@backstage/integration 1.15.1 → 1.16.0-next.0

package/dist/azure/CachedAzureDevOpsCredentialsProvider.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"CachedAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/CachedAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureDevOpsCredential, PersonalAccessTokenCredential } from './config';\nimport {\n  ClientSecretCredential,\n  ManagedIdentityCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\n\ntype CachedAzureDevOpsCredentials = AzureDevOpsCredentials & {\n  expiresAt?: number;\n};\n\nfunction exhaustiveCheck(_param: never) {}\n\nconst tenMinutes = 1000 * 60 * 10;\n\n/**\n * A credentials provider that caches the credentials for as long as it is valid.\n *\n * @public\n */\nexport class CachedAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  azureDevOpsScope = '499b84ac-1321-427f-aa17-267ca6975798/.default';\n  cached: CachedAzureDevOpsCredentials | undefined;\n\n  static fromAzureDevOpsCredential(\n    credential: AzureDevOpsCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    switch (credential.kind) {\n      case 'PersonalAccessToken':\n        return CachedAzureDevOpsCredentialsProvider.fromPersonalAccessTokenCredential(\n          credential,\n        );\n      case 'ClientSecret':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientSecretCredential(\n            credential.tenantId,\n            credential.clientId,\n            credential.clientSecret,\n          ),\n        );\n      case 'ManagedIdentity':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ManagedIdentityCredential(credential.clientId),\n        );\n      default:\n        exhaustiveCheck(credential);\n\n        throw new Error(\n          `Credential kind '${(credential as any).kind}' not supported`,\n        );\n    }\n  }\n\n  static fromTokenCredential(\n    credential: TokenCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    return new CachedAzureDevOpsCredentialsProvider(credential);\n  }\n\n  static fromPersonalAccessTokenCredential(\n    credential: PersonalAccessTokenCredential,\n  ) {\n    return new CachedAzureDevOpsCredentialsProvider(\n      credential.personalAccessToken,\n    );\n  }\n\n  private constructor(private readonly credential: TokenCredential | string) {}\n\n  async getCredentials(): Promise<AzureDevOpsCredentials> {\n    if (\n      this.cached === undefined ||\n      (this.cached.expiresAt !== undefined &&\n        Date.now() > this.cached.expiresAt)\n    ) {\n      if (typeof this.credential === 'string') {\n        this.cached = {\n          headers: {\n            Authorization: `Basic ${btoa(`:${this.credential}`)}`,\n          },\n          type: 'pat',\n          token: this.credential,\n        };\n      } else {\n        const accessToken = await this.credential.getToken(\n          this.azureDevOpsScope,\n        );\n\n        if (!accessToken) {\n          throw new Error('Failed to retrieve access token');\n        }\n\n        this.cached = {\n          expiresAt: accessToken.expiresOnTimestamp - tenMinutes,\n          headers: {\n            Authorization: `Bearer ${accessToken.token}`,\n          },\n          type: 'bearer',\n          token: accessToken.token,\n        };\n      }\n    }\n\n    return this.cached;\n  }\n}\n"],"names":[],"mappings":";;AAgCA,MAAM,UAAA,GAAa,MAAO,EAAK,GAAA,EAAA,CAAA;AAOxB,MAAM,oCAEb,CAAA;AAAA,EA+CU,YAA6B,UAAsC,EAAA;AAAtC,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA,CAAA;AAAA,GAAuC;AAAA,EA9C5E,gBAAmB,GAAA,+CAAA,CAAA;AAAA,EACnB,MAAA,CAAA;AAAA,EAEA,OAAO,0BACL,UACsC,EAAA;AACtC,IAAA,QAAQ,WAAW,IAAM;AAAA,MACvB,KAAK,qBAAA;AACH,QAAA,OAAO,oCAAqC,CAAA,iCAAA;AAAA,UAC1C,UAAA;AAAA,SACF,CAAA;AAAA,MACF,KAAK,cAAA;AACH,QAAA,OAAO,oCAAqC,CAAA,mBAAA;AAAA,UAC1C,IAAI,sBAAA;AAAA,YACF,UAAW,CAAA,QAAA;AAAA,YACX,UAAW,CAAA,QAAA;AAAA,YACX,UAAW,CAAA,YAAA;AAAA,WACb;AAAA,SACF,CAAA;AAAA,MACF,KAAK,iBAAA;AACH,QAAA,OAAO,oCAAqC,CAAA,mBAAA;AAAA,UAC1C,IAAI,yBAA0B,CAAA,UAAA,CAAW,QAAQ,CAAA;AAAA,SACnD,CAAA;AAAA,MACF;AAGE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,iBAAA,EAAqB,WAAmB,IAAI,CAAA,eAAA,CAAA;AAAA,SAC9C,CAAA;AAAA,KACJ;AAAA,GACF;AAAA,EAEA,OAAO,oBACL,UACsC,EAAA;AACtC,IAAO,OAAA,IAAI,qCAAqC,UAAU,CAAA,CAAA;AAAA,GAC5D;AAAA,EAEA,OAAO,kCACL,UACA,EAAA;AACA,IAAA,OAAO,IAAI,oCAAA;AAAA,MACT,UAAW,CAAA,mBAAA;AAAA,KACb,CAAA;AAAA,GACF;AAAA,EAIA,MAAM,cAAkD,GAAA;AACtD,IAAA,IACE,IAAK,CAAA,MAAA,KAAW,KACf,CAAA,IAAA,IAAA,CAAK,MAAO,CAAA,SAAA,KAAc,KACzB,CAAA,IAAA,IAAA,CAAK,GAAI,EAAA,GAAI,IAAK,CAAA,MAAA,CAAO,SAC3B,EAAA;AACA,MAAI,IAAA,OAAO,IAAK,CAAA,UAAA,KAAe,QAAU,EAAA;AACvC,QAAA,IAAA,CAAK,MAAS,GAAA;AAAA,UACZ,OAAS,EAAA;AAAA,YACP,eAAe,CAAS,MAAA,EAAA,IAAA,CAAK,IAAI,IAAK,CAAA,UAAU,EAAE,CAAC,CAAA,CAAA;AAAA,WACrD;AAAA,UACA,IAAM,EAAA,KAAA;AAAA,UACN,OAAO,IAAK,CAAA,UAAA;AAAA,SACd,CAAA;AAAA,OACK,MAAA;AACL,QAAM,MAAA,WAAA,GAAc,MAAM,IAAA,CAAK,UAAW,CAAA,QAAA;AAAA,UACxC,IAAK,CAAA,gBAAA;AAAA,SACP,CAAA;AAEA,QAAA,IAAI,CAAC,WAAa,EAAA;AAChB,UAAM,MAAA,IAAI,MAAM,iCAAiC,CAAA,CAAA;AAAA,SACnD;AAEA,QAAA,IAAA,CAAK,MAAS,GAAA;AAAA,UACZ,SAAA,EAAW,YAAY,kBAAqB,GAAA,UAAA;AAAA,UAC5C,OAAS,EAAA;AAAA,YACP,aAAA,EAAe,CAAU,OAAA,EAAA,WAAA,CAAY,KAAK,CAAA,CAAA;AAAA,WAC5C;AAAA,UACA,IAAM,EAAA,QAAA;AAAA,UACN,OAAO,WAAY,CAAA,KAAA;AAAA,SACrB,CAAA;AAAA,OACF;AAAA,KACF;AAEA,IAAA,OAAO,IAAK,CAAA,MAAA,CAAA;AAAA,GACd;AACF;;;;"}
+{"version":3,"file":"CachedAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/CachedAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureDevOpsCredential, PersonalAccessTokenCredential } from './config';\nimport {\n  ClientSecretCredential,\n  ManagedIdentityCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\n\ntype CachedAzureDevOpsCredentials = AzureDevOpsCredentials & {\n  expiresAt?: number;\n};\n\nfunction exhaustiveCheck(_param: never) {}\n\nconst tenMinutes = 1000 * 60 * 10;\n\n/**\n * A credentials provider that caches the credentials for as long as it is valid.\n *\n * @public\n */\nexport class CachedAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  azureDevOpsScope = '499b84ac-1321-427f-aa17-267ca6975798/.default';\n  cached: CachedAzureDevOpsCredentials | undefined;\n\n  static fromAzureDevOpsCredential(\n    credential: AzureDevOpsCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    switch (credential.kind) {\n      case 'PersonalAccessToken':\n        return CachedAzureDevOpsCredentialsProvider.fromPersonalAccessTokenCredential(\n          credential,\n        );\n      case 'ClientSecret':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientSecretCredential(\n            credential.tenantId,\n            credential.clientId,\n            credential.clientSecret,\n          ),\n        );\n      case 'ManagedIdentity':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ManagedIdentityCredential(credential.clientId),\n        );\n      default:\n        exhaustiveCheck(credential);\n\n        throw new Error(\n          `Credential kind '${(credential as any).kind}' not supported`,\n        );\n    }\n  }\n\n  static fromTokenCredential(\n    credential: TokenCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    return new CachedAzureDevOpsCredentialsProvider(credential);\n  }\n\n  static fromPersonalAccessTokenCredential(\n    credential: PersonalAccessTokenCredential,\n  ) {\n    return new CachedAzureDevOpsCredentialsProvider(\n      credential.personalAccessToken,\n    );\n  }\n\n  private constructor(private readonly credential: TokenCredential | string) {}\n\n  async getCredentials(): Promise<AzureDevOpsCredentials> {\n    if (\n      this.cached === undefined ||\n      (this.cached.expiresAt !== undefined &&\n        Date.now() > this.cached.expiresAt)\n    ) {\n      if (typeof this.credential === 'string') {\n        this.cached = {\n          headers: {\n            Authorization: `Basic ${btoa(`:${this.credential}`)}`,\n          },\n          type: 'pat',\n          token: this.credential,\n        };\n      } else {\n        const accessToken = await this.credential.getToken(\n          this.azureDevOpsScope,\n        );\n\n        if (!accessToken) {\n          throw new Error('Failed to retrieve access token');\n        }\n\n        this.cached = {\n          expiresAt: accessToken.expiresOnTimestamp - tenMinutes,\n          headers: {\n            Authorization: `Bearer ${accessToken.token}`,\n          },\n          type: 'bearer',\n          token: accessToken.token,\n        };\n      }\n    }\n\n    return this.cached;\n  }\n}\n"],"names":[],"mappings":";;AAgCA,MAAM,UAAA,GAAa,MAAO,EAAK,GAAA,EAAA;AAOxB,MAAM,oCAEb,CAAA;AAAA,EA+CU,YAA6B,UAAsC,EAAA;AAAtC,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA;AAAuC,EA9C5E,gBAAmB,GAAA,+CAAA;AAAA,EACnB,MAAA;AAAA,EAEA,OAAO,0BACL,UACsC,EAAA;AACtC,IAAA,QAAQ,WAAW,IAAM;AAAA,MACvB,KAAK,qBAAA;AACH,QAAA,OAAO,oCAAqC,CAAA,iCAAA;AAAA,UAC1C;AAAA,SACF;AAAA,MACF,KAAK,cAAA;AACH,QAAA,OAAO,oCAAqC,CAAA,mBAAA;AAAA,UAC1C,IAAI,sBAAA;AAAA,YACF,UAAW,CAAA,QAAA;AAAA,YACX,UAAW,CAAA,QAAA;AAAA,YACX,UAAW,CAAA;AAAA;AACb,SACF;AAAA,MACF,KAAK,iBAAA;AACH,QAAA,OAAO,oCAAqC,CAAA,mBAAA;AAAA,UAC1C,IAAI,yBAA0B,CAAA,UAAA,CAAW,QAAQ;AAAA,SACnD;AAAA,MACF;AAGE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,iBAAA,EAAqB,WAAmB,IAAI,CAAA,eAAA;AAAA,SAC9C;AAAA;AACJ;AACF,EAEA,OAAO,oBACL,UACsC,EAAA;AACtC,IAAO,OAAA,IAAI,qCAAqC,UAAU,CAAA;AAAA;AAC5D,EAEA,OAAO,kCACL,UACA,EAAA;AACA,IAAA,OAAO,IAAI,oCAAA;AAAA,MACT,UAAW,CAAA;AAAA,KACb;AAAA;AACF,EAIA,MAAM,cAAkD,GAAA;AACtD,IAAA,IACE,IAAK,CAAA,MAAA,KAAW,KACf,CAAA,IAAA,IAAA,CAAK,MAAO,CAAA,SAAA,KAAc,KACzB,CAAA,IAAA,IAAA,CAAK,GAAI,EAAA,GAAI,IAAK,CAAA,MAAA,CAAO,SAC3B,EAAA;AACA,MAAI,IAAA,OAAO,IAAK,CAAA,UAAA,KAAe,QAAU,EAAA;AACvC,QAAA,IAAA,CAAK,MAAS,GAAA;AAAA,UACZ,OAAS,EAAA;AAAA,YACP,eAAe,CAAS,MAAA,EAAA,IAAA,CAAK,IAAI,IAAK,CAAA,UAAU,EAAE,CAAC,CAAA;AAAA,WACrD;AAAA,UACA,IAAM,EAAA,KAAA;AAAA,UACN,OAAO,IAAK,CAAA;AAAA,SACd;AAAA,OACK,MAAA;AACL,QAAM,MAAA,WAAA,GAAc,MAAM,IAAA,CAAK,UAAW,CAAA,QAAA;AAAA,UACxC,IAAK,CAAA;AAAA,SACP;AAEA,QAAA,IAAI,CAAC,WAAa,EAAA;AAChB,UAAM,MAAA,IAAI,MAAM,iCAAiC,CAAA;AAAA;AAGnD,QAAA,IAAA,CAAK,MAAS,GAAA;AAAA,UACZ,SAAA,EAAW,YAAY,kBAAqB,GAAA,UAAA;AAAA,UAC5C,OAAS,EAAA;AAAA,YACP,aAAA,EAAe,CAAU,OAAA,EAAA,WAAA,CAAY,KAAK,CAAA;AAAA,WAC5C;AAAA,UACA,IAAM,EAAA,QAAA;AAAA,UACN,OAAO,WAAY,CAAA;AAAA,SACrB;AAAA;AACF;AAGF,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AAEhB;;;;"}

