@bitblit/ratchet-epsilon-common 4.0.419-alpha → 4.0.421-alpha

package/lib/built-in/built-in-trace-id-generators.js

@@ -0,0 +1,20 @@
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { ContextUtil } from '../util/context-util.js';
+export class BuiltInTraceIdGenerators {
+    static fullAwsRequestId() {
+        return ContextUtil.defaultedCurrentRequestId();
+    }
+    static shortAwsRequestId() {
+        let rval = BuiltInTraceIdGenerators.fullAwsRequestId();
+        if (rval.length > 10) {
+            let idx = rval.lastIndexOf('-');
+            idx = idx === -1 ? rval.length - 10 : idx;
+            rval = rval.substring(idx);
+        }
+        return rval;
+    }
+    static fixedLengthHex(length = 10) {
+        return StringRatchet.createRandomHexString(length);
+    }
+}
+//# sourceMappingURL=built-in-trace-id-generators.js.map

package/lib/built-in/built-in-trace-id-generators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-trace-id-generators.js","sourceRoot":"","sources":["../../src/built-in/built-in-trace-id-generators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,OAAO,wBAAwB;IAC5B,MAAM,CAAC,gBAAgB;QAC5B,OAAO,WAAW,CAAC,yBAAyB,EAAE,CAAC;IACjD,CAAC;IAEM,MAAM,CAAC,iBAAiB;QAC7B,IAAI,IAAI,GAAW,wBAAwB,CAAC,gBAAgB,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrB,IAAI,GAAG,GAAW,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,cAAc,CAAC,SAAiB,EAAE;QAC9C,OAAO,aAAa,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;CACF"}

package/lib/built-in/daemon/daemon-authorizer-function.d.ts

@@ -0,0 +1,3 @@
+import { DaemonProcessState } from '@bitblit/ratchet-aws/daemon/daemon-process-state';
+import { ExtendedAPIGatewayEvent } from '../../config/http/extended-api-gateway-event.js';
+export type DaemonAuthorizerFunction = (evt: ExtendedAPIGatewayEvent, proc: DaemonProcessState) => Promise<boolean>;

package/lib/built-in/daemon/daemon-authorizer-function.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=daemon-authorizer-function.js.map

package/lib/built-in/daemon/daemon-authorizer-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-authorizer-function.js","sourceRoot":"","sources":["../../../src/built-in/daemon/daemon-authorizer-function.ts"],"names":[],"mappings":""}

package/lib/built-in/daemon/daemon-config.d.ts

@@ -0,0 +1,8 @@
+import { DaemonAuthorizerFunction } from './daemon-authorizer-function.js';
+import { DaemonGroupSelectionFunction } from './daemon-group-selection-function.js';
+export interface DaemonConfig {
+    authorizer?: DaemonAuthorizerFunction;
+    groupSelector?: DaemonGroupSelectionFunction;
+    fetchDaemonStatusPathParameter?: string;
+    fetchDaemonStatusByPublicTokenPathParameter?: string;
+}

package/lib/built-in/daemon/daemon-config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=daemon-config.js.map

package/lib/built-in/daemon/daemon-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-config.js","sourceRoot":"","sources":["../../../src/built-in/daemon/daemon-config.ts"],"names":[],"mappings":""}

package/lib/built-in/daemon/daemon-group-selection-function.d.ts

@@ -0,0 +1,2 @@
+import { ExtendedAPIGatewayEvent } from '../../config/http/extended-api-gateway-event.js';
+export type DaemonGroupSelectionFunction = (evt: ExtendedAPIGatewayEvent) => Promise<string>;

package/lib/built-in/daemon/daemon-group-selection-function.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=daemon-group-selection-function.js.map

package/lib/built-in/daemon/daemon-group-selection-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-group-selection-function.js","sourceRoot":"","sources":["../../../src/built-in/daemon/daemon-group-selection-function.ts"],"names":[],"mappings":""}

package/lib/built-in/daemon/daemon-handler.d.ts

@@ -0,0 +1,16 @@
+import { DaemonProcessState } from '@bitblit/ratchet-aws/daemon/daemon-process-state';
+import { DaemonLike } from '@bitblit/ratchet-aws/daemon/daemon-like';
+import { DaemonAuthorizerFunction } from './daemon-authorizer-function.js';
+import { ExtendedAPIGatewayEvent } from '../../config/http/extended-api-gateway-event.js';
+import { DaemonProcessStateList } from './daemon-process-state-list.js';
+import { DaemonConfig } from './daemon-config.js';
+export declare class DaemonHandler {
+    private daemon;
+    private inConfig?;
+    static readonly ALLOW_EVERYTHING_AUTHORIZER: DaemonAuthorizerFunction;
+    private config;
+    constructor(daemon: DaemonLike, inConfig?: DaemonConfig);
+    fetchDaemonStatusByPublicToken(evt: ExtendedAPIGatewayEvent): Promise<DaemonProcessState>;
+    fetchDaemonStatus(evt: ExtendedAPIGatewayEvent): Promise<DaemonProcessState>;
+    listDaemonStatus(evt: ExtendedAPIGatewayEvent): Promise<DaemonProcessStateList>;
+}

