@backstage/integration 2.1.2 → 2.1.3-next.1

package/dist/azure/AzureUrl.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"AzureUrl.esm.js","sources":["../../src/azure/AzureUrl.ts"],"sourcesContent":["/*\n * Copyright 2021 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isVisualStudioDomain } from './isVisualStudioDomain';\n\nexport class AzureUrl {\n  /**\n   * Parses an azure URL as copied from the browser address bar.\n   *\n   * Throws an error if the URL is not a valid azure repo URL.\n   */\n  static fromRepoUrl(repoUrl: string): AzureUrl {\n    const url = new URL(repoUrl);\n\n    let owner;\n    let project;\n    let repo;\n\n    const parts = url.pathname.split('/').map(part => decodeURIComponent(part));\n\n    if (isVisualStudioDomain(url.origin) && parts[2] === '_git') {\n      owner = url.host.split('.')[0];\n      project = parts[1];\n      repo = parts[3];\n    } else if (parts[2] === '_git') {\n      owner = parts[1];\n      project = repo = parts[3];\n    } else if (parts[3] === '_git') {\n      owner = parts[1];\n      project = parts[2];\n      repo = parts[4];\n    } else if (parts[4] === '_git') {\n      owner = `${parts[1]}/${parts[2]}`;\n      project = parts[3];\n      repo = parts[5];\n    }\n\n    if (!owner || !project || !repo) {\n      throw new Error('Azure URL must point to a git repository');\n    }\n\n    const path = url.searchParams.get('path') ?? undefined;\n\n    let ref;\n    let prefix;\n    const version = url.searchParams.get('version');\n    if (version) {\n      prefix = version.slice(0, 2);\n      if (prefix !== 'GB' && prefix !== 'GT') {\n        throw new Error(\n          'Azure URL version must point to a git branch or git tag',\n        );\n      }\n      ref = version.slice(2);\n    }\n\n    return new AzureUrl(url.origin, owner, project, repo, path, ref, prefix);\n  }\n\n  #origin: string;\n  #owner: string;\n  #project: string;\n  #repo: string;\n  #path?: string;\n  #ref?: string;\n  #prefix?: string;\n\n  private constructor(\n    origin: string,\n    owner: string,\n    project: string,\n    repo: string,\n    path?: string,\n    ref?: string,\n    prefix?: string,\n  ) {\n    this.#origin = origin;\n    this.#owner = owner;\n    this.#project = project;\n    this.#repo = repo;\n    this.#path = path;\n    this.#ref = ref;\n    this.#prefix = prefix;\n  }\n\n  #baseUrl = (...parts: string[]): URL => {\n    const url = new URL(this.#origin);\n    url.pathname = parts.map(part => encodeURIComponent(part)).join('/');\n    return url;\n  };\n\n  /**\n   * Returns a repo URL that can be used to navigate to the resource in azure.\n   *\n   * Throws an error if the URL is not a valid azure repo URL.\n   */\n  toRepoUrl(): string {\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(this.#project, '_git', this.#repo);\n    } else if (this.#project === this.#repo) {\n      url = this.#baseUrl(this.#owner, '_git', this.#repo);\n    } else {\n      url = this.#baseUrl(this.#owner, this.#project, '_git', this.#repo);\n    }\n\n    if (this.#path) {\n      url.searchParams.set('path', this.#path);\n    }\n    if (this.#ref) {\n      url.searchParams.set('version', this.#prefix + this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the file download URL for this azure resource.\n   *\n   * Throws an error if the URL does not point to a file.\n   */\n  toFileUrl(): string {\n    if (!this.#path) {\n      throw new Error(\n        'Azure URL must point to a specific path to be able to download a file',\n      );\n    }\n\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    } else {\n      url = this.#baseUrl(\n        this.#owner,\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    }\n\n    url.searchParams.set('api-version', '6.0');\n    url.searchParams.set('path', this.#path);\n\n    if (this.#ref) {\n      url.searchParams.set('version', this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the archive download URL for this azure resource.\n   *\n   * Throws an error if the URL does not point to a repo.\n   */\n  toArchiveUrl(): string {\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    } else {\n      url = this.#baseUrl(\n        this.#owner,\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    }\n\n    url.searchParams.set('recursionLevel', 'full');\n    url.searchParams.set('download', 'true');\n    url.searchParams.set('api-version', '6.0');\n\n    if (this.#path) {\n      url.searchParams.set('scopePath', this.#path);\n    }\n    if (this.#ref) {\n      url.searchParams.set('version', this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the API url for fetching commits from a branch for this azure resource.\n   *\n   * Throws an error if the URL does not point to a commit.\n   */\n  toCommitsUrl(): string {\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'commits',\n      );\n    } else {\n      url = this.#baseUrl(\n        this.#owner,\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'commits',\n      );\n    }\n\n    url.searchParams.set('api-version', '6.0');\n\n    if (this.#ref) {\n      url.searchParams.set('searchCriteria.itemVersion.version', this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the name of the owner, a user or an organization.\n   */\n  getOwner(): string {\n    return this.#owner;\n  }\n\n  /**\n   * Returns the name of the project.\n   */\n  getProject(): string {\n    return this.#project;\n  }\n\n  /**\n   * Returns the name of the repo.\n   */\n  getRepo(): string {\n    return this.#repo;\n  }\n\n  /**\n   * Returns the file path within the repo if the URL contains one.\n   */\n  getPath(): string | undefined {\n    return this.#path;\n  }\n\n  /**\n   * Returns the git ref in the repo if the URL contains one.\n   */\n  getRef(): string | undefined {\n    return this.#ref;\n  }\n\n  /**\n   * Returns the git prefix in the repo if the URL contains one.\n   */\n  getPrefix(): string | undefined {\n    return this.#prefix;\n  }\n}\n"],"names":[],"mappings":";;AAkBO,MAAM,QAAA,CAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,OAAO,YAAY,OAAA,EAA2B;AAC5C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAE3B,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI,IAAA;AAEJ,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,QAAA,CAAS,KAAA,CAAM,GAAG,EAAE,GAAA,CAAI,CAAA,IAAA,KAAQ,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAE1E,IAAA,IAAI,qBAAqB,GAAA,CAAI,MAAM,KAAK,KAAA,CAAM,CAAC,MAAM,MAAA,EAAQ;AAC3D,MAAA,KAAA,GAAQ,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,MAAA,OAAA,GAAU,MAAM,CAAC,CAAA;AACjB,MAAA,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAChB,CAAA,MAAA,IAAW,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC9B,MAAA,KAAA,GAAQ,MAAM,CAAC,CAAA;AACf,MAAA,OAAA,GAAU,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAC1B,CAAA,MAAA,IAAW,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC9B,MAAA,KAAA,GAAQ,MAAM,CAAC,CAAA;AACf,MAAA,OAAA,GAAU,MAAM,CAAC,CAAA;AACjB,MAAA,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAChB,CAAA,MAAA,IAAW,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC9B,MAAA,KAAA,GAAQ,GAAG,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC/B,MAAA,OAAA,GAAU,MAAM,CAAC,CAAA;AACjB,MAAA,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,OAAA,IAAW,CAAC,IAAA,EAAM;AAC/B,MAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,IAC5D;AAEA,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,IAAK,MAAA;AAE7C,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,MAAA;AACJ,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA;AAC9C,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAC3B,MAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,MAAA,KAAW,IAAA,EAAM;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,GAAA,GAAM,OAAA,CAAQ,MAAM,CAAC,CAAA;AAAA,IACvB;AAEA,IAAA,OAAO,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,OAAO,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,GAAA,EAAK,MAAM,CAAA;AAAA,EACzE;AAAA,EAEA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,IAAA;AAAA,EACA,OAAA;AAAA,EAEQ,YACN,MAAA,EACA,KAAA,EACA,SACA,IAAA,EACA,IAAA,EACA,KACA,MAAA,EACA;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AACd,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAChB,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,GAAA;AACZ,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,EACjB;AAAA,EAEA,QAAA,GAAW,IAAI,KAAA,KAAyB;AACtC,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA;AAChC,IAAA,GAAA,CAAI,QAAA,GAAW,MAAM,GAAA,CAAI,CAAA,IAAA,KAAQ,mBAAmB,IAAI,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AACnE,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA,GAAoB;AAClB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,KAAK,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,MAAA,EAAQ,KAAK,KAAK,CAAA;AAAA,IACvD,CAAA,MAAA,IAAW,IAAA,CAAK,QAAA,KAAa,IAAA,CAAK,KAAA,EAAO;AACvC,MAAA,GAAA,GAAM,KAAK,QAAA,CAAS,IAAA,CAAK,MAAA,EAAQ,MAAA,EAAQ,KAAK,KAAK,CAAA;AAAA,IACrD,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA,EAAQ,KAAK,QAAA,EAAU,MAAA,EAAQ,KAAK,KAAK,CAAA;AAAA,IACpE;AAEA,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,aAAa,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,OAAA,GAAU,KAAK,IAAI,CAAA;AAAA,IAC1D;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA,GAAoB;AAClB,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACf,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,aAAA,EAAe,KAAK,CAAA;AACzC,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA;AAEvC,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,IAAI,CAAA;AAAA,IAC3C;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,GAAuB;AACrB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,gBAAA,EAAkB,MAAM,CAAA;AAC7C,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,MAAM,CAAA;AACvC,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,aAAA,EAAe,KAAK,CAAA;AAEzC,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,IAAA,CAAK,KAAK,CAAA;AAAA,IAC9C;AACA,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,IAAI,CAAA;AAAA,IAC3C;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,GAAuB;AACrB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,aAAA,EAAe,KAAK,CAAA;AAEzC,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,oCAAA,EAAsC,IAAA,CAAK,IAAI,CAAA;AAAA,IACtE;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAqB;AACnB,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,OAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,OAAA,GAA8B;AAC5B,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,GAA6B;AAC3B,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AACF;;;;"}
+{"version":3,"file":"AzureUrl.esm.js","sources":["../../src/azure/AzureUrl.ts"],"sourcesContent":["/*\n * Copyright 2021 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isVisualStudioDomain } from './isVisualStudioDomain';\n\nexport class AzureUrl {\n  /**\n   * Parses an azure URL as copied from the browser address bar.\n   *\n   * Throws an error if the URL is not a valid azure repo URL.\n   */\n  static fromRepoUrl(repoUrl: string): AzureUrl {\n    const url = new URL(repoUrl);\n\n    let owner;\n    let project;\n    let repo;\n\n    const parts = url.pathname.split('/').map(part => decodeURIComponent(part));\n\n    if (isVisualStudioDomain(url.origin) && parts[2] === '_git') {\n      owner = url.host.split('.')[0];\n      project = parts[1];\n      repo = parts[3];\n    } else if (parts[2] === '_git') {\n      owner = parts[1];\n      project = repo = parts[3];\n    } else if (parts[3] === '_git') {\n      owner = parts[1];\n      project = parts[2];\n      repo = parts[4];\n    } else if (parts[4] === '_git') {\n      owner = `${parts[1]}/${parts[2]}`;\n      project = parts[3];\n      repo = parts[5];\n    }\n\n    if (!owner || !project || !repo) {\n      throw new Error('Azure URL must point to a git repository');\n    }\n\n    const path = url.searchParams.get('path') ?? undefined;\n\n    let ref;\n    let prefix;\n    const version = url.searchParams.get('version');\n    if (version) {\n      prefix = version.slice(0, 2);\n      if (prefix !== 'GB' && prefix !== 'GT') {\n        throw new Error(\n          'Azure URL version must point to a git branch or git tag',\n        );\n      }\n      ref = version.slice(2);\n    }\n\n    return new AzureUrl(url.origin, owner, project, repo, path, ref, prefix);\n  }\n\n  #origin: string;\n  #owner: string;\n  #project: string;\n  #repo: string;\n  #path?: string;\n  #ref?: string;\n  #prefix?: string;\n\n  private constructor(\n    origin: string,\n    owner: string,\n    project: string,\n    repo: string,\n    path?: string,\n    ref?: string,\n    prefix?: string,\n  ) {\n    this.#origin = origin;\n    this.#owner = owner;\n    this.#project = project;\n    this.#repo = repo;\n    this.#path = path;\n    this.#ref = ref;\n    this.#prefix = prefix;\n  }\n\n  #baseUrl = (...parts: string[]): URL => {\n    const url = new URL(this.#origin);\n    url.pathname = parts.map(part => encodeURIComponent(part)).join('/');\n    return url;\n  };\n\n  /**\n   * Returns a repo URL that can be used to navigate to the resource in azure.\n   *\n   * Throws an error if the URL is not a valid azure repo URL.\n   */\n  toRepoUrl(): string {\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(this.#project, '_git', this.#repo);\n    } else if (this.#project === this.#repo) {\n      url = this.#baseUrl(this.#owner, '_git', this.#repo);\n    } else {\n      url = this.#baseUrl(this.#owner, this.#project, '_git', this.#repo);\n    }\n\n    if (this.#path) {\n      url.searchParams.set('path', this.#path);\n    }\n    if (this.#ref) {\n      url.searchParams.set('version', this.#prefix + this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the file download URL for this azure resource.\n   *\n   * Throws an error if the URL does not point to a file.\n   */\n  toFileUrl(): string {\n    if (!this.#path) {\n      throw new Error(\n        'Azure URL must point to a specific path to be able to download a file',\n      );\n    }\n\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    } else {\n      url = this.#baseUrl(\n        this.#owner,\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    }\n\n    url.searchParams.set('api-version', '6.0');\n    url.searchParams.set('path', this.#path);\n\n    if (this.#ref) {\n      url.searchParams.set('version', this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the archive download URL for this azure resource.\n   *\n   * Throws an error if the URL does not point to a repo.\n   */\n  toArchiveUrl(): string {\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    } else {\n      url = this.#baseUrl(\n        this.#owner,\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'items',\n      );\n    }\n\n    url.searchParams.set('recursionLevel', 'full');\n    url.searchParams.set('download', 'true');\n    url.searchParams.set('api-version', '6.0');\n\n    if (this.#path) {\n      url.searchParams.set('scopePath', this.#path);\n    }\n    if (this.#ref) {\n      url.searchParams.set('version', this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the API url for fetching commits from a branch for this azure resource.\n   *\n   * Throws an error if the URL does not point to a commit.\n   */\n  toCommitsUrl(): string {\n    let url;\n    if (isVisualStudioDomain(this.#origin)) {\n      url = this.#baseUrl(\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'commits',\n      );\n    } else {\n      url = this.#baseUrl(\n        this.#owner,\n        this.#project,\n        '_apis',\n        'git',\n        'repositories',\n        this.#repo,\n        'commits',\n      );\n    }\n\n    url.searchParams.set('api-version', '6.0');\n\n    if (this.#ref) {\n      url.searchParams.set('searchCriteria.itemVersion.version', this.#ref);\n    }\n\n    return url.toString();\n  }\n\n  /**\n   * Returns the name of the owner, a user or an organization.\n   */\n  getOwner(): string {\n    return this.#owner;\n  }\n\n  /**\n   * Returns the name of the project.\n   */\n  getProject(): string {\n    return this.#project;\n  }\n\n  /**\n   * Returns the name of the repo.\n   */\n  getRepo(): string {\n    return this.#repo;\n  }\n\n  /**\n   * Returns the file path within the repo if the URL contains one.\n   */\n  getPath(): string | undefined {\n    return this.#path;\n  }\n\n  /**\n   * Returns the git ref in the repo if the URL contains one.\n   */\n  getRef(): string | undefined {\n    return this.#ref;\n  }\n\n  /**\n   * Returns the git prefix in the repo if the URL contains one.\n   */\n  getPrefix(): string | undefined {\n    return this.#prefix;\n  }\n}\n"],"names":[],"mappings":";;AAkBO,MAAM,QAAA,CAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,OAAO,YAAY,OAAA,EAA2B;AAC5C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAE3B,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI,IAAA;AAEJ,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,QAAA,CAAS,KAAA,CAAM,GAAG,EAAE,GAAA,CAAI,CAAA,IAAA,KAAQ,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAE1E,IAAA,IAAI,qBAAqB,GAAA,CAAI,MAAM,KAAK,KAAA,CAAM,CAAC,MAAM,MAAA,EAAQ;AAC3D,MAAA,KAAA,GAAQ,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,MAAA,OAAA,GAAU,MAAM,CAAC,CAAA;AACjB,MAAA,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAChB,CAAA,MAAA,IAAW,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC9B,MAAA,KAAA,GAAQ,MAAM,CAAC,CAAA;AACf,MAAA,OAAA,GAAU,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAC1B,CAAA,MAAA,IAAW,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC9B,MAAA,KAAA,GAAQ,MAAM,CAAC,CAAA;AACf,MAAA,OAAA,GAAU,MAAM,CAAC,CAAA;AACjB,MAAA,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAChB,CAAA,MAAA,IAAW,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA,EAAQ;AAC9B,MAAA,KAAA,GAAQ,GAAG,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC/B,MAAA,OAAA,GAAU,MAAM,CAAC,CAAA;AACjB,MAAA,IAAA,GAAO,MAAM,CAAC,CAAA;AAAA,IAChB;AAEA,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,OAAA,IAAW,CAAC,IAAA,EAAM;AAC/B,MAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,IAC5D;AAEA,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,IAAK,MAAA;AAE7C,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,MAAA;AACJ,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA;AAC9C,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAC3B,MAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,MAAA,KAAW,IAAA,EAAM;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,GAAA,GAAM,OAAA,CAAQ,MAAM,CAAC,CAAA;AAAA,IACvB;AAEA,IAAA,OAAO,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,OAAO,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,GAAA,EAAK,MAAM,CAAA;AAAA,EACzE;AAAA,EAEA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,IAAA;AAAA,EACA,OAAA;AAAA,EAEQ,YACN,MAAA,EACA,KAAA,EACA,SACA,IAAA,EACA,IAAA,EACA,KACA,MAAA,EACA;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AACd,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAChB,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,GAAA;AACZ,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,EACjB;AAAA,EAEA,QAAA,GAAW,IAAI,KAAA,KAAyB;AACtC,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA;AAChC,IAAA,GAAA,CAAI,QAAA,GAAW,MAAM,GAAA,CAAI,CAAA,IAAA,KAAQ,mBAAmB,IAAI,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AACnE,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA,GAAoB;AAClB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,KAAK,QAAA,CAAS,IAAA,CAAK,QAAA,EAAU,MAAA,EAAQ,KAAK,KAAK,CAAA;AAAA,IACvD,CAAA,MAAA,IAAW,IAAA,CAAK,QAAA,KAAa,IAAA,CAAK,KAAA,EAAO;AACvC,MAAA,GAAA,GAAM,KAAK,QAAA,CAAS,IAAA,CAAK,MAAA,EAAQ,MAAA,EAAQ,KAAK,KAAK,CAAA;AAAA,IACrD,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA,EAAQ,KAAK,QAAA,EAAU,MAAA,EAAQ,KAAK,KAAK,CAAA;AAAA,IACpE;AAEA,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,aAAa,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,OAAA,GAAU,KAAK,IAAI,CAAA;AAAA,IAC1D;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA,GAAoB;AAClB,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACf,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,aAAA,EAAe,KAAK,CAAA;AACzC,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA;AAEvC,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,IAAI,CAAA;AAAA,IAC3C;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,GAAuB;AACrB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,gBAAA,EAAkB,MAAM,CAAA;AAC7C,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,MAAM,CAAA;AACvC,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,aAAA,EAAe,KAAK,CAAA;AAEzC,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,WAAA,EAAa,IAAA,CAAK,KAAK,CAAA;AAAA,IAC9C;AACA,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,IAAI,CAAA;AAAA,IAC3C;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA,GAAuB;AACrB,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,oBAAA,CAAqB,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,GAAM,IAAA,CAAK,QAAA;AAAA,QACT,IAAA,CAAK,MAAA;AAAA,QACL,IAAA,CAAK,QAAA;AAAA,QACL,OAAA;AAAA,QACA,KAAA;AAAA,QACA,cAAA;AAAA,QACA,IAAA,CAAK,KAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,aAAA,EAAe,KAAK,CAAA;AAEzC,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,oCAAA,EAAsC,IAAA,CAAK,IAAI,CAAA;AAAA,IACtE;AAEA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAqB;AACnB,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,OAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,OAAA,GAA8B;AAC5B,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,GAA6B;AAC3B,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AACF;;"}