package/dist/azure/DefaultAzureDevOpsCredentialsProvider.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.cjs.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":["CachedAzureDevOpsCredentialsProvider","DefaultAzureCredential"],"mappings":";;;;;AA2BO,MAAM,qCAEb,CAAA;AAAA,EA+CU,YACW,SAIjB,EAAA;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA,CAAA;AAAA,GAIhB;AAAA,EAnDH,OAAO,iBACL,YACuC,EAAA;AACvC,IAAM,MAAA,SAAA,GAAY,aAAa,KAAM,CAAA,IAAA,GAAO,MAAO,CAAA,CAAC,KAAK,WAAgB,KAAA;AACvE,MAAY,WAAA,CAAA,MAAA,CAAO,WAAa,EAAA,OAAA,CAAQ,CAAc,UAAA,KAAA;AACpD,QAAA,IACE,WAAW,aAAkB,KAAA,KAAA,CAAA,IAC7B,UAAW,CAAA,aAAA,CAAc,WAAW,CACpC,EAAA;AACA,UAAA,IAAI,IAAI,GAAI,CAAA,WAAA,CAAY,MAAO,CAAA,IAAI,MAAM,KAAW,CAAA,EAAA;AAClD,YAAI,GAAA,CAAA,GAAA;AAAA,cACF,YAAY,MAAO,CAAA,IAAA;AAAA,cACnBA,yEAAqC,CAAA,yBAAA;AAAA,gBACnC,UAAA;AAAA,eACF;AAAA,aACF,CAAA;AAAA,WACF;AAAA,SACK,MAAA;AACL,UAAA,MAAM,WACJA,yEAAqC,CAAA,yBAAA;AAAA,YACnC,UAAA;AAAA,WACF,CAAA;AACF,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,GAAA,CAAA,GAAA,CAAI,GAAG,WAAY,CAAA,MAAA,CAAO,IAAI,CAAI,CAAA,EAAA,YAAY,IAAI,QAAQ,CAAA,CAAA;AAAA,WAC/D,CAAA,CAAA;AAAA,SACH;AAAA,OACD,CAAA,CAAA;AAED,MACE,IAAA,WAAA,CAAY,MAAO,CAAA,IAAA,KAAS,eAC5B,IAAA,GAAA,CAAI,IAAI,WAAY,CAAA,MAAA,CAAO,IAAI,CAAA,KAAM,KACrC,CAAA,EAAA;AACA,QAAI,GAAA,CAAA,GAAA;AAAA,UACF,YAAY,MAAO,CAAA,IAAA;AAAA,UACnBA,yEAAqC,CAAA,mBAAA;AAAA,YACnC,IAAIC,+BAAuB,EAAA;AAAA,WAC7B;AAAA,SACF,CAAA;AAAA,OACF;AAEA,MAAO,OAAA,GAAA,CAAA;AAAA,KACT,kBAAO,IAAA,GAAA,EAAmD,CAAA,CAAA;AAE1D,IAAO,OAAA,IAAI,sCAAsC,SAAS,CAAA,CAAA;AAAA,GAC5D;AAAA,EASQ,iCACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AACpD,MAAI,IAAA,KAAA,CAAM,CAAC,CAAA,KAAM,KAAO,EAAA;AAEtB,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA,CAAA;AAAA,iBAC1C,KAAM,CAAA,CAAC,MAAM,KAAS,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEjD,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA,CAAA;AAAA,OACrD;AAAA,KACF;AAEA,IAAO,OAAA,KAAA,CAAA,CAAA;AAAA,GACT;AAAA,EAEQ,2BACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEpD,MAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA,CAAA;AAAA,KACrD;AAEA,IAAO,OAAA,KAAA,CAAA,CAAA;AAAA,GACT;AAAA,EAEQ,QAAQ,GAAsD,EAAA;AACpE,IAAA,OAAO,IAAK,CAAA,SAAA,CAAU,GAAI,CAAA,GAAA,CAAI,IAAI,CAAA,CAAA;AAAA,GACpC;AAAA,EAEA,MAAM,eAAe,IAE2B,EAAA;AAC9C,IAAA,MAAM,GAAM,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,GAAG,CAAA,CAAA;AAC5B,IAAM,MAAA,QAAA,GACJ,IAAK,CAAA,0BAAA,CAA2B,GAAG,CAAA,IACnC,IAAK,CAAA,gCAAA,CAAiC,GAAG,CAAA,IACzC,IAAK,CAAA,OAAA,CAAQ,GAAG,CAAA,CAAA;AAElB,IAAA,IAAI,aAAa,KAAW,CAAA,EAAA;AAC1B,MAAO,OAAA,KAAA,CAAA,CAAA;AAAA,KACT;AAEA,IAAO,OAAA,QAAA,CAAS,eAAe,IAAI,CAAA,CAAA;AAAA,GACrC;AACF;;;;"}
+{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.cjs.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":["CachedAzureDevOpsCredentialsProvider","DefaultAzureCredential"],"mappings":";;;;;AA2BO,MAAM,qCAEb,CAAA;AAAA,EA+CU,YACW,SAIjB,EAAA;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA;AAIhB,EAnDH,OAAO,iBACL,YACuC,EAAA;AACvC,IAAM,MAAA,SAAA,GAAY,aAAa,KAAM,CAAA,IAAA,GAAO,MAAO,CAAA,CAAC,KAAK,WAAgB,KAAA;AACvE,MAAY,WAAA,CAAA,MAAA,CAAO,WAAa,EAAA,OAAA,CAAQ,CAAc,UAAA,KAAA;AACpD,QAAA,IACE,WAAW,aAAkB,KAAA,KAAA,CAAA,IAC7B,UAAW,CAAA,aAAA,CAAc,WAAW,CACpC,EAAA;AACA,UAAA,IAAI,IAAI,GAAI,CAAA,WAAA,CAAY,MAAO,CAAA,IAAI,MAAM,KAAW,CAAA,EAAA;AAClD,YAAI,GAAA,CAAA,GAAA;AAAA,cACF,YAAY,MAAO,CAAA,IAAA;AAAA,cACnBA,yEAAqC,CAAA,yBAAA;AAAA,gBACnC;AAAA;AACF,aACF;AAAA;AACF,SACK,MAAA;AACL,UAAA,MAAM,WACJA,yEAAqC,CAAA,yBAAA;AAAA,YACnC;AAAA,WACF;AACF,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,GAAA,CAAA,GAAA,CAAI,GAAG,WAAY,CAAA,MAAA,CAAO,IAAI,CAAI,CAAA,EAAA,YAAY,IAAI,QAAQ,CAAA;AAAA,WAC/D,CAAA;AAAA;AACH,OACD,CAAA;AAED,MACE,IAAA,WAAA,CAAY,MAAO,CAAA,IAAA,KAAS,eAC5B,IAAA,GAAA,CAAI,IAAI,WAAY,CAAA,MAAA,CAAO,IAAI,CAAA,KAAM,KACrC,CAAA,EAAA;AACA,QAAI,GAAA,CAAA,GAAA;AAAA,UACF,YAAY,MAAO,CAAA,IAAA;AAAA,UACnBA,yEAAqC,CAAA,mBAAA;AAAA,YACnC,IAAIC,+BAAuB;AAAA;AAC7B,SACF;AAAA;AAGF,MAAO,OAAA,GAAA;AAAA,KACT,kBAAO,IAAA,GAAA,EAAmD,CAAA;AAE1D,IAAO,OAAA,IAAI,sCAAsC,SAAS,CAAA;AAAA;AAC5D,EASQ,iCACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AACpD,MAAI,IAAA,KAAA,CAAM,CAAC,CAAA,KAAM,KAAO,EAAA;AAEtB,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA;AAAA,iBAC1C,KAAM,CAAA,CAAC,MAAM,KAAS,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEjD,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA;AAAA;AACrD;AAGF,IAAO,OAAA,KAAA,CAAA;AAAA;AACT,EAEQ,2BACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEpD,MAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA;AAAA;AAGrD,IAAO,OAAA,KAAA,CAAA;AAAA;AACT,EAEQ,QAAQ,GAAsD,EAAA;AACpE,IAAA,OAAO,IAAK,CAAA,SAAA,CAAU,GAAI,CAAA,GAAA,CAAI,IAAI,CAAA;AAAA;AACpC,EAEA,MAAM,eAAe,IAE2B,EAAA;AAC9C,IAAA,MAAM,GAAM,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAM,MAAA,QAAA,GACJ,IAAK,CAAA,0BAAA,CAA2B,GAAG,CAAA,IACnC,IAAK,CAAA,gCAAA,CAAiC,GAAG,CAAA,IACzC,IAAK,CAAA,OAAA,CAAQ,GAAG,CAAA;AAElB,IAAA,IAAI,aAAa,KAAW,CAAA,EAAA;AAC1B,MAAO,OAAA,KAAA,CAAA;AAAA;AAGT,IAAO,OAAA,QAAA,CAAS,eAAe,IAAI,CAAA;AAAA;AAEvC;;;;"}

