@axinom/mosaic-id-guard 0.28.0-rc.7 → 0.28.0-rc.9

package/dist/common/guard-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard-utils.d.ts","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;OAEG;IACH,0BAA0B,EAAE,0BAA0B,CAAC;CACxD;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAElC;;OAEG;IACH,oBAAoB,EAAE,uBAAuB,CAAC;CAC/C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,cACpB,MAAM,uBACI,MAAM,EAAE,GAAG,SAAS,KACxC,OAQF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,SAC/B,2BAA2B,GAAG,SAAS,aAClC,MAAM,aACN,eAAe,GAAG,SAAS,KACrC,IAgBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gBACnB,2BAA2B,aAC7B,MAAM,KAChB,IAOF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,YAClC,2BAA2B,GAAG,SAAS,KAC/C,OAsBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YACxB,2BAA2B,GAAG,SAAS,KAC/C,OAsBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,YAClC,cAAc,KACtB,IAsBF,CAAC"}
+{"version":3,"file":"guard-utils.d.ts","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,eAAe,EAEhB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;OAEG;IACH,0BAA0B,EAAE,0BAA0B,CAAC;CACxD;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAElC;;OAEG;IACH,oBAAoB,EAAE,uBAAuB,CAAC;CAC/C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,cACpB,MAAM,uBACI,MAAM,EAAE,GAAG,SAAS,KACxC,OAQF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,SAC/B,2BAA2B,GAAG,SAAS,aAClC,MAAM,aACN,eAAe,GAAG,SAAS,KACrC,IAgBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gBACnB,2BAA2B,aAC7B,MAAM,KAChB,IAOF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,YAClC,2BAA2B,GAAG,SAAS,KAC/C,OAsBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YACxB,2BAA2B,GAAG,SAAS,KAC/C,OAsBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,YAClC,cAAc,KACtB,IAsBF,CAAC"}

package/dist/common/guard-utils.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validatePostgraphileBuildOptions = exports.isAuthenticatedEndUser = exports.isAuthenticatedManagementSubject = exports.assertTokenNotExpired = exports.assertSubjectAuthenticated = exports.isAnonymousOperation = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const id_guard_error_1 = require("./id-guard-error");
 const id_guard_errors_1 = require("./id-guard-errors");
 const subject_type_1 = require("./subject-type");
@@ -78,7 +79,7 @@ const isAuthenticatedManagementSubject = (subject) => {
             default: {
                 // This block would never execute in runtime, and used as a build-time exhaustive switch-case check for the `SubjectType` ENUM.
                 const exhaustiveCheck = subject.subjectType;
-                throw new Error(`Unhandled SubjectType case: ${exhaustiveCheck}`);
+                throw new mosaic_service_common_1.UnreachableCaseError(exhaustiveCheck);
             }
         }
     }
@@ -108,7 +109,7 @@ const isAuthenticatedEndUser = (subject) => {
             default: {
                 // This block would never execute in runtime, and used as a build-time exhaustive switch-case check for the `SubjectType` ENUM.
                 const exhaustiveCheck = subject.subjectType;
-                throw new Error(`Unhandled SubjectType case: ${exhaustiveCheck}`);
+                throw new mosaic_service_common_1.UnreachableCaseError(exhaustiveCheck);
             }
         }
     }

