@axinom/mosaic-id-guard 0.48.0 → 0.49.0-rc.10

package/README.md

@@ -2,9 +2,15 @@
 
 ## About the Package
 
-This package is part of the Axinom Mosaic development platform. More information can be found at https://portal.axinom.com/mosaic.
+This package is part of the Axinom Mosaic development platform. More information
+can be found at https://portal.axinom.com/mosaic.
 
 ## License
 
-This package can be licensed under the [Axinom Products Licensing Agreement](https://portal.axinom.com/mosaic/contracts/products-licensing-agreement) or evaluated under the [Axinom Products Evaluation Agreement](https://portal.axinom.com/mosaic/contracts/products-evaluation-agreement).  
-No part of Axinom's software may be copied, modified, propagated, or distributed except in accordance with the terms contained in the Axinom Products Licensing Agreement and Axinom Products Evaluation Agreement.
+This package can be licensed under the
+[Axinom Products Licensing Agreement](https://portal.axinom.com/mosaic/contracts/products-licensing-agreement)
+or evaluated under the
+[Axinom Products Evaluation Agreement](https://portal.axinom.com/mosaic/contracts/products-evaluation-agreement).  
+No part of Axinom's software may be copied, modified, propagated, or distributed
+except in accordance with the terms contained in the Axinom Products Licensing
+Agreement and Axinom Products Evaluation Agreement.

package/dist/cjs/common/deprecated/error-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-code.d.ts","sourceRoot":"","sources":["../../../../src/common/deprecated/error-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,oBAAY,SAAS;IACnB,kBAAkB,yBAAyB;IAC3C,iBAAiB,wBAAwB;IACzC,cAAc,oBAAoB;IAClC,kBAAkB,yBAAyB;IAC3C,kBAAkB,0BAA0B;IAC5C,SAAS,eAAe;IACxB,6BAA6B,qCAAqC;IAClE,iBAAiB,wBAAwB;IACzC,mBAAmB,0BAA0B;IAC7C,4BAA4B,oCAAoC;IAChE,wBAAwB,gCAAgC;CACzD"}

package/dist/cjs/common/deprecated/error-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-code.js","sourceRoot":"","sources":["../../../../src/common/deprecated/error-code.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,IAAY,SAYX;AAZD,WAAY,SAAS;IACnB,wDAA2C,CAAA;IAC3C,sDAAyC,CAAA;IACzC,+CAAkC,CAAA;IAClC,wDAA2C,CAAA;IAC3C,yDAA4C,CAAA;IAC5C,qCAAwB,CAAA;IACxB,+EAAkE,CAAA;IAClE,sDAAyC,CAAA;IACzC,0DAA6C,CAAA;IAC7C,6EAAgE,CAAA;IAChE,qEAAwD,CAAA;AAC1D,CAAC,EAZW,SAAS,yBAAT,SAAS,QAYpB"}

package/dist/cjs/common/deprecated/index.d.ts

@@ -0,0 +1,2 @@
+export * from './error-code.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/common/deprecated/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/common/deprecated/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC"}

package/dist/{common → cjs/common}/deprecated/index.js

@@ -14,5 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./error-code"), exports);
+__exportStar(require("./error-code.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/common/deprecated/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/common/deprecated/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC"}

package/dist/{common → cjs/common}/get-authenticated-subject.d.ts

@@ -1,4 +1,4 @@
-import { AuthenticatedEndUser, AuthenticatedEndUserApplication, AuthenticatedManagementSubject, AuthenticationConfig } from './types';
+import type { AuthenticatedEndUser, AuthenticatedEndUserApplication, AuthenticatedManagementSubject, AuthenticationConfig } from './types/index.js';
 export declare const EMBEDDED_END_USER_TOKEN_KEY = "mosaic.end-user.accessToken";
 /**
  * Parses a JWT token to produce an `AuthenticatedManagementSubject`.

package/dist/cjs/common/get-authenticated-subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-authenticated-subject.d.ts","sourceRoot":"","sources":["../../../src/common/get-authenticated-subject.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,8BAA8B,EAC9B,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,GAC5C,OAAO,MAAM,EACb,YAAY,MAAM,GAAG,oBAAoB,KACxC,OAAO,CAAC,8BAA8B,CAsDxC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,GAClC,OAAO,MAAM,EACb,YAAY,MAAM,GAAG,oBAAoB,KACxC,OAAO,CAAC,oBAAoB,GAAG,+BAA+B,CAqEhE,CAAC"}

