@bitblit/ratchet-epsilon-common 4.0.85-alpha

package/dist/cjs/config/cron/cron-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/dynamo-db-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/epsilon-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/epsilon-lambda-event-handler.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/epsilon-logger-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/generic-aws-event-handler-function.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/authorizer-function.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/epsilon-authorization-context.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/extended-api-gateway-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/filter-chain-context.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/filter-function.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/handler-function.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/http-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/http-processing-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/mapped-http-processing-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/http/null-returned-object-handling.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NullReturnedObjectHandling = void 0;
+var NullReturnedObjectHandling;
+(function (NullReturnedObjectHandling) {
+    NullReturnedObjectHandling["Error"] = "Error";
+    NullReturnedObjectHandling["ConvertToEmptyString"] = "ConvertToEmptyString";
+    NullReturnedObjectHandling["Return404NotFoundResponse"] = "Return404NotFoundResponse";
+})(NullReturnedObjectHandling = exports.NullReturnedObjectHandling || (exports.NullReturnedObjectHandling = {}));

package/dist/cjs/config/inter-api/inter-api-aws-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/inter-api/inter-api-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/inter-api/inter-api-process-mapping.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/logging-trace-id-generator.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/open-api/open-api-document-components.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/open-api/open-api-document-path.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/open-api/open-api-document.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/s3-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/config/sns-config.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/epsilon-build-properties.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EpsilonBuildProperties = void 0;
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+class EpsilonBuildProperties {
+    constructor() { }
+    static get buildVersion() {
+        return 'LOCAL-SNAPSHOT';
+    }
+    static get buildHash() {
+        return 'LOCAL-HASH';
+    }
+    static get buildBranch() {
+        return 'LOCAL-BRANCH';
+    }
+    static get buildTag() {
+        return 'LOCAL-TAG';
+    }
+    static get buildBranchOrTag() {
+        return ratchet_common_1.StringRatchet.trimToNull(EpsilonBuildProperties.buildBranch)
+            ? 'BRANCH:' + EpsilonBuildProperties.buildBranch
+            : 'TAG:' + EpsilonBuildProperties.buildTag;
+    }
+    static get buildTime() {
+        return 'LOCAL-TIME';
+    }
+}
+exports.EpsilonBuildProperties = EpsilonBuildProperties;

package/dist/cjs/epsilon-constants.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EpsilonConstants = void 0;
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+class EpsilonConstants {
+    static load(filePath, className) {
+        ratchet_common_1.Logger.info('Searching for %s : %s : %s', filePath, className, __dirname);
+        let rval = null;
+        const val = require(filePath);
+        if (val) {
+            ratchet_common_1.Logger.debug('Found %s - pulling object : %j : %s', filePath, Object.keys(val), className);
