@banumeow/n8n-nodes-oci-generativeai-agent 0.1.4 → 0.1.6

package/node_modules/oci-common/lib/auth/X509-federation-client.js

@@ -0,0 +1,325 @@
+"use strict";
+/**
+ * Copyright (c) 2020, 2021 Oracle and/or its affiliates.  All rights reserved.
+ * This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const UrlParser = require("url");
+const httpSignature = require("http-signature");
+const jssha = require("jssha");
+const security_token_adapter_1 = __importDefault(require("./security-token-adapter"));
+const auth_utils_1 = __importDefault(require("./helpers/auth-utils"));
+const signer_1 = require("../signer");
+const http_1 = require("../http");
+const helper_1 = require("../helper");
+const circuit_breaker_1 = __importDefault(require("../circuit-breaker"));
+const waiter_1 = require("../waiter");
+const Breaker = require("opossum");
+/**
+ * This class gets a security token from the auth service by signing the request with a PKI issued leaf certificate,
+ * passing along a temporary public key that is bounded to the the security token, and the leaf certificate.
+ */
+const INSTANCE_PRINCIPAL_GENERIC_ERROR = "Instance principals authentication can only be used on OCI compute instances. Please confirm this code is running on an OCI compute instance. See https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm for more info.";
+const AUTH_TOKEN_GENERIC_ERROR = "Failed to fetch the token from auth server";
+class X509FederationClient {
+    constructor(federationEndpoint, _tenancyId, _leafCertificateSupplier, sessionKeySupplier, intermediateCertificateSuppliers, purpose, circuitBreaker) {
+        this.federationEndpoint = federationEndpoint;
+        this._tenancyId = _tenancyId;
+        this._leafCertificateSupplier = _leafCertificateSupplier;
+        this.sessionKeySupplier = sessionKeySupplier;
+        this.intermediateCertificateSuppliers = intermediateCertificateSuppliers;
+        this.purpose = purpose;
+        this.circuitBreaker = circuitBreaker;
+        this._circuitBreaker = null;
+        if (this.circuitBreaker) {
+            this._circuitBreaker = this.circuitBreaker.circuit;
+        }
+        else {
+            this._circuitBreaker = new circuit_breaker_1.default(circuit_breaker_1.default.defaultAuthConfiguration).circuit;
+        }
+        this.securityTokenAdapter = new security_token_adapter_1.default("", this.sessionKeySupplier);
+        const signer = new AuthTokenRequestSigner(this);
+        this.httpClient = new http_1.FetchHttpClient(signer, this._circuitBreaker);
+    }
+    // Getter for tenancyId
+    get tenancyId() {
+        return this._tenancyId;
+    }
+    // Getter for leafCerificateSupplier
+    get leafCertificateSupplier() {
+        return this._leafCertificateSupplier;
+    }
+    close() {
+        if (this._circuitBreaker) {
+            console.log("Shutting down the circuit breaker for the X509FederationClient");
+            this._circuitBreaker.shutdown();
+        }
+    }
+    /**
+     * Gets a security token. If there is already a valid token cached, it will be returned. Else this will make a call
+     * to the auth service to get a new token, using the provided suppliers.
+     *
+     * This method is thread-safe.
+     * @return the security token
+     * @throws OciError If there is any issue with getting a token from the auth server
+     */
+    getSecurityToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.securityTokenAdapter.isValid()) {
+                return this.securityTokenAdapter.getSecurityToken();
+            }
+            return yield this.refreshAndGetSecurityTokenInner(true);
+        });
+    }
+    /**
+     * Return a claim embedded in the security token
+     * @param key the name of the claim
+     * @return the value of the claim or null if unable to find
+     */
+    getStringClaim(key) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.refreshAndGetSecurityTokenInner(true);
+            return this.securityTokenAdapter.getStringClaim(key);
+        });
+    }
+    refreshAndGetSecurityToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.refreshAndGetSecurityTokenInner(false);
+        });
+    }
+    refreshAndGetSecurityTokenInner(doFinalTokenValidityCheck) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // Check again to see if the JWT is still invalid, unless we want to skip that check
+            if (!doFinalTokenValidityCheck || !this.securityTokenAdapter.isValid()) {
+                this.sessionKeySupplier.refreshKeys();
+                // Check if leafCertificateSupplier contains a .refresh() method. If so, call refresh()
+                if (this._leafCertificateSupplier && this._leafCertificateSupplier.refresh) {
+                    try {
+                        this._leafCertificateSupplier = yield this._leafCertificateSupplier.refresh();
+                    }
+                    catch (e) {
+                        throw Error(`Fail to refresh leafCertificateSupplier, error: ${e}. ${INSTANCE_PRINCIPAL_GENERIC_ERROR}`);
+                    }
+                    // When using default purpose (ex, instance principals), the token request should always be signed with the same tenant id as the certificate.
+                    // For other purposes, the tenant id can be different.