package/dist/azure/CachedAzureDevOpsCredentialsProvider.cjs.js

@@ -8,6 +8,7 @@ class CachedAzureDevOpsCredentialsProvider {
   constructor(credential) {
     this.credential = credential;
   }
+  credential;
   azureDevOpsScope = "499b84ac-1321-427f-aa17-267ca6975798/.default";
   cached;
   static fromAzureDevOpsCredential(credential) {

package/dist/azure/CachedAzureDevOpsCredentialsProvider.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"CachedAzureDevOpsCredentialsProvider.cjs.js","sources":["../../src/azure/CachedAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureDevOpsCredential, PersonalAccessTokenCredential } from './config';\nimport {\n  ClientAssertionCredential,\n  ClientSecretCredential,\n  ManagedIdentityCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { ManagedIdentityClientAssertion } from './ManagedIdentityClientAssertion';\n\ntype CachedAzureDevOpsCredentials = AzureDevOpsCredentials & {\n  expiresAt?: number;\n};\n\nfunction exhaustiveCheck(_param: never) {}\n\nconst tenMinutes = 1000 * 60 * 10;\n\n/**\n * A credentials provider that caches the credentials for as long as it is valid.\n *\n * @public\n */\nexport class CachedAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  azureDevOpsScope = '499b84ac-1321-427f-aa17-267ca6975798/.default';\n  cached: CachedAzureDevOpsCredentials | undefined;\n\n  static fromAzureDevOpsCredential(\n    credential: AzureDevOpsCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    switch (credential.kind) {\n      case 'PersonalAccessToken':\n        return CachedAzureDevOpsCredentialsProvider.fromPersonalAccessTokenCredential(\n          credential,\n        );\n      case 'ClientSecret':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientSecretCredential(\n            credential.tenantId,\n            credential.clientId,\n            credential.clientSecret,\n          ),\n        );\n\n      case 'ManagedIdentityClientAssertion': {\n        const clientAssertion = new ManagedIdentityClientAssertion({\n          clientId: credential.managedIdentityClientId,\n        });\n\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientAssertionCredential(\n            credential.tenantId,\n            credential.clientId,\n            () => clientAssertion.getSignedAssertion(),\n          ),\n        );\n      }\n\n      case 'ManagedIdentity':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          credential.clientId === 'system-assigned'\n            ? new ManagedIdentityCredential()\n            : new ManagedIdentityCredential(credential.clientId),\n        );\n      default:\n        exhaustiveCheck(credential);\n\n        throw new Error(\n          `Credential kind '${(credential as any).kind}' not supported`,\n        );\n    }\n  }\n\n  static fromTokenCredential(\n    credential: TokenCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    return new CachedAzureDevOpsCredentialsProvider(credential);\n  }\n\n  static fromPersonalAccessTokenCredential(\n    credential: PersonalAccessTokenCredential,\n  ) {\n    return new CachedAzureDevOpsCredentialsProvider(\n      credential.personalAccessToken,\n    );\n  }\n\n  private constructor(private readonly credential: TokenCredential | string) {}\n\n  async getCredentials(): Promise<AzureDevOpsCredentials> {\n    if (\n      this.cached === undefined ||\n      (this.cached.expiresAt !== undefined &&\n        Date.now() > this.cached.expiresAt)\n    ) {\n      if (typeof this.credential === 'string') {\n        this.cached = {\n          headers: {\n            Authorization: `Basic ${btoa(`:${this.credential}`)}`,\n          },\n          type: 'pat',\n          token: this.credential,\n        };\n      } else {\n        const accessToken = await this.credential.getToken(\n          this.azureDevOpsScope,\n        );\n\n        if (!accessToken) {\n          throw new Error('Failed to retrieve access token');\n        }\n\n        this.cached = {\n          expiresAt: accessToken.expiresOnTimestamp - tenMinutes,\n          headers: {\n            Authorization: `Bearer ${accessToken.token}`,\n          },\n          type: 'bearer',\n          token: accessToken.token,\n        };\n      }\n    }\n\n    return this.cached;\n  }\n}\n"],"names":["ClientSecretCredential","ManagedIdentityClientAssertion","ClientAssertionCredential","ManagedIdentityCredential"],"mappings":";;;;;AAkCA,MAAM,UAAA,GAAa,MAAO,EAAA,GAAK,EAAA;AAOxB,MAAM,oCAAA,CAEb;AAAA,EAgEU,YAA6B,UAAA,EAAsC;AAAtC,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAAuC;AAAA,EA/D5E,gBAAA,GAAmB,+CAAA;AAAA,EACnB,MAAA;AAAA,EAEA,OAAO,0BACL,UAAA,EACsC;AACtC,IAAA,QAAQ,WAAW,IAAA;AAAM,MACvB,KAAK,qBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,iCAAA;AAAA,UAC1C;AAAA,SACF;AAAA,MACF,KAAK,cAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAIA,+BAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW;AAAA;AACb,SACF;AAAA,MAEF,KAAK,gCAAA,EAAkC;AACrC,QAAA,MAAM,eAAA,GAAkB,IAAIC,6DAAA,CAA+B;AAAA,UACzD,UAAU,UAAA,CAAW;AAAA,SACtB,CAAA;AAED,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAIC,kCAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,MAAM,gBAAgB,kBAAA;AAAmB;AAC3C,SACF;AAAA,MACF;AAAA,MAEA,KAAK,iBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,UAAA,CAAW,aAAa,iBAAA,GACpB,IAAIC,oCAA0B,GAC9B,IAAIA,kCAAA,CAA0B,UAAA,CAAW,QAAQ;AAAA,SACvD;AAAA,MACF;AAGE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,iBAAA,EAAqB,WAAmB,IAAI,CAAA,eAAA;AAAA,SAC9C;AAAA;AACJ,EACF;AAAA,EAEA,OAAO,oBACL,UAAA,EACsC;AACtC,IAAA,OAAO,IAAI,qCAAqC,UAAU,CAAA;AAAA,EAC5D;AAAA,EAEA,OAAO,kCACL,UAAA,EACA;AACA,IAAA,OAAO,IAAI,oCAAA;AAAA,MACT,UAAA,CAAW;AAAA,KACb;AAAA,EACF;AAAA,EAIA,MAAM,cAAA,GAAkD;AACtD,IAAA,IACE,IAAA,CAAK,MAAA,KAAW,MAAA,IACf,IAAA,CAAK,MAAA,CAAO,SAAA,KAAc,MAAA,IACzB,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,MAAA,CAAO,SAAA,EAC3B;AACA,MAAA,IAAI,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,EAAU;AACvC,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,OAAA,EAAS;AAAA,YACP,eAAe,CAAA,MAAA,EAAS,IAAA,CAAK,IAAI,IAAA,CAAK,UAAU,EAAE,CAAC,CAAA;AAAA,WACrD;AAAA,UACA,IAAA,EAAM,KAAA;AAAA,UACN,OAAO,IAAA,CAAK;AAAA,SACd;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,UACxC,IAAA,CAAK;AAAA,SACP;AAEA,QAAA,IAAI,CAAC,WAAA,EAAa;AAChB,UAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,QACnD;AAEA,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,SAAA,EAAW,YAAY,kBAAA,GAAqB,UAAA;AAAA,UAC5C,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,CAAA,OAAA,EAAU,WAAA,CAAY,KAAK,CAAA;AAAA,WAC5C;AAAA,UACA,IAAA,EAAM,QAAA;AAAA,UACN,OAAO,WAAA,CAAY;AAAA,SACrB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF;;;;"}
+{"version":3,"file":"CachedAzureDevOpsCredentialsProvider.cjs.js","sources":["../../src/azure/CachedAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureDevOpsCredential, PersonalAccessTokenCredential } from './config';\nimport {\n  ClientAssertionCredential,\n  ClientSecretCredential,\n  ManagedIdentityCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { ManagedIdentityClientAssertion } from './ManagedIdentityClientAssertion';\n\ntype CachedAzureDevOpsCredentials = AzureDevOpsCredentials & {\n  expiresAt?: number;\n};\n\nfunction exhaustiveCheck(_param: never) {}\n\nconst tenMinutes = 1000 * 60 * 10;\n\n/**\n * A credentials provider that caches the credentials for as long as it is valid.\n *\n * @public\n */\nexport class CachedAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  azureDevOpsScope = '499b84ac-1321-427f-aa17-267ca6975798/.default';\n  cached: CachedAzureDevOpsCredentials | undefined;\n\n  static fromAzureDevOpsCredential(\n    credential: AzureDevOpsCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    switch (credential.kind) {\n      case 'PersonalAccessToken':\n        return CachedAzureDevOpsCredentialsProvider.fromPersonalAccessTokenCredential(\n          credential,\n        );\n      case 'ClientSecret':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientSecretCredential(\n            credential.tenantId,\n            credential.clientId,\n            credential.clientSecret,\n          ),\n        );\n\n      case 'ManagedIdentityClientAssertion': {\n        const clientAssertion = new ManagedIdentityClientAssertion({\n          clientId: credential.managedIdentityClientId,\n        });\n\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientAssertionCredential(\n            credential.tenantId,\n            credential.clientId,\n            () => clientAssertion.getSignedAssertion(),\n          ),\n        );\n      }\n\n      case 'ManagedIdentity':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          credential.clientId === 'system-assigned'\n            ? new ManagedIdentityCredential()\n            : new ManagedIdentityCredential(credential.clientId),\n        );\n      default:\n        exhaustiveCheck(credential);\n\n        throw new Error(\n          `Credential kind '${(credential as any).kind}' not supported`,\n        );\n    }\n  }\n\n  static fromTokenCredential(\n    credential: TokenCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    return new CachedAzureDevOpsCredentialsProvider(credential);\n  }\n\n  static fromPersonalAccessTokenCredential(\n    credential: PersonalAccessTokenCredential,\n  ) {\n    return new CachedAzureDevOpsCredentialsProvider(\n      credential.personalAccessToken,\n    );\n  }\n\n  private constructor(private readonly credential: TokenCredential | string) {}\n\n  async getCredentials(): Promise<AzureDevOpsCredentials> {\n    if (\n      this.cached === undefined ||\n      (this.cached.expiresAt !== undefined &&\n        Date.now() > this.cached.expiresAt)\n    ) {\n      if (typeof this.credential === 'string') {\n        this.cached = {\n          headers: {\n            Authorization: `Basic ${btoa(`:${this.credential}`)}`,\n          },\n          type: 'pat',\n          token: this.credential,\n        };\n      } else {\n        const accessToken = await this.credential.getToken(\n          this.azureDevOpsScope,\n        );\n\n        if (!accessToken) {\n          throw new Error('Failed to retrieve access token');\n        }\n\n        this.cached = {\n          expiresAt: accessToken.expiresOnTimestamp - tenMinutes,\n          headers: {\n            Authorization: `Bearer ${accessToken.token}`,\n          },\n          type: 'bearer',\n          token: accessToken.token,\n        };\n      }\n    }\n\n    return this.cached;\n  }\n}\n"],"names":["ClientSecretCredential","ManagedIdentityClientAssertion","ClientAssertionCredential","ManagedIdentityCredential"],"mappings":";;;;;AAkCA,MAAM,UAAA,GAAa,MAAO,EAAA,GAAK,EAAA;AAOxB,MAAM,oCAAA,CAEb;AAAA,EAgEU,YAA6B,UAAA,EAAsC;AAAtC,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAAuC;AAAA,EAAvC,UAAA;AAAA,EA/DrC,gBAAA,GAAmB,+CAAA;AAAA,EACnB,MAAA;AAAA,EAEA,OAAO,0BACL,UAAA,EACsC;AACtC,IAAA,QAAQ,WAAW,IAAA;AAAM,MACvB,KAAK,qBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,iCAAA;AAAA,UAC1C;AAAA,SACF;AAAA,MACF,KAAK,cAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAIA,+BAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW;AAAA;AACb,SACF;AAAA,MAEF,KAAK,gCAAA,EAAkC;AACrC,QAAA,MAAM,eAAA,GAAkB,IAAIC,6DAAA,CAA+B;AAAA,UACzD,UAAU,UAAA,CAAW;AAAA,SACtB,CAAA;AAED,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAIC,kCAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,MAAM,gBAAgB,kBAAA;AAAmB;AAC3C,SACF;AAAA,MACF;AAAA,MAEA,KAAK,iBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,UAAA,CAAW,aAAa,iBAAA,GACpB,IAAIC,oCAA0B,GAC9B,IAAIA,kCAAA,CAA0B,UAAA,CAAW,QAAQ;AAAA,SACvD;AAAA,MACF;AAGE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,iBAAA,EAAqB,WAAmB,IAAI,CAAA,eAAA;AAAA,SAC9C;AAAA;AACJ,EACF;AAAA,EAEA,OAAO,oBACL,UAAA,EACsC;AACtC,IAAA,OAAO,IAAI,qCAAqC,UAAU,CAAA;AAAA,EAC5D;AAAA,EAEA,OAAO,kCACL,UAAA,EACA;AACA,IAAA,OAAO,IAAI,oCAAA;AAAA,MACT,UAAA,CAAW;AAAA,KACb;AAAA,EACF;AAAA,EAIA,MAAM,cAAA,GAAkD;AACtD,IAAA,IACE,IAAA,CAAK,MAAA,KAAW,MAAA,IACf,IAAA,CAAK,MAAA,CAAO,SAAA,KAAc,MAAA,IACzB,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,MAAA,CAAO,SAAA,EAC3B;AACA,MAAA,IAAI,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,EAAU;AACvC,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,OAAA,EAAS;AAAA,YACP,eAAe,CAAA,MAAA,EAAS,IAAA,CAAK,IAAI,IAAA,CAAK,UAAU,EAAE,CAAC,CAAA;AAAA,WACrD;AAAA,UACA,IAAA,EAAM,KAAA;AAAA,UACN,OAAO,IAAA,CAAK;AAAA,SACd;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,UACxC,IAAA,CAAK;AAAA,SACP;AAEA,QAAA,IAAI,CAAC,WAAA,EAAa;AAChB,UAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,QACnD;AAEA,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,SAAA,EAAW,YAAY,kBAAA,GAAqB,UAAA;AAAA,UAC5C,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,CAAA,OAAA,EAAU,WAAA,CAAY,KAAK,CAAA;AAAA,WAC5C;AAAA,UACA,IAAA,EAAM,QAAA;AAAA,UACN,OAAO,WAAA,CAAY;AAAA,SACrB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF;;"}

package/dist/azure/CachedAzureDevOpsCredentialsProvider.esm.js

@@ -6,6 +6,7 @@ class CachedAzureDevOpsCredentialsProvider {
   constructor(credential) {
     this.credential = credential;
   }
+  credential;
   azureDevOpsScope = "499b84ac-1321-427f-aa17-267ca6975798/.default";
   cached;
   static fromAzureDevOpsCredential(credential) {