package/dist/azure/DefaultAzureDevOpsCredentialsProvider.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":[],"mappings":";;;AA2BO,MAAM,qCAEb,CAAA;AAAA,EA+CU,YACW,SAIjB,EAAA;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA,CAAA;AAAA,GAIhB;AAAA,EAnDH,OAAO,iBACL,YACuC,EAAA;AACvC,IAAM,MAAA,SAAA,GAAY,aAAa,KAAM,CAAA,IAAA,GAAO,MAAO,CAAA,CAAC,KAAK,WAAgB,KAAA;AACvE,MAAY,WAAA,CAAA,MAAA,CAAO,WAAa,EAAA,OAAA,CAAQ,CAAc,UAAA,KAAA;AACpD,QAAA,IACE,WAAW,aAAkB,KAAA,KAAA,CAAA,IAC7B,UAAW,CAAA,aAAA,CAAc,WAAW,CACpC,EAAA;AACA,UAAA,IAAI,IAAI,GAAI,CAAA,WAAA,CAAY,MAAO,CAAA,IAAI,MAAM,KAAW,CAAA,EAAA;AAClD,YAAI,GAAA,CAAA,GAAA;AAAA,cACF,YAAY,MAAO,CAAA,IAAA;AAAA,cACnB,oCAAqC,CAAA,yBAAA;AAAA,gBACnC,UAAA;AAAA,eACF;AAAA,aACF,CAAA;AAAA,WACF;AAAA,SACK,MAAA;AACL,UAAA,MAAM,WACJ,oCAAqC,CAAA,yBAAA;AAAA,YACnC,UAAA;AAAA,WACF,CAAA;AACF,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,GAAA,CAAA,GAAA,CAAI,GAAG,WAAY,CAAA,MAAA,CAAO,IAAI,CAAI,CAAA,EAAA,YAAY,IAAI,QAAQ,CAAA,CAAA;AAAA,WAC/D,CAAA,CAAA;AAAA,SACH;AAAA,OACD,CAAA,CAAA;AAED,MACE,IAAA,WAAA,CAAY,MAAO,CAAA,IAAA,KAAS,eAC5B,IAAA,GAAA,CAAI,IAAI,WAAY,CAAA,MAAA,CAAO,IAAI,CAAA,KAAM,KACrC,CAAA,EAAA;AACA,QAAI,GAAA,CAAA,GAAA;AAAA,UACF,YAAY,MAAO,CAAA,IAAA;AAAA,UACnB,oCAAqC,CAAA,mBAAA;AAAA,YACnC,IAAI,sBAAuB,EAAA;AAAA,WAC7B;AAAA,SACF,CAAA;AAAA,OACF;AAEA,MAAO,OAAA,GAAA,CAAA;AAAA,KACT,kBAAO,IAAA,GAAA,EAAmD,CAAA,CAAA;AAE1D,IAAO,OAAA,IAAI,sCAAsC,SAAS,CAAA,CAAA;AAAA,GAC5D;AAAA,EASQ,iCACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AACpD,MAAI,IAAA,KAAA,CAAM,CAAC,CAAA,KAAM,KAAO,EAAA;AAEtB,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA,CAAA;AAAA,iBAC1C,KAAM,CAAA,CAAC,MAAM,KAAS,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEjD,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA,CAAA;AAAA,OACrD;AAAA,KACF;AAEA,IAAO,OAAA,KAAA,CAAA,CAAA;AAAA,GACT;AAAA,EAEQ,2BACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEpD,MAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA,CAAA;AAAA,KACrD;AAEA,IAAO,OAAA,KAAA,CAAA,CAAA;AAAA,GACT;AAAA,EAEQ,QAAQ,GAAsD,EAAA;AACpE,IAAA,OAAO,IAAK,CAAA,SAAA,CAAU,GAAI,CAAA,GAAA,CAAI,IAAI,CAAA,CAAA;AAAA,GACpC;AAAA,EAEA,MAAM,eAAe,IAE2B,EAAA;AAC9C,IAAA,MAAM,GAAM,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,GAAG,CAAA,CAAA;AAC5B,IAAM,MAAA,QAAA,GACJ,IAAK,CAAA,0BAAA,CAA2B,GAAG,CAAA,IACnC,IAAK,CAAA,gCAAA,CAAiC,GAAG,CAAA,IACzC,IAAK,CAAA,OAAA,CAAQ,GAAG,CAAA,CAAA;AAElB,IAAA,IAAI,aAAa,KAAW,CAAA,EAAA;AAC1B,MAAO,OAAA,KAAA,CAAA,CAAA;AAAA,KACT;AAEA,IAAO,OAAA,QAAA,CAAS,eAAe,IAAI,CAAA,CAAA;AAAA,GACrC;AACF;;;;"}
+{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":[],"mappings":";;;AA2BO,MAAM,qCAEb,CAAA;AAAA,EA+CU,YACW,SAIjB,EAAA;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA;AAIhB,EAnDH,OAAO,iBACL,YACuC,EAAA;AACvC,IAAM,MAAA,SAAA,GAAY,aAAa,KAAM,CAAA,IAAA,GAAO,MAAO,CAAA,CAAC,KAAK,WAAgB,KAAA;AACvE,MAAY,WAAA,CAAA,MAAA,CAAO,WAAa,EAAA,OAAA,CAAQ,CAAc,UAAA,KAAA;AACpD,QAAA,IACE,WAAW,aAAkB,KAAA,KAAA,CAAA,IAC7B,UAAW,CAAA,aAAA,CAAc,WAAW,CACpC,EAAA;AACA,UAAA,IAAI,IAAI,GAAI,CAAA,WAAA,CAAY,MAAO,CAAA,IAAI,MAAM,KAAW,CAAA,EAAA;AAClD,YAAI,GAAA,CAAA,GAAA;AAAA,cACF,YAAY,MAAO,CAAA,IAAA;AAAA,cACnB,oCAAqC,CAAA,yBAAA;AAAA,gBACnC;AAAA;AACF,aACF;AAAA;AACF,SACK,MAAA;AACL,UAAA,MAAM,WACJ,oCAAqC,CAAA,yBAAA;AAAA,YACnC;AAAA,WACF;AACF,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,GAAA,CAAA,GAAA,CAAI,GAAG,WAAY,CAAA,MAAA,CAAO,IAAI,CAAI,CAAA,EAAA,YAAY,IAAI,QAAQ,CAAA;AAAA,WAC/D,CAAA;AAAA;AACH,OACD,CAAA;AAED,MACE,IAAA,WAAA,CAAY,MAAO,CAAA,IAAA,KAAS,eAC5B,IAAA,GAAA,CAAI,IAAI,WAAY,CAAA,MAAA,CAAO,IAAI,CAAA,KAAM,KACrC,CAAA,EAAA;AACA,QAAI,GAAA,CAAA,GAAA;AAAA,UACF,YAAY,MAAO,CAAA,IAAA;AAAA,UACnB,oCAAqC,CAAA,mBAAA;AAAA,YACnC,IAAI,sBAAuB;AAAA;AAC7B,SACF;AAAA;AAGF,MAAO,OAAA,GAAA;AAAA,KACT,kBAAO,IAAA,GAAA,EAAmD,CAAA;AAE1D,IAAO,OAAA,IAAI,sCAAsC,SAAS,CAAA;AAAA;AAC5D,EASQ,iCACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AACpD,MAAI,IAAA,KAAA,CAAM,CAAC,CAAA,KAAM,KAAO,EAAA;AAEtB,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA;AAAA,iBAC1C,KAAM,CAAA,CAAC,MAAM,KAAS,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEjD,QAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA;AAAA;AACrD;AAGF,IAAO,OAAA,KAAA,CAAA;AAAA;AACT,EAEQ,2BACN,GAC4C,EAAA;AAC5C,IAAM,MAAA,KAAA,GAAQ,IAAI,QAAS,CAAA,KAAA,CAAM,GAAG,CAAE,CAAA,MAAA,CAAO,CAAQ,IAAA,KAAA,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAI,CAAA,IAAA,KAAS,eAAmB,IAAA,KAAA,CAAM,SAAS,CAAG,EAAA;AAEpD,MAAO,OAAA,IAAA,CAAK,SAAU,CAAA,GAAA,CAAI,CAAG,EAAA,GAAA,CAAI,IAAI,CAAI,CAAA,EAAA,KAAA,CAAM,CAAC,CAAC,CAAE,CAAA,CAAA;AAAA;AAGrD,IAAO,OAAA,KAAA,CAAA;AAAA;AACT,EAEQ,QAAQ,GAAsD,EAAA;AACpE,IAAA,OAAO,IAAK,CAAA,SAAA,CAAU,GAAI,CAAA,GAAA,CAAI,IAAI,CAAA;AAAA;AACpC,EAEA,MAAM,eAAe,IAE2B,EAAA;AAC9C,IAAA,MAAM,GAAM,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAM,MAAA,QAAA,GACJ,IAAK,CAAA,0BAAA,CAA2B,GAAG,CAAA,IACnC,IAAK,CAAA,gCAAA,CAAiC,GAAG,CAAA,IACzC,IAAK,CAAA,OAAA,CAAQ,GAAG,CAAA;AAElB,IAAA,IAAI,aAAa,KAAW,CAAA,EAAA;AAC1B,MAAO,OAAA,KAAA,CAAA;AAAA;AAGT,IAAO,OAAA,QAAA,CAAS,eAAe,IAAI,CAAA;AAAA;AAEvC;;;;"}