+                    if (this.purpose === "DEFAULT") {
+                        const newTenancyId = auth_utils_1.default.getTenantIdFromCertificate(this._leafCertificateSupplier.getCertificateAndKeyPair().getCertificate());
+                        if (this.tenancyId != newTenancyId) {
+                            throw Error("The tenancy id should never be changed in cert file!");
+                        }
+                    }
+                }
+                // Loop through each intermediateCertificateSuppliers and refresh them if possible
+                for (let i = 0; i < this.intermediateCertificateSuppliers.length; i++) {
+                    try {
+                        if (this.intermediateCertificateSuppliers[i].refresh) {
+                            this.intermediateCertificateSuppliers[i] = yield this.intermediateCertificateSuppliers[i].refresh();
+                        }
+                    }
+                    catch (e) {
+                        throw Error("Cannot refresh the intermediate certification. " + INSTANCE_PRINCIPAL_GENERIC_ERROR);
+                    }
+                }
+                this.securityTokenAdapter = yield this.getSecurityTokenFromServer();
+                return this.securityTokenAdapter.getSecurityToken();
+            }
+            return this.securityTokenAdapter.getSecurityToken();
+        });
+    }
+    /**
+     * Gets a security token from the federation server
+     * @return the security token, which is basically a JWT token string
+     */
+    getSecurityTokenFromServer() {
+        return __awaiter(this, void 0, void 0, function* () {
+            let response;
+            let lastKnownError;
+            const waitContext = new waiter_1.WaitContextImpl();
+            const { terminationStrategy, delayStrategy } = Object.assign({}, X509FederationClient.defaultAuthRetryConfiguration);
+            while (true) {
+                try {
+                    response = yield this.getTokenAsync();
+                    // Do not retry if the response is successful, or response status is 4XX
+                    if (response.status == 200)
+                        break;
+                    lastKnownError = `${AUTH_TOKEN_GENERIC_ERROR}. Response received but failed with status: ${response.status}`;
+                    console.log(lastKnownError);
+                    if (response.status >= 400 && response.status < 500)
+                        break;
+                    if (terminationStrategy.shouldTerminate(waitContext)) {
+                        console.log("Retry attempts exhausted! Not retrying");
+                        break;
+                    }
+                }
+                catch (e) {
+                    lastKnownError = `${AUTH_TOKEN_GENERIC_ERROR}. Failed with error: ${e}`;
+                    console.log(lastKnownError);
+                    if (waitContext.attemptCount < X509FederationClient.DEFAULT_AUTH_MAX_RETRY_COUNT - 1) {
+                        console.log(`Retrying the request...`);
+                    }
+                    else {
+                        console.log("Retry attempts exhausted! Not retrying");
+                        break;
+                    }
+                }
+                yield waiter_1.delay(delayStrategy.delay(waitContext));
+                waitContext.attemptCount++;
+            }
+            if (response !== undefined && response.status === 200) {
+                const securityToken = yield response.json();
+                return new security_token_adapter_1.default(securityToken.token, this.sessionKeySupplier);
+            }
+            let error = {
+                // to prevent retries on top of retries from service call
+                shouldBeRetried: false,
+                code: -1,
+                message: lastKnownError
+            };
+            throw error;
+        });
+    }
+    getTokenAsync() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const keyPair = this.sessionKeySupplier.getKeyPair();
+            if (!keyPair) {
+                throw Error("keyPair for session was not provided");
+            }
+            const publicKey = keyPair.getPublic();
+            if (!publicKey) {
+                throw Error("Public key is not present");
+            }
+            const certificateAndKeyPair = this.leafCertificateSupplier.getCertificateAndKeyPair();
+            if (!certificateAndKeyPair) {
+                throw Error("Certificate and key pair are not present");
+            }
+            const leafCertificate = certificateAndKeyPair.getCertificate();
+            if (!leafCertificate) {
+                throw Error("Leaf certificate is not present");
+            }
+            if (!certificateAndKeyPair.getPrivateKey()) {
+                throw Error("Leaf certificate's private key is not present");
+            }
+            let intermediateStrings = [];
+            if (this.intermediateCertificateSuppliers && this.intermediateCertificateSuppliers.length > 0) {
+                this.intermediateCertificateSuppliers.forEach((supplier) => {
+                    const supplierCertificateAndKeyPair = supplier.getCertificateAndKeyPair();
+                    if (supplierCertificateAndKeyPair && supplierCertificateAndKeyPair.getCertificate()) {
+                        intermediateStrings.push(auth_utils_1.default.sanitizeCertificateString(supplierCertificateAndKeyPair.getCertificate().toString("pem")));
+                    }
+                });
+            }
+            // Create request body and call auth service.
