@bitblit/ratchet-warden-server 5.1.118 → 5.1.122-alpha

package/lib/server/warden-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-authorizer.js","sourceRoot":"","sources":["../../src/server/warden-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,yDAAyD,CAAC;AAItF,MAAM,OAAO,gBAAgB;IAEP;IAApB,YAAoB,IAA0B;QAA1B,SAAI,GAAJ,IAAI,CAAsB;IAC9C,CAAC;IAGM,kBAAkB,CAAC,OAAsB;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAGM,aAAa,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAC3C,MAAM,IAAI,GAAgB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,GAA8B,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC;IAGM,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,MAAc;QAC/D,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAC,MAAc,EAAE,MAAc;QAC9E,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/F,CAAC;IAEM,KAAK,CAAC,+BAA+B,CAAC,MAAc,EAAE,OAAiB;QAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC;IAEM,KAAK,CAAC,+BAA+B,CAAC,MAAc,EAAE,MAAc,EAAE,OAAiB;QAC5F,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/F,CAAC;IAGM,KAAK,CAAC,yBAAyB,CAAC,MAAc,EAAE,OAAiB;QACtE,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;IAEM,KAAK,CAAC,yBAAyB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAiB;QACtF,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9F,CAAC;IAGM,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,OAAiB,EAAE,cAAuB;QAC5F,OAAO,WAAW,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACvG,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAiB,EAAE,cAAuB;QAC5G,OAAO,WAAW,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/G,CAAC;IAGM,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,MAAc;QAC9D,OAAO,WAAW,CAAC,gBAAgB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAC,MAAM,CAAC,CAAC;IACnF,CAAC;IAEM,KAAK,CAAC,wBAAwB,CAAC,MAAc,EAAE,MAAc;QAClE,OAAO,WAAW,CAAC,oBAAoB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAC,MAAM,CAAC,CAAC;IACvF,CAAC;IAEM,KAAK,CAAC,wBAAwB,CAAC,MAAc;QAClD,OAAO,WAAW,CAAC,oBAAoB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,CAAC;IAIM,iBAAiB,CAAC,IAA+B,EAAE,MAAc;QACtE,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAEM,iBAAiB,CAAC,IAA+B,EAAC,MAAc,EAAE,MAAc;QACrF,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAEM,2BAA2B,CAAC,IAA+B,EAAE,OAAiB;QACnF,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAEM,2BAA2B,CAAC,IAA+B,EAAE,MAAc,EAAE,OAAiB;QACnG,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IAGM,qBAAqB,CAAC,IAA+B,EAAE,OAAiB;QAC7E,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IAEM,qBAAqB,CAAC,IAA+B,EAAE,MAAc,EAAE,OAAiB;QAC7F,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAGM,kBAAkB,CAAC,IAA+B,EAAE,OAAiB,EAAE,cAAuB;QACnG,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACvE,CAAC;IAEM,kBAAkB,CAAC,IAA+B,EAAE,MAAc,EAAE,OAAiB,EAAE,cAAuB;QACnH,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/E,CAAC;IAEM,6BAA6B,CAAC,GAAwB;QAC3D,OAAO,WAAW,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAGM,gBAAgB,CAAC,IAA+B,EAAE,MAAc;QACrE,OAAO,WAAW,CAAC,gBAAgB,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAEM,oBAAoB,CAAC,IAA+B,EAAE,MAAc;QACzE,OAAO,WAAW,CAAC,oBAAoB,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAEM,oBAAoB,CAAC,IAA+B;QACzD,OAAO,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;CAEF"}

package/lib/server/warden-entry-builder.d.ts

@@ -0,0 +1,13 @@
+import { WardenEntry } from "@bitblit/ratchet-warden-common/common/model/warden-entry";
+import { WardenContact } from "@bitblit/ratchet-warden-common/common/model/warden-contact";
+import { WardenThirdPartyAuthentication } from "@bitblit/ratchet-warden-common/common/model/warden-third-party-authentication";
+export declare class WardenEntryBuilder {
+    private readonly _entry;
+    constructor(label?: string);
+    withTags(tags: string[]): WardenEntryBuilder;
+    withThirdPartyAuthentication(thirdPartyAuthenticators: [WardenThirdPartyAuthentication]): WardenEntryBuilder;
+    withLabel(label: string): WardenEntryBuilder;
+    withLabelFromContact(contact: WardenContact): WardenEntryBuilder;
+    withContacts(contacts: [WardenContact]): WardenEntryBuilder;
+    get entry(): WardenEntry;
+}

