@backstage/plugin-catalog-backend-module-msgraph 0.10.1-next.0 → 0.10.1

package/CHANGELOG.md

@@ -1,13 +1,10 @@
 # @backstage/plugin-catalog-backend-module-msgraph
 
-## 0.10.1-next.0
+## 0.10.1
 
 ### Patch Changes
 
-- e0889a3: chore(deps): bump `qs` from 6.15.1 to 6.15.2
-- Updated dependencies
-  - @backstage/plugin-catalog-node@2.2.2-next.0
-  - @backstage/backend-plugin-api@1.9.2-next.0
+- fb3e16d: Reverted the server-side `accountEnabled eq true` base filter that was added in v1.51.0, which broke the `userGroupMember` path because the group members endpoint doesn't support `$filter` on that property. Disabled users (`accountEnabled === false`) are now filtered client-side in both the `/users` and group members paths. The mutual exclusivity checks between `userFilter` and `userGroupMemberFilter`/`userGroupMemberSearch` have been restored.
 
 ## 0.10.0
 

package/config.d.ts

@@ -59,8 +59,9 @@ export interface Config {
           // they could also be configured "in code".
 
           /**
-           * The filter to apply to extract users.
-           * Combined with the base `accountEnabled eq true` filter.
+           * The filter to apply to extract users. Disabled users
+           * (`accountEnabled === false`) are always filtered out
+           * client-side regardless of this setting.
            *
            * E.g. "userType eq 'member'"
            */
@@ -163,7 +164,8 @@ export interface Config {
               expand?: string;
               /**
                * The filter to apply to extract users.
-               * Combined with the base `accountEnabled eq true` filter
+               * Disabled users (`accountEnabled === false`) are always
+               * filtered out client-side regardless of this setting.
                *
                * E.g. "userType eq 'member'"
                */
@@ -297,7 +299,8 @@ export interface Config {
                 expand?: string;
                 /**
                  * The filter to apply to extract users.
-                 * Combined with the base `accountEnabled eq true` filter
+                 * Disabled users (`accountEnabled === false`) are always
+                 * filtered out client-side regardless of this setting.
                  *
                  * E.g. "userType eq 'member'"
                  */

package/dist/index.d.ts

@@ -43,8 +43,9 @@ type MicrosoftGraphProviderConfig = {
      */
     clientSecret?: string;
     /**
-     * The filter to apply to extract users. This is combined with the base
-     * `accountEnabled eq true` filter that is always applied automatically.
+     * The filter to apply to extract users. Disabled users
+     * (`accountEnabled === false`) are always filtered out client-side
+     * regardless of this setting.
      *
      * E.g. "userType eq 'member'"
      */

package/dist/microsoftGraph/config.cjs.js

@@ -18,9 +18,7 @@ function readMicrosoftGraphConfig(config) {
     const clientId = providerConfig.getOptionalString("clientId");
     const clientSecret = providerConfig.getOptionalString("clientSecret");
     const userExpand = providerConfig.getOptionalString("userExpand");
-    const userFilter = buildUserFilter(
-      providerConfig.getOptionalString("userFilter")
-    );
+    const userFilter = providerConfig.getOptionalString("userFilter");
     const userSelect = providerConfig.getOptionalStringArray("userSelect");
     const userGroupMemberFilter = providerConfig.getOptionalString(
       "userGroupMemberFilter"
@@ -31,6 +29,16 @@ function readMicrosoftGraphConfig(config) {
     const groupExpand = providerConfig.getOptionalString("groupExpand");
     const groupFilter = providerConfig.getOptionalString("groupFilter");
     const groupSearch = providerConfig.getOptionalString("groupSearch");
+    if (userFilter && userGroupMemberFilter) {
+      throw new Error(
+        `userFilter and userGroupMemberFilter are mutually exclusive, only one can be specified.`
+      );
+    }
+    if (userFilter && userGroupMemberSearch) {
+      throw new Error(
+        `userGroupMemberSearch cannot be specified when userFilter is defined.`
+      );
+    }
     const groupSelect = providerConfig.getOptionalStringArray("groupSelect");
     const queryMode = providerConfig.getOptionalString("queryMode");
     if (queryMode !== void 0 && queryMode !== "basic" && queryMode !== "advanced") {
@@ -92,7 +100,7 @@ function readProviderConfig(id, config) {
   const clientId = config.getOptionalString("clientId");
   const clientSecret = config.getOptionalString("clientSecret");
   const userExpand = config.getOptionalString("user.expand");
-  const userFilter = buildUserFilter(config.getOptionalString("user.filter"));
+  const userFilter = config.getOptionalString("user.filter");
   const userSelect = config.getOptionalStringArray("user.select");
   const userPath = config.getOptionalString("user.path") ?? "users";
   const loadUserPhotos = config.getOptionalBoolean("user.loadPhotos");
@@ -115,6 +123,16 @@ function readProviderConfig(id, config) {
     "userGroupMember.search"
   );
   const userGroupMemberPath = config.getOptionalString("userGroupMember.path");
+  if (userFilter && userGroupMemberFilter) {
+    throw new Error(
+      `userFilter and userGroupMemberFilter are mutually exclusive, only one can be specified.`
+    );
+  }
+  if (userFilter && userGroupMemberSearch) {
+    throw new Error(
+      `userGroupMemberSearch cannot be specified when userFilter is defined.`
+    );
+  }
   if (clientId && !clientSecret) {
     throw new Error(`clientSecret must be provided when clientId is defined.`);
   }
@@ -149,13 +167,6 @@ function readProviderConfig(id, config) {
     schedule
   };
 }
-function buildUserFilter(rawFilter) {
-  const base = "accountEnabled eq true";
-  if (rawFilter) {
-    return `${base} and (${rawFilter})`;
-  }
-  return base;
-}
 
 exports.readMicrosoftGraphConfig = readMicrosoftGraphConfig;
 exports.readProviderConfig = readProviderConfig;