+            const url = this.federationEndpoint + "/v1/x509";
+            const requestPayload = {
+                certificate: auth_utils_1.default.sanitizeCertificateString(leafCertificate.toString("pem")),
+                purpose: this.purpose,
+                publicKey: auth_utils_1.default.sanitizeCertificateString(publicKey),
+                intermediateCertificates: intermediateStrings
+            };
+            let jsonPayload = JSON.stringify(requestPayload);
+            jsonPayload = jsonPayload.replace(/\\n/g, "");
+            const requestObj = {
+                uri: url,
+                body: jsonPayload,
+                method: "POST",
+                headers: new Headers()
+            };
+            const fingerprint = leafCertificate.fingerprint("sha1").toString("hex");
+            const privateKey = certificateAndKeyPair.getPrivateKey();
+            // Instantiate AuthTokenRequestSigner to sign the request
+            // Call Auth Service to get a JSON object which contains the auth token
+            const response = this.httpClient.send(requestObj);
+            return response;
+        });
+    }
+}
+exports.default = X509FederationClient;
+X509FederationClient.DEFAULT_AUTH_MAX_RETRY_COUNT = 3;
+X509FederationClient.DEFAULT_AUTH_MAX_DELAY_IN_SECONDS = 1;
+X509FederationClient.defaultAuthRetryConfiguration = {
+    terminationStrategy: new waiter_1.MaxAttemptsTerminationStrategy(X509FederationClient.DEFAULT_AUTH_MAX_RETRY_COUNT),
+    delayStrategy: new waiter_1.ExponentialBackoffDelayStrategyWithJitter(X509FederationClient.DEFAULT_AUTH_MAX_DELAY_IN_SECONDS)
+};
+// A Signer class for FederationClient
+class AuthTokenRequestSigner {
+    constructor(federationClient) {
+        this.federationClient = federationClient;
+    }
+    signHttpRequest(request, forceExcludeBody = false) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const tenancyId = this.federationClient.tenancyId;
+            const certificateAndKeyPair = this.federationClient.leafCertificateSupplier.getCertificateAndKeyPair();
+            if (!certificateAndKeyPair) {
+                throw Error("Certificate and key pair are not present");
+            }
+            const leafCertificate = certificateAndKeyPair.getCertificate();
+            const fingerprint = leafCertificate.fingerprint("sha1").toString("hex");
+            const privateKey = certificateAndKeyPair.getPrivateKey();
+            const apiKey = `${tenancyId}/fed-x509/${fingerprint}`;
+            const headersToSign = [
+                "date",
+                "(request-target)",
+                "host",
+                "content-type",
+                "content-length",
+                "x-content-sha256"
+            ];
+            const EMPTY_SHA = "47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=";
+            if (!request.headers.has("host")) {
+                const url = UrlParser.parse(request.uri);
+                if (url.host) {
+                    request.headers.set("host", url.host);
+                }
+                else {
+                    throw new Error("Cannot parse host from url");
+                }
+            }
+            if (!request.headers.has("x-date")) {
+                request.headers.set("x-date", new Date().toUTCString());
+            }
+            if (!request.headers.has("Content-Type")) {
+                request.headers.set("Content-Type", "application/json");
+            }
+            let contentLen = 0;
+            const shaObj = new jssha("SHA-256", "TEXT");
+            if (request.body) {
+                const bodyStringContent = yield helper_1.getStringFromRequestBody(request.body);
+                shaObj.update(bodyStringContent);
+                request.headers.set("x-content-sha256", shaObj.getHash("B64"));
+                contentLen = bodyStringContent.length;
+            }
+            if (contentLen === 0) {
+                // if buffer is empty, it can only be an empty string payload
+                request.headers.set("x-content-sha256", EMPTY_SHA);
+            }
+            if (!request.headers.has("Content-Length")) {
+                request.headers.set("Content-Length", `${contentLen}`);
+            }
+            httpSignature.sign(new signer_1.SignerRequest(request.method, request.uri, request.headers), {
+                key: privateKey.toBuffer("pem", {}),
+                keyId: apiKey,
+                headers: headersToSign
+            });
+            const authorizationHeader = request.headers.get("authorization");
+            if (authorizationHeader) {
+                request.headers.set("authorization", authorizationHeader.replace("Signature ", 'Signature version="1",'));
+            }
+            else {
+                throw new Error("Unable to sign request");
+            }
+        });
+    }
+}
+//# sourceMappingURL=X509-federation-client.js.map

package/node_modules/oci-common/lib/auth/X509-federation-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"X509-federation-client.js","sourceRoot":"","sources":["../../../../../lib/auth/X509-federation-client.