package/lib/server/warden-entry-builder.js

@@ -0,0 +1,42 @@
+import { StringRatchet } from "@bitblit/ratchet-common/lang/string-ratchet";
+export class WardenEntryBuilder {
+    _entry;
+    constructor(label) {
+        const guid = StringRatchet.createShortUid();
+        const now = Date.now();
+        this._entry = {
+            userId: guid,
+            userLabel: label || 'User ' + guid,
+            contactMethods: [],
+            tags: [],
+            webAuthnAuthenticators: [],
+            thirdPartyAuthenticators: [],
+            createdEpochMS: now,
+            updatedEpochMS: now,
+        };
+    }
+    withTags(tags) {
+        this._entry.tags = tags ?? [];
+        return this;
+    }
+    withThirdPartyAuthentication(thirdPartyAuthenticators) {
+        this._entry.thirdPartyAuthenticators = thirdPartyAuthenticators ?? [];
+        return this;
+    }
+    withLabel(label) {
+        this._entry.userLabel = label;
+        return this;
+    }
+    withLabelFromContact(contact) {
+        this._entry.userLabel = contact.value;
+        return this;
+    }
+    withContacts(contacts) {
+        this._entry.contactMethods = contacts ?? [];
+        return this;
+    }
+    get entry() {
+        return this._entry;
+    }
+}
+//# sourceMappingURL=warden-entry-builder.js.map

package/lib/server/warden-entry-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-entry-builder.js","sourceRoot":"","sources":["../../src/server/warden-entry-builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAM5E,MAAM,OAAO,kBAAkB;IAEZ,MAAM,CAAc;IAErC,YAAY,KAAc;QACxB,MAAM,IAAI,GAAW,aAAa,CAAC,cAAc,EAAE,CAAC;QACpD,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK,IAAI,OAAO,GAAC,IAAI;YAChC,cAAc,EAAE,EAAE;YAClB,IAAI,EAAE,EAAE;YACR,sBAAsB,EAAE,EAAE;YAC1B,wBAAwB,EAAE,EAAE;YAC5B,cAAc,EAAE,GAAG;YACnB,cAAc,EAAE,GAAG;SACpB,CAAC;IACJ,CAAC;IAEM,QAAQ,CAAC,IAAc;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,4BAA4B,CAAC,wBAA0D;QAC5F,IAAI,CAAC,MAAM,CAAC,wBAAwB,GAAG,wBAAwB,IAAI,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,SAAS,CAAC,KAAa;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,oBAAoB,CAAC,OAAsB;QAChD,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,YAAY,CAAC,QAAyB;QAC3C,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,QAAQ,IAAI,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CAEF"}

package/lib/server/warden-service-options.d.ts

@@ -4,6 +4,7 @@ import { WardenUserDecorationProvider } from './provider/warden-user-decoration-
 import { WardenEventProcessingProvider } from './provider/warden-event-processing-provider.js';
 import { WardenSingleUseCodeProvider } from './provider/warden-single-use-code-provider.js';
 import { WardenSendMagicLinkCommandValidator } from './provider/warden-send-magic-link-command-validator.js';
+import { WardenThirdPartyAuthenticationProvider } from "./provider/warden-third-party-authentication-provider.js";
 export interface WardenServiceOptions {
     relyingPartyName: string;
     allowedOrigins: string[];
@@ -13,4 +14,5 @@ export interface WardenServiceOptions {
     userDecorationProvider?: WardenUserDecorationProvider<any>;
     eventProcessor?: WardenEventProcessingProvider;
     sendMagicLinkCommandValidator?: WardenSendMagicLinkCommandValidator;
+    thirdPartyAuthenticationProviders?: WardenThirdPartyAuthenticationProvider[];
 }