package/dist/common/guard-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard-utils.js","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":";;;AAKA,qDAAgD;AAChD,uDAAkD;AAClD,iDAA6C;AAwC7C;;;;;GAKG;AACI,MAAM,oBAAoB,GAAG,CAClC,SAAiB,EACjB,mBAAyC,EAChC,EAAE;IACX,MAAM,oBAAoB,GAAG,mBAAmB,aAAnB,mBAAmB,uBAAnB,mBAAmB,CAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEtE,IAAI,oBAAoB,EAAE;QACxB,OAAO,IAAI,CAAC;KACb;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAXW,QAAA,oBAAoB,wBAW/B;AAEF;;;;;;;;GAQG;AACI,MAAM,0BAA0B,GAAG,CACxC,IAA6C,EAC7C,SAAiB,EACjB,SAAsC,EAChC,EAAE;IACR,8EAA8E;IAC9E,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,MAAM,IAAI,6BAAY,CAAC,SAAS,CAAC,CAAC;KACnC;SAAM,IAAI,CAAC,IAAI,EAAE;QAChB,MAAM,IAAI,6BAAY,iCACjB,+BAAa,CAAC,iBAAiB,KAClC,OAAO,EAAE;gBACP,IAAI,EAAE,oJAAoJ;gBAC1J,SAAS,EAAE,SAAS;aACrB,IACD,CAAC;KACJ;IAED,+BAA+B;IAC/B,IAAA,6BAAqB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC;AApBW,QAAA,0BAA0B,8BAoBrC;AAEF;;;;;GAKG;AACI,MAAM,qBAAqB,GAAG,CACnC,WAAwC,EACxC,SAAiB,EACX,EAAE;IACR,IAAI,WAAW,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;QACjD,MAAM,IAAI,6BAAY,iCACjB,+BAAa,CAAC,kBAAkB,KACnC,OAAO,EAAE,EAAE,SAAS,EAAE,IACtB,CAAC;KACJ;AACH,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAC9C,OAAgD,EACvC,EAAE;IACX,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,OAAO,KAAK,CAAC;KACd;SAAM;QACL,QAAQ,OAAO,CAAC,WAAW,EAAE;YAC3B,KAAK,0BAAW,CAAC,WAAW,CAAC;YAC7B,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,qBAAqB,CAAC;YACvC,KAAK,0BAAW,CAAC,uBAAuB,CAAC;YACzC,KAAK,0BAAW,CAAC,gBAAgB,CAAC;YAClC,KAAK,0BAAW,CAAC,uBAAuB;gBACtC,OAAO,IAAI,CAAC;YACd,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,kBAAkB;gBACjC,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,CAAC;gBACP,+HAA+H;gBAC/H,MAAM,eAAe,GAAU,OAAO,CAAC,WAAW,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,eAAe,EAAE,CAAC,CAAC;aACnE;SACF;KACF;AACH,CAAC,CAAC;AAxBW,QAAA,gCAAgC,oCAwB3C;AAEF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CACpC,OAAgD,EACvC,EAAE;IACX,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,OAAO,KAAK,CAAC;KACd;SAAM;QACL,QAAQ,OAAO,CAAC,WAAW,EAAE;YAC3B,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,kBAAkB;gBACjC,OAAO,IAAI,CAAC;YACd,KAAK,0BAAW,CAAC,WAAW,CAAC;YAC7B,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,qBAAqB,CAAC;YACvC,KAAK,0BAAW,CAAC,uBAAuB,CAAC;YACzC,KAAK,0BAAW,CAAC,gBAAgB,CAAC;YAClC,KAAK,0BAAW,CAAC,uBAAuB;gBACtC,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,CAAC;gBACP,+HAA+H;gBAC/H,MAAM,eAAe,GAAU,OAAO,CAAC,WAAW,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,eAAe,EAAE,CAAC,CAAC;aACnE;SACF;KACF;AACH,CAAC,CAAC;AAxBW,QAAA,sBAAsB,0BAwBjC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAC9C,OAAuB,EACjB,EAAE;IACR,IACE,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS;QACrE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAC/D;QACA,MAAM,IAAI,6BAAY,CAAC;YACrB,IAAI,EAAE,+BAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EACL,8LAA8L;SACjM,CAAC,CAAC;KACJ;IAED,IACE,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS;QACrE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAC/D;QACA,MAAM,IAAI,6BAAY,CAAC;YACrB,IAAI,EAAE,+BAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EACL,sLAAsL;SACzL,CAAC,CAAC;KACJ;AACH,CAAC,CAAC;AAxBW,QAAA,gCAAgC,oCAwB3C"}
+{"version":3,"file":"guard-utils.js","sourceRoot":"","sources":["../../src/common/guard-utils.ts"],"names":[],"mappings":";;;AAIA,yEAGuC;AACvC,qDAAgD;AAChD,uDAAkD;AAClD,iDAA6C;AAwC7C;;;;;GAKG;AACI,MAAM,oBAAoB,GAAG,CAClC,SAAiB,EACjB,mBAAyC,EAChC,EAAE;IACX,MAAM,oBAAoB,GAAG,mBAAmB,aAAnB,mBAAmB,uBAAnB,mBAAmB,CAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEtE,IAAI,oBAAoB,EAAE;QACxB,OAAO,IAAI,CAAC;KACb;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAXW,QAAA,oBAAoB,wBAW/B;AAEF;;;;;;;;GAQG;AACI,MAAM,0BAA0B,GAAG,CACxC,IAA6C,EAC7C,SAAiB,EACjB,SAAsC,EAChC,EAAE;IACR,8EAA8E;IAC9E,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,MAAM,IAAI,6BAAY,CAAC,SAAS,CAAC,CAAC;KACnC;SAAM,IAAI,CAAC,IAAI,EAAE;QAChB,MAAM,IAAI,6BAAY,iCACjB,+BAAa,CAAC,iBAAiB,KAClC,OAAO,EAAE;gBACP,IAAI,EAAE,oJAAoJ;gBAC1J,SAAS,EAAE,SAAS;aACrB,IACD,CAAC;KACJ;IAED,+BAA+B;IAC/B,IAAA,6BAAqB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC;AApBW,QAAA,0BAA0B,8BAoBrC;AAEF;;;;;GAKG;AACI,MAAM,qBAAqB,GAAG,CACnC,WAAwC,EACxC,SAAiB,EACX,EAAE;IACR,IAAI,WAAW,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;QACjD,MAAM,IAAI,6BAAY,iCACjB,+BAAa,CAAC,kBAAkB,KACnC,OAAO,EAAE,EAAE,SAAS,EAAE,IACtB,CAAC;KACJ;AACH,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAC9C,OAAgD,EACvC,EAAE;IACX,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,OAAO,KAAK,CAAC;KACd;SAAM;QACL,QAAQ,OAAO,CAAC,WAAW,EAAE;YAC3B,KAAK,0BAAW,CAAC,WAAW,CAAC;YAC7B,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,qBAAqB,CAAC;YACvC,KAAK,0BAAW,CAAC,uBAAuB,CAAC;YACzC,KAAK,0BAAW,CAAC,gBAAgB,CAAC;YAClC,KAAK,0BAAW,CAAC,uBAAuB;gBACtC,OAAO,IAAI,CAAC;YACd,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,kBAAkB;gBACjC,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,CAAC;gBACP,+HAA+H;gBAC/H,MAAM,eAAe,GAAU,OAAO,CAAC,WAAW,CAAC;gBACnD,MAAM,IAAI,4CAAoB,CAAC,eAAe,CAAC,CAAC;aACjD;SACF;KACF;AACH,CAAC,CAAC;AAxBW,QAAA,gCAAgC,oCAwB3C;AAEF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CACpC,OAAgD,EACvC,EAAE;IACX,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,OAAO,KAAK,CAAC;KACd;SAAM;QACL,QAAQ,OAAO,CAAC,WAAW,EAAE;YAC3B,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,kBAAkB;gBACjC,OAAO,IAAI,CAAC;YACd,KAAK,0BAAW,CAAC,WAAW,CAAC;YAC7B,KAAK,0BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,0BAAW,CAAC,qBAAqB,CAAC;YACvC,KAAK,0BAAW,CAAC,uBAAuB,CAAC;YACzC,KAAK,0BAAW,CAAC,gBAAgB,CAAC;YAClC,KAAK,0BAAW,CAAC,uBAAuB;gBACtC,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,CAAC;gBACP,+HAA+H;gBAC/H,MAAM,eAAe,GAAU,OAAO,CAAC,WAAW,CAAC;gBACnD,MAAM,IAAI,4CAAoB,CAAC,eAAe,CAAC,CAAC;aACjD;SACF;KACF;AACH,CAAC,CAAC;AAxBW,QAAA,sBAAsB,0BAwBjC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAC9C,OAAuB,EACjB,EAAE;IACR,IACE,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS;QACrE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAC/D;QACA,MAAM,IAAI,6BAAY,CAAC;YACrB,IAAI,EAAE,+BAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EACL,8LAA8L;SACjM,CAAC,CAAC;KACJ;IAED,IACE,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS;QACrE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAC/D;QACA,MAAM,IAAI,6BAAY,CAAC;YACrB,IAAI,EAAE,+BAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EACL,sLAAsL;SACzL,CAAC,CAAC;KACJ;AACH,CAAC,CAAC;AAxBW,QAAA,gCAAgC,oCAwB3C"}