package/dist/microsoftGraph/config.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.cjs.js","sources":["../../src/microsoftGraph/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  SchedulerServiceTaskScheduleDefinition,\n  readSchedulerServiceTaskScheduleDefinitionFromConfig,\n} from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\nimport { trimEnd } from 'lodash';\n\nconst DEFAULT_PROVIDER_ID = 'default';\nconst DEFAULT_TARGET = 'https://graph.microsoft.com/v1.0';\n\n/**\n * The configuration parameters for a single Microsoft Graph provider.\n *\n * @public\n */\nexport type MicrosoftGraphProviderConfig = {\n  /**\n   * Identifier of the provider which will be used i.e. at the location key for ingested entities.\n   */\n  id: string;\n\n  /**\n   * The prefix of the target that this matches on, e.g.\n   * \"https://graph.microsoft.com/v1.0\", with no trailing slash.\n   */\n  target: string;\n  /**\n   * The auth authority used.\n   *\n   * E.g. \"https://login.microsoftonline.com\"\n   */\n  authority?: string;\n  /**\n   * The tenant whose org data we are interested in.\n   */\n  tenantId: string;\n  /**\n   * The OAuth client ID to use for authenticating requests.\n   * If specified, ClientSecret must also be specified\n   */\n  clientId?: string;\n  /**\n   * The OAuth client secret to use for authenticating requests.\n   * If specified, ClientId must also be specified\n   */\n  clientSecret?: string;\n  /**\n   * The filter to apply to extract users. This is combined with the base\n   * `accountEnabled eq true` filter that is always applied automatically.\n   *\n   * E.g. \"userType eq 'member'\"\n   */\n  userFilter?: string;\n  /**\n   * The fields to be fetched on query.\n   *\n   * E.g. [\"id\", \"displayName\", \"description\"]\n   */\n  userSelect?: string[];\n  /**\n   * The \"expand\" argument to apply to users.\n   *\n   * E.g. \"manager\".\n   */\n  userExpand?: string;\n\n  /**\n   * The path to the users endpoint. Defaults to \"/users\".\n   *\n   * E.g. \"/users\"\n   */\n  userPath?: string;\n  /**\n   * The filter to apply to extract users by groups memberships.\n   *\n   * E.g. \"displayName eq 'Backstage Users'\"\n   */\n  userGroupMemberFilter?: string;\n  /**\n   * The search criteria to apply to extract users by groups memberships.\n   *\n   * E.g. \"\\\"displayName:-team\\\"\" would only match groups which contain '-team'\n   */\n  userGroupMemberSearch?: string;\n\n  /**\n   * The path to the groups endpoint. Defaults to \"/groups\".\n   *\n   * E.g. \"/groups\"\n   */\n  userGroupMemberPath?: string;\n\n  /**\n   * The \"expand\" argument to apply to groups.\n   *\n   * E.g. \"member\".\n   */\n  groupExpand?: string;\n  /**\n   * The filter to apply to extract groups.\n   *\n   * E.g. \"securityEnabled eq false and mailEnabled eq true\"\n   */\n  groupFilter?: string;\n  /**\n   * The search criteria to apply to extract groups.\n   *\n   * E.g. \"\\\"displayName:-team\\\"\" would only match groups which contain '-team'\n   */\n  groupSearch?: string;\n\n  /**\n   * The fields to be fetched on query.\n   *\n   * E.g. [\"id\", \"displayName\", \"description\"]\n   */\n  groupSelect?: string[];\n\n  /**\n   * The path to the groups endpoint. Defaults to \"/groups\".\n   *\n   * E.g. \"/groups\"\n   */\n  groupPath?: string;\n\n  /**\n   * Whether to ingest groups that are members of the found/filtered/searched groups.\n   * Default value is `false`.\n   */\n  groupIncludeSubGroups?: boolean;\n\n  /**\n   * By default, the Microsoft Graph API only provides the basic feature set\n   * for querying. Certain features are limited to advanced query capabilities\n   * (see https://docs.microsoft.com/en-us/graph/aad-advanced-queries)\n   * and need to be enabled.\n   *\n   * Some features like `$expand` are not available for advanced queries, though.\n   */\n  queryMode?: 'basic' | 'advanced';\n\n  /**\n   * Set to false to not load user photos.\n   * This can be useful for huge organizations.\n   */\n  loadUserPhotos?: boolean;\n\n  /**\n   * Schedule configuration for refresh tasks.\n   */\n  schedule?: SchedulerServiceTaskScheduleDefinition;\n};\n\n/**\n * Parses configuration.\n *\n * @param config - The root of the msgraph config hierarchy\n *\n * @public\n * @deprecated Replaced by not exported `readProviderConfigs` and kept for backwards compatibility only.\n */\nexport function readMicrosoftGraphConfig(\n  config: Config,\n): MicrosoftGraphProviderConfig[] {\n  const providers: MicrosoftGraphProviderConfig[] = [];\n  const providerConfigs = config.getOptionalConfigArray('providers') ?? [];\n\n  for (const providerConfig of providerConfigs) {\n    const target = trimEnd(\n      providerConfig.getOptionalString('target') ?? DEFAULT_TARGET,\n      '/',\n    );\n    const authority = providerConfig.getOptionalString('authority');\n\n    const tenantId = providerConfig.getString('tenantId');\n    const clientId = providerConfig.getOptionalString('clientId');\n    const clientSecret = providerConfig.getOptionalString('clientSecret');\n\n    const userExpand = providerConfig.getOptionalString('userExpand');\n    const userFilter = buildUserFilter(\n      providerConfig.getOptionalString('userFilter'),\n    );\n    const userSelect = providerConfig.getOptionalStringArray('userSelect');\n    const userGroupMemberFilter = providerConfig.getOptionalString(\n      'userGroupMemberFilter',\n    );\n    const userGroupMemberSearch = providerConfig.getOptionalString(\n      'userGroupMemberSearch',\n    );\n    const groupExpand = providerConfig.getOptionalString('groupExpand');\n    const groupFilter = providerConfig.getOptionalString('groupFilter');\n    const groupSearch = providerConfig.getOptionalString('groupSearch');\n\n    const groupSelect = providerConfig.getOptionalStringArray('groupSelect');\n    const queryMode = providerConfig.getOptionalString('queryMode');\n    if (\n      queryMode !== undefined &&\n      queryMode !== 'basic' &&\n      queryMode !== 'advanced'\n    ) {\n      throw new Error(`queryMode must be one of: basic, advanced`);\n    }\n\n    if (clientId && !clientSecret) {\n      throw new Error(\n        `clientSecret must be provided when clientId is defined.`,\n      );\n    }\n\n    if (clientSecret && !clientId) {\n      throw new Error(\n        `clientId must be provided when clientSecret is defined.`,\n      );\n    }\n\n    providers.push({\n      id: target,\n      target,\n      authority,\n      tenantId,\n      clientId,\n      clientSecret,\n      userExpand,\n      userFilter,\n      userSelect,\n      userGroupMemberFilter,\n      userGroupMemberSearch,\n      groupExpand,\n      groupFilter,\n      groupSearch,\n      groupSelect,\n      queryMode,\n    });\n  }\n\n  return providers;\n}\n\n/**\n * Parses all configured providers.\n *\n * @param config - The root of the msgraph config hierarchy\n *\n * @public\n */\nexport function readProviderConfigs(\n  config: Config,\n): MicrosoftGraphProviderConfig[] {\n  const providersConfig = config.getOptionalConfig(\n    'catalog.providers.microsoftGraphOrg',\n  );\n  if (!providersConfig) {\n    return [];\n  }\n\n  if (providersConfig.has('clientId')) {\n    // simple/single config variant\n    return [readProviderConfig(DEFAULT_PROVIDER_ID, providersConfig)];\n  }\n\n  return providersConfig.keys().map(id => {\n    const providerConfig = providersConfig.getConfig(id);\n\n    return readProviderConfig(id, providerConfig);\n  });\n}\n\n/**\n * Parses a single configured provider by id.\n *\n * @param id - the id of the provider to parse\n * @param config - The root of the msgraph config hierarchy\n *\n * @public\n */\nexport function readProviderConfig(\n  id: string,\n  config: Config,\n): MicrosoftGraphProviderConfig {\n  const target = trimEnd(\n    config.getOptionalString('target') ?? DEFAULT_TARGET,\n    '/',\n  );\n  const authority = config.getOptionalString('authority');\n\n  const tenantId = config.getString('tenantId');\n  const clientId = config.getOptionalString('clientId');\n  const clientSecret = config.getOptionalString('clientSecret');\n\n  const userExpand = config.getOptionalString('user.expand');\n  const userFilter = buildUserFilter(config.getOptionalString('user.filter'));\n  const userSelect = config.getOptionalStringArray('user.select');\n  const userPath = config.getOptionalString('user.path') ?? 'users';\n  const loadUserPhotos = config.getOptionalBoolean('user.loadPhotos');\n\n  const groupExpand = config.getOptionalString('group.expand');\n  const groupFilter = config.getOptionalString('group.filter');\n  const groupSearch = config.getOptionalString('group.search');\n  const groupSelect = config.getOptionalStringArray('group.select');\n  const groupPath = config.getOptionalString('group.path') ?? 'groups';\n  const groupIncludeSubGroups = config.getOptionalBoolean(\n    'group.includeSubGroups',\n  );\n\n  const queryMode = config.getOptionalString('queryMode');\n  if (\n    queryMode !== undefined &&\n    queryMode !== 'basic' &&\n    queryMode !== 'advanced'\n  ) {\n    throw new Error(`queryMode must be one of: basic, advanced`);\n  }\n\n  const userGroupMemberFilter = config.getOptionalString(\n    'userGroupMember.filter',\n  );\n  const userGroupMemberSearch = config.getOptionalString(\n    'userGroupMember.search',\n  );\n  const userGroupMemberPath = config.getOptionalString('userGroupMember.path');\n\n  if (clientId && !clientSecret) {\n    throw new Error(`clientSecret must be provided when clientId is defined.`);\n  }\n\n  if (clientSecret && !clientId) {\n    throw new Error(`clientId must be provided when clientSecret is defined.`);\n  }\n\n  const schedule = config.has('schedule')\n    ? readSchedulerServiceTaskScheduleDefinitionFromConfig(\n        config.getConfig('schedule'),\n      )\n    : undefined;\n\n  return {\n    id,\n    target,\n    authority,\n    clientId,\n    clientSecret,\n    tenantId,\n    userExpand,\n    userFilter,\n    userSelect,\n    userPath,\n    loadUserPhotos,\n    groupExpand,\n    groupFilter,\n    groupSearch,\n    groupSelect,\n    groupPath,\n    groupIncludeSubGroups,\n    queryMode,\n    userGroupMemberFilter,\n    userGroupMemberSearch,\n    userGroupMemberPath,\n    schedule,\n  };\n}\n\nfunction buildUserFilter(rawFilter: string | undefined): string {\n  const base = 'accountEnabled eq true';\n  if (rawFilter) {\n    return `${base} and (${rawFilter})`;\n  }\n  return base;\n}\n"],"names":["trimEnd","readSchedulerServiceTaskScheduleDefinitionFromConfig"],"mappings":";;;;;AAuBA,MAAM,mBAAA,GAAsB,SAAA;AAC5B,MAAM,cAAA,GAAiB,kCAAA;AAyJhB,SAAS,yBACd,MAAA,EACgC;AAChC,EAAA,MAAM,YAA4C,EAAC;AACnD,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,sBAAA,CAAuB,WAAW,KAAK,EAAC;AAEvE,EAAA,KAAA,MAAW,kBAAkB,eAAA,EAAiB;AAC5C,IAAA,MAAM,MAAA,GAASA,cAAA;AAAA,MACb,cAAA,CAAe,iBAAA,CAAkB,QAAQ,CAAA,IAAK,cAAA;AAAA,MAC9C;AAAA,KACF;AACA,IAAA,MAAM,SAAA,GAAY,cAAA,CAAe,iBAAA,CAAkB,WAAW,CAAA;AAE9D,IAAA,MAAM,QAAA,GAAW,cAAA,CAAe,SAAA,CAAU,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,cAAA,CAAe,iBAAA,CAAkB,UAAU,CAAA;AAC5D,IAAA,MAAM,YAAA,GAAe,cAAA,CAAe,iBAAA,CAAkB,cAAc,CAAA;AAEpE,IAAA,MAAM,UAAA,GAAa,cAAA,CAAe,iBAAA,CAAkB,YAAY,CAAA;AAChE,IAAA,MAAM,UAAA,GAAa,eAAA;AAAA,MACjB,cAAA,CAAe,kBAAkB,YAAY;AAAA,KAC/C;AACA,IAAA,MAAM,UAAA,GAAa,cAAA,CAAe,sBAAA,CAAuB,YAAY,CAAA;AACrE,IAAA,MAAM,wBAAwB,cAAA,CAAe,iBAAA;AAAA,MAC3C;AAAA,KACF;AACA,IAAA,MAAM,wBAAwB,cAAA,CAAe,iBAAA;AAAA,MAC3C;AAAA,KACF;AACA,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,iBAAA,CAAkB,aAAa,CAAA;AAClE,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,iBAAA,CAAkB,aAAa,CAAA;AAClE,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,iBAAA,CAAkB,aAAa,CAAA;AAElE,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,sBAAA,CAAuB,aAAa,CAAA;AACvE,IAAA,MAAM,SAAA,GAAY,cAAA,CAAe,iBAAA,CAAkB,WAAW,CAAA;AAC9D,IAAA,IACE,SAAA,KAAc,MAAA,IACd,SAAA,KAAc,OAAA,IACd,cAAc,UAAA,EACd;AACA,MAAA,MAAM,IAAI,MAAM,CAAA,yCAAA,CAA2C,CAAA;AAAA,IAC7D;AAEA,IAAA,IAAI,QAAA,IAAY,CAAC,YAAA,EAAc;AAC7B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uDAAA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,YAAA,IAAgB,CAAC,QAAA,EAAU;AAC7B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uDAAA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,SAAA,CAAU,IAAA,CAAK;AAAA,MACb,EAAA,EAAI,MAAA;AAAA,MACJ,MAAA;AAAA,MACA,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,qBAAA;AAAA,MACA,qBAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,SAAA;AACT;AASO,SAAS,oBACd,MAAA,EACgC;AAChC,EAAA,MAAM,kBAAkB,MAAA,CAAO,iBAAA;AAAA,IAC7B;AAAA,GACF;AACA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,UAAU,CAAA,EAAG;AAEnC,IAAA,OAAO,CAAC,kBAAA,CAAmB,mBAAA,EAAqB,eAAe,CAAC,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,eAAA,CAAgB,IAAA,EAAK,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM;AACtC,IAAA,MAAM,cAAA,GAAiB,eAAA,CAAgB,SAAA,CAAU,EAAE,CAAA;AAEnD,IAAA,OAAO,kBAAA,CAAmB,IAAI,cAAc,CAAA;AAAA,EAC9C,CAAC,CAAA;AACH;AAUO,SAAS,kBAAA,CACd,IACA,MAAA,EAC8B;AAC9B,EAAA,MAAM,MAAA,GAASA,cAAA;AAAA,IACb,MAAA,CAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,cAAA;AAAA,IACtC;AAAA,GACF;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,iBAAA,CAAkB,WAAW,CAAA;AAEtD,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,SAAA,CAAU,UAAU,CAAA;AAC5C,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,iBAAA,CAAkB,UAAU,CAAA;AACpD,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAE5D,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,iBAAA,CAAkB,aAAa,CAAA;AACzD,EAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,MAAA,CAAO,iBAAA,CAAkB,aAAa,CAAC,CAAA;AAC1E,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,sBAAA,CAAuB,aAAa,CAAA;AAC9D,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,iBAAA,CAAkB,WAAW,CAAA,IAAK,OAAA;AAC1D,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,kBAAA,CAAmB,iBAAiB,CAAA;AAElE,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAC3D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAC3D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAC3D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,sBAAA,CAAuB,cAAc,CAAA;AAChE,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,iBAAA,CAAkB,YAAY,CAAA,IAAK,QAAA;AAC5D,EAAA,MAAM,wBAAwB,MAAA,CAAO,kBAAA;AAAA,IACnC;AAAA,GACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,iBAAA,CAAkB,WAAW,CAAA;AACtD,EAAA,IACE,SAAA,KAAc,MAAA,IACd,SAAA,KAAc,OAAA,IACd,cAAc,UAAA,EACd;AACA,IAAA,MAAM,IAAI,MAAM,CAAA,yCAAA,CAA2C,CAAA;AAAA,EAC7D;AAEA,EAAA,MAAM,wBAAwB,MAAA,CAAO,iBAAA;AAAA,IACnC;AAAA,GACF;AACA,EAAA,MAAM,wBAAwB,MAAA,CAAO,iBAAA;AAAA,IACnC;AAAA,GACF;AACA,EAAA,MAAM,mBAAA,GAAsB,MAAA,CAAO,iBAAA,CAAkB,sBAAsB,CAAA;AAE3E,EAAA,IAAI,QAAA,IAAY,CAAC,YAAA,EAAc;AAC7B,IAAA,MAAM,IAAI,MAAM,CAAA,uDAAA,CAAyD,CAAA;AAAA,EAC3E;AAEA,EAAA,IAAI,YAAA,IAAgB,CAAC,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,MAAM,CAAA,uDAAA,CAAyD,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,UAAU,CAAA,GAClCC,qEAAA;AAAA,IACE,MAAA,CAAO,UAAU,UAAU;AAAA,GAC7B,GACA,MAAA;AAEJ,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,QAAA;AAAA,IACA,YAAA;AAAA,IACA,QAAA;AAAA,IACA,UAAA;AAAA,IACA,UAAA;AAAA,IACA,UAAA;AAAA,IACA,QAAA;AAAA,IACA,cAAA;AAAA,IACA,WAAA;AAAA,IACA,WAAA;AAAA,IACA,WAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,qBAAA;AAAA,IACA,mBAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,gBAAgB,SAAA,EAAuC;AAC9D,EAAA,MAAM,IAAA,GAAO,wBAAA;AACb,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAO,CAAA,EAAG,IAAI,CAAA,MAAA,EAAS,SAAS,CAAA,CAAA,CAAA;AAAA,EAClC;AACA,EAAA,OAAO,IAAA;AACT;;;;;;"}