package/lib/built-in/daemon/daemon-handler.js

@@ -0,0 +1,60 @@
+import { Logger } from '@bitblit/ratchet-common/logger/logger';
+import { NotFoundError } from '../../http/error/not-found-error.js';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+export class DaemonHandler {
+    daemon;
+    inConfig;
+    static ALLOW_EVERYTHING_AUTHORIZER = async (evt, proc) => {
+        return true;
+    };
+    config;
+    constructor(daemon, inConfig) {
+        this.daemon = daemon;
+        this.inConfig = inConfig;
+        this.config = inConfig || {};
+        this.config.authorizer = this.config.authorizer || DaemonHandler.ALLOW_EVERYTHING_AUTHORIZER;
+        this.config.groupSelector = this.config.groupSelector || ((evt) => Promise.resolve(daemon.defaultGroup));
+        this.config.fetchDaemonStatusByPublicTokenPathParameter =
+            StringRatchet.trimToNull(this.config.fetchDaemonStatusByPublicTokenPathParameter) || 'publicToken';
+        this.config.fetchDaemonStatusPathParameter = StringRatchet.trimToNull(this.config.fetchDaemonStatusPathParameter) || 'key';
+    }
+    async fetchDaemonStatusByPublicToken(evt) {
+        const publicToken = evt.pathParameters[this.config.fetchDaemonStatusByPublicTokenPathParameter];
+        Logger.info('Fetching daemon status for token: %s', publicToken);
+        let rval = await this.daemon.statFromPublicToken(publicToken);
+        const canRead = rval ? await this.config.authorizer(evt, rval) : false;
+        rval = canRead ? rval : null;
+        if (rval === null) {
+            throw new NotFoundError('No such token : ' + publicToken);
+        }
+        return rval;
+    }
+    async fetchDaemonStatus(evt) {
+        const daemonKey = evt.pathParameters[this.config.fetchDaemonStatusPathParameter];
+        Logger.info('Fetching daemon status for : %s', daemonKey);
+        let rval = await this.daemon.stat(daemonKey);
+        const canRead = rval ? await this.config.authorizer(evt, rval) : false;
+        rval = canRead ? rval : null;
+        if (rval === null) {
+            throw new NotFoundError('No such key : ' + daemonKey);
+        }
+        return rval;
+    }
+    async listDaemonStatus(evt) {
+        const group = await this.config.groupSelector(evt);
+        const keys = await this.daemon.list(group);
+        const allowed = [];
+        for (let i = 0; i < keys.length; i++) {
+            const canRead = await this.config.authorizer(evt, keys[i]);
+            if (canRead) {
+                allowed.push(keys[i]);
+            }
+        }
+        const rval = {
+            results: allowed,
+            nextToken: null,
+        };
+        return rval;
+    }
+}
+//# sourceMappingURL=daemon-handler.js.map

package/lib/built-in/daemon/daemon-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-handler.js","sourceRoot":"","sources":["../../../src/built-in/daemon/daemon-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAK/D,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAK5E,MAAM,OAAO,aAAa;IAed;IACA;IAfH,MAAM,CAAU,2BAA2B,GAA6B,KAAK,EAClF,GAA4B,EAC5B,IAAwB,EACxB,EAAE;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACM,MAAM,CAAe;IAO7B,YACU,MAAkB,EAClB,QAAuB;QADvB,WAAM,GAAN,MAAM,CAAY;QAClB,aAAQ,GAAR,QAAQ,CAAe;QAE/B,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,aAAa,CAAC,2BAA2B,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,GAA4B,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAClI,IAAI,CAAC,MAAM,CAAC,2CAA2C;YACrD,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,2CAA2C,CAAC,IAAI,aAAa,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,8BAA8B,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,8BAA8B,CAAC,IAAI,KAAK,CAAC;IAC7H,CAAC;IAGM,KAAK,CAAC,8BAA8B,CAAC,GAA4B;QAEtE,MAAM,WAAW,GAAW,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,WAAW,CAAC,CAAC;QAEjE,IAAI,IAAI,GAAuB,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAClF,MAAM,OAAO,GAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAChF,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,GAA4B;QAEzD,MAAM,SAAS,GAAW,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;QAE1D,IAAI,IAAI,GAAuB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,OAAO,GAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAChF,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,GAA4B;QACxD,MAAM,KAAK,GAAW,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAyB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,OAAO,GAAY,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAA2B;YACnC,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC"}

package/lib/built-in/daemon/daemon-process-state-list.d.ts

@@ -0,0 +1,5 @@
+import { DaemonProcessState } from '@bitblit/ratchet-aws/daemon/daemon-process-state';
+export interface DaemonProcessStateList {
+    results: DaemonProcessState[];
+    nextToken: string;
+}