+            rval = val[className];
+        }
+        return rval;
+    }
+    static async findDynamicImportEpsilonGlobalHandlerProvider() {
+        const importPath = process.env[EpsilonConstants.EPSILON_FINDER_DYNAMIC_IMPORT_PATH_ENV_NAME] ||
+            EpsilonConstants.DEFAULT_EPSILON_FINDER_DYNAMIC_IMPORT_PATH;
+        const fnName = process.env[EpsilonConstants.EPSILON_FINDER_FUNCTION_NAME_ENV_NAME] || EpsilonConstants.DEFAULT_EPSILON_FINDER_FUNCTION_NAME;
+        ratchet_common_1.Logger.debug('Using epsilon finder dynamic import path : %s / %s', importPath, fnName);
+        let provider = null;
+        try {
+            provider = this.load(importPath, fnName);
+        }
+        catch (err) {
+            ratchet_common_1.Logger.error('Error loading provider : %s / %s : %s', importPath, fnName, err, err);
+        }
+        let rval = null;
+        if (provider) {
+            ratchet_common_1.Logger.debug('Type2 is : %s', typeof provider);
+            ratchet_common_1.Logger.info('Got3 : %s : %s', provider, typeof provider);
+            rval = provider();
+            ratchet_common_1.Logger.info('Rval3 is %s', rval);
+        }
+        return rval;
+    }
+    constructor() { }
+}
+exports.EpsilonConstants = EpsilonConstants;
+EpsilonConstants.EPSILON_FINDER_DYNAMIC_IMPORT_PATH_ENV_NAME = 'EPSILON_FINDER_DYNAMIC_IMPORT_PATH';
+EpsilonConstants.EPSILON_FINDER_FUNCTION_NAME_ENV_NAME = 'EPSILON_FINDER_FUNCTION_NAME';
+EpsilonConstants.DEFAULT_EPSILON_FINDER_DYNAMIC_IMPORT_PATH = 'epsilon-global-handler-provider.js';
+EpsilonConstants.DEFAULT_EPSILON_FINDER_FUNCTION_NAME = 'findEpsilonGlobalHandler';
+EpsilonConstants.AUTH_HEADER_PREFIX = 'Bearer ';
+EpsilonConstants.AUTH_HEADER_NAME = 'Authorization';
+EpsilonConstants.BACKGROUND_SQS_TYPE_FIELD = 'BACKGROUND_TYPE';
+EpsilonConstants.BACKGROUND_SNS_START_MARKER = 'BACKGROUND_START_MARKER';
+EpsilonConstants.BACKGROUND_SNS_IMMEDIATE_RUN_FLAG = 'BACKGROUND_IMMEDIATE_RUN_FLAG';
+EpsilonConstants.INTER_API_SNS_EVENT = 'EPSILON_INTER_API_EVENT';

package/dist/cjs/epsilon-global-handler.js

@@ -0,0 +1,155 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EpsilonGlobalHandler = void 0;
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+const event_util_1 = require("./http/event-util");
+const ratchet_common_2 = require("@bitblit/ratchet-common");
+const ratchet_common_3 = require("@bitblit/ratchet-common");
+const response_util_1 = require("./http/response-util");
+const epsilon_http_error_1 = require("./http/error/epsilon-http-error");
+const request_timeout_error_1 = require("./http/error/request-timeout-error");
+const ratchet_common_4 = require("@bitblit/ratchet-common");
+const context_util_1 = require("./util/context-util");
+const web_v2_handler_1 = require("./http/web-v2-handler");
+const inter_api_epsilon_lambda_event_handler_1 = require("./lambda-event-handler/inter-api-epsilon-lambda-event-handler");
+const generic_sns_epsilon_lambda_event_handler_1 = require("./lambda-event-handler/generic-sns-epsilon-lambda-event-handler");
+const cron_epsilon_lambda_event_handler_1 = require("./lambda-event-handler/cron-epsilon-lambda-event-handler");
+const s3_epsilon_lambda_event_handler_1 = require("./lambda-event-handler/s3-epsilon-lambda-event-handler");
+const dynamo_epsilon_lambda_event_handler_1 = require("./lambda-event-handler/dynamo-epsilon-lambda-event-handler");
+const epsilon_logging_extension_processor_1 = require("./epsilon-logging-extension-processor");
+class EpsilonGlobalHandler {
+    static set globalInstanceProvider(input) {
+        EpsilonGlobalHandler.GLOBAL_INSTANCE_PROVIDER = input;
+    }
+    static get globalInstanceProvider() {
+        return EpsilonGlobalHandler.GLOBAL_INSTANCE_PROVIDER;
+    }
+    constructor(_epsilon) {
+        this._epsilon = _epsilon;
+        this.handlers = null;