package/dist/{common → cjs/common}/get-authenticated-subject.js

@@ -6,11 +6,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAuthenticatedEndUser = exports.getAuthenticatedManagementSubject = exports.EMBEDDED_END_USER_TOKEN_KEY = void 0;
 const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const id_guard_error_1 = require("./id-guard-error");
-const id_guard_errors_1 = require("./id-guard-errors");
-const jwks_client_1 = require("./jwks-client");
-const jwt_verify_options_1 = require("./jwt-verify-options");
-const subject_type_1 = require("./subject-type");
+const id_guard_error_js_1 = require("./id-guard-error.js");
+const id_guard_errors_js_1 = require("./id-guard-errors.js");
+const jwks_client_js_1 = require("./jwks-client.js");
+const jwt_verify_options_js_1 = require("./jwt-verify-options.js");
+const subject_type_js_1 = require("./subject-type.js");
 exports.EMBEDDED_END_USER_TOKEN_KEY = 'mosaic.end-user.accessToken';
 /**
  * Parses a JWT token to produce an `AuthenticatedManagementSubject`.
@@ -31,9 +31,9 @@ const getAuthenticatedManagementSubject = async (token, authParams) => {
     tenantId = decoded.tenantId;
     environmentId = decoded.environmentId;
     isManagedServiceAccount =
-        decoded.subjectType === subject_type_1.SubjectType.ManagedServiceAccount;
+        decoded.subjectType === subject_type_js_1.SubjectType.ManagedServiceAccount;
     // If token is not issued by the ID Service, the jwks URI will not be set, and the verification will fail.
-    if (issuer === jwt_verify_options_1.TOKEN_ISSUER_ID_SERVICE) {
+    if (issuer === jwt_verify_options_js_1.TOKEN_ISSUER_ID_SERVICE) {
         if (typeof authParams === 'string') {
             if (isManagedServiceAccount) {
                 jwksUri = new URL(`/.well-known/jwks.json`, authParams).href;
@@ -86,14 +86,14 @@ const getAuthenticatedEndUser = async (token, authParams) => {
     const decodedEndUserToken = jsonwebtoken_1.default.decode(endUserToken);
     // There can be a chance the token passed through `mosaic.end-user.accessToken` is not a valid JWT. (i.e. a simple string)
     if ((0, mosaic_service_common_1.isNullOrWhitespace)(decodedEndUserToken)) {
-        throw new id_guard_error_1.IdGuardError(id_guard_errors_1.IdGuardErrors.JwtIsNotMosaicEndUserToken);
+        throw new id_guard_error_js_1.IdGuardError(id_guard_errors_js_1.IdGuardErrors.JwtIsNotMosaicEndUserToken);
     }
     const issuer = decodedEndUserToken.iss;
     tenantId = decodedEndUserToken.tenantId;
     environmentId = decodedEndUserToken.environmentId;
     const applicationId = decodedEndUserToken.applicationId;
     // If token is not issued by the User Service, the jwks URI will not be set, and the verification will fail.
-    if (issuer === jwt_verify_options_1.TOKEN_ISSUER_USER_SERVICE) {
+    if (issuer === jwt_verify_options_js_1.TOKEN_ISSUER_USER_SERVICE) {
         if (typeof authParams === 'string') {
             jwksUri = new URL(`/${tenantId}/${environmentId}/${applicationId}/.well-known/jwks.json`, authParams).href;
         }
@@ -107,26 +107,25 @@ const getAuthenticatedEndUser = async (token, authParams) => {
             jwksUri = new URL(`/${tenantId}/${environmentId}/${applicationId}/.well-known/jwks.json`, authParams.authEndpoint).href;
         }
     }
-    if (decodedEndUserToken.subjectType === subject_type_1.SubjectType.EndUserApplication) {
+    if (decodedEndUserToken.subjectType === subject_type_js_1.SubjectType.EndUserApplication) {
         // Verify access token using JWKS
         return (await verifyTokenAndGetAuthenticatedSubject(endUserToken, jwksUri, 'END_USER_APPLICATION'));
     }
-    else if (decodedEndUserToken.subjectType === subject_type_1.SubjectType.EndUserAccount) {
+    else if (decodedEndUserToken.subjectType === subject_type_js_1.SubjectType.EndUserAccount) {
         // Verify access token using JWKS
         return (await verifyTokenAndGetAuthenticatedSubject(endUserToken, jwksUri, 'END_USER'));
     }
     else {
-        throw new id_guard_error_1.IdGuardError(id_guard_errors_1.IdGuardErrors.JwtIsNotMosaicEndUserToken);
+        throw new id_guard_error_js_1.IdGuardError(id_guard_errors_js_1.IdGuardErrors.JwtIsNotMosaicEndUserToken);
     }
 };
 exports.getAuthenticatedEndUser = getAuthenticatedEndUser;
 const verifyTokenAndGetAuthenticatedSubject = async (token, jwksUri, authType) => {
     return new Promise((resolve, reject) => {
-        const jwksClient = (0, jwks_client_1.getJwksClient)(jwksUri);
+        const jwksClient = (0, jwks_client_js_1.getJwksClient)(jwksUri);
         const getPublicKey = (header, callback) => {
-            var _a;
             jwksClient
-                .getSigningKey((_a = header.kid) !== null && _a !== void 0 ? _a : 'MISSING_KEY_ID_IN_JWT_HEADER')
+                .getSigningKey(header.kid ?? 'MISSING_KEY_ID_IN_JWT_HEADER')
                 .then((key) => {
                 callback(null, key.getPublicKey());
             }, (error) => {
@@ -134,7 +133,7 @@ const verifyTokenAndGetAuthenticatedSubject = async (token, jwksUri, authType) =
                 return;
             });
         };
-        jsonwebtoken_1.default.verify(token, getPublicKey, (0, jwt_verify_options_1.getJwtVerifyOptions)(), (error, decoded) => {
+        jsonwebtoken_1.default.verify(token, getPublicKey, (0, jwt_verify_options_js_1.getJwtVerifyOptions)(), (error, decoded) => {
             if (error) {
                 reject(error);
                 return;