package/dist/azure/CachedAzureDevOpsCredentialsProvider.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"CachedAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/CachedAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureDevOpsCredential, PersonalAccessTokenCredential } from './config';\nimport {\n  ClientAssertionCredential,\n  ClientSecretCredential,\n  ManagedIdentityCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { ManagedIdentityClientAssertion } from './ManagedIdentityClientAssertion';\n\ntype CachedAzureDevOpsCredentials = AzureDevOpsCredentials & {\n  expiresAt?: number;\n};\n\nfunction exhaustiveCheck(_param: never) {}\n\nconst tenMinutes = 1000 * 60 * 10;\n\n/**\n * A credentials provider that caches the credentials for as long as it is valid.\n *\n * @public\n */\nexport class CachedAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  azureDevOpsScope = '499b84ac-1321-427f-aa17-267ca6975798/.default';\n  cached: CachedAzureDevOpsCredentials | undefined;\n\n  static fromAzureDevOpsCredential(\n    credential: AzureDevOpsCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    switch (credential.kind) {\n      case 'PersonalAccessToken':\n        return CachedAzureDevOpsCredentialsProvider.fromPersonalAccessTokenCredential(\n          credential,\n        );\n      case 'ClientSecret':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientSecretCredential(\n            credential.tenantId,\n            credential.clientId,\n            credential.clientSecret,\n          ),\n        );\n\n      case 'ManagedIdentityClientAssertion': {\n        const clientAssertion = new ManagedIdentityClientAssertion({\n          clientId: credential.managedIdentityClientId,\n        });\n\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientAssertionCredential(\n            credential.tenantId,\n            credential.clientId,\n            () => clientAssertion.getSignedAssertion(),\n          ),\n        );\n      }\n\n      case 'ManagedIdentity':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          credential.clientId === 'system-assigned'\n            ? new ManagedIdentityCredential()\n            : new ManagedIdentityCredential(credential.clientId),\n        );\n      default:\n        exhaustiveCheck(credential);\n\n        throw new Error(\n          `Credential kind '${(credential as any).kind}' not supported`,\n        );\n    }\n  }\n\n  static fromTokenCredential(\n    credential: TokenCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    return new CachedAzureDevOpsCredentialsProvider(credential);\n  }\n\n  static fromPersonalAccessTokenCredential(\n    credential: PersonalAccessTokenCredential,\n  ) {\n    return new CachedAzureDevOpsCredentialsProvider(\n      credential.personalAccessToken,\n    );\n  }\n\n  private constructor(private readonly credential: TokenCredential | string) {}\n\n  async getCredentials(): Promise<AzureDevOpsCredentials> {\n    if (\n      this.cached === undefined ||\n      (this.cached.expiresAt !== undefined &&\n        Date.now() > this.cached.expiresAt)\n    ) {\n      if (typeof this.credential === 'string') {\n        this.cached = {\n          headers: {\n            Authorization: `Basic ${btoa(`:${this.credential}`)}`,\n          },\n          type: 'pat',\n          token: this.credential,\n        };\n      } else {\n        const accessToken = await this.credential.getToken(\n          this.azureDevOpsScope,\n        );\n\n        if (!accessToken) {\n          throw new Error('Failed to retrieve access token');\n        }\n\n        this.cached = {\n          expiresAt: accessToken.expiresOnTimestamp - tenMinutes,\n          headers: {\n            Authorization: `Bearer ${accessToken.token}`,\n          },\n          type: 'bearer',\n          token: accessToken.token,\n        };\n      }\n    }\n\n    return this.cached;\n  }\n}\n"],"names":[],"mappings":";;;AAkCA,MAAM,UAAA,GAAa,MAAO,EAAA,GAAK,EAAA;AAOxB,MAAM,oCAAA,CAEb;AAAA,EAgEU,YAA6B,UAAA,EAAsC;AAAtC,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAAuC;AAAA,EA/D5E,gBAAA,GAAmB,+CAAA;AAAA,EACnB,MAAA;AAAA,EAEA,OAAO,0BACL,UAAA,EACsC;AACtC,IAAA,QAAQ,WAAW,IAAA;AAAM,MACvB,KAAK,qBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,iCAAA;AAAA,UAC1C;AAAA,SACF;AAAA,MACF,KAAK,cAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAI,sBAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW;AAAA;AACb,SACF;AAAA,MAEF,KAAK,gCAAA,EAAkC;AACrC,QAAA,MAAM,eAAA,GAAkB,IAAI,8BAAA,CAA+B;AAAA,UACzD,UAAU,UAAA,CAAW;AAAA,SACtB,CAAA;AAED,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAI,yBAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,MAAM,gBAAgB,kBAAA;AAAmB;AAC3C,SACF;AAAA,MACF;AAAA,MAEA,KAAK,iBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,UAAA,CAAW,aAAa,iBAAA,GACpB,IAAI,2BAA0B,GAC9B,IAAI,yBAAA,CAA0B,UAAA,CAAW,QAAQ;AAAA,SACvD;AAAA,MACF;AAGE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,iBAAA,EAAqB,WAAmB,IAAI,CAAA,eAAA;AAAA,SAC9C;AAAA;AACJ,EACF;AAAA,EAEA,OAAO,oBACL,UAAA,EACsC;AACtC,IAAA,OAAO,IAAI,qCAAqC,UAAU,CAAA;AAAA,EAC5D;AAAA,EAEA,OAAO,kCACL,UAAA,EACA;AACA,IAAA,OAAO,IAAI,oCAAA;AAAA,MACT,UAAA,CAAW;AAAA,KACb;AAAA,EACF;AAAA,EAIA,MAAM,cAAA,GAAkD;AACtD,IAAA,IACE,IAAA,CAAK,MAAA,KAAW,MAAA,IACf,IAAA,CAAK,MAAA,CAAO,SAAA,KAAc,MAAA,IACzB,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,MAAA,CAAO,SAAA,EAC3B;AACA,MAAA,IAAI,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,EAAU;AACvC,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,OAAA,EAAS;AAAA,YACP,eAAe,CAAA,MAAA,EAAS,IAAA,CAAK,IAAI,IAAA,CAAK,UAAU,EAAE,CAAC,CAAA;AAAA,WACrD;AAAA,UACA,IAAA,EAAM,KAAA;AAAA,UACN,OAAO,IAAA,CAAK;AAAA,SACd;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,UACxC,IAAA,CAAK;AAAA,SACP;AAEA,QAAA,IAAI,CAAC,WAAA,EAAa;AAChB,UAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,QACnD;AAEA,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,SAAA,EAAW,YAAY,kBAAA,GAAqB,UAAA;AAAA,UAC5C,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,CAAA,OAAA,EAAU,WAAA,CAAY,KAAK,CAAA;AAAA,WAC5C;AAAA,UACA,IAAA,EAAM,QAAA;AAAA,UACN,OAAO,WAAA,CAAY;AAAA,SACrB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF;;;;"}
+{"version":3,"file":"CachedAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/CachedAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { AzureDevOpsCredential, PersonalAccessTokenCredential } from './config';\nimport {\n  ClientAssertionCredential,\n  ClientSecretCredential,\n  ManagedIdentityCredential,\n  TokenCredential,\n} from '@azure/identity';\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { ManagedIdentityClientAssertion } from './ManagedIdentityClientAssertion';\n\ntype CachedAzureDevOpsCredentials = AzureDevOpsCredentials & {\n  expiresAt?: number;\n};\n\nfunction exhaustiveCheck(_param: never) {}\n\nconst tenMinutes = 1000 * 60 * 10;\n\n/**\n * A credentials provider that caches the credentials for as long as it is valid.\n *\n * @public\n */\nexport class CachedAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  azureDevOpsScope = '499b84ac-1321-427f-aa17-267ca6975798/.default';\n  cached: CachedAzureDevOpsCredentials | undefined;\n\n  static fromAzureDevOpsCredential(\n    credential: AzureDevOpsCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    switch (credential.kind) {\n      case 'PersonalAccessToken':\n        return CachedAzureDevOpsCredentialsProvider.fromPersonalAccessTokenCredential(\n          credential,\n        );\n      case 'ClientSecret':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientSecretCredential(\n            credential.tenantId,\n            credential.clientId,\n            credential.clientSecret,\n          ),\n        );\n\n      case 'ManagedIdentityClientAssertion': {\n        const clientAssertion = new ManagedIdentityClientAssertion({\n          clientId: credential.managedIdentityClientId,\n        });\n\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          new ClientAssertionCredential(\n            credential.tenantId,\n            credential.clientId,\n            () => clientAssertion.getSignedAssertion(),\n          ),\n        );\n      }\n\n      case 'ManagedIdentity':\n        return CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n          credential.clientId === 'system-assigned'\n            ? new ManagedIdentityCredential()\n            : new ManagedIdentityCredential(credential.clientId),\n        );\n      default:\n        exhaustiveCheck(credential);\n\n        throw new Error(\n          `Credential kind '${(credential as any).kind}' not supported`,\n        );\n    }\n  }\n\n  static fromTokenCredential(\n    credential: TokenCredential,\n  ): CachedAzureDevOpsCredentialsProvider {\n    return new CachedAzureDevOpsCredentialsProvider(credential);\n  }\n\n  static fromPersonalAccessTokenCredential(\n    credential: PersonalAccessTokenCredential,\n  ) {\n    return new CachedAzureDevOpsCredentialsProvider(\n      credential.personalAccessToken,\n    );\n  }\n\n  private constructor(private readonly credential: TokenCredential | string) {}\n\n  async getCredentials(): Promise<AzureDevOpsCredentials> {\n    if (\n      this.cached === undefined ||\n      (this.cached.expiresAt !== undefined &&\n        Date.now() > this.cached.expiresAt)\n    ) {\n      if (typeof this.credential === 'string') {\n        this.cached = {\n          headers: {\n            Authorization: `Basic ${btoa(`:${this.credential}`)}`,\n          },\n          type: 'pat',\n          token: this.credential,\n        };\n      } else {\n        const accessToken = await this.credential.getToken(\n          this.azureDevOpsScope,\n        );\n\n        if (!accessToken) {\n          throw new Error('Failed to retrieve access token');\n        }\n\n        this.cached = {\n          expiresAt: accessToken.expiresOnTimestamp - tenMinutes,\n          headers: {\n            Authorization: `Bearer ${accessToken.token}`,\n          },\n          type: 'bearer',\n          token: accessToken.token,\n        };\n      }\n    }\n\n    return this.cached;\n  }\n}\n"],"names":[],"mappings":";;;AAkCA,MAAM,UAAA,GAAa,MAAO,EAAA,GAAK,EAAA;AAOxB,MAAM,oCAAA,CAEb;AAAA,EAgEU,YAA6B,UAAA,EAAsC;AAAtC,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAAuC;AAAA,EAAvC,UAAA;AAAA,EA/DrC,gBAAA,GAAmB,+CAAA;AAAA,EACnB,MAAA;AAAA,EAEA,OAAO,0BACL,UAAA,EACsC;AACtC,IAAA,QAAQ,WAAW,IAAA;AAAM,MACvB,KAAK,qBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,iCAAA;AAAA,UAC1C;AAAA,SACF;AAAA,MACF,KAAK,cAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAI,sBAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW;AAAA;AACb,SACF;AAAA,MAEF,KAAK,gCAAA,EAAkC;AACrC,QAAA,MAAM,eAAA,GAAkB,IAAI,8BAAA,CAA+B;AAAA,UACzD,UAAU,UAAA,CAAW;AAAA,SACtB,CAAA;AAED,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,IAAI,yBAAA;AAAA,YACF,UAAA,CAAW,QAAA;AAAA,YACX,UAAA,CAAW,QAAA;AAAA,YACX,MAAM,gBAAgB,kBAAA;AAAmB;AAC3C,SACF;AAAA,MACF;AAAA,MAEA,KAAK,iBAAA;AACH,QAAA,OAAO,oCAAA,CAAqC,mBAAA;AAAA,UAC1C,UAAA,CAAW,aAAa,iBAAA,GACpB,IAAI,2BAA0B,GAC9B,IAAI,yBAAA,CAA0B,UAAA,CAAW,QAAQ;AAAA,SACvD;AAAA,MACF;AAGE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,iBAAA,EAAqB,WAAmB,IAAI,CAAA,eAAA;AAAA,SAC9C;AAAA;AACJ,EACF;AAAA,EAEA,OAAO,oBACL,UAAA,EACsC;AACtC,IAAA,OAAO,IAAI,qCAAqC,UAAU,CAAA;AAAA,EAC5D;AAAA,EAEA,OAAO,kCACL,UAAA,EACA;AACA,IAAA,OAAO,IAAI,oCAAA;AAAA,MACT,UAAA,CAAW;AAAA,KACb;AAAA,EACF;AAAA,EAIA,MAAM,cAAA,GAAkD;AACtD,IAAA,IACE,IAAA,CAAK,MAAA,KAAW,MAAA,IACf,IAAA,CAAK,MAAA,CAAO,SAAA,KAAc,MAAA,IACzB,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,MAAA,CAAO,SAAA,EAC3B;AACA,MAAA,IAAI,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,EAAU;AACvC,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,OAAA,EAAS;AAAA,YACP,eAAe,CAAA,MAAA,EAAS,IAAA,CAAK,IAAI,IAAA,CAAK,UAAU,EAAE,CAAC,CAAA;AAAA,WACrD;AAAA,UACA,IAAA,EAAM,KAAA;AAAA,UACN,OAAO,IAAA,CAAK;AAAA,SACd;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,UACxC,IAAA,CAAK;AAAA,SACP;AAEA,QAAA,IAAI,CAAC,WAAA,EAAa;AAChB,UAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA,QACnD;AAEA,QAAA,IAAA,CAAK,MAAA,GAAS;AAAA,UACZ,SAAA,EAAW,YAAY,kBAAA,GAAqB,UAAA;AAAA,UAC5C,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,CAAA,OAAA,EAAU,WAAA,CAAY,KAAK,CAAA;AAAA,WAC5C;AAAA,UACA,IAAA,EAAM,QAAA;AAAA,UACN,OAAO,WAAA,CAAY;AAAA,SACrB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF;;"}

package/dist/azure/DefaultAzureDevOpsCredentialsProvider.cjs.js

@@ -8,6 +8,7 @@ class DefaultAzureDevOpsCredentialsProvider {
   constructor(providers) {
     this.providers = providers;
   }
+  providers;
   static fromIntegrations(integrations) {
     const providers = integrations.azure.list().reduce((acc, integration) => {
       integration.config.credentials?.forEach((credential) => {

package/dist/azure/DefaultAzureDevOpsCredentialsProvider.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.cjs.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\nimport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forVisualStudioOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.host.split('.');\n    if (isVisualStudioDomain(url.origin) && parts.length > 0) {\n      return this.providers.get(url.host);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forVisualStudioOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":["CachedAzureDevOpsCredentialsProvider","DefaultAzureCredential","isVisualStudioDomain"],"mappings":";;;;;;AA4BO,MAAM,qCAAA,CAEb;AAAA,EA+CU,YACW,SAAA,EAIjB;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAIhB;AAAA,EAnDH,OAAO,iBACL,YAAA,EACuC;AACvC,IAAA,MAAM,SAAA,GAAY,aAAa,KAAA,CAAM,IAAA,GAAO,MAAA,CAAO,CAAC,KAAK,WAAA,KAAgB;AACvE,MAAA,WAAA,CAAY,MAAA,CAAO,WAAA,EAAa,OAAA,CAAQ,CAAA,UAAA,KAAc;AACpD,QAAA,IACE,WAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,aAAA,CAAc,WAAW,CAAA,EACpC;AACA,UAAA,IAAI,IAAI,GAAA,CAAI,WAAA,CAAY,MAAA,CAAO,IAAI,MAAM,MAAA,EAAW;AAClD,YAAA,GAAA,CAAI,GAAA;AAAA,cACF,YAAY,MAAA,CAAO,IAAA;AAAA,cACnBA,yEAAA,CAAqC,yBAAA;AAAA,gBACnC;AAAA;AACF,aACF;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,WACJA,yEAAA,CAAqC,yBAAA;AAAA,YACnC;AAAA,WACF;AACF,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,GAAA,CAAI,GAAA,CAAI,GAAG,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,YAAY,IAAI,QAAQ,CAAA;AAAA,UAChE,CAAC,CAAA;AAAA,QACH;AAAA,MACF,CAAC,CAAA;AAED,MAAA,IACE,WAAA,CAAY,MAAA,CAAO,IAAA,KAAS,eAAA,IAC5B,GAAA,CAAI,IAAI,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,KAAM,MAAA,EACrC;AACA,QAAA,GAAA,CAAI,GAAA;AAAA,UACF,YAAY,MAAA,CAAO,IAAA;AAAA,UACnBA,yEAAA,CAAqC,mBAAA;AAAA,YACnC,IAAIC,+BAAA;AAAuB;AAC7B,SACF;AAAA,MACF;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,kBAAG,IAAI,GAAA,EAAmD,CAAA;AAE1D,IAAA,OAAO,IAAI,sCAAsC,SAAS,CAAA;AAAA,EAC5D;AAAA,EASQ,iCACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AACpD,MAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,EAAO;AAEtB,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD,WAAW,KAAA,CAAM,CAAC,MAAM,KAAA,IAAS,KAAA,CAAM,SAAS,CAAA,EAAG;AAEjD,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD;AAAA,IACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,2BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AAEpD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACrD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,4BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAChC,IAAA,IAAIC,0CAAqB,GAAA,CAAI,MAAM,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AACxD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,IACpC;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,QAAQ,GAAA,EAAsD;AACpE,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,EACpC;AAAA,EAEA,MAAM,eAAe,IAAA,EAE2B;AAC9C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAA,MAAM,QAAA,GACJ,IAAA,CAAK,0BAAA,CAA2B,GAAG,KACnC,IAAA,CAAK,gCAAA,CAAiC,GAAG,CAAA,IACzC,KAAK,2BAAA,CAA4B,GAAG,CAAA,IACpC,IAAA,CAAK,QAAQ,GAAG,CAAA;AAElB,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAA,CAAS,eAAe,IAAI,CAAA;AAAA,EACrC;AACF;;;;"}
+{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.cjs.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\nimport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forVisualStudioOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.host.split('.');\n    if (isVisualStudioDomain(url.origin) && parts.length > 0) {\n      return this.providers.get(url.host);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forVisualStudioOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":["CachedAzureDevOpsCredentialsProvider","DefaultAzureCredential","isVisualStudioDomain"],"mappings":";;;;;;AA4BO,MAAM,qCAAA,CAEb;AAAA,EA+CU,YACW,SAAA,EAIjB;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAIhB;AAAA,EAJgB,SAAA;AAAA,EA/CnB,OAAO,iBACL,YAAA,EACuC;AACvC,IAAA,MAAM,SAAA,GAAY,aAAa,KAAA,CAAM,IAAA,GAAO,MAAA,CAAO,CAAC,KAAK,WAAA,KAAgB;AACvE,MAAA,WAAA,CAAY,MAAA,CAAO,WAAA,EAAa,OAAA,CAAQ,CAAA,UAAA,KAAc;AACpD,QAAA,IACE,WAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,aAAA,CAAc,WAAW,CAAA,EACpC;AACA,UAAA,IAAI,IAAI,GAAA,CAAI,WAAA,CAAY,MAAA,CAAO,IAAI,MAAM,MAAA,EAAW;AAClD,YAAA,GAAA,CAAI,GAAA;AAAA,cACF,YAAY,MAAA,CAAO,IAAA;AAAA,cACnBA,yEAAA,CAAqC,yBAAA;AAAA,gBACnC;AAAA;AACF,aACF;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,WACJA,yEAAA,CAAqC,yBAAA;AAAA,YACnC;AAAA,WACF;AACF,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,GAAA,CAAI,GAAA,CAAI,GAAG,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,YAAY,IAAI,QAAQ,CAAA;AAAA,UAChE,CAAC,CAAA;AAAA,QACH;AAAA,MACF,CAAC,CAAA;AAED,MAAA,IACE,WAAA,CAAY,MAAA,CAAO,IAAA,KAAS,eAAA,IAC5B,GAAA,CAAI,IAAI,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,KAAM,MAAA,EACrC;AACA,QAAA,GAAA,CAAI,GAAA;AAAA,UACF,YAAY,MAAA,CAAO,IAAA;AAAA,UACnBA,yEAAA,CAAqC,mBAAA;AAAA,YACnC,IAAIC,+BAAA;AAAuB;AAC7B,SACF;AAAA,MACF;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,kBAAG,IAAI,GAAA,EAAmD,CAAA;AAE1D,IAAA,OAAO,IAAI,sCAAsC,SAAS,CAAA;AAAA,EAC5D;AAAA,EASQ,iCACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AACpD,MAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,EAAO;AAEtB,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD,WAAW,KAAA,CAAM,CAAC,MAAM,KAAA,IAAS,KAAA,CAAM,SAAS,CAAA,EAAG;AAEjD,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD;AAAA,IACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,2BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AAEpD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACrD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,4BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAChC,IAAA,IAAIC,0CAAqB,GAAA,CAAI,MAAM,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AACxD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,IACpC;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,QAAQ,GAAA,EAAsD;AACpE,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,EACpC;AAAA,EAEA,MAAM,eAAe,IAAA,EAE2B;AAC9C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAA,MAAM,QAAA,GACJ,IAAA,CAAK,0BAAA,CAA2B,GAAG,KACnC,IAAA,CAAK,gCAAA,CAAiC,GAAG,CAAA,IACzC,KAAK,2BAAA,CAA4B,GAAG,CAAA,IACpC,IAAA,CAAK,QAAQ,GAAG,CAAA;AAElB,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAA,CAAS,eAAe,IAAI,CAAA;AAAA,EACrC;AACF;;"}