+        if (!EpsilonGlobalHandler.LOGGER_CONFIGURED) {
+            EpsilonGlobalHandler.configureDefaultLogger();
+            ratchet_common_1.Logger.info('EpsilonLoggingConfiguration:Default logger configured');
+        }
+        else {
+            ratchet_common_1.Logger.info('EpsilonLoggingConfiguration:Skipping default logger config - already configured');
+        }
+        this.handlers = [
+            this._epsilon.webHandler,
+            new web_v2_handler_1.WebV2Handler(this._epsilon.webHandler),
+            this._epsilon.backgroundHandler,
+            new inter_api_epsilon_lambda_event_handler_1.InterApiEpsilonLambdaEventHandler(this._epsilon),
+            new generic_sns_epsilon_lambda_event_handler_1.GenericSnsEpsilonLambdaEventHandler(this._epsilon),
+            new cron_epsilon_lambda_event_handler_1.CronEpsilonLambdaEventHandler(this._epsilon),
+            new s3_epsilon_lambda_event_handler_1.S3EpsilonLambdaEventHandler(this._epsilon),
+            new dynamo_epsilon_lambda_event_handler_1.DynamoEpsilonLambdaEventHandler(this._epsilon),
+        ];
+    }
+    static configureDefaultLogger(overrides) {
+        var _a, _b, _c, _d, _e;
+        const output = overrides ? Object.assign({}, overrides) : {};
+        output.initialLevel = (_a = output.initialLevel) !== null && _a !== void 0 ? _a : ratchet_common_4.LoggerLevelName.info;
+        output.formatType = (_b = output.formatType) !== null && _b !== void 0 ? _b : ratchet_common_4.LogMessageFormatType.StructuredJson;
+        output.globalVars = (_c = output.globalVars) !== null && _c !== void 0 ? _c : {};
+        output.outputFunction = (_d = output.outputFunction) !== null && _d !== void 0 ? _d : ratchet_common_4.LoggerOutputFunction.StdOut;
+        output.ringBufferSize = (_e = output.ringBufferSize) !== null && _e !== void 0 ? _e : 0;
+        const src = output.preProcessors || [];
+        output.preProcessors = src.concat([new epsilon_logging_extension_processor_1.EpsilonLoggingExtensionProcessor()]);
+        const pre = ratchet_common_1.Logger.getOptions();
+        ratchet_common_1.Logger.changeDefaultOptions(output, true);
+        const post = ratchet_common_1.Logger.getOptions();
+        EpsilonGlobalHandler.LOGGER_CONFIGURED = true;
+        ratchet_common_1.Logger.info('EpsilonLoggingConfiguration: Updated');
+        ratchet_common_1.Logger.dumpOptionsIntoLog();
+    }
+    get epsilon() {
+        return this._epsilon;
+    }
+    async processSingleBackgroundByParts(type, data, overrideTraceId, overrideTraceDepth) {
+        return this.processSingleBackgroundEntry(this._epsilon.backgroundManager.createEntry(type, data), overrideTraceId, overrideTraceDepth);
+    }
+    async processSingleBackgroundEntry(e, overrideTraceId, overrideTraceDepth) {
+        let rval = false;
+        if (e === null || e === void 0 ? void 0 : e.type) {
+            const internal = this._epsilon.backgroundManager.wrapEntryForInternal(e, overrideTraceId, overrideTraceDepth);
+            rval = await this._epsilon.backgroundHandler.processSingleBackgroundEntry(internal);
+            ratchet_common_1.Logger.info('Direct processed request %j to %s', e, rval);
+        }
+        else {
+            ratchet_common_1.Logger.error('Cannot process null/unnamed background entry');
+        }
+        return rval;
+    }
+    async lambdaHandler(event, context) {
+        let rval = null;
+        try {
+            if (this.epsilon.config.disableLastResortTimeout || !context || !context.getRemainingTimeInMillis()) {
+                rval = await this.innerLambdaHandler(event, context);
+            }
+            else {
+                const tmp = await ratchet_common_3.PromiseRatchet.timeout(this.innerLambdaHandler(event, context), 'EpsilonLastResortTimeout', context.getRemainingTimeInMillis() - 1000);