package/dist/cjs/common/get-authenticated-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-authenticated-subject.js","sourceRoot":"","sources":["../../../src/common/get-authenticated-subject.ts"],"names":[],"mappings":";;;;;;AAAA,yEAAmE;AACnE,gEAA+B;AAC/B,2DAAmD;AACnD,6DAAqD;AACrD,qDAAiD;AACjD,mEAIiC;AACjC,uDAAgD;AAQnC,QAAA,2BAA2B,GAAG,6BAA6B,CAAC;AAEzE;;;;;;;GAOG;AACI,MAAM,iCAAiC,GAAG,KAAK,EACpD,KAAa,EACb,UAAyC,EACA,EAAE;IAC3C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,CAAmC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE3B,gEAAgE;IAChE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC5B,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,uBAAuB;QACrB,OAAO,CAAC,WAAW,KAAK,6BAAW,CAAC,qBAAqB,CAAC;IAE5D,0GAA0G;IAC1G,IAAI,MAAM,KAAK,+CAAuB,EAAE,CAAC;QACvC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,wBAAwB,EACrD,UAAU,CACX,CAAC,IAAI,CAAC;YACT,CAAC;QACH,CAAC;aAAM,CAAC;YACN,6EAA6E;YAC7E,IACE,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,aAAa,CAAC,EAC7C,CAAC;gBACD,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAC/B,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;YAC3C,CAAC;YAED,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,YAAY,CAAC;qBACjE,IAAI,CAAC;YACV,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,wBAAwB,EACrD,UAAU,CAAC,YAAY,CACxB,CAAC,IAAI,CAAC;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAmC,CAAC;AACvC,CAAC,CAAC;AAzDW,QAAA,iCAAiC,qCAyD5C;AAEF;;;;;;;GAOG;AACI,MAAM,uBAAuB,GAAG,KAAK,EAC1C,KAAa,EACb,UAAyC,EACwB,EAAE;IACnE,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,CAA4B,CAAC;IAElE,kCAAkC;IAClC,IAAI,YAAY,CAAC,mCAA2B,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5D,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,mCAA2B,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,mBAAmB,GAAG,sBAAG,CAAC,MAAM,CACpC,YAAY,CACsB,CAAC;IAErC,0HAA0H;IAC1H,IAAI,IAAA,0CAAkB,EAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,gCAAY,CAAC,kCAAa,CAAC,0BAA0B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC;IACvC,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC;IACxC,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC;IAClD,MAAM,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC;IAExD,4GAA4G;IAC5G,IAAI,MAAM,KAAK,iDAAyB,EAAE,CAAC;QACzC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,IAAI,aAAa,wBAAwB,EACtE,UAAU,CACX,CAAC,IAAI,CAAC;QACT,CAAC;aAAM,CAAC;YACN,6EAA6E;YAC7E,IACE,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,CAAC,IAAA,0CAAkB,EAAC,UAAU,CAAC,aAAa,CAAC,EAC7C,CAAC;gBACD,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAC/B,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;YAC3C,CAAC;YAED,OAAO,GAAG,IAAI,GAAG,CACf,IAAI,QAAQ,IAAI,aAAa,IAAI,aAAa,wBAAwB,EACtE,UAAU,CAAC,YAAY,CACxB,CAAC,IAAI,CAAC;QACT,CAAC;IACH,CAAC;IAED,IAAI,mBAAmB,CAAC,WAAW,KAAK,6BAAW,CAAC,kBAAkB,EAAE,CAAC;QACvE,iCAAiC;QACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,YAAY,EACZ,OAAO,EACP,sBAAsB,CACvB,CAAoC,CAAC;IACxC,CAAC;SAAM,IAAI,mBAAmB,CAAC,WAAW,KAAK,6BAAW,CAAC,cAAc,EAAE,CAAC;QAC1E,iCAAiC;QACjC,OAAO,CAAC,MAAM,qCAAqC,CACjD,YAAY,EACZ,OAAO,EACP,UAAU,CACX,CAAyB,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,gCAAY,CAAC,kCAAa,CAAC,0BAA0B,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC;AAxEW,QAAA,uBAAuB,2BAwElC;AAEF,MAAM,qCAAqC,GAAG,KAAK,EACjD,KAAa,EACb,OAAe,EACf,QAA4D,EAK5D,EAAE;IACF,OAAO,IAAI,OAAO,CAIhB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,UAAU,GAAG,IAAA,8BAAa,EAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,YAAY,GAA6B,CAC7C,MAAqB,EACrB,QAAgC,EAC1B,EAAE;YACR,UAAU;iBACP,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,8BAA8B,CAAC;iBAC3D,IAAI,CACH,CAAC,GAAG,EAAE,EAAE;gBACN,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACrC,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC,CACF,CAAC;QACN,CAAC,CAAC;QAEF,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,IAAA,2CAAmB,GAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACxE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC9B,OAAO,CAAC,OAAyC,CAAC,CAAC;YACrD,CAAC;iBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,CAAC,OAA+B,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAA0C,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/{common → cjs/common}/guard-utils.d.ts

@@ -1,6 +1,6 @@
-import { EndUserAuthorizationConfig, PermissionDefinition } from '@axinom/mosaic-id-utils';
-import { MosaicErrorInfo } from '@axinom/mosaic-service-common';
-import { GenericAuthenticatedSubject } from './types/authenticated-subject-models';
+import type { EndUserAuthorizationConfig, PermissionDefinition } from '@axinom/mosaic-id-utils';
+import { type MosaicErrorInfo } from '@axinom/mosaic-service-common';
+import type { GenericAuthenticatedSubject } from './types/authenticated-subject-models.js';
 /**
  * Options that are extracted from Postgraphile context and required by IdGuard plugin to check if operation is authorized.
  */

package/dist/cjs/common/guard-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-utils.d.ts","sourceRoot":"","sources":["../../../src/common/guard-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAC3F;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;OAEG;IACH,0BAA0B,EAAE,0BAA0B,CAAC;CACxD;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAElC;;OAEG;IACH,oBAAoB,EAAE,uBAAuB,CAAC;CAC/C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,WAAW,MAAM,EACjB,qBAAqB,MAAM,EAAE,GAAG,SAAS,KACxC,OAQF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACrC,MAAM,2BAA2B,GAAG,SAAS,EAC7C,WAAW,MAAM,EACjB,WAAW,eAAe,GAAG,SAAS,KACrC,IAgBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAChC,aAAa,2BAA2B,EACxC,WAAW,MAAM,KAChB,IAOF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,GAC3C,SAAS,2BAA2B,GAAG,SAAS,KAC/C,OAsBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GACjC,SAAS,2BAA2B,GAAG,SAAS,KAC/C,OAsBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,GAC3C,SAAS,cAAc,KACtB,IAsBF,CAAC"}

