication) {
+        // Verify access token using JWKS
+        return (await verifyTokenAndGetAuthenticatedSubject(token, jwksUri, 'CONSUMER_APPLICATION'));
+    }
+    else {
+        // Verify access token using JWKS
+        return (await verifyTokenAndGetAuthenticatedSubject(token, jwksUri, 'CONSUMER'));
+    }
 };
 exports.getAuthenticatedConsumer = getAuthenticatedConsumer;
 const verifyTokenAndGetAuthenticatedSubject = async (token, jwksUri, authType) => {
@@ -119,6 +124,9 @@ const verifyTokenAndGetAuthenticatedSubject = async (token, jwksUri, authType) =
             if (authType === 'MANAGEMENT') {
                 resolve(decoded);
             }
+            else if (authType === 'CONSUMER') {
+                resolve(decoded);
+            }
             else {
                 resolve(decoded);
             }

package/dist/common/get-authenticated-subject.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-authenticated-subject.js","sourceRoot":"","sources":["../../src/common/get-authenticated-subject.ts"],"names":[],"mappings":";;;AAAA,yEAAmE;AACnE,oCAAoC;AACpC,iCAAiC;AACjC,wBAIW;AAEX,6DAI8B;AAE9B;;;;;;;GAOG;AACI,MAAM,iCAAiC,GAAG,KAAK,EACpD,KAAa,EACb,UAAyC,EACA,EAAE;IAC3C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE3B,gEAAgE;IAChE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC5B,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,uBAAuB;QACrB,OAAO,CAAC,WAAW,KAAK,cAAW,CAAC,qBAAqB,CAAC;IAE5D,0GAA0G;IAC1G,IAAI,MAAM,KAAK,4CAAuB,EAAE;QACtC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;YAClC,IAAI,uBAAuB,EAAE;gBAC3B,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;aAC9D;iBAAM;gBACL,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,wBAAwB,EACrD,UAAU,CACX,CAAC,IAAI,CAAC;aACR;SACF;aAAM;YACL,6EAA6E;YAC7E,IACE,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,aAAa,CAAC,EAC7C;gBACA,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAC/B,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;aAC1C;YAED,IAAI,uBAAuB,EAAE;gBAC3B,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,YAAY,CAAC;qBACjE,IAAI,CAAC;aACT;iBAAM;gBACL,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,wBAAwB,EACrD,UAAU,CAAC,YAAY,CACxB,CAAC,IAAI,CAAC;aACR;SACF;KACF;IAED,iCAAiC;IACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAmC,CAAC;AACvC,CAAC,CAAC;AAzDW,QAAA,iCAAiC,qCAyD5C;AAEF;;;;;;;GAOG;AACI,MAAM,wBAAwB,GAAG,KAAK,EAC3C,KAAa,EACb,UAAyC,EACT,EAAE;IAClC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAC3B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC5B,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,MAAM,aAAa,GAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAA2B;SAC/D,aAAa,CAAC;IAEjB,4GAA4G;IAC5G,IAAI,MAAM,KAAK,8CAAyB,EAAE;QACxC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;YAClC,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,IAAI,aAAa,wBAAwB,EACtE,UAAU,CACX,CAAC,IAAI,CAAC;SACR;aAAM;YACL,6EAA6E;YAC7E,IACE,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,aAAa,CAAC,EAC7C;gBACA,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAC/B,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;aAC1C;YAED,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,IAAI,aAAa,wBAAwB,EACtE,UAAU,CAAC,YAAY,CACxB,CAAC,IAAI,CAAC;SACR;KACF;IAED,iCAAiC;IACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,KAAK,EACL,OAAO,EACP,UAAU,CACX,CAA0B,CAAC;AAC9B,CAAC,CAAC;AA7CW,QAAA,wBAAwB,4BA6CnC;AAEF,MAAM,qCAAqC,GAAG,KAAK,EACjD,KAAa,EACb,OAAe,EACf,QAAmC,EAC8B,EAAE;IACnE,OAAO,IAAI,OAAO,CAChB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC;YACtB,OAAO;YACP,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE;YAC3B,eAAe,EAAE,GAAG;SACrB,CAAC,CAAC;QAEH,MAAM,YAAY,GAA6B,CAC7C,MAAqB,EACrB,QAAgC,EAC1B,EAAE;;YACR,UAAU,CAAC,aAAa,CACtB,MAAA,MAAM,CAAC,GAAG,mCAAI,8BAA8B,EAC5C,CAAC,KAAmB,EAAE,GAAoB,EAAE,EAAE;gBAC5C,IAAI,KAAK,EAAE;oBACT,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;iBACR;gBACD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACrC,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QAEF,GAAG,CAAC,MAAM,CACR,KAAK,EACL,YAAY,EACZ,IAAA,wCAAmB,GAAE,EACrB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjB,IAAI,KAAK,EAAE;gBACT,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;aACR;YAED,IAAI,QAAQ,KAAK,YAAY,EAAE;gBAC7B,OAAO,CAAC,OAAyC,CAAC,CAAC;aACpD;iBAAM;gBACL,OAAO,CAAC,OAAgC,CAAC,CAAC;aAC3C;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"get-authenticated-subject.js","sourceRoot":"","sources":["../../src/common/get-authenticated-subject.ts"],"names":[],"mappings":";;;AAAA,yEAAmE;AACnE,oCAAoC;AACpC,iCAAiC;AACjC,wBAKW;AAEX,6DAI8B;AAE9B;;;;;;;GAOG;AACI,MAAM,iCAAiC,GAAG,KAAK,EACpD,KAAa,EACb,UAAyC,EACA,EAAE;IAC3C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE3B,gEAAgE;IAChE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC5B,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,uBAAuB;QACrB,OAAO,CAAC,WAAW,KAAK,cAAW,CAAC,qBAAqB,CAAC;IAE5D,0GAA0G;IAC1G,IAAI,MAAM,KAAK,4CAAuB,EAAE;QACtC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;YAClC,IAAI,uBAAuB,EAAE;gBAC3B,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;aAC9D;iBAAM;gBACL,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,wBAAwB,EACrD,UAAU,CACX,CAAC,IAAI,CAAC;aACR;SACF;aAAM;YACL,6EAA6E;YAC7E,IACE,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,aAAa,CAAC,EAC7C;gBACA,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAC/B,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;aAC1C;YAED,IAAI,uBAAuB,EAAE;gBAC3B,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,YAAY,CAAC;qBACjE,IAAI,CAAC;aACT;iBAAM;gBACL,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,wBAAwB,EACrD,UAAU,CAAC,YAAY,CACxB,CAAC,IAAI,CAAC;aACR;SACF;KACF;IAED,iCAAiC;IACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAmC,CAAC;AACvC,CAAC,CAAC;AAzDW,QAAA,iCAAiC,qCAyD5C;AAEF;;;;;;;GAOG;AACI,MAAM,wBAAwB,GAAG,KAAK,EAC3C,KAAa,EACb,UAAyC,EAC0B,EAAE;IACrE,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAqC,CAAC;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAC3B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC5B,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAE5C,4GAA4G;IAC5G,IAAI,MAAM,KAAK,8CAAyB,EAAE;QACxC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;YAClC,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,IAAI,aAAa,wBAAwB,EACtE,UAAU,CACX,CAAC,IAAI,CAAC;SACR;aAAM;YACL,6EAA6E;YAC7E,IACE,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,aAAa,CAAC,EAC7C;gBACA,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAC/B,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;aAC1C;YAED,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,IAAI,aAAa,wBAAwB,EACtE,UAAU,CAAC,YAAY,CACxB,CAAC,IAAI,CAAC;SACR;KACF;IAED,IAAI,OAAO,CAAC,WAAW,KAAK,cAAW,CAAC,mBAAmB,EAAE;QAC3D,iCAAiC;QACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,KAAK,EACL,OAAO,EACP,sBAAsB,CACvB,CAAqC,CAAC;KACxC;SAAM;QACL,iCAAiC;QACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,KAAK,EACL,OAAO,EACP,UAAU,CACX,CAA0B,CAAC;KAC7B;AACH,CAAC,CAAC;AArDW,QAAA,wBAAwB,4BAqDnC;AAEF,MAAM,qCAAqC,GAAG,KAAK,EACjD,KAAa,EACb,OAAe,EACf,QAA4D,EAK5D,EAAE;IACF,OAAO,IAAI,OAAO,CAIhB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC;YACtB,OAAO;YACP,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE;YAC3B,eAAe,EAAE,GAAG;SACrB,CAAC,CAAC;QAEH,MAAM,YAAY,GAA6B,CAC7C,MAAqB,EACrB,QAAgC,EAC1B,EAAE;;YACR,UAAU,CAAC,aAAa,CACtB,MAAA,MAAM,CAAC,GAAG,mCAAI,8BAA8B,EAC5C,CAAC,KAAmB,EAAE,GAAoB,EAAE,EAAE;gBAC5C,IAAI,KAAK,EAAE;oBACT,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;iBACR;gBACD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACrC,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,IAAA,wCAAmB,GAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACxE,IAAI,KAAK,EAAE;gBACT,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;aACR;YAED,IAAI,QAAQ,KAAK,YAAY,EAAE;gBAC7B,OAAO,CAAC,OAAyC,CAAC,CAAC;aACpD;iBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;gBAClC,OAAO,CAAC,OAAgC,CAAC,CAAC;aAC3C;iBAAM;gBACL,OAAO,CAAC,OAA2C,CAAC,CAAC;aACtD;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/common/guard-error.d.ts