package/dist/azure/DefaultAzureDevOpsCredentialsProvider.esm.js

@@ -6,6 +6,7 @@ class DefaultAzureDevOpsCredentialsProvider {
   constructor(providers) {
     this.providers = providers;
   }
+  providers;
   static fromIntegrations(integrations) {
     const providers = integrations.azure.list().reduce((acc, integration) => {
       integration.config.credentials?.forEach((credential) => {

package/dist/azure/DefaultAzureDevOpsCredentialsProvider.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\nimport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forVisualStudioOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.host.split('.');\n    if (isVisualStudioDomain(url.origin) && parts.length > 0) {\n      return this.providers.get(url.host);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forVisualStudioOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":[],"mappings":";;;;AA4BO,MAAM,qCAAA,CAEb;AAAA,EA+CU,YACW,SAAA,EAIjB;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAIhB;AAAA,EAnDH,OAAO,iBACL,YAAA,EACuC;AACvC,IAAA,MAAM,SAAA,GAAY,aAAa,KAAA,CAAM,IAAA,GAAO,MAAA,CAAO,CAAC,KAAK,WAAA,KAAgB;AACvE,MAAA,WAAA,CAAY,MAAA,CAAO,WAAA,EAAa,OAAA,CAAQ,CAAA,UAAA,KAAc;AACpD,QAAA,IACE,WAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,aAAA,CAAc,WAAW,CAAA,EACpC;AACA,UAAA,IAAI,IAAI,GAAA,CAAI,WAAA,CAAY,MAAA,CAAO,IAAI,MAAM,MAAA,EAAW;AAClD,YAAA,GAAA,CAAI,GAAA;AAAA,cACF,YAAY,MAAA,CAAO,IAAA;AAAA,cACnB,oCAAA,CAAqC,yBAAA;AAAA,gBACnC;AAAA;AACF,aACF;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,WACJ,oCAAA,CAAqC,yBAAA;AAAA,YACnC;AAAA,WACF;AACF,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,GAAA,CAAI,GAAA,CAAI,GAAG,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,YAAY,IAAI,QAAQ,CAAA;AAAA,UAChE,CAAC,CAAA;AAAA,QACH;AAAA,MACF,CAAC,CAAA;AAED,MAAA,IACE,WAAA,CAAY,MAAA,CAAO,IAAA,KAAS,eAAA,IAC5B,GAAA,CAAI,IAAI,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,KAAM,MAAA,EACrC;AACA,QAAA,GAAA,CAAI,GAAA;AAAA,UACF,YAAY,MAAA,CAAO,IAAA;AAAA,UACnB,oCAAA,CAAqC,mBAAA;AAAA,YACnC,IAAI,sBAAA;AAAuB;AAC7B,SACF;AAAA,MACF;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,kBAAG,IAAI,GAAA,EAAmD,CAAA;AAE1D,IAAA,OAAO,IAAI,sCAAsC,SAAS,CAAA;AAAA,EAC5D;AAAA,EASQ,iCACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AACpD,MAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,EAAO;AAEtB,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD,WAAW,KAAA,CAAM,CAAC,MAAM,KAAA,IAAS,KAAA,CAAM,SAAS,CAAA,EAAG;AAEjD,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD;AAAA,IACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,2BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AAEpD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACrD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,4BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAChC,IAAA,IAAI,qBAAqB,GAAA,CAAI,MAAM,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AACxD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,IACpC;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,QAAQ,GAAA,EAAsD;AACpE,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,EACpC;AAAA,EAEA,MAAM,eAAe,IAAA,EAE2B;AAC9C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAA,MAAM,QAAA,GACJ,IAAA,CAAK,0BAAA,CAA2B,GAAG,KACnC,IAAA,CAAK,gCAAA,CAAiC,GAAG,CAAA,IACzC,KAAK,2BAAA,CAA4B,GAAG,CAAA,IACpC,IAAA,CAAK,QAAQ,GAAG,CAAA;AAElB,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAA,CAAS,eAAe,IAAI,CAAA;AAAA,EACrC;AACF;;;;"}
+{"version":3,"file":"DefaultAzureDevOpsCredentialsProvider.esm.js","sources":["../../src/azure/DefaultAzureDevOpsCredentialsProvider.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  AzureDevOpsCredentials,\n  AzureDevOpsCredentialsProvider,\n} from './types';\nimport { CachedAzureDevOpsCredentialsProvider } from './CachedAzureDevOpsCredentialsProvider';\nimport { ScmIntegrationRegistry } from '../registry';\nimport { DefaultAzureCredential } from '@azure/identity';\nimport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Default implementation of AzureDevOpsCredentialsProvider.\n * @public\n */\nexport class DefaultAzureDevOpsCredentialsProvider\n  implements AzureDevOpsCredentialsProvider\n{\n  static fromIntegrations(\n    integrations: ScmIntegrationRegistry,\n  ): DefaultAzureDevOpsCredentialsProvider {\n    const providers = integrations.azure.list().reduce((acc, integration) => {\n      integration.config.credentials?.forEach(credential => {\n        if (\n          credential.organizations === undefined ||\n          credential.organizations.length === 0\n        ) {\n          if (acc.get(integration.config.host) === undefined) {\n            acc.set(\n              integration.config.host,\n              CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n                credential,\n              ),\n            );\n          }\n        } else {\n          const provider =\n            CachedAzureDevOpsCredentialsProvider.fromAzureDevOpsCredential(\n              credential,\n            );\n          credential.organizations?.forEach(organization => {\n            acc.set(`${integration.config.host}/${organization}`, provider);\n          });\n        }\n      });\n\n      if (\n        integration.config.host === 'dev.azure.com' &&\n        acc.get(integration.config.host) === undefined\n      ) {\n        acc.set(\n          integration.config.host,\n          CachedAzureDevOpsCredentialsProvider.fromTokenCredential(\n            new DefaultAzureCredential(),\n          ),\n        );\n      }\n\n      return acc;\n    }, new Map<string, CachedAzureDevOpsCredentialsProvider>());\n\n    return new DefaultAzureDevOpsCredentialsProvider(providers);\n  }\n\n  private constructor(\n    private readonly providers: Map<\n      string,\n      CachedAzureDevOpsCredentialsProvider\n    >,\n  ) {}\n\n  private forAzureDevOpsServerOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host !== 'dev.azure.com' && parts.length > 0) {\n      if (parts[0] !== 'tfs') {\n        // url format: https://{host}/{organization}\n        return this.providers.get(`${url.host}/${parts[0]}`);\n      } else if (parts[0] === 'tfs' && parts.length > 1) {\n        // url format: https://{host}/tfs/{organization}\n        return this.providers.get(`${url.host}/${parts[1]}`);\n      }\n    }\n\n    return undefined;\n  }\n\n  private forAzureDevOpsOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.pathname.split('/').filter(part => part !== '');\n    if (url.host === 'dev.azure.com' && parts.length > 0) {\n      // url format: https://{host}/{organization}\n      return this.providers.get(`${url.host}/${parts[0]}`);\n    }\n\n    return undefined;\n  }\n\n  private forVisualStudioOrganization(\n    url: URL,\n  ): AzureDevOpsCredentialsProvider | undefined {\n    const parts = url.host.split('.');\n    if (isVisualStudioDomain(url.origin) && parts.length > 0) {\n      return this.providers.get(url.host);\n    }\n\n    return undefined;\n  }\n\n  private forHost(url: URL): AzureDevOpsCredentialsProvider | undefined {\n    return this.providers.get(url.host);\n  }\n\n  async getCredentials(opts: {\n    url: string;\n  }): Promise<AzureDevOpsCredentials | undefined> {\n    const url = new URL(opts.url);\n    const provider =\n      this.forAzureDevOpsOrganization(url) ??\n      this.forAzureDevOpsServerOrganization(url) ??\n      this.forVisualStudioOrganization(url) ??\n      this.forHost(url);\n\n    if (provider === undefined) {\n      return undefined;\n    }\n\n    return provider.getCredentials(opts);\n  }\n}\n"],"names":[],"mappings":";;;;AA4BO,MAAM,qCAAA,CAEb;AAAA,EA+CU,YACW,SAAA,EAIjB;AAJiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAIhB;AAAA,EAJgB,SAAA;AAAA,EA/CnB,OAAO,iBACL,YAAA,EACuC;AACvC,IAAA,MAAM,SAAA,GAAY,aAAa,KAAA,CAAM,IAAA,GAAO,MAAA,CAAO,CAAC,KAAK,WAAA,KAAgB;AACvE,MAAA,WAAA,CAAY,MAAA,CAAO,WAAA,EAAa,OAAA,CAAQ,CAAA,UAAA,KAAc;AACpD,QAAA,IACE,WAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,aAAA,CAAc,WAAW,CAAA,EACpC;AACA,UAAA,IAAI,IAAI,GAAA,CAAI,WAAA,CAAY,MAAA,CAAO,IAAI,MAAM,MAAA,EAAW;AAClD,YAAA,GAAA,CAAI,GAAA;AAAA,cACF,YAAY,MAAA,CAAO,IAAA;AAAA,cACnB,oCAAA,CAAqC,yBAAA;AAAA,gBACnC;AAAA;AACF,aACF;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,WACJ,oCAAA,CAAqC,yBAAA;AAAA,YACnC;AAAA,WACF;AACF,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,GAAA,CAAI,GAAA,CAAI,GAAG,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,YAAY,IAAI,QAAQ,CAAA;AAAA,UAChE,CAAC,CAAA;AAAA,QACH;AAAA,MACF,CAAC,CAAA;AAED,MAAA,IACE,WAAA,CAAY,MAAA,CAAO,IAAA,KAAS,eAAA,IAC5B,GAAA,CAAI,IAAI,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,KAAM,MAAA,EACrC;AACA,QAAA,GAAA,CAAI,GAAA;AAAA,UACF,YAAY,MAAA,CAAO,IAAA;AAAA,UACnB,oCAAA,CAAqC,mBAAA;AAAA,YACnC,IAAI,sBAAA;AAAuB;AAC7B,SACF;AAAA,MACF;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,kBAAG,IAAI,GAAA,EAAmD,CAAA;AAE1D,IAAA,OAAO,IAAI,sCAAsC,SAAS,CAAA;AAAA,EAC5D;AAAA,EASQ,iCACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AACpD,MAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,KAAA,EAAO;AAEtB,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD,WAAW,KAAA,CAAM,CAAC,MAAM,KAAA,IAAS,KAAA,CAAM,SAAS,CAAA,EAAG;AAEjD,QAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,MACrD;AAAA,IACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,2BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,KAAS,EAAE,CAAA;AAChE,IAAA,IAAI,GAAA,CAAI,IAAA,KAAS,eAAA,IAAmB,KAAA,CAAM,SAAS,CAAA,EAAG;AAEpD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACrD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,4BACN,GAAA,EAC4C;AAC5C,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAChC,IAAA,IAAI,qBAAqB,GAAA,CAAI,MAAM,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AACxD,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,IACpC;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEQ,QAAQ,GAAA,EAAsD;AACpE,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AAAA,EACpC;AAAA,EAEA,MAAM,eAAe,IAAA,EAE2B;AAC9C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAA,MAAM,QAAA,GACJ,IAAA,CAAK,0BAAA,CAA2B,GAAG,KACnC,IAAA,CAAK,gCAAA,CAAiC,GAAG,CAAA,IACzC,KAAK,2BAAA,CAA4B,GAAG,CAAA,IACpC,IAAA,CAAK,QAAQ,GAAG,CAAA;AAElB,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,OAAO,QAAA,CAAS,eAAe,IAAI,CAAA;AAAA,EACrC;AACF;;"}

package/dist/azure/ManagedIdentityClientAssertion.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"ManagedIdentityClientAssertion.cjs.js","sources":["../../src/azure/ManagedIdentityClientAssertion.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { ManagedIdentityCredential } from '@azure/identity';\nimport { ClientAssertion } from './ClientAssertion';\n\nexport type ManagedIdentityClientAssertionOptions = {\n  clientId?: string;\n};\n\nconst fiveMinutes = 5 * 60 * 1000; // 5 minutes in milliseconds\nconst expiresWithinFiveMinutes = (clientAssertion: ClientAssertion) =>\n  clientAssertion.expiresOnTimestamp - Date.now() <= fiveMinutes;\n\n/**\n * Class representing a Managed Identity Client Assertion.\n * This class is responsible for obtaining a signed client assertion using Azure Managed Identity.\n */\nexport class ManagedIdentityClientAssertion {\n  private credential: ManagedIdentityCredential;\n  private clientAssertion?: ClientAssertion;\n\n  /**\n   * Creates an instance of ManagedIdentityClientAssertion.\n   * @param options - Optional parameters for the ManagedIdentityClientAssertion.\n   *                  - clientId: The client ID of the managed identity. If not provided, 'system-assigned' is used.\n   */\n  constructor(options?: ManagedIdentityClientAssertionOptions) {\n    let { clientId } = options || {};\n    clientId ??= 'system-assigned';\n\n    this.credential =\n      clientId === 'system-assigned'\n        ? new ManagedIdentityCredential()\n        : new ManagedIdentityCredential(clientId);\n  }\n\n  /**\n   * Gets a signed client assertion.\n   * If a valid client assertion is already cached which doesn't expire soon, it returns the cached assertion.\n   * Otherwise, it obtains a new access token and creates a new client assertion.\n   * @returns A promise that resolves to the signed client assertion.\n   */\n  public async getSignedAssertion(): Promise<string> {\n    if (\n      this.clientAssertion !== undefined &&\n      !expiresWithinFiveMinutes(this.clientAssertion)\n    ) {\n      return this.clientAssertion.signedAssertion;\n    }\n\n    const accessToken = await this.credential.getToken(\n      'api://AzureADTokenExchange',\n    );\n\n    this.clientAssertion = {\n      signedAssertion: accessToken.token,\n      expiresOnTimestamp: accessToken.expiresOnTimestamp,\n    };\n\n    return accessToken.token;\n  }\n}\n"],"names":["ManagedIdentityCredential"],"mappings":";;;;AAsBA,MAAM,WAAA,GAAc,IAAI,EAAA,GAAK,GAAA;AAC7B,MAAM,2BAA2B,CAAC,eAAA,KAChC,gBAAgB,kBAAA,GAAqB,IAAA,CAAK,KAAI,IAAK,WAAA;AAM9C,MAAM,8BAAA,CAA+B;AAAA,EAClC,UAAA;AAAA,EACA,eAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,YAAY,OAAA,EAAiD;AAC3D,IAAA,IAAI,EAAE,QAAA,EAAS,GAAI,OAAA,IAAW,EAAC;AAC/B,IAAA,QAAA,KAAa,iBAAA;AAEb,IAAA,IAAA,CAAK,UAAA,GACH,aAAa,iBAAA,GACT,IAAIA,oCAA0B,GAC9B,IAAIA,mCAA0B,QAAQ,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,kBAAA,GAAsC;AACjD,IAAA,IACE,KAAK,eAAA,KAAoB,MAAA,IACzB,CAAC,wBAAA,CAAyB,IAAA,CAAK,eAAe,CAAA,EAC9C;AACA,MAAA,OAAO,KAAK,eAAA,CAAgB,eAAA;AAAA,IAC9B;AAEA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,MACxC;AAAA,KACF;AAEA,IAAA,IAAA,CAAK,eAAA,GAAkB;AAAA,MACrB,iBAAiB,WAAA,CAAY,KAAA;AAAA,MAC7B,oBAAoB,WAAA,CAAY;AAAA,KAClC;AAEA,IAAA,OAAO,WAAA,CAAY,KAAA;AAAA,EACrB;AACF;;;;"}
+{"version":3,"file":"ManagedIdentityClientAssertion.cjs.js","sources":["../../src/azure/ManagedIdentityClientAssertion.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { ManagedIdentityCredential } from '@azure/identity';\nimport { ClientAssertion } from './ClientAssertion';\n\nexport type ManagedIdentityClientAssertionOptions = {\n  clientId?: string;\n};\n\nconst fiveMinutes = 5 * 60 * 1000; // 5 minutes in milliseconds\nconst expiresWithinFiveMinutes = (clientAssertion: ClientAssertion) =>\n  clientAssertion.expiresOnTimestamp - Date.now() <= fiveMinutes;\n\n/**\n * Class representing a Managed Identity Client Assertion.\n * This class is responsible for obtaining a signed client assertion using Azure Managed Identity.\n */\nexport class ManagedIdentityClientAssertion {\n  private credential: ManagedIdentityCredential;\n  private clientAssertion?: ClientAssertion;\n\n  /**\n   * Creates an instance of ManagedIdentityClientAssertion.\n   * @param options - Optional parameters for the ManagedIdentityClientAssertion.\n   *                  - clientId: The client ID of the managed identity. If not provided, 'system-assigned' is used.\n   */\n  constructor(options?: ManagedIdentityClientAssertionOptions) {\n    let { clientId } = options || {};\n    clientId ??= 'system-assigned';\n\n    this.credential =\n      clientId === 'system-assigned'\n        ? new ManagedIdentityCredential()\n        : new ManagedIdentityCredential(clientId);\n  }\n\n  /**\n   * Gets a signed client assertion.\n   * If a valid client assertion is already cached which doesn't expire soon, it returns the cached assertion.\n   * Otherwise, it obtains a new access token and creates a new client assertion.\n   * @returns A promise that resolves to the signed client assertion.\n   */\n  public async getSignedAssertion(): Promise<string> {\n    if (\n      this.clientAssertion !== undefined &&\n      !expiresWithinFiveMinutes(this.clientAssertion)\n    ) {\n      return this.clientAssertion.signedAssertion;\n    }\n\n    const accessToken = await this.credential.getToken(\n      'api://AzureADTokenExchange',\n    );\n\n    this.clientAssertion = {\n      signedAssertion: accessToken.token,\n      expiresOnTimestamp: accessToken.expiresOnTimestamp,\n    };\n\n    return accessToken.token;\n  }\n}\n"],"names":["ManagedIdentityCredential"],"mappings":";;;;AAsBA,MAAM,WAAA,GAAc,IAAI,EAAA,GAAK,GAAA;AAC7B,MAAM,2BAA2B,CAAC,eAAA,KAChC,gBAAgB,kBAAA,GAAqB,IAAA,CAAK,KAAI,IAAK,WAAA;AAM9C,MAAM,8BAAA,CAA+B;AAAA,EAClC,UAAA;AAAA,EACA,eAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,YAAY,OAAA,EAAiD;AAC3D,IAAA,IAAI,EAAE,QAAA,EAAS,GAAI,OAAA,IAAW,EAAC;AAC/B,IAAA,QAAA,KAAa,iBAAA;AAEb,IAAA,IAAA,CAAK,UAAA,GACH,aAAa,iBAAA,GACT,IAAIA,oCAA0B,GAC9B,IAAIA,mCAA0B,QAAQ,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,kBAAA,GAAsC;AACjD,IAAA,IACE,KAAK,eAAA,KAAoB,MAAA,IACzB,CAAC,wBAAA,CAAyB,IAAA,CAAK,eAAe,CAAA,EAC9C;AACA,MAAA,OAAO,KAAK,eAAA,CAAgB,eAAA;AAAA,IAC9B;AAEA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,MACxC;AAAA,KACF;AAEA,IAAA,IAAA,CAAK,eAAA,GAAkB;AAAA,MACrB,iBAAiB,WAAA,CAAY,KAAA;AAAA,MAC7B,oBAAoB,WAAA,CAAY;AAAA,KAClC;AAEA,IAAA,OAAO,WAAA,CAAY,KAAA;AAAA,EACrB;AACF;;"}