+                if (ratchet_common_2.TimeoutToken.isTimeoutToken(tmp)) {
+                    tmp.writeToLog();
+                    rval = response_util_1.ResponseUtil.errorResponse(epsilon_http_error_1.EpsilonHttpError.wrapError(new request_timeout_error_1.RequestTimeoutError('Timed out')));
+                }
+                else {
+                    rval = tmp;
+                }
+            }
+        }
+        finally {
+            context_util_1.ContextUtil.clearContext();
+        }
+        return rval;
+    }
+    async innerLambdaHandler(event, context) {
+        var _a, _b, _c, _d, _e, _f;
+        context_util_1.ContextUtil.initContext(this._epsilon, event, context, 'TBD');
+        let rval = null;
+        let errorHandler = EpsilonGlobalHandler.defaultProcessUncaughtError;
+        try {
+            if (!this._epsilon) {
+                ratchet_common_1.Logger.error('Config not found, abandoning');
+                return false;
+            }
+            const logLevel = event_util_1.EventUtil.calcLogLevelViaEventOrEnvParam(ratchet_common_1.Logger.getLevel(), event, this._epsilon.config.loggerConfig);
+            ratchet_common_1.Logger.setLevel(logLevel);
+            if (this._epsilon.config.loggerConfig &&
+                this._epsilon.config.loggerConfig.queryParamTracePrefixName &&
+                event.queryStringParameters &&
+                event.queryStringParameters[this._epsilon.config.loggerConfig.queryParamTracePrefixName]) {
+                ratchet_common_1.Logger.info('Setting trace prefix to %s', event.queryStringParameters[this._epsilon.config.loggerConfig.queryParamTracePrefixName]);
+                ratchet_common_1.Logger.updateTracePrefix(event.queryStringParameters[this._epsilon.config.loggerConfig.queryParamTracePrefixName]);
+            }
+            let found = false;
+            for (let i = 0; i < this.handlers.length && !found; i++) {
+                const handler = this.handlers[i];
+                if (handler.handlesEvent(event)) {
+                    found = true;
+                    errorHandler = handler.processUncaughtError || errorHandler;
+                    const label = handler.extractLabel(event, context);
+                    context_util_1.ContextUtil.setProcessLabel(label);
+                    ratchet_common_1.Logger.logByLevel(((_c = (_b = (_a = this._epsilon) === null || _a === void 0 ? void 0 : _a.config) === null || _b === void 0 ? void 0 : _b.loggerConfig) === null || _c === void 0 ? void 0 : _c.epsilonStartEndMessageLogLevel) || ratchet_common_4.LoggerLevelName.info, 'EvtStart: %s', label);
+                    rval = await handler.processEvent(event, context);
+                    ratchet_common_1.Logger.logByLevel(((_f = (_e = (_d = this._epsilon) === null || _d === void 0 ? void 0 : _d.config) === null || _e === void 0 ? void 0 : _e.loggerConfig) === null || _f === void 0 ? void 0 : _f.epsilonStartEndMessageLogLevel) || ratchet_common_4.LoggerLevelName.info, 'EvtEnd: %s', label);
+                    ratchet_common_1.Logger.silly('EvtEnd:Value: %s Value: %j', label, rval);
+                }
+            }
+        }
+        catch (err) {
+            rval = await errorHandler(event, context, err);
+        }
+        return rval;
+    }
+    static async defaultProcessUncaughtError(event, context, err) {
+        ratchet_common_1.Logger.error('Error slipped out to outer edge (Default).  Logging and returning log : %s', err, err);
+        const rval = {
+            statusCode: 500,
+            body: JSON.stringify({ error: ratchet_common_4.ErrorRatchet.safeStringifyErr(err) }),
+            isBase64Encoded: false,
+        };
+        return rval;
+    }
+}
+exports.EpsilonGlobalHandler = EpsilonGlobalHandler;
+EpsilonGlobalHandler.LOGGER_CONFIGURED = false;