@@ -1,5 +1,5 @@
-import { DefaultError } from '@axinom/mosaic-service-common';
 import { ErrorCode } from './error-code.enum';
+import { DefaultError } from "@axinom/mosaic-service-common";
 export declare class AxGuardErrorInfo {
     code: ErrorCode;
     message: string;

package/dist/common/guard-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard-error.d.ts","sourceRoot":"","sources":["../../src/common/guard-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,qBAAa,gBAAgB;IAElB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,MAAM;IACf,aAAa,CAAC;IACd,OAAO,CAAC;gBAHR,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,mBAAO,EACrB,OAAO,CAAC,qCAAyB;CAE3C;AAED,qBAAa,YAAa,SAAQ,YAAY;gBAChC,IAAI,EAAE,gBAAgB;IAWlC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C"}
+{"version":3,"file":"guard-error.d.ts","sourceRoot":"","sources":["../../src/common/guard-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAC,YAAY,EAAc,MAAM,+BAA+B,CAAC;AAExE,qBAAa,gBAAgB;IAElB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,MAAM;IACf,aAAa,CAAC;IACd,OAAO,CAAC;gBAHR,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,mBAAO,EACrB,OAAO,CAAC,qCAAyB;CAE3C;AAED,qBAAa,YAAa,SAAQ,YAAY;gBAChC,IAAI,EAAE,gBAAgB;IAWlC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C"}

package/dist/common/guard-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard-error.js","sourceRoot":"","sources":["../../src/common/guard-error.ts"],"names":[],"mappings":";;;AAAA,yEAA0E;AAG1E,MAAa,gBAAgB;IAC3B,YACS,IAAe,EACf,OAAe,EACf,aAAqB,EACrB,OAAiC;QAHjC,SAAI,GAAJ,IAAI,CAAW;QACf,YAAO,GAAP,OAAO,CAAQ;QACf,kBAAa,GAAb,aAAa,CAAQ;QACrB,YAAO,GAAP,OAAO,CAA0B;IACvC,CAAC;CACL;AAPD,4CAOC;AAED,MAAa,YAAa,SAAQ,oCAAY;IAC5C,YAAY,IAAsB;;QAChC,IAAI,IAAI,CAAC,aAAa,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACzC;aAAM;YACL,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACrB;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,mBAAK,WAAW,EAAX,mCAAW,IAAK,CAAC,MAAA,IAAI,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAE,CAAC;IAC1D,CAAC;CAIF;AAdD,oCAcC"}
+{"version":3,"file":"guard-error.js","sourceRoot":"","sources":["../../src/common/guard-error.ts"],"names":[],"mappings":";;;AACA,yEAAwE;AAExE,MAAa,gBAAgB;IAC3B,YACS,IAAe,EACf,OAAe,EACf,aAAqB,EACrB,OAAiC;QAHjC,SAAI,GAAJ,IAAI,CAAW;QACf,YAAO,GAAP,OAAO,CAAQ;QACf,kBAAa,GAAb,aAAa,CAAQ;QACrB,YAAO,GAAP,OAAO,CAA0B;IACvC,CAAC;CACL;AAPD,4CAOC;AAED,MAAa,YAAa,SAAQ,oCAAY;IAC5C,YAAY,IAAsB;;QAChC,IAAI,IAAI,CAAC,aAAa,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACzC;aAAM;YACL,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACrB;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,mBAAK,WAAW,EAAX,mCAAW,IAAK,CAAC,MAAA,IAAI,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAE,CAAC;IAC1D,CAAC;CAIF;AAdD,oCAcC"}

package/dist/common/helpers/parse-jwt-token-error-handler.d.ts

@@ -0,0 +1,12 @@
+import { ErrorCode } from '../error-code.enum';
+/**
+ * Handles an error thrown by the parseJwtToken function.
+ * Returns error code of type ErrorCode, a message and original error.
+ *
+ * @param err Error of type unknown
+ * @param authType Auth Type - 'MANAGEMENT' | 'CONSUMER'
+ * @param token JWT token
+ * @returns [code, message, originalError]
+ */
+export declare const handleJwtParseError: (err: unknown, authType: 'MANAGEMENT' | 'CONSUMER' | undefined, token: string) => [code: ErrorCode, message: string, originalError: Error];
+//# sourceMappingURL=parse-jwt-token-error-handler.d.ts.map

package/dist/common/helpers/parse-jwt-token-error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-jwt-token-error-handler.d.ts","sourceRoot":"","sources":["../../../src/common/helpers/parse-jwt-token-error-handler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAkE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,QACzB,OAAO,YACF,YAAY,GAAG,UAAU,GAAG,SAAS,SACxC,MAAM,6DAiCd,CAAC"}

package/dist/common/helpers/parse-jwt-token-error-handler.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleJwtParseError = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
+const jwt = require("jsonwebtoken");
+const jwks = require("jwks-rsa");
+const error_code_enum_1 = require("../error-code.enum");
+/**
+ * To be used with parse-jwt-token.ts
+ * This method takes an error code and builds the respective error message for that depending on the authType.
+ *
+ * @param errorCode a value from the enum ErrorCode
+ * @param authType Auth Type - 'MANAGEMENT' | 'CONSUMER'
+ * @param authConfig AuthenticationConfig instance
+ * @param token JWT Token
+ * @returns
+ */
+const buildErrorMessage = (errorCode, authType, token) => {
+    let message = '';
+    const decodedToken = jwt.decode(token);
+    switch (errorCode) {
+        case error_code_enum_1.ErrorCode.SigningKeyNotFound:
+            message = `Could not find a matching signing key to verify the access token. The signing key used to create the token may have been revoked or the Tenant(${decodedToken.tenantId})/Environment(${decodedToken.environmentId})${authType === 'CONSUMER'
+                ? `/Application(${decodedToken.applicationId})`
+                : ''} configuration is erroneous.`;
+            break;
+        case error_code_enum_1.ErrorCode.JwksError:
+            message = `Error occurred while trying to fetch signing keys from the JWKS endpoint for the Tenant(${decodedToken.tenantId})/Environment(${decodedToken.environmentId})${authType === 'CONSUMER'
+                ? `/Application(${decodedToken.applicationId}).`
+                : '.'}`;
+            break;
+        case error_code_enum_1.ErrorCode.UserServiceNotAccessible:
+            message =
+                'The User service is not accessible. Please contact Axinom support.';
+            break;
+        case error_code_enum_1.ErrorCode.IdentityServiceNotAccessible:
+            message =
+                'The Identity service is not accessible. Please contact Axinom support.';
+            break;
+        case error_code_enum_1.ErrorCode.AccessTokenExpired:
+            message = 'Access Token is expired';
+            break;
+        case error_code_enum_1.ErrorCode.AccessTokenVerificationFailed:
+            message = 'Access token verification failed';
+            break;
+        default:
+            message = 'Unknown error';
+    }
+    return message;
+};
+/**
+ * Handles an error thrown by the parseJwtToken function.
+ * Returns error code of type ErrorCode, a message and original error.
+ *
+ * @param err Error of type unknown
+ * @param authType Auth Type - 'MANAGEMENT' | 'CONSUMER'
+ * @param token JWT token
+ * @returns [code, message, originalError]
+ */
+const handleJwtParseError = (err, authType, token) => {
+    let code;
+    let message;
+    let originalError;
+    if (err instanceof jwt.TokenExpiredError) {
+        code = error_code_enum_1.ErrorCode.AccessTokenExpired;
+        message = buildErrorMessage(code, authType, token);
+    }
+    else if (err instanceof jwks.SigningKeyNotFoundError) {
+        code = error_code_enum_1.ErrorCode.SigningKeyNotFound;
+        message = buildErrorMessage(code, authType, token);
+    }
+    else if (err instanceof jwks.JwksError) {
+        code = error_code_enum_1.ErrorCode.JwksError;
+        message = buildErrorMessage(code, authType, token);
+    }
+    else if (err.code === 'ECONNREFUSED') {
+        code =
+            authType === 'CONSUMER'
+                ? error_code_enum_1.ErrorCode.UserServiceNotAccessible
+                : error_code_enum_1.ErrorCode.IdentityServiceNotAccessible;
+        message = buildErrorMessage(code, authType, token);
+    }
+    else {
+        code = error_code_enum_1.ErrorCode.AccessTokenVerificationFailed;
+        message = buildErrorMessage(code, authType, token);
+    }
+    // If thrown error is an instance of Error, take that as the original error. If not, create a new GeneralError and encapsulate the unknown error in the details
+    if (err instanceof Error) {
+        originalError = err;
+    }
+    else {
+        originalError = new mosaic_service_common_1.GeneralError('Unknown Error', { err });
+    }
+    return [code, message, originalError];
+};
+exports.handleJwtParseError = handleJwtParseError;
+//# sourceMappingURL=parse-jwt-token-error-handler.js.map