package/dist/azure/config.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The authorization token to use for requests.\n   *\n   * If no token is specified, anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  token?: string;\n\n  /**\n   * The credential to use for requests.\n   *\n   * If no credential is specified anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  credential?: AzureDevOpsCredential;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  let credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId'),\n        clientId: credential.getOptionalString('clientId'),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n      };\n\n      return result;\n    });\n\n  const token = config.getOptionalString('token')?.trim();\n\n  if (\n    config.getOptional('credential') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (\n    config.getOptional('token') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'token' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (token !== undefined) {\n    const mapped = [{ personalAccessToken: token }];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (config.getOptional('credential') !== undefined) {\n    const mapped = [\n      {\n        organizations: config.getOptionalStringArray(\n          'credential.organizations',\n        ),\n        token: config.getOptionalString('credential.token')?.trim(),\n        tenantId: config.getOptionalString('credential.tenantId'),\n        clientId: config.getOptionalString('credential.clientId'),\n        clientSecret: config\n          .getOptionalString('credential.clientSecret')\n          ?.trim(),\n      },\n    ];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n"],"names":["isValidHost"],"mappings":";;;;AAmBA,MAAM,UAAa,GAAA,eAAA,CAAA;AAgInB,MAAM,2BAA8B,GAAA;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,UAAA;AAAA,EACA,qBAAA;AACF,CAAA,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAGxC,CAAA;AAAA,EACA,CAAC,cAAgB,EAAA,CAAC,UAAY,EAAA,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC,CAAA;AACjD,CAAC,CAAA,CAAA;AAED,SAAS,wBACP,UACuB,EAAA;AACvB,EAAW,KAAA,MAAA,KAAA,IAAS,6BAA8B,CAAA,OAAA,EAAW,EAAA;AAC3D,IAAM,MAAA,CAAC,IAAM,EAAA,cAAc,CAAI,GAAA,KAAA,CAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAA4B,CAAA,MAAA;AAAA,MAClD,CAAS,KAAA,KAAA,CAAC,cAAe,CAAA,QAAA,CAAS,KAAmC,CAAA;AAAA,KACvE,CAAA;AAEA,IAAA,IACE,cAAe,CAAA,KAAA,CAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAM,KAAA,KAAA,CAAS,CAC7D,IAAA,eAAA,CAAgB,MAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAC9D,EAAA;AACA,MAAO,OAAA;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAW,CAAA,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAO,CAAA,CAAC,KAAK,KAAU,KAAA;AACvC,UAAI,GAAA,CAAA,KAAK,CAAI,GAAA,UAAA,CAAW,KAAK,CAAA,CAAA;AAC7B,UAAO,OAAA,GAAA,CAAA;AAAA,SACT,EAAG,EAAyB,CAAA;AAAA,OAC9B,CAAA;AAAA,KACF;AAAA,GACF;AACA,EAAM,MAAA,IAAI,MAAM,2BAA2B,CAAA,CAAA;AAC7C,CAAA;AAQO,SAAS,2BACd,MACwB,EAAA;AACxB,EAAA,MAAM,IAAO,GAAA,MAAA,CAAO,iBAAkB,CAAA,MAAM,CAAK,IAAA,UAAA,CAAA;AAEjD,EAAA,IAAI,oBAAoB,MACrB,CAAA,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAc,UAAA,KAAA;AAClB,IAAA,MAAM,MAA6C,GAAA;AAAA,MACjD,aAAA,EAAe,UAAW,CAAA,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAqB,EAAA,UAAA,CAClB,iBAAkB,CAAA,qBAAqB,GACtC,IAAK,EAAA;AAAA,MACT,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,YAAc,EAAA,UAAA,CAAW,iBAAkB,CAAA,cAAc,GAAG,IAAK,EAAA;AAAA,KACnE,CAAA;AAEA,IAAO,OAAA,MAAA,CAAA;AAAA,GACR,CAAA,CAAA;AAEH,EAAA,MAAM,KAAQ,GAAA,MAAA,CAAO,iBAAkB,CAAA,OAAO,GAAG,IAAK,EAAA,CAAA;AAEtD,EACE,IAAA,MAAA,CAAO,YAAY,YAAY,CAAA,KAAM,UACrC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,oHAAA,CAAA;AAAA,KACF,CAAA;AAAA,GACF;AAEA,EACE,IAAA,MAAA,CAAO,YAAY,OAAO,CAAA,KAAM,UAChC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+GAAA,CAAA;AAAA,KACF,CAAA;AAAA,GACF;AAEA,EAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,IAAA,MAAM,MAAS,GAAA,CAAC,EAAE,mBAAA,EAAqB,OAAO,CAAA,CAAA;AAC9C,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA,CAAA;AAAA,GAC3D;AAEA,EAAA,IAAI,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA,KAAM,KAAW,CAAA,EAAA;AAClD,IAAA,MAAM,MAAS,GAAA;AAAA,MACb;AAAA,QACE,eAAe,MAAO,CAAA,sBAAA;AAAA,UACpB,0BAAA;AAAA,SACF;AAAA,QACA,KAAO,EAAA,MAAA,CAAO,iBAAkB,CAAA,kBAAkB,GAAG,IAAK,EAAA;AAAA,QAC1D,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,YAAc,EAAA,MAAA,CACX,iBAAkB,CAAA,yBAAyB,GAC1C,IAAK,EAAA;AAAA,OACX;AAAA,KACF,CAAA;AACA,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA,CAAA;AAAA,GAC3D;AAEA,EAAI,IAAA,CAACA,mBAAY,CAAA,IAAI,CAAG,EAAA;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA,CAAA;AAAA,KAC5C,CAAA;AAAA,GACF;AAEA,EAAA,IAAI,WAAmD,GAAA,KAAA,CAAA,CAAA;AACvD,EAAA,IAAI,sBAAsB,KAAW,CAAA,EAAA;AACnC,IAAA,MAAM,SAAS,iBACX,EAAA,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAU,KAAA;AACzC,MAAA,IAAI,KAA4B,GAAA,KAAA,CAAA,CAAA;AAChC,MAAI,IAAA;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA,CAAA;AAAA,eACjC,CAAG,EAAA;AACV,QAAA,KAAA,GAAQ,CAAE,CAAA,OAAA,CAAA;AAAA,OACZ;AAEA,MAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,QAAA,GAAA,CAAI,KAAK,CAA0B,uBAAA,EAAA,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAE,CAAA,CAAA,CAAA;AAAA,OACzD;AAEA,MAAO,OAAA,GAAA,CAAA;AAAA,KACN,EAAA,KAAA,CAAM,EAAW,EAAC,CACpB,CAAA,MAAA;AAAA,MACC,MAAO,CAAA,OAAA;AAAA,QACL,iBACG,CAAA,MAAA;AAAA,UACC,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAS,GAAA,CAAA;AAAA,SAErC,CAAA,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAU,KAAA;AAClC,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,IAAA,CAAC,GAAI,CAAA,YAAY,CAAG,EAAA;AACtB,cAAI,GAAA,CAAA,YAAY,IAAI,EAAC,CAAA;AAAA,aACvB;AAEA,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAK,CAAA,KAAA,GAAQ,CAAC,CAAA,CAAA;AAAA,WACjC,CAAA,CAAA;AAED,UAAO,OAAA,GAAA,CAAA;AAAA,SACT,EAAG,EAA8B,CAAA;AAAA,QAElC,MAAO,CAAA,CAAC,CAAC,CAAA,EAAG,OAAO,CAAM,KAAA,OAAA,CAAQ,MAAS,GAAA,CAAC,EAC3C,MAAO,CAAA,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAM,KAAA;AAC/B,QAAI,GAAA,CAAA,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAM,CAAA,CAAA,EAAG,QAAQ,MAAS,GAAA,CAAC,CAC3B,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAQ,CAAA,MAAA,GAAS,CAAC,CAAC,CAAA,CAAA;AAAA,SAClD,CAAA;AACA,QAAO,OAAA,GAAA,CAAA;AAAA,OACT,EAAG,KAAM,CAAA,EAAA,EAAY,CAAA;AAAA,KACzB,CAAA;AAEF,IAAI,IAAA,MAAA,EAAQ,SAAS,CAAG,EAAA;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAO,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACpE,CAAA;AAAA,KACF;AAEA,IAAA,WAAA,GAAc,iBAAkB,CAAA,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB,CAAA;AAAA,KAC1C,CAAA;AAEA,IAAA,IACE,WAAY,CAAA,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAS,KAAA,qBAAA;AAAA,KACpC,IACA,SAAS,UACT,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA,CAAA;AAAA,OAC3H,CAAA;AAAA,KACF;AAEA,IAAA,IACE,WAAY,CAAA,MAAA;AAAA,MACV,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA,CAAA;AAAA,KACxC,CAAE,SAAS,CACX,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA,CAAA;AAAA,OAC9C,CAAA;AAAA,KACF;AAAA,GACF;AAEA,EAAO,OAAA;AAAA,IACL,IAAA;AAAA,IACA,WAAA;AAAA,GACF,CAAA;AACF,CAAA;AASO,SAAS,4BACd,OAC0B,EAAA;AAE1B,EAAM,MAAA,MAAA,GAAS,OAAQ,CAAA,GAAA,CAAI,0BAA0B,CAAA,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAO,CAAA,IAAA,CAAK,OAAK,CAAE,CAAA,IAAA,KAAS,UAAU,CAAG,EAAA;AAC5C,IAAA,MAAA,CAAO,IAAK,CAAA,EAAE,IAAM,EAAA,UAAA,EAAY,CAAA,CAAA;AAAA,GAClC;AAEA,EAAO,OAAA,MAAA,CAAA;AACT;;;;;"}
+{"version":3,"file":"config.cjs.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The authorization token to use for requests.\n   *\n   * If no token is specified, anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  token?: string;\n\n  /**\n   * The credential to use for requests.\n   *\n   * If no credential is specified anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  credential?: AzureDevOpsCredential;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  let credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId'),\n        clientId: credential.getOptionalString('clientId'),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n      };\n\n      return result;\n    });\n\n  const token = config.getOptionalString('token')?.trim();\n\n  if (\n    config.getOptional('credential') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (\n    config.getOptional('token') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'token' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (token !== undefined) {\n    const mapped = [{ personalAccessToken: token }];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (config.getOptional('credential') !== undefined) {\n    const mapped = [\n      {\n        organizations: config.getOptionalStringArray(\n          'credential.organizations',\n        ),\n        token: config.getOptionalString('credential.token')?.trim(),\n        tenantId: config.getOptionalString('credential.tenantId'),\n        clientId: config.getOptionalString('credential.clientId'),\n        clientSecret: config\n          .getOptionalString('credential.clientSecret')\n          ?.trim(),\n      },\n    ];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n"],"names":["isValidHost"],"mappings":";;;;AAmBA,MAAM,UAAa,GAAA,eAAA;AAgInB,MAAM,2BAA8B,GAAA;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAGxC,CAAA;AAAA,EACA,CAAC,cAAgB,EAAA,CAAC,UAAY,EAAA,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC;AACjD,CAAC,CAAA;AAED,SAAS,wBACP,UACuB,EAAA;AACvB,EAAW,KAAA,MAAA,KAAA,IAAS,6BAA8B,CAAA,OAAA,EAAW,EAAA;AAC3D,IAAM,MAAA,CAAC,IAAM,EAAA,cAAc,CAAI,GAAA,KAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAA4B,CAAA,MAAA;AAAA,MAClD,CAAS,KAAA,KAAA,CAAC,cAAe,CAAA,QAAA,CAAS,KAAmC;AAAA,KACvE;AAEA,IAAA,IACE,cAAe,CAAA,KAAA,CAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAM,KAAA,KAAA,CAAS,CAC7D,IAAA,eAAA,CAAgB,MAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAC9D,EAAA;AACA,MAAO,OAAA;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAW,CAAA,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAO,CAAA,CAAC,KAAK,KAAU,KAAA;AACvC,UAAI,GAAA,CAAA,KAAK,CAAI,GAAA,UAAA,CAAW,KAAK,CAAA;AAC7B,UAAO,OAAA,GAAA;AAAA,SACT,EAAG,EAAyB;AAAA,OAC9B;AAAA;AACF;AAEF,EAAM,MAAA,IAAI,MAAM,2BAA2B,CAAA;AAC7C;AAQO,SAAS,2BACd,MACwB,EAAA;AACxB,EAAA,MAAM,IAAO,GAAA,MAAA,CAAO,iBAAkB,CAAA,MAAM,CAAK,IAAA,UAAA;AAEjD,EAAA,IAAI,oBAAoB,MACrB,CAAA,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAc,UAAA,KAAA;AAClB,IAAA,MAAM,MAA6C,GAAA;AAAA,MACjD,aAAA,EAAe,UAAW,CAAA,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAqB,EAAA,UAAA,CAClB,iBAAkB,CAAA,qBAAqB,GACtC,IAAK,EAAA;AAAA,MACT,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,YAAc,EAAA,UAAA,CAAW,iBAAkB,CAAA,cAAc,GAAG,IAAK;AAAA,KACnE;AAEA,IAAO,OAAA,MAAA;AAAA,GACR,CAAA;AAEH,EAAA,MAAM,KAAQ,GAAA,MAAA,CAAO,iBAAkB,CAAA,OAAO,GAAG,IAAK,EAAA;AAEtD,EACE,IAAA,MAAA,CAAO,YAAY,YAAY,CAAA,KAAM,UACrC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,oHAAA;AAAA,KACF;AAAA;AAGF,EACE,IAAA,MAAA,CAAO,YAAY,OAAO,CAAA,KAAM,UAChC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+GAAA;AAAA,KACF;AAAA;AAGF,EAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,IAAA,MAAM,MAAS,GAAA,CAAC,EAAE,mBAAA,EAAqB,OAAO,CAAA;AAC9C,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA;AAAA;AAG3D,EAAA,IAAI,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA,KAAM,KAAW,CAAA,EAAA;AAClD,IAAA,MAAM,MAAS,GAAA;AAAA,MACb;AAAA,QACE,eAAe,MAAO,CAAA,sBAAA;AAAA,UACpB;AAAA,SACF;AAAA,QACA,KAAO,EAAA,MAAA,CAAO,iBAAkB,CAAA,kBAAkB,GAAG,IAAK,EAAA;AAAA,QAC1D,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,YAAc,EAAA,MAAA,CACX,iBAAkB,CAAA,yBAAyB,GAC1C,IAAK;AAAA;AACX,KACF;AACA,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA;AAAA;AAG3D,EAAI,IAAA,CAACA,mBAAY,CAAA,IAAI,CAAG,EAAA;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA;AAAA,KAC5C;AAAA;AAGF,EAAA,IAAI,WAAmD,GAAA,KAAA,CAAA;AACvD,EAAA,IAAI,sBAAsB,KAAW,CAAA,EAAA;AACnC,IAAA,MAAM,SAAS,iBACX,EAAA,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAU,KAAA;AACzC,MAAA,IAAI,KAA4B,GAAA,KAAA,CAAA;AAChC,MAAI,IAAA;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA;AAAA,eACjC,CAAG,EAAA;AACV,QAAA,KAAA,GAAQ,CAAE,CAAA,OAAA;AAAA;AAGZ,MAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,QAAA,GAAA,CAAI,KAAK,CAA0B,uBAAA,EAAA,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAE,CAAA,CAAA;AAAA;AAGzD,MAAO,OAAA,GAAA;AAAA,KACN,EAAA,KAAA,CAAM,EAAW,EAAC,CACpB,CAAA,MAAA;AAAA,MACC,MAAO,CAAA,OAAA;AAAA,QACL,iBACG,CAAA,MAAA;AAAA,UACC,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAS,GAAA;AAAA,SAErC,CAAA,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAU,KAAA;AAClC,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,IAAA,CAAC,GAAI,CAAA,YAAY,CAAG,EAAA;AACtB,cAAI,GAAA,CAAA,YAAY,IAAI,EAAC;AAAA;AAGvB,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAK,CAAA,KAAA,GAAQ,CAAC,CAAA;AAAA,WACjC,CAAA;AAED,UAAO,OAAA,GAAA;AAAA,SACT,EAAG,EAA8B;AAAA,QAElC,MAAO,CAAA,CAAC,CAAC,CAAA,EAAG,OAAO,CAAM,KAAA,OAAA,CAAQ,MAAS,GAAA,CAAC,EAC3C,MAAO,CAAA,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAM,KAAA;AAC/B,QAAI,GAAA,CAAA,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAM,CAAA,CAAA,EAAG,QAAQ,MAAS,GAAA,CAAC,CAC3B,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAQ,CAAA,MAAA,GAAS,CAAC,CAAC,CAAA;AAAA,SAClD;AACA,QAAO,OAAA,GAAA;AAAA,OACT,EAAG,KAAM,CAAA,EAAA,EAAY;AAAA,KACzB;AAEF,IAAI,IAAA,MAAA,EAAQ,SAAS,CAAG,EAAA;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAO,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACpE;AAAA;AAGF,IAAA,WAAA,GAAc,iBAAkB,CAAA,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB;AAAA,KAC1C;AAEA,IAAA,IACE,WAAY,CAAA,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAS,KAAA;AAAA,KACpC,IACA,SAAS,UACT,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA;AAAA,OAC3H;AAAA;AAGF,IAAA,IACE,WAAY,CAAA,MAAA;AAAA,MACV,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA;AAAA,KACxC,CAAE,SAAS,CACX,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA;AAAA,OAC9C;AAAA;AACF;AAGF,EAAO,OAAA;AAAA,IACL,IAAA;AAAA,IACA;AAAA,GACF;AACF;AASO,SAAS,4BACd,OAC0B,EAAA;AAE1B,EAAM,MAAA,MAAA,GAAS,OAAQ,CAAA,GAAA,CAAI,0BAA0B,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAO,CAAA,IAAA,CAAK,OAAK,CAAE,CAAA,IAAA,KAAS,UAAU,CAAG,EAAA;AAC5C,IAAA,MAAA,CAAO,IAAK,CAAA,EAAE,IAAM,EAAA,UAAA,EAAY,CAAA;AAAA;AAGlC,EAAO,OAAA,MAAA;AACT;;;;;"}