package/dist/common/id-guard-errors.d.ts

@@ -91,5 +91,13 @@ export declare const IdGuardErrors: {
         readonly message: "A Permission Definition or an EndUserAuthorizationConfig was not found to be passed into Postgraphile build options. This is a development time issue.";
         readonly code: "AUTHORIZATION_OPTIONS_MISCONFIGURED";
     };
+    readonly Unauthorized: {
+        readonly message: "The subject has no permissions.";
+        readonly code: "UNAUTHORIZED";
+    };
+    readonly SubjectNotFound: {
+        readonly message: "User is authenticated, but subject information was not found. Please contact Axinom Support.";
+        readonly code: "SUBJECT_NOT_FOUND";
+    };
 };
 //# sourceMappingURL=id-guard-errors.d.ts.map

package/dist/common/id-guard-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"id-guard-errors.d.ts","sourceRoot":"","sources":["../../src/common/id-guard-errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmGhB,CAAC"}
+{"version":3,"file":"id-guard-errors.d.ts","sourceRoot":"","sources":["../../src/common/id-guard-errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4GhB,CAAC"}

package/dist/common/id-guard-errors.js

@@ -94,5 +94,13 @@ exports.IdGuardErrors = {
         message: 'A Permission Definition or an EndUserAuthorizationConfig was not found to be passed into Postgraphile build options. This is a development time issue.',
         code: 'AUTHORIZATION_OPTIONS_MISCONFIGURED',
     },
+    Unauthorized: {
+        message: 'The subject has no permissions.',
+        code: 'UNAUTHORIZED',
+    },
+    SubjectNotFound: {
+        message: 'User is authenticated, but subject information was not found. Please contact Axinom Support.',
+        code: 'SUBJECT_NOT_FOUND',
+    },
 };
 //# sourceMappingURL=id-guard-errors.js.map

package/dist/common/id-guard-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"id-guard-errors.js","sourceRoot":"","sources":["../../src/common/id-guard-errors.ts"],"names":[],"mappings":";;;AAAa,QAAA,aAAa,GAAG;IAC3B,mBAAmB,EAAE;QACnB,OAAO,EAAE,8BAA8B;QACvC,IAAI,EAAE,uBAAuB;KAC9B;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,sBAAsB;KAC7B;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,sBAAsB;KAC7B;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,qBAAqB;KAC5B;IACD,kBAAkB,EAAE;QAClB,OAAO,EACL,oMAAoM;QACtM,IAAI,EAAE,uBAAuB;KAC9B;IACD,SAAS,EAAE;QACT,OAAO,EACL,kHAAkH;QACpH,IAAI,EAAE,YAAY;KACnB;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,kCAAkC;QAC3C,IAAI,EAAE,kCAAkC;KACzC;IACD,4BAA4B,EAAE;QAC5B,OAAO,EACL,wEAAwE;QAC1E,IAAI,EAAE,iCAAiC;KACxC;IACD,wBAAwB,EAAE;QACxB,OAAO,EACL,oEAAoE;QACtE,IAAI,EAAE,6BAA6B;KACpC;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,qBAAqB;KAC5B;IACD,0BAA0B,EAAE;QAC1B,OAAO,EAAE,gEAAgE;QACzE,IAAI,EAAE,yBAAyB;KAChC;IACD,sCAAsC,EAAE;QACtC,OAAO,EAAE,6CAA6C;QACtD,IAAI,EAAE,4CAA4C;KACnD;IACD,uBAAuB,EAAE;QACvB,OAAO,EAAE,4CAA4C;QACrD,IAAI,EAAE,4BAA4B;KACnC;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,0BAA0B;KACjC;IACD,8BAA8B,EAAE;QAC9B,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,mCAAmC;KAC1C;IACD,iCAAiC,EAAE;QACjC,OAAO,EAAE,oDAAoD;QAC7D,IAAI,EAAE,sCAAsC;KAC7C;IACD,uBAAuB,EAAE;QACvB,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,2BAA2B;KAClC;IACD,kCAAkC,EAAE;QAClC,OAAO,EAAE,qDAAqD;QAC9D,IAAI,EAAE,uCAAuC;KAC9C;IACD,+BAA+B,EAAE;QAC/B,OAAO,EAAE,mDAAmD;QAC5D,IAAI,EAAE,qCAAqC;KAC5C;IACD,cAAc,EAAE;QACd,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,iBAAiB;KACxB;IACD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,mCAAmC;QAC5C,IAAI,EAAE,kCAAkC;KACzC;IACD,iBAAiB,EAAE;QACjB,OAAO,EACL,+JAA+J;QACjK,IAAI,EAAE,qBAAqB;KAC5B;IACD,iCAAiC,EAAE;QACjC,OAAO,EACL,wJAAwJ;QAC1J,IAAI,EAAE,qCAAqC;KAC5C;CACO,CAAC"}
+{"version":3,"file":"id-guard-errors.js","sourceRoot":"","sources":["../../src/common/id-guard-errors.ts"],"names":[],"mappings":";;;AAAa,QAAA,aAAa,GAAG;IAC3B,mBAAmB,EAAE;QACnB,OAAO,EAAE,8BAA8B;QACvC,IAAI,EAAE,uBAAuB;KAC9B;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,sBAAsB;KAC7B;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,sBAAsB;KAC7B;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,qBAAqB;KAC5B;IACD,kBAAkB,EAAE;QAClB,OAAO,EACL,oMAAoM;QACtM,IAAI,EAAE,uBAAuB;KAC9B;IACD,SAAS,EAAE;QACT,OAAO,EACL,kHAAkH;QACpH,IAAI,EAAE,YAAY;KACnB;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,kCAAkC;QAC3C,IAAI,EAAE,kCAAkC;KACzC;IACD,4BAA4B,EAAE;QAC5B,OAAO,EACL,wEAAwE;QAC1E,IAAI,EAAE,iCAAiC;KACxC;IACD,wBAAwB,EAAE;QACxB,OAAO,EACL,oEAAoE;QACtE,IAAI,EAAE,6BAA6B;KACpC;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,qBAAqB;KAC5B;IACD,0BAA0B,EAAE;QAC1B,OAAO,EAAE,gEAAgE;QACzE,IAAI,EAAE,yBAAyB;KAChC;IACD,sCAAsC,EAAE;QACtC,OAAO,EAAE,6CAA6C;QACtD,IAAI,EAAE,4CAA4C;KACnD;IACD,uBAAuB,EAAE;QACvB,OAAO,EAAE,4CAA4C;QACrD,IAAI,EAAE,4BAA4B;KACnC;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,0BAA0B;KACjC;IACD,8BAA8B,EAAE;QAC9B,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,mCAAmC;KAC1C;IACD,iCAAiC,EAAE;QACjC,OAAO,EAAE,oDAAoD;QAC7D,IAAI,EAAE,sCAAsC;KAC7C;IACD,uBAAuB,EAAE;QACvB,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,2BAA2B;KAClC;IACD,kCAAkC,EAAE;QAClC,OAAO,EAAE,qDAAqD;QAC9D,IAAI,EAAE,uCAAuC;KAC9C;IACD,+BAA+B,EAAE;QAC/B,OAAO,EAAE,mDAAmD;QAC5D,IAAI,EAAE,qCAAqC;KAC5C;IACD,cAAc,EAAE;QACd,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,iBAAiB;KACxB;IACD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,mCAAmC;QAC5C,IAAI,EAAE,kCAAkC;KACzC;IACD,iBAAiB,EAAE;QACjB,OAAO,EACL,+JAA+J;QACjK,IAAI,EAAE,qBAAqB;KAC5B;IACD,iCAAiC,EAAE;QACjC,OAAO,EACL,wJAAwJ;QAC1J,IAAI,EAAE,qCAAqC;KAC5C;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,cAAc;KACrB;IACD,eAAe,EAAE;QACf,OAAO,EACL,8FAA8F;QAChG,IAAI,EAAE,mBAAmB;KAC1B;CACO,CAAC"}