package/lib/built-in/daemon/daemon-process-state-list.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=daemon-process-state-list.js.map

package/lib/built-in/daemon/daemon-process-state-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-process-state-list.js","sourceRoot":"","sources":["../../../src/built-in/daemon/daemon-process-state-list.ts"],"names":[],"mappings":""}

package/lib/built-in/http/apollo/apollo-util.d.ts

@@ -0,0 +1,10 @@
+import { BaseContext } from '@apollo/server';
+import { EpsilonLambdaApolloContextFunctionArgument } from './epsilon-lambda-apollo-context-function-argument.js';
+import { DefaultEpsilonApolloContext } from './default-epsilon-apollo-context.js';
+import { JwtRatchetLike } from '@bitblit/ratchet-common/jwt/jwt-ratchet-like';
+export declare class ApolloUtil {
+    private constructor();
+    static emptyContext<T extends BaseContext>(): Promise<T>;
+    static defaultEpsilonApolloContext(args: EpsilonLambdaApolloContextFunctionArgument, jwt?: JwtRatchetLike): Promise<DefaultEpsilonApolloContext<any>>;
+    static nonRouteableOnlyEpsilonApolloContext(args: EpsilonLambdaApolloContextFunctionArgument, jwt?: JwtRatchetLike): Promise<DefaultEpsilonApolloContext<any>>;
+}

package/lib/built-in/http/apollo/apollo-util.js

@@ -0,0 +1,37 @@
+import { EventUtil } from '../../../http/event-util.js';
+import { UnauthorizedError } from '../../../http/error/unauthorized-error.js';
+import { Logger } from '@bitblit/ratchet-common/logger/logger';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { MapRatchet } from '@bitblit/ratchet-common/lang/map-ratchet';
+export class ApolloUtil {
+    constructor() { }
+    static async emptyContext() {
+        return {};
+    }
+    static async defaultEpsilonApolloContext(args, jwt) {
+        const authTokenSt = EventUtil.extractBearerTokenFromEvent(args.lambdaEvent);
+        let token = null;
+        if (StringRatchet.trimToNull(authTokenSt) && jwt) {
+            Logger.info('Got : %s', authTokenSt);
+            token = await jwt.decodeToken(authTokenSt, 0);
+        }
+        const rval = {
+            user: token,
+            bearerTokenString: authTokenSt,
+            headers: args.lambdaEvent.headers,
+            functionName: args.lambdaContext.functionName,
+            lambdaEvent: args.lambdaEvent,
+            lambdaContext: args.lambdaContext,
+        };
+        return rval;
+    }
+    static async nonRouteableOnlyEpsilonApolloContext(args, jwt) {
+        const hostName = StringRatchet.trimToNull(MapRatchet.extractValueFromMapIgnoreCase(args.lambdaEvent.headers, 'host'));
+        const hostIsLocalOrNotRoutableIP4 = EventUtil.hostIsLocalOrNotRoutableIP4(hostName);
+        if (!hostIsLocalOrNotRoutableIP4) {
+            throw new UnauthorizedError('May only run local / non-routeable : ' + hostName);
+        }
+        return ApolloUtil.defaultEpsilonApolloContext(args, jwt);
+    }
+}
+//# sourceMappingURL=apollo-util.js.map

package/lib/built-in/http/apollo/apollo-util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apollo-util.js","sourceRoot":"","sources":["../../../../src/built-in/http/apollo/apollo-util.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAItE,MAAM,OAAO,UAAU;IAGrB,gBAAuB,CAAC;IAIjB,MAAM,CAAC,KAAK,CAAC,YAAY;QAC9B,OAAO,EAAO,CAAC;IACjB,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,IAAgD,EAChD,GAAoB;QAEpB,MAAM,WAAW,GAAW,SAAS,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpF,IAAI,KAAK,GAAiB,IAAI,CAAC;QAC/B,IAAI,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACrC,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,WAAW,IAAiC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,GAAqC;YAC7C,IAAI,EAAE,KAAK;YACX,iBAAiB,EAAE,WAAW;YAC9B,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;YACjC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,oCAAoC,CACtD,IAAgD,EAChD,GAAoB;QAEpB,MAAM,QAAQ,GAAW,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9H,MAAM,2BAA2B,GAAY,SAAS,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QAC7F,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACjC,MAAM,IAAI,iBAAiB,CAAC,uCAAuC,GAAG,QAAQ,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,UAAU,CAAC,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/lib/built-in/http/apollo/default-epsilon-apollo-context.d.ts