package/dist/azure/config.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.esm.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The authorization token to use for requests.\n   *\n   * If no token is specified, anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  token?: string;\n\n  /**\n   * The credential to use for requests.\n   *\n   * If no credential is specified anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  credential?: AzureDevOpsCredential;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  let credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId'),\n        clientId: credential.getOptionalString('clientId'),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n      };\n\n      return result;\n    });\n\n  const token = config.getOptionalString('token')?.trim();\n\n  if (\n    config.getOptional('credential') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (\n    config.getOptional('token') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'token' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (token !== undefined) {\n    const mapped = [{ personalAccessToken: token }];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (config.getOptional('credential') !== undefined) {\n    const mapped = [\n      {\n        organizations: config.getOptionalStringArray(\n          'credential.organizations',\n        ),\n        token: config.getOptionalString('credential.token')?.trim(),\n        tenantId: config.getOptionalString('credential.tenantId'),\n        clientId: config.getOptionalString('credential.clientId'),\n        clientSecret: config\n          .getOptionalString('credential.clientSecret')\n          ?.trim(),\n      },\n    ];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n"],"names":[],"mappings":";;AAmBA,MAAM,UAAa,GAAA,eAAA,CAAA;AAgInB,MAAM,2BAA8B,GAAA;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,UAAA;AAAA,EACA,qBAAA;AACF,CAAA,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAGxC,CAAA;AAAA,EACA,CAAC,cAAgB,EAAA,CAAC,UAAY,EAAA,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC,CAAA;AACjD,CAAC,CAAA,CAAA;AAED,SAAS,wBACP,UACuB,EAAA;AACvB,EAAW,KAAA,MAAA,KAAA,IAAS,6BAA8B,CAAA,OAAA,EAAW,EAAA;AAC3D,IAAM,MAAA,CAAC,IAAM,EAAA,cAAc,CAAI,GAAA,KAAA,CAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAA4B,CAAA,MAAA;AAAA,MAClD,CAAS,KAAA,KAAA,CAAC,cAAe,CAAA,QAAA,CAAS,KAAmC,CAAA;AAAA,KACvE,CAAA;AAEA,IAAA,IACE,cAAe,CAAA,KAAA,CAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAM,KAAA,KAAA,CAAS,CAC7D,IAAA,eAAA,CAAgB,MAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAC9D,EAAA;AACA,MAAO,OAAA;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAW,CAAA,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAO,CAAA,CAAC,KAAK,KAAU,KAAA;AACvC,UAAI,GAAA,CAAA,KAAK,CAAI,GAAA,UAAA,CAAW,KAAK,CAAA,CAAA;AAC7B,UAAO,OAAA,GAAA,CAAA;AAAA,SACT,EAAG,EAAyB,CAAA;AAAA,OAC9B,CAAA;AAAA,KACF;AAAA,GACF;AACA,EAAM,MAAA,IAAI,MAAM,2BAA2B,CAAA,CAAA;AAC7C,CAAA;AAQO,SAAS,2BACd,MACwB,EAAA;AACxB,EAAA,MAAM,IAAO,GAAA,MAAA,CAAO,iBAAkB,CAAA,MAAM,CAAK,IAAA,UAAA,CAAA;AAEjD,EAAA,IAAI,oBAAoB,MACrB,CAAA,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAc,UAAA,KAAA;AAClB,IAAA,MAAM,MAA6C,GAAA;AAAA,MACjD,aAAA,EAAe,UAAW,CAAA,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAqB,EAAA,UAAA,CAClB,iBAAkB,CAAA,qBAAqB,GACtC,IAAK,EAAA;AAAA,MACT,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,YAAc,EAAA,UAAA,CAAW,iBAAkB,CAAA,cAAc,GAAG,IAAK,EAAA;AAAA,KACnE,CAAA;AAEA,IAAO,OAAA,MAAA,CAAA;AAAA,GACR,CAAA,CAAA;AAEH,EAAA,MAAM,KAAQ,GAAA,MAAA,CAAO,iBAAkB,CAAA,OAAO,GAAG,IAAK,EAAA,CAAA;AAEtD,EACE,IAAA,MAAA,CAAO,YAAY,YAAY,CAAA,KAAM,UACrC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,oHAAA,CAAA;AAAA,KACF,CAAA;AAAA,GACF;AAEA,EACE,IAAA,MAAA,CAAO,YAAY,OAAO,CAAA,KAAM,UAChC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+GAAA,CAAA;AAAA,KACF,CAAA;AAAA,GACF;AAEA,EAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,IAAA,MAAM,MAAS,GAAA,CAAC,EAAE,mBAAA,EAAqB,OAAO,CAAA,CAAA;AAC9C,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA,CAAA;AAAA,GAC3D;AAEA,EAAA,IAAI,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA,KAAM,KAAW,CAAA,EAAA;AAClD,IAAA,MAAM,MAAS,GAAA;AAAA,MACb;AAAA,QACE,eAAe,MAAO,CAAA,sBAAA;AAAA,UACpB,0BAAA;AAAA,SACF;AAAA,QACA,KAAO,EAAA,MAAA,CAAO,iBAAkB,CAAA,kBAAkB,GAAG,IAAK,EAAA;AAAA,QAC1D,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,YAAc,EAAA,MAAA,CACX,iBAAkB,CAAA,yBAAyB,GAC1C,IAAK,EAAA;AAAA,OACX;AAAA,KACF,CAAA;AACA,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA,CAAA;AAAA,GAC3D;AAEA,EAAI,IAAA,CAAC,WAAY,CAAA,IAAI,CAAG,EAAA;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA,CAAA;AAAA,KAC5C,CAAA;AAAA,GACF;AAEA,EAAA,IAAI,WAAmD,GAAA,KAAA,CAAA,CAAA;AACvD,EAAA,IAAI,sBAAsB,KAAW,CAAA,EAAA;AACnC,IAAA,MAAM,SAAS,iBACX,EAAA,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAU,KAAA;AACzC,MAAA,IAAI,KAA4B,GAAA,KAAA,CAAA,CAAA;AAChC,MAAI,IAAA;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA,CAAA;AAAA,eACjC,CAAG,EAAA;AACV,QAAA,KAAA,GAAQ,CAAE,CAAA,OAAA,CAAA;AAAA,OACZ;AAEA,MAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,QAAA,GAAA,CAAI,KAAK,CAA0B,uBAAA,EAAA,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAE,CAAA,CAAA,CAAA;AAAA,OACzD;AAEA,MAAO,OAAA,GAAA,CAAA;AAAA,KACN,EAAA,KAAA,CAAM,EAAW,EAAC,CACpB,CAAA,MAAA;AAAA,MACC,MAAO,CAAA,OAAA;AAAA,QACL,iBACG,CAAA,MAAA;AAAA,UACC,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAS,GAAA,CAAA;AAAA,SAErC,CAAA,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAU,KAAA;AAClC,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,IAAA,CAAC,GAAI,CAAA,YAAY,CAAG,EAAA;AACtB,cAAI,GAAA,CAAA,YAAY,IAAI,EAAC,CAAA;AAAA,aACvB;AAEA,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAK,CAAA,KAAA,GAAQ,CAAC,CAAA,CAAA;AAAA,WACjC,CAAA,CAAA;AAED,UAAO,OAAA,GAAA,CAAA;AAAA,SACT,EAAG,EAA8B,CAAA;AAAA,QAElC,MAAO,CAAA,CAAC,CAAC,CAAA,EAAG,OAAO,CAAM,KAAA,OAAA,CAAQ,MAAS,GAAA,CAAC,EAC3C,MAAO,CAAA,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAM,KAAA;AAC/B,QAAI,GAAA,CAAA,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAM,CAAA,CAAA,EAAG,QAAQ,MAAS,GAAA,CAAC,CAC3B,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAQ,CAAA,MAAA,GAAS,CAAC,CAAC,CAAA,CAAA;AAAA,SAClD,CAAA;AACA,QAAO,OAAA,GAAA,CAAA;AAAA,OACT,EAAG,KAAM,CAAA,EAAA,EAAY,CAAA;AAAA,KACzB,CAAA;AAEF,IAAI,IAAA,MAAA,EAAQ,SAAS,CAAG,EAAA;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAO,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACpE,CAAA;AAAA,KACF;AAEA,IAAA,WAAA,GAAc,iBAAkB,CAAA,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB,CAAA;AAAA,KAC1C,CAAA;AAEA,IAAA,IACE,WAAY,CAAA,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAS,KAAA,qBAAA;AAAA,KACpC,IACA,SAAS,UACT,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA,CAAA;AAAA,OAC3H,CAAA;AAAA,KACF;AAEA,IAAA,IACE,WAAY,CAAA,MAAA;AAAA,MACV,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA,CAAA;AAAA,KACxC,CAAE,SAAS,CACX,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA,CAAA;AAAA,OAC9C,CAAA;AAAA,KACF;AAAA,GACF;AAEA,EAAO,OAAA;AAAA,IACL,IAAA;AAAA,IACA,WAAA;AAAA,GACF,CAAA;AACF,CAAA;AASO,SAAS,4BACd,OAC0B,EAAA;AAE1B,EAAM,MAAA,MAAA,GAAS,OAAQ,CAAA,GAAA,CAAI,0BAA0B,CAAA,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAO,CAAA,IAAA,CAAK,OAAK,CAAE,CAAA,IAAA,KAAS,UAAU,CAAG,EAAA;AAC5C,IAAA,MAAA,CAAO,IAAK,CAAA,EAAE,IAAM,EAAA,UAAA,EAAY,CAAA,CAAA;AAAA,GAClC;AAEA,EAAO,OAAA,MAAA,CAAA;AACT;;;;"}
+{"version":3,"file":"config.esm.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The authorization token to use for requests.\n   *\n   * If no token is specified, anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  token?: string;\n\n  /**\n   * The credential to use for requests.\n   *\n   * If no credential is specified anonymous access is used.\n   *\n   * @deprecated Use `credentials` instead.\n   */\n  credential?: AzureDevOpsCredential;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  let credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId'),\n        clientId: credential.getOptionalString('clientId'),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n      };\n\n      return result;\n    });\n\n  const token = config.getOptionalString('token')?.trim();\n\n  if (\n    config.getOptional('credential') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (\n    config.getOptional('token') !== undefined &&\n    config.getOptional('credentials') !== undefined\n  ) {\n    throw new Error(\n      `Invalid Azure integration config, 'token' and 'credentials' cannot be used together. Use 'credentials' instead.`,\n    );\n  }\n\n  if (token !== undefined) {\n    const mapped = [{ personalAccessToken: token }];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (config.getOptional('credential') !== undefined) {\n    const mapped = [\n      {\n        organizations: config.getOptionalStringArray(\n          'credential.organizations',\n        ),\n        token: config.getOptionalString('credential.token')?.trim(),\n        tenantId: config.getOptionalString('credential.tenantId'),\n        clientId: config.getOptionalString('credential.clientId'),\n        clientSecret: config\n          .getOptionalString('credential.clientSecret')\n          ?.trim(),\n      },\n    ];\n    credentialConfigs = credentialConfigs?.concat(mapped) ?? mapped;\n  }\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n"],"names":[],"mappings":";;AAmBA,MAAM,UAAa,GAAA,eAAA;AAgInB,MAAM,2BAA8B,GAAA;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAGxC,CAAA;AAAA,EACA,CAAC,cAAgB,EAAA,CAAC,UAAY,EAAA,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC;AACjD,CAAC,CAAA;AAED,SAAS,wBACP,UACuB,EAAA;AACvB,EAAW,KAAA,MAAA,KAAA,IAAS,6BAA8B,CAAA,OAAA,EAAW,EAAA;AAC3D,IAAM,MAAA,CAAC,IAAM,EAAA,cAAc,CAAI,GAAA,KAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAA4B,CAAA,MAAA;AAAA,MAClD,CAAS,KAAA,KAAA,CAAC,cAAe,CAAA,QAAA,CAAS,KAAmC;AAAA,KACvE;AAEA,IAAA,IACE,cAAe,CAAA,KAAA,CAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAM,KAAA,KAAA,CAAS,CAC7D,IAAA,eAAA,CAAgB,MAAM,CAAS,KAAA,KAAA,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAC9D,EAAA;AACA,MAAO,OAAA;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAW,CAAA,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAO,CAAA,CAAC,KAAK,KAAU,KAAA;AACvC,UAAI,GAAA,CAAA,KAAK,CAAI,GAAA,UAAA,CAAW,KAAK,CAAA;AAC7B,UAAO,OAAA,GAAA;AAAA,SACT,EAAG,EAAyB;AAAA,OAC9B;AAAA;AACF;AAEF,EAAM,MAAA,IAAI,MAAM,2BAA2B,CAAA;AAC7C;AAQO,SAAS,2BACd,MACwB,EAAA;AACxB,EAAA,MAAM,IAAO,GAAA,MAAA,CAAO,iBAAkB,CAAA,MAAM,CAAK,IAAA,UAAA;AAEjD,EAAA,IAAI,oBAAoB,MACrB,CAAA,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAc,UAAA,KAAA;AAClB,IAAA,MAAM,MAA6C,GAAA;AAAA,MACjD,aAAA,EAAe,UAAW,CAAA,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAqB,EAAA,UAAA,CAClB,iBAAkB,CAAA,qBAAqB,GACtC,IAAK,EAAA;AAAA,MACT,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,QAAA,EAAU,UAAW,CAAA,iBAAA,CAAkB,UAAU,CAAA;AAAA,MACjD,YAAc,EAAA,UAAA,CAAW,iBAAkB,CAAA,cAAc,GAAG,IAAK;AAAA,KACnE;AAEA,IAAO,OAAA,MAAA;AAAA,GACR,CAAA;AAEH,EAAA,MAAM,KAAQ,GAAA,MAAA,CAAO,iBAAkB,CAAA,OAAO,GAAG,IAAK,EAAA;AAEtD,EACE,IAAA,MAAA,CAAO,YAAY,YAAY,CAAA,KAAM,UACrC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,oHAAA;AAAA,KACF;AAAA;AAGF,EACE,IAAA,MAAA,CAAO,YAAY,OAAO,CAAA,KAAM,UAChC,MAAO,CAAA,WAAA,CAAY,aAAa,CAAA,KAAM,KACtC,CAAA,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+GAAA;AAAA,KACF;AAAA;AAGF,EAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,IAAA,MAAM,MAAS,GAAA,CAAC,EAAE,mBAAA,EAAqB,OAAO,CAAA;AAC9C,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA;AAAA;AAG3D,EAAA,IAAI,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA,KAAM,KAAW,CAAA,EAAA;AAClD,IAAA,MAAM,MAAS,GAAA;AAAA,MACb;AAAA,QACE,eAAe,MAAO,CAAA,sBAAA;AAAA,UACpB;AAAA,SACF;AAAA,QACA,KAAO,EAAA,MAAA,CAAO,iBAAkB,CAAA,kBAAkB,GAAG,IAAK,EAAA;AAAA,QAC1D,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,QAAA,EAAU,MAAO,CAAA,iBAAA,CAAkB,qBAAqB,CAAA;AAAA,QACxD,YAAc,EAAA,MAAA,CACX,iBAAkB,CAAA,yBAAyB,GAC1C,IAAK;AAAA;AACX,KACF;AACA,IAAoB,iBAAA,GAAA,iBAAA,EAAmB,MAAO,CAAA,MAAM,CAAK,IAAA,MAAA;AAAA;AAG3D,EAAI,IAAA,CAAC,WAAY,CAAA,IAAI,CAAG,EAAA;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA;AAAA,KAC5C;AAAA;AAGF,EAAA,IAAI,WAAmD,GAAA,KAAA,CAAA;AACvD,EAAA,IAAI,sBAAsB,KAAW,CAAA,EAAA;AACnC,IAAA,MAAM,SAAS,iBACX,EAAA,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAU,KAAA;AACzC,MAAA,IAAI,KAA4B,GAAA,KAAA,CAAA;AAChC,MAAI,IAAA;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA;AAAA,eACjC,CAAG,EAAA;AACV,QAAA,KAAA,GAAQ,CAAE,CAAA,OAAA;AAAA;AAGZ,MAAA,IAAI,UAAU,KAAW,CAAA,EAAA;AACvB,QAAA,GAAA,CAAI,KAAK,CAA0B,uBAAA,EAAA,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAE,CAAA,CAAA;AAAA;AAGzD,MAAO,OAAA,GAAA;AAAA,KACN,EAAA,KAAA,CAAM,EAAW,EAAC,CACpB,CAAA,MAAA;AAAA,MACC,MAAO,CAAA,OAAA;AAAA,QACL,iBACG,CAAA,MAAA;AAAA,UACC,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAS,GAAA;AAAA,SAErC,CAAA,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAU,KAAA;AAClC,UAAW,UAAA,CAAA,aAAA,EAAe,QAAQ,CAAgB,YAAA,KAAA;AAChD,YAAI,IAAA,CAAC,GAAI,CAAA,YAAY,CAAG,EAAA;AACtB,cAAI,GAAA,CAAA,YAAY,IAAI,EAAC;AAAA;AAGvB,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAK,CAAA,KAAA,GAAQ,CAAC,CAAA;AAAA,WACjC,CAAA;AAED,UAAO,OAAA,GAAA;AAAA,SACT,EAAG,EAA8B;AAAA,QAElC,MAAO,CAAA,CAAC,CAAC,CAAA,EAAG,OAAO,CAAM,KAAA,OAAA,CAAQ,MAAS,GAAA,CAAC,EAC3C,MAAO,CAAA,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAM,KAAA;AAC/B,QAAI,GAAA,CAAA,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAM,CAAA,CAAA,EAAG,QAAQ,MAAS,GAAA,CAAC,CAC3B,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAQ,CAAA,MAAA,GAAS,CAAC,CAAC,CAAA;AAAA,SAClD;AACA,QAAO,OAAA,GAAA;AAAA,OACT,EAAG,KAAM,CAAA,EAAA,EAAY;AAAA,KACzB;AAEF,IAAI,IAAA,MAAA,EAAQ,SAAS,CAAG,EAAA;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAO,CAAA,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACpE;AAAA;AAGF,IAAA,WAAA,GAAc,iBAAkB,CAAA,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB;AAAA,KAC1C;AAEA,IAAA,IACE,WAAY,CAAA,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAS,KAAA;AAAA,KACpC,IACA,SAAS,UACT,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA;AAAA,OAC3H;AAAA;AAGF,IAAA,IACE,WAAY,CAAA,MAAA;AAAA,MACV,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA;AAAA,KACxC,CAAE,SAAS,CACX,EAAA;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA;AAAA,OAC9C;AAAA;AACF;AAGF,EAAO,OAAA;AAAA,IACL,IAAA;AAAA,IACA;AAAA,GACF;AACF;AASO,SAAS,4BACd,OAC0B,EAAA;AAE1B,EAAM,MAAA,MAAA,GAAS,OAAQ,CAAA,GAAA,CAAI,0BAA0B,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAO,CAAA,IAAA,CAAK,OAAK,CAAE,CAAA,IAAA,KAAS,UAAU,CAAG,EAAA;AAC5C,IAAA,MAAA,CAAO,IAAK,CAAA,EAAE,IAAM,EAAA,UAAA,EAAY,CAAA;AAAA;AAGlC,EAAO,OAAA,MAAA;AACT;;;;"}