package/dist/graphql/generate-permissions-file-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-permissions-file-plugin.d.ts","sourceRoot":"","sources":["../../src/graphql/generate-permissions-file-plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,CAAC,EAAE,WAAW,EACpB,8BAA8B,CAAC,EAAE,MAAM,GACtC,MAAM,CAqBR"}
+{"version":3,"file":"generate-permissions-file-plugin.d.ts","sourceRoot":"","sources":["../../src/graphql/generate-permissions-file-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,CAAC,EAAE,WAAW,EACpB,8BAA8B,CAAC,EAAE,MAAM,GACtC,MAAM,CAsBR"}

package/dist/graphql/generate-permissions-file-plugin.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PermissionDefinitionExporterPlugin = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 /**
@@ -18,7 +19,10 @@ function PermissionDefinitionExporterPlugin(config, permissionDefinitionExportPa
             if (config === null || config === void 0 ? void 0 : config.isDev) {
                 if (permissionDefinitionExportPath !== undefined) {
                     if (options.permissionDefinition === undefined) {
-                        throw new Error('When a permissionDefinitionExportPath is provided to AxGuard Plugin, permissionDefinition must be defined in the Postgraphile options.');
+                        throw new mosaic_service_common_1.MosaicError({
+                            code: 'PERMISSION_DEFINITION_REQUIRED',
+                            message: `When a permissionDefinitionExportPath is provided to AxGuard Plugin, permissionDefinition must be defined in the Postgraphile options.`,
+                        });
                     }
                     writeSourceFile(permissionDefinitionExportPath, JSON.stringify(options.permissionDefinition, null, 2));
                 }

package/dist/graphql/generate-permissions-file-plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-permissions-file-plugin.js","sourceRoot":"","sources":["../../src/graphql/generate-permissions-file-plugin.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AAEpB,gDAAwB;AAGxB;;;;GAIG;AACH,SAAgB,kCAAkC,CAChD,MAAoB,EACpB,8BAAuC;IAEvC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1B,sDAAsD;QACtD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACpD,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,EAAE;gBACjB,IAAI,8BAA8B,KAAK,SAAS,EAAE;oBAChD,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE;wBAC9C,MAAM,IAAI,KAAK,CACb,wIAAwI,CACzI,CAAC;qBACH;oBACD,eAAe,CACb,8BAA8B,EAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CACtD,CAAC;iBACH;aACF;YAED,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAxBD,gFAwBC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,QAAgB;IACxD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;QACzC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;KAC1D;IACD,yFAAyF;IACzF,IAAI,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QAC1B,MAAM,eAAe,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,eAAe,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE;YAC3C,OAAO;SACR;KACF;IACD,YAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"generate-permissions-file-plugin.js","sourceRoot":"","sources":["../../src/graphql/generate-permissions-file-plugin.ts"],"names":[],"mappings":";;;;;;AAAA,yEAA4D;AAC5D,4CAAoB;AAEpB,gDAAwB;AAGxB;;;;GAIG;AACH,SAAgB,kCAAkC,CAChD,MAAoB,EACpB,8BAAuC;IAEvC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1B,sDAAsD;QACtD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACpD,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,EAAE;gBACjB,IAAI,8BAA8B,KAAK,SAAS,EAAE;oBAChD,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE;wBAC9C,MAAM,IAAI,mCAAW,CAAC;4BACpB,IAAI,EAAE,gCAAgC;4BACtC,OAAO,EAAE,wIAAwI;yBAClJ,CAAC,CAAC;qBACJ;oBACD,eAAe,CACb,8BAA8B,EAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CACtD,CAAC;iBACH;aACF;YAED,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAzBD,gFAyBC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,QAAgB;IACxD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;QACzC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;KAC1D;IACD,yFAAyF;IACzF,IAAI,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QAC1B,MAAM,eAAe,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,eAAe,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE;YAC3C,OAAO;SACR;KACF;IACD,YAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist/message-bus/message-handler-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-handler-authentication.d.ts","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,oBAAoB,EAErB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,yCAA0C,SAAQ,WAAW;IAC5E,OAAO,EAAE,8BAA8B,CAAC;CACzC;AAED,MAAM,WAAW,+BAAgC,SAAQ,WAAW;IAClE,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,YACjC,WAAW,KACnB,8BASF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,mCACvB,MAAM,GAAG,oBAAoB,mEAmC1C,CAAC"}
+{"version":3,"file":"message-handler-authentication.d.ts","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,oBAAoB,EAErB,MAAM,WAAW,CAAC;AAGnB,MAAM,WAAW,yCAA0C,SAAQ,WAAW;IAC5E,OAAO,EAAE,8BAA8B,CAAC;CACzC;AAED,MAAM,WAAW,+BAAgC,SAAQ,WAAW;IAClE,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,YACjC,WAAW,KACnB,8BAWF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,mCACvB,MAAM,GAAG,oBAAoB,mEAmC1C,CAAC"}