package/dist/{common → cjs/common}/guard-utils.js

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validatePostgraphileBuildOptions = exports.isAuthenticatedEndUser = exports.isAuthenticatedManagementSubject = exports.assertTokenNotExpired = exports.assertSubjectAuthenticated = exports.isAnonymousOperation = void 0;
 const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
-const id_guard_error_1 = require("./id-guard-error");
-const id_guard_errors_1 = require("./id-guard-errors");
-const subject_type_1 = require("./subject-type");
+const id_guard_error_js_1 = require("./id-guard-error.js");
+const id_guard_errors_js_1 = require("./id-guard-errors.js");
+const subject_type_js_1 = require("./subject-type.js");
 /**
  * This function returns if an operation sent in `GqlAuthorizationOptions` is an Anonymous operation or not.
  * @param options `GqlAuthorizationOptions` object
@@ -12,7 +12,7 @@ const subject_type_1 = require("./subject-type");
  * @returns `true` if `options.operation` is an Anonymous operation. `false` otherwise.
  */
 const isAnonymousOperation = (operation, anonymousOperations) => {
-    const isAnonymousOperation = anonymousOperations === null || anonymousOperations === void 0 ? void 0 : anonymousOperations.includes(operation);
+    const isAnonymousOperation = anonymousOperations?.includes(operation);
     if (isAnonymousOperation) {
         return true;
     }
@@ -31,13 +31,16 @@ exports.isAnonymousOperation = isAnonymousOperation;
 const assertSubjectAuthenticated = (user, serviceId, errorInfo) => {
     // Error occurred and handled while extracting user information from JWT token
     if (errorInfo !== undefined) {
-        throw new id_guard_error_1.IdGuardError(errorInfo);
+        throw new id_guard_error_js_1.IdGuardError(errorInfo);
     }
     else if (!user) {
-        throw new id_guard_error_1.IdGuardError(Object.assign(Object.assign({}, id_guard_errors_1.IdGuardErrors.UserNotAuthorized), { details: {
+        throw new id_guard_error_js_1.IdGuardError({
+            ...id_guard_errors_js_1.IdGuardErrors.UserNotAuthorized,
+            details: {
                 hint: 'A subscription is being triggered without the required permissions. The cause for this maybe that the websocket middleware is not setup correctly.',
                 serviceId: serviceId,
-            } }));
+            },
+        });
     }
     // Check access-token validity.
     (0, exports.assertTokenNotExpired)(user, serviceId);
@@ -51,7 +54,10 @@ exports.assertSubjectAuthenticated = assertSubjectAuthenticated;
  */
 const assertTokenNotExpired = (accessToken, serviceId) => {
     if (accessToken.exp < new Date().getTime() / 1000) {
-        throw new id_guard_error_1.IdGuardError(Object.assign(Object.assign({}, id_guard_errors_1.IdGuardErrors.AccessTokenExpired), { details: { serviceId } }));
+        throw new id_guard_error_js_1.IdGuardError({
+            ...id_guard_errors_js_1.IdGuardErrors.AccessTokenExpired,
+            details: { serviceId },
+        });
     }
 };
 exports.assertTokenNotExpired = assertTokenNotExpired;
@@ -66,15 +72,15 @@ const isAuthenticatedManagementSubject = (subject) => {
     }
     else {
         switch (subject.subjectType) {
-            case subject_type_1.SubjectType.UserAccount:
-            case subject_type_1.SubjectType.ServiceAccount:
-            case subject_type_1.SubjectType.ManagedServiceAccount:
-            case subject_type_1.SubjectType.ImpersonatedUserAccount:
-            case subject_type_1.SubjectType.SuperUserAccount:
-            case subject_type_1.SubjectType.EnvironmentAdminAccount:
+            case subject_type_js_1.SubjectType.UserAccount:
+            case subject_type_js_1.SubjectType.ServiceAccount:
+            case subject_type_js_1.SubjectType.ManagedServiceAccount:
+            case subject_type_js_1.SubjectType.ImpersonatedUserAccount:
+            case subject_type_js_1.SubjectType.SuperUserAccount:
+            case subject_type_js_1.SubjectType.EnvironmentAdminAccount:
                 return true;
-            case subject_type_1.SubjectType.EndUserAccount:
-            case subject_type_1.SubjectType.EndUserApplication:
+            case subject_type_js_1.SubjectType.EndUserAccount:
+            case subject_type_js_1.SubjectType.EndUserApplication:
                 return false;
             default: {
                 // This block would never execute in runtime, and used as a build-time exhaustive switch-case check for the `SubjectType` ENUM.
@@ -96,15 +102,15 @@ const isAuthenticatedEndUser = (subject) => {
     }
     else {
         switch (subject.subjectType) {
-            case subject_type_1.SubjectType.EndUserAccount:
-            case subject_type_1.SubjectType.EndUserApplication:
+            case subject_type_js_1.SubjectType.EndUserAccount:
+            case subject_type_js_1.SubjectType.EndUserApplication:
                 return true;
-            case subject_type_1.SubjectType.UserAccount:
-            case subject_type_1.SubjectType.ServiceAccount:
-            case subject_type_1.SubjectType.ManagedServiceAccount:
-            case subject_type_1.SubjectType.ImpersonatedUserAccount:
-            case subject_type_1.SubjectType.SuperUserAccount:
-            case subject_type_1.SubjectType.EnvironmentAdminAccount:
+            case subject_type_js_1.SubjectType.UserAccount:
+            case subject_type_js_1.SubjectType.ServiceAccount:
+            case subject_type_js_1.SubjectType.ManagedServiceAccount:
+            case subject_type_js_1.SubjectType.ImpersonatedUserAccount:
+            case subject_type_js_1.SubjectType.SuperUserAccount:
+            case subject_type_js_1.SubjectType.EnvironmentAdminAccount:
                 return false;
             default: {
                 // This block would never execute in runtime, and used as a build-time exhaustive switch-case check for the `SubjectType` ENUM.
@@ -123,15 +129,15 @@ exports.isAuthenticatedEndUser = isAuthenticatedEndUser;
 const validatePostgraphileBuildOptions = (options) => {
     if (options.authorizationOptions.endUserAuthorizationConfig === undefined &&
         options.authorizationOptions.permissionDefinition === undefined) {
-        throw new id_guard_error_1.IdGuardError({
-            code: id_guard_errors_1.IdGuardErrors.AuthConfigInvalid.code,
+        throw new id_guard_error_js_1.IdGuardError({
+            code: id_guard_errors_js_1.IdGuardErrors.AuthConfigInvalid.code,
             message: 'Either a PermissionDefinition for Management Services or a EndUserAuthorizationConfig for End-User Services must be provided to the Postgraphile build options for successful authorization.',
         });
     }
     if (options.authorizationOptions.endUserAuthorizationConfig !== undefined &&
         options.authorizationOptions.permissionDefinition !== undefined) {
-        throw new id_guard_error_1.IdGuardError({
-            code: id_guard_errors_1.IdGuardErrors.AuthConfigInvalid.code,
+        throw new id_guard_error_js_1.IdGuardError({
+            code: id_guard_errors_js_1.IdGuardErrors.AuthConfigInvalid.code,
             message: 'A PermissionDefinition and a EndUserAuthorizationConfig both cannot be passed into Postgraphile build options. It must be either PermissionDefinition or EndUserAuthorizationConfig.',
         });
     }