package/dist/azure/core.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.cjs.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":["AzureUrl"],"mappings":";;;;AA+BO,SAAS,qBAAqB,GAAqB,EAAA;AACxD,EAAA,OAAOA,iBAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,SAAU,EAAA,CAAA;AAC7C,CAAA;AASO,SAAS,oBAAoB,GAAqB,EAAA;AACvD,EAAA,OAAOA,iBAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA,CAAA;AAChD,CAAA;AAQO,SAAS,mBAAmB,GAAqB,EAAA;AACtD,EAAA,OAAOA,iBAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA,CAAA;AAChD;;;;;;"}
+{"version":3,"file":"core.cjs.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":["AzureUrl"],"mappings":";;;;AA+BO,SAAS,qBAAqB,GAAqB,EAAA;AACxD,EAAA,OAAOA,iBAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,SAAU,EAAA;AAC7C;AASO,SAAS,oBAAoB,GAAqB,EAAA;AACvD,EAAA,OAAOA,iBAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA;AAChD;AAQO,SAAS,mBAAmB,GAAqB,EAAA;AACtD,EAAA,OAAOA,iBAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA;AAChD;;;;;;"}

package/dist/azure/core.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.esm.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":[],"mappings":";;AA+BO,SAAS,qBAAqB,GAAqB,EAAA;AACxD,EAAA,OAAO,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,SAAU,EAAA,CAAA;AAC7C,CAAA;AASO,SAAS,oBAAoB,GAAqB,EAAA;AACvD,EAAA,OAAO,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA,CAAA;AAChD,CAAA;AAQO,SAAS,mBAAmB,GAAqB,EAAA;AACtD,EAAA,OAAO,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA,CAAA;AAChD;;;;"}
+{"version":3,"file":"core.esm.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":[],"mappings":";;AA+BO,SAAS,qBAAqB,GAAqB,EAAA;AACxD,EAAA,OAAO,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,SAAU,EAAA;AAC7C;AASO,SAAS,oBAAoB,GAAqB,EAAA;AACvD,EAAA,OAAO,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA;AAChD;AAQO,SAAS,mBAAmB,GAAqB,EAAA;AACtD,EAAA,OAAO,QAAS,CAAA,WAAA,CAAY,GAAG,CAAA,CAAE,YAAa,EAAA;AAChD;;;;"}

package/dist/azure/deprecated.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"deprecated.cjs.js","sources":["../../src/azure/deprecated.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureIntegrationConfig } from './config';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\n\n/**\n * Gets the request options necessary to make requests to a given provider.\n *\n * @param config - The relevant provider config\n * @param additionalHeaders - Additional headers for the request\n * @public\n * @deprecated Use {@link AzureDevOpsCredentialsProvider} instead.\n */\nexport async function getAzureRequestOptions(\n  config: AzureIntegrationConfig,\n  additionalHeaders?: Record<string, string>,\n): Promise<{ headers: Record<string, string> }> {\n  const headers: Record<string, string> = additionalHeaders\n    ? { ...additionalHeaders }\n    : {};\n\n  /*\n   * Since we do not have a way to determine which organization the request is for,\n   * we will use the first credential that does not have an organization specified.\n   */\n  const credentialConfig = config.credentials?.filter(\n    credential =>\n      credential.organizations === undefined ||\n      credential.organizations.length === 0,\n  )[0];\n\n  if (credentialConfig) {\n    const credentialsProvider =\n      CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n        credentialConfig,\n      );\n    const credentials = await credentialsProvider.getCredentials();\n\n    return {\n      headers: {\n        ...credentials?.headers,\n        ...headers,\n      },\n    };\n  }\n\n  return { headers };\n}\n"],"names":["CachedAzureDevOpsCredentialsProvider"],"mappings":";;;;AA0BsB,eAAA,sBAAA,CACpB,QACA,iBAC8C,EAAA;AAC9C,EAAA,MAAM,UAAkC,iBACpC,GAAA,EAAE,GAAG,iBAAA,KACL,EAAC,CAAA;AAML,EAAM,MAAA,gBAAA,GAAmB,OAAO,WAAa,EAAA,MAAA;AAAA,IAC3C,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA,CAAA;AAAA,IACtC,CAAC,CAAA,CAAA;AAEH,EAAA,IAAI,gBAAkB,EAAA;AACpB,IAAA,MAAM,sBACJA,yEAAqC,CAAA,yBAAA;AAAA,MACnC,gBAAA;AAAA,KACF,CAAA;AACF,IAAM,MAAA,WAAA,GAAc,MAAM,mBAAA,CAAoB,cAAe,EAAA,CAAA;AAE7D,IAAO,OAAA;AAAA,MACL,OAAS,EAAA;AAAA,QACP,GAAG,WAAa,EAAA,OAAA;AAAA,QAChB,GAAG,OAAA;AAAA,OACL;AAAA,KACF,CAAA;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,OAAQ,EAAA,CAAA;AACnB;;;;"}
+{"version":3,"file":"deprecated.cjs.js","sources":["../../src/azure/deprecated.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureIntegrationConfig } from './config';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\n\n/**\n * Gets the request options necessary to make requests to a given provider.\n *\n * @param config - The relevant provider config\n * @param additionalHeaders - Additional headers for the request\n * @public\n * @deprecated Use {@link AzureDevOpsCredentialsProvider} instead.\n */\nexport async function getAzureRequestOptions(\n  config: AzureIntegrationConfig,\n  additionalHeaders?: Record<string, string>,\n): Promise<{ headers: Record<string, string> }> {\n  const headers: Record<string, string> = additionalHeaders\n    ? { ...additionalHeaders }\n    : {};\n\n  /*\n   * Since we do not have a way to determine which organization the request is for,\n   * we will use the first credential that does not have an organization specified.\n   */\n  const credentialConfig = config.credentials?.filter(\n    credential =>\n      credential.organizations === undefined ||\n      credential.organizations.length === 0,\n  )[0];\n\n  if (credentialConfig) {\n    const credentialsProvider =\n      CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n        credentialConfig,\n      );\n    const credentials = await credentialsProvider.getCredentials();\n\n    return {\n      headers: {\n        ...credentials?.headers,\n        ...headers,\n      },\n    };\n  }\n\n  return { headers };\n}\n"],"names":["CachedAzureDevOpsCredentialsProvider"],"mappings":";;;;AA0BsB,eAAA,sBAAA,CACpB,QACA,iBAC8C,EAAA;AAC9C,EAAA,MAAM,UAAkC,iBACpC,GAAA,EAAE,GAAG,iBAAA,KACL,EAAC;AAML,EAAM,MAAA,gBAAA,GAAmB,OAAO,WAAa,EAAA,MAAA;AAAA,IAC3C,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA;AAAA,IACtC,CAAC,CAAA;AAEH,EAAA,IAAI,gBAAkB,EAAA;AACpB,IAAA,MAAM,sBACJA,yEAAqC,CAAA,yBAAA;AAAA,MACnC;AAAA,KACF;AACF,IAAM,MAAA,WAAA,GAAc,MAAM,mBAAA,CAAoB,cAAe,EAAA;AAE7D,IAAO,OAAA;AAAA,MACL,OAAS,EAAA;AAAA,QACP,GAAG,WAAa,EAAA,OAAA;AAAA,QAChB,GAAG;AAAA;AACL,KACF;AAAA;AAGF,EAAA,OAAO,EAAE,OAAQ,EAAA;AACnB;;;;"}

package/dist/azure/deprecated.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"deprecated.esm.js","sources":["../../src/azure/deprecated.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureIntegrationConfig } from './config';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\n\n/**\n * Gets the request options necessary to make requests to a given provider.\n *\n * @param config - The relevant provider config\n * @param additionalHeaders - Additional headers for the request\n * @public\n * @deprecated Use {@link AzureDevOpsCredentialsProvider} instead.\n */\nexport async function getAzureRequestOptions(\n  config: AzureIntegrationConfig,\n  additionalHeaders?: Record<string, string>,\n): Promise<{ headers: Record<string, string> }> {\n  const headers: Record<string, string> = additionalHeaders\n    ? { ...additionalHeaders }\n    : {};\n\n  /*\n   * Since we do not have a way to determine which organization the request is for,\n   * we will use the first credential that does not have an organization specified.\n   */\n  const credentialConfig = config.credentials?.filter(\n    credential =>\n      credential.organizations === undefined ||\n      credential.organizations.length === 0,\n  )[0];\n\n  if (credentialConfig) {\n    const credentialsProvider =\n      CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n        credentialConfig,\n      );\n    const credentials = await credentialsProvider.getCredentials();\n\n    return {\n      headers: {\n        ...credentials?.headers,\n        ...headers,\n      },\n    };\n  }\n\n  return { headers };\n}\n"],"names":[],"mappings":";;AA0BsB,eAAA,sBAAA,CACpB,QACA,iBAC8C,EAAA;AAC9C,EAAA,MAAM,UAAkC,iBACpC,GAAA,EAAE,GAAG,iBAAA,KACL,EAAC,CAAA;AAML,EAAM,MAAA,gBAAA,GAAmB,OAAO,WAAa,EAAA,MAAA;AAAA,IAC3C,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA,CAAA;AAAA,IACtC,CAAC,CAAA,CAAA;AAEH,EAAA,IAAI,gBAAkB,EAAA;AACpB,IAAA,MAAM,sBACJ,oCAAqC,CAAA,yBAAA;AAAA,MACnC,gBAAA;AAAA,KACF,CAAA;AACF,IAAM,MAAA,WAAA,GAAc,MAAM,mBAAA,CAAoB,cAAe,EAAA,CAAA;AAE7D,IAAO,OAAA;AAAA,MACL,OAAS,EAAA;AAAA,QACP,GAAG,WAAa,EAAA,OAAA;AAAA,QAChB,GAAG,OAAA;AAAA,OACL;AAAA,KACF,CAAA;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,OAAQ,EAAA,CAAA;AACnB;;;;"}
+{"version":3,"file":"deprecated.esm.js","sources":["../../src/azure/deprecated.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureIntegrationConfig } from './config';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\n\n/**\n * Gets the request options necessary to make requests to a given provider.\n *\n * @param config - The relevant provider config\n * @param additionalHeaders - Additional headers for the request\n * @public\n * @deprecated Use {@link AzureDevOpsCredentialsProvider} instead.\n */\nexport async function getAzureRequestOptions(\n  config: AzureIntegrationConfig,\n  additionalHeaders?: Record<string, string>,\n): Promise<{ headers: Record<string, string> }> {\n  const headers: Record<string, string> = additionalHeaders\n    ? { ...additionalHeaders }\n    : {};\n\n  /*\n   * Since we do not have a way to determine which organization the request is for,\n   * we will use the first credential that does not have an organization specified.\n   */\n  const credentialConfig = config.credentials?.filter(\n    credential =>\n      credential.organizations === undefined ||\n      credential.organizations.length === 0,\n  )[0];\n\n  if (credentialConfig) {\n    const credentialsProvider =\n      CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n        credentialConfig,\n      );\n    const credentials = await credentialsProvider.getCredentials();\n\n    return {\n      headers: {\n        ...credentials?.headers,\n        ...headers,\n      },\n    };\n  }\n\n  return { headers };\n}\n"],"names":[],"mappings":";;AA0BsB,eAAA,sBAAA,CACpB,QACA,iBAC8C,EAAA;AAC9C,EAAA,MAAM,UAAkC,iBACpC,GAAA,EAAE,GAAG,iBAAA,KACL,EAAC;AAML,EAAM,MAAA,gBAAA,GAAmB,OAAO,WAAa,EAAA,MAAA;AAAA,IAC3C,gBACE,UAAW,CAAA,aAAA,KAAkB,KAC7B,CAAA,IAAA,UAAA,CAAW,cAAc,MAAW,KAAA;AAAA,IACtC,CAAC,CAAA;AAEH,EAAA,IAAI,gBAAkB,EAAA;AACpB,IAAA,MAAM,sBACJ,oCAAqC,CAAA,yBAAA;AAAA,MACnC;AAAA,KACF;AACF,IAAM,MAAA,WAAA,GAAc,MAAM,mBAAA,CAAoB,cAAe,EAAA;AAE7D,IAAO,OAAA;AAAA,MACL,OAAS,EAAA;AAAA,QACP,GAAG,WAAa,EAAA,OAAA;AAAA,QAChB,GAAG;AAAA;AACL,KACF;AAAA;AAGF,EAAA,OAAO,EAAE,OAAQ,EAAA;AACnB;;;;"}