package/dist/message-bus/message-handler-authentication.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.authenticationMiddleware = exports.getMessageInfoManagementSubject = void 0;
 const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const common_1 = require("../common");
+const id_guard_errors_1 = require("../common/id-guard-errors");
 /**
  * Get the ManagementSubject that was extracted through the authenticationMiddleware. Throws an error if subject property is not present or empty.
  * @param message the RabbitMQ message that contains a JWT token
@@ -13,7 +14,10 @@ const getMessageInfoManagementSubject = (message) => {
     if (authenticatedMessage === null || authenticatedMessage === void 0 ? void 0 : authenticatedMessage.subject) {
         return authenticatedMessage.subject;
     }
-    throw new Error('Message info has no subject property. It is possible that authentication messaging middleware was not used to extract it from auth token.');
+    throw new mosaic_service_common_1.MosaicError({
+        code: id_guard_errors_1.IdGuardErrors.SubjectNotFound.code,
+        message: `Message info has no subject property. It is possible that authentication messaging middleware was not used to extract it from auth token.`,
+    });
 };
 exports.getMessageInfoManagementSubject = getMessageInfoManagementSubject;
 /**

package/dist/message-bus/message-handler-authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-handler-authentication.js","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":";;;AAKA,yEAA4D;AAE5D,sCAKmB;AAUnB;;;;GAIG;AACI,MAAM,+BAA+B,GAAG,CAC7C,OAAoB,EACY,EAAE;IAClC,MAAM,oBAAoB,GACxB,OAAoD,CAAC;IACvD,IAAI,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,OAAO,EAAE;QACjC,OAAO,oBAAoB,CAAC,OAAO,CAAC;KACrC;IACD,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,+BAA+B,mCAW1C;AAEF;;;;;;GAMG;AACI,MAAM,wBAAwB,GAAG,CACtC,UAAyC,EACzC,qBAAqB,GAAG,IAAI,EACG,EAAE;IACjC,OAAO,KAAK,EACV,OAAkC,EAClC,OAA8B,EAC9B,SAAoB,EACpB,IAAoC,EACrB,EAAE;QACjB,IAAI,KAAK,GAAsB,SAAS,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,KAAK,GAAG,IAAI,KAAK,CACf,4EAA4E,CAC7E,CAAC;SACH;aAAM;YACL,IAAI;gBACF,MAAM,OAAO,GAAG,MAAM,IAAA,0CAAiC,EACrD,KAAK,EACL,UAAU,CACX,CAAC;gBACD,OAAqD,CAAC,OAAO;oBAC5D,OAAO,CAAC;aACX;YAAC,OAAO,CAAC,EAAE;gBACV,IAAA,mCAAW,EAAC,CAAC,CAAC,CAAC;gBACf,KAAK,GAAG,CAAC,CAAC;aACX;SACF;QAED,IAAI,qBAAqB,IAAI,KAAK,KAAK,SAAS,EAAE;YAChD,MAAM,KAAK,CAAC;SACb;QAED,MAAM,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC,CAAC;AApCW,QAAA,wBAAwB,4BAoCnC"}
+{"version":3,"file":"message-handler-authentication.js","sourceRoot":"","sources":["../../src/message-bus/message-handler-authentication.ts"],"names":[],"mappings":";;;AAKA,yEAAyE;AAEzE,sCAKmB;AACnB,+DAA0D;AAU1D;;;;GAIG;AACI,MAAM,+BAA+B,GAAG,CAC7C,OAAoB,EACY,EAAE;IAClC,MAAM,oBAAoB,GACxB,OAAoD,CAAC;IACvD,IAAI,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,OAAO,EAAE;QACjC,OAAO,oBAAoB,CAAC,OAAO,CAAC;KACrC;IAED,MAAM,IAAI,mCAAW,CAAC;QACpB,IAAI,EAAE,+BAAa,CAAC,eAAe,CAAC,IAAI;QACxC,OAAO,EAAE,2IAA2I;KACrJ,CAAC,CAAC;AACL,CAAC,CAAC;AAbW,QAAA,+BAA+B,mCAa1C;AAEF;;;;;;GAMG;AACI,MAAM,wBAAwB,GAAG,CACtC,UAAyC,EACzC,qBAAqB,GAAG,IAAI,EACG,EAAE;IACjC,OAAO,KAAK,EACV,OAAkC,EAClC,OAA8B,EAC9B,SAAoB,EACpB,IAAoC,EACrB,EAAE;QACjB,IAAI,KAAK,GAAsB,SAAS,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE;YACvB,KAAK,GAAG,IAAI,KAAK,CACf,4EAA4E,CAC7E,CAAC;SACH;aAAM;YACL,IAAI;gBACF,MAAM,OAAO,GAAG,MAAM,IAAA,0CAAiC,EACrD,KAAK,EACL,UAAU,CACX,CAAC;gBACD,OAAqD,CAAC,OAAO;oBAC5D,OAAO,CAAC;aACX;YAAC,OAAO,CAAC,EAAE;gBACV,IAAA,mCAAW,EAAC,CAAC,CAAC,CAAC;gBACf,KAAK,GAAG,CAAC,CAAC;aACX;SACF;QAED,IAAI,qBAAqB,IAAI,KAAK,KAAK,SAAS,EAAE;YAChD,MAAM,KAAK,CAAC;SACb;QAED,MAAM,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC,CAAC;AApCW,QAAA,wBAAwB,4BAoCnC"}