package/lib/server/warden-service.d.ts

@@ -1,34 +1,42 @@
-import { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/server';
-import { WardenServiceOptions } from './warden-service-options.js';
-import { WardenContact } from '@bitblit/ratchet-warden-common/common/model/warden-contact';
-import { WardenCustomTemplateDescriptor } from '@bitblit/ratchet-warden-common/common/command/warden-custom-template-descriptor';
-import { WardenEntry } from '@bitblit/ratchet-warden-common/common/model/warden-entry';
-import { WardenLoginRequest } from '@bitblit/ratchet-warden-common/common/model/warden-login-request';
-import { WardenCommand } from '@bitblit/ratchet-warden-common/common/command/warden-command';
-import { WardenCommandResponse } from '@bitblit/ratchet-warden-common/common/command/warden-command-response';
-import { WardenStoreRegistrationResponse } from '@bitblit/ratchet-warden-common/common/model/warden-store-registration-response';
-import { WardenSingleUseCodeProvider } from './provider/warden-single-use-code-provider.js';
+import { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from "@simplewebauthn/server";
+import { WardenServiceOptions } from "./warden-service-options.js";
+import { WardenContact } from "@bitblit/ratchet-warden-common/common/model/warden-contact";
+import { WardenCustomTemplateDescriptor } from "@bitblit/ratchet-warden-common/common/command/warden-custom-template-descriptor";
+import { WardenEntry } from "@bitblit/ratchet-warden-common/common/model/warden-entry";
+import { WardenLoginRequest } from "@bitblit/ratchet-warden-common/common/model/warden-login-request";
+import { WardenCommand } from "@bitblit/ratchet-warden-common/common/command/warden-command";
+import { WardenCommandResponse } from "@bitblit/ratchet-warden-common/common/command/warden-command-response";
+import { WardenStoreRegistrationResponse } from "@bitblit/ratchet-warden-common/common/model/warden-store-registration-response";
+import { WardenSingleUseCodeProvider } from "./provider/warden-single-use-code-provider.js";
+import { WardenThirdPartyAuthentication } from "@bitblit/ratchet-warden-common/common/model/warden-third-party-authentication";
+import { WardenAuthorizer } from "./warden-authorizer.ts";
 export declare class WardenService {
     private inOptions;
     private opts;
+    private cacheAuthorizer;
     constructor(inOptions: WardenServiceOptions);
+    get authorizer(): WardenAuthorizer;
     get options(): WardenServiceOptions;
     findEntryByContact(contact: WardenContact): Promise<WardenEntry>;
     findEntryById(userId: string): Promise<WardenEntry>;
     processCommandStringToString(cmdString: string, origin: string, loggedInUserId: string): Promise<string>;
     processCommandToResponse(cmd: WardenCommand, origin: string, loggedInUserId: string): Promise<WardenCommandResponse>;
+    exportWebAuthnRegistrationEntry(origin: string, userId: string): Promise<string>;
+    importWebAuthnRegistrationEntry(token: string, userId: string): Promise<boolean>;
     urlIsOnAllowedOrigin(url: string): boolean;
     singleUseCodeProvider(contact: WardenContact, requireMagicLinkSupport: boolean, returnNullIfNoProviders?: boolean): WardenSingleUseCodeProvider;
     sendMagicLink(contact: WardenContact, overrideDestinationContact: WardenContact, relyingPartyName: string, landingUrl: string, metaIn?: Record<string, string>, ttlSeconds?: number, customTemplate?: WardenCustomTemplateDescriptor): Promise<boolean>;
-    createAccount(contact: WardenContact, sendCode?: boolean, label?: string, tags?: string[]): Promise<string>;
+    createAccountByThirdParty(thirdParty: WardenThirdPartyAuthentication, origin: string, inLabel?: string): Promise<WardenEntry>;
+    createAccount(contact: WardenContact, origin: string, sendCode?: boolean, label?: string, tags?: string[]): Promise<WardenEntry>;
+    saveNewUser(newUser: WardenEntry): Promise<WardenEntry>;
     addContactMethodToUser(userId: string, contact: WardenContact): Promise<boolean>;
     removeContactMethodFromUser(userId: string, contact: WardenContact): Promise<WardenEntry>;
     generateWebAuthnRegistrationChallengeForLoggedInUser(userId: string, origin: string): Promise<PublicKeyCredentialCreationOptionsJSON>;
     storeAuthnRegistration(userId: string, origin: string, applicationName: string, deviceLabel: string, data: RegistrationResponseJSON): Promise<WardenStoreRegistrationResponse>;
     generateWebAuthnAuthenticationChallengeForUserId(userId: string, origin: string): Promise<PublicKeyCredentialRequestOptionsJSON>;
     generateWebAuthnAuthenticationChallenge(user: WardenEntry, origin: string): Promise<PublicKeyCredentialRequestOptionsJSON>;
-    sendExpiringValidationToken(request: WardenContact): Promise<boolean>;
-    processLogin(request: WardenLoginRequest, origin: string): Promise<boolean>;
+    sendExpiringValidationToken(request: WardenContact, origin: string): Promise<boolean>;
+    processLogin(request: WardenLoginRequest, origin: string): Promise<WardenEntry | null>;
     loginWithWebAuthnRequest(user: WardenEntry, origin: string, data: AuthenticationResponseJSON): Promise<boolean>;
     removeSingleWebAuthnRegistration(userId: string, key: string): Promise<WardenEntry>;
     removeUser(userId: string): Promise<boolean>;