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;AAEH,iCAAkC;AAClC,MAAM,aAAa,GAAQ,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACrD,+BAAgC;AAIhC,sFAA4D;AAC5D,sEAA6C;AAG7C,sCAA0C;AAC1C,kCAA0C;AAE1C,sCAAqD;AACrD,yEAAgD;AAChD,sCAMmB;AACnB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAEnC;;;GAGG;AAEH,MAAM,gCAAgC,GACpC,6PAA6P,CAAC;AAEhQ,MAAM,wBAAwB,GAAG,4CAA4C,CAAC;AAE9E,MAAqB,oBAAoB;IAgBvC,YACU,kBAA0B,EAC1B,UAAkB,EAClB,wBAAiD,EACjD,kBAAsC,EACtC,gCAA2D,EAC3D,OAAe,EACf,cAA8B;QAN9B,uBAAkB,GAAlB,kBAAkB,CAAQ;QAC1B,eAAU,GAAV,UAAU,CAAQ;QAClB,6BAAwB,GAAxB,wBAAwB,CAAyB;QACjD,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,qCAAgC,GAAhC,gCAAgC,CAA2B;QAC3D,YAAO,GAAP,OAAO,CAAQ;QACf,mBAAc,GAAd,cAAc,CAAgB;QApBhC,oBAAe,GAA0B,IAAI,CAAC;QAsBpD,IAAI,IAAI,CAAC,cAAc,EAAE;YACvB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;SACpD;aAAM;YACL,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAc,CAAC,yBAAc,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC;SAC5F;QACD,IAAI,CAAC,oBAAoB,GAAG,IAAI,gCAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAe,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACtE,CAAC;IAED,uBAAuB;IACvB,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,oCAAoC;IACpC,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,eAAe,EAAE;YACxB,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC9E,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;SACjC;IACH,CAAC;IAED;;;;;;;OAOG;IACG,gBAAgB;;YACpB,IAAI,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE;gBACvC,OAAO,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,CAAC;aACrD;YACD,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;KAAA;IAED;;;;OAIG;IACG,cAAc,CAAC,GAAW;;YAC9B,MAAM,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;KAAA;IAEK,0BAA0B;;YAC9B,OAAO,MAAM,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;KAAA;IAEa,+BAA+B,CAC3C,yBAAkC;;YAElC,oFAAoF;YACpF,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE;gBACtE,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;gBAEtC,uFAAuF;gBACvF,IAAI,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE;oBAC1E,IAAI;wBACF,IAAI,CAAC,wBAAwB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC;qBAC/E;oBAAC,OAAO,CAAC,EAAE;wBACV,MAAM,KAAK,CACT,mDAAmD,CAAC,KAAK,gCAAgC,EAAE,CAC5F,CAAC;qBACH;oBAED,8IAA8I;oBAC9I,sDAAsD;oBACtD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;wBAC9B,MAAM,YAAY,GAAW,oBAAS,CAAC,0BAA0B,CAC/D,IAAI,CAAC,wBAAwB,CAAC,wBAAwB,EAAE,CAAC,cAAc,EAAE,CAC1E,CAAC;wBAEF,IAAI,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE;4BAClC,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAC;yBACrE;qBACF;iBACF;gBACD,kFAAkF;gBAClF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,gCAAgC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;oBACrE,IAAI;wBACF,IAAI,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;4BACpD,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,gCAAgC,CACpF,CAAC,CACF,CAAC,OAAQ,EAAE,CAAC;yBACd;qBACF;oBAAC,OAAO,CAAC,EAAE;wBACV,MAAM,KAAK,CACT,iDAAiD,GAAG,gCAAgC,CACrF,CAAC;qBACH;iBACF;gBAED,IAAI,CAAC,oBAAoB,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAEpE,OAAO,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,CAAC;aACrD;YACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,CAAC;QACtD,CAAC;KAAA;IAED;;;OAGG;IACW,0BAA0B;;YACtC,IAAI,QAAQ,CAAC;YACb,IAAI,cAAc,CAAC;YACnB,MAAM,WAAW,GAAG,IAAI,wBAAe,EAAE,CAAC;YAC1C,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,qBACvC,oBAAoB,CAAC,6BAA6B,CACtD,CAAC;YACF,OAAO,IAAI,EAAE;gBACX,IAAI;oBACF,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;oBACtC,wEAAwE;oBACxE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;wBAAE,MAAM;oBAClC,cAAc,GAAG,GAAG,wBAAwB,+CAA+C,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC7G,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oBAC5B,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;wBAAE,MAAM;oBAC3D,IAAI,mBAAmB,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE;wBACpD,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;wBACtD,MAAM;qBACP;iBACF;gBAAC,OAAO,CAAC,EAAE;oBACV,cAAc,GAAG,GAAG,wBAAwB,wBAAwB,CAAC,EAAE,CAAC;oBACxE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oBAC5B,IAAI,WAAW,CAAC,YAAY,GAAG,oBAAoB,CAAC,4BAA4B,GAAG,CAAC,EAAE;wBACpF,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;qBACxC;yBAAM;wBACL,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;wBACtD,MAAM;qBACP;iBACF;gBACD,MAAM,cAAK,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC9C,WAAW,CAAC,YAAY,EAAE,CAAC;aAC5B;YACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE;gBACrD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC5C,OAAO,IAAI,gCAAoB,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;aAC/E;YACD,IAAI,KAAK,GAAG;gBACV,yDAAyD;gBACzD,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,CAAC,CAAC;gBACR,OAAO,EAAE,cAAc;aACxB,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;KAAA;IAEa,aAAa;;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC;YACrD,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;aACrD;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,EAAE;gBACd,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;aAC1C;YAED,MAAM,qBAAqB,GAAG,IAAI,CAAC,uBAAuB,CAAC,wBAAwB,EAAE,CAAC;YACtF,IAAI,CAAC,qBAAqB,EAAE;gBAC1B,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;aACzD;YAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC;YAC/D,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;aAChD;YAED,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE;gBAC1C,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;aAC9D;YACD,IAAI,mBAAmB,GAAa,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,gCAAgC,IAAI,IAAI,CAAC,gCAAgC,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC7F,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC,QAAiC,EAAE,EAAE;oBAClF,MAAM,6BAA6B,GAAG,QAAQ,CAAC,wBAAwB,EAAE,CAAC;oBAC1E,IAAI,6BAA6B,IAAI,6BAA6B,CAAC,cAAc,EAAE,EAAE;wBACnF,mBAAmB,CAAC,IAAI,CACtB,oBAAS,CAAC,yBAAyB,CACjC,6BAA6B,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC/D,CACF,CAAC;qBACH;gBACH,CAAC,CAAC,CAAC;aACJ;YAED,6CAA6C;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC;YACjD,MAAM,cAAc,GAAG;gBACrB,WAAW,EAAE,oBAAS,CAAC,yBAAyB,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACjF,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,oBAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC;gBACzD,wBAAwB,EAAE,mBAAmB;aAC9C,CAAC;YAEF,IAAI,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YACjD,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAE9C,MAAM,UAAU,GAAgB;gBAC9B,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,OAAO,EAAE;aACvB,CAAC;YACF,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,qBAAqB,CAAC,aAAa,EAAgB,CAAC;YACvE,yDAAyD;YAEzD,uEAAuE;YACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;;AAnPH,uCAoPC;AAhPgB,iDAA4B,GAAG,CAAC,CAAC;AACjC,sDAAiC,GAAG,CAAC,CAAC;AACtC,kDAA6B,GAA+B;IACzE,mBAAmB,EAAE,IAAI,uCAA8B,CACrD,oBAAoB,CAAC,4BAA4B,CAClD;IACD,aAAa,EAAE,IAAI,kDAAyC,CAC1D,oBAAoB,CAAC,iCAAiC,CACvD;CACF,CAAC;AAyOJ,sCAAsC;AACtC,MAAM,sBAAsB;IAE1B,YAAY,gBAAsC;QAChD,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAEK,eAAe,CAAC,OAAoB,EAAE,mBAA4B,KAAK;;YAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAClD,MAAM,qBAAqB,GAAG,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,wBAAwB,EAAE,CAAC;YACvG,IAAI,CAAC,qBAAqB,EAAE;gBAC1B,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;aACzD;YACD,MAAM,eAAe,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC;YAC/D,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,qBAAqB,CAAC,aAAa,EAAgB,CAAC;YACvE,MAAM,MAAM,GAAG,GAAG,SAAS,aAAa,WAAW,EAAE,CAAC;YACtD,MAAM,aAAa,GAAG;gBACpB,MAAM;gBACN,kBAAkB;gBAClB,MAAM;gBACN,cAAc;gBACd,gBAAgB;gBAChB,kBAAkB;aACnB,CAAC;YACF,MAAM,SAAS,GAAG,8CAA8C,CAAC;YAEjE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACzC,IAAI,GAAG,CAAC,IAAI,EAAE;oBACZ,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;iBACvC;qBAAM;oBACL,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;iBAC/C;aACF;YAED,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAClC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;aACzD;YAED,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE;gBACxC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;aACzD;YAED,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,IAAI,EAAE;gBAChB,MAAM,iBAAiB,GAAW,MAAM,iCAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/E,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBACjC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC;aACvC;YAED,IAAI,UAAU,KAAK,CAAC,EAAE;gBACpB,6DAA6D;gBAC7D,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;aACpD;YAED,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE;gBAC1C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;aACxD;YAED,aAAa,CAAC,IAAI,CAAC,IAAI,sBAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAClF,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnC,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;YAEH,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACjE,IAAI,mBAAmB,EAAE;gBACvB,OAAO,CAAC,OAAO,CAAC,GAAG,CACjB,eAAe,EACf,mBAAmB,CAAC,OAAO,CAAC,YAAY,EAAE,wBAAwB,CAAC,CACpE,CAAC;aACH;iBAAM;gBACL,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;aAC3C;QACH,CAAC;KAAA;CACF"}

package/node_modules/oci-common/lib/auth/abstract-federation-client-authenticated-details-provider-builder.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Copyright (c) 2020, 2021 Oracle and/or its affiliates.  All rights reserved.
+ * This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+ */
+import AbstractAuthenticationDetailsProvider from "./models/abstract-authentication-details-provider";
+import X509CertificateSupplier from "./models/X509-certificate-supplier";
+import { Region } from "../region";
+import SessionKeySupplier from "./models/session-key-supplier";
+import FederationClient from "./models/federation-client";
+import { ResourceDetails } from "./url-based-x509-certificate-supplier";
+import CircuitBreaker from "../circuit-breaker";
+export default abstract class AbstractFederationClientAuthenticationDetailsProviderBuilder<B extends AbstractFederationClientAuthenticationDetailsProviderBuilder<B, P>, P extends AbstractAuthenticationDetailsProvider> {
+    protected template: string;
+    protected METADATA_SERVICE_BASE_URL: string;
+    private METADATA_AUTH_HEADERS;
+    private AUTHORIZATION;
+    protected _metadataBaseUrl: string;
+    protected _federationEndpoint: string;
+    protected _leafCertificateSupplier: X509CertificateSupplier;
+    protected _tenancyId: string;
+    private _purpose;
+    protected region: Region;
+    protected _sessionKeySupplier: SessionKeySupplier;
+    protected _federationClient: FederationClient;
+    protected _intermediateCertificateSuppliers: X509CertificateSupplier[];
+    protected _circuitBreaker: any;
+    protected _authCircuitBreaker: CircuitBreaker;
+    get metadataBaseUrl(): string;
+    get federationEndpoint(): string;
+    get leafCertificateSupplier(): X509CertificateSupplier;
+    get tenancyId(): string;
+    get circuitBreaker(): CircuitBreaker;
+    get authCircuitBreaker(): CircuitBreaker;
+    getRegion(): Region;
+    set metadataBaseUrl(metadataBaseUrl: string);
+    set federationEndpoint(federationEndpoint: string);
+    set leafCertificateSupplier(leafCertificateSupplier: X509CertificateSupplier);
+    set tenancyId(tenancyId: string);
+    set purpose(purpose: string);
+    set sessionKeySupplier(sessionKeySupplier: SessionKeySupplier);
+    set intermediateCertificateSuppliers(intermediateCertificateSuppliers: [X509CertificateSupplier]);
+    /**
+     * Build a new AuthenticationDetailsProvider that uses the FederationClient.
+     *
+     * @return A new provider instance.
+     */
+    build(): Promise<P>;
+    /**
+     * Build the actual provider.
+     * @param sessionKeySupplierToUse
+     * @return authentication details provider
+     */
+    protected abstract buildProvider(sessionKeySupplierToUse: SessionKeySupplier): P;
+    /**
+     * Build the Federation Client
+     * @param sessionKeySupplier
+     * @return Federation Client
+     */
+    protected createFederationClient(sessionKeySupplier: SessionKeySupplier): FederationClient;
+    /**
+     * Auto-detect endpoint and certificate information using Instance metadata.
+     */
+    protected autoDetectUsingMetadataUrl(): Promise<void>;
+    /**
+     * Auto detects the endpoint that should be used when talking to OCI Auth, if no endpoint
+     * has been configured already.
+     * @return The auto-detected, or currently set, auth endpoint.
+     */
+    protected autoDetectEndpointUsingMetadataUrl(): Promise<string>;
+    /**
+     * Auto detects and configures the certificates needed using Instance metadata.