package/dist/cjs/common/guard-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-utils.js","sourceRoot":"","sources":["../../../src/common/guard-utils.ts"],"names":[],"mappings":";;;AAIA,yEAGuC;AACvC,2DAAmD;AACnD,6DAAqD;AACrD,uDAAgD;AAwChD;;;;;GAKG;AACI,MAAM,oBAAoB,GAAG,CAClC,SAAiB,EACjB,mBAAyC,EAChC,EAAE;IACX,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEtE,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAXW,QAAA,oBAAoB,wBAW/B;AAEF;;;;;;;;GAQG;AACI,MAAM,0BAA0B,GAAG,CACxC,IAA6C,EAC7C,SAAiB,EACjB,SAAsC,EAChC,EAAE;IACR,8EAA8E;IAC9E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,gCAAY,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,gCAAY,CAAC;YACrB,GAAG,kCAAa,CAAC,iBAAiB;YAClC,OAAO,EAAE;gBACP,IAAI,EAAE,oJAAoJ;gBAC1J,SAAS,EAAE,SAAS;aACrB;SACF,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,IAAA,6BAAqB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC;AApBW,QAAA,0BAA0B,8BAoBrC;AAEF;;;;;GAKG;AACI,MAAM,qBAAqB,GAAG,CACnC,WAAwC,EACxC,SAAiB,EACX,EAAE;IACR,IAAI,WAAW,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,gCAAY,CAAC;YACrB,GAAG,kCAAa,CAAC,kBAAkB;YACnC,OAAO,EAAE,EAAE,SAAS,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAC9C,OAAgD,EACvC,EAAE;IACX,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;SAAM,CAAC;QACN,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,6BAAW,CAAC,WAAW,CAAC;YAC7B,KAAK,6BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,6BAAW,CAAC,qBAAqB,CAAC;YACvC,KAAK,6BAAW,CAAC,uBAAuB,CAAC;YACzC,KAAK,6BAAW,CAAC,gBAAgB,CAAC;YAClC,KAAK,6BAAW,CAAC,uBAAuB;gBACtC,OAAO,IAAI,CAAC;YACd,KAAK,6BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,6BAAW,CAAC,kBAAkB;gBACjC,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,CAAC,CAAC;gBACR,+HAA+H;gBAC/H,MAAM,eAAe,GAAU,OAAO,CAAC,WAAW,CAAC;gBACnD,MAAM,IAAI,4CAAoB,CAAC,eAAe,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAxBW,QAAA,gCAAgC,oCAwB3C;AAEF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CACpC,OAAgD,EACvC,EAAE;IACX,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;SAAM,CAAC;QACN,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,6BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,6BAAW,CAAC,kBAAkB;gBACjC,OAAO,IAAI,CAAC;YACd,KAAK,6BAAW,CAAC,WAAW,CAAC;YAC7B,KAAK,6BAAW,CAAC,cAAc,CAAC;YAChC,KAAK,6BAAW,CAAC,qBAAqB,CAAC;YACvC,KAAK,6BAAW,CAAC,uBAAuB,CAAC;YACzC,KAAK,6BAAW,CAAC,gBAAgB,CAAC;YAClC,KAAK,6BAAW,CAAC,uBAAuB;gBACtC,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,CAAC,CAAC;gBACR,+HAA+H;gBAC/H,MAAM,eAAe,GAAU,OAAO,CAAC,WAAW,CAAC;gBACnD,MAAM,IAAI,4CAAoB,CAAC,eAAe,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAxBW,QAAA,sBAAsB,0BAwBjC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAC9C,OAAuB,EACjB,EAAE;IACR,IACE,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS;QACrE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAC/D,CAAC;QACD,MAAM,IAAI,gCAAY,CAAC;YACrB,IAAI,EAAE,kCAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EACL,8LAA8L;SACjM,CAAC,CAAC;IACL,CAAC;IAED,IACE,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS;QACrE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAC/D,CAAC;QACD,MAAM,IAAI,gCAAY,CAAC;YACrB,IAAI,EAAE,kCAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EACL,sLAAsL;SACzL,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAxBW,QAAA,gCAAgC,oCAwB3C"}

package/dist/{common → cjs/common}/handle-end-user-authorization.d.ts

@@ -1,6 +1,6 @@
-import { MosaicErrorInfo } from '@axinom/mosaic-service-common';
-import { GqlAuthorizationOptions } from './guard-utils';
-import { GenericAuthenticatedSubject } from './types/authenticated-subject-models';
+import type { MosaicErrorInfo } from '@axinom/mosaic-service-common';
+import { type GqlAuthorizationOptions } from './guard-utils.js';
+import type { GenericAuthenticatedSubject } from './types/authenticated-subject-models.js';
 /**
  * This function can be used to determine if a end user is allowed to consume a specific operation.
  * If the authorization fails, an AxGuard error is thrown.

package/dist/cjs/common/handle-end-user-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-end-user-authorization.d.ts","sourceRoot":"","sources":["../../../src/common/handle-end-user-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAEL,KAAK,uBAAuB,EAE7B,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAG3F;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,uBAAuB,EAChC,0BAA0B,OAAO,EACjC,SAAS,2BAA2B,GAAG,SAAS,EAChD,eAAe,eAAe,GAAG,SAAS,KACzC,IAuBF,CAAC"}

package/dist/{common → cjs/common}/handle-end-user-authorization.js

@@ -1,11 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleEndUserAuthorization = void 0;
-const guard_utils_1 = require("./guard-utils");
-const id_guard_error_1 = require("./id-guard-error");
-const id_guard_errors_1 = require("./id-guard-errors");
-const subject_type_1 = require("./subject-type");
-const type_assertions_1 = require("./type-assertions");
+const guard_utils_js_1 = require("./guard-utils.js");
+const id_guard_error_js_1 = require("./id-guard-error.js");
+const id_guard_errors_js_1 = require("./id-guard-errors.js");
+const subject_type_js_1 = require("./subject-type.js");
+const type_assertions_js_1 = require("./type-assertions.js");
 /**
  * This function can be used to determine if a end user is allowed to consume a specific operation.
  * If the authorization fails, an AxGuard error is thrown.
@@ -17,14 +17,14 @@ const type_assertions_1 = require("./type-assertions");
  * @throws an AxGuardError if the authorization fails.
  */
 const handleEndUserAuthorization = (options, ensureOnlyAuthentication, subject, authErrorInfo) => {
-    if (!(0, guard_utils_1.isAnonymousOperation)(options.operation, options.endUserAuthorizationConfig.anonymousGqlOperations)) {
+    if (!(0, guard_utils_js_1.isAnonymousOperation)(options.operation, options.endUserAuthorizationConfig.anonymousGqlOperations)) {
         // Check if the authentication is valid
-        (0, guard_utils_1.assertSubjectAuthenticated)(subject, options.serviceId, authErrorInfo);
+        (0, guard_utils_js_1.assertSubjectAuthenticated)(subject, options.serviceId, authErrorInfo);
         // If authorization checks are required, proceed to do that. If not, return the resolver.
         if (!ensureOnlyAuthentication) {
-            (0, type_assertions_1.assertGenericAuthenticatedSubject)(subject);
-            if (subject.subjectType === subject_type_1.SubjectType.EndUserApplication) {
-                (0, type_assertions_1.assertEndUserApplication)(subject);
+            (0, type_assertions_js_1.assertGenericAuthenticatedSubject)(subject);
+            if (subject.subjectType === subject_type_js_1.SubjectType.EndUserApplication) {
+                (0, type_assertions_js_1.assertEndUserApplication)(subject);
                 assertEndUserApplicationAuthorization(subject, options.operation, options.endUserAuthorizationConfig
                     .applicationTokenAllowedGqlOperations);
             }
@@ -41,9 +41,9 @@ exports.handleEndUserAuthorization = handleEndUserAuthorization;
  */
 const assertEndUserApplicationAuthorization = (subject, operation, applicationTokenAllowedOperations) => {
     if (!applicationTokenAllowedOperations.includes(operation)) {
-        throw new id_guard_error_1.IdGuardError({
+        throw new id_guard_error_js_1.IdGuardError({
             message: 'Application Token is not authorized to access the operation.',
-            code: id_guard_errors_1.IdGuardErrors.UserNotAuthorized.code,
+            code: id_guard_errors_js_1.IdGuardErrors.UserNotAuthorized.code,
             details: {
                 user: subject.sub,
                 operation: operation,