package/dist/common/helpers/parse-jwt-token-error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-jwt-token-error-handler.js","sourceRoot":"","sources":["../../../src/common/helpers/parse-jwt-token-error-handler.ts"],"names":[],"mappings":";;;AAAA,yEAA6D;AAC7D,oCAAoC;AACpC,iCAAiC;AAEjC,wDAA+C;AAE/C;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,CACxB,SAAoB,EACpB,QAA+C,EAC/C,KAAa,EACL,EAAE;IACV,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,QAAQ,SAAS,EAAE;QACjB,KAAK,2BAAS,CAAC,kBAAkB;YAC/B,OAAO,GAAG,kJACP,YAA+C,CAAC,QACnD,iBACG,YAA+C,CAAC,aACnD,IACE,QAAQ,KAAK,UAAU;gBACrB,CAAC,CAAC,gBACG,YAAsC,CAAC,aAC1C,GAAG;gBACL,CAAC,CAAC,EACN,8BAA8B,CAAC;YAC/B,MAAM;QACR,KAAK,2BAAS,CAAC,SAAS;YACtB,OAAO,GAAG,2FACP,YAA+C,CAAC,QACnD,iBACG,YAA+C,CAAC,aACnD,IACE,QAAQ,KAAK,UAAU;gBACrB,CAAC,CAAC,gBACG,YAAsC,CAAC,aAC1C,IAAI;gBACN,CAAC,CAAC,GACN,EAAE,CAAC;YACH,MAAM;QACR,KAAK,2BAAS,CAAC,wBAAwB;YACrC,OAAO;gBACL,oEAAoE,CAAC;YACvE,MAAM;QACR,KAAK,2BAAS,CAAC,4BAA4B;YACzC,OAAO;gBACL,wEAAwE,CAAC;YAC3E,MAAM;QACR,KAAK,2BAAS,CAAC,kBAAkB;YAC/B,OAAO,GAAG,yBAAyB,CAAC;YACpC,MAAM;QACR,KAAK,2BAAS,CAAC,6BAA6B;YAC1C,OAAO,GAAG,kCAAkC,CAAC;YAC7C,MAAM;QACR;YACE,OAAO,GAAG,eAAe,CAAC;KAC7B;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,mBAAmB,GAAG,CACjC,GAAY,EACZ,QAA+C,EAC/C,KAAa,EAC6C,EAAE;IAC5D,IAAI,IAA2B,CAAC;IAChC,IAAI,OAA2B,CAAC;IAChC,IAAI,aAAgC,CAAC;IAErC,IAAI,GAAG,YAAY,GAAG,CAAC,iBAAiB,EAAE;QACxC,IAAI,GAAG,2BAAS,CAAC,kBAAkB,CAAC;QACpC,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;KACpD;SAAM,IAAI,GAAG,YAAY,IAAI,CAAC,uBAAuB,EAAE;QACtD,IAAI,GAAG,2BAAS,CAAC,kBAAkB,CAAC;QACpC,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;KACpD;SAAM,IAAI,GAAG,YAAY,IAAI,CAAC,SAAS,EAAE;QACxC,IAAI,GAAG,2BAAS,CAAC,SAAS,CAAC;QAC3B,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;KACpD;SAAM,IAAK,GAAyB,CAAC,IAAI,KAAK,cAAc,EAAE;QAC7D,IAAI;YACF,QAAQ,KAAK,UAAU;gBACrB,CAAC,CAAC,2BAAS,CAAC,wBAAwB;gBACpC,CAAC,CAAC,2BAAS,CAAC,4BAA4B,CAAC;QAC7C,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;KACpD;SAAM;QACL,IAAI,GAAG,2BAAS,CAAC,6BAA6B,CAAC;QAC/C,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;KACpD;IAED,+JAA+J;IAC/J,IAAI,GAAG,YAAY,KAAK,EAAE;QACxB,aAAa,GAAG,GAAG,CAAC;KACrB;SAAM;QACL,aAAa,GAAG,IAAI,oCAAY,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;KAC5D;IACD,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC,CAAC;AApCW,QAAA,mBAAmB,uBAoC9B"}

package/dist/common/index.d.ts

@@ -1,3 +1,4 @@
+export * from './assert-consumer-token-type';
 export * from './authenticated-subject.interface';
 export * from './authentication-config.interface';
 export * from './authentication-request-context.interface';

package/dist/common/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mCAAmC,CAAC;AAClD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC"}

package/dist/common/index.js

@@ -10,6 +10,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./assert-consumer-token-type"), exports);
 __exportStar(require("./authenticated-subject.interface"), exports);
 __exportStar(require("./authentication-config.interface"), exports);
 __exportStar(require("./authentication-request-context.interface"), exports);

package/dist/common/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oEAAkD;AAClD,oEAAkD;AAClD,6EAA2D;AAC3D,oDAAkC;AAClC,8DAA4C;AAC5C,gDAA8B;AAC9B,uDAAqC;AACrC,oDAAkC;AAClC,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAA6C;AAC7C,oEAAkD;AAClD,oEAAkD;AAClD,6EAA2D;AAC3D,oDAAkC;AAClC,8DAA4C;AAC5C,gDAA8B;AAC9B,uDAAqC;AACrC,oDAAkC;AAClC,sDAAoC"}

package/dist/common/parse-jwt-token.d.ts

@@ -3,7 +3,7 @@ import { AuthenticationConfig } from './authentication-config.interface';
 /**
  * Parses a JWT token to produce an ManagementAuthenticationContext or a ConsumeAuthenticationContext with subject information and error information, if some error occurred during token processing.
  * @param token JWT token without `Bearer ` prefix
- * @param authConfig an object with ID service connection information or a path to a public key file.
+ * @param authConfig an object with ID/User service connection information or a path to a public key file.
  * @param authType The type of Token that's being passed. Should be either `MANAGEMENT` or `CONSUMER`.
  */
 export declare const parseJwtToken: (token: string | undefined, authConfig: string | AuthenticationConfig, authType?: "MANAGEMENT" | "CONSUMER" | undefined) => Promise<ManagementAuthenticationContext | ConsumerAuthenticationContext>;