+     *
+     */
+    protected autoDetectCertificatesUsingMetadataUrl(): Promise<void>;
+    getMetaDataResourceDetail(path: string, circuitBreaker: CircuitBreaker): ResourceDetails;
+}

package/node_modules/oci-common/lib/auth/abstract-federation-client-authenticated-details-provider-builder.js

@@ -0,0 +1,224 @@
+"use strict";
+/**
+ * Copyright (c) 2020, 2021 Oracle and/or its affiliates.  All rights reserved.
+ * This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Abstract builder base class for authentication details provider extending
+ * @param <B> builder class
+ * @param <P> provider class
+ */
+const endpoint_builder_1 = require("../endpoint-builder");
+const http_1 = require("../http");
+const region_1 = require("../region");
+const realm_1 = require("../realm");
+const auth_utils_1 = __importDefault(require("./helpers/auth-utils"));
+const X509_federation_client_1 = __importDefault(require("./X509-federation-client"));
+const session_key_supplier_1 = __importDefault(require("./session-key-supplier"));
+const url_based_x509_certificate_supplier_1 = require("./url-based-x509-certificate-supplier");
+const circuit_breaker_1 = __importDefault(require("../circuit-breaker"));
+const log_1 = require("../log");
+const INSTANCE_PRINCIPAL_GENERIC_ERROR = "Instance principals authentication can only be used on OCI compute instances. Please confirm this code is running on an OCI compute instance. See https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm for more info.";
+class AbstractFederationClientAuthenticationDetailsProviderBuilder {
+    constructor() {
+        // url template for auth service.
+        this.template = "https://auth.{region}.{secondLevelDomain}";
+        // Default base url of metadata service.
+        this.METADATA_SERVICE_BASE_URL = "http://169.254.169.254/opc/v2/";
+        // The Authorization header value to be sent for requests to the metadata service.
+        this.METADATA_AUTH_HEADERS = "Bearer Oracle";
+        this.AUTHORIZATION = "Authorization";
+        // Base url of metadata service.
+        this._metadataBaseUrl = this.METADATA_SERVICE_BASE_URL;
+        // The federation endpoint url.
+        this._federationEndpoint = "";
+        //Tenancy OCI, or empty string if detecting from instance metadata.
+        this._tenancyId = "";
+        // Purpose: Specifies the non-default purpose of the session token to be requested. For internal use only.
+        this._purpose = "DEFAULT";
+        this._circuitBreaker = new circuit_breaker_1.default({
+            timeout: 10000,
+            errorThresholdPercentage: 50,
+            resetTimeout: 30000 // After 30 seconds, try again.
+        }).circuit;
+        this._authCircuitBreaker = new circuit_breaker_1.default(circuit_breaker_1.default.defaultAuthConfiguration);
+    }
+    // metadataBaseUrl getter
+    get metadataBaseUrl() {
+        return this._metadataBaseUrl;
+    }
+    // federationEndpoint getter
+    get federationEndpoint() {
+        return this._federationEndpoint;
+    }
+    // LeafCertificateSupplier getter
+    get leafCertificateSupplier() {
+        return this._leafCertificateSupplier;
+    }
+    // tenancyId getter
+    get tenancyId() {
+        return this._tenancyId;
+    }
+    get circuitBreaker() {
+        return this._circuitBreaker;
+    }
+    get authCircuitBreaker() {
+        return this._authCircuitBreaker;
+    }
+    // region getter
+    getRegion() {
+        return this.region;
+    }
+    // Configure the metadata endpoint to use when retrieving the instance data and principal for federation.
+    set metadataBaseUrl(metadataBaseUrl) {
+        this._metadataBaseUrl = metadataBaseUrl;
+        if (this._metadataBaseUrl.substr(-1) != "/") {
+            this._metadataBaseUrl += "/";
+        }
+    }
+    // Configures the custom federationEndpoint to use.
+    set federationEndpoint(federationEndpoint) {
+        this._federationEndpoint = federationEndpoint;
+    }
+    // Configures the custom leafCertificateSupplier to use.
+    set leafCertificateSupplier(leafCertificateSupplier) {
+        this._leafCertificateSupplier = leafCertificateSupplier;
+    }
+    // Configure the custom tenancyId to use.
+    set tenancyId(tenancyId) {
+        this._tenancyId = tenancyId;
+    }
+    // Configure the purpose to use.
+    set purpose(purpose) {
+        this._purpose = purpose;
+    }
+    // Configures the custom sessionKeySupplier to use.
+    set sessionKeySupplier(sessionKeySupplier) {
+        this._sessionKeySupplier = sessionKeySupplier;
+    }
+    // Configures the set of intermediate certificate suppliers to use, if any.
+    set intermediateCertificateSuppliers(intermediateCertificateSuppliers) {
+        this._intermediateCertificateSuppliers = intermediateCertificateSuppliers;
+    }
+    /**
+     * Build a new AuthenticationDetailsProvider that uses the FederationClient.
+     *
+     * @return A new provider instance.
+     */
+    build() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const sessionKeySupplierToUse = this._sessionKeySupplier || new session_key_supplier_1.default();
+            this._sessionKeySupplier = sessionKeySupplierToUse;
+            this._federationClient = this.createFederationClient(this._sessionKeySupplier);
+            return this.buildProvider(this._sessionKeySupplier);
+        });
+    }
+    /**
+     * Build the Federation Client
+     * @param sessionKeySupplier
+     * @return Federation Client
+     */
+    createFederationClient(sessionKeySupplier) {
+        return new X509_federation_client_1.default(this._federationEndpoint, this._tenancyId, this._leafCertificateSupplier, sessionKeySupplier, this._intermediateCertificateSuppliers, this._purpose, this.authCircuitBreaker);
+    }
+    /**
+     * Auto-detect endpoint and certificate information using Instance metadata.