@@ -0,0 +1,10 @@
+import { APIGatewayEvent, Context } from 'aws-lambda';
+import { JwtTokenBase } from '@bitblit/ratchet-common/jwt/jwt-token-base';
+export interface DefaultEpsilonApolloContext<T extends JwtTokenBase> {
+    user?: T;
+    bearerTokenString?: string;
+    headers: Record<string, string>;
+    functionName: string;
+    lambdaEvent: APIGatewayEvent;
+    lambdaContext: Context;
+}

package/lib/built-in/http/apollo/default-epsilon-apollo-context.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=default-epsilon-apollo-context.js.map

package/lib/built-in/http/apollo/default-epsilon-apollo-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-epsilon-apollo-context.js","sourceRoot":"","sources":["../../../../src/built-in/http/apollo/default-epsilon-apollo-context.ts"],"names":[],"mappings":""}

package/lib/built-in/http/apollo/epsilon-apollo-cors-method.d.ts

@@ -0,0 +1,6 @@
+export declare const EpsilonApolloCorsMethod: {
+    None: string;
+    All: string;
+    Reflective: string;
+};
+export type EpsilonApolloCorsMethod = (typeof EpsilonApolloCorsMethod)[keyof typeof EpsilonApolloCorsMethod];

package/lib/built-in/http/apollo/epsilon-apollo-cors-method.js

@@ -0,0 +1,6 @@
+export const EpsilonApolloCorsMethod = {
+    None: 'None',
+    All: 'All',
+    Reflective: 'Reflective',
+};
+//# sourceMappingURL=epsilon-apollo-cors-method.js.map

package/lib/built-in/http/apollo/epsilon-apollo-cors-method.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epsilon-apollo-cors-method.js","sourceRoot":"","sources":["../../../../src/built-in/http/apollo/epsilon-apollo-cors-method.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;CACzB,CAAC"}

package/lib/built-in/http/apollo/epsilon-lambda-apollo-context-function-argument.d.ts

@@ -0,0 +1,5 @@
+import { APIGatewayEvent, Context } from 'aws-lambda';
+export interface EpsilonLambdaApolloContextFunctionArgument {
+    lambdaEvent: APIGatewayEvent;
+    lambdaContext: Context;
+}

package/lib/built-in/http/apollo/epsilon-lambda-apollo-context-function-argument.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=epsilon-lambda-apollo-context-function-argument.js.map

package/lib/built-in/http/apollo/epsilon-lambda-apollo-context-function-argument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epsilon-lambda-apollo-context-function-argument.js","sourceRoot":"","sources":["../../../../src/built-in/http/apollo/epsilon-lambda-apollo-context-function-argument.ts"],"names":[],"mappings":""}

package/lib/built-in/http/apollo/epsilon-lambda-apollo-options.d.ts

@@ -0,0 +1,10 @@
+import { BaseContext, ContextFunction } from '@apollo/server';
+import { EpsilonLambdaApolloContextFunctionArgument } from './epsilon-lambda-apollo-context-function-argument.js';
+import { EpsilonApolloCorsMethod } from './epsilon-apollo-cors-method.js';
+import { ProxyResult } from 'aws-lambda';
+export interface EpsilonLambdaApolloOptions<TContext extends BaseContext> {
+    context?: ContextFunction<[EpsilonLambdaApolloContextFunctionArgument], TContext>;
+    timeoutMS?: number;
+    corsMethod?: EpsilonApolloCorsMethod;
+    debugOutputCallback?: (resp: ProxyResult) => Promise<void>;
+}

package/lib/built-in/http/apollo/epsilon-lambda-apollo-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=epsilon-lambda-apollo-options.js.map

package/lib/built-in/http/apollo/epsilon-lambda-apollo-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epsilon-lambda-apollo-options.js","sourceRoot":"","sources":["../../../../src/built-in/http/apollo/epsilon-lambda-apollo-options.ts"],"names":[],"mappings":""}

package/lib/built-in/http/apollo-filter.d.ts

@@ -0,0 +1,10 @@
+import { APIGatewayEvent, Context, ProxyResult } from 'aws-lambda';
+import { FilterFunction } from '../../config/http/filter-function.js';
+import { FilterChainContext } from '../../config/http/filter-chain-context.js';
+import { ApolloServer, BaseContext } from '@apollo/server';
+import { EpsilonLambdaApolloOptions } from './apollo/epsilon-lambda-apollo-options.js';
+export declare class ApolloFilter {
+    static handlePathWithApollo<T>(fCtx: FilterChainContext, apolloPathRegex: RegExp, apolloServer: ApolloServer<T>, options?: EpsilonLambdaApolloOptions<T>): Promise<boolean>;
+    static processApolloRequest<T>(event: APIGatewayEvent, context: Context, apolloServer: ApolloServer<T>, options?: EpsilonLambdaApolloOptions<T>): Promise<ProxyResult>;
+    static addApolloFilterToList(filters: FilterFunction[], apolloPathRegex: RegExp, apolloServer: ApolloServer, options?: EpsilonLambdaApolloOptions<BaseContext>): void;
+}