package/dist/cjs/common/handle-end-user-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-end-user-authorization.js","sourceRoot":"","sources":["../../../src/common/handle-end-user-authorization.ts"],"names":[],"mappings":";;;AACA,qDAI0B;AAC1B,2DAAmD;AACnD,6DAAqD;AACrD,uDAAgD;AAChD,6DAG8B;AAI9B;;;;;;;;;GASG;AACI,MAAM,0BAA0B,GAAG,CACxC,OAAgC,EAChC,wBAAiC,EACjC,OAAgD,EAChD,aAA0C,EACpC,EAAE;IACR,IACE,CAAC,IAAA,qCAAoB,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,0BAA0B,CAAC,sBAAsB,CAC1D,EACD,CAAC;QACD,uCAAuC;QACvC,IAAA,2CAA0B,EAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACtE,yFAAyF;QACzF,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,IAAA,sDAAiC,EAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,WAAW,KAAK,6BAAW,CAAC,kBAAkB,EAAE,CAAC;gBAC3D,IAAA,6CAAwB,EAAC,OAAO,CAAC,CAAC;gBAClC,qCAAqC,CACnC,OAAO,EACP,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,0BAA0B;qBAC/B,oCAAoC,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA5BW,QAAA,0BAA0B,8BA4BrC;AAEF;;;;;;GAMG;AACH,MAAM,qCAAqC,GAAG,CAC5C,OAAwC,EACxC,SAAiB,EACjB,iCAA2C,EACrC,EAAE;IACR,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,gCAAY,CAAC;YACrB,OAAO,EAAE,8DAA8D;YACvE,IAAI,EAAE,kCAAa,CAAC,iBAAiB,CAAC,IAAI;YAC1C,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,SAAS,EAAE,SAAS;aACrB;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC"}

package/dist/{common → cjs/common}/handle-management-user-authorization.d.ts

@@ -1,7 +1,7 @@
-import { MosaicErrorInfo } from '@axinom/mosaic-service-common';
-import { GqlAuthorizationOptions } from './guard-utils';
-import { AuthenticatedManagementSubject } from './types';
-import { GenericAuthenticatedSubject } from './types/authenticated-subject-models';
+import type { MosaicErrorInfo } from '@axinom/mosaic-service-common';
+import { type GqlAuthorizationOptions } from './guard-utils.js';
+import type { GenericAuthenticatedSubject } from './types/authenticated-subject-models.js';
+import type { AuthenticatedManagementSubject } from './types/index.js';
 /**
  * This function can be used to determine if a management user is allowed to consume a specific operation.
  * If the authorization fails, an AxGuard error is thrown.

package/dist/cjs/common/handle-management-user-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-management-user-authorization.d.ts","sourceRoot":"","sources":["../../../src/common/handle-management-user-authorization.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,KAAK,uBAAuB,EAG7B,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;;;;;GAQG;AACH,eAAO,MAAM,iCAAiC,GAC5C,SAAS,uBAAuB,EAChC,0BAA0B,OAAO,EACjC,SAAS,2BAA2B,GAAG,SAAS,EAChD,eAAe,eAAe,GAAG,SAAS,KACzC,IAiBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,GAC5C,SAAS,8BAA8B,EACvC,SAAS,uBAAuB,KAC/B,IA+BF,CAAC"}

package/dist/{common → cjs/common}/handle-management-user-authorization.js

@@ -2,10 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.assertManagementSubjectAuthorized = exports.handleManagementUserAuthorization = void 0;
 const mosaic_id_utils_1 = require("@axinom/mosaic-id-utils");
-const guard_utils_1 = require("./guard-utils");
-const id_guard_error_1 = require("./id-guard-error");
-const id_guard_errors_1 = require("./id-guard-errors");
-const type_assertions_1 = require("./type-assertions");
+const guard_utils_js_1 = require("./guard-utils.js");
+const id_guard_error_js_1 = require("./id-guard-error.js");
+const id_guard_errors_js_1 = require("./id-guard-errors.js");
+const type_assertions_js_1 = require("./type-assertions.js");
 /**
  * This function can be used to determine if a management user is allowed to consume a specific operation.
  * If the authorization fails, an AxGuard error is thrown.
@@ -16,14 +16,13 @@ const type_assertions_1 = require("./type-assertions");
  * @param authErrorInfo MosaicErrorInfo
  */
 const handleManagementUserAuthorization = (options, ensureOnlyAuthentication, subject, authErrorInfo) => {
-    var _a;
-    if (!(0, guard_utils_1.isAnonymousOperation)(options.operation, (_a = options.permissionDefinition.gqlOptions) === null || _a === void 0 ? void 0 : _a.anonymousGqlOperations)) {
+    if (!(0, guard_utils_js_1.isAnonymousOperation)(options.operation, options.permissionDefinition.gqlOptions?.anonymousGqlOperations)) {
         // Check if the authentication is valid
-        (0, guard_utils_1.assertSubjectAuthenticated)(subject, options.serviceId, authErrorInfo);
+        (0, guard_utils_js_1.assertSubjectAuthenticated)(subject, options.serviceId, authErrorInfo);
         // If we need to check for authorization as well, proceed to do that. Or else return the resolver.
         if (!ensureOnlyAuthentication) {
             // Check if the subject type is a Management Subject
-            (0, type_assertions_1.assertAuthenticatedManagementSubject)(subject);
+            (0, type_assertions_js_1.assertAuthenticatedManagementSubject)(subject);
             // Check if the user is authorized to execute the GQL operation.
             (0, exports.assertManagementSubjectAuthorized)(subject, options);
         }
@@ -44,18 +43,24 @@ const assertManagementSubjectAuthorized = (subject, options) => {
         const grantedPermissions = subject.permissions[serviceId];
         const requiredPermissions = (0, mosaic_id_utils_1.getPermissionsForOperation)(operation, permissionDefinition);
         if (!(0, mosaic_id_utils_1.requiredPermissionsExists)(requiredPermissions, grantedPermissions)) {
-            throw new id_guard_error_1.IdGuardError(Object.assign(Object.assign({}, id_guard_errors_1.IdGuardErrors.UserNotAuthorized), { details: {
+            throw new id_guard_error_js_1.IdGuardError({
+                ...id_guard_errors_js_1.IdGuardErrors.UserNotAuthorized,
+                details: {
                     user: subject.sub,
                     serviceId: options.serviceId,
                     requiredPermissions,
-                } }));
+                },
+            });
         }
     }
     else {
-        throw new id_guard_error_1.IdGuardError(Object.assign(Object.assign({}, id_guard_errors_1.IdGuardErrors.UserNotAuthorized), { details: {
+        throw new id_guard_error_js_1.IdGuardError({
+            ...id_guard_errors_js_1.IdGuardErrors.UserNotAuthorized,
+            details: {
                 user: subject.sub,
                 serviceId: options.serviceId,
-            } }));
+            },
+        });
     }
 };
 exports.assertManagementSubjectAuthorized = assertManagementSubjectAuthorized;