package/dist/cjs/epsilon-instance.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/epsilon-logging-extension-processor.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EpsilonLoggingExtensionProcessor = void 0;
+const context_util_1 = require("./util/context-util");
+class EpsilonLoggingExtensionProcessor {
+    process(msg) {
+        msg.params = Object.assign({}, msg.params || {}, context_util_1.ContextUtil.fetchLogVariables());
+        msg.params['tester'] = Date.now();
+        msg.params['awsRequestId'] = context_util_1.ContextUtil.currentRequestId();
+        msg.params['traceId'] = context_util_1.ContextUtil.currentTraceId();
+        msg.params['traceDepth'] = context_util_1.ContextUtil.currentTraceDepth();
+        msg.params['procLabel'] = context_util_1.ContextUtil.currentProcessLabel();
+        return msg;
+    }
+    label() {
+        return 'EpsilonLoggingExtensionProcessor';
+    }
+}
+exports.EpsilonLoggingExtensionProcessor = EpsilonLoggingExtensionProcessor;

package/dist/cjs/http/auth/api-gateway-adapter-authentication-handler.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiGatewayAdapterAuthenticationHandler = void 0;
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+const local_web_token_manipulator_1 = require("./local-web-token-manipulator");
+const epsilon_constants_1 = require("../../epsilon-constants");
+class ApiGatewayAdapterAuthenticationHandler {
+    constructor(issuer, encryptionKeys) {
+        this.webTokenManipulator = new local_web_token_manipulator_1.LocalWebTokenManipulator([encryptionKeys], issuer);
+    }
+    lambdaHandler(event, context, callback) {
+        ratchet_common_1.Logger.info('Got event : %j', event);
+        const srcString = ApiGatewayAdapterAuthenticationHandler.extractTokenStringFromAuthorizerEvent(event);
+        if (srcString) {
+            const methodArn = event.methodArn;
+            this.webTokenManipulator
+                .parseAndValidateJWTStringAsync(srcString)
+                .then((parsed) => {
+                if (parsed) {
+                    callback(null, this.createPolicy(methodArn, srcString, parsed));
+                }
+                else {
+                    ratchet_common_1.Logger.info('Invalid bearer token');
+                    callback(new Error('Unauthorized'));
+                }
+            })
+                .catch((err) => {
+                ratchet_common_1.Logger.error('Exception parsing token : %s', err);
+                callback(new Error('Unauthorized'));
+            });
+        }
+        else {
+            ratchet_common_1.Logger.info('Token not supplied');
+            callback(new Error('Unauthorized'));
+        }
+    }
+    createPolicy(methodArn, srcString, userOb) {
+        const tmp = methodArn.split(':');
+        const apiGatewayArnTmp = tmp[5].split('/');
+        const awsAccountId = tmp[4];
+        const region = tmp[3];
+        const stage = apiGatewayArnTmp[1];
+        const restApiId = apiGatewayArnTmp[0];
+        const response = {
+            principalId: 'user',
+            policyDocument: {
+                Version: '2012-10-17',
+                Statement: [
+                    {
+                        Action: 'execute-api:Invoke',
+                        Effect: 'Allow',
+                        Resource: ['arn:aws:execute-api:' + region + ':' + awsAccountId + ':' + restApiId + '/' + stage + '/*/*'],
+                    },
+                ],
+            },
+            context: {
+                userJSON: JSON.stringify(userOb),
+                srcData: srcString,
+            },
+        };
+        return response;
+    }
+    static extractTokenStringFromAuthorizerEvent(event) {
+        ratchet_common_1.Logger.silly('Extracting token from event : %j', event);
+        let rval = null;
+        if (event && event.authorizationToken) {
+            const token = event.authorizationToken;