package/lib/built-in/http/apollo-filter.js

@@ -0,0 +1,111 @@
+import { RequireRatchet } from '@bitblit/ratchet-common/lang/require-ratchet';
+import { Logger } from '@bitblit/ratchet-common/logger/logger';
+import { PromiseRatchet } from '@bitblit/ratchet-common/lang/promise-ratchet';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { TimeoutToken } from '@bitblit/ratchet-common/lang/timeout-token';
+import { RestfulApiHttpError } from '@bitblit/ratchet-common/network/restful-api-http-error';
+import { Base64Ratchet } from '@bitblit/ratchet-common/lang/base64-ratchet';
+import { RequestTimeoutError } from '../../http/error/request-timeout-error.js';
+import { HeaderMap } from '@apollo/server';
+import { ContextUtil } from '../../util/context-util.js';
+import { ApolloUtil } from './apollo/apollo-util.js';
+import { EpsilonApolloCorsMethod } from './apollo/epsilon-apollo-cors-method.js';
+import { BuiltInFilters } from './built-in-filters.js';
+export class ApolloFilter {
+    static async handlePathWithApollo(fCtx, apolloPathRegex, apolloServer, options) {
+        let rval = false;
+        if (fCtx.event?.path && apolloPathRegex && apolloPathRegex.test(fCtx.event.path)) {
+            fCtx.result = await ApolloFilter.processApolloRequest(fCtx.event, fCtx.context, apolloServer, options);
+            if (options?.corsMethod) {
+                switch (options.corsMethod) {
+                    case EpsilonApolloCorsMethod.All:
+                        await BuiltInFilters.addAllowEverythingCORSHeaders(fCtx);
+                        break;
+                    case EpsilonApolloCorsMethod.Reflective:
+                        await BuiltInFilters.addAllowReflectionCORSHeaders(fCtx);
+                        break;
+                    default:
+                }
+            }
+        }
+        else {
+            rval = true;
+        }
+        return rval;
+    }
+    static async processApolloRequest(event, context, apolloServer, options) {
+        Logger.silly('Processing event with apollo: %j', event);
+        let rval = null;
+        RequireRatchet.notNullOrUndefined(apolloServer, 'apolloServer');
+        apolloServer.assertStarted('Cannot process with apollo - instance not started');
+        const headerMap = new HeaderMap();
+        for (const headersKey in event.headers) {
+            headerMap.set(headersKey, event.headers[headersKey]);
+        }
+        const eventMethod = StringRatchet.trimToEmpty(event.httpMethod).toUpperCase();
+        let body = null;
+        if (StringRatchet.trimToNull(event.body)) {
+            const bodyString = event.isBase64Encoded ? Base64Ratchet.base64StringToString(event.body) : event.body;
+            body = JSON.parse(bodyString);
+        }
+        const aRequest = {
+            method: eventMethod,
+            headers: headerMap,
+            search: eventMethod === 'GET' && event?.queryStringParameters
+                ? Object.keys(event.queryStringParameters)
+                    .map((k) => encodeURIComponent(k) + '=' + encodeURIComponent(event.queryStringParameters[k]))
+                    .join('&')
+                : null,
+            body: body,
+        };
+        const timeoutMS = options?.timeoutMS ?? context.getRemainingTimeInMillis() - 500;
+        const contextFn = options?.context ?? ApolloUtil.emptyContext;
+        const apolloPromise = apolloServer.executeHTTPGraphQLRequest({
+            httpGraphQLRequest: aRequest,
+            context: () => contextFn({ lambdaContext: context, lambdaEvent: event }),
+        });
+        let result = null;
+        if (timeoutMS) {
+            result = await PromiseRatchet.timeout(apolloPromise, 'Apollo timed out after ' + timeoutMS + ' ms.', timeoutMS);
+        }
+        else {
+            Logger.warn('No timeout set even after defaulting for Apollo');
+            result = await apolloPromise;
+        }
+        if (TimeoutToken.isTimeoutToken(result)) {
+            result.writeToLog();
+            throw new RequestTimeoutError('Timed out');
+        }
+        const httpGraphQLResponse = result;
+        const outHeaders = {};
+        for (const [headersKey, headersValue] of httpGraphQLResponse.headers.entries()) {
+            outHeaders[headersKey] = headersValue;
+        }
+        if (httpGraphQLResponse.body.kind === 'chunked') {
+            throw new RestfulApiHttpError('Apollo returned chunked result').withHttpStatusCode(500).withRequestId(ContextUtil.currentRequestId());
+        }
+        const bodyAsString = StringRatchet.trimToEmpty(httpGraphQLResponse?.body?.string);
+        rval = {
+            body: Base64Ratchet.generateBase64VersionOfString(bodyAsString),
+            headers: outHeaders,
+            multiValueHeaders: {},
+            isBase64Encoded: true,
+            statusCode: httpGraphQLResponse.status || 200,
+        };
+        if (eventMethod === 'GET' && rval.headers['content-type'] !== 'text/html' && bodyAsString.indexOf('<!DOCTYPE html>') >= 0) {
+            Logger.info('Forcing content type to html for the sandbox page');
+            rval.headers = rval.headers || {};
+            rval.headers['content-type'] = 'text/html';
+        }
+        if (options.debugOutputCallback) {
+            await options.debugOutputCallback(rval);
+        }
+        return rval;
+    }
+    static addApolloFilterToList(filters, apolloPathRegex, apolloServer, options) {
+        if (filters) {
+            filters.push((fCtx) => ApolloFilter.handlePathWithApollo(fCtx, apolloPathRegex, apolloServer, options));
+        }
+    }
+}
+//# sourceMappingURL=apollo-filter.js.map