+{"version":3,"file":"config.cjs.js","sources":["../../src/microsoftGraph/config.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  SchedulerServiceTaskScheduleDefinition,\n  readSchedulerServiceTaskScheduleDefinitionFromConfig,\n} from '@backstage/backend-plugin-api';\nimport { Config } from '@backstage/config';\nimport { trimEnd } from 'lodash';\n\nconst DEFAULT_PROVIDER_ID = 'default';\nconst DEFAULT_TARGET = 'https://graph.microsoft.com/v1.0';\n\n/**\n * The configuration parameters for a single Microsoft Graph provider.\n *\n * @public\n */\nexport type MicrosoftGraphProviderConfig = {\n  /**\n   * Identifier of the provider which will be used i.e. at the location key for ingested entities.\n   */\n  id: string;\n\n  /**\n   * The prefix of the target that this matches on, e.g.\n   * \"https://graph.microsoft.com/v1.0\", with no trailing slash.\n   */\n  target: string;\n  /**\n   * The auth authority used.\n   *\n   * E.g. \"https://login.microsoftonline.com\"\n   */\n  authority?: string;\n  /**\n   * The tenant whose org data we are interested in.\n   */\n  tenantId: string;\n  /**\n   * The OAuth client ID to use for authenticating requests.\n   * If specified, ClientSecret must also be specified\n   */\n  clientId?: string;\n  /**\n   * The OAuth client secret to use for authenticating requests.\n   * If specified, ClientId must also be specified\n   */\n  clientSecret?: string;\n  /**\n   * The filter to apply to extract users. Disabled users\n   * (`accountEnabled === false`) are always filtered out client-side\n   * regardless of this setting.\n   *\n   * E.g. \"userType eq 'member'\"\n   */\n  userFilter?: string;\n  /**\n   * The fields to be fetched on query.\n   *\n   * E.g. [\"id\", \"displayName\", \"description\"]\n   */\n  userSelect?: string[];\n  /**\n   * The \"expand\" argument to apply to users.\n   *\n   * E.g. \"manager\".\n   */\n  userExpand?: string;\n\n  /**\n   * The path to the users endpoint. Defaults to \"/users\".\n   *\n   * E.g. \"/users\"\n   */\n  userPath?: string;\n  /**\n   * The filter to apply to extract users by groups memberships.\n   *\n   * E.g. \"displayName eq 'Backstage Users'\"\n   */\n  userGroupMemberFilter?: string;\n  /**\n   * The search criteria to apply to extract users by groups memberships.\n   *\n   * E.g. \"\\\"displayName:-team\\\"\" would only match groups which contain '-team'\n   */\n  userGroupMemberSearch?: string;\n\n  /**\n   * The path to the groups endpoint. Defaults to \"/groups\".\n   *\n   * E.g. \"/groups\"\n   */\n  userGroupMemberPath?: string;\n\n  /**\n   * The \"expand\" argument to apply to groups.\n   *\n   * E.g. \"member\".\n   */\n  groupExpand?: string;\n  /**\n   * The filter to apply to extract groups.\n   *\n   * E.g. \"securityEnabled eq false and mailEnabled eq true\"\n   */\n  groupFilter?: string;\n  /**\n   * The search criteria to apply to extract groups.\n   *\n   * E.g. \"\\\"displayName:-team\\\"\" would only match groups which contain '-team'\n   */\n  groupSearch?: string;\n\n  /**\n   * The fields to be fetched on query.\n   *\n   * E.g. [\"id\", \"displayName\", \"description\"]\n   */\n  groupSelect?: string[];\n\n  /**\n   * The path to the groups endpoint. Defaults to \"/groups\".\n   *\n   * E.g. \"/groups\"\n   */\n  groupPath?: string;\n\n  /**\n   * Whether to ingest groups that are members of the found/filtered/searched groups.\n   * Default value is `false`.\n   */\n  groupIncludeSubGroups?: boolean;\n\n  /**\n   * By default, the Microsoft Graph API only provides the basic feature set\n   * for querying. Certain features are limited to advanced query capabilities\n   * (see https://docs.microsoft.com/en-us/graph/aad-advanced-queries)\n   * and need to be enabled.\n   *\n   * Some features like `$expand` are not available for advanced queries, though.\n   */\n  queryMode?: 'basic' | 'advanced';\n\n  /**\n   * Set to false to not load user photos.\n   * This can be useful for huge organizations.\n   */\n  loadUserPhotos?: boolean;\n\n  /**\n   * Schedule configuration for refresh tasks.\n   */\n  schedule?: SchedulerServiceTaskScheduleDefinition;\n};\n\n/**\n * Parses configuration.\n *\n * @param config - The root of the msgraph config hierarchy\n *\n * @public\n * @deprecated Replaced by not exported `readProviderConfigs` and kept for backwards compatibility only.\n */\nexport function readMicrosoftGraphConfig(\n  config: Config,\n): MicrosoftGraphProviderConfig[] {\n  const providers: MicrosoftGraphProviderConfig[] = [];\n  const providerConfigs = config.getOptionalConfigArray('providers') ?? [];\n\n  for (const providerConfig of providerConfigs) {\n    const target = trimEnd(\n      providerConfig.getOptionalString('target') ?? DEFAULT_TARGET,\n      '/',\n    );\n    const authority = providerConfig.getOptionalString('authority');\n\n    const tenantId = providerConfig.getString('tenantId');\n    const clientId = providerConfig.getOptionalString('clientId');\n    const clientSecret = providerConfig.getOptionalString('clientSecret');\n\n    const userExpand = providerConfig.getOptionalString('userExpand');\n    const userFilter = providerConfig.getOptionalString('userFilter');\n    const userSelect = providerConfig.getOptionalStringArray('userSelect');\n    const userGroupMemberFilter = providerConfig.getOptionalString(\n      'userGroupMemberFilter',\n    );\n    const userGroupMemberSearch = providerConfig.getOptionalString(\n      'userGroupMemberSearch',\n    );\n    const groupExpand = providerConfig.getOptionalString('groupExpand');\n    const groupFilter = providerConfig.getOptionalString('groupFilter');\n    const groupSearch = providerConfig.getOptionalString('groupSearch');\n\n    if (userFilter && userGroupMemberFilter) {\n      throw new Error(\n        `userFilter and userGroupMemberFilter are mutually exclusive, only one can be specified.`,\n      );\n    }\n    if (userFilter && userGroupMemberSearch) {\n      throw new Error(\n        `userGroupMemberSearch cannot be specified when userFilter is defined.`,\n      );\n    }\n\n    const groupSelect = providerConfig.getOptionalStringArray('groupSelect');\n    const queryMode = providerConfig.getOptionalString('queryMode');\n    if (\n      queryMode !== undefined &&\n      queryMode !== 'basic' &&\n      queryMode !== 'advanced'\n    ) {\n      throw new Error(`queryMode must be one of: basic, advanced`);\n    }\n\n    if (clientId && !clientSecret) {\n      throw new Error(\n        `clientSecret must be provided when clientId is defined.`,\n      );\n    }\n\n    if (clientSecret && !clientId) {\n      throw new Error(\n        `clientId must be provided when clientSecret is defined.`,\n      );\n    }\n\n    providers.push({\n      id: target,\n      target,\n      authority,\n      tenantId,\n      clientId,\n      clientSecret,\n      userExpand,\n      userFilter,\n      userSelect,\n      userGroupMemberFilter,\n      userGroupMemberSearch,\n      groupExpand,\n      groupFilter,\n      groupSearch,\n      groupSelect,\n      queryMode,\n    });\n  }\n\n  return providers;\n}\n\n/**\n * Parses all configured providers.\n *\n * @param config - The root of the msgraph config hierarchy\n *\n * @public\n */\nexport function readProviderConfigs(\n  config: Config,\n): MicrosoftGraphProviderConfig[] {\n  const providersConfig = config.getOptionalConfig(\n    'catalog.providers.microsoftGraphOrg',\n  );\n  if (!providersConfig) {\n    return [];\n  }\n\n  if (providersConfig.has('clientId')) {\n    // simple/single config variant\n    return [readProviderConfig(DEFAULT_PROVIDER_ID, providersConfig)];\n  }\n\n  return providersConfig.keys().map(id => {\n    const providerConfig = providersConfig.getConfig(id);\n\n    return readProviderConfig(id, providerConfig);\n  });\n}\n\n/**\n * Parses a single configured provider by id.\n *\n * @param id - the id of the provider to parse\n * @param config - The root of the msgraph config hierarchy\n *\n * @public\n */\nexport function readProviderConfig(\n  id: string,\n  config: Config,\n): MicrosoftGraphProviderConfig {\n  const target = trimEnd(\n    config.getOptionalString('target') ?? DEFAULT_TARGET,\n    '/',\n  );\n  const authority = config.getOptionalString('authority');\n\n  const tenantId = config.getString('tenantId');\n  const clientId = config.getOptionalString('clientId');\n  const clientSecret = config.getOptionalString('clientSecret');\n\n  const userExpand = config.getOptionalString('user.expand');\n  const userFilter = config.getOptionalString('user.filter');\n  const userSelect = config.getOptionalStringArray('user.select');\n  const userPath = config.getOptionalString('user.path') ?? 'users';\n  const loadUserPhotos = config.getOptionalBoolean('user.loadPhotos');\n\n  const groupExpand = config.getOptionalString('group.expand');\n  const groupFilter = config.getOptionalString('group.filter');\n  const groupSearch = config.getOptionalString('group.search');\n  const groupSelect = config.getOptionalStringArray('group.select');\n  const groupPath = config.getOptionalString('group.path') ?? 'groups';\n  const groupIncludeSubGroups = config.getOptionalBoolean(\n    'group.includeSubGroups',\n  );\n\n  const queryMode = config.getOptionalString('queryMode');\n  if (\n    queryMode !== undefined &&\n    queryMode !== 'basic' &&\n    queryMode !== 'advanced'\n  ) {\n    throw new Error(`queryMode must be one of: basic, advanced`);\n  }\n\n  const userGroupMemberFilter = config.getOptionalString(\n    'userGroupMember.filter',\n  );\n  const userGroupMemberSearch = config.getOptionalString(\n    'userGroupMember.search',\n  );\n  const userGroupMemberPath = config.getOptionalString('userGroupMember.path');\n\n  if (userFilter && userGroupMemberFilter) {\n    throw new Error(\n      `userFilter and userGroupMemberFilter are mutually exclusive, only one can be specified.`,\n    );\n  }\n  if (userFilter && userGroupMemberSearch) {\n    throw new Error(\n      `userGroupMemberSearch cannot be specified when userFilter is defined.`,\n    );\n  }\n\n  if (clientId && !clientSecret) {\n    throw new Error(`clientSecret must be provided when clientId is defined.`);\n  }\n\n  if (clientSecret && !clientId) {\n    throw new Error(`clientId must be provided when clientSecret is defined.`);\n  }\n\n  const schedule = config.has('schedule')\n    ? readSchedulerServiceTaskScheduleDefinitionFromConfig(\n        config.getConfig('schedule'),\n      )\n    : undefined;\n\n  return {\n    id,\n    target,\n    authority,\n    clientId,\n    clientSecret,\n    tenantId,\n    userExpand,\n    userFilter,\n    userSelect,\n    userPath,\n    loadUserPhotos,\n    groupExpand,\n    groupFilter,\n    groupSearch,\n    groupSelect,\n    groupPath,\n    groupIncludeSubGroups,\n    queryMode,\n    userGroupMemberFilter,\n    userGroupMemberSearch,\n    userGroupMemberPath,\n    schedule,\n  };\n}\n"],"names":["trimEnd","readSchedulerServiceTaskScheduleDefinitionFromConfig"],"mappings":";;;;;AAuBA,MAAM,mBAAA,GAAsB,SAAA;AAC5B,MAAM,cAAA,GAAiB,kCAAA;AA0JhB,SAAS,yBACd,MAAA,EACgC;AAChC,EAAA,MAAM,YAA4C,EAAC;AACnD,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,sBAAA,CAAuB,WAAW,KAAK,EAAC;AAEvE,EAAA,KAAA,MAAW,kBAAkB,eAAA,EAAiB;AAC5C,IAAA,MAAM,MAAA,GAASA,cAAA;AAAA,MACb,cAAA,CAAe,iBAAA,CAAkB,QAAQ,CAAA,IAAK,cAAA;AAAA,MAC9C;AAAA,KACF;AACA,IAAA,MAAM,SAAA,GAAY,cAAA,CAAe,iBAAA,CAAkB,WAAW,CAAA;AAE9D,IAAA,MAAM,QAAA,GAAW,cAAA,CAAe,SAAA,CAAU,UAAU,CAAA;AACpD,IAAA,MAAM,QAAA,GAAW,cAAA,CAAe,iBAAA,CAAkB,UAAU,CAAA;AAC5D,IAAA,MAAM,YAAA,GAAe,cAAA,CAAe,iBAAA,CAAkB,cAAc,CAAA;AAEpE,IAAA,MAAM,UAAA,GAAa,cAAA,CAAe,iBAAA,CAAkB,YAAY,CAAA;AAChE,IAAA,MAAM,UAAA,GAAa,cAAA,CAAe,iBAAA,CAAkB,YAAY,CAAA;AAChE,IAAA,MAAM,UAAA,GAAa,cAAA,CAAe,sBAAA,CAAuB,YAAY,CAAA;AACrE,IAAA,MAAM,wBAAwB,cAAA,CAAe,iBAAA;AAAA,MAC3C;AAAA,KACF;AACA,IAAA,MAAM,wBAAwB,cAAA,CAAe,iBAAA;AAAA,MAC3C;AAAA,KACF;AACA,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,iBAAA,CAAkB,aAAa,CAAA;AAClE,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,iBAAA,CAAkB,aAAa,CAAA;AAClE,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,iBAAA,CAAkB,aAAa,CAAA;AAElE,IAAA,IAAI,cAAc,qBAAA,EAAuB;AACvC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uFAAA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,cAAc,qBAAA,EAAuB;AACvC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qEAAA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,cAAA,CAAe,sBAAA,CAAuB,aAAa,CAAA;AACvE,IAAA,MAAM,SAAA,GAAY,cAAA,CAAe,iBAAA,CAAkB,WAAW,CAAA;AAC9D,IAAA,IACE,SAAA,KAAc,MAAA,IACd,SAAA,KAAc,OAAA,IACd,cAAc,UAAA,EACd;AACA,MAAA,MAAM,IAAI,MAAM,CAAA,yCAAA,CAA2C,CAAA;AAAA,IAC7D;AAEA,IAAA,IAAI,QAAA,IAAY,CAAC,YAAA,EAAc;AAC7B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uDAAA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,YAAA,IAAgB,CAAC,QAAA,EAAU;AAC7B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uDAAA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,SAAA,CAAU,IAAA,CAAK;AAAA,MACb,EAAA,EAAI,MAAA;AAAA,MACJ,MAAA;AAAA,MACA,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,qBAAA;AAAA,MACA,qBAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,SAAA;AACT;AASO,SAAS,oBACd,MAAA,EACgC;AAChC,EAAA,MAAM,kBAAkB,MAAA,CAAO,iBAAA;AAAA,IAC7B;AAAA,GACF;AACA,EAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,UAAU,CAAA,EAAG;AAEnC,IAAA,OAAO,CAAC,kBAAA,CAAmB,mBAAA,EAAqB,eAAe,CAAC,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,eAAA,CAAgB,IAAA,EAAK,CAAE,GAAA,CAAI,CAAA,EAAA,KAAM;AACtC,IAAA,MAAM,cAAA,GAAiB,eAAA,CAAgB,SAAA,CAAU,EAAE,CAAA;AAEnD,IAAA,OAAO,kBAAA,CAAmB,IAAI,cAAc,CAAA;AAAA,EAC9C,CAAC,CAAA;AACH;AAUO,SAAS,kBAAA,CACd,IACA,MAAA,EAC8B;AAC9B,EAAA,MAAM,MAAA,GAASA,cAAA;AAAA,IACb,MAAA,CAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,cAAA;AAAA,IACtC;AAAA,GACF;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,iBAAA,CAAkB,WAAW,CAAA;AAEtD,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,SAAA,CAAU,UAAU,CAAA;AAC5C,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,iBAAA,CAAkB,UAAU,CAAA;AACpD,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAE5D,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,iBAAA,CAAkB,aAAa,CAAA;AACzD,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,iBAAA,CAAkB,aAAa,CAAA;AACzD,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,sBAAA,CAAuB,aAAa,CAAA;AAC9D,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,iBAAA,CAAkB,WAAW,CAAA,IAAK,OAAA;AAC1D,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,kBAAA,CAAmB,iBAAiB,CAAA;AAElE,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAC3D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAC3D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,iBAAA,CAAkB,cAAc,CAAA;AAC3D,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,sBAAA,CAAuB,cAAc,CAAA;AAChE,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,iBAAA,CAAkB,YAAY,CAAA,IAAK,QAAA;AAC5D,EAAA,MAAM,wBAAwB,MAAA,CAAO,kBAAA;AAAA,IACnC;AAAA,GACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,iBAAA,CAAkB,WAAW,CAAA;AACtD,EAAA,IACE,SAAA,KAAc,MAAA,IACd,SAAA,KAAc,OAAA,IACd,cAAc,UAAA,EACd;AACA,IAAA,MAAM,IAAI,MAAM,CAAA,yCAAA,CAA2C,CAAA;AAAA,EAC7D;AAEA,EAAA,MAAM,wBAAwB,MAAA,CAAO,iBAAA;AAAA,IACnC;AAAA,GACF;AACA,EAAA,MAAM,wBAAwB,MAAA,CAAO,iBAAA;AAAA,IACnC;AAAA,GACF;AACA,EAAA,MAAM,mBAAA,GAAsB,MAAA,CAAO,iBAAA,CAAkB,sBAAsB,CAAA;AAE3E,EAAA,IAAI,cAAc,qBAAA,EAAuB;AACvC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,uFAAA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,cAAc,qBAAA,EAAuB;AACvC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,qEAAA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,IAAY,CAAC,YAAA,EAAc;AAC7B,IAAA,MAAM,IAAI,MAAM,CAAA,uDAAA,CAAyD,CAAA;AAAA,EAC3E;AAEA,EAAA,IAAI,YAAA,IAAgB,CAAC,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,MAAM,CAAA,uDAAA,CAAyD,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,UAAU,CAAA,GAClCC,qEAAA;AAAA,IACE,MAAA,CAAO,UAAU,UAAU;AAAA,GAC7B,GACA,MAAA;AAEJ,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,QAAA;AAAA,IACA,YAAA;AAAA,IACA,QAAA;AAAA,IACA,UAAA;AAAA,IACA,UAAA;AAAA,IACA,UAAA;AAAA,IACA,QAAA;AAAA,IACA,cAAA;AAAA,IACA,WAAA;AAAA,IACA,WAAA;AAAA,IACA,WAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,qBAAA;AAAA,IACA,mBAAA;AAAA,IACA;AAAA,GACF;AACF;;;;;;"}