package/dist/cjs/common/handle-management-user-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-management-user-authorization.js","sourceRoot":"","sources":["../../../src/common/handle-management-user-authorization.ts"],"names":[],"mappings":";;;AAAA,6DAGiC;AAEjC,qDAI0B;AAC1B,2DAAmD;AACnD,6DAAqD;AACrD,6DAA4E;AAI5E;;;;;;;;GAQG;AACI,MAAM,iCAAiC,GAAG,CAC/C,OAAgC,EAChC,wBAAiC,EACjC,OAAgD,EAChD,aAA0C,EACpC,EAAE;IACR,IACE,CAAC,IAAA,qCAAoB,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,oBAAoB,CAAC,UAAU,EAAE,sBAAsB,CAChE,EACD,CAAC;QACD,uCAAuC;QACvC,IAAA,2CAA0B,EAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACtE,kGAAkG;QAClG,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,oDAAoD;YACpD,IAAA,yDAAoC,EAAC,OAAO,CAAC,CAAC;YAC9C,gEAAgE;YAChE,IAAA,yCAAiC,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAtBW,QAAA,iCAAiC,qCAsB5C;AAEF;;;;;;GAMG;AACI,MAAM,iCAAiC,GAAG,CAC/C,OAAuC,EACvC,OAAgC,EAC1B,EAAE;IACR,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE/D,uCAAuC;IACvC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE1D,MAAM,mBAAmB,GAAG,IAAA,4CAA0B,EACpD,SAAS,EACT,oBAAoB,CACrB,CAAC;QAEF,IAAI,CAAC,IAAA,2CAAyB,EAAC,mBAAmB,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,gCAAY,CAAC;gBACrB,GAAG,kCAAa,CAAC,iBAAiB;gBAClC,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,CAAC,GAAG;oBACjB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,mBAAmB;iBACpB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,gCAAY,CAAC;YACrB,GAAG,kCAAa,CAAC,iBAAiB;YAClC,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAlCW,QAAA,iCAAiC,qCAkC5C"}

package/dist/{common → cjs/common}/helpers/guard-authorization.d.ts

@@ -1,7 +1,7 @@
-import { MosaicErrorInfo } from '@axinom/mosaic-service-common';
-import { GraphQLFieldResolver, GraphQLResolveInfo } from 'graphql';
-import { AxGuardOptions } from '../guard-utils';
-import { GenericAuthenticatedSubject } from '../types/authenticated-subject-models';
+import { type MosaicErrorInfo } from '@axinom/mosaic-service-common';
+import type { GraphQLFieldResolver, GraphQLResolveInfo } from 'graphql';
+import type { AxGuardOptions } from '../guard-utils.js';
+import type { GenericAuthenticatedSubject } from '../types/authenticated-subject-models.js';
 /**
  * Handles authorization for a given GraphQL mutation/query/subscription against a
  * user token.

package/dist/cjs/common/helpers/guard-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-authorization.d.ts","sourceRoot":"","sources":["../../../../src/common/helpers/guard-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKxD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AAE5F;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,GAC9B,SAAS,2BAA2B,GAAG,SAAS,EAChD,eAAe,eAAe,GAAG,SAAS,EAC1C,SAAS,cAAc,EACvB,aAAa,oBAAoB,CAC/B,OAAO,EACP,OAAO,EACP;IACE,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B,CACF,EACD,QAAQ,OAAO,EACf,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,OAAO,EAChB,MAAM,kBAAkB,KACvB,OAqCF,CAAC"}

package/dist/{common → cjs/common}/helpers/guard-authorization.js

@@ -2,10 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleAuthorization = void 0;
 const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
-const __1 = require("..");
-const handle_end_user_authorization_1 = require("../handle-end-user-authorization");
-const handle_management_user_authorization_1 = require("../handle-management-user-authorization");
-const type_assertions_1 = require("../type-assertions");
+const handle_end_user_authorization_js_1 = require("../handle-end-user-authorization.js");
+const handle_management_user_authorization_js_1 = require("../handle-management-user-authorization.js");
+const index_js_1 = require("../index.js");
+const type_assertions_js_1 = require("../type-assertions.js");
 /**
  * Handles authorization for a given GraphQL mutation/query/subscription against a
  * user token.
@@ -24,9 +24,9 @@ const handleAuthorization = (subject, authErrorInfo, options, resolveFunc, paren
     // If the permissionDefinition is not undefined, then the subject is a AuthenticatedManagementSubject
     if (options.authorizationOptions.permissionDefinition !== undefined) {
         if (subject !== undefined && subject !== null) {
-            (0, type_assertions_1.assertGenericAuthenticatedSubject)(subject);
+            (0, type_assertions_js_1.assertGenericAuthenticatedSubject)(subject);
         }
-        (0, handle_management_user_authorization_1.handleManagementUserAuthorization)(options.authorizationOptions, options.ensureOnlyAuthentication, subject, authErrorInfo);
+        (0, handle_management_user_authorization_js_1.handleManagementUserAuthorization)(options.authorizationOptions, options.ensureOnlyAuthentication, subject, authErrorInfo);
         return resolveFunc.call(this, parent, args, context, info);
     }
     else {
@@ -36,12 +36,12 @@ const handleAuthorization = (subject, authErrorInfo, options, resolveFunc, paren
          * then the request is a end-user call.
          */
         if (options.authorizationOptions.endUserAuthorizationConfig === undefined) {
-            throw new mosaic_service_common_1.MosaicError(__1.IdGuardErrors.AuthorizationOptionsMisconfigured);
+            throw new mosaic_service_common_1.MosaicError(index_js_1.IdGuardErrors.AuthorizationOptionsMisconfigured);
         }
         if (subject !== undefined && subject !== null) {
-            (0, type_assertions_1.assertGenericAuthenticatedSubject)(subject);
+            (0, type_assertions_js_1.assertGenericAuthenticatedSubject)(subject);
         }
-        (0, handle_end_user_authorization_1.handleEndUserAuthorization)(options.authorizationOptions, options.ensureOnlyAuthentication, subject, authErrorInfo);
+        (0, handle_end_user_authorization_js_1.handleEndUserAuthorization)(options.authorizationOptions, options.ensureOnlyAuthentication, subject, authErrorInfo);
         return resolveFunc.call(this, parent, args, context, info);
     }
 };