package/dist/message-bus/message-handler-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-handler-permissions.d.ts","sourceRoot":"","sources":["../../src/message-bus/message-handler-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAC;AAG3D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,oCACnB,MAAM,EAAE,aACV,MAAM,kCAalB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,YAClB,8BAA8B,GAAG,SAAS,eACtC,MAAM,EAAE,aACV,MAAM,KAChB,QAAQ,IAAI,CAmBd,CAAC"}
+{"version":3,"file":"message-handler-permissions.d.ts","sourceRoot":"","sources":["../../src/message-bus/message-handler-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAC;AAI3D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,oCACnB,MAAM,EAAE,aACV,MAAM,kCAalB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,YAClB,8BAA8B,GAAG,SAAS,eACtC,MAAM,EAAE,aACV,MAAM,KAChB,QAAQ,IAAI,CAuBd,CAAC"}

package/dist/message-bus/message-handler-permissions.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.permissionsCheck = exports.permissionsMiddleware = void 0;
+const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
+const id_guard_errors_1 = require("../common/id-guard-errors");
 /**
  * Ensures that the subject contains the required permissions to execute the message handler
  * @param permissions - the list of permissions that allow to use that message handler
@@ -24,14 +26,24 @@ exports.permissionsMiddleware = permissionsMiddleware;
 const permissionsCheck = async (subject, permissions, serviceId) => {
     var _a;
     if (subject === undefined) {
-        throw new Error('Permission check failed as no authentication subject was provided.');
+        throw new mosaic_service_common_1.MosaicError({
+            code: id_guard_errors_1.IdGuardErrors.SubjectNotFound.code,
+            message: `Permission check failed as no authentication subject was provided.`,
+        });
     }
     const subjectPermissions = (_a = subject.permissions) === null || _a === void 0 ? void 0 : _a[serviceId];
     if (subjectPermissions === undefined || !Array.isArray(subjectPermissions)) {
-        throw new Error('Permission check failed as the subject has no permissions for this service.');
+        throw new mosaic_service_common_1.MosaicError({
+            code: id_guard_errors_1.IdGuardErrors.Unauthorized.code,
+            message: `Permission check failed as the subject has no permissions for this service.`,
+        });
     }
     if (!permissions.some((p) => subjectPermissions.includes(p))) {
-        throw new Error(`Permission check failed as the subject has no permissions for this message handler. The subject permissions are "${subjectPermissions}" while the required permissions are "${permissions}".`);
+        throw new mosaic_service_common_1.MosaicError({
+            code: id_guard_errors_1.IdGuardErrors.Unauthorized.code,
+            message: `Permission check failed as the subject has no permissions for this message handler. The subject permissions are [%s] while the required permissions are [%s].`,
+            messageParams: [subjectPermissions, permissions],
+        });
     }
 };
 exports.permissionsCheck = permissionsCheck;

package/dist/message-bus/message-handler-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-handler-permissions.js","sourceRoot":"","sources":["../../src/message-bus/message-handler-permissions.ts"],"names":[],"mappings":";;;AASA;;;;GAIG;AACI,MAAM,qBAAqB,GAAG,CACnC,WAAqB,EACrB,SAAiB,EACc,EAAE;IACjC,OAAO,KAAK,EACV,OAAkC,EAClC,OAA8B,EAC9B,SAAoB,EACpB,IAAoC,EACrB,EAAE;QACjB,MAAM,OAAO,GAAI,OAAqD;aACnE,OAAO,CAAC;QACX,MAAM,IAAA,wBAAgB,EAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,qBAAqB,yBAehC;AAEF;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,KAAK,EACnC,OAAmD,EACnD,WAAqB,EACrB,SAAiB,EACF,EAAE;;IACjB,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;KACH;IAED,MAAM,kBAAkB,GAAG,MAAA,OAAO,CAAC,WAAW,0CAAG,SAAS,CAAC,CAAC;IAC5D,IAAI,kBAAkB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;QAC1E,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;KACH;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5D,MAAM,IAAI,KAAK,CACb,oHAAoH,kBAAkB,yCAAyC,WAAW,IAAI,CAC/L,CAAC;KACH;AACH,CAAC,CAAC;AAvBW,QAAA,gBAAgB,oBAuB3B"}
+{"version":3,"file":"message-handler-permissions.js","sourceRoot":"","sources":["../../src/message-bus/message-handler-permissions.ts"],"names":[],"mappings":";;;AAKA,yEAA4D;AAG5D,+DAA0D;AAG1D;;;;GAIG;AACI,MAAM,qBAAqB,GAAG,CACnC,WAAqB,EACrB,SAAiB,EACc,EAAE;IACjC,OAAO,KAAK,EACV,OAAkC,EAClC,OAA8B,EAC9B,SAAoB,EACpB,IAAoC,EACrB,EAAE;QACjB,MAAM,OAAO,GAAI,OAAqD;aACnE,OAAO,CAAC;QACX,MAAM,IAAA,wBAAgB,EAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,qBAAqB,yBAehC;AAEF;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,KAAK,EACnC,OAAmD,EACnD,WAAqB,EACrB,SAAiB,EACF,EAAE;;IACjB,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,MAAM,IAAI,mCAAW,CAAC;YACpB,IAAI,EAAE,+BAAa,CAAC,eAAe,CAAC,IAAI;YACxC,OAAO,EAAE,oEAAoE;SAC9E,CAAC,CAAC;KACJ;IAED,MAAM,kBAAkB,GAAG,MAAA,OAAO,CAAC,WAAW,0CAAG,SAAS,CAAC,CAAC;IAC5D,IAAI,kBAAkB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;QAC1E,MAAM,IAAI,mCAAW,CAAC;YACpB,IAAI,EAAE,+BAAa,CAAC,YAAY,CAAC,IAAI;YACrC,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;KACJ;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5D,MAAM,IAAI,mCAAW,CAAC;YACpB,IAAI,EAAE,+BAAa,CAAC,YAAY,CAAC,IAAI;YACrC,OAAO,EAAE,+JAA+J;YACxK,aAAa,EAAE,CAAC,kBAAkB,EAAE,WAAW,CAAC;SACjD,CAAC,CAAC;KACJ;AACH,CAAC,CAAC;AA3BW,QAAA,gBAAgB,oBA2B3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-id-guard",
-  "version": "0.28.0-rc.7",
+  "version": "0.28.0-rc.9",
   "description": "Authentication and authorization helpers for Axinom Mosaic services",
   "author": "Axinom",
   "license": "PROPRIETARY",
@@ -28,10 +28,10 @@
     "lint": "eslint . --ext .ts,.tsx,.js --color --cache"
   },
   "dependencies": {
-    "@axinom/mosaic-id-utils": "^0.15.13-rc.7",
-    "@axinom/mosaic-message-bus": "^0.23.0-rc.7",
-    "@axinom/mosaic-service-common": "^0.45.0-rc.7",
-    "@axinom/mosaic-transactional-inbox-outbox": "^0.5.0-rc.7",
+    "@axinom/mosaic-id-utils": "^0.15.13-rc.9",
+    "@axinom/mosaic-message-bus": "^0.23.0-rc.9",
+    "@axinom/mosaic-service-common": "^0.45.0-rc.9",
+    "@axinom/mosaic-transactional-inbox-outbox": "^0.5.0-rc.9",
     "amqplib": "^0.10.3",
     "express": "^4.17.1",
     "express-bearer-token": "^2.4.0",
@@ -64,5 +64,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "6fe0cfc09cff474ce0b645cd263455ce6c93dbc8"
+  "gitHead": "ab964b4541c49ea5b84693de4d2a2c809dbb0f51"
 }