package/dist/microsoftGraph/read.cjs.js

@@ -11,17 +11,48 @@ function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'defau
 var limiterFactory__default = /*#__PURE__*/_interopDefaultCompat(limiterFactory);
 
 const PAGE_SIZE = 999;
+const DEFAULT_USER_SELECT = [
+  "businessPhones",
+  "displayName",
+  "givenName",
+  "id",
+  "jobTitle",
+  "mail",
+  "mobilePhone",
+  "officeLocation",
+  "preferredLanguage",
+  "surname",
+  "userPrincipalName"
+];
+const MINIMUM_USER_SELECT = ["id", "accountEnabled"];
+function ensureMinimumSelect(select) {
+  const base = select ?? DEFAULT_USER_SELECT;
+  const lower = new Set(base.map((s) => s.toLocaleLowerCase("en-US")));
+  const missing = MINIMUM_USER_SELECT.filter(
+    (f) => !lower.has(f.toLocaleLowerCase("en-US"))
+  );
+  return missing.length > 0 ? [...base, ...missing] : base;
+}
+async function* filterDisabledUsers(users) {
+  for await (const user of users) {
+    if (user.accountEnabled !== false) {
+      yield user;
+    }
+  }
+}
 async function readMicrosoftGraphUsers(client, options) {
-  const users = client.getUsers(
-    {
-      filter: options.userFilter,
-      expand: options.userExpand,
-      select: options.userSelect,
-      top: PAGE_SIZE
-    },
-    options.queryMode,
-    options.userPath,
-    options.signal
+  const users = filterDisabledUsers(
+    client.getUsers(
+      {
+        filter: options.userFilter,
+        expand: options.userExpand,
+        select: ensureMinimumSelect(options.userSelect),
+        top: PAGE_SIZE
+      },
+      options.queryMode,
+      options.userPath,
+      options.signal
+    )
   );
   return {
     users: await transformUsers(
@@ -52,16 +83,17 @@ async function readMicrosoftGraphUsersInGroups(client, options) {
     userGroupMemberPromises.push(
       limiter(async () => {
         let groupMemberCount = 0;
-        for await (const user of client.getGroupUserMembers(
-          group.id,
-          {
-            expand: options.userExpand,
-            filter: options.userFilter,
-            select: options.userSelect,
-            top: PAGE_SIZE
-          },
-          options.queryMode,
-          options.signal
+        for await (const user of filterDisabledUsers(
+          client.getGroupUserMembers(
+            group.id,
+            {
+              expand: options.userExpand,
+              select: ensureMinimumSelect(options.userSelect),
+              top: PAGE_SIZE
+            },
+            options.queryMode,
+            options.signal
+          )
         )) {
           userGroupMembers.set(user.id, user);
           groupMemberCount++;
@@ -257,7 +289,6 @@ async function readMicrosoftGraphOrg(client, tenantId, options) {
       {
         queryMode: options.queryMode,
         userExpand: options.userExpand,
-        userFilter: options.userFilter,
         userSelect: options.userSelect,
         userGroupMemberFilter: options.userGroupMemberFilter,
         userGroupMemberSearch: options.userGroupMemberSearch,