package/dist/azure/ManagedIdentityClientAssertion.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"ManagedIdentityClientAssertion.esm.js","sources":["../../src/azure/ManagedIdentityClientAssertion.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { ManagedIdentityCredential } from '@azure/identity';\nimport { ClientAssertion } from './ClientAssertion';\n\nexport type ManagedIdentityClientAssertionOptions = {\n  clientId?: string;\n};\n\nconst fiveMinutes = 5 * 60 * 1000; // 5 minutes in milliseconds\nconst expiresWithinFiveMinutes = (clientAssertion: ClientAssertion) =>\n  clientAssertion.expiresOnTimestamp - Date.now() <= fiveMinutes;\n\n/**\n * Class representing a Managed Identity Client Assertion.\n * This class is responsible for obtaining a signed client assertion using Azure Managed Identity.\n */\nexport class ManagedIdentityClientAssertion {\n  private credential: ManagedIdentityCredential;\n  private clientAssertion?: ClientAssertion;\n\n  /**\n   * Creates an instance of ManagedIdentityClientAssertion.\n   * @param options - Optional parameters for the ManagedIdentityClientAssertion.\n   *                  - clientId: The client ID of the managed identity. If not provided, 'system-assigned' is used.\n   */\n  constructor(options?: ManagedIdentityClientAssertionOptions) {\n    let { clientId } = options || {};\n    clientId ??= 'system-assigned';\n\n    this.credential =\n      clientId === 'system-assigned'\n        ? new ManagedIdentityCredential()\n        : new ManagedIdentityCredential(clientId);\n  }\n\n  /**\n   * Gets a signed client assertion.\n   * If a valid client assertion is already cached which doesn't expire soon, it returns the cached assertion.\n   * Otherwise, it obtains a new access token and creates a new client assertion.\n   * @returns A promise that resolves to the signed client assertion.\n   */\n  public async getSignedAssertion(): Promise<string> {\n    if (\n      this.clientAssertion !== undefined &&\n      !expiresWithinFiveMinutes(this.clientAssertion)\n    ) {\n      return this.clientAssertion.signedAssertion;\n    }\n\n    const accessToken = await this.credential.getToken(\n      'api://AzureADTokenExchange',\n    );\n\n    this.clientAssertion = {\n      signedAssertion: accessToken.token,\n      expiresOnTimestamp: accessToken.expiresOnTimestamp,\n    };\n\n    return accessToken.token;\n  }\n}\n"],"names":[],"mappings":";;AAsBA,MAAM,WAAA,GAAc,IAAI,EAAA,GAAK,GAAA;AAC7B,MAAM,2BAA2B,CAAC,eAAA,KAChC,gBAAgB,kBAAA,GAAqB,IAAA,CAAK,KAAI,IAAK,WAAA;AAM9C,MAAM,8BAAA,CAA+B;AAAA,EAClC,UAAA;AAAA,EACA,eAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,YAAY,OAAA,EAAiD;AAC3D,IAAA,IAAI,EAAE,QAAA,EAAS,GAAI,OAAA,IAAW,EAAC;AAC/B,IAAA,QAAA,KAAa,iBAAA;AAEb,IAAA,IAAA,CAAK,UAAA,GACH,aAAa,iBAAA,GACT,IAAI,2BAA0B,GAC9B,IAAI,0BAA0B,QAAQ,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,kBAAA,GAAsC;AACjD,IAAA,IACE,KAAK,eAAA,KAAoB,MAAA,IACzB,CAAC,wBAAA,CAAyB,IAAA,CAAK,eAAe,CAAA,EAC9C;AACA,MAAA,OAAO,KAAK,eAAA,CAAgB,eAAA;AAAA,IAC9B;AAEA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,MACxC;AAAA,KACF;AAEA,IAAA,IAAA,CAAK,eAAA,GAAkB;AAAA,MACrB,iBAAiB,WAAA,CAAY,KAAA;AAAA,MAC7B,oBAAoB,WAAA,CAAY;AAAA,KAClC;AAEA,IAAA,OAAO,WAAA,CAAY,KAAA;AAAA,EACrB;AACF;;;;"}
+{"version":3,"file":"ManagedIdentityClientAssertion.esm.js","sources":["../../src/azure/ManagedIdentityClientAssertion.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { ManagedIdentityCredential } from '@azure/identity';\nimport { ClientAssertion } from './ClientAssertion';\n\nexport type ManagedIdentityClientAssertionOptions = {\n  clientId?: string;\n};\n\nconst fiveMinutes = 5 * 60 * 1000; // 5 minutes in milliseconds\nconst expiresWithinFiveMinutes = (clientAssertion: ClientAssertion) =>\n  clientAssertion.expiresOnTimestamp - Date.now() <= fiveMinutes;\n\n/**\n * Class representing a Managed Identity Client Assertion.\n * This class is responsible for obtaining a signed client assertion using Azure Managed Identity.\n */\nexport class ManagedIdentityClientAssertion {\n  private credential: ManagedIdentityCredential;\n  private clientAssertion?: ClientAssertion;\n\n  /**\n   * Creates an instance of ManagedIdentityClientAssertion.\n   * @param options - Optional parameters for the ManagedIdentityClientAssertion.\n   *                  - clientId: The client ID of the managed identity. If not provided, 'system-assigned' is used.\n   */\n  constructor(options?: ManagedIdentityClientAssertionOptions) {\n    let { clientId } = options || {};\n    clientId ??= 'system-assigned';\n\n    this.credential =\n      clientId === 'system-assigned'\n        ? new ManagedIdentityCredential()\n        : new ManagedIdentityCredential(clientId);\n  }\n\n  /**\n   * Gets a signed client assertion.\n   * If a valid client assertion is already cached which doesn't expire soon, it returns the cached assertion.\n   * Otherwise, it obtains a new access token and creates a new client assertion.\n   * @returns A promise that resolves to the signed client assertion.\n   */\n  public async getSignedAssertion(): Promise<string> {\n    if (\n      this.clientAssertion !== undefined &&\n      !expiresWithinFiveMinutes(this.clientAssertion)\n    ) {\n      return this.clientAssertion.signedAssertion;\n    }\n\n    const accessToken = await this.credential.getToken(\n      'api://AzureADTokenExchange',\n    );\n\n    this.clientAssertion = {\n      signedAssertion: accessToken.token,\n      expiresOnTimestamp: accessToken.expiresOnTimestamp,\n    };\n\n    return accessToken.token;\n  }\n}\n"],"names":[],"mappings":";;AAsBA,MAAM,WAAA,GAAc,IAAI,EAAA,GAAK,GAAA;AAC7B,MAAM,2BAA2B,CAAC,eAAA,KAChC,gBAAgB,kBAAA,GAAqB,IAAA,CAAK,KAAI,IAAK,WAAA;AAM9C,MAAM,8BAAA,CAA+B;AAAA,EAClC,UAAA;AAAA,EACA,eAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,YAAY,OAAA,EAAiD;AAC3D,IAAA,IAAI,EAAE,QAAA,EAAS,GAAI,OAAA,IAAW,EAAC;AAC/B,IAAA,QAAA,KAAa,iBAAA;AAEb,IAAA,IAAA,CAAK,UAAA,GACH,aAAa,iBAAA,GACT,IAAI,2BAA0B,GAC9B,IAAI,0BAA0B,QAAQ,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,kBAAA,GAAsC;AACjD,IAAA,IACE,KAAK,eAAA,KAAoB,MAAA,IACzB,CAAC,wBAAA,CAAyB,IAAA,CAAK,eAAe,CAAA,EAC9C;AACA,MAAA,OAAO,KAAK,eAAA,CAAgB,eAAA;AAAA,IAC9B;AAEA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,MACxC;AAAA,KACF;AAEA,IAAA,IAAA,CAAK,eAAA,GAAkB;AAAA,MACrB,iBAAiB,WAAA,CAAY,KAAA;AAAA,MAC7B,oBAAoB,WAAA,CAAY;AAAA,KAClC;AAEA,IAAA,OAAO,WAAA,CAAY,KAAA;AAAA,EACrB;AACF;;"}