package/lib/built-in/http/apollo-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apollo-filter.js","sourceRoot":"","sources":["../../../src/built-in/http/apollo-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGhF,OAAO,EAA8C,SAAS,EAA2C,MAAM,gBAAgB,CAAC;AAChI,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,OAAO,YAAY;IAChB,MAAM,CAAC,KAAK,CAAC,oBAAoB,CACtC,IAAwB,EACxB,eAAuB,EACvB,YAA6B,EAC7B,OAAuC;QAEvC,IAAI,IAAI,GAAY,KAAK,CAAC;QAE1B,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,IAAI,CAAC,MAAM,GAAG,MAAM,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YAEvG,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;gBACxB,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;oBAC3B,KAAK,uBAAuB,CAAC,GAAG;wBAC9B,MAAM,cAAc,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;wBACzD,MAAM;oBACR,KAAK,uBAAuB,CAAC,UAAU;wBACrC,MAAM,cAAc,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;wBACzD,MAAM;oBACR,QAAQ;gBAEV,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YAEN,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,oBAAoB,CACtC,KAAsB,EACtB,OAAgB,EAChB,YAA6B,EAC7B,OAAuC;QAEvC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,IAAI,GAAgB,IAAI,CAAC;QAC7B,cAAc,CAAC,kBAAkB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAChE,YAAY,CAAC,aAAa,CAAC,mDAAmD,CAAC,CAAC;QAEhF,MAAM,SAAS,GAAc,IAAI,SAAS,EAAE,CAAC;QAC7C,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACvC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,WAAW,GAAW,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACtF,IAAI,IAAI,GAAQ,IAAI,CAAC;QACrB,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,UAAU,GAAW,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/G,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,QAAQ,GAAuB;YACnC,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,SAAS;YAClB,MAAM,EACJ,WAAW,KAAK,KAAK,IAAI,KAAK,EAAE,qBAAqB;gBACnD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;qBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC5F,IAAI,CAAC,GAAG,CAAC;gBACd,CAAC,CAAC,IAAI;YACV,IAAI,EAAE,IAAI;SACX,CAAC;QAGF,MAAM,SAAS,GAAW,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,wBAAwB,EAAE,GAAG,GAAG,CAAC;QAIzF,MAAM,SAAS,GAAqE,OAAO,EAAE,OAAO,IAAI,UAAU,CAAC,YAAY,CAAC;QAEhI,MAAM,aAAa,GAAG,YAAY,CAAC,yBAAyB,CAAC;YAC3D,kBAAkB,EAAE,QAAQ;YAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACzE,CAAC,CAAC;QAEH,IAAI,MAAM,GAAuC,IAAI,CAAC;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,yBAAyB,GAAG,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC;QAClH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC/D,MAAM,GAAG,MAAM,aAAa,CAAC;QAC/B,CAAC;QAED,IAAI,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAuB,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;QAGD,MAAM,mBAAmB,GAAwB,MAA6B,CAAC;QAE/E,MAAM,UAAU,GAA2B,EAAE,CAAC;QAE9C,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/E,UAAU,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC;QACxC,CAAC;QAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAEhD,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxI,CAAC;QAED,MAAM,YAAY,GAAW,aAAa,CAAC,WAAW,CAAC,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAE1F,IAAI,GAAG;YACL,IAAI,EAAE,aAAa,CAAC,6BAA6B,CAAC,YAAY,CAAC;YAC/D,OAAO,EAAE,UAAU;YACnB,iBAAiB,EAAE,EAAE;YACrB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,mBAAmB,CAAC,MAAM,IAAI,GAAG;SAC9C,CAAC;QAIF,IAAI,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,WAAW,IAAI,YAAY,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1H,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,qBAAqB,CACjC,OAAyB,EACzB,eAAuB,EACvB,YAA0B,EAC1B,OAAiD;QAEjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;CACF"}

package/lib/built-in/http/built-in-auth-filters.d.ts

@@ -0,0 +1,9 @@
+import { FilterChainContext } from '../../config/http/filter-chain-context.js';
+import { WebTokenManipulator } from '../../http/auth/web-token-manipulator.js';
+import { JwtTokenBase } from '@bitblit/ratchet-common/jwt/jwt-token-base';
+export declare class BuiltInAuthFilters {
+    static requireAllRolesInCommonJwt(fCtx: FilterChainContext, requiredRoleAllOf: string[]): Promise<boolean>;
+    static requireAnyRoleInCommonJwt(fCtx: FilterChainContext, requiredRoleOneOf: string[]): Promise<boolean>;
+    static parseAuthorizationHeader(fCtx: FilterChainContext, webTokenManipulators: WebTokenManipulator<JwtTokenBase> | WebTokenManipulator<JwtTokenBase>[]): Promise<boolean>;
+    static applyOpenApiAuthorization(fCtx: FilterChainContext): Promise<boolean>;
+}