package/dist/microsoftGraph/read.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.cjs.js","sources":["../../src/microsoftGraph/read.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  GroupEntity,\n  stringifyEntityRef,\n  UserEntity,\n} from '@backstage/catalog-model';\nimport limiterFactory from 'p-limit';\nimport { MicrosoftGraphClient } from './client';\nimport {\n  MICROSOFT_GRAPH_GROUP_ID_ANNOTATION,\n  MICROSOFT_GRAPH_TENANT_ID_ANNOTATION,\n  MICROSOFT_GRAPH_USER_ID_ANNOTATION,\n} from './constants';\nimport { buildMemberOf, buildOrgHierarchy } from './org';\nimport {\n  GroupTransformer,\n  OrganizationTransformer,\n  UserTransformer,\n} from './types';\nimport {\n  defaultGroupTransformer,\n  defaultOrganizationTransformer,\n  defaultUserTransformer,\n} from './defaultTransformers';\nimport * as MicrosoftGraph from '@microsoft/microsoft-graph-types';\nimport { LoggerService } from '@backstage/backend-plugin-api';\n\nconst PAGE_SIZE = 999;\n\nexport async function readMicrosoftGraphUsers(\n  client: MicrosoftGraphClient,\n  options: {\n    queryMode?: 'basic' | 'advanced';\n    userExpand?: string;\n    userFilter?: string;\n    userSelect?: string[];\n    userPath?: string;\n    loadUserPhotos?: boolean;\n    transformer?: UserTransformer;\n    logger: LoggerService;\n    signal?: AbortSignal;\n  },\n): Promise<{\n  users: UserEntity[]; // With all relations empty\n}> {\n  const users = client.getUsers(\n    {\n      filter: options.userFilter,\n      expand: options.userExpand,\n      select: options.userSelect,\n      top: PAGE_SIZE,\n    },\n    options.queryMode,\n    options.userPath,\n    options.signal,\n  );\n\n  return {\n    users: await transformUsers(\n      client,\n      users,\n      options.logger,\n      options.loadUserPhotos,\n      options.transformer,\n    ),\n  };\n}\n\nexport async function readMicrosoftGraphUsersInGroups(\n  client: MicrosoftGraphClient,\n  options: {\n    queryMode?: 'basic' | 'advanced';\n    userExpand?: string;\n    userFilter?: string;\n    userSelect?: string[];\n    loadUserPhotos?: boolean;\n    userGroupMemberSearch?: string;\n    userGroupMemberFilter?: string;\n    userGroupMemberPath?: string;\n    groupExpand?: string;\n    transformer?: UserTransformer;\n    logger: LoggerService;\n    signal?: AbortSignal;\n  },\n): Promise<{\n  users: UserEntity[]; // With all relations empty\n}> {\n  const limiter = limiterFactory(10);\n\n  const userGroupMemberPromises: Promise<void>[] = [];\n  const userGroupMembers = new Map<string, MicrosoftGraph.User>();\n\n  for await (const group of client.getGroups(\n    {\n      expand: options.groupExpand,\n      filter: options.userGroupMemberFilter,\n      search: options.userGroupMemberSearch,\n      select: ['id', 'displayName'],\n      top: PAGE_SIZE,\n    },\n    options.queryMode,\n    options.userGroupMemberPath,\n    options.signal,\n  )) {\n    // Process all groups in parallel, otherwise it can take quite some time\n    userGroupMemberPromises.push(\n      limiter(async () => {\n        let groupMemberCount = 0;\n        for await (const user of client.getGroupUserMembers(\n          group.id!,\n          {\n            expand: options.userExpand,\n            filter: options.userFilter,\n            select: options.userSelect,\n            top: PAGE_SIZE,\n          },\n          options.queryMode,\n          options.signal,\n        )) {\n          userGroupMembers.set(user.id!, user);\n          groupMemberCount++;\n        }\n        options.logger.debug('Read users from group', {\n          groupId: group.id,\n          groupName: group.displayName,\n          memberCount: groupMemberCount,\n        });\n      }),\n    );\n  }\n\n  // Wait for all group members\n  await Promise.all(userGroupMemberPromises);\n\n  options.logger.info('Read users from group membership', {\n    groupCount: userGroupMemberPromises.length,\n    userCount: userGroupMembers.size,\n  });\n\n  return {\n    users: await transformUsers(\n      client,\n      userGroupMembers.values(),\n      options.logger,\n      options.loadUserPhotos,\n      options.transformer,\n    ),\n  };\n}\n\nexport async function readMicrosoftGraphOrganization(\n  client: MicrosoftGraphClient,\n  tenantId: string,\n  options?: { transformer?: OrganizationTransformer; signal?: AbortSignal },\n): Promise<{\n  rootGroup?: GroupEntity; // With all relations empty\n}> {\n  // For now we expect a single root organization\n  const organization = await client.getOrganization(tenantId, options?.signal);\n  const transformer = options?.transformer ?? defaultOrganizationTransformer;\n  const rootGroup = await transformer(organization);\n\n  return { rootGroup };\n}\n\nexport async function readMicrosoftGraphGroups(\n  client: MicrosoftGraphClient,\n  tenantId: string,\n  options?: {\n    queryMode?: 'basic' | 'advanced';\n    groupExpand?: string;\n    groupFilter?: string;\n    groupSearch?: string;\n    groupSelect?: string[];\n    groupPath?: string;\n    groupIncludeSubGroups?: boolean;\n    groupTransformer?: GroupTransformer;\n    organizationTransformer?: OrganizationTransformer;\n    signal?: AbortSignal;\n  },\n): Promise<{\n  groups: GroupEntity[]; // With all relations empty\n  rootGroup: GroupEntity | undefined; // With all relations empty\n  groupMember: Map<string, Set<string>>;\n  groupMemberOf: Map<string, Set<string>>;\n}> {\n  const groups: GroupEntity[] = [];\n  const groupMember: Map<string, Set<string>> = new Map();\n  const groupMemberOf: Map<string, Set<string>> = new Map();\n  const limiter = limiterFactory(10);\n\n  const { rootGroup } = await readMicrosoftGraphOrganization(client, tenantId, {\n    transformer: options?.organizationTransformer,\n    signal: options?.signal,\n  });\n  if (rootGroup) {\n    groupMember.set(rootGroup.metadata.name, new Set<string>());\n    groups.push(rootGroup);\n  }\n\n  const transformer = options?.groupTransformer ?? defaultGroupTransformer;\n  const promises: Promise<void>[] = [];\n\n  for await (const group of client.getGroups(\n    {\n      expand: options?.groupExpand,\n      filter: options?.groupFilter,\n      search: options?.groupSearch,\n      select: options?.groupSelect,\n      top: PAGE_SIZE,\n    },\n    options?.queryMode,\n    options?.groupPath,\n    options?.signal,\n  )) {\n    // Process all groups in parallel, otherwise it can take quite some time\n    promises.push(\n      limiter(async () => {\n        // TODO: Loading groups photos doesn't work right now as Microsoft Graph\n        // doesn't allows this yet: https://microsoftgraph.uservoice.com/forums/920506-microsoft-graph-feature-requests/suggestions/37884922-allow-application-to-set-or-update-a-group-s-photo\n        /* const groupPhoto = await client.getGroupPhotoWithSizeLimit(\n          group.id!,\n          // We are limiting the photo size, as groups with full resolution photos\n          // can make the Backstage API slow\n          120,\n        );*/\n\n        const entity = await transformer(group /* , groupPhoto*/);\n\n        if (!entity) {\n          return;\n        }\n\n        for await (const member of client.getGroupMembers(\n          group.id!,\n          {\n            top: PAGE_SIZE,\n          },\n          undefined,\n          options?.signal,\n        )) {\n          if (!member.id) {\n            continue;\n          }\n\n          if (member['@odata.type'] === '#microsoft.graph.user') {\n            ensureItem(groupMemberOf, member.id, group.id!);\n          }\n\n          if (member['@odata.type'] === '#microsoft.graph.group') {\n            ensureItem(groupMember, group.id!, member.id);\n\n            if (options?.groupIncludeSubGroups) {\n              const groupMemberEntity = await transformer(member);\n\n              if (groupMemberEntity) {\n                groups.push(groupMemberEntity);\n\n                for await (const subMember of client.getGroupMembers(\n                  member.id!,\n                  { top: PAGE_SIZE },\n                  undefined,\n                  options?.signal,\n                )) {\n                  if (!subMember.id) {\n                    continue;\n                  }\n\n                  if (subMember['@odata.type'] === '#microsoft.graph.user') {\n                    ensureItem(groupMemberOf, subMember.id, member.id!);\n                  }\n\n                  if (subMember['@odata.type'] === '#microsoft.graph.group') {\n                    ensureItem(groupMember, member.id!, subMember.id);\n                  }\n                }\n              }\n            }\n          }\n        }\n\n        groups.push(entity);\n      }),\n    );\n  }\n\n  // Wait for all group members and photos to be loaded\n  await Promise.all(promises);\n\n  return {\n    groups,\n    rootGroup,\n    groupMember,\n    groupMemberOf,\n  };\n}\n\nexport function resolveRelations(\n  rootGroup: GroupEntity | undefined,\n  groups: GroupEntity[],\n  users: UserEntity[],\n  groupMember: Map<string, Set<string>>,\n  groupMemberOf: Map<string, Set<string>>,\n) {\n  // Build reference lookup tables, we reference them by the id of the graph\n  const groupMap: Map<string, GroupEntity> = new Map(); // by group-id or tenant-id\n\n  for (const group of groups) {\n    if (group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION]) {\n      groupMap.set(\n        group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION],\n        group,\n      );\n    }\n    if (group.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION]) {\n      groupMap.set(\n        group.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION],\n        group,\n      );\n    }\n  }\n\n  // Resolve all member relationships into the reverse direction\n  const parentGroups = new Map<string, Set<string>>();\n\n  groupMember.forEach((members, groupId) =>\n    members.forEach(m => ensureItem(parentGroups, m, groupId)),\n  );\n\n  // Make sure every group (except root) has at least one parent. If the parent is missing, add the root.\n  if (rootGroup) {\n    const tenantId =\n      rootGroup.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION];\n\n    groups.forEach(group => {\n      const groupId =\n        group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION];\n\n      if (!groupId) {\n        return;\n      }\n\n      if (retrieveItems(parentGroups, groupId).size === 0) {\n        ensureItem(parentGroups, groupId, tenantId);\n        ensureItem(groupMember, tenantId, groupId);\n      }\n    });\n  }\n\n  groups.forEach(group => {\n    const id =\n      group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION] ??\n      group.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION];\n\n    retrieveItems(groupMember, id).forEach(m => {\n      const childGroup = groupMap.get(m);\n      if (childGroup) {\n        group.spec.children.push(stringifyEntityRef(childGroup));\n      }\n    });\n\n    // TODO: Until we have better support for multiple parents in the model,\n    //       the order of the parents is important as changing it causes\n    //       unnecessary entity stitching randomly.\n    retrieveItems(parentGroups, id).forEach(p => {\n      // Only set the parent if it doesn't exist yet\n      if (group.spec.parent) {\n        return;\n      }\n      const parentGroup = groupMap.get(p);\n      if (parentGroup) {\n        // TODO: Only having a single parent group might not match every companies model, but fine for now.\n        group.spec.parent = stringifyEntityRef(parentGroup);\n      }\n    });\n  });\n\n  // Make sure that all groups have proper parents and children\n  buildOrgHierarchy(groups);\n\n  // Set relations for all users\n  users.forEach(user => {\n    const id = user.metadata.annotations![MICROSOFT_GRAPH_USER_ID_ANNOTATION];\n\n    retrieveItems(groupMemberOf, id).forEach(p => {\n      const parentGroup = groupMap.get(p);\n      if (parentGroup) {\n        if (!user.spec.memberOf) {\n          user.spec.memberOf = [];\n        }\n        user.spec.memberOf.push(stringifyEntityRef(parentGroup));\n      }\n    });\n  });\n\n  // Make sure all transitive memberships are available\n  buildMemberOf(groups, users);\n}\n\n/**\n * Reads an entire org as Group and User entities.\n *\n * @public\n */\nexport async function readMicrosoftGraphOrg(\n  client: MicrosoftGraphClient,\n  tenantId: string,\n  options: {\n    userExpand?: string;\n    userFilter?: string;\n    userSelect?: string[];\n    userPath?: string;\n    loadUserPhotos?: boolean;\n    userGroupMemberSearch?: string;\n    userGroupMemberFilter?: string;\n    userGroupMemberPath?: string;\n    groupExpand?: string;\n    groupSearch?: string;\n    groupFilter?: string;\n    groupSelect?: string[];\n    groupPath?: string;\n    groupIncludeSubGroups?: boolean;\n    queryMode?: 'basic' | 'advanced';\n    userTransformer?: UserTransformer;\n    groupTransformer?: GroupTransformer;\n    organizationTransformer?: OrganizationTransformer;\n    logger: LoggerService;\n    signal?: AbortSignal;\n  },\n): Promise<{ users: UserEntity[]; groups: GroupEntity[] }> {\n  let users: UserEntity[] = [];\n\n  if (\n    options.userGroupMemberFilter ||\n    options.userGroupMemberSearch ||\n    options.userGroupMemberPath\n  ) {\n    const { users: usersInGroups } = await readMicrosoftGraphUsersInGroups(\n      client,\n      {\n        queryMode: options.queryMode,\n        userExpand: options.userExpand,\n        userFilter: options.userFilter,\n        userSelect: options.userSelect,\n        userGroupMemberFilter: options.userGroupMemberFilter,\n        userGroupMemberSearch: options.userGroupMemberSearch,\n        userGroupMemberPath: options.userGroupMemberPath,\n        loadUserPhotos: options.loadUserPhotos,\n        transformer: options.userTransformer,\n        logger: options.logger,\n        signal: options.signal,\n      },\n    );\n    users = usersInGroups;\n  } else {\n    const { users: usersWithFilter } = await readMicrosoftGraphUsers(client, {\n      queryMode: options.queryMode,\n      userExpand: options.userExpand,\n      userFilter: options.userFilter,\n      userSelect: options.userSelect,\n      userPath: options.userPath,\n      loadUserPhotos: options.loadUserPhotos,\n      transformer: options.userTransformer,\n      logger: options.logger,\n      signal: options.signal,\n    });\n    users = usersWithFilter;\n  }\n  const { groups, rootGroup, groupMember, groupMemberOf } =\n    await readMicrosoftGraphGroups(client, tenantId, {\n      queryMode: options.queryMode,\n      groupExpand: options.groupExpand,\n      groupFilter: options.groupFilter,\n      groupSearch: options.groupSearch,\n      groupSelect: options.groupSelect,\n      groupPath: options.groupPath,\n      groupIncludeSubGroups: options.groupIncludeSubGroups,\n      groupTransformer: options.groupTransformer,\n      organizationTransformer: options.organizationTransformer,\n      signal: options.signal,\n    });\n\n  resolveRelations(rootGroup, groups, users, groupMember, groupMemberOf);\n  users.