package/dist/azure/config.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n\n  /**\n   * Signing key for commits\n   */\n  commitSigningKey?: string;\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity'\n  | 'ManagedIdentityClientAssertion';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A client assertion credential that uses a managed identity to generate a client assertion (JWT).\n * @public\n */\nexport type AzureManagedIdentityClientAssertionCredential =\n  AzureCredentialBase & {\n    kind: 'ManagedIdentityClientAssertion';\n    /**\n     * The Entra ID tenant\n     */\n    tenantId: string;\n\n    /**\n     * The client ID of the app registration you want to authenticate as.\n     */\n    clientId: string;\n\n    /**\n     * The client ID of the managed identity used to generate a client assertion (JWT).\n     * Set to \"system-assigned\" to automatically use the system-assigned managed identity.\n     * For user-assigned managed identities, specify the client ID of the managed identity you want to use.\n     */\n    managedIdentityClientId: 'system-assigned' | string;\n  };\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: 'system-assigned' | string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityClientAssertionCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityClientAssertionCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'managedIdentityClientId',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  [\n    'ManagedIdentityClientAssertion',\n    ['clientId', 'managedIdentityClientId', 'tenantId'],\n  ],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  deprecatedConfigCheck(config);\n\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  const credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId')?.trim(),\n        clientId: credential.getOptionalString('clientId')?.trim(),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n        managedIdentityClientId: credential\n          .getOptionalString('managedIdentityClientId')\n          ?.trim(),\n      };\n\n      return result;\n    });\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n    commitSigningKey: config.getOptionalString('commitSigningKey'),\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n\n/**\n * These config sections have been removed but to ensure they\n * don't leak sensitive tokens we have this check in place\n * to throw an error if found\n *\n * @internal\n * @deprecated To be removed at a later date\n */\nfunction deprecatedConfigCheck(config: Config) {\n  if (config.getOptional('credential') || config.getOptional('token')) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'token' have been removed. Use 'credentials' instead.`,\n    );\n  }\n}\n"],"names":["isValidHost"],"mappings":";;;;AAmBA,MAAM,UAAA,GAAa,eAAA;AA+InB,MAAM,2BAAA,GAA8B;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,yBAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAAA,CAGxC;AAAA,EACA,CAAC,cAAA,EAAgB,CAAC,UAAA,EAAY,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC;AAAA,IACE,gCAAA;AAAA,IACA,CAAC,UAAA,EAAY,yBAAA,EAA2B,UAAU;AAAA,GACpD;AAAA,EACA,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC;AACjD,CAAC,CAAA;AAED,SAAS,wBACP,UAAA,EACuB;AACvB,EAAA,KAAA,MAAW,KAAA,IAAS,6BAAA,CAA8B,OAAA,EAAQ,EAAG;AAC3D,IAAA,MAAM,CAAC,IAAA,EAAM,cAAc,CAAA,GAAI,KAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAAA,CAA4B,MAAA;AAAA,MAClD,CAAA,KAAA,KAAS,CAAC,cAAA,CAAe,QAAA,CAAS,KAAmC;AAAA,KACvE;AAEA,IAAA,IACE,cAAA,CAAe,KAAA,CAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,IAC7D,eAAA,CAAgB,MAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,EAC9D;AACA,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAA,CAAW,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAA,CAAO,CAAC,KAAK,KAAA,KAAU;AACvC,UAAA,GAAA,CAAI,KAAK,CAAA,GAAI,UAAA,CAAW,KAAK,CAAA;AAC7B,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAAyB;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAC7C;AAQO,SAAS,2BACd,MAAA,EACwB;AACxB,EAAA,qBAAA,CAAsB,MAAM,CAAA;AAE5B,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,iBAAA,CAAkB,MAAM,CAAA,IAAK,UAAA;AAEjD,EAAA,IAAI,CAACA,mBAAA,CAAY,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA;AAAA,KAC5C;AAAA,EACF;AAEA,EAAA,MAAM,oBAAoB,MAAA,CACvB,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAA,UAAA,KAAc;AAClB,IAAA,MAAM,MAAA,GAA6C;AAAA,MACjD,aAAA,EAAe,UAAA,CAAW,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAA,EAAqB,UAAA,CAClB,iBAAA,CAAkB,qBAAqB,GACtC,IAAA,EAAK;AAAA,MACT,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,YAAA,EAAc,UAAA,CAAW,iBAAA,CAAkB,cAAc,GAAG,IAAA,EAAK;AAAA,MACjE,uBAAA,EAAyB,UAAA,CACtB,iBAAA,CAAkB,yBAAyB,GAC1C,IAAA;AAAK,KACX;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,CAAC,CAAA;AAEH,EAAA,IAAI,WAAA,GAAmD,MAAA;AACvD,EAAA,IAAI,sBAAsB,MAAA,EAAW;AACnC,IAAA,MAAM,SAAS,iBAAA,EACX,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAA,KAAU;AACzC,MAAA,IAAI,KAAA,GAA4B,MAAA;AAChC,MAAA,IAAI;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA;AAAA,MAC1C,SAAS,CAAA,EAAG;AACV,QAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AAAA,MACZ;AAEA,MAAA,IAAI,UAAU,MAAA,EAAW;AACvB,QAAA,GAAA,CAAI,KAAK,CAAA,uBAAA,EAA0B,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,MACzD;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY,CAAA,CACpB,MAAA;AAAA,MACC,MAAA,CAAO,OAAA;AAAA,QACL,iBAAA,CACG,MAAA;AAAA,UACC,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,GAAS;AAAA,SACtC,CACC,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAA,KAAU;AAClC,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,IAAI,CAAC,GAAA,CAAI,YAAY,CAAA,EAAG;AACtB,cAAA,GAAA,CAAI,YAAY,IAAI,EAAC;AAAA,YACvB;AAEA,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAA,CAAK,KAAA,GAAQ,CAAC,CAAA;AAAA,UAClC,CAAC,CAAA;AAED,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAA8B;AAAA,QAElC,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,OAAO,CAAA,KAAM,OAAA,CAAQ,MAAA,GAAS,CAAC,EAC3C,MAAA,CAAO,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAA,KAAM;AAC/B,QAAA,GAAA,CAAI,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAA,CAAM,CAAA,EAAG,QAAQ,MAAA,GAAS,CAAC,CAAA,CAC3B,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAC,CAAA;AAAA,SAClD;AACA,QAAA,OAAO,GAAA;AAAA,MACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY;AAAA,KACzB;AAEF,IAAA,IAAI,MAAA,EAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACpE;AAAA,IACF;AAEA,IAAA,WAAA,GAAc,iBAAA,CAAkB,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB;AAAA,KAC1C;AAEA,IAAA,IACE,WAAA,CAAY,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAA,KAAS;AAAA,KACpC,IACA,SAAS,UAAA,EACT;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA;AAAA,OAC3H;AAAA,IACF;AAEA,IAAA,IACE,WAAA,CAAY,MAAA;AAAA,MACV,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,KAAW;AAAA,KACxC,CAAE,SAAS,CAAA,EACX;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA;AAAA,OAC9C;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,EAAkB,MAAA,CAAO,iBAAA,CAAkB,kBAAkB;AAAA,GAC/D;AACF;AASO,SAAS,4BACd,OAAA,EAC0B;AAE1B,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAA,CAAO,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,UAAU,CAAA,EAAG;AAC5C,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,EAAY,CAAA;AAAA,EAClC;AAEA,EAAA,OAAO,MAAA;AACT;AAUA,SAAS,sBAAsB,MAAA,EAAgB;AAC7C,EAAA,IAAI,OAAO,WAAA,CAAY,YAAY,KAAK,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,wGAAA;AAAA,KACF;AAAA,EACF;AACF;;;;;"}
+{"version":3,"file":"config.cjs.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n\n  /**\n   * Signing key for commits\n   */\n  commitSigningKey?: string;\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity'\n  | 'ManagedIdentityClientAssertion';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A client assertion credential that uses a managed identity to generate a client assertion (JWT).\n * @public\n */\nexport type AzureManagedIdentityClientAssertionCredential =\n  AzureCredentialBase & {\n    kind: 'ManagedIdentityClientAssertion';\n    /**\n     * The Entra ID tenant\n     */\n    tenantId: string;\n\n    /**\n     * The client ID of the app registration you want to authenticate as.\n     */\n    clientId: string;\n\n    /**\n     * The client ID of the managed identity used to generate a client assertion (JWT).\n     * Set to \"system-assigned\" to automatically use the system-assigned managed identity.\n     * For user-assigned managed identities, specify the client ID of the managed identity you want to use.\n     */\n    managedIdentityClientId: 'system-assigned' | string;\n  };\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: 'system-assigned' | string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityClientAssertionCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityClientAssertionCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'managedIdentityClientId',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  [\n    'ManagedIdentityClientAssertion',\n    ['clientId', 'managedIdentityClientId', 'tenantId'],\n  ],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  deprecatedConfigCheck(config);\n\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  const credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId')?.trim(),\n        clientId: credential.getOptionalString('clientId')?.trim(),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n        managedIdentityClientId: credential\n          .getOptionalString('managedIdentityClientId')\n          ?.trim(),\n      };\n\n      return result;\n    });\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n    commitSigningKey: config.getOptionalString('commitSigningKey'),\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n\n/**\n * These config sections have been removed but to ensure they\n * don't leak sensitive tokens we have this check in place\n * to throw an error if found\n *\n * @internal\n * @deprecated To be removed at a later date\n */\nfunction deprecatedConfigCheck(config: Config) {\n  if (config.getOptional('credential') || config.getOptional('token')) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'token' have been removed. Use 'credentials' instead.`,\n    );\n  }\n}\n"],"names":["isValidHost"],"mappings":";;;;AAmBA,MAAM,UAAA,GAAa,eAAA;AA+InB,MAAM,2BAAA,GAA8B;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,yBAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAAA,CAGxC;AAAA,EACA,CAAC,cAAA,EAAgB,CAAC,UAAA,EAAY,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC;AAAA,IACE,gCAAA;AAAA,IACA,CAAC,UAAA,EAAY,yBAAA,EAA2B,UAAU;AAAA,GACpD;AAAA,EACA,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC;AACjD,CAAC,CAAA;AAED,SAAS,wBACP,UAAA,EACuB;AACvB,EAAA,KAAA,MAAW,KAAA,IAAS,6BAAA,CAA8B,OAAA,EAAQ,EAAG;AAC3D,IAAA,MAAM,CAAC,IAAA,EAAM,cAAc,CAAA,GAAI,KAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAAA,CAA4B,MAAA;AAAA,MAClD,CAAA,KAAA,KAAS,CAAC,cAAA,CAAe,QAAA,CAAS,KAAmC;AAAA,KACvE;AAEA,IAAA,IACE,cAAA,CAAe,KAAA,CAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,IAC7D,eAAA,CAAgB,MAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,EAC9D;AACA,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAA,CAAW,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAA,CAAO,CAAC,KAAK,KAAA,KAAU;AACvC,UAAA,GAAA,CAAI,KAAK,CAAA,GAAI,UAAA,CAAW,KAAK,CAAA;AAC7B,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAAyB;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAC7C;AAQO,SAAS,2BACd,MAAA,EACwB;AACxB,EAAA,qBAAA,CAAsB,MAAM,CAAA;AAE5B,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,iBAAA,CAAkB,MAAM,CAAA,IAAK,UAAA;AAEjD,EAAA,IAAI,CAACA,mBAAA,CAAY,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA;AAAA,KAC5C;AAAA,EACF;AAEA,EAAA,MAAM,oBAAoB,MAAA,CACvB,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAA,UAAA,KAAc;AAClB,IAAA,MAAM,MAAA,GAA6C;AAAA,MACjD,aAAA,EAAe,UAAA,CAAW,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAA,EAAqB,UAAA,CAClB,iBAAA,CAAkB,qBAAqB,GACtC,IAAA,EAAK;AAAA,MACT,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,YAAA,EAAc,UAAA,CAAW,iBAAA,CAAkB,cAAc,GAAG,IAAA,EAAK;AAAA,MACjE,uBAAA,EAAyB,UAAA,CACtB,iBAAA,CAAkB,yBAAyB,GAC1C,IAAA;AAAK,KACX;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,CAAC,CAAA;AAEH,EAAA,IAAI,WAAA,GAAmD,MAAA;AACvD,EAAA,IAAI,sBAAsB,MAAA,EAAW;AACnC,IAAA,MAAM,SAAS,iBAAA,EACX,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAA,KAAU;AACzC,MAAA,IAAI,KAAA,GAA4B,MAAA;AAChC,MAAA,IAAI;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA;AAAA,MAC1C,SAAS,CAAA,EAAG;AACV,QAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AAAA,MACZ;AAEA,MAAA,IAAI,UAAU,MAAA,EAAW;AACvB,QAAA,GAAA,CAAI,KAAK,CAAA,uBAAA,EAA0B,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,MACzD;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY,CAAA,CACpB,MAAA;AAAA,MACC,MAAA,CAAO,OAAA;AAAA,QACL,iBAAA,CACG,MAAA;AAAA,UACC,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,GAAS;AAAA,SACtC,CACC,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAA,KAAU;AAClC,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,IAAI,CAAC,GAAA,CAAI,YAAY,CAAA,EAAG;AACtB,cAAA,GAAA,CAAI,YAAY,IAAI,EAAC;AAAA,YACvB;AAEA,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAA,CAAK,KAAA,GAAQ,CAAC,CAAA;AAAA,UAClC,CAAC,CAAA;AAED,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAA8B;AAAA,QAElC,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,OAAO,CAAA,KAAM,OAAA,CAAQ,MAAA,GAAS,CAAC,EAC3C,MAAA,CAAO,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAA,KAAM;AAC/B,QAAA,GAAA,CAAI,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAA,CAAM,CAAA,EAAG,QAAQ,MAAA,GAAS,CAAC,CAAA,CAC3B,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAC,CAAA;AAAA,SAClD;AACA,QAAA,OAAO,GAAA;AAAA,MACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY;AAAA,KACzB;AAEF,IAAA,IAAI,MAAA,EAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACpE;AAAA,IACF;AAEA,IAAA,WAAA,GAAc,iBAAA,CAAkB,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB;AAAA,KAC1C;AAEA,IAAA,IACE,WAAA,CAAY,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAA,KAAS;AAAA,KACpC,IACA,SAAS,UAAA,EACT;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA;AAAA,OAC3H;AAAA,IACF;AAEA,IAAA,IACE,WAAA,CAAY,MAAA;AAAA,MACV,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,KAAW;AAAA,KACxC,CAAE,SAAS,CAAA,EACX;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA;AAAA,OAC9C;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,EAAkB,MAAA,CAAO,iBAAA,CAAkB,kBAAkB;AAAA,GAC/D;AACF;AASO,SAAS,4BACd,OAAA,EAC0B;AAE1B,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAA,CAAO,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,UAAU,CAAA,EAAG;AAC5C,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,EAAY,CAAA;AAAA,EAClC;AAEA,EAAA,OAAO,MAAA;AACT;AAUA,SAAS,sBAAsB,MAAA,EAAgB;AAC7C,EAAA,IAAI,OAAO,WAAA,CAAY,YAAY,KAAK,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,wGAAA;AAAA,KACF;AAAA,EACF;AACF;;;"}