package/dist/common/parse-jwt-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-jwt-token.d.ts","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,6BAA6B,EAK7B,+BAA+B,EAChC,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,UACjB,MAAM,GAAG,SAAS,cACb,MAAM,GAAG,oBAAoB,uDAExC,QAAQ,+BAA+B,GAAG,6BAA6B,CAkFzE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM,KACZ,8BAEF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,UAC7B,MAAM,KACZ,qBAEF,CAAC"}
+{"version":3,"file":"parse-jwt-token.d.ts","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EAErB,8BAA8B,EAC9B,6BAA6B,EAK7B,+BAA+B,EAEhC,MAAM,GAAG,CAAC;AACX,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAIzE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,UACjB,MAAM,GAAG,SAAS,cACb,MAAM,GAAG,oBAAoB,uDAExC,QAAQ,+BAA+B,GAAG,6BAA6B,CA6EzE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM,KACZ,8BAEF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,UAC7B,MAAM,KACZ,qBAEF,CAAC"}

package/dist/common/parse-jwt-token.js

@@ -4,13 +4,13 @@ exports.decodeConsumerAccessToken = exports.decodeManagementAccessToken = export
 const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const fs = require("fs");
 const jwt = require("jsonwebtoken");
-const jwks = require("jwks-rsa");
 const _1 = require(".");
 const guard_error_1 = require("./guard-error");
+const parse_jwt_token_error_handler_1 = require("./helpers/parse-jwt-token-error-handler");
 /**
  * Parses a JWT token to produce an ManagementAuthenticationContext or a ConsumeAuthenticationContext with subject information and error information, if some error occurred during token processing.
  * @param token JWT token without `Bearer ` prefix
- * @param authConfig an object with ID service connection information or a path to a public key file.
+ * @param authConfig an object with ID/User service connection information or a path to a public key file.
  * @param authType The type of Token that's being passed. Should be either `MANAGEMENT` or `CONSUMER`.
  */
 const parseJwtToken = async (token, authConfig, authType) => {
@@ -19,19 +19,27 @@ const parseJwtToken = async (token, authConfig, authType) => {
     let originalError;
     let subject;
     let authErrorInfo;
-    try {
-        if (token !== undefined) {
+    if (!(0, mosaic_service_common_1.isNullOrWhitespace)(token)) {
+        try {
             // If authConfig is a string value, it means the authentication is happening for either the Tenant Admin or the Environment Admin scopes.
             if (typeof authConfig === 'string') {
-                const publicKeyPath = authConfig;
-                const publicKey = fs.readFileSync(publicKeyPath, 'utf8');
-                const decoded = jwt.verify(token, publicKey, (0, _1.getJwtVerifyOptions)());
-                subject = decoded;
+                if (authType !== undefined) {
+                    code = _1.ErrorCode.AuthConfigInvalid;
+                    message =
+                        'authType should not be provided when authenticationConfig is a string.';
+                    originalError = new Error(message);
+                }
+                else {
+                    const publicKeyPath = authConfig;
+                    const publicKey = fs.readFileSync(publicKeyPath, 'utf8');
+                    const decoded = jwt.verify(token, publicKey, (0, _1.getJwtVerifyOptions)());
+                    subject = decoded;
+                }
             }
             else {
                 if (authType === undefined) {
                     code = _1.ErrorCode.AuthConfigInvalid;
-                    message = 'Auth Type is not provided for Authentication Config';
+                    message = 'authType is not provided for Authentication Config';
                     originalError = new Error(message);
                 }
                 else if (authType === 'MANAGEMENT') {
@@ -42,36 +50,14 @@ const parseJwtToken = async (token, authConfig, authType) => {
                 }
             }
         }
-        else {
-            code = _1.ErrorCode.AccessTokenRequired;
-            message = 'Access Token is not provided';
-            originalError = new Error(message);
+        catch (err) {
+            [code, message, originalError] = (0, parse_jwt_token_error_handler_1.handleJwtParseError)(err, authType, token);
         }
     }
-    catch (err) {
-        (0, mosaic_service_common_1.assertError)(err);
-        if (err instanceof jwt.TokenExpiredError) {
-            code = _1.ErrorCode.AccessTokenExpired;
-            message = 'Access Token is expired';
-        }
-        else if (err instanceof jwks.SigningKeyNotFoundError) {
-            code = _1.ErrorCode.SigningKeyNotFound;
-            message = `Could not find a matching signing key to verify the access token. The signing key used to create the token may have been revoked or the Tenant(${authConfig.tenantId})/Environment(${authConfig.environmentId}) configuration is erroneous.`;
-        }
-        else if (err instanceof jwks.JwksError) {
-            code = _1.ErrorCode.JwksError;
-            message = `Error occurred while trying to fetch signing keys from the JWKS endpoint for the Tenant(${authConfig.tenantId})/Environment(${authConfig.environmentId}).`;
-        }
-        else if (err.code === 'ECONNREFUSED') {
-            code = _1.ErrorCode.IdentityServiceNotAccessible;
-            message =
-                'The identity service is not accessible. Please contact Axinom support.';
-        }
-        else {
-            code = _1.ErrorCode.AccessTokenVerificationFailed;
-            message = 'Access token verification failed';
-        }
-        originalError = err;
+    else {
+        code = _1.ErrorCode.AccessTokenRequired;
+        message = 'Access Token is not provided';
+        originalError = new Error(message);
     }
     if (code !== undefined &&
         message !== undefined &&
@@ -86,10 +72,18 @@ const parseJwtToken = async (token, authConfig, authType) => {
         };
     }
     else {
-        return {
-            subject: subject,
-            authErrorInfo,
-        };
+        if ((subject === null || subject === void 0 ? void 0 : subject.subjectType) === _1.SubjectType.ConsumerAccount) {
+            return {
+                subject: subject,
+                authErrorInfo,
+            };
+        }
+        else {
+            return {
+                subject: subject,
+                authErrorInfo,
+            };
+        }
     }
 };
 exports.parseJwtToken = parseJwtToken;