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n  groups.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n\n  return { users, groups };\n}\n\nasync function transformUsers(\n  client: MicrosoftGraphClient,\n  users: Iterable<MicrosoftGraph.User> | AsyncIterable<MicrosoftGraph.User>,\n  logger: LoggerService,\n  loadUserPhotos = true,\n  transformer?: UserTransformer,\n) {\n  const limiter = limiterFactory(10);\n\n  const resolvedTransformer = transformer ?? defaultUserTransformer;\n  const promises: Promise<void>[] = [];\n  const entities: UserEntity[] = [];\n\n  // Process all users in parallel, otherwise it can take quite some time\n  for await (const user of users) {\n    promises.push(\n      limiter(async () => {\n        let userPhoto;\n        try {\n          if (loadUserPhotos) {\n            userPhoto = await client.getUserPhotoWithSizeLimit(\n              user.id!,\n              // We are limiting the photo size, as users with full resolution photos\n              // can make the Backstage API slow\n              120,\n            );\n          }\n        } catch (e) {\n          logger.debug(`Unable to load user photo for`, {\n            user: user.id,\n            error: e,\n          });\n        }\n\n        const entity = await resolvedTransformer(user, userPhoto);\n\n        if (entity) {\n          entities.push(entity);\n        }\n      }),\n    );\n  }\n\n  // Wait for all users and photos to be downloaded\n  await Promise.all(promises);\n\n  logger.debug('Finished transforming users', {\n    microsoftUserCount: promises.length,\n    backstageUserCount: entities.length,\n  });\n  return entities;\n}\n\nfunction ensureItem(\n  target: Map<string, Set<string>>,\n  key: string,\n  value: string,\n) {\n  let set = target.get(key);\n  if (!set) {\n    set = new Set();\n    target.set(key, set);\n  }\n  set!.add(value);\n}\n\nfunction retrieveItems(\n  target: Map<string, Set<string>>,\n  key: string,\n): Set<string> {\n  return new Set([...(target.get(key) ?? [])].sort());\n}\n"],"names":["limiterFactory","defaultOrganizationTransformer","defaultGroupTransformer","MICROSOFT_GRAPH_GROUP_ID_ANNOTATION","MICROSOFT_GRAPH_TENANT_ID_ANNOTATION","stringifyEntityRef","buildOrgHierarchy","MICROSOFT_GRAPH_USER_ID_ANNOTATION","buildMemberOf","defaultUserTransformer"],"mappings":";;;;;;;;;;;;AA0CA,MAAM,SAAA,GAAY,GAAA;AAElB,eAAsB,uBAAA,CACpB,QACA,OAAA,EAaC;AACD,EAAA,MAAM,QAAQ,MAAA,CAAO,QAAA;AAAA,IACnB;AAAA,MACE,QAAQ,OAAA,CAAQ,UAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ,UAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ,UAAA;AAAA,MAChB,GAAA,EAAK;AAAA,KACP;AAAA,IACA,OAAA,CAAQ,SAAA;AAAA,IACR,OAAA,CAAQ,QAAA;AAAA,IACR,OAAA,CAAQ;AAAA,GACV;AAEA,EAAA,OAAO;AAAA,IACL,OAAO,MAAM,cAAA;AAAA,MACX,MAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAA,CAAQ,MAAA;AAAA,MACR,OAAA,CAAQ,cAAA;AAAA,MACR,OAAA,CAAQ;AAAA;AACV,GACF;AACF;AAEA,eAAsB,+BAAA,CACpB,QACA,OAAA,EAgBC;AACD,EAAA,MAAM,OAAA,GAAUA,gCAAe,EAAE,CAAA;AAEjC,EAAA,MAAM,0BAA2C,EAAC;AAClD,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAiC;AAE9D,EAAA,WAAA,MAAiB,SAAS,MAAA,CAAO,SAAA;AAAA,IAC/B;AAAA,MACE,QAAQ,OAAA,CAAQ,WAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ,qBAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ,qBAAA;AAAA,MAChB,MAAA,EAAQ,CAAC,IAAA,EAAM,aAAa,CAAA;AAAA,MAC5B,GAAA,EAAK;AAAA,KACP;AAAA,IACA,OAAA,CAAQ,SAAA;AAAA,IACR,OAAA,CAAQ,mBAAA;AAAA,IACR,OAAA,CAAQ;AAAA,GACV,EAAG;AAED,IAAA,uBAAA,CAAwB,IAAA;AAAA,MACtB,QAAQ,YAAY;AAClB,QAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,QAAA,WAAA,MAAiB,QAAQ,MAAA,CAAO,mBAAA;AAAA,UAC9B,KAAA,CAAM,EAAA;AAAA,UACN;AAAA,YACE,QAAQ,OAAA,CAAQ,UAAA;AAAA,YAChB,QAAQ,OAAA,CAAQ,UAAA;AAAA,YAChB,QAAQ,OAAA,CAAQ,UAAA;AAAA,YAChB,GAAA,EAAK;AAAA,WACP;AAAA,UACA,OAAA,CAAQ,SAAA;AAAA,UACR,OAAA,CAAQ;AAAA,SACV,EAAG;AACD,UAAA,gBAAA,CAAiB,GAAA,CAAI,IAAA,CAAK,EAAA,EAAK,IAAI,CAAA;AACnC,UAAA,gBAAA,EAAA;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,uBAAA,EAAyB;AAAA,UAC5C,SAAS,KAAA,CAAM,EAAA;AAAA,UACf,WAAW,KAAA,CAAM,WAAA;AAAA,UACjB,WAAA,EAAa;AAAA,SACd,CAAA;AAAA,MACH,CAAC;AAAA,KACH;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,CAAQ,IAAI,uBAAuB,CAAA;AAEzC,EAAA,OAAA,CAAQ,MAAA,CAAO,KAAK,kCAAA,EAAoC;AAAA,IACtD,YAAY,uBAAA,CAAwB,MAAA;AAAA,IACpC,WAAW,gBAAA,CAAiB;AAAA,GAC7B,CAAA;AAED,EAAA,OAAO;AAAA,IACL,OAAO,MAAM,cAAA;AAAA,MACX,MAAA;AAAA,MACA,iBAAiB,MAAA,EAAO;AAAA,MACxB,OAAA,CAAQ,MAAA;AAAA,MACR,OAAA,CAAQ,cAAA;AAAA,MACR,OAAA,CAAQ;AAAA;AACV,GACF;AACF;AAEA,eAAsB,8BAAA,CACpB,MAAA,EACA,QAAA,EACA,OAAA,EAGC;AAED,EAAA,MAAM,eAAe,MAAM,MAAA,CAAO,eAAA,CAAgB,QAAA,EAAU,SAAS,MAAM,CAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,WAAA,IAAeC,kDAAA;AAC5C,EAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,YAAY,CAAA;AAEhD,EAAA,OAAO,EAAE,SAAA,EAAU;AACrB;AAEA,eAAsB,wBAAA,CACpB,MAAA,EACA,QAAA,EACA,OAAA,EAiBC;AACD,EAAA,MAAM,SAAwB,EAAC;AAC/B,EAAA,MAAM,WAAA,uBAA4C,GAAA,EAAI;AACtD,EAAA,MAAM,aAAA,uBAA8C,GAAA,EAAI;AACxD,EAAA,MAAM,OAAA,GAAUD,gCAAe,EAAE,CAAA;AAEjC,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,8BAAA,CAA+B,QAAQ,QAAA,EAAU;AAAA,IAC3E,aAAa,OAAA,EAAS,uBAAA;AAAA,IACtB,QAAQ,OAAA,EAAS;AAAA,GAClB,CAAA;AACD,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,WAAA,CAAY,IAAI,SAAA,CAAU,QAAA,CAAS,IAAA,kBAAM,IAAI,KAAa,CAAA;AAC1D,IAAA,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,EACvB;AAEA,EAAA,MAAM,WAAA,GAAc,SAAS,gBAAA,IAAoBE,2CAAA;AACjD,EAAA,MAAM,WAA4B,EAAC;AAEnC,EAAA,WAAA,MAAiB,SAAS,MAAA,CAAO,SAAA;AAAA,IAC/B;AAAA,MACE,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,GAAA,EAAK;AAAA,KACP;AAAA,IACA,OAAA,EAAS,SAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,OAAA,EAAS;AAAA,GACX,EAAG;AAED,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,QAAQ,YAAY;AAUlB,QAAA,MAAM,SAAS,MAAM,WAAA;AAAA,UAAY;AAAA;AAAA,SAAuB;AAExD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA;AAAA,QACF;AAEA,QAAA,WAAA,MAAiB,UAAU,MAAA,CAAO,eAAA;AAAA,UAChC,KAAA,CAAM,EAAA;AAAA,UACN;AAAA,YACE,GAAA,EAAK;AAAA,WACP;AAAA,UACA,MAAA;AAAA,UACA,OAAA,EAAS;AAAA,SACX,EAAG;AACD,UAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,YAAA;AAAA,UACF;AAEA,UAAA,IAAI,MAAA,CAAO,aAAa,CAAA,KAAM,uBAAA,EAAyB;AACrD,YAAA,UAAA,CAAW,aAAA,EAAe,MAAA,CAAO,EAAA,EAAI,KAAA,CAAM,EAAG,CAAA;AAAA,UAChD;AAEA,UAAA,IAAI,MAAA,CAAO,aAAa,CAAA,KAAM,wBAAA,EAA0B;AACtD,YAAA,UAAA,CAAW,WAAA,EAAa,KAAA,CAAM,EAAA,EAAK,MAAA,CAAO,EAAE,CAAA;AAE5C,YAAA,IAAI,SAAS,qBAAA,EAAuB;AAClC,cAAA,MAAM,iBAAA,GAAoB,MAAM,WAAA,CAAY,MAAM,CAAA;AAElD,cAAA,IAAI,iBAAA,EAAmB;AACrB,gBAAA,MAAA,CAAO,KAAK,iBAAiB,CAAA;AAE7B,gBAAA,WAAA,MAAiB,aAAa,MAAA,CAAO,eAAA;AAAA,kBACnC,MAAA,CAAO,EAAA;AAAA,kBACP,EAAE,KAAK,SAAA,EAAU;AAAA,kBACjB,MAAA;AAAA,kBACA,OAAA,EAAS;AAAA,iBACX,EAAG;AACD,kBAAA,IAAI,CAAC,UAAU,EAAA,EAAI;AACjB,oBAAA;AAAA,kBACF;AAEA,kBAAA,IAAI,SAAA,CAAU,aAAa,CAAA,KAAM,uBAAA,EAAyB;AACxD,oBAAA,UAAA,CAAW,aAAA,EAAe,SAAA,CAAU,EAAA,EAAI,MAAA,CAAO,EAAG,CAAA;AAAA,kBACpD;AAEA,kBAAA,IAAI,SAAA,CAAU,aAAa,CAAA,KAAM,wBAAA,EAA0B;AACzD,oBAAA,UAAA,CAAW,WAAA,EAAa,MAAA,CAAO,EAAA,EAAK,SAAA,CAAU,EAAE,CAAA;AAAA,kBAClD;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,QAAA,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,MACpB,CAAC;AAAA,KACH;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAE1B,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,SAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,gBAAA,CACd,SAAA,EACA,MAAA,EACA,KAAA,EACA,aACA,aAAA,EACA;AAEA,EAAA,MAAM,QAAA,uBAAyC,GAAA,EAAI;AAEnD,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,6CAAmC,CAAA,EAAG;AACpE,MAAA,QAAA,CAAS,GAAA;AAAA,QACP,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaA,6CAAmC,CAAA;AAAA,QAC/D;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,8CAAoC,CAAA,EAAG;AACrE,MAAA,QAAA,CAAS,GAAA;AAAA,QACP,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaA,8CAAoC,CAAA;AAAA,QAChE;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAyB;AAElD,EAAA,WAAA,CAAY,OAAA;AAAA,IAAQ,CAAC,OAAA,EAAS,OAAA,KAC5B,OAAA,CAAQ,OAAA,CAAQ,OAAK,UAAA,CAAW,YAAA,EAAc,CAAA,EAAG,OAAO,CAAC;AAAA,GAC3D;AAGA,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,QAAA,GACJ,SAAA,CAAU,QAAA,CAAS,WAAA,CAAaA,8CAAoC,CAAA;AAEtE,IAAA,MAAA,CAAO,QAAQ,CAAA,KAAA,KAAS;AACtB,MAAA,MAAM,OAAA,GACJ,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaD,6CAAmC,CAAA;AAEjE,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,aAAA,CAAc,YAAA,EAAc,OAAO,CAAA,CAAE,SAAS,CAAA,EAAG;AACnD,QAAA,UAAA,CAAW,YAAA,EAAc,SAAS,QAAQ,CAAA;AAC1C,QAAA,UAAA,CAAW,WAAA,EAAa,UAAU,OAAO,CAAA;AAAA,MAC3C;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAA,CAAO,QAAQ,CAAA,KAAA,KAAS;AACtB,IAAA,MAAM,EAAA,GACJ,MAAM,QAAA,CAAS,WAAA,CAAaA,6CAAmC,CAAA,IAC/D,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,8CAAoC,CAAA;AAElE,IAAA,aAAA,CAAc,WAAA,EAAa,EAAE,CAAA,CAAE,OAAA,CAAQ,CAAA,CAAA,KAAK;AAC1C,MAAA,MAAM,UAAA,GAAa,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AACjC,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAKC,+BAAA,CAAmB,UAAU,CAAC,CAAA;AAAA,MACzD;AAAA,IACF,CAAC,CAAA;AAKD,IAAA,aAAA,CAAc,YAAA,EAAc,EAAE,CAAA,CAAE,OAAA,CAAQ,CAAA,CAAA,KAAK;AAE3C,MAAA,IAAI,KAAA,CAAM,KAAK,MAAA,EAAQ;AACrB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,WAAA,GAAc,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AAClC,MAAA,IAAI,WAAA,EAAa;AAEf,QAAA,KAAA,CAAM,IAAA,CAAK,MAAA,GAASA,+BAAA,CAAmB,WAAW,CAAA;AAAA,MACpD;AAAA,IACF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAAC,qBAAA,CAAkB,MAAM,CAAA;AAGxB,EAAA,KAAA,CAAM,QAAQ,CAAA,IAAA,KAAQ;AACpB,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,WAAA,CAAaC,4CAAkC,CAAA;AAExE,IAAA,aAAA,CAAc,aAAA,EAAe,EAAE,CAAA,CAAE,OAAA,CAAQ,CAAA,CAAA,KAAK;AAC5C,MAAA,MAAM,WAAA,GAAc,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AAClC,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU;AACvB,UAAA,IAAA,CAAK,IAAA,CAAK,WAAW,EAAC;AAAA,QACxB;AACA,QAAA,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,IAAA,CAAKF,+BAAA,CAAmB,WAAW,CAAC,CAAA;AAAA,MACzD;AAAA,IACF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAAG,iBAAA,CAAc,QAAQ,KAAK,CAAA;AAC7B;AAOA,eAAsB,qBAAA,CACpB,MAAA,EACA,QAAA,EACA,OAAA,EAsByD;AACzD,EAAA,IAAI,QAAsB,EAAC;AAE3B,EAAA,IACE,OAAA,CAAQ,qBAAA,IACR,OAAA,CAAQ,qBAAA,IACR,QAAQ,mBAAA,EACR;AACA,IAAA,MAAM,EAAE,KAAA,EAAO,aAAA,EAAc,GAAI,MAAM,+BAAA;AAAA,MACrC,MAAA;AAAA,MACA;AAAA,QACE,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,QAC/B,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,QAC/B,qBAAqB,OAAA,CAAQ,mBAAA;AAAA,QAC7B,gBAAgB,OAAA,CAAQ,cAAA;AAAA,QACxB,aAAa,OAAA,CAAQ,eAAA;AAAA,QACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,QAAQ,OAAA,CAAQ;AAAA;AAClB,KACF;AACA,IAAA,KAAA,GAAQ,aAAA;AAAA,EACV,CAAA,MAAO;AACL,IAAA,MAAM,EAAE,KAAA,EAAO,eAAA,EAAgB,GAAI,MAAM,wBAAwB,MAAA,EAAQ;AAAA,MACvE,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,gBAAgB,OAAA,CAAQ,cAAA;AAAA,MACxB,aAAa,OAAA,CAAQ,eAAA;AAAA,MACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ;AAAA,KACjB,CAAA;AACD,IAAA,KAAA,GAAQ,eAAA;AAAA,EACV;AACA,EAAA,MAAM,EAAE,QAAQ,SAAA,EAAW,WAAA,EAAa,eAAc,GACpD,MAAM,wBAAA,CAAyB,MAAA,EAAQ,QAAA,EAAU;AAAA,IAC/C,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,IAC/B,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,IAC1B,yBAAyB,OAAA,CAAQ,uBAAA;AAAA,IACjC,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AAEH,EAAA,gBAAA,CAAiB,SAAA,EAAW,MAAA,EAAQ,KAAA,EAAO,WAAA,EAAa,aAAa,CAAA;AACrE,EAAA,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AACnE,EAAA,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AAEpE,EAAA,OAAO,EAAE,OAAO,MAAA,EAAO;AACzB;AAEA,eAAe,eACb,MAAA,EACA,KAAA,EACA,MAAA,EACA,cAAA,GAAiB,MACjB,WAAA,EACA;AACA,EAAA,MAAM,OAAA,GAAUR,gCAAe,EAAE,CAAA;AAEjC,EAAA,MAAM,sBAAsB,WAAA,IAAeS,0CAAA;AAC3C,EAAA,MAAM,WAA4B,EAAC;AACnC,EAAA,MAAM,WAAyB,EAAC;AAGhC,EAAA,WAAA,MAAiB,QAAQ,KAAA,EAAO;AAC9B,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,QAAQ,YAAY;AAClB,QAAA,IAAI,SAAA;AACJ,QAAA,IAAI;AACF,UAAA,IAAI,cAAA,EAAgB;AAClB,YAAA,SAAA,GAAY,MAAM,MAAA,CAAO,yBAAA;AAAA,cACvB,IAAA,CAAK,EAAA;AAAA;AAAA;AAAA,cAGL;AAAA,aACF;AAAA,UACF;AAAA,QACF,SAAS,CAAA,EAAG;AACV,UAAA,MAAA,CAAO,MAAM,CAAA,6BAAA,CAAA,EAAiC;AAAA,YAC5C,MAAM,IAAA,CAAK,EAAA;AAAA,YACX,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,IAAA,EAAM,SAAS,CAAA;AAExD,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,QAAA,CAAS,KAAK,MAAM,CAAA;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,KACH;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAE1B,EAAA,MAAA,CAAO,MAAM,6BAAA,EAA+B;AAAA,IAC1C,oBAAoB,QAAA,CAAS,MAAA;AAAA,IAC7B,oBAAoB,QAAA,CAAS;AAAA,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,UAAA,CACP,MAAA,EACA,GAAA,EACA,KAAA,EACA;AACA,EAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACxB,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,GAAA,uBAAU,GAAA,EAAI;AACd,IAAA,MAAA,CAAO,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,EACrB;AACA,EAAA,GAAA,CAAK,IAAI,KAAK,CAAA;AAChB;AAEA,SAAS,aAAA,CACP,QACA,GAAA,EACa;AACb,EAAA,OAAO,IAAI,GAAA,CAAI,CAAC,GAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,IAAK,EAAG,CAAA,CAAE,IAAA,EAAM,CAAA;AACpD;;;;;;;;;"}