package/lib/built-in/http/built-in-auth-filters.js

@@ -0,0 +1,108 @@
+import { UnauthorizedError } from '../../http/error/unauthorized-error.js';
+import { MisconfiguredError } from '../../http/error/misconfigured-error.js';
+import { ForbiddenError } from '../../http/error/forbidden-error.js';
+import { EventUtil } from '../../http/event-util.js';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+export class BuiltInAuthFilters {
+    static async requireAllRolesInCommonJwt(fCtx, requiredRoleAllOf) {
+        if (!requiredRoleAllOf || requiredRoleAllOf.length === 0) {
+            throw new MisconfiguredError('You must require at least 1 role');
+        }
+        if (!fCtx.event?.authorization?.auth) {
+            throw new UnauthorizedError('May not proceed, not authenticated');
+        }
+        else {
+            const asJwt = fCtx.event.authorization.auth;
+            if (!asJwt.roles || asJwt.roles.length === 0) {
+                throw new UnauthorizedError('Required role not found');
+            }
+            else {
+                requiredRoleAllOf.forEach((r) => {
+                    if (!asJwt.roles.includes(r)) {
+                        throw new UnauthorizedError('Required role not found');
+                    }
+                });
+            }
+        }
+        return true;
+    }
+    static async requireAnyRoleInCommonJwt(fCtx, requiredRoleOneOf) {
+        if (!requiredRoleOneOf || requiredRoleOneOf.length === 0) {
+            throw new MisconfiguredError('You must require at least 1 role');
+        }
+        if (!fCtx.event?.authorization?.auth) {
+            throw new UnauthorizedError('May not proceed, not authenticated');
+        }
+        else {
+            const asJwt = fCtx.event.authorization.auth;
+            if (!asJwt.roles || asJwt.roles.length === 0) {
+                throw new UnauthorizedError('Required role not found');
+            }
+            else {
+                let found = false;
+                requiredRoleOneOf.forEach((r) => {
+                    if (!found && asJwt.roles.includes(r)) {
+                        found = true;
+                    }
+                });
+                if (!found) {
+                    throw new UnauthorizedError('Required role not found');
+                }
+            }
+        }
+        return true;
+    }
+    static async parseAuthorizationHeader(fCtx, webTokenManipulators) {
+        if (!fCtx?.event || !webTokenManipulators || (Array.isArray(webTokenManipulators) && !webTokenManipulators.length)) {
+            throw new MisconfiguredError('Cannot continue - missing event or encryption');
+        }
+        else {
+            const tokenString = EventUtil.extractBearerTokenFromEvent(fCtx?.event);
+            if (!Array.isArray(webTokenManipulators)) {
+                webTokenManipulators = [webTokenManipulators];
+            }
+            for (let i = 0; i < webTokenManipulators.length && !fCtx?.event?.authorization?.auth; i++) {
+                const manipulator = webTokenManipulators[i];
+                try {
+                    const token = await manipulator.extractTokenFromAuthorizationHeader(tokenString);
+                    fCtx.event.authorization = {
+                        raw: tokenString,
+                        auth: token,
+                        error: null,
+                    };
+                }
+                catch (err) {
+                    fCtx.event.authorization = {
+                        raw: tokenString,
+                        auth: null,
+                        error: err['message'],
+                    };
+                }
+            }
+        }
+        return true;
+    }
+    static async applyOpenApiAuthorization(fCtx) {
+        if (StringRatchet.trimToNull(fCtx?.routeAndParse?.mapping?.authorizerName)) {
+            const authorizer = fCtx?.authenticators?.get(fCtx.routeAndParse.mapping.authorizerName);
+            if (authorizer) {
+                if (fCtx?.event?.authorization?.auth) {
+                    const allowed = await authorizer(fCtx.event.authorization, fCtx.event, fCtx.routeAndParse.mapping);
+                    if (!allowed) {
+                        throw new ForbiddenError('You lack privileges to see this endpoint');
+                    }
+                }
+                else {
+                    throw new UnauthorizedError('You need to supply credentials for this endpoint');
+                }
+            }
+            else {
+                throw new MisconfiguredError().withFormattedErrorMessage('Authorizer %s requested but not found', fCtx.routeAndParse.mapping.authorizerName);
+            }
+        }
+        else {
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=built-in-auth-filters.js.map