package/dist/azureBlobStorage/AzureBlobStorageIntegration.cjs.js

@@ -0,0 +1,40 @@
+'use strict';
+
+var helpers = require('../helpers.cjs.js');
+var config = require('./config.cjs.js');
+
+class AzureBlobStorageIntergation {
+  constructor(integrationConfig) {
+    this.integrationConfig = integrationConfig;
+  }
+  static factory = ({
+    config: config$1
+  }) => {
+    const configs = config.readAzureBlobStorageIntegrationConfigs(
+      config$1.getOptionalConfigArray("integrations.azureBlobStorage") ?? []
+    );
+    return helpers.basicIntegrations(
+      configs.map((c) => new AzureBlobStorageIntergation(c)),
+      (i) => i.config.host
+    );
+  };
+  get type() {
+    return "azureBlobStorage";
+  }
+  get title() {
+    return this.integrationConfig.host;
+  }
+  get config() {
+    return this.integrationConfig;
+  }
+  resolveUrl(options) {
+    const resolved = helpers.defaultScmResolveUrl(options);
+    return resolved;
+  }
+  resolveEditUrl(url) {
+    return url;
+  }
+}
+
+exports.AzureBlobStorageIntergation = AzureBlobStorageIntergation;
+//# sourceMappingURL=AzureBlobStorageIntegration.cjs.js.map

package/dist/azureBlobStorage/AzureBlobStorageIntegration.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureBlobStorageIntegration.cjs.js","sources":["../../src/azureBlobStorage/AzureBlobStorageIntegration.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { basicIntegrations, defaultScmResolveUrl } from '../helpers';\nimport { ScmIntegration, ScmIntegrationsFactory } from '../types';\nimport {\n  AzureBlobStorageIntegrationConfig,\n  readAzureBlobStorageIntegrationConfigs,\n} from './config';\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n */\nexport class AzureBlobStorageIntergation implements ScmIntegration {\n  static factory: ScmIntegrationsFactory<AzureBlobStorageIntergation> = ({\n    config,\n  }) => {\n    const configs = readAzureBlobStorageIntegrationConfigs(\n      config.getOptionalConfigArray('integrations.azureBlobStorage') ?? [],\n    );\n    return basicIntegrations(\n      configs.map(c => new AzureBlobStorageIntergation(c)),\n      i => i.config.host,\n    );\n  };\n\n  get type(): string {\n    return 'azureBlobStorage';\n  }\n\n  get title(): string {\n    return this.integrationConfig.host;\n  }\n\n  get config(): AzureBlobStorageIntegrationConfig {\n    return this.integrationConfig;\n  }\n\n  constructor(\n    private readonly integrationConfig: AzureBlobStorageIntegrationConfig,\n  ) {}\n\n  resolveUrl(options: {\n    url: string;\n    base: string;\n    lineNumber?: number | undefined;\n  }): string {\n    const resolved = defaultScmResolveUrl(options);\n    return resolved;\n  }\n\n  resolveEditUrl(url: string): string {\n    // TODO: Implement edit URL for azureBlobStorage\n    return url;\n  }\n}\n"],"names":["config","readAzureBlobStorageIntegrationConfigs","basicIntegrations","defaultScmResolveUrl"],"mappings":";;;;;AA4BO,MAAM,2BAAsD,CAAA;AAAA,EAyBjE,YACmB,iBACjB,EAAA;AADiB,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA;AAChB,EA1BH,OAAO,UAA+D,CAAC;AAAA,YACrEA;AAAA,GACI,KAAA;AACJ,IAAA,MAAM,OAAU,GAAAC,6CAAA;AAAA,MACdD,QAAO,CAAA,sBAAA,CAAuB,+BAA+B,CAAA,IAAK;AAAC,KACrE;AACA,IAAO,OAAAE,yBAAA;AAAA,MACL,QAAQ,GAAI,CAAA,CAAA,CAAA,KAAK,IAAI,2BAAA,CAA4B,CAAC,CAAC,CAAA;AAAA,MACnD,CAAA,CAAA,KAAK,EAAE,MAAO,CAAA;AAAA,KAChB;AAAA,GACF;AAAA,EAEA,IAAI,IAAe,GAAA;AACjB,IAAO,OAAA,kBAAA;AAAA;AACT,EAEA,IAAI,KAAgB,GAAA;AAClB,IAAA,OAAO,KAAK,iBAAkB,CAAA,IAAA;AAAA;AAChC,EAEA,IAAI,MAA4C,GAAA;AAC9C,IAAA,OAAO,IAAK,CAAA,iBAAA;AAAA;AACd,EAMA,WAAW,OAIA,EAAA;AACT,IAAM,MAAA,QAAA,GAAWC,6BAAqB,OAAO,CAAA;AAC7C,IAAO,OAAA,QAAA;AAAA;AACT,EAEA,eAAe,GAAqB,EAAA;AAElC,IAAO,OAAA,GAAA;AAAA;AAEX;;;;"}

package/dist/azureBlobStorage/AzureBlobStorageIntegration.esm.js

@@ -0,0 +1,38 @@
+import { basicIntegrations, defaultScmResolveUrl } from '../helpers.esm.js';
+import { readAzureBlobStorageIntegrationConfigs } from './config.esm.js';
+
+class AzureBlobStorageIntergation {
+  constructor(integrationConfig) {
+    this.integrationConfig = integrationConfig;
+  }
+  static factory = ({
+    config
+  }) => {
+    const configs = readAzureBlobStorageIntegrationConfigs(
+      config.getOptionalConfigArray("integrations.azureBlobStorage") ?? []
+    );
+    return basicIntegrations(
+      configs.map((c) => new AzureBlobStorageIntergation(c)),
+      (i) => i.config.host
+    );
+  };
+  get type() {
+    return "azureBlobStorage";
+  }
+  get title() {
+    return this.integrationConfig.host;
+  }
+  get config() {
+    return this.integrationConfig;
+  }
+  resolveUrl(options) {
+    const resolved = defaultScmResolveUrl(options);
+    return resolved;
+  }
+  resolveEditUrl(url) {
+    return url;
+  }
+}
+
+export { AzureBlobStorageIntergation };
+//# sourceMappingURL=AzureBlobStorageIntegration.esm.js.map

package/dist/azureBlobStorage/AzureBlobStorageIntegration.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureBlobStorageIntegration.esm.js","sources":["../../src/azureBlobStorage/AzureBlobStorageIntegration.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { basicIntegrations, defaultScmResolveUrl } from '../helpers';\nimport { ScmIntegration, ScmIntegrationsFactory } from '../types';\nimport {\n  AzureBlobStorageIntegrationConfig,\n  readAzureBlobStorageIntegrationConfigs,\n} from './config';\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n */\nexport class AzureBlobStorageIntergation implements ScmIntegration {\n  static factory: ScmIntegrationsFactory<AzureBlobStorageIntergation> = ({\n    config,\n  }) => {\n    const configs = readAzureBlobStorageIntegrationConfigs(\n      config.getOptionalConfigArray('integrations.azureBlobStorage') ?? [],\n    );\n    return basicIntegrations(\n      configs.map(c => new AzureBlobStorageIntergation(c)),\n      i => i.config.host,\n    );\n  };\n\n  get type(): string {\n    return 'azureBlobStorage';\n  }\n\n  get title(): string {\n    return this.integrationConfig.host;\n  }\n\n  get config(): AzureBlobStorageIntegrationConfig {\n    return this.integrationConfig;\n  }\n\n  constructor(\n    private readonly integrationConfig: AzureBlobStorageIntegrationConfig,\n  ) {}\n\n  resolveUrl(options: {\n    url: string;\n    base: string;\n    lineNumber?: number | undefined;\n  }): string {\n    const resolved = defaultScmResolveUrl(options);\n    return resolved;\n  }\n\n  resolveEditUrl(url: string): string {\n    // TODO: Implement edit URL for azureBlobStorage\n    return url;\n  }\n}\n"],"names":[],"mappings":";;;AA4BO,MAAM,2BAAsD,CAAA;AAAA,EAyBjE,YACmB,iBACjB,EAAA;AADiB,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA;AAChB,EA1BH,OAAO,UAA+D,CAAC;AAAA,IACrE;AAAA,GACI,KAAA;AACJ,IAAA,MAAM,OAAU,GAAA,sCAAA;AAAA,MACd,MAAO,CAAA,sBAAA,CAAuB,+BAA+B,CAAA,IAAK;AAAC,KACrE;AACA,IAAO,OAAA,iBAAA;AAAA,MACL,QAAQ,GAAI,CAAA,CAAA,CAAA,KAAK,IAAI,2BAAA,CAA4B,CAAC,CAAC,CAAA;AAAA,MACnD,CAAA,CAAA,KAAK,EAAE,MAAO,CAAA;AAAA,KAChB;AAAA,GACF;AAAA,EAEA,IAAI,IAAe,GAAA;AACjB,IAAO,OAAA,kBAAA;AAAA;AACT,EAEA,IAAI,KAAgB,GAAA;AAClB,IAAA,OAAO,KAAK,iBAAkB,CAAA,IAAA;AAAA;AAChC,EAEA,IAAI,MAA4C,GAAA;AAC9C,IAAA,OAAO,IAAK,CAAA,iBAAA;AAAA;AACd,EAMA,WAAW,OAIA,EAAA;AACT,IAAM,MAAA,QAAA,GAAW,qBAAqB,OAAO,CAAA;AAC7C,IAAO,OAAA,QAAA;AAAA;AACT,EAEA,eAAe,GAAqB,EAAA;AAElC,IAAO,OAAA,GAAA;AAAA;AAEX;;;;"}

package/dist/azureBlobStorage/DefaultAzureCredentialsProvider.cjs.js

@@ -0,0 +1,49 @@
+'use strict';
+
+var identity = require('@azure/identity');
+
+class DefaultAzureCredentialsManager {
+  constructor(configProviders) {
+    this.configProviders = configProviders;
+    this.cachedCredentials = /* @__PURE__ */ new Map();
+  }
+  cachedCredentials;
+  /**
+   * Creates an instance of DefaultAzureCredentialsManager from a Backstage integration registry.
+   */
+  static fromIntegrations(integrations) {
+    const configProviders = integrations.azureBlobStorage.list().reduce((acc, integration) => {
+      acc.set(
+        integration.config.accountName || "default",
+        integration.config
+      );
+      return acc;
+    }, /* @__PURE__ */ new Map());
+    return new DefaultAzureCredentialsManager(configProviders);
+  }
+  createCredential(config) {
+    if (config.aadCredential && config.aadCredential.clientId && config.aadCredential.clientSecret && config.aadCredential.tenantId) {
+      return new identity.ClientSecretCredential(
+        config.aadCredential.tenantId,
+        config.aadCredential.clientId,
+        config.aadCredential.clientSecret
+      );
+    }
+    return new identity.DefaultAzureCredential();
+  }
+  async getCredentials(accountName) {
+    if (this.cachedCredentials.has(accountName)) {
+      return this.cachedCredentials.get(accountName);
+    }
+    const config = this.configProviders.get(accountName);
+    if (!config) {
+      throw new Error(`No configuration found for account: ${accountName}`);
+    }
+    const credential = this.createCredential(config);
+    this.cachedCredentials.set(accountName, credential);
+    return credential;
+  }
+}
+
+exports.DefaultAzureCredentialsManager = DefaultAzureCredentialsManager;
+//# sourceMappingURL=DefaultAzureCredentialsProvider.cjs.js.map