package/src/common/guard-utils.ts

@@ -2,7 +2,10 @@ import {
   EndUserAuthorizationConfig,
   PermissionDefinition,
 } from '@axinom/mosaic-id-utils';
-import { MosaicErrorInfo } from '@axinom/mosaic-service-common';
+import {
+  MosaicErrorInfo,
+  UnreachableCaseError,
+} from '@axinom/mosaic-service-common';
 import { IdGuardError } from './id-guard-error';
 import { IdGuardErrors } from './id-guard-errors';
 import { SubjectType } from './subject-type';
@@ -138,7 +141,7 @@ export const isAuthenticatedManagementSubject = (
       default: {
         // This block would never execute in runtime, and used as a build-time exhaustive switch-case check for the `SubjectType` ENUM.
         const exhaustiveCheck: never = subject.subjectType;
-        throw new Error(`Unhandled SubjectType case: ${exhaustiveCheck}`);
+        throw new UnreachableCaseError(exhaustiveCheck);
       }
     }
   }
@@ -169,7 +172,7 @@ export const isAuthenticatedEndUser = (
       default: {
         // This block would never execute in runtime, and used as a build-time exhaustive switch-case check for the `SubjectType` ENUM.
         const exhaustiveCheck: never = subject.subjectType;
-        throw new Error(`Unhandled SubjectType case: ${exhaustiveCheck}`);
+        throw new UnreachableCaseError(exhaustiveCheck);
       }
     }
   }

package/src/common/id-guard-errors.ts

@@ -97,4 +97,13 @@ export const IdGuardErrors = {
       'A Permission Definition or an EndUserAuthorizationConfig was not found to be passed into Postgraphile build options. This is a development time issue.',
     code: 'AUTHORIZATION_OPTIONS_MISCONFIGURED',
   },
+  Unauthorized: {
+    message: 'The subject has no permissions.',
+    code: 'UNAUTHORIZED',
+  },
+  SubjectNotFound: {
+    message:
+      'User is authenticated, but subject information was not found. Please contact Axinom Support.',
+    code: 'SUBJECT_NOT_FOUND',
+  },
 } as const;

package/src/common/parse-jwt-token.spec.ts

@@ -1,3 +1,4 @@
+import { MosaicError } from '@axinom/mosaic-service-common';
 import * as fs from 'fs';
 import jwt, { TokenExpiredError } from 'jsonwebtoken';
 import { JwksError, SigningKeyNotFoundError } from 'jwks-rsa';
@@ -537,9 +538,10 @@ describe('parse-jwt-token', () => {
 
         getAuthenticatedManagementSubjectMock.mockImplementation(
           (_token, _authParams) => {
-            throw new Error(
-              'Some unknown error thrown by the method or the library',
-            );
+            throw new MosaicError({
+              code: 'TEST_CODE',
+              message: `Some unknown error thrown by the method or the library.`,
+            });
           },
         );
         const authContext = await parseJwtToken(
@@ -555,7 +557,7 @@ describe('parse-jwt-token', () => {
           code: 'ACCESS_TOKEN_VERIFICATION_FAILED',
           message: `Access token verification failed`,
           error: {
-            message: 'Some unknown error thrown by the method or the library',
+            message: 'Some unknown error thrown by the method or the library.',
           },
         });
         getAuthenticatedManagementSubjectMock.mockRestore();

package/src/graphql/generate-permissions-file-plugin.ts

@@ -1,3 +1,4 @@
+import { MosaicError } from '@axinom/mosaic-service-common';
 import fs from 'fs';
 import { BasicConfig } from 'libs/service-common/dist';
 import path from 'path';
@@ -18,9 +19,10 @@ export function PermissionDefinitionExporterPlugin(
       if (config?.isDev) {
         if (permissionDefinitionExportPath !== undefined) {
           if (options.permissionDefinition === undefined) {
-            throw new Error(
-              'When a permissionDefinitionExportPath is provided to AxGuard Plugin, permissionDefinition must be defined in the Postgraphile options.',
-            );
+            throw new MosaicError({
+              code: 'PERMISSION_DEFINITION_REQUIRED',
+              message: `When a permissionDefinitionExportPath is provided to AxGuard Plugin, permissionDefinition must be defined in the Postgraphile options.`,
+            });
           }
           writeSourceFile(
             permissionDefinitionExportPath,

package/src/message-bus/guarded-transactional-inbox-message-handler.spec.ts

@@ -1,4 +1,5 @@
 /* eslint-disable no-console */
+import { MosaicError } from '@axinom/mosaic-service-common';
 import 'jest-extended';
 import { GuardedTransactionalInboxMessageHandler } from './guarded-transactional-inbox-message-handler';
 