package/dist/azure/config.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.esm.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n\n  /**\n   * Signing key for commits\n   */\n  commitSigningKey?: string;\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity'\n  | 'ManagedIdentityClientAssertion';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A client assertion credential that uses a managed identity to generate a client assertion (JWT).\n * @public\n */\nexport type AzureManagedIdentityClientAssertionCredential =\n  AzureCredentialBase & {\n    kind: 'ManagedIdentityClientAssertion';\n    /**\n     * The Entra ID tenant\n     */\n    tenantId: string;\n\n    /**\n     * The client ID of the app registration you want to authenticate as.\n     */\n    clientId: string;\n\n    /**\n     * The client ID of the managed identity used to generate a client assertion (JWT).\n     * Set to \"system-assigned\" to automatically use the system-assigned managed identity.\n     * For user-assigned managed identities, specify the client ID of the managed identity you want to use.\n     */\n    managedIdentityClientId: 'system-assigned' | string;\n  };\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: 'system-assigned' | string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityClientAssertionCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityClientAssertionCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'managedIdentityClientId',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  [\n    'ManagedIdentityClientAssertion',\n    ['clientId', 'managedIdentityClientId', 'tenantId'],\n  ],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  deprecatedConfigCheck(config);\n\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  const credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId')?.trim(),\n        clientId: credential.getOptionalString('clientId')?.trim(),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n        managedIdentityClientId: credential\n          .getOptionalString('managedIdentityClientId')\n          ?.trim(),\n      };\n\n      return result;\n    });\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n    commitSigningKey: config.getOptionalString('commitSigningKey'),\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n\n/**\n * These config sections have been removed but to ensure they\n * don't leak sensitive tokens we have this check in place\n * to throw an error if found\n *\n * @internal\n * @deprecated To be removed at a later date\n */\nfunction deprecatedConfigCheck(config: Config) {\n  if (config.getOptional('credential') || config.getOptional('token')) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'token' have been removed. Use 'credentials' instead.`,\n    );\n  }\n}\n"],"names":[],"mappings":";;AAmBA,MAAM,UAAA,GAAa,eAAA;AA+InB,MAAM,2BAAA,GAA8B;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,yBAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAAA,CAGxC;AAAA,EACA,CAAC,cAAA,EAAgB,CAAC,UAAA,EAAY,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC;AAAA,IACE,gCAAA;AAAA,IACA,CAAC,UAAA,EAAY,yBAAA,EAA2B,UAAU;AAAA,GACpD;AAAA,EACA,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC;AACjD,CAAC,CAAA;AAED,SAAS,wBACP,UAAA,EACuB;AACvB,EAAA,KAAA,MAAW,KAAA,IAAS,6BAAA,CAA8B,OAAA,EAAQ,EAAG;AAC3D,IAAA,MAAM,CAAC,IAAA,EAAM,cAAc,CAAA,GAAI,KAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAAA,CAA4B,MAAA;AAAA,MAClD,CAAA,KAAA,KAAS,CAAC,cAAA,CAAe,QAAA,CAAS,KAAmC;AAAA,KACvE;AAEA,IAAA,IACE,cAAA,CAAe,KAAA,CAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,IAC7D,eAAA,CAAgB,MAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,EAC9D;AACA,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAA,CAAW,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAA,CAAO,CAAC,KAAK,KAAA,KAAU;AACvC,UAAA,GAAA,CAAI,KAAK,CAAA,GAAI,UAAA,CAAW,KAAK,CAAA;AAC7B,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAAyB;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAC7C;AAQO,SAAS,2BACd,MAAA,EACwB;AACxB,EAAA,qBAAA,CAAsB,MAAM,CAAA;AAE5B,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,iBAAA,CAAkB,MAAM,CAAA,IAAK,UAAA;AAEjD,EAAA,IAAI,CAAC,WAAA,CAAY,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA;AAAA,KAC5C;AAAA,EACF;AAEA,EAAA,MAAM,oBAAoB,MAAA,CACvB,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAA,UAAA,KAAc;AAClB,IAAA,MAAM,MAAA,GAA6C;AAAA,MACjD,aAAA,EAAe,UAAA,CAAW,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAA,EAAqB,UAAA,CAClB,iBAAA,CAAkB,qBAAqB,GACtC,IAAA,EAAK;AAAA,MACT,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,YAAA,EAAc,UAAA,CAAW,iBAAA,CAAkB,cAAc,GAAG,IAAA,EAAK;AAAA,MACjE,uBAAA,EAAyB,UAAA,CACtB,iBAAA,CAAkB,yBAAyB,GAC1C,IAAA;AAAK,KACX;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,CAAC,CAAA;AAEH,EAAA,IAAI,WAAA,GAAmD,MAAA;AACvD,EAAA,IAAI,sBAAsB,MAAA,EAAW;AACnC,IAAA,MAAM,SAAS,iBAAA,EACX,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAA,KAAU;AACzC,MAAA,IAAI,KAAA,GAA4B,MAAA;AAChC,MAAA,IAAI;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA;AAAA,MAC1C,SAAS,CAAA,EAAG;AACV,QAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AAAA,MACZ;AAEA,MAAA,IAAI,UAAU,MAAA,EAAW;AACvB,QAAA,GAAA,CAAI,KAAK,CAAA,uBAAA,EAA0B,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,MACzD;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY,CAAA,CACpB,MAAA;AAAA,MACC,MAAA,CAAO,OAAA;AAAA,QACL,iBAAA,CACG,MAAA;AAAA,UACC,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,GAAS;AAAA,SACtC,CACC,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAA,KAAU;AAClC,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,IAAI,CAAC,GAAA,CAAI,YAAY,CAAA,EAAG;AACtB,cAAA,GAAA,CAAI,YAAY,IAAI,EAAC;AAAA,YACvB;AAEA,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAA,CAAK,KAAA,GAAQ,CAAC,CAAA;AAAA,UAClC,CAAC,CAAA;AAED,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAA8B;AAAA,QAElC,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,OAAO,CAAA,KAAM,OAAA,CAAQ,MAAA,GAAS,CAAC,EAC3C,MAAA,CAAO,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAA,KAAM;AAC/B,QAAA,GAAA,CAAI,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAA,CAAM,CAAA,EAAG,QAAQ,MAAA,GAAS,CAAC,CAAA,CAC3B,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAC,CAAA;AAAA,SAClD;AACA,QAAA,OAAO,GAAA;AAAA,MACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY;AAAA,KACzB;AAEF,IAAA,IAAI,MAAA,EAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACpE;AAAA,IACF;AAEA,IAAA,WAAA,GAAc,iBAAA,CAAkB,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB;AAAA,KAC1C;AAEA,IAAA,IACE,WAAA,CAAY,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAA,KAAS;AAAA,KACpC,IACA,SAAS,UAAA,EACT;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA;AAAA,OAC3H;AAAA,IACF;AAEA,IAAA,IACE,WAAA,CAAY,MAAA;AAAA,MACV,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,KAAW;AAAA,KACxC,CAAE,SAAS,CAAA,EACX;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA;AAAA,OAC9C;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,EAAkB,MAAA,CAAO,iBAAA,CAAkB,kBAAkB;AAAA,GAC/D;AACF;AASO,SAAS,4BACd,OAAA,EAC0B;AAE1B,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAA,CAAO,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,UAAU,CAAA,EAAG;AAC5C,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,EAAY,CAAA;AAAA,EAClC;AAEA,EAAA,OAAO,MAAA;AACT;AAUA,SAAS,sBAAsB,MAAA,EAAgB;AAC7C,EAAA,IAAI,OAAO,WAAA,CAAY,YAAY,KAAK,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,wGAAA;AAAA,KACF;AAAA,EACF;AACF;;;;"}
+{"version":3,"file":"config.esm.js","sources":["../../src/azure/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { Config } from '@backstage/config';\nimport { isValidHost } from '../helpers';\n\nconst AZURE_HOST = 'dev.azure.com';\n\n/**\n * The configuration parameters for a single Azure provider.\n *\n * @public\n */\nexport type AzureIntegrationConfig = {\n  /**\n   * The host of the target that this matches on, e.g. \"dev.azure.com\".\n   *\n   * Currently only \"dev.azure.com\" is supported.\n   */\n  host: string;\n\n  /**\n   * The credentials to use for requests. If multiple credentials are specified the first one that matches the organization is used.\n   * If not organization matches the first credential without an organization is used.\n   *\n   * If no credentials are specified at all, either a default credential (for Azure DevOps) or anonymous access (for Azure DevOps Server) is used.\n   */\n  credentials?: AzureDevOpsCredential[];\n\n  /**\n   * Signing key for commits\n   */\n  commitSigningKey?: string;\n};\n\n/**\n * The kind of Azure DevOps credential.\n * @public\n */\nexport type AzureDevOpsCredentialKind =\n  | 'PersonalAccessToken'\n  | 'ClientSecret'\n  | 'ManagedIdentity'\n  | 'ManagedIdentityClientAssertion';\n\n/**\n * Common fields for the Azure DevOps credentials.\n * @public\n */\nexport type AzureCredentialBase = {\n  /**\n   * The kind of credential.\n   */\n  kind: AzureDevOpsCredentialKind;\n  /**\n   * The Azure DevOps organizations for which to use this credential.\n   */\n  organizations?: string[];\n};\n\n/**\n * A client secret credential that was generated for an App Registration.\n * @public\n */\nexport type AzureClientSecretCredential = AzureCredentialBase & {\n  kind: 'ClientSecret';\n  /**\n   * The Entra ID tenant\n   */\n  tenantId: string;\n  /**\n   * The client id\n   */\n  clientId: string;\n\n  /**\n   * The client secret\n   */\n  clientSecret: string;\n};\n\n/**\n * A client assertion credential that uses a managed identity to generate a client assertion (JWT).\n * @public\n */\nexport type AzureManagedIdentityClientAssertionCredential =\n  AzureCredentialBase & {\n    kind: 'ManagedIdentityClientAssertion';\n    /**\n     * The Entra ID tenant\n     */\n    tenantId: string;\n\n    /**\n     * The client ID of the app registration you want to authenticate as.\n     */\n    clientId: string;\n\n    /**\n     * The client ID of the managed identity used to generate a client assertion (JWT).\n     * Set to \"system-assigned\" to automatically use the system-assigned managed identity.\n     * For user-assigned managed identities, specify the client ID of the managed identity you want to use.\n     */\n    managedIdentityClientId: 'system-assigned' | string;\n  };\n\n/**\n * A managed identity credential.\n * @public\n */\nexport type AzureManagedIdentityCredential = AzureCredentialBase & {\n  kind: 'ManagedIdentity';\n  /**\n   * The clientId\n   */\n  clientId: 'system-assigned' | string;\n};\n\n/**\n * A personal access token credential.\n * @public\n */\nexport type PersonalAccessTokenCredential = AzureCredentialBase & {\n  kind: 'PersonalAccessToken';\n  personalAccessToken: string;\n};\n\n/**\n * The general shape of a credential that can be used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredentialLike = Omit<\n  Partial<AzureClientSecretCredential> &\n    Partial<AzureManagedIdentityClientAssertionCredential> &\n    Partial<AzureManagedIdentityCredential> &\n    Partial<PersonalAccessTokenCredential>,\n  'kind'\n>;\n\n/**\n * Credential used to authenticate to Azure DevOps.\n * @public\n */\nexport type AzureDevOpsCredential =\n  | AzureClientSecretCredential\n  | AzureManagedIdentityClientAssertionCredential\n  | AzureManagedIdentityCredential\n  | PersonalAccessTokenCredential;\n\nconst AzureDevOpsCredentialFields = [\n  'clientId',\n  'clientSecret',\n  'managedIdentityClientId',\n  'tenantId',\n  'personalAccessToken',\n] as const;\ntype AzureDevOpsCredentialField = (typeof AzureDevOpsCredentialFields)[number];\n\nconst AzureDevopsCredentialFieldMap = new Map<\n  AzureDevOpsCredentialKind,\n  AzureDevOpsCredentialField[]\n>([\n  ['ClientSecret', ['clientId', 'clientSecret', 'tenantId']],\n  ['ManagedIdentity', ['clientId']],\n  [\n    'ManagedIdentityClientAssertion',\n    ['clientId', 'managedIdentityClientId', 'tenantId'],\n  ],\n  ['PersonalAccessToken', ['personalAccessToken']],\n]);\n\nfunction asAzureDevOpsCredential(\n  credential: AzureDevOpsCredentialLike,\n): AzureDevOpsCredential {\n  for (const entry of AzureDevopsCredentialFieldMap.entries()) {\n    const [kind, requiredFields] = entry;\n\n    const forbiddenFields = AzureDevOpsCredentialFields.filter(\n      field => !requiredFields.includes(field as AzureDevOpsCredentialField),\n    );\n\n    if (\n      requiredFields.every(field => credential[field] !== undefined) &&\n      forbiddenFields.every(field => credential[field] === undefined)\n    ) {\n      return {\n        kind,\n        organizations: credential.organizations,\n        ...requiredFields.reduce((acc, field) => {\n          acc[field] = credential[field];\n          return acc;\n        }, {} as Record<string, any>),\n      } as AzureDevOpsCredential;\n    }\n  }\n  throw new Error('is not a valid credential');\n}\n\n/**\n * Reads a single Azure integration config.\n *\n * @param config - The config object of a single integration\n * @public\n */\nexport function readAzureIntegrationConfig(\n  config: Config,\n): AzureIntegrationConfig {\n  deprecatedConfigCheck(config);\n\n  const host = config.getOptionalString('host') ?? AZURE_HOST;\n\n  if (!isValidHost(host)) {\n    throw new Error(\n      `Invalid Azure integration config, '${host}' is not a valid host`,\n    );\n  }\n\n  const credentialConfigs = config\n    .getOptionalConfigArray('credentials')\n    ?.map(credential => {\n      const result: Partial<AzureDevOpsCredentialLike> = {\n        organizations: credential.getOptionalStringArray('organizations'),\n        personalAccessToken: credential\n          .getOptionalString('personalAccessToken')\n          ?.trim(),\n        tenantId: credential.getOptionalString('tenantId')?.trim(),\n        clientId: credential.getOptionalString('clientId')?.trim(),\n        clientSecret: credential.getOptionalString('clientSecret')?.trim(),\n        managedIdentityClientId: credential\n          .getOptionalString('managedIdentityClientId')\n          ?.trim(),\n      };\n\n      return result;\n    });\n\n  let credentials: AzureDevOpsCredential[] | undefined = undefined;\n  if (credentialConfigs !== undefined) {\n    const errors = credentialConfigs\n      ?.reduce((acc, credentialConfig, index) => {\n        let error: string | undefined = undefined;\n        try {\n          asAzureDevOpsCredential(credentialConfig);\n        } catch (e) {\n          error = e.message;\n        }\n\n        if (error !== undefined) {\n          acc.push(`credential at position ${index + 1} ${error}`);\n        }\n\n        return acc;\n      }, Array.of<string>())\n      .concat(\n        Object.entries(\n          credentialConfigs\n            .filter(\n              credential =>\n                credential.organizations !== undefined &&\n                credential.organizations.length > 0,\n            )\n            .reduce((acc, credential, index) => {\n              credential.organizations?.forEach(organization => {\n                if (!acc[organization]) {\n                  acc[organization] = [];\n                }\n\n                acc[organization].push(index + 1);\n              });\n\n              return acc;\n            }, {} as Record<string, number[]>),\n        )\n          .filter(([_, indexes]) => indexes.length > 1)\n          .reduce((acc, [org, indexes]) => {\n            acc.push(\n              `organization ${org} is specified multiple times in credentials at positions ${indexes\n                .slice(0, indexes.length - 1)\n                .join(', ')} and ${indexes[indexes.length - 1]}`,\n            );\n            return acc;\n          }, Array.of<string>()),\n      );\n\n    if (errors?.length > 0) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}: ${errors.join('; ')}`,\n      );\n    }\n\n    credentials = credentialConfigs.map(credentialConfig =>\n      asAzureDevOpsCredential(credentialConfig),\n    );\n\n    if (\n      credentials.some(\n        credential => credential.kind !== 'PersonalAccessToken',\n      ) &&\n      host !== AZURE_HOST\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, only personal access tokens can be used with hosts other than ${AZURE_HOST}`,\n      );\n    }\n\n    if (\n      credentials.filter(\n        credential =>\n          credential.organizations === undefined ||\n          credential.organizations.length === 0,\n      ).length > 1\n    ) {\n      throw new Error(\n        `Invalid Azure integration config for ${host}, you cannot specify multiple credentials without organizations`,\n      );\n    }\n  }\n\n  return {\n    host,\n    credentials,\n    commitSigningKey: config.getOptionalString('commitSigningKey'),\n  };\n}\n\n/**\n * Reads a set of Azure integration configs, and inserts some defaults for\n * public Azure if not specified.\n *\n * @param configs - All of the integration config objects\n * @public\n */\nexport function readAzureIntegrationConfigs(\n  configs: Config[],\n): AzureIntegrationConfig[] {\n  // First read all the explicit integrations\n  const result = configs.map(readAzureIntegrationConfig);\n\n  // If no explicit dev.azure.com integration was added, put one in the list as\n  // a convenience\n  if (!result.some(c => c.host === AZURE_HOST)) {\n    result.push({ host: AZURE_HOST });\n  }\n\n  return result;\n}\n\n/**\n * These config sections have been removed but to ensure they\n * don't leak sensitive tokens we have this check in place\n * to throw an error if found\n *\n * @internal\n * @deprecated To be removed at a later date\n */\nfunction deprecatedConfigCheck(config: Config) {\n  if (config.getOptional('credential') || config.getOptional('token')) {\n    throw new Error(\n      `Invalid Azure integration config, 'credential' and 'token' have been removed. Use 'credentials' instead.`,\n    );\n  }\n}\n"],"names":[],"mappings":";;AAmBA,MAAM,UAAA,GAAa,eAAA;AA+InB,MAAM,2BAAA,GAA8B;AAAA,EAClC,UAAA;AAAA,EACA,cAAA;AAAA,EACA,yBAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,MAAM,6BAAA,uBAAoC,GAAA,CAGxC;AAAA,EACA,CAAC,cAAA,EAAgB,CAAC,UAAA,EAAY,cAAA,EAAgB,UAAU,CAAC,CAAA;AAAA,EACzD,CAAC,iBAAA,EAAmB,CAAC,UAAU,CAAC,CAAA;AAAA,EAChC;AAAA,IACE,gCAAA;AAAA,IACA,CAAC,UAAA,EAAY,yBAAA,EAA2B,UAAU;AAAA,GACpD;AAAA,EACA,CAAC,qBAAA,EAAuB,CAAC,qBAAqB,CAAC;AACjD,CAAC,CAAA;AAED,SAAS,wBACP,UAAA,EACuB;AACvB,EAAA,KAAA,MAAW,KAAA,IAAS,6BAAA,CAA8B,OAAA,EAAQ,EAAG;AAC3D,IAAA,MAAM,CAAC,IAAA,EAAM,cAAc,CAAA,GAAI,KAAA;AAE/B,IAAA,MAAM,kBAAkB,2BAAA,CAA4B,MAAA;AAAA,MAClD,CAAA,KAAA,KAAS,CAAC,cAAA,CAAe,QAAA,CAAS,KAAmC;AAAA,KACvE;AAEA,IAAA,IACE,cAAA,CAAe,KAAA,CAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,IAC7D,eAAA,CAAgB,MAAM,CAAA,KAAA,KAAS,UAAA,CAAW,KAAK,CAAA,KAAM,MAAS,CAAA,EAC9D;AACA,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,eAAe,UAAA,CAAW,aAAA;AAAA,QAC1B,GAAG,cAAA,CAAe,MAAA,CAAO,CAAC,KAAK,KAAA,KAAU;AACvC,UAAA,GAAA,CAAI,KAAK,CAAA,GAAI,UAAA,CAAW,KAAK,CAAA;AAC7B,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAAyB;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAC7C;AAQO,SAAS,2BACd,MAAA,EACwB;AACxB,EAAA,qBAAA,CAAsB,MAAM,CAAA;AAE5B,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,iBAAA,CAAkB,MAAM,CAAA,IAAK,UAAA;AAEjD,EAAA,IAAI,CAAC,WAAA,CAAY,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,sCAAsC,IAAI,CAAA,qBAAA;AAAA,KAC5C;AAAA,EACF;AAEA,EAAA,MAAM,oBAAoB,MAAA,CACvB,sBAAA,CAAuB,aAAa,CAAA,EACnC,IAAI,CAAA,UAAA,KAAc;AAClB,IAAA,MAAM,MAAA,GAA6C;AAAA,MACjD,aAAA,EAAe,UAAA,CAAW,sBAAA,CAAuB,eAAe,CAAA;AAAA,MAChE,mBAAA,EAAqB,UAAA,CAClB,iBAAA,CAAkB,qBAAqB,GACtC,IAAA,EAAK;AAAA,MACT,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,QAAA,EAAU,UAAA,CAAW,iBAAA,CAAkB,UAAU,GAAG,IAAA,EAAK;AAAA,MACzD,YAAA,EAAc,UAAA,CAAW,iBAAA,CAAkB,cAAc,GAAG,IAAA,EAAK;AAAA,MACjE,uBAAA,EAAyB,UAAA,CACtB,iBAAA,CAAkB,yBAAyB,GAC1C,IAAA;AAAK,KACX;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,CAAC,CAAA;AAEH,EAAA,IAAI,WAAA,GAAmD,MAAA;AACvD,EAAA,IAAI,sBAAsB,MAAA,EAAW;AACnC,IAAA,MAAM,SAAS,iBAAA,EACX,MAAA,CAAO,CAAC,GAAA,EAAK,kBAAkB,KAAA,KAAU;AACzC,MAAA,IAAI,KAAA,GAA4B,MAAA;AAChC,MAAA,IAAI;AACF,QAAA,uBAAA,CAAwB,gBAAgB,CAAA;AAAA,MAC1C,SAAS,CAAA,EAAG;AACV,QAAA,KAAA,GAAQ,CAAA,CAAE,OAAA;AAAA,MACZ;AAEA,MAAA,IAAI,UAAU,MAAA,EAAW;AACvB,QAAA,GAAA,CAAI,KAAK,CAAA,uBAAA,EAA0B,KAAA,GAAQ,CAAC,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,MACzD;AAEA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY,CAAA,CACpB,MAAA;AAAA,MACC,MAAA,CAAO,OAAA;AAAA,QACL,iBAAA,CACG,MAAA;AAAA,UACC,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,GAAS;AAAA,SACtC,CACC,MAAA,CAAO,CAAC,GAAA,EAAK,YAAY,KAAA,KAAU;AAClC,UAAA,UAAA,CAAW,aAAA,EAAe,QAAQ,CAAA,YAAA,KAAgB;AAChD,YAAA,IAAI,CAAC,GAAA,CAAI,YAAY,CAAA,EAAG;AACtB,cAAA,GAAA,CAAI,YAAY,IAAI,EAAC;AAAA,YACvB;AAEA,YAAA,GAAA,CAAI,YAAY,CAAA,CAAE,IAAA,CAAK,KAAA,GAAQ,CAAC,CAAA;AAAA,UAClC,CAAC,CAAA;AAED,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAA8B;AAAA,QAElC,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,OAAO,CAAA,KAAM,OAAA,CAAQ,MAAA,GAAS,CAAC,EAC3C,MAAA,CAAO,CAAC,KAAK,CAAC,GAAA,EAAK,OAAO,CAAA,KAAM;AAC/B,QAAA,GAAA,CAAI,IAAA;AAAA,UACF,gBAAgB,GAAG,CAAA,yDAAA,EAA4D,QAC5E,KAAA,CAAM,CAAA,EAAG,QAAQ,MAAA,GAAS,CAAC,CAAA,CAC3B,IAAA,CAAK,IAAI,CAAC,CAAA,KAAA,EAAQ,QAAQ,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAC,CAAA;AAAA,SAClD;AACA,QAAA,OAAO,GAAA;AAAA,MACT,CAAA,EAAG,KAAA,CAAM,EAAA,EAAY;AAAA,KACzB;AAEF,IAAA,IAAI,MAAA,EAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,EAAA,EAAK,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACpE;AAAA,IACF;AAEA,IAAA,WAAA,GAAc,iBAAA,CAAkB,GAAA;AAAA,MAAI,CAAA,gBAAA,KAClC,wBAAwB,gBAAgB;AAAA,KAC1C;AAEA,IAAA,IACE,WAAA,CAAY,IAAA;AAAA,MACV,CAAA,UAAA,KAAc,WAAW,IAAA,KAAS;AAAA,KACpC,IACA,SAAS,UAAA,EACT;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,IAAI,CAAA,gEAAA,EAAmE,UAAU,CAAA;AAAA,OAC3H;AAAA,IACF;AAEA,IAAA,IACE,WAAA,CAAY,MAAA;AAAA,MACV,gBACE,UAAA,CAAW,aAAA,KAAkB,MAAA,IAC7B,UAAA,CAAW,cAAc,MAAA,KAAW;AAAA,KACxC,CAAE,SAAS,CAAA,EACX;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,wCAAwC,IAAI,CAAA,+DAAA;AAAA,OAC9C;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,EAAkB,MAAA,CAAO,iBAAA,CAAkB,kBAAkB;AAAA,GAC/D;AACF;AASO,SAAS,4BACd,OAAA,EAC0B;AAE1B,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAIrD,EAAA,IAAI,CAAC,MAAA,CAAO,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,UAAU,CAAA,EAAG;AAC5C,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,EAAY,CAAA;AAAA,EAClC;AAEA,EAAA,OAAO,MAAA;AACT;AAUA,SAAS,sBAAsB,MAAA,EAAgB;AAC7C,EAAA,IAAI,OAAO,WAAA,CAAY,YAAY,KAAK,MAAA,CAAO,WAAA,CAAY,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,wGAAA;AAAA,KACF;AAAA,EACF;AACF;;"}

package/dist/azure/core.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.cjs.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\nexport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":["AzureUrl"],"mappings":";;;;AAiCO,SAAS,qBAAqB,GAAA,EAAqB;AACxD,EAAA,OAAOA,iBAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,SAAA,EAAU;AAC7C;AASO,SAAS,oBAAoB,GAAA,EAAqB;AACvD,EAAA,OAAOA,iBAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;AAQO,SAAS,mBAAmB,GAAA,EAAqB;AACtD,EAAA,OAAOA,iBAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;;;;;;"}
+{"version":3,"file":"core.cjs.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\nexport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":["AzureUrl"],"mappings":";;;;AAiCO,SAAS,qBAAqB,GAAA,EAAqB;AACxD,EAAA,OAAOA,iBAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,SAAA,EAAU;AAC7C;AASO,SAAS,oBAAoB,GAAA,EAAqB;AACvD,EAAA,OAAOA,iBAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;AAQO,SAAS,mBAAmB,GAAA,EAAqB;AACtD,EAAA,OAAOA,iBAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;;;;"}

package/dist/azure/core.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.esm.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\nexport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":[],"mappings":";;AAiCO,SAAS,qBAAqB,GAAA,EAAqB;AACxD,EAAA,OAAO,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,SAAA,EAAU;AAC7C;AASO,SAAS,oBAAoB,GAAA,EAAqB;AACvD,EAAA,OAAO,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;AAQO,SAAS,mBAAmB,GAAA,EAAqB;AACtD,EAAA,OAAO,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;;;;"}
+{"version":3,"file":"core.esm.js","sources":["../../src/azure/core.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AzureUrl } from './AzureUrl';\n\nexport { isVisualStudioDomain } from './isVisualStudioDomain';\n\n/**\n * Given a URL pointing to a file on a provider, returns a URL that is suitable\n * for fetching the contents of the data.\n *\n * @remarks\n *\n * Converts\n * - from: `https://dev.azure.com/{organization}/{project}/_git/reponame?path={path}&version=GB{commitOrBranch}&_a=contents`\n * - to:   `https://dev.azure.com/{organization}/{project}/_apis/git/repositories/reponame/items?path={path}&version={commitOrBranch}`\n *\n * @param url - A URL pointing to a file\n * @public\n */\nexport function getAzureFileFetchUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toFileUrl();\n}\n\n/**\n * Given a URL pointing to a path on a provider, returns a URL that is suitable\n * for downloading the subtree.\n *\n * @param url - A URL pointing to a path\n * @public\n */\nexport function getAzureDownloadUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toArchiveUrl();\n}\n\n/**\n * Given a URL, return the API URL to fetch commits on the branch.\n *\n * @param url - A URL pointing to a repository or a sub-path\n * @public\n */\nexport function getAzureCommitsUrl(url: string): string {\n  return AzureUrl.fromRepoUrl(url).toCommitsUrl();\n}\n"],"names":[],"mappings":";;AAiCO,SAAS,qBAAqB,GAAA,EAAqB;AACxD,EAAA,OAAO,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,SAAA,EAAU;AAC7C;AASO,SAAS,oBAAoB,GAAA,EAAqB;AACvD,EAAA,OAAO,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;AAQO,SAAS,mBAAmB,GAAA,EAAqB;AACtD,EAAA,OAAO,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA,CAAE,YAAA,EAAa;AAChD;;"}