+     */
+    autoDetectUsingMetadataUrl() {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.autoDetectEndpointUsingMetadataUrl();
+            yield this.autoDetectCertificatesUsingMetadataUrl();
+        });
+    }
+    /**
+     * Auto detects the endpoint that should be used when talking to OCI Auth, if no endpoint
+     * has been configured already.
+     * @return The auto-detected, or currently set, auth endpoint.
+     */
+    autoDetectEndpointUsingMetadataUrl() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this._federationEndpoint === "") {
+                const url = this._metadataBaseUrl + "instance/region";
+                let headers = new Headers();
+                headers.append("accept", "text/plain");
+                headers.append("Content-Type", "application/json");
+                headers.append(this.AUTHORIZATION, this.METADATA_AUTH_HEADERS);
+                const httpClient = new http_1.FetchHttpClient(null, this.circuitBreaker);
+                const response = yield httpClient.send({
+                    uri: url,
+                    method: "GET",
+                    headers: headers
+                });
+                // regionStr can be a shortCode or regionId
+                const regionStr = yield response.text();
+                const regionId = region_1.Region.getRegionIdFromShortCode(regionStr);
+                try {
+                    // Try to get region off regionId
+                    this.region = region_1.Region.fromRegionId(regionId);
+                }
+                catch (e) {
+                    if (log_1.LOG.logger)
+                        log_1.LOG.logger.error(`
+          failed reason: ${e},
+          Region not supported by this version of the SDK, registering region ${regionId} under OC1
+        `);
+                    this.region = region_1.Region.register(regionId, realm_1.Realm.OC1);
+                }
+                try {
+                    const endpoint = endpoint_builder_1.EndpointBuilder.createEndpointFromRegion(this.template, this.region //TODO: Find out why there is a type mismatch
+                    );
+                    this._federationEndpoint = endpoint;
+                }
+                catch (e) {
+                    throw Error(`Endpoint for auth service is not known in region ${this.region}. ${INSTANCE_PRINCIPAL_GENERIC_ERROR}`);
+                }
+            }
+            return this._federationEndpoint;
+        });
+    }
+    /**
+     * Auto detects and configures the certificates needed using Instance metadata.
+     *
+     */
+    autoDetectCertificatesUsingMetadataUrl() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (!this._leafCertificateSupplier) {
+                    this._leafCertificateSupplier = yield new url_based_x509_certificate_supplier_1.URLBasedX509CertificateSupplier(this.getMetaDataResourceDetail("identity/cert.pem", this.circuitBreaker), this.getMetaDataResourceDetail("identity/key.pem", this.circuitBreaker), null).refresh();
+                }
+                if (this._tenancyId === "") {
+                    this._tenancyId = auth_utils_1.default.getTenantIdFromCertificate(this._leafCertificateSupplier.getCertificateAndKeyPair().getCertificate());
+                }
+                if (!this._intermediateCertificateSuppliers) {
+                    this._intermediateCertificateSuppliers = [
+                        yield new url_based_x509_certificate_supplier_1.URLBasedX509CertificateSupplier(this.getMetaDataResourceDetail("identity/intermediate.pem", this.circuitBreaker), null, null).refresh()
+                    ];
+                }
+            }
+            catch (e) {
+                throw Error("Failed to autoDetectCertificatesUsingMetadataUrl. " + INSTANCE_PRINCIPAL_GENERIC_ERROR);
+            }
+        });
+    }
+    getMetaDataResourceDetail(path, circuitBreaker) {
+        const url = this._metadataBaseUrl + path;
+        let headers = new Headers();
+        headers.append(this.AUTHORIZATION, this.METADATA_AUTH_HEADERS);
+        return new url_based_x509_certificate_supplier_1.ResourceDetails(url, headers, circuitBreaker);
+    }
+}
+exports.default = AbstractFederationClientAuthenticationDetailsProviderBuilder;
+//# sourceMappingURL=abstract-federation-client-authenticated-details-provider-builder.js.map