package/lib/built-in/http/built-in-auth-filters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-auth-filters.js","sourceRoot":"","sources":["../../../src/built-in/http/built-in-auth-filters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAI5E,MAAM,OAAO,kBAAkB;IACtB,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAwB,EAAE,iBAA2B;QAClG,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAwB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE7B,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAwB,EAAE,iBAA2B;QACjG,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAwB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,IAAI,KAAK,GAAY,KAAK,CAAC;gBAC3B,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAEtC,KAAK,GAAG,IAAI,CAAC;oBACf,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAC1C,IAAwB,EACxB,oBAA6F;QAE7F,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnH,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YAEN,MAAM,WAAW,GAAW,SAAS,CAAC,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACzC,oBAAoB,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAChD,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1F,MAAM,WAAW,GAAsC,oBAAoB,CAAC,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC;oBAEH,MAAM,KAAK,GAAiB,MAAM,WAAW,CAAC,mCAAmC,CAAC,WAAW,CAAC,CAAC;oBAC/F,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG;wBACzB,GAAG,EAAE,WAAW;wBAChB,IAAI,EAAE,KAAK;wBACX,KAAK,EAAE,IAAI;qBACZ,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG;wBACzB,GAAG,EAAE,WAAW;wBAChB,IAAI,EAAE,IAAI;wBACV,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC;qBACtB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAwB;QAGpE,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;YAC3E,MAAM,UAAU,GAAuB,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC5G,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;oBACrC,MAAM,OAAO,GAAY,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5G,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,MAAM,IAAI,cAAc,CAAC,0CAA0C,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,iBAAiB,CAAC,kDAAkD,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,kBAAkB,EAAE,CAAC,yBAAyB,CACtD,uCAAuC,EACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAC1C,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;QAER,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/lib/built-in/http/built-in-authorizers.d.ts

@@ -0,0 +1,8 @@
+import { APIGatewayEvent } from 'aws-lambda';
+import { RouteMapping } from '../../http/route/route-mapping.js';
+import { EpsilonAuthorizationContext } from '../../config/http/epsilon-authorization-context.js';
+export declare class BuiltInAuthorizers {
+    static simpleNoAuthenticationLogAccess(authorizationContext: EpsilonAuthorizationContext<any>, evt: APIGatewayEvent): Promise<boolean>;
+    static simpleLoggedInAuth(authorizationContext: EpsilonAuthorizationContext<any>, evt: APIGatewayEvent): Promise<boolean>;
+    static simpleRoleRouteAuth(authorizationContext: EpsilonAuthorizationContext<any>, event: APIGatewayEvent, route: RouteMapping, requiredRoleOneOf?: string[], requiredRoleAllOf?: string[]): Promise<boolean>;
+}

package/lib/built-in/http/built-in-authorizers.js

@@ -0,0 +1,40 @@
+import { Logger } from '@bitblit/ratchet-common/logger/logger';
+export class BuiltInAuthorizers {
+    static async simpleNoAuthenticationLogAccess(authorizationContext, evt) {
+        Logger.debug('Auth requested for %s : %j', evt.path, authorizationContext?.auth);
+        return true;
+    }
+    static async simpleLoggedInAuth(authorizationContext, evt) {
+        const rval = !!authorizationContext?.auth;
+        Logger.silly('SimpleLoggedInAuth returning %s for %s', rval, evt.path);
+        return rval;
+    }
+    static async simpleRoleRouteAuth(authorizationContext, event, route, requiredRoleOneOf = null, requiredRoleAllOf = null) {
+        let rval = true;
+        const token = authorizationContext?.auth;
+        if (token) {
+            if (requiredRoleOneOf) {
+                requiredRoleOneOf.forEach((r) => {
+                    rval = rval || token.roles.indexOf(r) > -1;
+                });
+                if (!rval) {
+                    Logger.warn('Request to %s failed to find at least one of %j', route.path, requiredRoleOneOf);
+                }
+            }
+            if (rval && requiredRoleAllOf) {
+                requiredRoleAllOf.forEach((r) => {
+                    rval = rval && token.roles.indexOf(r) > -1;
+                });
+                if (!rval) {
+                    Logger.warn('Request to %s failed to find all of %j', route.path, requiredRoleAllOf);
+                }
+            }
+        }
+        else {
+            Logger.warn('Cannot authenticate - no parsed auth found');
+            rval = false;
+        }
+        return rval;
+    }
+}
+//# sourceMappingURL=built-in-authorizers.js.map

package/lib/built-in/http/built-in-authorizers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-authorizers.js","sourceRoot":"","sources":["../../../src/built-in/http/built-in-authorizers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAM/D,MAAM,OAAO,kBAAkB;IACtB,MAAM,CAAC,KAAK,CAAC,+BAA+B,CACjD,oBAAsD,EACtD,GAAoB;QAGpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,oBAAsD,EAAE,GAAoB;QAEjH,MAAM,IAAI,GAAY,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CACrC,oBAAsD,EACtD,KAAsB,EACtB,KAAmB,EACnB,oBAA8B,IAAI,EAClC,oBAA8B,IAAI;QAElC,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,MAAM,KAAK,GAAwB,oBAAoB,EAAE,IAAI,CAAC;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,iBAAiB,EAAE,CAAC;gBACtB,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9B,IAAI,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7C,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;YACD,IAAI,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBAC9B,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9B,IAAI,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7C,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC1D,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}