+{"version":3,"file":"read.cjs.js","sources":["../../src/microsoftGraph/read.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  GroupEntity,\n  stringifyEntityRef,\n  UserEntity,\n} from '@backstage/catalog-model';\nimport limiterFactory from 'p-limit';\nimport { MicrosoftGraphClient } from './client';\nimport {\n  MICROSOFT_GRAPH_GROUP_ID_ANNOTATION,\n  MICROSOFT_GRAPH_TENANT_ID_ANNOTATION,\n  MICROSOFT_GRAPH_USER_ID_ANNOTATION,\n} from './constants';\nimport { buildMemberOf, buildOrgHierarchy } from './org';\nimport {\n  GroupTransformer,\n  OrganizationTransformer,\n  UserTransformer,\n} from './types';\nimport {\n  defaultGroupTransformer,\n  defaultOrganizationTransformer,\n  defaultUserTransformer,\n} from './defaultTransformers';\nimport * as MicrosoftGraph from '@microsoft/microsoft-graph-types';\nimport { LoggerService } from '@backstage/backend-plugin-api';\n\nconst PAGE_SIZE = 999;\n\n// The default properties returned by the Microsoft Graph API for User\n// objects when no $select is specified. accountEnabled is NOT included\n// in this set — it requires an explicit $select.\n// https://learn.microsoft.com/en-us/graph/api/user-list#optional-query-parameters\nconst DEFAULT_USER_SELECT = [\n  'businessPhones',\n  'displayName',\n  'givenName',\n  'id',\n  'jobTitle',\n  'mail',\n  'mobilePhone',\n  'officeLocation',\n  'preferredLanguage',\n  'surname',\n  'userPrincipalName',\n];\n\n// Fields that our code requires regardless of what the user or default\n// projection provides. These are always added to the $select list.\nconst MINIMUM_USER_SELECT = ['id', 'accountEnabled'];\n\nfunction ensureMinimumSelect(select: string[] | undefined): string[] {\n  const base = select ?? DEFAULT_USER_SELECT;\n  const lower = new Set(base.map(s => s.toLocaleLowerCase('en-US')));\n  const missing = MINIMUM_USER_SELECT.filter(\n    f => !lower.has(f.toLocaleLowerCase('en-US')),\n  );\n  return missing.length > 0 ? [...base, ...missing] : base;\n}\n\nasync function* filterDisabledUsers(\n  users: AsyncIterable<MicrosoftGraph.User>,\n): AsyncIterable<MicrosoftGraph.User> {\n  for await (const user of users) {\n    if (user.accountEnabled !== false) {\n      yield user;\n    }\n  }\n}\n\nexport async function readMicrosoftGraphUsers(\n  client: MicrosoftGraphClient,\n  options: {\n    queryMode?: 'basic' | 'advanced';\n    userExpand?: string;\n    userFilter?: string;\n    userSelect?: string[];\n    userPath?: string;\n    loadUserPhotos?: boolean;\n    transformer?: UserTransformer;\n    logger: LoggerService;\n    signal?: AbortSignal;\n  },\n): Promise<{\n  users: UserEntity[]; // With all relations empty\n}> {\n  const users = filterDisabledUsers(\n    client.getUsers(\n      {\n        filter: options.userFilter,\n        expand: options.userExpand,\n        select: ensureMinimumSelect(options.userSelect),\n        top: PAGE_SIZE,\n      },\n      options.queryMode,\n      options.userPath,\n      options.signal,\n    ),\n  );\n\n  return {\n    users: await transformUsers(\n      client,\n      users,\n      options.logger,\n      options.loadUserPhotos,\n      options.transformer,\n    ),\n  };\n}\n\nexport async function readMicrosoftGraphUsersInGroups(\n  client: MicrosoftGraphClient,\n  options: {\n    queryMode?: 'basic' | 'advanced';\n    userExpand?: string;\n    userSelect?: string[];\n    loadUserPhotos?: boolean;\n    userGroupMemberSearch?: string;\n    userGroupMemberFilter?: string;\n    userGroupMemberPath?: string;\n    groupExpand?: string;\n    transformer?: UserTransformer;\n    logger: LoggerService;\n    signal?: AbortSignal;\n  },\n): Promise<{\n  users: UserEntity[]; // With all relations empty\n}> {\n  const limiter = limiterFactory(10);\n\n  const userGroupMemberPromises: Promise<void>[] = [];\n  const userGroupMembers = new Map<string, MicrosoftGraph.User>();\n\n  for await (const group of client.getGroups(\n    {\n      expand: options.groupExpand,\n      filter: options.userGroupMemberFilter,\n      search: options.userGroupMemberSearch,\n      select: ['id', 'displayName'],\n      top: PAGE_SIZE,\n    },\n    options.queryMode,\n    options.userGroupMemberPath,\n    options.signal,\n  )) {\n    // Process all groups in parallel, otherwise it can take quite some time\n    userGroupMemberPromises.push(\n      limiter(async () => {\n        let groupMemberCount = 0;\n        for await (const user of filterDisabledUsers(\n          client.getGroupUserMembers(\n            group.id!,\n            {\n              expand: options.userExpand,\n              select: ensureMinimumSelect(options.userSelect),\n              top: PAGE_SIZE,\n            },\n            options.queryMode,\n            options.signal,\n          ),\n        )) {\n          userGroupMembers.set(user.id!, user);\n          groupMemberCount++;\n        }\n        options.logger.debug('Read users from group', {\n          groupId: group.id,\n          groupName: group.displayName,\n          memberCount: groupMemberCount,\n        });\n      }),\n    );\n  }\n\n  // Wait for all group members\n  await Promise.all(userGroupMemberPromises);\n\n  options.logger.info('Read users from group membership', {\n    groupCount: userGroupMemberPromises.length,\n    userCount: userGroupMembers.size,\n  });\n\n  return {\n    users: await transformUsers(\n      client,\n      userGroupMembers.values(),\n      options.logger,\n      options.loadUserPhotos,\n      options.transformer,\n    ),\n  };\n}\n\nexport async function readMicrosoftGraphOrganization(\n  client: MicrosoftGraphClient,\n  tenantId: string,\n  options?: { transformer?: OrganizationTransformer; signal?: AbortSignal },\n): Promise<{\n  rootGroup?: GroupEntity; // With all relations empty\n}> {\n  // For now we expect a single root organization\n  const organization = await client.getOrganization(tenantId, options?.signal);\n  const transformer = options?.transformer ?? defaultOrganizationTransformer;\n  const rootGroup = await transformer(organization);\n\n  return { rootGroup };\n}\n\nexport async function readMicrosoftGraphGroups(\n  client: MicrosoftGraphClient,\n  tenantId: string,\n  options?: {\n    queryMode?: 'basic' | 'advanced';\n    groupExpand?: string;\n    groupFilter?: string;\n    groupSearch?: string;\n    groupSelect?: string[];\n    groupPath?: string;\n    groupIncludeSubGroups?: boolean;\n    groupTransformer?: GroupTransformer;\n    organizationTransformer?: OrganizationTransformer;\n    signal?: AbortSignal;\n  },\n): Promise<{\n  groups: GroupEntity[]; // With all relations empty\n  rootGroup: GroupEntity | undefined; // With all relations empty\n  groupMember: Map<string, Set<string>>;\n  groupMemberOf: Map<string, Set<string>>;\n}> {\n  const groups: GroupEntity[] = [];\n  const groupMember: Map<string, Set<string>> = new Map();\n  const groupMemberOf: Map<string, Set<string>> = new Map();\n  const limiter = limiterFactory(10);\n\n  const { rootGroup } = await readMicrosoftGraphOrganization(client, tenantId, {\n    transformer: options?.organizationTransformer,\n    signal: options?.signal,\n  });\n  if (rootGroup) {\n    groupMember.set(rootGroup.metadata.name, new Set<string>());\n    groups.push(rootGroup);\n  }\n\n  const transformer = options?.groupTransformer ?? defaultGroupTransformer;\n  const promises: Promise<void>[] = [];\n\n  for await (const group of client.getGroups(\n    {\n      expand: options?.groupExpand,\n      filter: options?.groupFilter,\n      search: options?.groupSearch,\n      select: options?.groupSelect,\n      top: PAGE_SIZE,\n    },\n    options?.queryMode,\n    options?.groupPath,\n    options?.signal,\n  )) {\n    // Process all groups in parallel, otherwise it can take quite some time\n    promises.push(\n      limiter(async () => {\n        // TODO: Loading groups photos doesn't work right now as Microsoft Graph\n        // doesn't allows this yet: https://microsoftgraph.uservoice.com/forums/920506-microsoft-graph-feature-requests/suggestions/37884922-allow-application-to-set-or-update-a-group-s-photo\n        /* const groupPhoto = await client.getGroupPhotoWithSizeLimit(\n          group.id!,\n          // We are limiting the photo size, as groups with full resolution photos\n          // can make the Backstage API slow\n          120,\n        );*/\n\n        const entity = await transformer(group /* , groupPhoto*/);\n\n        if (!entity) {\n          return;\n        }\n\n        for await (const member of client.getGroupMembers(\n          group.id!,\n          {\n            top: PAGE_SIZE,\n          },\n          undefined,\n          options?.signal,\n        )) {\n          if (!member.id) {\n            continue;\n          }\n\n          if (member['@odata.type'] === '#microsoft.graph.user') {\n            ensureItem(groupMemberOf, member.id, group.id!);\n          }\n\n          if (member['@odata.type'] === '#microsoft.graph.group') {\n            ensureItem(groupMember, group.id!, member.id);\n\n            if (options?.groupIncludeSubGroups) {\n              const groupMemberEntity = await transformer(member);\n\n              if (groupMemberEntity) {\n                groups.push(groupMemberEntity);\n\n                for await (const subMember of client.getGroupMembers(\n                  member.id!,\n                  { top: PAGE_SIZE },\n                  undefined,\n                  options?.signal,\n                )) {\n                  if (!subMember.id) {\n                    continue;\n                  }\n\n                  if (subMember['@odata.type'] === '#microsoft.graph.user') {\n                    ensureItem(groupMemberOf, subMember.id, member.id!);\n                  }\n\n                  if (subMember['@odata.type'] === '#microsoft.graph.group') {\n                    ensureItem(groupMember, member.id!, subMember.id);\n                  }\n                }\n              }\n            }\n          }\n        }\n\n        groups.push(entity);\n      }),\n    );\n  }\n\n  // Wait for all group members and photos to be loaded\n  await Promise.all(promises);\n\n  return {\n    groups,\n    rootGroup,\n    groupMember,\n    groupMemberOf,\n  };\n}\n\nexport function resolveRelations(\n  rootGroup: GroupEntity | undefined,\n  groups: GroupEntity[],\n  users: UserEntity[],\n  groupMember: Map<string, Set<string>>,\n  groupMemberOf: Map<string, Set<string>>,\n) {\n  // Build reference lookup tables, we reference them by the id of the graph\n  const groupMap: Map<string, GroupEntity> = new Map(); // by group-id or tenant-id\n\n  for (const group of groups) {\n    if (group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION]) {\n      groupMap.set(\n        group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION],\n        group,\n      );\n    }\n    if (group.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION]) {\n      groupMap.set(\n        group.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION],\n        group,\n      );\n    }\n  }\n\n  // Resolve all member relationships into the reverse direction\n  const parentGroups = new Map<string, Set<string>>();\n\n  groupMember.forEach((members, groupId) =>\n    members.forEach(m => ensureItem(parentGroups, m, groupId)),\n  );\n\n  // Make sure every group (except root) has at least one parent. If the parent is missing, add the root.\n  if (rootGroup) {\n    const tenantId =\n      rootGroup.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION];\n\n    groups.forEach(group => {\n      const groupId =\n        group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION];\n\n      if (!groupId) {\n        return;\n      }\n\n      if (retrieveItems(parentGroups, groupId).size === 0) {\n        ensureItem(parentGroups, groupId, tenantId);\n        ensureItem(groupMember, tenantId, groupId);\n      }\n    });\n  }\n\n  groups.forEach(group => {\n    const id =\n      group.metadata.annotations![MICROSOFT_GRAPH_GROUP_ID_ANNOTATION] ??\n      group.metadata.annotations![MICROSOFT_GRAPH_TENANT_ID_ANNOTATION];\n\n    retrieveItems(groupMember, id).forEach(m => {\n      const childGroup = groupMap.get(m);\n      if (childGroup) {\n        group.spec.children.push(stringifyEntityRef(childGroup));\n      }\n    });\n\n    // TODO: Until we have better support for multiple parents in the model,\n    //       the order of the parents is important as changing it causes\n    //       unnecessary entity stitching randomly.\n    retrieveItems(parentGroups, id).forEach(p => {\n      // Only set the parent if it doesn't exist yet\n      if (group.spec.parent) {\n        return;\n      }\n      const parentGroup = groupMap.get(p);\n      if (parentGroup) {\n        // TODO: Only having a single parent group might not match every companies model, but fine for now.\n        group.spec.parent = stringifyEntityRef(parentGroup);\n      }\n    });\n  });\n\n  // Make sure that all groups have proper parents and children\n  buildOrgHierarchy(groups);\n\n  // Set relations for all users\n  users.forEach(user => {\n    const id = user.metadata.annotations![MICROSOFT_GRAPH_USER_ID_ANNOTATION];\n\n    retrieveItems(groupMemberOf, id).forEach(p => {\n      const parentGroup = groupMap.get(p);\n      if (parentGroup) {\n        if (!user.spec.memberOf) {\n          user.spec.memberOf = [];\n        }\n        user.spec.memberOf.push(stringifyEntityRef(parentGroup));\n      }\n    });\n  });\n\n  // Make sure all transitive memberships are available\n  buildMemberOf(groups, users);\n}\n\n/**\n * Reads an entire org as Group and User entities.\n *\n * @public\n */\nexport async function readMicrosoftGraphOrg(\n  client: MicrosoftGraphClient,\n  tenantId: string,\n  options: {\n    userExpand?: string;\n    userFilter?: string;\n    userSelect?: string[];\n    userPath?: string;\n    loadUserPhotos?: boolean;\n    userGroupMemberSearch?: string;\n    userGroupMemberFilter?: string;\n    userGroupMemberPath?: string;\n    groupExpand?: string;\n    groupSearch?: string;\n    groupFilter?: string;\n    groupSelect?: string[];\n    groupPath?: string;\n    groupIncludeSubGroups?: boolean;\n    queryMode?: 'basic' | 'advanced';\n    userTransformer?: UserTransformer;\n    groupTransformer?: GroupTransformer;\n    organizationTransformer?: OrganizationTransformer;\n    logger: LoggerService;\n    signal?: AbortSignal;\n  },\n): Promise<{ users: UserEntity[]; groups: GroupEntity[] }> {\n  let users: UserEntity[] = [];\n\n  if (\n    options.userGroupMemberFilter ||\n    options.userGroupMemberSearch ||\n    options.userGroupMemberPath\n  ) {\n    const { users: usersInGroups } = await readMicrosoftGraphUsersInGroups(\n      client,\n      {\n        queryMode: options.queryMode,\n        userExpand: options.userExpand,\n        userSelect: options.userSelect,\n        userGroupMemberFilter: options.userGroupMemberFilter,\n        userGroupMemberSearch: options.userGroupMemberSearch,\n        userGroupMemberPath: options.userGroupMemberPath,\n        loadUserPhotos: options.loadUserPhotos,\n        transformer: options.userTransformer,\n        logger: options.logger,\n        signal: options.signal,\n      },\n    );\n    users = usersInGroups;\n  } else {\n    const { users: usersWithFilter } = await readMicrosoftGraphUsers(client, {\n      queryMode: options.queryMode,\n      userExpand: options.userExpand,\n      userFilter: options.userFilter,\n      userSelect: options.userSelect,\n      userPath: options.userPath,\n      loadUserPhotos: options.loadUserPhotos,\n      transformer: options.userTransformer,\n      logger: options.logger,\n      signal: options.signal,\n    });\n    users = usersWithFilter;\n  }\n  const { groups, rootGroup, groupMember, groupMemberOf } =\n    await readMicrosoftGraphGroups(client, tenantId, {\n      queryMode: options.queryMode,\n      groupExpand: options.groupExpand,\n      groupFilter: options.groupFilter,\n      groupSearch: options.groupSearch,\n      groupSelect: options.groupSelect,\n      groupPath: options.groupPath,\n      groupIncludeSubGroups: options.groupIncludeSubGroups,\n      groupTransformer: options.groupTransformer,\n      organizationTransformer: options.organizationTransformer,\n      signal: options.signal,\n    });\n\n  resolveRelations(rootGroup, groups, users, groupMember, groupMemberOf);\n  users.