+            if (token && token.startsWith(epsilon_constants_1.EpsilonConstants.AUTH_HEADER_PREFIX)) {
+                rval = token.substring(epsilon_constants_1.EpsilonConstants.AUTH_HEADER_PREFIX.length);
+            }
+        }
+        return rval;
+    }
+}
+exports.ApiGatewayAdapterAuthenticationHandler = ApiGatewayAdapterAuthenticationHandler;

package/dist/cjs/http/auth/auth0-web-token-manipulator.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Auth0WebTokenManipulator = void 0;
+const tslib_1 = require("tslib");
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+const jsonwebtoken_1 = tslib_1.__importDefault(require("jsonwebtoken"));
+const jwks_rsa_1 = tslib_1.__importDefault(require("jwks-rsa"));
+class Auth0WebTokenManipulator {
+    constructor(clientId, jwksUri, issuer) {
+        this.clientId = clientId;
+        this.jwksUri = jwksUri;
+        this.issuer = issuer;
+    }
+    async extractTokenFromAuthorizationHeader(authHeader) {
+        let tokenString = ratchet_common_1.StringRatchet.trimToEmpty(authHeader);
+        if (tokenString.toLowerCase().startsWith('bearer ')) {
+            tokenString = tokenString.substring(7);
+        }
+        const validated = tokenString ? await this.parseAndValidateAuth0Token(tokenString, false) : null;
+        return validated;
+    }
+    async parseAndValidateAuth0Token(auth0Token, allowExpired = false) {
+        var _a;
+        ratchet_common_1.Logger.debug('Validating Auth0 token : %s', ratchet_common_1.StringRatchet.obscure(auth0Token, 4));
+        const fullToken = jsonwebtoken_1.default.decode(auth0Token, { complete: true });
+        const kid = (_a = fullToken === null || fullToken === void 0 ? void 0 : fullToken.header) === null || _a === void 0 ? void 0 : _a.kid;
+        const nowEpochSeconds = Math.floor(new Date().getTime() / 1000);
+        const pubKey = await this.fetchSigningKey(kid);
+        const validated = jsonwebtoken_1.default.verify(auth0Token, pubKey, {
+            audience: this.clientId,
+            issuer: this.issuer,
+            ignoreExpiration: allowExpired,
+            clockTimestamp: nowEpochSeconds,
+        });
+        return validated;
+    }
+    async fetchSigningKey(kid) {
+        const jClient = await this.fetchJwksClient();
+        return new Promise((res, rej) => {
+            jClient.getSigningKey(kid, (err, key) => {
+                if (err) {
+                    rej(err);
+                }
+                else {
+                    res(key.publicKey || key.rsaPublicKey);
+                }
+            });
+        });
+    }
+    async fetchJwksClient() {
+        if (!this.jwksClient) {
+            this.jwksClient = (0, jwks_rsa_1.default)({
+                cache: true,
+                cacheMaxEntries: 5,
+                cacheMaxAge: 1000 * 60 * 60 * 10,
+                jwksUri: this.jwksUri,
+            });
+        }
+        return this.jwksClient;
+    }
+}
+exports.Auth0WebTokenManipulator = Auth0WebTokenManipulator;

package/dist/cjs/http/auth/basic-auth-token.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/http/auth/google-web-token-manipulator.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleWebTokenManipulator = void 0;
+const tslib_1 = require("tslib");
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+const ratchet_common_2 = require("@bitblit/ratchet-common");
+const jsonwebtoken_1 = tslib_1.__importDefault(require("jsonwebtoken"));
+const jwks_rsa_1 = tslib_1.__importDefault(require("jwks-rsa"));
+const cross_fetch_1 = tslib_1.__importDefault(require("cross-fetch"));
+class GoogleWebTokenManipulator {
+    constructor(clientId) {
+        this.clientId = clientId;
+    }
+    async extractTokenFromAuthorizationHeader(authHeader) {
+        let tokenString = ratchet_common_2.StringRatchet.trimToEmpty(authHeader);