package/dist/common/parse-jwt-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"parse-jwt-token.js","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":";;;AAAA,yEAA4D;AAC5D,yBAAyB;AACzB,oCAAoC;AACpC,iCAAiC;AACjC,wBASW;AAEX,+CAAiD;AAEjD;;;;;GAKG;AACI,MAAM,aAAa,GAAG,KAAK,EAChC,KAAyB,EACzB,UAAyC,EACzC,QAAoC,EACsC,EAAE;IAC5E,IAAI,IAA2B,CAAC;IAChC,IAAI,OAA2B,CAAC;IAChC,IAAI,aAAgC,CAAC;IACrC,IAAI,OAGS,CAAC;IACd,IAAI,aAA2C,CAAC;IAEhD,IAAI;QACF,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,yIAAyI;YACzI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;gBAClC,MAAM,aAAa,GAAG,UAAoB,CAAC;gBAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAA,sBAAmB,GAAE,CAAC,CAAC;gBACpE,OAAO,GAAG,OAAyC,CAAC;aACrD;iBAAM;gBACL,IAAI,QAAQ,KAAK,SAAS,EAAE;oBAC1B,IAAI,GAAG,YAAS,CAAC,iBAAiB,CAAC;oBACnC,OAAO,GAAG,qDAAqD,CAAC;oBAChE,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;iBACpC;qBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE;oBACpC,OAAO,GAAG,MAAM,IAAA,oCAAiC,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBACtE;qBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;oBAClC,OAAO,GAAG,MAAM,IAAA,2BAAwB,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBAC7D;aACF;SACF;aAAM;YACL,IAAI,GAAG,YAAS,CAAC,mBAAmB,CAAC;YACrC,OAAO,GAAG,8BAA8B,CAAC;YACzC,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;SACpC;KACF;IAAC,OAAO,GAAG,EAAE;QACZ,IAAA,mCAAW,EAAC,GAAG,CAAC,CAAC;QACjB,IAAI,GAAG,YAAY,GAAG,CAAC,iBAAiB,EAAE;YACxC,IAAI,GAAG,YAAS,CAAC,kBAAkB,CAAC;YACpC,OAAO,GAAG,yBAAyB,CAAC;SACrC;aAAM,IAAI,GAAG,YAAY,IAAI,CAAC,uBAAuB,EAAE;YACtD,IAAI,GAAG,YAAS,CAAC,kBAAkB,CAAC;YACpC,OAAO,GAAG,kJACP,UAAmC,CAAC,QACvC,iBACG,UAAmC,CAAC,aACvC,+BAA+B,CAAC;SACjC;aAAM,IAAI,GAAG,YAAY,IAAI,CAAC,SAAS,EAAE;YACxC,IAAI,GAAG,YAAS,CAAC,SAAS,CAAC;YAC3B,OAAO,GAAG,2FACP,UAAmC,CAAC,QACvC,iBAAkB,UAAmC,CAAC,aAAa,IAAI,CAAC;SACzE;aAAM,IAAK,GAAyB,CAAC,IAAI,KAAK,cAAc,EAAE;YAC7D,IAAI,GAAG,YAAS,CAAC,4BAA4B,CAAC;YAC9C,OAAO;gBACL,wEAAwE,CAAC;SAC5E;aAAM;YACL,IAAI,GAAG,YAAS,CAAC,6BAA6B,CAAC;YAC/C,OAAO,GAAG,kCAAkC,CAAC;SAC9C;QACD,aAAa,GAAG,GAAG,CAAC;KACrB;IAED,IACE,IAAI,KAAK,SAAS;QAClB,OAAO,KAAK,SAAS;QACrB,aAAa,KAAK,SAAS,EAC3B;QACA,aAAa,GAAG,IAAI,8BAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;KACpE;IAED,gDAAgD;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE;QAC/D,OAAO;YACL,OAAO,EAAE,OAAyC;YAClD,aAAa;SACd,CAAC;KACH;SAAM;QACL,OAAO;YACL,OAAO,EAAE,OAAgC;YACzC,aAAa;SACd,CAAC;KACH;AACH,CAAC,CAAC;AAtFW,QAAA,aAAa,iBAsFxB;AAEF;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,CACzC,KAAa,EACmB,EAAE;IAClC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;AAC7D,CAAC,CAAC;AAJW,QAAA,2BAA2B,+BAItC;AAEF;;;;GAIG;AACI,MAAM,yBAAyB,GAAG,CACvC,KAAa,EACU,EAAE;IACzB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAA0B,CAAC;AACpD,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC"}
+{"version":3,"file":"parse-jwt-token.js","sourceRoot":"","sources":["../../src/common/parse-jwt-token.ts"],"names":[],"mappings":";;;AAAA,yEAAmE;AACnE,yBAAyB;AACzB,oCAAoC;AACpC,wBAWW;AAEX,+CAAiD;AACjD,2FAA8E;AAE9E;;;;;GAKG;AACI,MAAM,aAAa,GAAG,KAAK,EAChC,KAAyB,EACzB,UAAyC,EACzC,QAAoC,EACsC,EAAE;IAC5E,IAAI,IAA2B,CAAC;IAChC,IAAI,OAA2B,CAAC;IAChC,IAAI,aAAgC,CAAC;IACrC,IAAI,OAIS,CAAC;IACd,IAAI,aAA2C,CAAC;IAEhD,IAAI,CAAC,IAAA,0CAAkB,EAAC,KAAK,CAAC,EAAE;QAC9B,IAAI;YACF,yIAAyI;YACzI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;gBAClC,IAAI,QAAQ,KAAK,SAAS,EAAE;oBAC1B,IAAI,GAAG,YAAS,CAAC,iBAAiB,CAAC;oBACnC,OAAO;wBACL,wEAAwE,CAAC;oBAC3E,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;iBACpC;qBAAM;oBACL,MAAM,aAAa,GAAG,UAAoB,CAAC;oBAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;oBACzD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAA,sBAAmB,GAAE,CAAC,CAAC;oBACpE,OAAO,GAAG,OAAyC,CAAC;iBACrD;aACF;iBAAM;gBACL,IAAI,QAAQ,KAAK,SAAS,EAAE;oBAC1B,IAAI,GAAG,YAAS,CAAC,iBAAiB,CAAC;oBACnC,OAAO,GAAG,oDAAoD,CAAC;oBAC/D,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;iBACpC;qBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE;oBACpC,OAAO,GAAG,MAAM,IAAA,oCAAiC,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBACtE;qBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;oBAClC,OAAO,GAAG,MAAM,IAAA,2BAAwB,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;iBAC7D;aACF;SACF;QAAC,OAAO,GAAG,EAAE;YACZ,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,IAAA,mDAAmB,EAClD,GAAG,EACH,QAAQ,EACR,KAAK,CACN,CAAC;SACH;KACF;SAAM;QACL,IAAI,GAAG,YAAS,CAAC,mBAAmB,CAAC;QACrC,OAAO,GAAG,8BAA8B,CAAC;QACzC,aAAa,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;KACpC;IAED,IACE,IAAI,KAAK,SAAS;QAClB,OAAO,KAAK,SAAS;QACrB,aAAa,KAAK,SAAS,EAC3B;QACA,aAAa,GAAG,IAAI,8BAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;KACpE;IAED,gDAAgD;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE;QAC/D,OAAO;YACL,OAAO,EAAE,OAAyC;YAClD,aAAa;SACd,CAAC;KACH;SAAM;QACL,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,MAAK,cAAW,CAAC,eAAe,EAAE;YACxD,OAAO;gBACL,OAAO,EAAE,OAAgC;gBACzC,aAAa;aACd,CAAC;SACH;aAAM;YACL,OAAO;gBACL,OAAO,EAAE,OAA2C;gBACpD,aAAa;aACd,CAAC;SACH;KACF;AACH,CAAC,CAAC;AAjFW,QAAA,aAAa,iBAiFxB;AAEF;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,CACzC,KAAa,EACmB,EAAE;IAClC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;AAC7D,CAAC,CAAC;AAJW,QAAA,2BAA2B,+BAItC;AAEF;;;;GAIG;AACI,MAAM,yBAAyB,GAAG,CACvC,KAAa,EACU,EAAE;IACzB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAA0B,CAAC;AACpD,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC"}

package/dist/common/subject-type.enum.d.ts

@@ -5,6 +5,7 @@ export declare enum SubjectType {
     ImpersonatedUserAccount = "ImpersonatedUserAccount",
     SuperUserAccount = "SuperUserAccount",
     EnvironmentAdminAccount = "EnvironmentAdminAccount",
-    ConsumerAccount = "ConsumerAccount"
+    ConsumerAccount = "ConsumerAccount",
+    ConsumerApplication = "ConsumerApplication"
 }
 //# sourceMappingURL=subject-type.enum.d.ts.map

package/dist/common/subject-type.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subject-type.enum.d.ts","sourceRoot":"","sources":["../../src/common/subject-type.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,qBAAqB,0BAA0B;IAC/C,cAAc,mBAAmB;IACjC,WAAW,gBAAgB;IAC3B,uBAAuB,4BAA4B;IACnD,gBAAgB,qBAAqB;IACrC,uBAAuB,4BAA4B;IACnD,eAAe,oBAAoB;CACpC"}
+{"version":3,"file":"subject-type.enum.d.ts","sourceRoot":"","sources":["../../src/common/subject-type.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,qBAAqB,0BAA0B;IAC/C,cAAc,mBAAmB;IACjC,WAAW,gBAAgB;IAC3B,uBAAuB,4BAA4B;IACnD,gBAAgB,qBAAqB;IACrC,uBAAuB,4BAA4B;IACnD,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;CAC5C"}

package/dist/common/subject-type.enum.js

@@ -10,5 +10,6 @@ var SubjectType;
     SubjectType["SuperUserAccount"] = "SuperUserAccount";
     SubjectType["EnvironmentAdminAccount"] = "EnvironmentAdminAccount";
     SubjectType["ConsumerAccount"] = "ConsumerAccount";
+    SubjectType["ConsumerApplication"] = "ConsumerApplication";
 })(SubjectType = exports.SubjectType || (exports.SubjectType = {}));
 //# sourceMappingURL=subject-type.enum.js.map