package/dist/cjs/common/helpers/guard-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-authorization.js","sourceRoot":"","sources":["../../../../src/common/helpers/guard-authorization.ts"],"names":[],"mappings":";;;AAAA,yEAGuC;AAGvC,0FAAiF;AACjF,wGAA+F;AAC/F,0CAA4C;AAC5C,8DAA0E;AAG1E;;;;;;;;;;;;;GAaG;AACI,MAAM,mBAAmB,GAAG,CACjC,OAAgD,EAChD,aAA0C,EAC1C,OAAuB,EACvB,WAMC,EACD,MAAe,EACf,IAA6B,EAC7B,OAAgB,EAChB,IAAwB,EACf,EAAE;IACX,qGAAqG;IACrG,IAAI,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACpE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAA,sDAAiC,EAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,IAAA,2EAAiC,EAC/B,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,wBAAwB,EAChC,OAAO,EACP,aAAa,CACd,CAAC;QACF,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN;;;;WAIG;QAEH,IAAI,OAAO,CAAC,oBAAoB,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;YAC1E,MAAM,IAAI,mCAAW,CAAC,wBAAa,CAAC,iCAAiC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAA,sDAAiC,EAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,IAAA,6DAA0B,EACxB,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,wBAAwB,EAChC,OAAO,EACP,aAAa,CACd,CAAC;QACF,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC;AApDW,QAAA,mBAAmB,uBAoD9B"}

package/dist/cjs/common/helpers/index.d.ts

@@ -0,0 +1,3 @@
+export * from './object-helpers.js';
+export * from './parse-jwt-token-error-handler.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/common/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/common/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,oCAAoC,CAAC"}

package/dist/{common → cjs/common}/helpers/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./object-helpers"), exports);
-__exportStar(require("./parse-jwt-token-error-handler"), exports);
+__exportStar(require("./object-helpers.js"), exports);
+__exportStar(require("./parse-jwt-token-error-handler.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/common/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/common/helpers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,qEAAmD"}

package/dist/cjs/common/helpers/object-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-helpers.d.ts","sourceRoot":"","sources":["../../../../src/common/helpers/object-helpers.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,EAAE,cAAc,MAAM,EAAE,KAAG,GAMnE,CAAC"}

package/dist/{common → cjs/common}/helpers/object-helpers.js

@@ -4,7 +4,7 @@ exports.removeProperties = void 0;
 /* eslint-disable @typescript-eslint/explicit-module-boundary-types */
 /* eslint-disable @typescript-eslint/no-explicit-any */
 const removeProperties = (obj, keysToRemove) => {
-    const result = Object.assign({}, obj);
+    const result = { ...obj };
     for (const key of keysToRemove) {
         delete result[key];
     }

package/dist/cjs/common/helpers/object-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-helpers.js","sourceRoot":"","sources":["../../../../src/common/helpers/object-helpers.ts"],"names":[],"mappings":";;;AAAA,sEAAsE;AACtE,uDAAuD;AAChD,MAAM,gBAAgB,GAAG,CAAC,GAAQ,EAAE,YAAsB,EAAO,EAAE;IACxE,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AANW,QAAA,gBAAgB,oBAM3B"}

package/dist/{common → cjs/common}/helpers/parse-jwt-token-error-handler.d.ts

@@ -1,5 +1,5 @@
-import { IdGuardErrors } from '../id-guard-errors';
-import { AuthenticationConfig } from '../types';
+import { IdGuardErrors } from '../id-guard-errors.js';
+import type { AuthenticationConfig } from '../types/index.js';
 type JwtErrors = typeof IdGuardErrors.MalformedToken.code | typeof IdGuardErrors.AccessTokenExpired.code | typeof IdGuardErrors.SigningKeyNotFound.code | typeof IdGuardErrors.JwksError.code | typeof IdGuardErrors.AccessTokenVerificationFailed.code | typeof IdGuardErrors.AuthConfigInvalid.code | typeof IdGuardErrors.AccessTokenRequired.code | typeof IdGuardErrors.IdentityServiceNotAccessible.code | typeof IdGuardErrors.UserServiceNotAccessible.code;
 /**
  * Handles an error thrown by the parseJwtToken function.

package/dist/cjs/common/helpers/parse-jwt-token-error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-jwt-token-error-handler.d.ts","sourceRoot":"","sources":["../../../../src/common/helpers/parse-jwt-token-error-handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAGV,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAG3B,KAAK,SAAS,GACV,OAAO,aAAa,CAAC,cAAc,CAAC,IAAI,GACxC,OAAO,aAAa,CAAC,kBAAkB,CAAC,IAAI,GAC5C,OAAO,aAAa,CAAC,kBAAkB,CAAC,IAAI,GAC5C,OAAO,aAAa,CAAC,SAAS,CAAC,IAAI,GACnC,OAAO,aAAa,CAAC,6BAA6B,CAAC,IAAI,GACvD,OAAO,aAAa,CAAC,iBAAiB,CAAC,IAAI,GAC3C,OAAO,aAAa,CAAC,mBAAmB,CAAC,IAAI,GAC7C,OAAO,aAAa,CAAC,4BAA4B,CAAC,IAAI,GACtD,OAAO,aAAa,CAAC,wBAAwB,CAAC,IAAI,CAAC;AAiFvD;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,GAC9B,KAAK,OAAO,EACZ,UAAU,YAAY,GAAG,UAAU,GAAG,SAAS,EAC/C,OAAO,MAAM,EACb,YAAY,MAAM,GAAG,oBAAoB,KACxC,CACD,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,KAAK,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAkEtD,CAAC"}