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n  groups.sort((a, b) => a.metadata.name.localeCompare(b.metadata.name));\n\n  return { users, groups };\n}\n\nasync function transformUsers(\n  client: MicrosoftGraphClient,\n  users: Iterable<MicrosoftGraph.User> | AsyncIterable<MicrosoftGraph.User>,\n  logger: LoggerService,\n  loadUserPhotos = true,\n  transformer?: UserTransformer,\n) {\n  const limiter = limiterFactory(10);\n\n  const resolvedTransformer = transformer ?? defaultUserTransformer;\n  const promises: Promise<void>[] = [];\n  const entities: UserEntity[] = [];\n\n  // Process all users in parallel, otherwise it can take quite some time\n  for await (const user of users) {\n    promises.push(\n      limiter(async () => {\n        let userPhoto;\n        try {\n          if (loadUserPhotos) {\n            userPhoto = await client.getUserPhotoWithSizeLimit(\n              user.id!,\n              // We are limiting the photo size, as users with full resolution photos\n              // can make the Backstage API slow\n              120,\n            );\n          }\n        } catch (e) {\n          logger.debug(`Unable to load user photo for`, {\n            user: user.id,\n            error: e,\n          });\n        }\n\n        const entity = await resolvedTransformer(user, userPhoto);\n\n        if (entity) {\n          entities.push(entity);\n        }\n      }),\n    );\n  }\n\n  // Wait for all users and photos to be downloaded\n  await Promise.all(promises);\n\n  logger.debug('Finished transforming users', {\n    microsoftUserCount: promises.length,\n    backstageUserCount: entities.length,\n  });\n  return entities;\n}\n\nfunction ensureItem(\n  target: Map<string, Set<string>>,\n  key: string,\n  value: string,\n) {\n  let set = target.get(key);\n  if (!set) {\n    set = new Set();\n    target.set(key, set);\n  }\n  set!.add(value);\n}\n\nfunction retrieveItems(\n  target: Map<string, Set<string>>,\n  key: string,\n): Set<string> {\n  return new Set([...(target.get(key) ?? [])].sort());\n}\n"],"names":["limiterFactory","defaultOrganizationTransformer","defaultGroupTransformer","MICROSOFT_GRAPH_GROUP_ID_ANNOTATION","MICROSOFT_GRAPH_TENANT_ID_ANNOTATION","stringifyEntityRef","buildOrgHierarchy","MICROSOFT_GRAPH_USER_ID_ANNOTATION","buildMemberOf","defaultUserTransformer"],"mappings":";;;;;;;;;;;;AA0CA,MAAM,SAAA,GAAY,GAAA;AAMlB,MAAM,mBAAA,GAAsB;AAAA,EAC1B,gBAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,IAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA,aAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA;AAIA,MAAM,mBAAA,GAAsB,CAAC,IAAA,EAAM,gBAAgB,CAAA;AAEnD,SAAS,oBAAoB,MAAA,EAAwC;AACnE,EAAA,MAAM,OAAO,MAAA,IAAU,mBAAA;AACvB,EAAA,MAAM,KAAA,GAAQ,IAAI,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,OAAK,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAC,CAAC,CAAA;AACjE,EAAA,MAAM,UAAU,mBAAA,CAAoB,MAAA;AAAA,IAClC,OAAK,CAAC,KAAA,CAAM,IAAI,CAAA,CAAE,iBAAA,CAAkB,OAAO,CAAC;AAAA,GAC9C;AACA,EAAA,OAAO,OAAA,CAAQ,SAAS,CAAA,GAAI,CAAC,GAAG,IAAA,EAAM,GAAG,OAAO,CAAA,GAAI,IAAA;AACtD;AAEA,gBAAgB,oBACd,KAAA,EACoC;AACpC,EAAA,WAAA,MAAiB,QAAQ,KAAA,EAAO;AAC9B,IAAA,IAAI,IAAA,CAAK,mBAAmB,KAAA,EAAO;AACjC,MAAA,MAAM,IAAA;AAAA,IACR;AAAA,EACF;AACF;AAEA,eAAsB,uBAAA,CACpB,QACA,OAAA,EAaC;AACD,EAAA,MAAM,KAAA,GAAQ,mBAAA;AAAA,IACZ,MAAA,CAAO,QAAA;AAAA,MACL;AAAA,QACE,QAAQ,OAAA,CAAQ,UAAA;AAAA,QAChB,QAAQ,OAAA,CAAQ,UAAA;AAAA,QAChB,MAAA,EAAQ,mBAAA,CAAoB,OAAA,CAAQ,UAAU,CAAA;AAAA,QAC9C,GAAA,EAAK;AAAA,OACP;AAAA,MACA,OAAA,CAAQ,SAAA;AAAA,MACR,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ;AAAA;AACV,GACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAO,MAAM,cAAA;AAAA,MACX,MAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAA,CAAQ,MAAA;AAAA,MACR,OAAA,CAAQ,cAAA;AAAA,MACR,OAAA,CAAQ;AAAA;AACV,GACF;AACF;AAEA,eAAsB,+BAAA,CACpB,QACA,OAAA,EAeC;AACD,EAAA,MAAM,OAAA,GAAUA,gCAAe,EAAE,CAAA;AAEjC,EAAA,MAAM,0BAA2C,EAAC;AAClD,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAiC;AAE9D,EAAA,WAAA,MAAiB,SAAS,MAAA,CAAO,SAAA;AAAA,IAC/B;AAAA,MACE,QAAQ,OAAA,CAAQ,WAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ,qBAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ,qBAAA;AAAA,MAChB,MAAA,EAAQ,CAAC,IAAA,EAAM,aAAa,CAAA;AAAA,MAC5B,GAAA,EAAK;AAAA,KACP;AAAA,IACA,OAAA,CAAQ,SAAA;AAAA,IACR,OAAA,CAAQ,mBAAA;AAAA,IACR,OAAA,CAAQ;AAAA,GACV,EAAG;AAED,IAAA,uBAAA,CAAwB,IAAA;AAAA,MACtB,QAAQ,YAAY;AAClB,QAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,QAAA,WAAA,MAAiB,IAAA,IAAQ,mBAAA;AAAA,UACvB,MAAA,CAAO,mBAAA;AAAA,YACL,KAAA,CAAM,EAAA;AAAA,YACN;AAAA,cACE,QAAQ,OAAA,CAAQ,UAAA;AAAA,cAChB,MAAA,EAAQ,mBAAA,CAAoB,OAAA,CAAQ,UAAU,CAAA;AAAA,cAC9C,GAAA,EAAK;AAAA,aACP;AAAA,YACA,OAAA,CAAQ,SAAA;AAAA,YACR,OAAA,CAAQ;AAAA;AACV,SACF,EAAG;AACD,UAAA,gBAAA,CAAiB,GAAA,CAAI,IAAA,CAAK,EAAA,EAAK,IAAI,CAAA;AACnC,UAAA,gBAAA,EAAA;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,uBAAA,EAAyB;AAAA,UAC5C,SAAS,KAAA,CAAM,EAAA;AAAA,UACf,WAAW,KAAA,CAAM,WAAA;AAAA,UACjB,WAAA,EAAa;AAAA,SACd,CAAA;AAAA,MACH,CAAC;AAAA,KACH;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,CAAQ,IAAI,uBAAuB,CAAA;AAEzC,EAAA,OAAA,CAAQ,MAAA,CAAO,KAAK,kCAAA,EAAoC;AAAA,IACtD,YAAY,uBAAA,CAAwB,MAAA;AAAA,IACpC,WAAW,gBAAA,CAAiB;AAAA,GAC7B,CAAA;AAED,EAAA,OAAO;AAAA,IACL,OAAO,MAAM,cAAA;AAAA,MACX,MAAA;AAAA,MACA,iBAAiB,MAAA,EAAO;AAAA,MACxB,OAAA,CAAQ,MAAA;AAAA,MACR,OAAA,CAAQ,cAAA;AAAA,MACR,OAAA,CAAQ;AAAA;AACV,GACF;AACF;AAEA,eAAsB,8BAAA,CACpB,MAAA,EACA,QAAA,EACA,OAAA,EAGC;AAED,EAAA,MAAM,eAAe,MAAM,MAAA,CAAO,eAAA,CAAgB,QAAA,EAAU,SAAS,MAAM,CAAA;AAC3E,EAAA,MAAM,WAAA,GAAc,SAAS,WAAA,IAAeC,kDAAA;AAC5C,EAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,YAAY,CAAA;AAEhD,EAAA,OAAO,EAAE,SAAA,EAAU;AACrB;AAEA,eAAsB,wBAAA,CACpB,MAAA,EACA,QAAA,EACA,OAAA,EAiBC;AACD,EAAA,MAAM,SAAwB,EAAC;AAC/B,EAAA,MAAM,WAAA,uBAA4C,GAAA,EAAI;AACtD,EAAA,MAAM,aAAA,uBAA8C,GAAA,EAAI;AACxD,EAAA,MAAM,OAAA,GAAUD,gCAAe,EAAE,CAAA;AAEjC,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,8BAAA,CAA+B,QAAQ,QAAA,EAAU;AAAA,IAC3E,aAAa,OAAA,EAAS,uBAAA;AAAA,IACtB,QAAQ,OAAA,EAAS;AAAA,GAClB,CAAA;AACD,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,WAAA,CAAY,IAAI,SAAA,CAAU,QAAA,CAAS,IAAA,kBAAM,IAAI,KAAa,CAAA;AAC1D,IAAA,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,EACvB;AAEA,EAAA,MAAM,WAAA,GAAc,SAAS,gBAAA,IAAoBE,2CAAA;AACjD,EAAA,MAAM,WAA4B,EAAC;AAEnC,EAAA,WAAA,MAAiB,SAAS,MAAA,CAAO,SAAA;AAAA,IAC/B;AAAA,MACE,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,QAAQ,OAAA,EAAS,WAAA;AAAA,MACjB,GAAA,EAAK;AAAA,KACP;AAAA,IACA,OAAA,EAAS,SAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,OAAA,EAAS;AAAA,GACX,EAAG;AAED,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,QAAQ,YAAY;AAUlB,QAAA,MAAM,SAAS,MAAM,WAAA;AAAA,UAAY;AAAA;AAAA,SAAuB;AAExD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA;AAAA,QACF;AAEA,QAAA,WAAA,MAAiB,UAAU,MAAA,CAAO,eAAA;AAAA,UAChC,KAAA,CAAM,EAAA;AAAA,UACN;AAAA,YACE,GAAA,EAAK;AAAA,WACP;AAAA,UACA,MAAA;AAAA,UACA,OAAA,EAAS;AAAA,SACX,EAAG;AACD,UAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,YAAA;AAAA,UACF;AAEA,UAAA,IAAI,MAAA,CAAO,aAAa,CAAA,KAAM,uBAAA,EAAyB;AACrD,YAAA,UAAA,CAAW,aAAA,EAAe,MAAA,CAAO,EAAA,EAAI,KAAA,CAAM,EAAG,CAAA;AAAA,UAChD;AAEA,UAAA,IAAI,MAAA,CAAO,aAAa,CAAA,KAAM,wBAAA,EAA0B;AACtD,YAAA,UAAA,CAAW,WAAA,EAAa,KAAA,CAAM,EAAA,EAAK,MAAA,CAAO,EAAE,CAAA;AAE5C,YAAA,IAAI,SAAS,qBAAA,EAAuB;AAClC,cAAA,MAAM,iBAAA,GAAoB,MAAM,WAAA,CAAY,MAAM,CAAA;AAElD,cAAA,IAAI,iBAAA,EAAmB;AACrB,gBAAA,MAAA,CAAO,KAAK,iBAAiB,CAAA;AAE7B,gBAAA,WAAA,MAAiB,aAAa,MAAA,CAAO,eAAA;AAAA,kBACnC,MAAA,CAAO,EAAA;AAAA,kBACP,EAAE,KAAK,SAAA,EAAU;AAAA,kBACjB,MAAA;AAAA,kBACA,OAAA,EAAS;AAAA,iBACX,EAAG;AACD,kBAAA,IAAI,CAAC,UAAU,EAAA,EAAI;AACjB,oBAAA;AAAA,kBACF;AAEA,kBAAA,IAAI,SAAA,CAAU,aAAa,CAAA,KAAM,uBAAA,EAAyB;AACxD,oBAAA,UAAA,CAAW,aAAA,EAAe,SAAA,CAAU,EAAA,EAAI,MAAA,CAAO,EAAG,CAAA;AAAA,kBACpD;AAEA,kBAAA,IAAI,SAAA,CAAU,aAAa,CAAA,KAAM,wBAAA,EAA0B;AACzD,oBAAA,UAAA,CAAW,WAAA,EAAa,MAAA,CAAO,EAAA,EAAK,SAAA,CAAU,EAAE,CAAA;AAAA,kBAClD;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,QAAA,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,MACpB,CAAC;AAAA,KACH;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAE1B,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,SAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,gBAAA,CACd,SAAA,EACA,MAAA,EACA,KAAA,EACA,aACA,aAAA,EACA;AAEA,EAAA,MAAM,QAAA,uBAAyC,GAAA,EAAI;AAEnD,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,6CAAmC,CAAA,EAAG;AACpE,MAAA,QAAA,CAAS,GAAA;AAAA,QACP,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaA,6CAAmC,CAAA;AAAA,QAC/D;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,8CAAoC,CAAA,EAAG;AACrE,MAAA,QAAA,CAAS,GAAA;AAAA,QACP,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaA,8CAAoC,CAAA;AAAA,QAChE;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAyB;AAElD,EAAA,WAAA,CAAY,OAAA;AAAA,IAAQ,CAAC,OAAA,EAAS,OAAA,KAC5B,OAAA,CAAQ,OAAA,CAAQ,OAAK,UAAA,CAAW,YAAA,EAAc,CAAA,EAAG,OAAO,CAAC;AAAA,GAC3D;AAGA,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,QAAA,GACJ,SAAA,CAAU,QAAA,CAAS,WAAA,CAAaA,8CAAoC,CAAA;AAEtE,IAAA,MAAA,CAAO,QAAQ,CAAA,KAAA,KAAS;AACtB,MAAA,MAAM,OAAA,GACJ,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaD,6CAAmC,CAAA;AAEjE,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,aAAA,CAAc,YAAA,EAAc,OAAO,CAAA,CAAE,SAAS,CAAA,EAAG;AACnD,QAAA,UAAA,CAAW,YAAA,EAAc,SAAS,QAAQ,CAAA;AAC1C,QAAA,UAAA,CAAW,WAAA,EAAa,UAAU,OAAO,CAAA;AAAA,MAC3C;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAA,CAAO,QAAQ,CAAA,KAAA,KAAS;AACtB,IAAA,MAAM,EAAA,GACJ,MAAM,QAAA,CAAS,WAAA,CAAaA,6CAAmC,CAAA,IAC/D,KAAA,CAAM,QAAA,CAAS,WAAA,CAAaC,8CAAoC,CAAA;AAElE,IAAA,aAAA,CAAc,WAAA,EAAa,EAAE,CAAA,CAAE,OAAA,CAAQ,CAAA,CAAA,KAAK;AAC1C,MAAA,MAAM,UAAA,GAAa,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AACjC,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAKC,+BAAA,CAAmB,UAAU,CAAC,CAAA;AAAA,MACzD;AAAA,IACF,CAAC,CAAA;AAKD,IAAA,aAAA,CAAc,YAAA,EAAc,EAAE,CAAA,CAAE,OAAA,CAAQ,CAAA,CAAA,KAAK;AAE3C,MAAA,IAAI,KAAA,CAAM,KAAK,MAAA,EAAQ;AACrB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,WAAA,GAAc,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AAClC,MAAA,IAAI,WAAA,EAAa;AAEf,QAAA,KAAA,CAAM,IAAA,CAAK,MAAA,GAASA,+BAAA,CAAmB,WAAW,CAAA;AAAA,MACpD;AAAA,IACF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAAC,qBAAA,CAAkB,MAAM,CAAA;AAGxB,EAAA,KAAA,CAAM,QAAQ,CAAA,IAAA,KAAQ;AACpB,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,CAAS,WAAA,CAAaC,4CAAkC,CAAA;AAExE,IAAA,aAAA,CAAc,aAAA,EAAe,EAAE,CAAA,CAAE,OAAA,CAAQ,CAAA,CAAA,KAAK;AAC5C,MAAA,MAAM,WAAA,GAAc,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AAClC,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU;AACvB,UAAA,IAAA,CAAK,IAAA,CAAK,WAAW,EAAC;AAAA,QACxB;AACA,QAAA,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,IAAA,CAAKF,+BAAA,CAAmB,WAAW,CAAC,CAAA;AAAA,MACzD;AAAA,IACF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAAG,iBAAA,CAAc,QAAQ,KAAK,CAAA;AAC7B;AAOA,eAAsB,qBAAA,CACpB,MAAA,EACA,QAAA,EACA,OAAA,EAsByD;AACzD,EAAA,IAAI,QAAsB,EAAC;AAE3B,EAAA,IACE,OAAA,CAAQ,qBAAA,IACR,OAAA,CAAQ,qBAAA,IACR,QAAQ,mBAAA,EACR;AACA,IAAA,MAAM,EAAE,KAAA,EAAO,aAAA,EAAc,GAAI,MAAM,+BAAA;AAAA,MACrC,MAAA;AAAA,MACA;AAAA,QACE,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,QAC/B,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,QAC/B,qBAAqB,OAAA,CAAQ,mBAAA;AAAA,QAC7B,gBAAgB,OAAA,CAAQ,cAAA;AAAA,QACxB,aAAa,OAAA,CAAQ,eAAA;AAAA,QACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,QAAQ,OAAA,CAAQ;AAAA;AAClB,KACF;AACA,IAAA,KAAA,GAAQ,aAAA;AAAA,EACV,CAAA,MAAO;AACL,IAAA,MAAM,EAAE,KAAA,EAAO,eAAA,EAAgB,GAAI,MAAM,wBAAwB,MAAA,EAAQ;AAAA,MACvE,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,gBAAgB,OAAA,CAAQ,cAAA;AAAA,MACxB,aAAa,OAAA,CAAQ,eAAA;AAAA,MACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAQ,OAAA,CAAQ;AAAA,KACjB,CAAA;AACD,IAAA,KAAA,GAAQ,eAAA;AAAA,EACV;AACA,EAAA,MAAM,EAAE,QAAQ,SAAA,EAAW,WAAA,EAAa,eAAc,GACpD,MAAM,wBAAA,CAAyB,MAAA,EAAQ,QAAA,EAAU;AAAA,IAC/C,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,IAC/B,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,IAC1B,yBAAyB,OAAA,CAAQ,uBAAA;AAAA,IACjC,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AAEH,EAAA,gBAAA,CAAiB,SAAA,EAAW,MAAA,EAAQ,KAAA,EAAO,WAAA,EAAa,aAAa,CAAA;AACrE,EAAA,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AACnE,EAAA,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,QAAA,CAAS,IAAI,CAAC,CAAA;AAEpE,EAAA,OAAO,EAAE,OAAO,MAAA,EAAO;AACzB;AAEA,eAAe,eACb,MAAA,EACA,KAAA,EACA,MAAA,EACA,cAAA,GAAiB,MACjB,WAAA,EACA;AACA,EAAA,MAAM,OAAA,GAAUR,gCAAe,EAAE,CAAA;AAEjC,EAAA,MAAM,sBAAsB,WAAA,IAAeS,0CAAA;AAC3C,EAAA,MAAM,WAA4B,EAAC;AACnC,EAAA,MAAM,WAAyB,EAAC;AAGhC,EAAA,WAAA,MAAiB,QAAQ,KAAA,EAAO;AAC9B,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,QAAQ,YAAY;AAClB,QAAA,IAAI,SAAA;AACJ,QAAA,IAAI;AACF,UAAA,IAAI,cAAA,EAAgB;AAClB,YAAA,SAAA,GAAY,MAAM,MAAA,CAAO,yBAAA;AAAA,cACvB,IAAA,CAAK,EAAA;AAAA;AAAA;AAAA,cAGL;AAAA,aACF;AAAA,UACF;AAAA,QACF,SAAS,CAAA,EAAG;AACV,UAAA,MAAA,CAAO,MAAM,CAAA,6BAAA,CAAA,EAAiC;AAAA,YAC5C,MAAM,IAAA,CAAK,EAAA;AAAA,YACX,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,IAAA,EAAM,SAAS,CAAA;AAExD,QAAA,IAAI,MAAA,EAAQ;AACV,UAAA,QAAA,CAAS,KAAK,MAAM,CAAA;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,KACH;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAE1B,EAAA,MAAA,CAAO,MAAM,6BAAA,EAA+B;AAAA,IAC1C,oBAAoB,QAAA,CAAS,MAAA;AAAA,IAC7B,oBAAoB,QAAA,CAAS;AAAA,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,UAAA,CACP,MAAA,EACA,GAAA,EACA,KAAA,EACA;AACA,EAAA,IAAI,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACxB,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,GAAA,uBAAU,GAAA,EAAI;AACd,IAAA,MAAA,CAAO,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,EACrB;AACA,EAAA,GAAA,CAAK,IAAI,KAAK,CAAA;AAChB;AAEA,SAAS,aAAA,CACP,QACA,GAAA,EACa;AACb,EAAA,OAAO,IAAI,GAAA,CAAI,CAAC,GAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,IAAK,EAAG,CAAA,CAAE,IAAA,EAAM,CAAA;AACpD;;;;;;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-catalog-backend-module-msgraph",
-  "version": "0.10.1-next.0",
+  "version": "0.10.1",
   "description": "A Backstage catalog backend module that helps integrate towards Microsoft Graph",
   "backstage": {
     "role": "backend-plugin-module",
@@ -66,19 +66,19 @@
   },
   "dependencies": {
     "@azure/identity": "^4.0.0",
-    "@backstage/backend-plugin-api": "1.9.2-next.0",
-    "@backstage/catalog-model": "1.9.0",
-    "@backstage/config": "1.3.8",
-    "@backstage/plugin-catalog-common": "1.1.10",
-    "@backstage/plugin-catalog-node": "2.2.2-next.0",
+    "@backstage/backend-plugin-api": "^1.9.1",
+    "@backstage/catalog-model": "^1.9.0",
+    "@backstage/config": "^1.3.8",
+    "@backstage/plugin-catalog-common": "^1.1.10",
+    "@backstage/plugin-catalog-node": "^2.2.1",
     "@microsoft/microsoft-graph-types": "^2.6.0",
     "lodash": "^4.17.21",
     "p-limit": "^3.0.2",
-    "qs": "^6.15.2"
+    "qs": "^6.9.4"
   },
   "devDependencies": {
-    "@backstage/backend-test-utils": "1.11.4-next.0",
-    "@backstage/cli": "0.36.3-next.0",
+    "@backstage/backend-test-utils": "^1.11.3",
+    "@backstage/cli": "^0.36.2",
     "@types/lodash": "^4.14.151",
     "msw": "^1.0.0"
   },