package/dist/common/subject-type.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"subject-type.enum.js","sourceRoot":"","sources":["../../src/common/subject-type.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,WAQX;AARD,WAAY,WAAW;IACrB,8DAA+C,CAAA;IAC/C,gDAAiC,CAAA;IACjC,0CAA2B,CAAA;IAC3B,kEAAmD,CAAA;IACnD,oDAAqC,CAAA;IACrC,kEAAmD,CAAA;IACnD,kDAAmC,CAAA;AACrC,CAAC,EARW,WAAW,GAAX,mBAAW,KAAX,mBAAW,QAQtB"}
+{"version":3,"file":"subject-type.enum.js","sourceRoot":"","sources":["../../src/common/subject-type.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,WASX;AATD,WAAY,WAAW;IACrB,8DAA+C,CAAA;IAC/C,gDAAiC,CAAA;IACjC,0CAA2B,CAAA;IAC3B,kEAAmD,CAAA;IACnD,oDAAqC,CAAA;IACrC,kEAAmD,CAAA;IACnD,kDAAmC,CAAA;IACnC,0DAA2C,CAAA;AAC7C,CAAC,EATW,WAAW,GAAX,mBAAW,KAAX,mBAAW,QAStB"}

package/dist/graphql/guard.middleware.d.ts

@@ -1,6 +1,7 @@
-import { Express, Request, Response } from 'express';
+import { Express, NextFunction, Request, Response } from 'express';
 import { Middleware } from 'postgraphile';
 import { AuthenticationConfig } from '../common';
+export declare const jwtParserMiddleware: (authConfig: AuthenticationConfig, authType?: "MANAGEMENT" | "CONSUMER" | undefined) => (req: Request, _res: Response, next: NextFunction) => Promise<void>;
 /**
  * This is an Express Middleware which throws an error if there're any Authorization errors in ManagementAuthenticationContext.
  * @param req Express Request object
@@ -22,6 +23,7 @@ export declare const throwConsumerAuthError: (req: Request, _res: Response, next
  * @param {Express} app the Express app instance.
  * @param {string[]} guardRoutes an array of routes that needs to be protected.
  * @param {string | AuthenticationConfig} authParams A string with the ID Service Auth Endpoint or an instance of `AuthenticationConfig` containing ID service connection information.
+ * For non-managed services, providing `AuthenticationConfig` with correct tenant and environment IDs is mandatory.
  */
 export declare function setupManagementAuthentication(app: Express, guardRoutes: string[], authParams: string | AuthenticationConfig): void;
 /**
@@ -31,6 +33,7 @@ export declare function setupManagementAuthentication(app: Express, guardRoutes:
  * @param {Express} app the Express app instance.
  * @param {string[]} guardRoutes an array of routes that needs to be protected.
  * @param {string | AuthenticationConfig} authParams A string with the User Service Auth Endpoint or an instance of `AuthenticationConfig` containing User service connection information.
+ * For non-managed services, providing `AuthenticationConfig` with correct tenant and environment IDs is mandatory.
  */
 export declare function setupConsumerAuthentication(app: Express, guardRoutes: string[], authParams: string | AuthenticationConfig): void;
 /**

package/dist/graphql/guard.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.middleware.d.ts","sourceRoot":"","sources":["../../src/graphql/guard.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAsB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAGL,oBAAoB,EAKrB,MAAM,WAAW,CAAC;AA0BnB;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAC9B,OAAO,QACN,QAAQ,uBACO,GAAG,KAAK,IAAI,KAChC,IAMF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QAC5B,OAAO,QACN,QAAQ,uBACO,GAAG,KAAK,IAAI,KAChC,IAMF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,MAAM,GAAG,oBAAoB,GACxC,IAAI,CAqBN;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,MAAM,GAAG,oBAAoB,GACxC,IAAI,CAqBN;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4CAA4C,eAC3C,MAAM,GAAG,oBAAoB,KACxC,WAAW,OAAO,EAAE,QAAQ,CAAC,EAmB/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,0CAA0C,eACzC,MAAM,GAAG,oBAAoB,KACxC,WAAW,OAAO,EAAE,QAAQ,CAAC,EAmB/B,CAAC"}
+{"version":3,"file":"guard.middleware.d.ts","sourceRoot":"","sources":["../../src/graphql/guard.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAGL,oBAAoB,EAKrB,MAAM,WAAW,CAAC;AAEnB,eAAO,MAAM,mBAAmB,eAClB,oBAAoB,6DAGb,OAAO,QAAQ,QAAQ,QAAQ,YAAY,kBAkB/D,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAC9B,OAAO,QACN,QAAQ,uBACO,GAAG,KAAK,IAAI,KAChC,IAMF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QAC5B,OAAO,QACN,QAAQ,uBACO,GAAG,KAAK,IAAI,KAChC,IAMF,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,MAAM,GAAG,oBAAoB,GACxC,IAAI,CAqBN;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,MAAM,GAAG,oBAAoB,GACxC,IAAI,CAqBN;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4CAA4C,eAC3C,MAAM,GAAG,oBAAoB,KACxC,WAAW,OAAO,EAAE,QAAQ,CAAC,EAmB/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,0CAA0C,eACzC,MAAM,GAAG,oBAAoB,KACxC,WAAW,OAAO,EAAE,QAAQ,CAAC,EAmB/B,CAAC"}

package/dist/graphql/guard.middleware.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.setupConsumerGQLSubscriptionAuthentication = exports.setupManagementGQLSubscriptionAuthentication = exports.setupConsumerAuthentication = exports.setupManagementAuthentication = exports.throwConsumerAuthError = exports.throwManagementAuthError = void 0;
+exports.setupConsumerGQLSubscriptionAuthentication = exports.setupManagementGQLSubscriptionAuthentication = exports.setupConsumerAuthentication = exports.setupManagementAuthentication = exports.throwConsumerAuthError = exports.throwManagementAuthError = exports.jwtParserMiddleware = void 0;
 const express_1 = require("express");
 const bearerTokenExtractor = require("express-bearer-token");
 const common_1 = require("../common");
@@ -16,6 +16,7 @@ const jwtParserMiddleware = (authConfig, authType) => {
         next();
     };
 };
+exports.jwtParserMiddleware = jwtParserMiddleware;
 /**
  * This is an Express Middleware which throws an error if there're any Authorization errors in ManagementAuthenticationContext.
  * @param req Express Request object
@@ -51,6 +52,7 @@ exports.throwConsumerAuthError = throwConsumerAuthError;
  * @param {Express} app the Express app instance.
  * @param {string[]} guardRoutes an array of routes that needs to be protected.
  * @param {string | AuthenticationConfig} authParams A string with the ID Service Auth Endpoint or an instance of `AuthenticationConfig` containing ID service connection information.
+ * For non-managed services, providing `AuthenticationConfig` with correct tenant and environment IDs is mandatory.
  */
 function setupManagementAuthentication(app, guardRoutes, authParams) {
     if (typeof authParams === 'string') {
@@ -59,10 +61,10 @@ function setupManagementAuthentication(app, guardRoutes, authParams) {
             environmentId: '',
             tenantId: '',
         };
-        app.use(guardRoutes, bearerTokenExtractor(), jwtParserMiddleware(authenticationConfig, 'MANAGEMENT'), (0, express_1.json)());
+        app.use(guardRoutes, bearerTokenExtractor(), (0, exports.jwtParserMiddleware)(authenticationConfig, 'MANAGEMENT'), (0, express_1.json)());
     }
     else {
-        app.use(guardRoutes, bearerTokenExtractor(), jwtParserMiddleware(authParams, 'MANAGEMENT'), (0, express_1.json)());
+        app.use(guardRoutes, bearerTokenExtractor(), (0, exports.jwtParserMiddleware)(authParams, 'MANAGEMENT'), (0, express_1.json)());
     }
 }
 exports.setupManagementAuthentication = setupManagementAuthentication;
@@ -73,6 +75,7 @@ exports.setupManagementAuthentication = setupManagementAuthentication;
  * @param {Express} app the Express app instance.
  * @param {string[]} guardRoutes an array of routes that needs to be protected.
  * @param {string | AuthenticationConfig} authParams A string with the User Service Auth Endpoint or an instance of `AuthenticationConfig` containing User service connection information.
+ * For non-managed services, providing `AuthenticationConfig` with correct tenant and environment IDs is mandatory.
  */
 function setupConsumerAuthentication(app, guardRoutes, authParams) {
     if (typeof authParams === 'string') {
@@ -81,10 +84,10 @@ function setupConsumerAuthentication(app, guardRoutes, authParams) {
             environmentId: '',
             tenantId: '',
         };
-        app.use(guardRoutes, bearerTokenExtractor(), jwtParserMiddleware(authenticationConfig, 'CONSUMER'), (0, express_1.json)());
+        app.use(guardRoutes, bearerTokenExtractor(), (0, exports.jwtParserMiddleware)(authenticationConfig, 'CONSUMER'), (0, express_1.json)());
     }
     else {
-        app.use(guardRoutes, bearerTokenExtractor(), jwtParserMiddleware(authParams, 'CONSUMER'), (0, express_1.json)());
+        app.use(guardRoutes, bearerTokenExtractor(), (0, exports.jwtParserMiddleware)(authParams, 'CONSUMER'), (0, express_1.json)());
     }
 }
 exports.setupConsumerAuthentication = setupConsumerAuthentication;
@@ -105,14 +108,14 @@ const setupManagementGQLSubscriptionAuthentication = (authParams) => {
         };
         return [
             bearerTokenExtractor(),
-            jwtParserMiddleware(authenticationConfig, 'MANAGEMENT'),
+            (0, exports.jwtParserMiddleware)(authenticationConfig, 'MANAGEMENT'),
             exports.throwManagementAuthError,
         ];
     }
     else {
         return [
             bearerTokenExtractor(),
-            jwtParserMiddleware(authParams, 'MANAGEMENT'),
+            (0, exports.jwtParserMiddleware)(authParams, 'MANAGEMENT'),
             exports.throwManagementAuthError,
         ];
     }
@@ -135,14 +138,14 @@ const setupConsumerGQLSubscriptionAuthentication = (authParams) => {
         };
         return [
             bearerTokenExtractor(),
-            jwtParserMiddleware(authenticationConfig, 'CONSUMER'),
+            (0, exports.jwtParserMiddleware)(authenticationConfig, 'CONSUMER'),
             exports.throwConsumerAuthError,
         ];
     }
     else {
         return [
             bearerTokenExtractor(),
-            jwtParserMiddleware(authParams, 'CONSUMER'),
+            (0, exports.jwtParserMiddleware)(authParams, 'CONSUMER'),
             exports.throwConsumerAuthError,
         ];
     }