package/node_modules/oci-common/lib/auth/abstract-federation-client-authenticated-details-provider-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract-federation-client-authenticated-details-provider-builder.js","sourceRoot":"","sources":["../../../../../lib/auth/abstract-federation-client-authenticated-details-provider-builder.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;AAEH;;;;GAIG;AAEH,0DAAsD;AACtD,kCAA0C;AAG1C,sCAAmC;AACnC,oCAAiC;AACjC,sEAA6C;AAG7C,sFAA4D;AAC5D,kFAA4D;AAC5D,+FAG+C;AAC/C,yEAAgD;AAChD,gCAA6B;AAE7B,MAAM,gCAAgC,GACpC,6PAA6P,CAAC;AAEhQ,MAA8B,4DAA4D;IAA1F;QAIE,iCAAiC;QACvB,aAAQ,GAAG,2CAA2C,CAAC;QAEjE,wCAAwC;QAC9B,8BAAyB,GAAG,gCAAgC,CAAC;QAEvE,kFAAkF;QAC1E,0BAAqB,GAAG,eAAe,CAAC;QACxC,kBAAa,GAAG,eAAe,CAAC;QAExC,gCAAgC;QACtB,qBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QAE5D,+BAA+B;QACrB,wBAAmB,GAAW,EAAE,CAAC;QAK3C,mEAAmE;QACzD,eAAU,GAAW,EAAE,CAAC;QAElC,0GAA0G;QAClG,aAAQ,GAAW,SAAS,CAAC;QAc3B,oBAAe,GAAG,IAAI,yBAAc,CAAC;YAC7C,OAAO,EAAE,KAAK;YACd,wBAAwB,EAAE,EAAE;YAC5B,YAAY,EAAE,KAAK,CAAC,+BAA+B;SACpD,CAAC,CAAC,OAAO,CAAC;QAED,wBAAmB,GAAG,IAAI,yBAAc,CAAC,yBAAc,CAAC,wBAAwB,CAAC,CAAC;IAgN9F,CAAC;IA9MC,yBAAyB;IACzB,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,4BAA4B;IAC5B,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,iCAAiC;IACjC,IAAI,uBAAuB;QACzB,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACvC,CAAC;IAED,mBAAmB;IACnB,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,gBAAgB;IAChB,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,yGAAyG;IACzG,IAAI,eAAe,CAAC,eAAuB;QACzC,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE;YAC3C,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC;SAC9B;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,kBAAkB,CAAC,kBAA0B;QAC/C,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;IAChD,CAAC;IAED,wDAAwD;IACxD,IAAI,uBAAuB,CAAC,uBAAgD;QAC1E,IAAI,CAAC,wBAAwB,GAAG,uBAAuB,CAAC;IAC1D,CAAC;IAED,yCAAyC;IACzC,IAAI,SAAS,CAAC,SAAiB;QAC7B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAO,CAAC,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,mDAAmD;IACnD,IAAI,kBAAkB,CAAC,kBAAsC;QAC3D,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,IAAI,gCAAgC,CAClC,gCAA2D;QAE3D,IAAI,CAAC,iCAAiC,GAAG,gCAAgC,CAAC;IAC5E,CAAC;IAED;;;;OAIG;IACG,KAAK;;YACT,MAAM,uBAAuB,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,8BAAsB,EAAE,CAAC;YACzF,IAAI,CAAC,mBAAmB,GAAG,uBAAuB,CAAC;YACnD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtD,CAAC;KAAA;IASD;;;;OAIG;IACO,sBAAsB,CAAC,kBAAsC;QACrE,OAAO,IAAI,gCAAoB,CAC7B,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,wBAAwB,EAC7B,kBAAkB,EAClB,IAAI,CAAC,iCAAiC,EACtC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACa,0BAA0B;;YACxC,MAAM,IAAI,CAAC,kCAAkC,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,sCAAsC,EAAE,CAAC;QACtD,CAAC;KAAA;IACD;;;;OAIG;IACa,kCAAkC;;YAChD,IAAI,IAAI,CAAC,mBAAmB,KAAK,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAW,IAAI,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;gBAC9D,IAAI,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACvC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBAC/D,MAAM,UAAU,GAAG,IAAI,sBAAe,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBAClE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;oBACrC,GAAG,EAAE,GAAG;oBACR,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;gBACH,2CAA2C;gBAC3C,MAAM,SAAS,GAAW,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAEhD,MAAM,QAAQ,GAAW,eAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBACpE,IAAI;oBACF,iCAAiC;oBACjC,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;iBAC7C;gBAAC,OAAO,CAAC,EAAE;oBACV,IAAI,SAAG,CAAC,MAAM;wBACZ,SAAG,CAAC,MAAM,CAAC,KAAK,CAAC;2BACA,CAAC;gFACoD,QAAQ;SAC/E,CAAC,CAAC;oBACH,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAK,CAAC,GAAG,CAAC,CAAC;iBACpD;gBAED,IAAI;oBACF,MAAM,QAAQ,GAAG,kCAAe,CAAC,wBAAwB,CACvD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,MAAM,CAAC,6CAA6C;qBAC1D,CAAC;oBACF,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC;iBACrC;gBAAC,OAAO,CAAC,EAAE;oBACV,MAAM,KAAK,CACT,oDAAoD,IAAI,CAAC,MAAM,KAAK,gCAAgC,EAAE,CACvG,CAAC;iBACH;aACF;YACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;QAClC,CAAC;KAAA;IACD;;;OAGG;IACa,sCAAsC;;YACpD,IAAI;gBACF,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE;oBAClC,IAAI,CAAC,wBAAwB,GAAG,MAAM,IAAI,qEAA+B,CACvE,IAAI,CAAC,yBAAyB,CAAC,mBAAmB,EAAE,IAAI,CAAC,cAAc,CAAC,EACxE,IAAI,CAAC,yBAAyB,CAAC,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,EACvE,IAAI,CACL,CAAC,OAAO,EAAE,CAAC;iBACb;gBAED,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE,EAAE;oBAC1B,IAAI,CAAC,UAAU,GAAG,oBAAS,CAAC,0BAA0B,CACpD,IAAI,CAAC,wBAAwB,CAAC,wBAAwB,EAAE,CAAC,cAAc,EAAE,CAC1E,CAAC;iBACH;gBAED,IAAI,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAC3C,IAAI,CAAC,iCAAiC,GAAG;wBACvC,MAAM,IAAI,qEAA+B,CACvC,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,EAAE,IAAI,CAAC,cAAc,CAAC,EAChF,IAAI,EACJ,IAAI,CACL,CAAC,OAAO,EAAE;qBACZ,CAAC;iBACH;aACF;YAAC,OAAO,CAAC,EAAE;gBACV,MAAM,KAAK,CACT,oDAAoD,GAAG,gCAAgC,CACxF,CAAC;aACH;QACH,CAAC;KAAA;IAED,yBAAyB,CAAC,IAAY,EAAE,cAA8B;QACpE,MAAM,GAAG,GAAW,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACjD,IAAI,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/D,OAAO,IAAI,qDAAe,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC3D,CAAC;CACF;AA/PD,+EA+PC"}