package/dist/azure/isVisualStudioDomain.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"isVisualStudioDomain.cjs.js","sources":["../../src/azure/isVisualStudioDomain.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Given a URL, return true if it contains `.visualstudio.com` and false if it does not\n * URLs can be in these two formats: `dev.azure.com/{org}` or the legacy `{org}.visualstudio.com`\n *\n * @param origin - A URL origin string pointing to an Azure DevOps instance\n * @public\n */\nexport function isVisualStudioDomain(origin: string): boolean {\n  return origin.endsWith('.visualstudio.com');\n}\n"],"names":[],"mappings":";;AAuBO,SAAS,qBAAqB,MAAA,EAAyB;AAC5D,EAAA,OAAO,MAAA,CAAO,SAAS,mBAAmB,CAAA;AAC5C;;;;"}
+{"version":3,"file":"isVisualStudioDomain.cjs.js","sources":["../../src/azure/isVisualStudioDomain.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Given a URL, return true if it contains `.visualstudio.com` and false if it does not\n * URLs can be in these two formats: `dev.azure.com/{org}` or the legacy `{org}.visualstudio.com`\n *\n * @param origin - A URL origin string pointing to an Azure DevOps instance\n * @public\n */\nexport function isVisualStudioDomain(origin: string): boolean {\n  return origin.endsWith('.visualstudio.com');\n}\n"],"names":[],"mappings":";;AAuBO,SAAS,qBAAqB,MAAA,EAAyB;AAC5D,EAAA,OAAO,MAAA,CAAO,SAAS,mBAAmB,CAAA;AAC5C;;"}

package/dist/azure/isVisualStudioDomain.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"isVisualStudioDomain.esm.js","sources":["../../src/azure/isVisualStudioDomain.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Given a URL, return true if it contains `.visualstudio.com` and false if it does not\n * URLs can be in these two formats: `dev.azure.com/{org}` or the legacy `{org}.visualstudio.com`\n *\n * @param origin - A URL origin string pointing to an Azure DevOps instance\n * @public\n */\nexport function isVisualStudioDomain(origin: string): boolean {\n  return origin.endsWith('.visualstudio.com');\n}\n"],"names":[],"mappings":"AAuBO,SAAS,qBAAqB,MAAA,EAAyB;AAC5D,EAAA,OAAO,MAAA,CAAO,SAAS,mBAAmB,CAAA;AAC5C;;;;"}
+{"version":3,"file":"isVisualStudioDomain.esm.js","sources":["../../src/azure/isVisualStudioDomain.ts"],"sourcesContent":["/*\n * Copyright 2026 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Given a URL, return true if it contains `.visualstudio.com` and false if it does not\n * URLs can be in these two formats: `dev.azure.com/{org}` or the legacy `{org}.visualstudio.com`\n *\n * @param origin - A URL origin string pointing to an Azure DevOps instance\n * @public\n */\nexport function isVisualStudioDomain(origin: string): boolean {\n  return origin.endsWith('.visualstudio.com');\n}\n"],"names":[],"mappings":"AAuBO,SAAS,qBAAqB,MAAA,EAAyB;AAC5D,EAAA,OAAO,MAAA,CAAO,SAAS,mBAAmB,CAAA;AAC5C;;"}

package/dist/azureBlobStorage/AzureBlobStorageIntegration.cjs.js

@@ -7,6 +7,7 @@ class AzureBlobStorageIntegration {
   constructor(integrationConfig) {
     this.integrationConfig = integrationConfig;
   }
+  integrationConfig;
   static factory = ({
     config: config$1
   }) => {

package/dist/azureBlobStorage/AzureBlobStorageIntegration.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"AzureBlobStorageIntegration.cjs.js","sources":["../../src/azureBlobStorage/AzureBlobStorageIntegration.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { basicIntegrations, defaultScmResolveUrl } from '../helpers';\nimport { ScmIntegration, ScmIntegrationsFactory } from '../types';\nimport {\n  AzureBlobStorageIntegrationConfig,\n  readAzureBlobStorageIntegrationConfigs,\n} from './config';\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n */\nexport class AzureBlobStorageIntegration implements ScmIntegration {\n  static factory: ScmIntegrationsFactory<AzureBlobStorageIntegration> = ({\n    config,\n  }) => {\n    const configs = readAzureBlobStorageIntegrationConfigs(\n      config.getOptionalConfigArray('integrations.azureBlobStorage') ?? [],\n    );\n    return basicIntegrations(\n      configs.map(c => new AzureBlobStorageIntegration(c)),\n      i => i.config.host,\n    );\n  };\n\n  get type(): string {\n    return 'azureBlobStorage';\n  }\n\n  get title(): string {\n    return this.integrationConfig.host;\n  }\n\n  get config(): AzureBlobStorageIntegrationConfig {\n    return this.integrationConfig;\n  }\n\n  constructor(\n    private readonly integrationConfig: AzureBlobStorageIntegrationConfig,\n  ) {}\n\n  resolveUrl(options: {\n    url: string;\n    base: string;\n    lineNumber?: number | undefined;\n  }): string {\n    const resolved = defaultScmResolveUrl(options);\n    return resolved;\n  }\n\n  resolveEditUrl(url: string): string {\n    // TODO: Implement edit URL for azureBlobStorage\n    return url;\n  }\n}\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\nexport const AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\n// eslint-disable-next-line @typescript-eslint/no-redeclare\nexport type AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n"],"names":["config","readAzureBlobStorageIntegrationConfigs","basicIntegrations","defaultScmResolveUrl"],"mappings":";;;;;AA4BO,MAAM,2BAAA,CAAsD;AAAA,EAyBjE,YACmB,iBAAA,EACjB;AADiB,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAChB;AAAA,EA1BH,OAAO,UAA+D,CAAC;AAAA,YACrEA;AAAA,GACF,KAAM;AACJ,IAAA,MAAM,OAAA,GAAUC,6CAAA;AAAA,MACdD,QAAA,CAAO,sBAAA,CAAuB,+BAA+B,CAAA,IAAK;AAAC,KACrE;AACA,IAAA,OAAOE,yBAAA;AAAA,MACL,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,IAAI,2BAAA,CAA4B,CAAC,CAAC,CAAA;AAAA,MACnD,CAAA,CAAA,KAAK,EAAE,MAAA,CAAO;AAAA,KAChB;AAAA,EACF,CAAA;AAAA,EAEA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,kBAAA;AAAA,EACT;AAAA,EAEA,IAAI,KAAA,GAAgB;AAClB,IAAA,OAAO,KAAK,iBAAA,CAAkB,IAAA;AAAA,EAChC;AAAA,EAEA,IAAI,MAAA,GAA4C;AAC9C,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA,EAMA,WAAW,OAAA,EAIA;AACT,IAAA,MAAM,QAAA,GAAWC,6BAAqB,OAAO,CAAA;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,eAAe,GAAA,EAAqB;AAElC,IAAA,OAAO,GAAA;AAAA,EACT;AACF;AAQO,MAAM,2BAAA,GAA8B;;;;;"}
+{"version":3,"file":"AzureBlobStorageIntegration.cjs.js","sources":["../../src/azureBlobStorage/AzureBlobStorageIntegration.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { basicIntegrations, defaultScmResolveUrl } from '../helpers';\nimport { ScmIntegration, ScmIntegrationsFactory } from '../types';\nimport {\n  AzureBlobStorageIntegrationConfig,\n  readAzureBlobStorageIntegrationConfigs,\n} from './config';\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n */\nexport class AzureBlobStorageIntegration implements ScmIntegration {\n  static factory: ScmIntegrationsFactory<AzureBlobStorageIntegration> = ({\n    config,\n  }) => {\n    const configs = readAzureBlobStorageIntegrationConfigs(\n      config.getOptionalConfigArray('integrations.azureBlobStorage') ?? [],\n    );\n    return basicIntegrations(\n      configs.map(c => new AzureBlobStorageIntegration(c)),\n      i => i.config.host,\n    );\n  };\n\n  get type(): string {\n    return 'azureBlobStorage';\n  }\n\n  get title(): string {\n    return this.integrationConfig.host;\n  }\n\n  get config(): AzureBlobStorageIntegrationConfig {\n    return this.integrationConfig;\n  }\n\n  constructor(\n    private readonly integrationConfig: AzureBlobStorageIntegrationConfig,\n  ) {}\n\n  resolveUrl(options: {\n    url: string;\n    base: string;\n    lineNumber?: number | undefined;\n  }): string {\n    const resolved = defaultScmResolveUrl(options);\n    return resolved;\n  }\n\n  resolveEditUrl(url: string): string {\n    // TODO: Implement edit URL for azureBlobStorage\n    return url;\n  }\n}\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\nexport const AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\n// eslint-disable-next-line @typescript-eslint/no-redeclare\nexport type AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n"],"names":["config","readAzureBlobStorageIntegrationConfigs","basicIntegrations","defaultScmResolveUrl"],"mappings":";;;;;AA4BO,MAAM,2BAAA,CAAsD;AAAA,EAyBjE,YACmB,iBAAA,EACjB;AADiB,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAChB;AAAA,EADgB,iBAAA;AAAA,EAzBnB,OAAO,UAA+D,CAAC;AAAA,YACrEA;AAAA,GACF,KAAM;AACJ,IAAA,MAAM,OAAA,GAAUC,6CAAA;AAAA,MACdD,QAAA,CAAO,sBAAA,CAAuB,+BAA+B,CAAA,IAAK;AAAC,KACrE;AACA,IAAA,OAAOE,yBAAA;AAAA,MACL,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,IAAI,2BAAA,CAA4B,CAAC,CAAC,CAAA;AAAA,MACnD,CAAA,CAAA,KAAK,EAAE,MAAA,CAAO;AAAA,KAChB;AAAA,EACF,CAAA;AAAA,EAEA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,kBAAA;AAAA,EACT;AAAA,EAEA,IAAI,KAAA,GAAgB;AAClB,IAAA,OAAO,KAAK,iBAAA,CAAkB,IAAA;AAAA,EAChC;AAAA,EAEA,IAAI,MAAA,GAA4C;AAC9C,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA,EAMA,WAAW,OAAA,EAIA;AACT,IAAA,MAAM,QAAA,GAAWC,6BAAqB,OAAO,CAAA;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,eAAe,GAAA,EAAqB;AAElC,IAAA,OAAO,GAAA;AAAA,EACT;AACF;AAQO,MAAM,2BAAA,GAA8B;;;"}

package/dist/azureBlobStorage/AzureBlobStorageIntegration.esm.js

@@ -5,6 +5,7 @@ class AzureBlobStorageIntegration {
   constructor(integrationConfig) {
     this.integrationConfig = integrationConfig;
   }
+  integrationConfig;
   static factory = ({
     config
   }) => {

package/dist/azureBlobStorage/AzureBlobStorageIntegration.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"AzureBlobStorageIntegration.esm.js","sources":["../../src/azureBlobStorage/AzureBlobStorageIntegration.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { basicIntegrations, defaultScmResolveUrl } from '../helpers';\nimport { ScmIntegration, ScmIntegrationsFactory } from '../types';\nimport {\n  AzureBlobStorageIntegrationConfig,\n  readAzureBlobStorageIntegrationConfigs,\n} from './config';\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n */\nexport class AzureBlobStorageIntegration implements ScmIntegration {\n  static factory: ScmIntegrationsFactory<AzureBlobStorageIntegration> = ({\n    config,\n  }) => {\n    const configs = readAzureBlobStorageIntegrationConfigs(\n      config.getOptionalConfigArray('integrations.azureBlobStorage') ?? [],\n    );\n    return basicIntegrations(\n      configs.map(c => new AzureBlobStorageIntegration(c)),\n      i => i.config.host,\n    );\n  };\n\n  get type(): string {\n    return 'azureBlobStorage';\n  }\n\n  get title(): string {\n    return this.integrationConfig.host;\n  }\n\n  get config(): AzureBlobStorageIntegrationConfig {\n    return this.integrationConfig;\n  }\n\n  constructor(\n    private readonly integrationConfig: AzureBlobStorageIntegrationConfig,\n  ) {}\n\n  resolveUrl(options: {\n    url: string;\n    base: string;\n    lineNumber?: number | undefined;\n  }): string {\n    const resolved = defaultScmResolveUrl(options);\n    return resolved;\n  }\n\n  resolveEditUrl(url: string): string {\n    // TODO: Implement edit URL for azureBlobStorage\n    return url;\n  }\n}\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\nexport const AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\n// eslint-disable-next-line @typescript-eslint/no-redeclare\nexport type AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n"],"names":[],"mappings":";;;AA4BO,MAAM,2BAAA,CAAsD;AAAA,EAyBjE,YACmB,iBAAA,EACjB;AADiB,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAChB;AAAA,EA1BH,OAAO,UAA+D,CAAC;AAAA,IACrE;AAAA,GACF,KAAM;AACJ,IAAA,MAAM,OAAA,GAAU,sCAAA;AAAA,MACd,MAAA,CAAO,sBAAA,CAAuB,+BAA+B,CAAA,IAAK;AAAC,KACrE;AACA,IAAA,OAAO,iBAAA;AAAA,MACL,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,IAAI,2BAAA,CAA4B,CAAC,CAAC,CAAA;AAAA,MACnD,CAAA,CAAA,KAAK,EAAE,MAAA,CAAO;AAAA,KAChB;AAAA,EACF,CAAA;AAAA,EAEA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,kBAAA;AAAA,EACT;AAAA,EAEA,IAAI,KAAA,GAAgB;AAClB,IAAA,OAAO,KAAK,iBAAA,CAAkB,IAAA;AAAA,EAChC;AAAA,EAEA,IAAI,MAAA,GAA4C;AAC9C,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA,EAMA,WAAW,OAAA,EAIA;AACT,IAAA,MAAM,QAAA,GAAW,qBAAqB,OAAO,CAAA;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,eAAe,GAAA,EAAqB;AAElC,IAAA,OAAO,GAAA;AAAA,EACT;AACF;AAQO,MAAM,2BAAA,GAA8B;;;;"}
+{"version":3,"file":"AzureBlobStorageIntegration.esm.js","sources":["../../src/azureBlobStorage/AzureBlobStorageIntegration.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { basicIntegrations, defaultScmResolveUrl } from '../helpers';\nimport { ScmIntegration, ScmIntegrationsFactory } from '../types';\nimport {\n  AzureBlobStorageIntegrationConfig,\n  readAzureBlobStorageIntegrationConfigs,\n} from './config';\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n */\nexport class AzureBlobStorageIntegration implements ScmIntegration {\n  static factory: ScmIntegrationsFactory<AzureBlobStorageIntegration> = ({\n    config,\n  }) => {\n    const configs = readAzureBlobStorageIntegrationConfigs(\n      config.getOptionalConfigArray('integrations.azureBlobStorage') ?? [],\n    );\n    return basicIntegrations(\n      configs.map(c => new AzureBlobStorageIntegration(c)),\n      i => i.config.host,\n    );\n  };\n\n  get type(): string {\n    return 'azureBlobStorage';\n  }\n\n  get title(): string {\n    return this.integrationConfig.host;\n  }\n\n  get config(): AzureBlobStorageIntegrationConfig {\n    return this.integrationConfig;\n  }\n\n  constructor(\n    private readonly integrationConfig: AzureBlobStorageIntegrationConfig,\n  ) {}\n\n  resolveUrl(options: {\n    url: string;\n    base: string;\n    lineNumber?: number | undefined;\n  }): string {\n    const resolved = defaultScmResolveUrl(options);\n    return resolved;\n  }\n\n  resolveEditUrl(url: string): string {\n    // TODO: Implement edit URL for azureBlobStorage\n    return url;\n  }\n}\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\nexport const AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n\n/**\n * Microsoft Azure Blob storage based integration.\n *\n * @public\n * @deprecated Use {@link AzureBlobStorageIntegration} instead. This was a typo in the original class name.\n */\n// eslint-disable-next-line @typescript-eslint/no-redeclare\nexport type AzureBlobStorageIntergation = AzureBlobStorageIntegration;\n"],"names":[],"mappings":";;;AA4BO,MAAM,2BAAA,CAAsD;AAAA,EAyBjE,YACmB,iBAAA,EACjB;AADiB,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAChB;AAAA,EADgB,iBAAA;AAAA,EAzBnB,OAAO,UAA+D,CAAC;AAAA,IACrE;AAAA,GACF,KAAM;AACJ,IAAA,MAAM,OAAA,GAAU,sCAAA;AAAA,MACd,MAAA,CAAO,sBAAA,CAAuB,+BAA+B,CAAA,IAAK;AAAC,KACrE;AACA,IAAA,OAAO,iBAAA;AAAA,MACL,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,IAAI,2BAAA,CAA4B,CAAC,CAAC,CAAA;AAAA,MACnD,CAAA,CAAA,KAAK,EAAE,MAAA,CAAO;AAAA,KAChB;AAAA,EACF,CAAA;AAAA,EAEA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,kBAAA;AAAA,EACT;AAAA,EAEA,IAAI,KAAA,GAAgB;AAClB,IAAA,OAAO,KAAK,iBAAA,CAAkB,IAAA;AAAA,EAChC;AAAA,EAEA,IAAI,MAAA,GAA4C;AAC9C,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA,EAMA,WAAW,OAAA,EAIA;AACT,IAAA,MAAM,QAAA,GAAW,qBAAqB,OAAO,CAAA;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,eAAe,GAAA,EAAqB;AAElC,IAAA,OAAO,GAAA;AAAA,EACT;AACF;AAQO,MAAM,2BAAA,GAA8B;;"}