package/dist/graphql/guard.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.middleware.js","sourceRoot":"","sources":["../../src/graphql/guard.middleware.ts"],"names":[],"mappings":";;;AAAA,qCAAyE;AACzE,6DAA6D;AAE7D,sCAQmB;AAEnB,MAAM,mBAAmB,GAAG,CAC1B,UAAgC,EAChC,QAAoC,EACpC,EAAE;IACF,OAAO,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;QAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,YAAY,EAAE;YACtD,GAAsC,CAAC,WAAW;gBACjD,CAAC,MAAM,IAAA,sBAAa,EAClB,GAAG,CAAC,KAAK,EACT,UAAU,EACV,YAAY,CACb,CAAoC,CAAC;SACzC;aAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;YACjC,GAAoC,CAAC,WAAW,GAAG,CAAC,MAAM,IAAA,sBAAa,EACtE,GAAG,CAAC,KAAK,EACT,UAAU,EACV,UAAU,CACX,CAAkC,CAAC;SACrC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACI,MAAM,wBAAwB,GAAG,CACtC,GAAY,EACZ,IAAc,EACd,IAAiC,EAC3B,EAAE;IACR,MAAM,WAAW,GAAI,GAAsC,CAAC,WAAW,CAAC;IACxE,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS,EAAE;QAC3C,MAAM,IAAI,qBAAY,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;KACnD;IACD,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAVW,QAAA,wBAAwB,4BAUnC;AAEF;;;;;GAKG;AACI,MAAM,sBAAsB,GAAG,CACpC,GAAY,EACZ,IAAc,EACd,IAAiC,EAC3B,EAAE;IACR,MAAM,WAAW,GAAI,GAAoC,CAAC,WAAW,CAAC;IACtE,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS,EAAE;QAC3C,MAAM,IAAI,qBAAY,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;KACnD;IACD,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAVW,QAAA,sBAAsB,0BAUjC;AAEF;;;;;;;GAOG;AACH,SAAgB,6BAA6B,CAC3C,GAAY,EACZ,WAAqB,EACrB,UAAyC;IAEzC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,mBAAmB,CAAC,oBAAoB,EAAE,YAAY,CAAC,EACvD,IAAA,cAAI,GAAE,CACP,CAAC;KACH;SAAM;QACL,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,EAC7C,IAAA,cAAI,GAAE,CACP,CAAC;KACH;AACH,CAAC;AAzBD,sEAyBC;AAED;;;;;;;GAOG;AACH,SAAgB,2BAA2B,CACzC,GAAY,EACZ,WAAqB,EACrB,UAAyC;IAEzC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,mBAAmB,CAAC,oBAAoB,EAAE,UAAU,CAAC,EACrD,IAAA,cAAI,GAAE,CACP,CAAC;KACH;SAAM;QACL,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,EAC3C,IAAA,cAAI,GAAE,CACP,CAAC;KACH;AACH,CAAC;AAzBD,kEAyBC;AAED;;;;;;;GAOG;AACI,MAAM,4CAA4C,GAAG,CAC1D,UAAyC,EACR,EAAE;IACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,OAAO;YACL,oBAAoB,EAAE;YACtB,mBAAmB,CAAC,oBAAoB,EAAE,YAAY,CAAC;YACvD,gCAAwB;SACzB,CAAC;KACH;SAAM;QACL,OAAO;YACL,oBAAoB,EAAE;YACtB,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC;YAC7C,gCAAwB;SACzB,CAAC;KACH;AACH,CAAC,CAAC;AArBW,QAAA,4CAA4C,gDAqBvD;AAEF;;;;;;;GAOG;AACI,MAAM,0CAA0C,GAAG,CACxD,UAAyC,EACR,EAAE;IACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,OAAO;YACL,oBAAoB,EAAE;YACtB,mBAAmB,CAAC,oBAAoB,EAAE,UAAU,CAAC;YACrD,8BAAsB;SACvB,CAAC;KACH;SAAM;QACL,OAAO;YACL,oBAAoB,EAAE;YACtB,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC;YAC3C,8BAAsB;SACvB,CAAC;KACH;AACH,CAAC,CAAC;AArBW,QAAA,0CAA0C,8CAqBrD"}
+{"version":3,"file":"guard.middleware.js","sourceRoot":"","sources":["../../src/graphql/guard.middleware.ts"],"names":[],"mappings":";;;AAAA,qCAAyE;AACzE,6DAA6D;AAE7D,sCAQmB;AAEZ,MAAM,mBAAmB,GAAG,CACjC,UAAgC,EAChC,QAAoC,EACpC,EAAE;IACF,OAAO,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;QAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,YAAY,EAAE;YACtD,GAAsC,CAAC,WAAW;gBACjD,CAAC,MAAM,IAAA,sBAAa,EAClB,GAAG,CAAC,KAAK,EACT,UAAU,EACV,YAAY,CACb,CAAoC,CAAC;SACzC;aAAM,IAAI,QAAQ,KAAK,UAAU,EAAE;YACjC,GAAoC,CAAC,WAAW,GAAG,CAAC,MAAM,IAAA,sBAAa,EACtE,GAAG,CAAC,KAAK,EACT,UAAU,EACV,UAAU,CACX,CAAkC,CAAC;SACrC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC,CAAC;AAtBW,QAAA,mBAAmB,uBAsB9B;AAEF;;;;;GAKG;AACI,MAAM,wBAAwB,GAAG,CACtC,GAAY,EACZ,IAAc,EACd,IAAiC,EAC3B,EAAE;IACR,MAAM,WAAW,GAAI,GAAsC,CAAC,WAAW,CAAC;IACxE,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS,EAAE;QAC3C,MAAM,IAAI,qBAAY,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;KACnD;IACD,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAVW,QAAA,wBAAwB,4BAUnC;AAEF;;;;;GAKG;AACI,MAAM,sBAAsB,GAAG,CACpC,GAAY,EACZ,IAAc,EACd,IAAiC,EAC3B,EAAE;IACR,MAAM,WAAW,GAAI,GAAoC,CAAC,WAAW,CAAC;IACtE,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS,EAAE;QAC3C,MAAM,IAAI,qBAAY,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;KACnD;IACD,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAVW,QAAA,sBAAsB,0BAUjC;AAEF;;;;;;;;GAQG;AACH,SAAgB,6BAA6B,CAC3C,GAAY,EACZ,WAAqB,EACrB,UAAyC;IAEzC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,IAAA,2BAAmB,EAAC,oBAAoB,EAAE,YAAY,CAAC,EACvD,IAAA,cAAI,GAAE,CACP,CAAC;KACH;SAAM;QACL,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,IAAA,2BAAmB,EAAC,UAAU,EAAE,YAAY,CAAC,EAC7C,IAAA,cAAI,GAAE,CACP,CAAC;KACH;AACH,CAAC;AAzBD,sEAyBC;AAED;;;;;;;;GAQG;AACH,SAAgB,2BAA2B,CACzC,GAAY,EACZ,WAAqB,EACrB,UAAyC;IAEzC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,IAAA,2BAAmB,EAAC,oBAAoB,EAAE,UAAU,CAAC,EACrD,IAAA,cAAI,GAAE,CACP,CAAC;KACH;SAAM;QACL,GAAG,CAAC,GAAG,CACL,WAAW,EACX,oBAAoB,EAAE,EACtB,IAAA,2BAAmB,EAAC,UAAU,EAAE,UAAU,CAAC,EAC3C,IAAA,cAAI,GAAE,CACP,CAAC;KACH;AACH,CAAC;AAzBD,kEAyBC;AAED;;;;;;;GAOG;AACI,MAAM,4CAA4C,GAAG,CAC1D,UAAyC,EACR,EAAE;IACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,OAAO;YACL,oBAAoB,EAAE;YACtB,IAAA,2BAAmB,EAAC,oBAAoB,EAAE,YAAY,CAAC;YACvD,gCAAwB;SACzB,CAAC;KACH;SAAM;QACL,OAAO;YACL,oBAAoB,EAAE;YACtB,IAAA,2BAAmB,EAAC,UAAU,EAAE,YAAY,CAAC;YAC7C,gCAAwB;SACzB,CAAC;KACH;AACH,CAAC,CAAC;AArBW,QAAA,4CAA4C,gDAqBvD;AAEF;;;;;;;GAOG;AACI,MAAM,0CAA0C,GAAG,CACxD,UAAyC,EACR,EAAE;IACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,MAAM,oBAAoB,GAAyB;YACjD,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,OAAO;YACL,oBAAoB,EAAE;YACtB,IAAA,2BAAmB,EAAC,oBAAoB,EAAE,UAAU,CAAC;YACrD,8BAAsB;SACvB,CAAC;KACH;SAAM;QACL,OAAO;YACL,oBAAoB,EAAE;YACtB,IAAA,2BAAmB,EAAC,UAAU,EAAE,UAAU,CAAC;YAC3C,8BAAsB;SACvB,CAAC;KACH;AACH,CAAC,CAAC;AArBW,QAAA,0CAA0C,8CAqBrD"}