package/dist/azureBlobStorage/DefaultAzureCredentialsProvider.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DefaultAzureCredentialsProvider.cjs.js","sources":["../../src/azureBlobStorage/DefaultAzureCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  DefaultAzureCredential,\n  ClientSecretCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport { AzureBlobStorageIntegrationConfig } from './config';\nimport { AzureCredentialsManager } from './types';\nimport { ScmIntegrationRegistry } from '../registry';\n\n/**\n * Default implementation of AzureCredentialsManager that supports multiple Azure Blob Storage integrations.\n * @public\n */\nexport class DefaultAzureCredentialsManager implements AzureCredentialsManager {\n  private cachedCredentials: Map<string, TokenCredential>;\n\n  private constructor(\n    private readonly configProviders: Map<\n      string,\n      AzureBlobStorageIntegrationConfig\n    >,\n  ) {\n    this.cachedCredentials = new Map<string, TokenCredential>();\n  }\n\n  /**\n   * Creates an instance of DefaultAzureCredentialsManager from a Backstage integration registry.\n   */\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureCredentialsManager {\n    const configProviders = integrations.azureBlobStorage\n      .list()\n      .reduce((acc, integration) => {\n        acc.set(\n          integration.config.accountName || 'default',\n          integration.config,\n        );\n        return acc;\n      }, new Map<string, AzureBlobStorageIntegrationConfig>());\n\n    return new DefaultAzureCredentialsManager(configProviders);\n  }\n\n  private createCredential(\n    config: AzureBlobStorageIntegrationConfig,\n  ): TokenCredential {\n    if (\n      config.aadCredential &&\n      config.aadCredential.clientId &&\n      config.aadCredential.clientSecret &&\n      config.aadCredential.tenantId\n    ) {\n      return new ClientSecretCredential(\n        config.aadCredential.tenantId,\n        config.aadCredential.clientId,\n        config.aadCredential.clientSecret,\n      );\n    }\n\n    return new DefaultAzureCredential();\n  }\n\n  async getCredentials(accountName: string): Promise<TokenCredential> {\n    if (this.cachedCredentials.has(accountName)) {\n      return this.cachedCredentials.get(accountName)!;\n    }\n\n    const config = this.configProviders.get(accountName);\n    if (!config) {\n      throw new Error(`No configuration found for account: ${accountName}`);\n    }\n\n    const credential = this.createCredential(config);\n\n    // Cache the credentials for future use\n    this.cachedCredentials.set(accountName, credential);\n\n    return credential;\n  }\n}\n"],"names":["ClientSecretCredential","DefaultAzureCredential"],"mappings":";;;;AA6BO,MAAM,8BAAkE,CAAA;AAAA,EAGrE,YACW,eAIjB,EAAA;AAJiB,IAAA,IAAA,CAAA,eAAA,GAAA,eAAA;AAKjB,IAAK,IAAA,CAAA,iBAAA,uBAAwB,GAA6B,EAAA;AAAA;AAC5D,EATQ,iBAAA;AAAA;AAAA;AAAA;AAAA,EAcR,OAAO,iBACL,YACgC,EAAA;AAChC,IAAM,MAAA,eAAA,GAAkB,aAAa,gBAClC,CAAA,IAAA,GACA,MAAO,CAAA,CAAC,KAAK,WAAgB,KAAA;AAC5B,MAAI,GAAA,CAAA,GAAA;AAAA,QACF,WAAA,CAAY,OAAO,WAAe,IAAA,SAAA;AAAA,QAClC,WAAY,CAAA;AAAA,OACd;AACA,MAAO,OAAA,GAAA;AAAA,KACT,kBAAO,IAAA,GAAA,EAAgD,CAAA;AAEzD,IAAO,OAAA,IAAI,+BAA+B,eAAe,CAAA;AAAA;AAC3D,EAEQ,iBACN,MACiB,EAAA;AACjB,IACE,IAAA,MAAA,CAAO,aACP,IAAA,MAAA,CAAO,aAAc,CAAA,QAAA,IACrB,OAAO,aAAc,CAAA,YAAA,IACrB,MAAO,CAAA,aAAA,CAAc,QACrB,EAAA;AACA,MAAA,OAAO,IAAIA,+BAAA;AAAA,QACT,OAAO,aAAc,CAAA,QAAA;AAAA,QACrB,OAAO,aAAc,CAAA,QAAA;AAAA,QACrB,OAAO,aAAc,CAAA;AAAA,OACvB;AAAA;AAGF,IAAA,OAAO,IAAIC,+BAAuB,EAAA;AAAA;AACpC,EAEA,MAAM,eAAe,WAA+C,EAAA;AAClE,IAAA,IAAI,IAAK,CAAA,iBAAA,CAAkB,GAAI,CAAA,WAAW,CAAG,EAAA;AAC3C,MAAO,OAAA,IAAA,CAAK,iBAAkB,CAAA,GAAA,CAAI,WAAW,CAAA;AAAA;AAG/C,IAAA,MAAM,MAAS,GAAA,IAAA,CAAK,eAAgB,CAAA,GAAA,CAAI,WAAW,CAAA;AACnD,IAAA,IAAI,CAAC,MAAQ,EAAA;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAuC,oCAAA,EAAA,WAAW,CAAE,CAAA,CAAA;AAAA;AAGtE,IAAM,MAAA,UAAA,GAAa,IAAK,CAAA,gBAAA,CAAiB,MAAM,CAAA;AAG/C,IAAK,IAAA,CAAA,iBAAA,CAAkB,GAAI,CAAA,WAAA,EAAa,UAAU,CAAA;AAElD,IAAO,OAAA,UAAA;AAAA;AAEX;;;;"}

package/dist/azureBlobStorage/DefaultAzureCredentialsProvider.esm.js

@@ -0,0 +1,47 @@
+import { ClientSecretCredential, DefaultAzureCredential } from '@azure/identity';
+
+class DefaultAzureCredentialsManager {
+  constructor(configProviders) {
+    this.configProviders = configProviders;
+    this.cachedCredentials = /* @__PURE__ */ new Map();
+  }
+  cachedCredentials;
+  /**
+   * Creates an instance of DefaultAzureCredentialsManager from a Backstage integration registry.
+   */
+  static fromIntegrations(integrations) {
+    const configProviders = integrations.azureBlobStorage.list().reduce((acc, integration) => {
+      acc.set(
+        integration.config.accountName || "default",
+        integration.config
+      );
+      return acc;
+    }, /* @__PURE__ */ new Map());
+    return new DefaultAzureCredentialsManager(configProviders);
+  }
+  createCredential(config) {
+    if (config.aadCredential && config.aadCredential.clientId && config.aadCredential.clientSecret && config.aadCredential.tenantId) {
+      return new ClientSecretCredential(
+        config.aadCredential.tenantId,
+        config.aadCredential.clientId,
+        config.aadCredential.clientSecret
+      );
+    }
+    return new DefaultAzureCredential();
+  }
+  async getCredentials(accountName) {
+    if (this.cachedCredentials.has(accountName)) {
+      return this.cachedCredentials.get(accountName);
+    }
+    const config = this.configProviders.get(accountName);
+    if (!config) {
+      throw new Error(`No configuration found for account: ${accountName}`);
+    }
+    const credential = this.createCredential(config);
+    this.cachedCredentials.set(accountName, credential);
+    return credential;
+  }
+}
+
+export { DefaultAzureCredentialsManager };
+//# sourceMappingURL=DefaultAzureCredentialsProvider.esm.js.map

package/dist/azureBlobStorage/DefaultAzureCredentialsProvider.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DefaultAzureCredentialsProvider.esm.js","sources":["../../src/azureBlobStorage/DefaultAzureCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  DefaultAzureCredential,\n  ClientSecretCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport { AzureBlobStorageIntegrationConfig } from './config';\nimport { AzureCredentialsManager } from './types';\nimport { ScmIntegrationRegistry } from '../registry';\n\n/**\n * Default implementation of AzureCredentialsManager that supports multiple Azure Blob Storage integrations.\n * @public\n */\nexport class DefaultAzureCredentialsManager implements AzureCredentialsManager {\n  private cachedCredentials: Map<string, TokenCredential>;\n\n  private constructor(\n    private readonly configProviders: Map<\n      string,\n      AzureBlobStorageIntegrationConfig\n    >,\n  ) {\n    this.cachedCredentials = new Map<string, TokenCredential>();\n  }\n\n  /**\n   * Creates an instance of DefaultAzureCredentialsManager from a Backstage integration registry.\n   */\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureCredentialsManager {\n    const configProviders = integrations.azureBlobStorage\n      .list()\n      .reduce((acc, integration) => {\n        acc.set(\n          integration.config.accountName || 'default',\n          integration.config,\n        );\n        return acc;\n      }, new Map<string, AzureBlobStorageIntegrationConfig>());\n\n    return new DefaultAzureCredentialsManager(configProviders);\n  }\n\n  private createCredential(\n    config: AzureBlobStorageIntegrationConfig,\n  ): TokenCredential {\n    if (\n      config.aadCredential &&\n      config.aadCredential.clientId &&\n      config.aadCredential.clientSecret &&\n      config.aadCredential.tenantId\n    ) {\n      return new ClientSecretCredential(\n        config.aadCredential.tenantId,\n        config.aadCredential.clientId,\n        config.aadCredential.clientSecret,\n      );\n    }\n\n    return new DefaultAzureCredential();\n  }\n\n  async getCredentials(accountName: string): Promise<TokenCredential> {\n    if (this.cachedCredentials.has(accountName)) {\n      return this.cachedCredentials.get(accountName)!;\n    }\n\n    const config = this.configProviders.get(accountName);\n    if (!config) {\n      throw new Error(`No configuration found for account: ${accountName}`);\n    }\n\n    const credential = this.createCredential(config);\n\n    // Cache the credentials for future use\n    this.cachedCredentials.set(accountName, credential);\n\n    return credential;\n  }\n}\n"],"names":[],"mappings":";;AA6BO,MAAM,8BAAkE,CAAA;AAAA,EAGrE,YACW,eAIjB,EAAA;AAJiB,IAAA,IAAA,CAAA,eAAA,GAAA,eAAA;AAKjB,IAAK,IAAA,CAAA,iBAAA,uBAAwB,GAA6B,EAAA;AAAA;AAC5D,EATQ,iBAAA;AAAA;AAAA;AAAA;AAAA,EAcR,OAAO,iBACL,YACgC,EAAA;AAChC,IAAM,MAAA,eAAA,GAAkB,aAAa,gBAClC,CAAA,IAAA,GACA,MAAO,CAAA,CAAC,KAAK,WAAgB,KAAA;AAC5B,MAAI,GAAA,CAAA,GAAA;AAAA,QACF,WAAA,CAAY,OAAO,WAAe,IAAA,SAAA;AAAA,QAClC,WAAY,CAAA;AAAA,OACd;AACA,MAAO,OAAA,GAAA;AAAA,KACT,kBAAO,IAAA,GAAA,EAAgD,CAAA;AAEzD,IAAO,OAAA,IAAI,+BAA+B,eAAe,CAAA;AAAA;AAC3D,EAEQ,iBACN,MACiB,EAAA;AACjB,IACE,IAAA,MAAA,CAAO,aACP,IAAA,MAAA,CAAO,aAAc,CAAA,QAAA,IACrB,OAAO,aAAc,CAAA,YAAA,IACrB,MAAO,CAAA,aAAA,CAAc,QACrB,EAAA;AACA,MAAA,OAAO,IAAI,sBAAA;AAAA,QACT,OAAO,aAAc,CAAA,QAAA;AAAA,QACrB,OAAO,aAAc,CAAA,QAAA;AAAA,QACrB,OAAO,aAAc,CAAA;AAAA,OACvB;AAAA;AAGF,IAAA,OAAO,IAAI,sBAAuB,EAAA;AAAA;AACpC,EAEA,MAAM,eAAe,WAA+C,EAAA;AAClE,IAAA,IAAI,IAAK,CAAA,iBAAA,CAAkB,GAAI,CAAA,WAAW,CAAG,EAAA;AAC3C,MAAO,OAAA,IAAA,CAAK,iBAAkB,CAAA,GAAA,CAAI,WAAW,CAAA;AAAA;AAG/C,IAAA,MAAM,MAAS,GAAA,IAAA,CAAK,eAAgB,CAAA,GAAA,CAAI,WAAW,CAAA;AACnD,IAAA,IAAI,CAAC,MAAQ,EAAA;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAuC,oCAAA,EAAA,WAAW,CAAE,CAAA,CAAA;AAAA;AAGtE,IAAM,MAAA,UAAA,GAAa,IAAK,CAAA,gBAAA,CAAiB,MAAM,CAAA;AAG/C,IAAK,IAAA,CAAA,iBAAA,CAAkB,GAAI,CAAA,WAAA,EAAa,UAAU,CAAA;AAElD,IAAO,OAAA,UAAA;AAAA;AAEX;;;;"}