@@ -7,11 +8,17 @@ class TestTransactionalInboxMessageHandler extends GuardedTransactionalInboxMess
   any
 > {
   override handleMessage(): Promise<void> {
-    throw new Error('Method not implemented.');
+    throw new MosaicError({
+      message: 'Method not implemented.',
+      code: 'TEST_CODE',
+    });
   }
 
   override setPgSettings(): Promise<void> {
-    throw new Error('Method not implemented.');
+    throw new MosaicError({
+      message: 'Method not implemented.',
+      code: 'TEST_CODE',
+    });
   }
 }
 

package/src/message-bus/message-handler-authentication.spec.ts

@@ -1,11 +1,12 @@
 import { MessageEnvelope, MessageInfo } from '@axinom/mosaic-message-bus';
+import { MosaicError } from '@axinom/mosaic-service-common';
 import { AckOrNack, Recovery } from 'rascal';
 import { getAuthenticatedManagementSubject } from '../common/get-authenticated-subject';
 import {
-  createTestMessage,
-  createTestUser,
   DEFAULT_SYSTEM_USERNAME,
   TestMessage,
+  createTestMessage,
+  createTestUser,
 } from '../tests/test-utils';
 import {
   AuthenticatedManagementSubjectMessageInfo,
@@ -20,7 +21,10 @@ const validToken = 'Bearer 9624bf1a-629a-457d-bf91-d923f6aad2a3';
     if (token === validToken) {
       return createTestUser();
     }
-    throw new Error('Invalid token');
+    throw new MosaicError({
+      message: 'Invalid token.',
+      code: 'TEST_CODE',
+    });
   },
 );
 

package/src/message-bus/message-handler-authentication.ts

@@ -3,7 +3,7 @@ import {
   MessageInfo,
   OnMessageMiddleware,
 } from '@axinom/mosaic-message-bus';
-import { assertError } from '@axinom/mosaic-service-common';
+import { MosaicError, assertError } from '@axinom/mosaic-service-common';
 import { AckOrNack } from 'rascal';
 import {
   AuthenticatedEndUser,
@@ -11,6 +11,7 @@ import {
   AuthenticationConfig,
   getAuthenticatedManagementSubject,
 } from '../common';
+import { IdGuardErrors } from '../common/id-guard-errors';
 
 export interface AuthenticatedManagementSubjectMessageInfo extends MessageInfo {
   subject: AuthenticatedManagementSubject;
@@ -33,9 +34,11 @@ export const getMessageInfoManagementSubject = (
   if (authenticatedMessage?.subject) {
     return authenticatedMessage.subject;
   }
-  throw new Error(
-    'Message info has no subject property. It is possible that authentication messaging middleware was not used to extract it from auth token.',
-  );
+
+  throw new MosaicError({
+    code: IdGuardErrors.SubjectNotFound.code,
+    message: `Message info has no subject property. It is possible that authentication messaging middleware was not used to extract it from auth token.`,
+  });
 };
 
 /**

package/src/message-bus/message-handler-managed-authentication.spec.ts

@@ -1,11 +1,12 @@
 import { MessageEnvelope, MessageInfo } from '@axinom/mosaic-message-bus';
+import { MosaicError } from '@axinom/mosaic-service-common';
 import { AckOrNack, Recovery } from 'rascal';
 import { getAuthenticatedManagementSubject } from '../common/get-authenticated-subject';
 import {
-  createTestMessage,
-  createTestUser,
   DEFAULT_SYSTEM_USERNAME,
   TestMessage,
+  createTestMessage,
+  createTestUser,
 } from '../tests/test-utils';
 import {
   AuthenticatedManagementSubjectMessageInfo,
@@ -20,7 +21,10 @@ const validToken = 'Bearer 9624bf1a-629a-457d-bf91-d923f6aad2a3';
     if (token === validToken) {
       return createTestUser();
     }
-    throw new Error('Invalid token');
+    throw new MosaicError({
+      message: 'Invalid token.',
+      code: 'TEST_CODE',
+    });
   },
 );
 

package/src/message-bus/message-handler-permissions.ts

@@ -3,8 +3,10 @@ import {
   MessageInfo,
   OnMessageMiddleware,
 } from '@axinom/mosaic-message-bus';
+import { MosaicError } from '@axinom/mosaic-service-common';
 import { AckOrNack } from 'rascal';
 import { AuthenticatedManagementSubject } from '../common';
+import { IdGuardErrors } from '../common/id-guard-errors';
 import { AuthenticatedManagementSubjectMessageInfo } from './message-handler-authentication';
 
 /**
@@ -41,21 +43,25 @@ export const permissionsCheck = async (
   serviceId: string,
 ): Promise<void> => {
   if (subject === undefined) {
-    throw new Error(
-      'Permission check failed as no authentication subject was provided.',
-    );
+    throw new MosaicError({
+      code: IdGuardErrors.SubjectNotFound.code,
+      message: `Permission check failed as no authentication subject was provided.`,
+    });
   }
 
   const subjectPermissions = subject.permissions?.[serviceId];
   if (subjectPermissions === undefined || !Array.isArray(subjectPermissions)) {
-    throw new Error(
-      'Permission check failed as the subject has no permissions for this service.',
-    );
+    throw new MosaicError({
+      code: IdGuardErrors.Unauthorized.code,
+      message: `Permission check failed as the subject has no permissions for this service.`,
+    });
   }
 
   if (!permissions.some((p) => subjectPermissions.includes(p))) {
-    throw new Error(
-      `Permission check failed as the subject has no permissions for this message handler. The subject permissions are "${subjectPermissions}" while the required permissions are "${permissions}".`,
-    );
+    throw new MosaicError({
+      code: IdGuardErrors.Unauthorized.code,
+      message: `Permission check failed as the subject has no permissions for this message handler. The subject permissions are [%s] while the required permissions are [%s].`,
+      messageParams: [subjectPermissions, permissions],
+    });
   }
 };