package/dist/graphql/index.d.ts

@@ -1,6 +1,6 @@
 export * from './enforce-strict-permissions.plugin';
 export * from './guard.context';
-export * from './guard.middleware';
+export { setupConsumerAuthentication, setupConsumerGQLSubscriptionAuthentication, setupManagementAuthentication, setupManagementGQLSubscriptionAuthentication, throwConsumerAuthError, throwManagementAuthError, } from './guard.middleware';
 export * from './guard.plugin';
 export * from './subscription-authorization-hook-factory';
 //# sourceMappingURL=index.d.ts.map

package/dist/graphql/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/graphql/index.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC;AACpD,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2CAA2C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/graphql/index.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC;AACpD,cAAc,iBAAiB,CAAC;AAChC,OAAO,EACL,2BAA2B,EAC3B,0CAA0C,EAC1C,6BAA6B,EAC7B,4CAA4C,EAC5C,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2CAA2C,CAAC"}

package/dist/graphql/index.js

@@ -10,9 +10,16 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.throwManagementAuthError = exports.throwConsumerAuthError = exports.setupManagementGQLSubscriptionAuthentication = exports.setupManagementAuthentication = exports.setupConsumerGQLSubscriptionAuthentication = exports.setupConsumerAuthentication = void 0;
 __exportStar(require("./enforce-strict-permissions.plugin"), exports);
 __exportStar(require("./guard.context"), exports);
-__exportStar(require("./guard.middleware"), exports);
+var guard_middleware_1 = require("./guard.middleware");
+Object.defineProperty(exports, "setupConsumerAuthentication", { enumerable: true, get: function () { return guard_middleware_1.setupConsumerAuthentication; } });
+Object.defineProperty(exports, "setupConsumerGQLSubscriptionAuthentication", { enumerable: true, get: function () { return guard_middleware_1.setupConsumerGQLSubscriptionAuthentication; } });
+Object.defineProperty(exports, "setupManagementAuthentication", { enumerable: true, get: function () { return guard_middleware_1.setupManagementAuthentication; } });
+Object.defineProperty(exports, "setupManagementGQLSubscriptionAuthentication", { enumerable: true, get: function () { return guard_middleware_1.setupManagementGQLSubscriptionAuthentication; } });
+Object.defineProperty(exports, "throwConsumerAuthError", { enumerable: true, get: function () { return guard_middleware_1.throwConsumerAuthError; } });
+Object.defineProperty(exports, "throwManagementAuthError", { enumerable: true, get: function () { return guard_middleware_1.throwManagementAuthError; } });
 __exportStar(require("./guard.plugin"), exports);
 __exportStar(require("./subscription-authorization-hook-factory"), exports);
 //# sourceMappingURL=index.js.map

package/dist/graphql/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/graphql/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,sEAAoD;AACpD,kDAAgC;AAChC,qDAAmC;AACnC,iDAA+B;AAC/B,4EAA0D"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/graphql/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,sEAAoD;AACpD,kDAAgC;AAChC,uDAO4B;AAN1B,+HAAA,2BAA2B,OAAA;AAC3B,8IAAA,0CAA0C,OAAA;AAC1C,iIAAA,6BAA6B,OAAA;AAC7B,gJAAA,4CAA4C,OAAA;AAC5C,0HAAA,sBAAsB,OAAA;AACtB,4HAAA,wBAAwB,OAAA;AAE1B,iDAA+B;AAC/B,4EAA0D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-id-guard",
-  "version": "0.11.0-rc.3",
+  "version": "0.11.0",
   "description": "Authentication and authorization helpers for Axinom Mosaic services",
   "author": "Axinom",
   "license": "PROPRIETARY",
@@ -26,10 +26,10 @@
     "test:ci": "jest --reporters=default --reporters=jest-junit --coverage --coverageReporters=cobertura --coverageReporters=html"
   },
   "dependencies": {
-    "@axinom/mosaic-id-link-be": "^0.5.0-rc.2",
-    "@axinom/mosaic-id-utils": "^0.6.0-rc.3",
-    "@axinom/mosaic-message-bus": "^0.6.0-rc.2",
-    "@axinom/mosaic-service-common": "^0.12.0-rc.10",
+    "@axinom/mosaic-id-link-be": "^0.5.0",
+    "@axinom/mosaic-id-utils": "^0.6.0",
+    "@axinom/mosaic-message-bus": "^0.6.0",
+    "@axinom/mosaic-service-common": "^0.12.0",
     "amqplib": "^0.6.0",
     "express": "^4.17.1",
     "express-bearer-token": "^2.4.0",
@@ -47,16 +47,18 @@
     "subscriptions-transport-ws": "^0.9.19"
   },
   "devDependencies": {
+    "@types/supertest": "^2.0.11",
     "graphql-subscriptions": "^1.2.1",
     "jest": "26.6.0",
     "mock-jwks": "^0.3.1",
     "nock": "^13.0.6",
     "rimraf": "^3.0.2",
+    "supertest": "^6.1.6",
     "ts-node": "^8.9.0",
     "typescript": "^4.5.4"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "1e7724419e904d5e68091cb407e046f14da86fbc"
+  "gitHead": "f80cb6c17c7fe9993994473b513b568c7ae718d8"
 }