+        if (tokenString.toLowerCase().startsWith('bearer ')) {
+            tokenString = tokenString.substring(7);
+        }
+        const validated = !!tokenString ? await this.parseAndValidateGoogleToken(tokenString, false) : null;
+        return validated;
+    }
+    async parseAndValidateGoogleToken(googleToken, allowExpired = false) {
+        ratchet_common_1.Logger.debug('Auth : %s', ratchet_common_2.StringRatchet.obscure(googleToken, 4));
+        const fullToken = jsonwebtoken_1.default.decode(googleToken, { complete: true });
+        const kid = fullToken.header.kid;
+        const nowEpochSeconds = Math.floor(new Date().getTime() / 1000);
+        const pubKey = await this.fetchSigningKey(kid);
+        const validated = jsonwebtoken_1.default.verify(googleToken, pubKey, {
+            audience: this.clientId,
+            issuer: ['https://accounts.google.com', 'accounts.google.com'],
+            ignoreExpiration: allowExpired,
+            clockTimestamp: nowEpochSeconds,
+        });
+        return validated;
+    }
+    async fetchSigningKey(kid) {
+        const jClient = await this.fetchJwksClient();
+        return new Promise((res, rej) => {
+            jClient.getSigningKey(kid, (err, key) => {
+                if (err) {
+                    rej(err);
+                }
+                else {
+                    res(key.publicKey || key.rsaPublicKey);
+                }
+            });
+        });
+    }
+    async fetchJwksClient() {
+        if (!this.jwksClient) {
+            const discDoc = await this.fetchGoogleDiscoveryDocument();
+            const client = (0, jwks_rsa_1.default)({
+                cache: true,
+                cacheMaxEntries: 5,
+                cacheMaxAge: 1000 * 60 * 60 * 10,
+                jwksUri: discDoc.jwks_uri,
+            });
+            this.jwksClient = client;
+        }
+        return this.jwksClient;
+    }
+    async fetchGoogleDiscoveryDocument() {
+        if (!this.cacheGoogleDiscoveryDocument) {
+            const resp = await (0, cross_fetch_1.default)(GoogleWebTokenManipulator.GOOGLE_DISCOVERY_DOCUMENT);
+            const doc = await resp.json();
+            this.cacheGoogleDiscoveryDocument = doc;
+        }
+        return this.cacheGoogleDiscoveryDocument;
+    }
+}
+exports.GoogleWebTokenManipulator = GoogleWebTokenManipulator;
+GoogleWebTokenManipulator.GOOGLE_DISCOVERY_DOCUMENT = 'https://accounts.google.com/.well-known/openid-configuration';

package/dist/cjs/http/auth/jwt-ratchet-local-web-token-manipulator.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtRatchetLocalWebTokenManipulator = void 0;
+const ratchet_common_1 = require("@bitblit/ratchet-common");
+const ratchet_common_2 = require("@bitblit/ratchet-common");
+const ratchet_common_3 = require("@bitblit/ratchet-common");
+class JwtRatchetLocalWebTokenManipulator {
+    constructor(_jwtRatchet, _issuer) {
+        this._jwtRatchet = _jwtRatchet;
+        this._issuer = _issuer;
+        ratchet_common_2.RequireRatchet.notNullOrUndefined(_jwtRatchet, '_jwtRatchet');
+        ratchet_common_2.RequireRatchet.notNullOrUndefined(ratchet_common_1.StringRatchet.trimToNull(_issuer), '_issuer');
+    }
+    get jwtRatchet() {
+        return this._jwtRatchet;
+    }
+    get issuer() {
+        return this._issuer;
+    }
+    async extractTokenFromAuthorizationHeader(header) {
+        let tokenString = ratchet_common_1.StringRatchet.trimToEmpty(header);
+        if (tokenString.toLowerCase().startsWith('bearer ')) {
+            tokenString = tokenString.substring(7);
+        }
+        const validated = !!tokenString ? await this.jwtRatchet.decodeToken(tokenString, ratchet_common_3.ExpiredJwtHandling.THROW_EXCEPTION) : null;
+        return validated;
+    }
+}
+exports.JwtRatchetLocalWebTokenManipulator = JwtRatchetLocalWebTokenManipulator;